DE102017114786A1 - security system - Google Patents

Abstract

The invention relates to a safety system (1), in particular for escape route protection, with at least one triggering element (10), in particular an emergency button (10), wherein the triggering element (10) can be actuated for unlocking at least one locking mechanism (205) of a door latch (200), with a central escape route control (300), wherein the central escape route control (300) comprises a central emergency button (302), wherein the central emergency button (302) for unlocking the at least one locking mechanism (205) is actuated. According to the invention, the central escape route control (300) comprises at least one manually operable element (322, 332) for delaying and / or preventing an activation of the locking mechanism (205) for unlocking as a result of an actuation of the triggering element (10).

Description

The invention relates to a security system, in particular for escape route security, with at least one triggering element, in particular an emergency button, wherein the triggering element for unlocking at least one locking mechanism of a door lock can be actuated. The security system includes a central escape route control, with the central escape route control comprising a central emergency button. The central emergency button can be actuated to unlock the at least one locking mechanism, according to the preamble of independent claim 1.

Security systems for escape route security are known. The safety systems include at least one emergency button and a door lock with a locking mechanism. If the actuating element of the emergency button is actuated, the door lock is unlocked and the escape route is released. Furthermore, it is known to provide a central emergency button, by the from a remote location, z. B. from a guard room, in case of danger, the door lock can be unlocked. It is unclear here how other functionalities can be integrated into the central escape route control.

It is the object of the invention to specify a security system which provides, in particular, further functionalities in a central escape route control particularly in a simple manner and / or in a particularly user-friendly manner.

This object is achieved by a security system according to independent claim 1. Advantageous developments of the safety system are given in the dependent device claims, the description and in the figures.

The previously derived and indicated object is achieved on the basis of the safety system described above in that the central escape route control comprises at least one manually operable element for delaying and / or preventing activation of the locking mechanism for unlocking as a result of actuation of the triggering element.

The central escape route control is intended to be located remotely from the trigger element and / or the door latch. In particular, the central escape route backup is intended to be arranged in a guard room. In the guard room, a watch device, for. B, a monitor or a personal computer for monitoring. The fact that a further manually operable element is integrated in the central escape route control, the functionality of the central escape route control can be increased.

In the following, a distinction is made between a user and an operator. A user can be any person using the security system. A user can, for. B. be a guest who wants to escape through the door secured by the security system. An operator serves to operate the security system. The operator has access to the security system security device and / or can authenticate to the security system, particularly to service the security system.

If the triggering element has been actuated on site, the manually operable element can in particular delay activation of the locking mechanism. In this way, an operator has time to check whether there really is a danger or whether a user has actuated the trigger to unauthorized manner in or out of the space that locks the door lock.

Additionally or alternatively, a manually operable element may be provided in the central escape route control, which prevents activation of the locking mechanism for unlocking as a result of actuation of the triggering element. In particular, the manually operable element prevents the activation of the locking mechanism in that the triggering element can be converted by the manually operable element from an activated state into a deactivatable state. In the deactivated state is omitted as a result of actuation of the trigger element, a control of a locking mechanism for unlocking. In the activated state of the trigger element, however, takes place as a result of actuation of the trigger element, a control of the locking mechanism for unlocking, although in particular a delay in the control of the locking mechanism is possible.

The security system may include the locking mechanism.

The locking mechanism may, for. B. electromechanical or purely electromagnetic. The locking mechanism includes z. B. at least one coil. A control of the locking mechanism for locking or unlocking can be realized in particular in a switching off or on an electrical power supply. The electrical power supply can be used to supply the coil with electric current.

An electromagnetic locking mechanism is exemplary in the DE100 50 111 C1 described. In the unlocked state z. B. no magnetic forces on the door. In the locked state z. B. magnetic forces on a door.

An electromechanical locking mechanism has a mechanical connection to the door in the locked state. In the unlocked state, the mechanical connection can be canceled or canceled.

Thus, the electromechanical locking mechanism z. B. a locking element, d. H. a latch or a door latch, which is in the unlocked state of the door latch in a retracted position. In the retracted position, the locking element is disengaged from the door. In the locked state, the locking element is engaged with the door. In a further alternative of an electromechanical locking mechanism, the locking mechanism is constructed in the manner of a door opener. Ie. the locking mechanism comprises a latch element. In the locked state of the door lock is a door latch of the door engaged with the locking mechanism. In the unlocked state, the latch element releases the door latch so that the door latch, in particular by pressure on the door, can disengage from the locking mechanism.

Switching off the electrical power supply preferably leads to an unlocked state of the door lock. Thus, the activation of the locking mechanism for unlocking the door lock is realized by switching off the electrical power supply. Preferably, switching on the electrical power supply leads to a locked state of the door lock. Thus, the driving of the locking mechanism for locking is realized by turning on the electric power supply.

The security system may alternatively be configured without the locking mechanism. In this case, the security system merely actuates the locking mechanism. For example, the security system turns on or off the electrical power to the locking mechanism, or causes the electrical power to be turned on or off.

A "locking or unlocking control" is also present when the security system receives feedback about the state of the locking mechanism. A "lock or unlock control" is also present when, as detected by the feedback, the lock mechanism does not conform to the desired condition and therefore an alarm is issued and / or a retry attempt is made to reach the desired condition ,

The security system may include a door lock control. If a door lock control is provided, the door lock control preferably controls the lock mechanism. For this purpose, the door lock control can switch the electrical power supply for the locking mechanism on and off.

The security system may include the door lock control but not the lock mechanism. The Türverrieglungssteuerung is formed in this case as a door lock adapter. The door locking adapter serves to use the security system according to the invention already mounted locking mechanisms.

The door lock comprises the locking mechanism and, if present, the door lock control. Particularly preferably, the security system comprises the door lock.

The security system is used in particular for escape route security. The security system thus serves to release the escape route. Ie. the actuation of the actuator leads to an unlocking without an authentication of the user. The unlocking can be immediate or delayed.

The trigger element may comprise a manually operable actuator for actuation. By actuating the actuating element, at least one actuating signal can be generated. As a result of the generation of the actuation signal, the locking mechanism can be actuated for unlocking.

The triggering element is preferably designed as a emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the triggering element may be formed as a panic bar assembly. The actuator is formed in this case as a panic bar. The triggering element can be designed as a fitting assembly. In this case, the actuator z. B. formed as a door handle.

Preferably, the door lock control and the trigger element are connected to a first bus system. A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address. The door lock control and that Triggering element are connected to each other via the first bus system.

The trigger element can directly control the locking mechanism for unlocking. Alternatively and particularly preferably, the triggering element causes a triggering of the locking mechanism for unlocking. In particular, when initiating a control, the sending of a message, e.g. B. via the first bus system understood, containing an information and / or a command that causes the immediate or indirect recipient of the message to make the drive. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. So z. B. the trigger element send a message via the first bus system to the door lock control, whereupon the door lock control drives the locking mechanism for unlocking. In particular, the triggering element can initiate the unlocking of the locking mechanism in a time-delayed manner.

The manually operable element, which delays activation of the locking mechanism as a result of the actuation of the triggering element, can be designed as a delay element. As a result of an actuation of the triggering element, the activation of the locking mechanism for unlocking can be delayed by a first delay time duration. An operation of the delay element within the first delay period causes an extension of the delay of a drive of the locking mechanism.

An operation of the delay element may comprise an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as fingerprint or iris. A manual operation can therefore be done by a physical contact or contactless. The delay element may be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

Preferably, the central escape route control comprises a termination element for terminating the delay. If the termination element is operated, the delay is terminated and the locking mechanism is activated directly for unlocking. To operate the termination element, it may not be necessary to authenticate. Thus, the termination element z. B. be designed as a button.

The manually operable element, which prevents actuation of the locking mechanism as a result of the actuation of the triggering element, can be configured as a first operating element. The first control element is used to deactivate the trigger element. The triggering element can be converted into the deactivated state by an operation of the first operating element, provided that the triggering element is in the activated state.

An operation of the first operating element may include an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as fingerprint or iris. The first control element can be designed, for example, as a keypad, as a key switch, as a fingerprint sensor or as a reader.

The central escape route control may include a second control element. The triggering element can be transferred to the activated state by an operator of the second operating element, provided that the triggering element is in the deactivated state. To operate the second control, it may not be necessary for authentication to occur. Thus, the second control z. B. be designed as a button.

The central escape route protection also includes the central emergency button. If the central emergency button is pressed, the locking mechanism is activated for unlocking. The process that is actuated as a result of the operation of the central emergency button, the locking mechanism for unlocking, one-fault-safe and is thus suitable for hazardous situations.

The central escape route controller may include an identification device. The identification device may serve to cause activation of the locking mechanism for locking after the operation of the central emergency button. If the central emergency button has been actuated, it is, in particular by the door lock control, electronically prevented until the presence of a Aufhebebonditionung that the locking mechanism of the door lock can be controlled to lock. The cancellation condition can be achieved by an operation of the identification device.

The operation of the identification device may be an authentication, in particular an input of a code, a wireless or wired transmission of a code, a recognition of a key by rotation, a recognition of personal characteristics, such as Fingerprint or iris, include. For example, the central escape route controller may include a keypad, a key switch, a fingerprint sensor, or a reader as an identification device.

Under an authentication means is hereinafter a mechanical key, an electro-mechanical key, a mobile code storage device, for. As a code card, a code, a biometric feature or the like understood. The security system according to the invention may comprise the authentication means.

It is conceivable that the suitable authentication means differ from one another at the delay element and at the first operating element. The appropriate authentication means on the delay element and on the identification device may differ from each other. Additionally or alternatively, the suitable authentication means on the first operating element and on the identification device may differ from one another. Particularly preferably, the suitable authentication means differ from one another at the delay element, the first operating element and at the identification device. For example, a different key or code is required in each case. Particularly preferably, the authentication means are designed in the manner of a master key system. Thus, with a first authentication means, authentications may be possible on a first number of elements selected from the delay element, first control element and / or the identification device, while with a second authentication means authentifications may be made on a second number of elements selected from the delay element, first control element and / or the identification device are possible, wherein the second number is less than the first number. The second number can also be one. For example, with a first authentication means both the identification device, the first control element and the delay element can be operated. However, only the delay element and / or the identification device can be operated with a second authentication means, while the second authentication means can not serve the first operating element. So z. B. all operators operate the delay element, but only a few or only one operator may operate the first control element and disable the tripping elements on site. If only two of the elements selected from the delay element, the first control element and the identification device are present in the central escape route control, authentication may be possible with the first authentication means on both elements, while authentication with only one of the two elements is possible with the second authentication means may be possible.

The central escape route control can be modular. The central escape route control may include an emergency module. The emergency module may include the identification device in addition to the central emergency button.

The central escape route controller may include a deactivation module. The deactivation module may comprise the first control element and the second control element.

The central escape route control may include a delay module. The delay module may comprise the delay element and the termination element.

The deactivation module and / or the delay module can be arranged in a common escape route control housing together with the emergency module and in particular fixed. The emergency module may include a first mounting plate that secures the emergency module to the escape route control housing. The deactivation module may include a second mounting plate that secures the deactivation module to the escape route control housing. The deceleration module may include a third mounting plate that secures the deceleration module to the escape route control housing.

In particular, the central emergency push-button and the identification device are mechanically fastened to one another via the first fastening plate. In particular, the first and the second operating element are mechanically fastened to one another via the second fastening plate. In particular, the delay element and the termination element are fastened to one another by means of the third attachment plate.

The emergency module and / or the deactivation module may be securable at various locations in the escape route control housing. Preferably, the arrangement of the modules in the escape route control housing is variable. Thus, the modules can be arranged side by side in different orders. In particular, each module can be arranged on the right, left or in the middle. Thus, it may be that the emergency module is arrangeable both on the left and on the right of the deactivation module in the Fluchttwegsteuerungsgehäuse.

Preferably, it is conceivable that in addition to the central escape route control, a multi-door display device can be arranged in the escape route control housing. The Merhtüranzeigegerät and the central Escape route control can be connected to each other via a third bus system. The third bus system may be configured as a CAN bus or a DCW bus. Thus, the central escape route control, in particular the central emergency button, and the multi-door display device can be connected to the third bus system.

The escape route control housing may include attachment options for variably securing the modules and / or the multi-door display device. The mounting options can be designed as a perforated strip or as a slot.

It is preferably provided that the extension of the delay of the actuation of the locking mechanism by the operation of the delay element takes place only within the first delay time period.

The first and / or the second delay time period may include several seconds. The second delay period may be longer than the first delay period. So z. For example, the first delay period is between 3 and 8 seconds, the second delay period between 30 and 180 seconds.

The central escape route control may comprise lighting means for optically displaying the first delay time period. The visualization of the first delay time period allows the operator to easily recognize whether and how long the operator remains to extend the delay, in particular by operating the delay element.

For example, the illumination means for optically displaying the first delay time period can be controlled in such a way that as the first delay time progresses, more or fewer bulbs light up and / or that as the first delay time progresses, more or fewer bulbs illuminate in a first color. The remaining bulbs can shine in a second color or not at all.

It is conceivable that the actuation of the delay element, the delay is extended from the actuation of the delay element by a second delay period. The central escape route controller may comprise light sources for optically displaying the second delay time period. The lighting means can be controlled in such a way that, as the second delay time progresses, more or fewer bulbs light up and / or that, as the second delay time progresses, more or fewer bulbs illuminate in a first color. The remaining bulbs can shine in a second color or not at all.

Preferably, the same bulbs that optically represent the first delay time period can optically represent the second delay time period. In this case, the representation of the first and the second delay time period may differ from one another. This gives the operator a feedback about which delay period expires. The first and / or second delay time period may be representable such that the visual representation of the time sequence is interrupted by a pattern which symbolizes a time sequence.

In the event that, as the first and / or second delay periods progress, many lamps in a first color diminish, it is conceivable that the lamps are controlled in such a way that at the end of the delay period the last still emitting the first color illuminates the light adjusts or changes to the second color.

In the event that, as the first and / or second delay periods progress, more and more bulbs illuminate in a first color, it is conceivable that the bulbs are activated in such a way that at the end of the delay period, the last bulbs not yet emitting the first color, the light emission the first color begins or switches to a light emission of the first color.

It may be that during the first and / or second delay period, each light source is driven exactly once to start the light emission in the first color or to end the light emission in the first color until the end of the delay time period. In the event that many bulbs are diminishing as the delay time progresses, each light-emitting means can in particular be activated just once to terminate a light emission in the first color until the end of the delay time period. In the event that, as the time delay progresses, an increasing number of light sources in the first color are illuminated, each light source can be driven precisely one time in order to start emitting light in the first color. Thus, the delay period corresponds to a single passage through the bulbs. In the case of a circular arrangement of the luminous means, the delay time corresponds exactly to a circulation of the luminous means. The user thus receives feedback on how far the delay time has progressed. It is conceivable that each light bulb for this purpose is driven at another time. As a result, a respective time segment of the time delay duration is represented by each individual luminous means. The one-time driving during the delay period to start or stop the emission in the first color does not preclude that each light source can be driven multiple times to emit light of the first color, be it that the light source emits flashing light of the first color or that the lamps are driven in quick succession to the short-term light emission interruption. In the second case arises during the delay period at least once, preferably several times, the impression of a downcounter by the lighting means successively briefly off and then turned on again. Thus, the optical representation of the delay time period can be repeatedly interrupted by a pattern symbolizing a time lapse.

As an alternative to lighting of increasing or decreasing many bulbs, the delay time can be displayed by each successively light bulbs in the first color. In particular, one illuminant illuminates in each case in the first color, while the remaining illuminants illuminate in a second color or not at all. Particularly preferably, each luminous means only illuminates during a single time period of the delay period in the first color. Thus, the delay period corresponds to a single passage through the bulbs. In the case of a circular arrangement of the luminous means, the delay time corresponds exactly to a circulation of the luminous means. The user thus receives feedback on how far the delay time has progressed.

Preferably, the lighting means are activated during the first and / or second delay time period in particular at regular time intervals. Thus, the delay time period is displayed in a linear manner.

Preferably, the first and / or second time delay duration is adjustable by an operator. In particular, the operator can set the delay time by a parameterization program. The activation of the lighting means is preferably adapted to the set delay time duration. In particular, time intervals at which the lighting means are controlled are adapted to the set delay time duration. Particularly preferably, the adaptation takes place in such a way that, at the end of the delay time period, the last light source not yet emitting the first light starts emitting light in the first color or the last light emitting the first light sets the light emission in the first color. The adjustment may be made such that during the delay period, each light source is driven exactly once to start or end light emission in the first color for the delay time period. The adaptation can take place in such a way that the activation of the lighting means takes place in particular at regular time intervals.

In particular, the emergency module may include the lighting means. Particularly preferably, the central emergency button comprises lighting means for optically displaying the first and / or second delay time duration.

The lighting means can serve at least for the optical representation of a further state of the security system. For example, the lighting means can serve to visually represent that the cancellation condition can be achieved by operating the identification device.

The lighting means can preferably be controlled individually at least in two groups, particularly preferably individually.

It is preferably provided that the lighting means are designed as multiple color lamps. This means that the bulbs can emit light of different colors. The lighting means can be designed in particular as a multi-color LED. In this case, each lamp has a plurality of individual LEDs. Particularly preferably, the lighting means are designed as RGB LEDs. The different colors are partly generated by the simultaneous light emission of the individual LED of the multi-color LED. In this case, different colors can be generated by different light components of the individual LEDs.

It is conceivable that the lighting means can be controlled in such a way that light can be emitted by the lighting means in at least two, preferably in at least three, more preferably in at least four different colors. For example, the bulbs can emit red, green, yellow and blue light. Due to the different colors, different states of the security system can be displayed particularly well.

The lighting means can be connected to a bus, in particular a ring bus. By means of the bus, in particular of the ring bus, the central escape route control, in particular a digital emergency processing unit of the central emergency button, can control the lighting means.

Preferably, the central emergency button comprises a light guide. The light guide can serve to direct the light emitted by the bulbs light in the direction of the operator visible surface of the central emergency button. The light guide is preferably designed such that the different control of the at least two groups of lighting means for the operator is visible. In particular for this purpose, the optical waveguide can have optical waveguide regions which are assigned to each group of illuminants. If light sources can be controlled individually, then each light source which can be controlled individually can be assigned an optical waveguide region. Particularly preferably, each lighting means can be controlled individually and each lighting means is associated with an optical waveguide area.

It can be provided that light rays which are emitted by one of the lighting means are conducted essentially only in the light guide region associated with the respective lighting means. The visible to the operator surface of the light guide can be perceived at least divided into luminous areas. Each light guide area may comprise a light area. Preferably, emitting light of a luminous means substantially only illuminates the associated luminous area. The bulbs are located in the direction of the surface of the trigger element centrally under the light areas.

Additionally or alternatively, the visible to the operator surface of the light guide may be configured, for example, as a circular ring. The luminous regions may in particular correspond in each case to a sector of the circular ring.

It is conceivable that recesses are provided between the light guide regions. The recesses in the light guide are provided so that the light sources, which can be controlled differently, can not be conducted from one to the other light guide area. The recesses are located between the groups of bulbs, in particular the individual bulbs. The light guide areas are located in the direction of the surface of the trigger element on the bulbs.

The light guide regions preferably each comprise an expanding section. The expanding portion may serve to propagate the light emitted from the associated illuminant. As a result, the emitted light can be distributed over the associated luminous area. The spreading section can be in a projection z. B. in the form of a trapezoid, in particular in the form of an isosceles trapezoid.

It may be that as a result of operation of the manually operable element via at least one bus system, a signal for delaying and / or preventing activation of the locking mechanism is sent for unlocking. The signal can be a message. The bus system may be a second bus system. Optionally, the signal for delaying and / or preventing may be sent via the second and the first bus system. The signal for delaying and / or preventing activation of the locking mechanism for unlocking can be sent to the trigger element.

The central escape route control and the triggering element can be connected to one another via at least one bus system, in particular via at least one second bus system. The central escape route control may be connected to the second bus system. The triggering element may be connected to the second bus system. Alternatively, the triggering element may be connected to the first bus system, but not to the second bus system. The connection between the central escape route control and the triggering element can thus comprise the second bus system or the first and the second bus system.

If the triggering element is not connected to the second bus system, then particularly preferably a control device can be connected both to the first bus system and to the second bus system. The control device may forward messages from the central escape route controller to the trigger element. The control device can be designed to cause a non-safety-relevant activation of the locking mechanism for unlocking or locking. The control device may cause the visualization of the first delay time period at the central escape route control.

It may be that the manually operable element is electrically connected via the emergency module, in particular via the central emergency button, with the trigger element. The first and / or the second operating element can be electrically connected to the trigger element via the central emergency button. The delay element and / or the termination element can be connected via the central emergency button with the trigger element.

In particular, it may be that the emergency module, in particular the central emergency button, is connected to the second bus system. Thus, the central emergency button and the trigger element can communicate with each other via the second bus system or via the first and the second bus system. In the latter case, the control device can preferably be provided to forward a message from the central emergency button to the triggering element. Additionally or alternatively, the control device may preferably be provided to forward a message from a bus user of the first bus system to the central emergency button.

Preferably, the manually operable element is not connected to the second bus system. Preferably, the first and / or the second control element are not connected to the second bus system. Preferably, the delay element and / or the termination element are not connected to the second bus system. Ie. at least one of said elements is not a participant of the second bus system, but a message about the operation of the at least one element is sent from the emergency module, in particular from the central emergency button to the trigger element. Particularly preferably, a signal via the actuation of the first and / or second operating element from the emergency module, in particular from the central emergency button, detected or processed. Particularly preferably, a signal on the actuation of the delay element and / or the termination element of the emergency module, in particular from the central emergency button, detected or processed. For this purpose, the emergency module, in particular the central emergency button, a digital Notfalltasterelektronikeinheit include.

The digital emergency button electronic unit may include a first digital emergency processing unit and a second digital emergency processing unit. The first and second emergency processing units may each include a processor. The first and / or the second emergency processing unit may each be designed as a microprocessor or microcontroller. The first and second emergency processing units may each comprise a nonvolatile memory. Additionally, the emergency button electronics unit may include a third digital emergency button processing unit. The third emergency processing unit may include a processor. The third emergency processing unit may be designed as a microprocessor or microcontroller. The third emergency processing unit may comprise a non-volatile memory and / or have access to a non-volatile memory.

Each of the first and second emergency processing units may independently detect a signal via an operation of an emergency button operation member. Here, the first emergency processing unit detects a first signal via the operation of the emergency button operation member, and the second emergency processing unit detects a second signal via the operation of the emergency button operation member. The first and second emergency processing units may then each independently cause the door lock mechanism to be unlocked. For this purpose, in particular at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second signal via the actuation of the emergency button actuating element is sent to the door lock control.

Upon actuation of the first operating element, a first deactivating circuit and a second deactivating circuit can be opened or closed. It may be that a deactivation signal of a first deactivating circuit from the first emergency digital processing unit of the central emergency button and a deactivation signal of a second deactivating circuit from the second digital emergency processing unit of the central emergency button are detected. In this case, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the first or second deactivation signal is sent to the triggering element. Particularly preferably, the triggering element is transferred to the deactivated state only when the triggering element has been informed of both the presence of the first deactivation signal and the presence of the second deactivation signal.

In addition, a signal of the first activation circuit may be detected by the first emergency digital processing unit of the central emergency button and a signal of the second activation circuit by the second digital emergency processing unit of the central emergency button. In this case, in particular, at least one message in which the first and / or the second emergency processing unit informs about the presence of the signal of the first and the second activation circuit is sent to the triggering element. Particularly preferably, the trigger element is then brought into the activated state, when the trigger element has been informed of either the presence of the signal of the first activation circuit or the presence of the signal of the second activation circuit.

Alternatively, a signal may be detected or processed by the third emergency processing unit via the operation of the second operating element. After detecting or processing the signal via an actuation of the second operating element, a message for activation can be sent to the triggering element. The central emergency button and the second control element are preferably connected via a bus, in particular an I ² C bus.

The deactivation module, in particular the first and / or the second operating element, is preferably designed to be processor-free. Characterized in that the signals are detected or processed by the actuation of the first and / or second control element of the Notfalltasterelektronikeinheit, it is not necessary that the deactivation module a own intelligence, z. B. in the form of at least one processor.

A signal about the actuation of the delay element and / or the termination element can be detected or processed in particular by the third emergency processing unit. After detecting or processing the signal via actuation of the delay element, a delay extension message may be sent to the trigger element. After detecting or processing the signal via an actuation of the termination element, a delay completion message may be sent to the trigger element. The central emergency button and the delay element and / or the termination element are preferably connected via a bus, in particular an I ² C bus.

Preferably, the delay module, in particular the delay element and / or the termination element is formed processor-free. Characterized in that the signals on the operation of the delay element and / or the termination element are detected or processed by the Notfalltasterelektronikeinheit, it is not necessary that the delay module has its own intelligence, eg. B. in the form of at least one processor.

Preferably, the triggering element comprises a timer. As a result of the actuation of the triggering element, the triggering element can let elapse by means of the timer, the first delay period before the triggering element drives the locking mechanism for unlocking or causes a triggering of the locking mechanism for unlocking.

Additionally or alternatively, after the trigger element has received a signal, in particular a message, for delaying the actuation of the locking mechanism for unlocking, the trigger element can pass the second delay time period by means of the timer, before the trigger element drives the locking mechanism for unlocking or driving the locking mechanism for unlocking causes. Preferably, the same timer is used to determine the first and second delay periods.

It may be that in the security system, in particular in the trigger element, in particular is stored electronically, whether due to an operation of the manually operable element delaying and / or preventing a triggering of the locking mechanism is to be made for unlocking. In the security system, in particular in the trigger element, z. B. be deposited electronically, whether a deactivation is approved for the trigger element. If the deactivation is not permitted for the triggering element, an action by the operator to deactivate the triggering element does not result in the triggering element being transferred to the deactivated state. On the other hand, if the deactivation is permitted, an action of the operator, in particular the actuation of the first operating element, results in that the triggering element is transferred to the deactivated state. Additionally or alternatively, in the security system, in particular in the trigger element, be stored electronically, whether a delay in the actuation of the locking mechanism is permitted as a result of actuation of the trigger element. In this case, it may in particular be stipulated whether the delay is permitted by the first delay time period and / or whether the delay is permitted by the second delay time duration.

The deposit can be made by an operator. Thus, an operator can adjust the permissibility of the prevention and / or the delay of the activation of the locking mechanism for unlocking. The deposit can be carried out with the aid of an executable on a communication device parameterization program. The operator can thus deposit the validity by means of the parameterization program.

It is conceivable that the safety system comprises several triggering elements. For each trigger element or for at least one group of trigger elements may be selectively stored in the security system, whether by the respective trigger element or by the respective group of trigger elements as a result of operation of the manually operable element delaying and / or preventing activation of the locking mechanism for unlocking is to be made.

Thus, in the security system, it is possible for each individual triggering element or at least one group of triggering elements to be deposited electronically, whether deactivation by the central escape route control, in particular by operation of the operating element, is permitted for the respective triggering element or for the respective group of triggering elements , In the group of triggering elements may, for. B. to trigger elements associated with a door lock or a door or which are provided for arrangement in the same room, act. If, for at least one triggering element of the security system, a deactivation is stored as approved and the deactivation is stored as not permitted for at least one further triggering element, then only one triggering element is deactivated and the at least one further at least when the first operating element is operated Triggering element remains in the activated state. This allows different premises and requirements to be taken into account.

In particular, the approval of the deactivation is stored in the trigger element. Receives z. B. the triggering element a message that the first operating element has been actuated, the triggering element checks on the basis of the deposit, whether the deactivation is permitted. Only if the deactivation is defined as permissible does the trigger element change to the deactivated state.

Additionally or alternatively, in the security system, in particular in the triggering elements, individually for a single triggering element or for at least one group of triggering elements can be stored electronically, whether a delay by the first delay time period is allowed. If the delay is allowed by the first delay time period, then individually for a single trigger element or for at least one group of trigger elements it can be stored electronically whether a delay by the second delay time period is permitted. If the delay is not permitted for a first triggering element of the safety system, then the locking mechanism is activated directly as a result of the actuation of the triggering element. If a delay is allowed for a second trigger element of the safety system by the first delay time duration but not by the second delay time duration, then the locking mechanism is triggered immediately after completion of the first delay time duration, irrespective of whether the delay element was operated during the first delay time period or not. If a delay is allowed for the first and second delay periods for a third trigger element of the security system, the locking mechanism is triggered for unlocking immediately after the first delay period has ended, if the delay element was not operated during the first delay period. If, on the other hand, the delay element has been operated during the first delay period, then the locking mechanism is actuated for unlocking only immediately after the end of the second delay time period.

The deposit can be made by the operator with the aid of the parameterization program. The deposit can be carried out with the help of an executable on the communication device parameterization program.

The first delay time period and / or the second delay time duration can be stored with the aid of a parameterization program executable on the communication device in the security system, in particular in the triggering element. Here, the operator can make the deposit. It may be that the length of the first and / or second delay time period is not completely freely selectable for the operator. Rather, it may be that the first delay time period can be defined within a first time window specified by the parameterization program and / or the second delay time period can be defined within a second time window specified by the parameterization program. For example, the first delay time can be fixed between 0 s and 8 s. The second delay time can be z. B. between 0 s and 180 s be determined. When selecting 0 s, the respective delay is not allowed at the same time.

If the safety system comprises a plurality of triggering elements, then for each triggering element or for groups of triggering elements, an individual first delay time duration and optionally an individual second delay time duration can be selectively stored in the safety system, in particular in each triggering element. This can be set by the operator through the parameterization program. In particular, only a first delay time period and preferably also a second delay time period can be stored for a group of triggering elements that are intended for a common door and / or assigned to a common door lock. Are for a first and a second trigger element of the security system z. B. different first delay periods have been deposited, so a first delay period of a first length for the first trigger element and a first delay period of a second length for the second trigger element, then the first trigger element after the first delay period of. As a result of the actuation of the first trigger element the first length, z. B. 4 s, cause an unlocking and as a result of the actuation of the second triggering element, the second triggering element after the first delay period of the second length, z. B. 6 s, cause an unlocking.

The security system may include several central escape route controllers. In this case, in the security system, in particular in the triggering element, be stored electronically, by which central escape route control as a result of an operation of the manually operable element delaying and / or preventing a Activation of the locking mechanism is permitted for unlocking. This deposit can be stored individually for each triggering element or for at least one group of triggering elements. So z. For example, when operating the manually operable element of a first central escape route control, delaying and / or preventing triggering of the locking mechanism for unlocking a trigger element and / or delaying and / or preventing operation of the manually operable element of a second central escape route control a control of the locking mechanism for unlocking the same triggering element will not be allowed.

It may be that is visualized by the central escape route control, whether by the operation of the delay element of the same escape route control, a delay by the second delay period of the currently actuated trigger element is allowed. For example, only in the event that the extension of the delay for the currently actuated trigger element is permitted and / or only at the central escape route control whose operation of the delay element for the currently actuated trigger element leads to an extension of the delay, the first delay time period can be visualized , Alternatively, the first delay time duration is always displayed optically, however, an additional optical representation indicates that an operation of the delay element leads to an extension. This optical representation can be carried out in particular by the lighting means.

If the second operating element is operated, it is conceivable that all deactivated triggering elements of the safety system are always transferred to the activated state.

If the termination element is operated, then it is conceivable that all delays of the activations of the locking mechanism are terminated immediately as a result of actuation of a triggering element. This applies both during the first and during the second delay period.

The security system according to the invention is particularly suitable for use in a building in which people live with an impaired state of mind, in particular a psychiatry, a dementia ward or the like. In particular, by the possibility of deactivation, monitoring and possibly activation, thereby the safety of the occupants may be increased.

The invention will be explained in more detail with reference to embodiments. Technical features with the same function are provided in the figures with identical reference numerals. Show it:

1 a plan view of a detail of a security system according to the invention with an emergency button as a triggering element in a ready state to a door according to a first embodiment,

2 a functional diagram of the security system according to the invention 1 .

3 one too 2 Modified functional diagram of a section of a security system according to the invention according to a second embodiment,

4 a top view of a detail of an inventive safety system with multiple emergency buttons in a ready state on a door according to a third embodiment,

5 a functional diagram of the security system according to the invention 4 .

6 one too 5 Modified functional diagram of a section of a security system according to the invention according to a fourth embodiment,

7 a top view of a security system according to the invention in a ready state according to a fifth embodiment,

8th a functional scheme of a central escape route control of the security system 7 .

9 a functional diagram of the security system 7 .

10 a functional diagram of a security system according to the invention according to a sixth embodiment,

11 An embodiment of an emergency button according to the invention in a side view,

12 the emergency button off 11 in a longitudinal section, with cut surfaces unhatched,

13 the emergency button off 11 in an exploded view,

14 an actuator of the emergency button 11 in a perspective view,

15 another perspective view of the actuating element 14 .

16 a light guide from the emergency button 11 in a perspective view,

17 another perspective view of the light guide 16 and

18a -D is a schematic representation of a sequence of a function release in a security system according to the invention.

In the following, a distinction is made between a user and an operator. A user can be any person using the security system 1 used. A user can, for. B. be a guest by the security system 1 secured door wants to flee. An operator serves to operate the security system 1 , The operator can z. B. authenticate to the security system. The operator can z. B. be a member of a security guard. Particularly preferred, the operator can use the security system 1 to adjust.

In the following, the term "actuation of the emergency button" is understood to mean "actuation of the actuating element of the emergency button".

A connection to a bus system is understood below to mean an immediate connection, so that a component connected to the bus system is to be regarded as a subscriber of the bus system with its own bus address.

By initiating a control is meant, in particular, the transmission of a message via a first and / or second bus system which contains information and / or a command which causes the direct or indirect receiver of the message to carry out the activation. The sender of the message initiates the activation. Thus, by initiating a drive, an indirect drive is understood. The message can in particular correspond to a bus telegram.

As a result of an operation means that an actuation is the cause, regardless of whether the operation continues or not.

In the 1 to 6 become sections of security systems according to the invention 1 shown. The details of the security systems 1 that in the 1 to 6 are also provided with a central escape route control 300 connected. An example of such an escape route control 300 is in the 7 and 8th shown.

In the 1 and 2 is a section of a first embodiment of a security system according to the invention 1 for a door 2 shown. The door 2 is not part of the security system according to the invention 1 , The safety system according to the invention 1 includes a door lock 200 and an emergency button 10 , The emergency button 10 comprises a control device 100 , The emergency button 10 is a key switch 500 assigned. The security system 1 can the key switch 500 include. Alternatively, the security system 1 , especially the emergency button 10 , Have a key switch input, via which a connection with the key switch 500 can be produced.

As in 2 shown are the emergency button 10 and the door lock 200 via a first bus system 400 connected with each other. The key switch 500 is with the emergency button 10 over a connection 402 electrically connected or connectable. The connection 402 is shown as a dashed arrow to represent signals above a position in the key switch 500 inserted key of an electronic unit 24 the emergency button 10 be supplied. Alternatively to the connection can the key switch 500 also with the first bus system 400 be connected (not shown). This alternative applies to all embodiments.

The emergency button 10 is designed to lock the door 200 as a result of pressing the emergency button 10 a message about the first bus system 400 to send and thereby cause an unlocking of the door lock. The message following the operation of the emergency button 10 can be delayed.

Likewise, the security system according to the invention 1 , especially the emergency button 10 to be connectable to a fire detector (not shown). If a fire alarm signal is present, the safety system initiates 1 also a release of the door lock 200 ,

The control device 100 does not perform safety-related functions: Thus, the control device 100 for authorized persons unlocking the door lock 200 cause. For this purpose, the control device 100 be connectable with an access control system, not shown. The access control system can in particular with the first bus system 400 be connected or connectable. The control device 100 receives from the access control system in particular via the bus system 400 a positive authentication signal about the authentication. After that, the control device causes 100 a release of the door lock 200 , The access control system can, for. Example, a reader, a key switch, a keyboard for entering a code or a lock cylinder of a mechanical lock, in particular a self-locking panic lock, include or be designed.

Likewise, the control device 100 at a predetermined time or after a predetermined period of time unlocking the door lock 200 automatically cause, for. B. if in a time window per day the door should be unlocked.

If there is no danger, ie. was not the emergency button 10 actuated is still a fire alarm signal, so the control device 100 automatically re-lock after a predetermined period of time. In this case, the control device 100 receive an access signal of the access control system in addition to the positive authentication signal and / or measure the length of the positive authentication signal. By the access signal or by the length of the authentication signal, the control device 100 adjust the length of the predetermined period of time. So a person z. For example, hold an ID card long in front of the reader or turn the key for a long time. This signals that the predetermined period of time previously in the control device 100 deposited long period of time to correspond. If the person holds the ID card in front of the reader or if the user briefly turns the key, it is signaled that the predetermined period of time has elapsed before in the control device 100 deposited short period of time should correspond.

A first door condition monitoring device 204 and a second door condition monitoring device 206 detect if the door 2 is open or closed. The control device 100 receives, at least indirectly, a signal from the door condition monitoring devices 204 . 206 , Is the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 a re-locking the Türverrieglung 200 immediately and automatically cause as soon as the control device 100 with the help of door condition monitoring devices 204 . 206 the information is available that the door is initially opened and now closed again.

The emergency button 10 includes an audible alarm 23 and bulbs 41 (see also 13 ). The bulbs 41 serve to represent the locking or unlocking state of the door lock 200 and thus serve as a display device. The bulbs 41 serve for the optical representation of a time-delayed unlocking of the door lock 200 as a result of pressing the emergency button 10 and thus serve as a display device. The bulbs 41 are used for optical representation of an alarm condition after receiving the fire alarm or as a result of pressing the emergency button 10 and thus serve as a display. The bulbs 41 are used for visual display when a previously described re-locking fails.

The control device 100 controls the audible alarm 23 to emit an audible alarm when there is a danger, ie when receiving a fire alarm or the emergency button 10 was pressed. The control device 100 controls the audible alarm 23 to sound an audible alarm if a re-lock fails.

The control device 100 controls the bulbs 41 to the locking or unlocking the door lock 200 to visually represent a time-delayed release and / or to issue a visual alarm when a fire alarm signal is received or the emergency button 10 has been pressed or if a re-lock fails.

The control device 100 can in the unlocked state of the door lock 200 the opening of the door with the help of the door condition monitoring devices 204 . 206 monitor. The control device 100 If desired, it can sound an audible alarm when the door is open 2 during the unlocked state of the door lock 200 has been opened, at least if there is no positive authentication signal. This can be monitored when someone opens the door, even if the door is unlocked.

The emergency button 10 may include at least one additional output. The control device 100 can on the output of other components with the security system according to the invention 1 are connectable, drive, z. B. a room lamp.

In the control device 100 are the parameters for the execution of said functions of the control device 100 deposited. So z. The predetermined time (s), the predetermined time period (s), parameters for the audible alarms, e.g. B. in which volume with which frequency an acoustic alarm is to be output, and parameters for the various controls of the bulbs 41 for optical representation of the various states of the security system mentioned above 1 in the control device 100 saved. The parameters for the lighting means may include flashing frequencies, colors to be emitted, color intensities and / or light patterns. For parameterization, the control device 100 via a radio module 64 communicate with a mobile communication device. Alternatively, the parameterization with the aid of a watch 301 via a second bus system 401 take place (s. 9 and 10 ). For the parameterization, a parameterization program is provided which can be used on a communication device, eg. As a personal computer, a mobile phone and / or a tablet, is executable. The operator can set the parameters using the parameterization program.

In 2 is the construction of the door lock 200 and the emergency button 10 shown in more detail.

The emergency button 10 has a first emergency button processing unit 20 , a second emergency button processing unit 21 and a third emergency button processing unit 22 on. The first, second and third emergency button processing units 20 . 21 . 22 are each designed as microprocessors or microcontroller. The first and second emergency button processing units 20 . 21 include a non-volatile memory. The third emergency button processing unit 22 includes a non-volatile memory and / or has access to a non-volatile memory. The first, second and third emergency button processing units 20 . 21 . 22 be together as an electronics unit 24 the emergency button 10 designated.

The electronics unit 24 also serves as a control device 100 , Here, the first emergency button processing unit is used 20 as the first processing unit 103 the control device 100 , The second emergency button processing unit 21 serves as a second processing unit 104 the control device 100 , The third emergency button processing unit 22 serves as the third processing unit 105 the control device 100 ,

The first and second emergency button processing units 20 . 21 serve to execute the safety-related functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to execute the non-safety-related functions. The safety-relevant functions include the cause of unlocking in case of danger. Non-safety-related functions include the remaining functions listed above.

By pressing the emergency button 10 becomes an actuator 11 from a starting position 11.I in an operating position 11.II moves, creating a switch 63 is pressed (see also 12 . 13 ). As a result, a first and a second actuation signal are generated. Thereby, a first and a second circuit (not shown) are opened. A signal on the opening of the first circuit is from the first emergency button processing unit 20 detected. A signal on the opening of the second circuit is from the second emergency button processing unit 21 detected. The actuating signal is understood to be the signal generated by the user by the actuation of the actuating element in order to unlock the door lock and to enable the escape route. The expression "as a result of pressing the emergency button 10 Is used in particular in the sense of "after generation of the actuation signal", ie, regardless of whether the actuator 11 still in the operating position 11.II is or already in the starting position 11.I has returned.

The first emergency button processing unit 20 and the second emergency button processing unit 21 cause each independently after detecting the actuation signal via the first bus system 400 a release of the door lock 200 , The second emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20 ,

The door lock 200 includes a door lock control 201 , The door lock control 201 comprises a first processing means 202 and a second processing means 203 , The first and the second processing means 202 . 203 be together as an electronic device 207 designated. The first and the second processing means 202 . 203 are each designed as a microprocessor or microcontroller. The first and the second processing means 202 . 203 can each have a locking mechanism 205 the door lock 200 trigger for unlocking. In case of danger, ie as a result of pressing the emergency button 10 or upon receipt of a fire alarm signal, control both the first processing means 202 as well as the second processing agent 203 the locking mechanism 205 for unlocking. The second processing agent 203 is thus redundant to the first processing means 202 , This construction achieves one-fault safety.

The locking mechanism 205 is electromechanically formed. The locking mechanism 205 includes z. B. an electromechanically actuated latch member (not shown), which is a door latch of the door 2 in the locked state of the door lock 200 locks and in the unlocked state of the door lock 200 releases. When driving the locking mechanism 205 for interlocking, the first and second processing means switch 202 . 203 an electric current for the locking mechanism 205 at. When driving the locking mechanism 205 for unlocking, the first and second processing means switch 202 . 203 an electric current for the locking mechanism 205 from. Each a processing agent 202 . 203 For this purpose, a separate switch is assigned. Opening only one of the switches will turn off the power to the latching mechanism 205 ,

The door lock control 201 receives feedback on the state of the locking mechanism via a locking mechanism state monitoring device, not shown 205 , In particular, a position of an armature of a coil of the locking mechanism 205 supervised. Corresponds to the state of door lock 205 not the desired state, an alarm is issued. Additionally or alternatively, this case can be made a renewed attempt to reach the target state.

As a result of pressing the emergency button 10 the first and second emergency button processing units communicate 20 . 21 with the first and the second processing means 202 . 203 over the first bus system 400 with the help of a message. The message may include the message about being actuated or a control command for unlocking. Here, the first emergency button processing unit informs 20 the first processing agent 202 and the second emergency button processing unit 21 the second processing means 203 , The message causes the first and second emergency button processing units 20 . 21 in that both the first and the second processing means 202 . 203 , the locking mechanism 205 to unlock, so turn off the electrical power.

The presence of a fire alarm signal is provided by the first and second emergency button processing units 20 . 21 detected. This is followed by the first and second emergency button processing units 20 . 21 by a message to the first and the second processing means 202 . 203 in that the locking mechanism 205 for unlocking the door lock control 201 is controlled. Here, the first emergency button processing unit informs 20 the first processing agent 202 and the second emergency button processing unit 21 the second processing means 203 , The message causes the first and second emergency button processing units 20 . 21 in that both the first and the second processing means 202 . 203 , the locking mechanism 205 to unlock, so turn off the electrical power.

The operation of the emergency button 10 or the presence of a fire alarm signal may be in a message from one of the two emergency button processing units 20 . 21 be sent, wherein the first emergency button processing unit 20 a first part of the message and the second emergency button processing unit 21 write a second part of the message. The first and the second processing means 202 . 203 are at least responsible for each part of the message. The emergency button processing units 20 . 21 . 22 and the first and second processing means 202 . 203 can each receive messages via the first bus system 400 receive. Here, the electronics unit 24 and the door lock control 201 each be assigned a bus address.

The first and second emergency button processing units 20 . 21 monitor each other. If an error is detected, the electronic unit initiates 24 , in particular the intact emergency button processing unit 20 . 21 in that the first and the second processing means 202 . 203 the door lock mechanism 205 trigger for unlocking. The first and the second processing means 202 . 203 monitor each other. If an error is detected, then at least the intact processing means becomes 202 . 203 the locking mechanism 205 activated for unlocking. Also, in case of a malfunction of the bus system 400 the locking mechanism 205 for unlocking the door lock control 201 driven. For this purpose and to check the first and the second emergency button processing unit 20 . 21 becomes a sign of life of the first and second emergency button processing units 20 . 21 regularly to the door lock control 201 Posted. If the sign of life signal is off, then the first and the second processing means are used 202 . 203 the locking mechanism 205 activated for unlocking. The first and the second processing means 202 . 203 communicate with each other when the door lock control 201 a message about the operation of the emergency button 10 and / or has received the presence of a fire alarm signal. Represents only the first processing agent 202 or the second processing means 203 fixed that the emergency button 10 has been actuated or a fire alarm signal is present, the detecting processing means controls 202 . 203 the door lock mechanism 205 for unlocking and initiating that other processing means 202 . 203 also the door locking mechanism 205 activates for unlocking. An error and a fault always include a failure of the respective component. In case of power failure, the locking mechanism goes 205 automatically in the unlocked state. The security described in this section is also provided by the security system 1 , in particular by means of the control device 100 , an audible and / or visual alarm.

If the actuation signal has been generated, the door lock is prevented electronically without the presence of a cancellation condition 200 is transferred to the locked state. This prevents the door from being locked while a hazardous condition persists. This is in the electronic device 207 integrated an electronic statement. The electronic detection is due to the actuation of the actuator 11 , which serves to release the escape route, transferred to an operating state. In the operating state, the control of the door lock 200 prevented for locking.

The electronic determination comprises a first program code. The first program code includes a first variable or has access to a first variable. In an initial state of electronic determination, the first variable is set to an initial value. In the actuation state, the first variable is set to an actuation value, by which the control of the door lock 200 is prevented for locking. The first variable can be binary. When the cancellation condition is reached, the electronic determination is returned to an initial state. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic detection is a control of the door lock 200 allowed for locking. The first program code detects the first value of the first variable and allows locking the door lock 200 if the value of the first variable corresponds to the initial value, and prevents locking the door lock 200 if the value of the first variable corresponds to the actuation value.

The electronic detection is in both the first processing means 202 as well as redundant in the second processing means 203 deposited. For this purpose, the first program code is in the first processing means 202 deposited. The first variable is in the nonvolatile memory of the first processing means 202 saved. A second program code having the same functionality as the first program code is in the second processing means 203 deposited. The first variable is redundant in the non-volatile memory of the second processing means 203 saved.

The first variable is additionally in the first emergency button processing unit 20 and in the second emergency button processing unit 21 each stored in the non-volatile memories. As a result of pressing the emergency button 10 becomes the first variable in the first and second emergency button processing units 20 . 21 transferred from the initial value in the actuation value. The changed value of the first variable becomes the electronic device 207 over the bus system 400 transmitted. The emergency button transmits until a cancellation condition is met 10 repeats the operation value of the first variable to the electronic device 207 , The transmission can take place at regular time intervals, in particular together with the sign of life signal.

At least if at least one of the door condition monitoring devices 204 . 206 has detected that the door 2 after pressing the emergency button 10 has been opened, so to achieve the cancellation condition is a cancellation act on emergency button 10 necessary.

The actuator 11 is non-latching. The actuator 11 becomes on actuation from the home position 11.I in the operating position 11.II transferred (s. 11 ). Immediately after the operation, the actuator moves 11 back to the starting position 11.I by the force of a return spring designed as a spring 12 back (s. 12 . 13 ). The actuation of the actuating element 11 is translational.

The suspension action at the emergency button 10 is performed by the actuator 11 is pressed. As a result, a cancellation signal is generated, which corresponds to the actuation signal. So that the control device 100 can detect whether an operation of the emergency button 10 for unlocking the door lock 200 or there is a cancellation action, another signal must be generated at the same time to achieve the cancellation condition. An operator authenticates for this purpose. The authentication takes place by inserting and turning a key in the key switch 500 , The actuation of the actuating element 11 and the authentication must overlap in time. Ie. the operator must keep the key in the rotated state while the actuator 11 in the operating position 11.II located. The actuator 11 must be in the starting position 11.I return while the key is in the rotated state. The course of action is sufficient to achieve the cancellation condition.

Have the door condition monitoring devices 204 . 206 that detects the door 2 as a result of pressing the emergency button 10 has remained permanently closed, so the cancellation condition can be achieved in at least one other way, namely by elapse of a predetermined time interval. So z. B. after 60 seconds after the last generation of the actuation signal, the cancellation condition be reached, if the door 2 has remained closed. An authentication at the key switch 500 and a suspension action at the emergency button 10 are not necessary in this case.

The first and second door condition monitoring devices 204 . 206 are designed to detect with a one-fault security that the door 2 as a result of pressing the emergency button 10 has always been closed. These are the door condition monitoring devices 204 . 206 preferably formed differently. The first door condition monitoring device 204 can z. B. be designed as a door contact. The second door condition monitoring device 206 can z. B. be designed as a case contact. Alternatively, z. B. at least one of the door condition monitoring magnetically, z. As a reed switch, the state of the door 2 monitor. The door lock control 201 receives a signal from each of the first and second door condition monitoring devices 204 . 206 about whether the door 2 open or closed is. Only if during the predetermined time interval neither of the first door condition monitoring device 204 still from the second door condition monitoring device 206 When a door opening signal has been sent, the cancellation condition can be achieved by lapse of the predetermined time interval.

The door lock control 201 includes a timer to measure the predetermined time interval. The door lock control 201 starts the timer as a result of pressing the emergency button 10 , Receives the door lock control 201 during the predetermined time interval, a signal of the first or second door condition monitoring device 204 . 206 That the door has been opened, so must a cancellation act on the emergency button 10 respectively. In this case, the elapse of the predetermined time interval is insufficient. The length of the predetermined time interval is in the door lock control 201 deposited.

The door lock control 201 checks whether reaching the cancellation condition by lapse of the predetermined time interval is allowed before the door lock control 201 the locking mechanism 205 activates for locking. This allows an operator to commission the security system 1 ie before the operation of the safety system begins 1 , deposit whether a lapse of the predetermined time interval without opening the door 2 as a cancellation condition is allowed and thus to a re-locking of the door 2 leads. The deposit can be in the emergency button 10 respectively. A check of permissibility, elapse of the predetermined time interval, and a lack of a signal from the first and second door condition monitors 204 . 206 about opening the door 2 is sufficient to achieve the cancellation condition.

The door lock control 201 communicates the open or closed state of the door over the bus 400 to the emergency button 10 and / or to the control device 100 ,

The electronics unit 24 includes a timer. In the electronics unit 24 a first delay period can be stored. Should unlock the door lock 200 delayed, the electronics unit waits 24 after the generation of the actuation signal, the first delay time period before the first and second emergency button processing units 20 . 21 over the first bus system 400 with the door lock control 201 communicate to cause a release.

The third processing unit 105 induces the 1 and 2 described non-safety-relevant unlocking and locking the door lock 200 , z. B. an unlock after receipt of the authentication signal, at a predetermined time or after a predetermined period of time or a lock after a predetermined period of time or immediately after closing the door 2 , For this purpose, the third processing unit communicates 105 over the first bus system 400 with the door lock control 201 , The communication can z. B. information or a control command containing the door lock control 201 causes the locking mechanism to trigger for unlocking or locking. Is the control device 100 connected to the second bus system (s. 7 ), the third processing unit is used 105 for forwarding messages from and / or to a central escape route control 300 ,

The third emergency button processing unit 22 controls the audible alarm 23 and the bulbs 41 at.

Is at least one of the processing means 202 . 203 before that the locking mechanism 205 has taken the unlocked state, then sends the processing means 202 . 203 a corresponding signal via the bus 400 to the electronics unit 24 , The electronic device 207 is with the door condition monitoring device 204 . 206 connected or connectable and receives signals about an open or closed state of the door of the door condition monitoring devices 204 . 206 ,

The functions mentioned, the control device 100 , the door lock control 2021 and / or the emergency button 10 can be executed with the help of software modules. In the electronic device 207 and / or the electronics unit 24 program codes are stored with the help of which the functions can be executed.

3 represents a variant of the in the 1 and 2 shown section of the security system 1 Here is the control device 100 separately from the emergency button 10 and the door lock 200 educated. The control device 100 can z. B. in a hat rail housing (not shown) may be arranged. The control device 100 is not in an emergency button 10 or in a door lock 200 integrated. For example, the control device 100 be provided for arrangement in a technical room. The first bus system 400 connects the control device 100 , the door lock 200 and the emergency button 10 together. As in the first embodiment, the key switch is 500 with the emergency button 10 over a connection 402 electrically connected or connectable.

Unless otherwise described, the structure and the function correspond to the first embodiment, wherein the functions associated with the 1 and 2 with the help of the control device 100 or the processing units 103 . 104 . 105 described by the control device 100 of the 3 be executed and the functions that to the 1 and 2 with the help of the emergency button 10 or the emergency button processing units 20 . 21 . 22 described by the emergency button 10 In particular, the first and second emergency button processing units detect 20 . 21 the actuation signal, communicate as a result of pressing the emergency button 10 with the first and the second processing means 202 . 203 over the first bus system 400 and thus cause an activation of the locking mechanism 205 through the door lock control 201 , The measures for achieving on-fail safety or redundancy are made with the aid of the first and second emergency button processing units 20 . 21 carried out. The first variable is in the first and second emergency button processing units 20 . 21 is stored and from there to the door lock control 201 transmitted. The emergency button 10 includes the timer for determining the first delay time period. The control device 100 is with the second bus system 401 connected or connectable. The third processing unit 105 induces the 1 and 2 described non-safety-relevant unlocking and locking the door lock 200 , z. B. unlocking upon receipt of the authentication signal, at a predetermined time or after a predetermined period of time or an automatic re-locking after a predetermined period of time or immediately after closing the door 2 ,

The first, second and third processing units 103 . 104 . 105 are each designed as a microprocessor or microcontroller. The first, second and third processing units 103 . 104 . 105 together form a processing electronics 101 , The first and the second processing unit 103 . 104 have a non-volatile memory. The third processing unit 105 includes a non-volatile memory and / or has access to a non-volatile memory.

A fire alarm signal can be both from the control device 100 as well as from the emergency button 10 be receivable. The presence of a fire alarm signal is thereby by the first and the second emergency button processing unit 20 . 21 for the emergency button 10 or from the first and second processing units 103 . 104 for the control device 100 detected. Accordingly, both the control device 100 with the help of the first and the second processing unit 103 . 104 as well as the emergency button 10 with the aid of the first and the second emergency button processing unit 20 . 21 a release of the door lock 200 cause. For this purpose, communication takes place via the first bus system 400 with the door lock control 201 instead of.

The control device 100 is via the first bus system 400 informed when the emergency button 10 a release of the door lock 200 caused, ie as a result of pressing the emergency button 10 or after receiving a fire alarm signal. Also, the control device 100 via a time-delayed unlocking of the door lock 200 as a result of pressing the emergency button 10 informed. The control device 100 is about the locking and unlocking the door lock 200 informed. The control device 100 is about the open or closed state of the door 2 informed.

The control device 100 initiates activation of the alarm transmitter 23 and the light source 41 for those to the 1 and 2 described acoustic alarms and visual representations. For this purpose, the control device 100 with the electronics unit 24 in particular with the third emergency button processing unit 22 , via the first bus system 400 communicate. The third emergency button processing unit 22 then controls the alarm 23 or the bulbs 41 at. These are the parameters for the alarm transmitter 23 and the bulbs 41 in the control device 100 deposited.

In the embodiments of the 1 to 3 includes the door lock 200 the door condition monitoring devices 204 . 206 , Alternatively, and not shown, the door condition monitoring devices 204 . 206 with the first bus system 400 or directly with the emergency button 10 and / or the control device 100 be connected.

In the embodiments of the 1 to 3 can at least another emergency button, not shown, with the first bus system 400 be connected without the control device 100 is trained. The further emergency button is like the emergency button 10 in 3 trained and can unlock the door lock when actuated 200 cause. The further emergency button corresponds in structure and functionality to the emergency button 10 of the 3 ,

In the embodiments of the 1 to 3 can at least one further door lock, not shown, with the first bus system 400 be connected. The further door lock is like the door lock 200 in 2 or 3 is formed and can when pressing the emergency button 10 also be unlocked. The further door lock corresponds in structure and in the functionality of the door locks 200 of the 1 to 3 ,

In 4 is a section of a third embodiment of a security system according to the invention 1 with several emergency buttons 10 . 1010 . 2010 . 3010 shown. The security system 1 includes several door locks 200 . 1200 . 2200 . 3200 , Every emergency button 10 . 1010 . 2010 . 3010 is a key switch 500 . 1500 . 2500 . 3500 assigned. The security system 1 used to arrange emergency buttons 10 . 1010 . 2010 . 3010 and door locks 200 . 1200 . 2200 . 3200 at different doors 2 . 2002 . 3002 , The doors 2 . 2002 . 3002 are not part of the security system according to the invention 1 , The several emergency buttons 10 . 1010 . 2010 . 3010 are with the first bus system 400 connected and thus correspond to a number of emergency buttons 10 . 1010 . 2010 . 3010 , The door locks 200 . 1200 . 2200 . 3200 are with the first bus system 400 connected and correspond to a number of door locks 200 . 1200 . 2200 . 3200 ,

In the example of 4 are the emergency buttons 10 . 1010 the door locks 200 . 1200 assigned. The emergency button 2010 is the door lock 2200 assigned. The emergency button 3010 is the door lock 3200 assigned. This is the result of an operation of one of the emergency button 10 . 1010 the two door locks 200 . 1200 unlocked, but not the door locks 2200 . 3200 , Will the emergency button 2010 operated, then only the door lock 2200 unlocked. Accordingly, when the emergency button 3010 is pressed, only the door lock 3200 unlocked. Thus, in this embodiment, the door locks 200 . 1200 . 2200 . 3200 selectively unlocked.

For example, the emergency buttons 10 . 1010 for mounting on a double-leaf door 2 be provided. One door lock each 200 . 1200 is each on a door leaf 3 . 4 the door 2 to arrange. The emergency button 2010 and the door lock 2200 are to be arranged on another door 2002 intended. The emergency button 3020 and the door lock 3200 are at a door 3002 to arrange, as in 4 shown.

The security system 1 out 4 can also for from 4 deviating selective unlocking be adjustable. At one too 4 Deviating example setting is when pressed one of the emergency button 10 . 1010 . 2010 . 3010 in each case only a single associated door lock 200 . 1200 . 2200 . 3200 unlocked. Thus, each is an emergency button 10 . 1010 . 2010 . 3010 only one door lock each 200 . 1200 . 2200 . 3200 assigned. In particular, such a set security system 1 for four single-leaf doors, each with one door lock 200 . 1200 . 2200 . 3200 suitable.

In another exemplary, not shown setting of the safety system 1 become one of the emergency buttons when pressed 10 . 1010 only the two door locks 200 . 1200 and when pressing one of the emergency buttons 2010 . 3010 only the two other door locks 2200 . 3200 unlocked. Thus, the emergency buttons 10 . 1010 the door locks 200 . 1200 and the emergency buttons 2010 . 3010 the door locks 2200 . 3200 assigned. In particular, the security system set in this way is 1 for two double-leaf doors, each with one door lock 200 . 1200 . 2200 . 3200 suitable for each door.

Likewise, the security system 1 be set so that when pressing an emergency button 10 . 1010 . 2010 . 3010 all door locks 200 . 1200 . 2200 . 3200 be unlocked.

Notwithstanding the security system 1 , this in 4 can be represented, a security system according to the invention 1 a number of emergency buttons 10 . 1010 . 2010 . 3010 include, which does not match the number of door locks 200 . 1200 . 2200 . 3200 covers. For example, in 4 the door 2 be designed with one wing and one of the emergency button 10 . 1010 or one of the door locks 200 . 1200 absence.

In 5 is shown that the emergency button 10 . 1010 . 2010 . 3010 and the door locks 200 . 1200 . 2200 . 3200 over the first bus system 400 connected to each other. One emergency button each 10 . 1010 . 2010 . 3010 is with a respective emergency button 10 . 1010 . 2010 . 3010 assigned key switch 500 . 1500 . 2500 . 3500 over a connection 402 . 1402 . 2402 respectively. 3402 electrically connected or connectable. Alternatively, the key switches 500 . 1500 . 2500 . 3500 with the first bus system 400 connected (not shown). In the embodiment of 4 and 5 is the control device 100 in one of the emergency buttons 10 . 1010 . 2010 . 3010 , z. B. the emergency button 10 , integrated. The first bus system 400 is only with a single control device 100 connected. Unless otherwise described below, the structure and functions of the door locks correspond 200 . 1200 . 2200 . 3200 the structure and functions of the door lock 200 of the 2 and 3 , the structure and functions of the emergency button 10 the structure and functions of the emergency button 10 of the 2 and the structure and functions of emergency buttons 1010 . 2010 . 3010 the structure and functions of the emergency button 10 of the 3 , The reference numerals from the 2 and 3 are used. It is understood that in each case the door locks 200 . 1200 . 2200 . 3200 its own door locking mechanism, own processing means etc. and the emergency buttons 10 . 1010 . 2010 . 3010 each own emergency button processing units, alarm, bulbs, switches and actuators include.

Thus the allocation of the emergency button 10 . 1010 . 2010 . 3010 to the door locks 200 . 1200 . 2200 . 3200 can be done during commissioning of the safety system 1 ie before the start of the operation of the safety system 1 , an assignment of emergency buttons 10 . 1010 . 2010 . 3010 to the door locks 200 . 1200 . 2200 . 3200 performed. For this purpose, one of the door locks 200 . 1200 . 2200 . 3200 into a mapping mode. After that, at the emergency rooms 10 . 1010 . 2010 . 3010 made a conscious act. The conscious act can be considered an actuation of the actuator 11 of the respective emergency button 10 . 1010 . 2010 . 3010 be executed. After all emergency buttons 10 . 1010 . 2010 . 3010 , that of the door lock 200 . 1200 . 2200 . 3200 becomes the assignment mode of the door lock, which are to be assigned in the assignment mode 200 . 1200 . 2200 . 3200 completed. In the embodiment of 4 is z. B. first the door lock 200 transferred to the assignment mode and then the emergency button 10 . 1010 pressed, causing the assignment of the emergency button 10 . 1010 to the door lock 200 he follows. Then, the assignment mode of the door lock becomes 200 completed. Subsequently, z. B. the door lock 1200 transferred to the assignment mode and then the emergency button 10 . 1010 pressed, causing the assignment of the emergency button 10 . 1010 to the door lock 1200 he follows. Then, the assignment mode of the door lock becomes 1200 completed. Now the door lock 2200 transferred to the assignment mode and then the emergency button 2010 pressed, causing the assignment of the emergency button 2010 to the door lock 2200 he follows. The assignment mode of the door lock 2200 will be terminated. Accordingly, afterwards with the door lock 3200 and the emergency button 3010 be moved.

The assignment is in the respective door locks 200 . 1200 . 2200 . 3200 , Especially in the respective door lock controls 201 , deposited, which emergency button 10 . 1010 . 2010 . 3010 the respective door lock 200 . 1200 . 2200 . 3200 is to be assigned. By the assignment is in the control device 100 for all emergency buttons 10 . 1010 . 2010 . 3010 and all door locks 200 . 1200 . 2200 . 3200 of the first bus system 400 the assignment of emergency buttons 10 . 1010 . 2010 . 3010 to the door locks 200 . 1200 . 2200 . 3200 deposited. For the assignment in each case a bus address, in particular an unchangeable bus address, the respective emergency button 10 . 1010 . 2010 . 3010 deposited.

The deposit of the assignment in the respective door locks 200 . 1200 . 2200 . 3200 occurs in each case in the first digital processing means 202 and redundant in the second digital processing means 203 in particular in the non-volatile memories of the processing means 202 . 203 ,

If z. B. the emergency button 10 pressed, then communicates the emergency button 10 with all door locks 200 . 1200 . 2200 . 3200 of the first bus system 400 , The door locks 200 . 1200 . 2200 . 3200 Check in each case on the basis of the deposit whether the respective door lock 200 . 1200 . 2200 . 3200 the pressed emergency button 10 has been assigned. Only in the case of assignment then control the associated door locks 200 . 1200 the respective door locking mechanism 205 at.

With a fire alarm signal the door locks become 200 . 1200 . 2200 . 3200 , the emergency button receiving the fire alarm signal 10 . 1010 . 2010 . 3010 are unlocked.

Should a door lock 200 . 1200 . 2200 . 3200 delayed due to the operation of an associated emergency button 10 . 1010 . 2010 . 3010 be unlocked, so is in that emergency button 10 . 1010 . 2010 . 3010 a first delay period deposited. The deposit takes place during commissioning of the security system 1 through the parameterization program. It can be for every emergency button 10 . 1010 . 2010 . 3010 a different first delay time period can be stored by the operator. For example, in the emergency button 10 a first delay time period, which differs from the first delay time duration, in the emergency button 2010 deposited, distinguishes. The emergency buttons 1010 . 3010 should unlock without delay a release of the associated door locks 2200 respectively. 3200 cause so in the emergency rooms 1010 . 3010 no first delay time period or a first delay time period of 0 s is stored. Alternatively, the security system 1 be designed such that in the emergency buttons 10 . 1010 . 2010 . 3010 , the same door lock 200 . 1200 . 2200 . 3200 are assigned, always the same first delay time period is stored. For this purpose, the parameterization program allows the operator only a common setting.

The control device 100 takes over the non-safety-relevant functions for unlocking and locking all door locks 200 . 1200 . 2200 . 3200 as before 1 and 2 described. For this purpose, the control device 100 with the door locks 200 . 1200 . 2200 . 3200 communicate selectively. Such is the control device 100 Defines which access control system which door lock 200 . 1200 . 2200 . 3200 is assigned, so that in the case of a positive authentication signal of an access control system, only the assigned door lock (s) 200 . 1200 . 2200 . 3200 be unlocked. Also in the control device 100 deposited, if and when yes, which door lock 200 . 1200 . 2200 . 3200 to be unlocked at what given time. Also in the control device 100 be deposited, after which predetermined period of time or which predetermined periods of time which door lock 200 . 1200 . 2200 . 3200 should be locked again. Also in the control device 100 deposited, if and, if so, which door locks 200 . 1200 . 2200 . 3200 immediately after closing the door 2 . 2002 . 3002 to be locked again. In the control device 100 can be stored, if, and if so, for which door lock 200 . 1200 . 2200 . 3200 An audible alarm should be initiated when the unlocked door 2 . 2002 . 3002 is opened without a positive authentication signal. In the control device 100 can be stored, whether an audible alarm should be initiated when the door 2 . 2002 . 2003 not closed again. The deposits can be used for every door lock 200 . 1200 . 2200 . 3200 or for the groups of door locks 200 . 1200 . 2200 . 3200 standing at a door 2 . 2002 . 3002 are to be arranged differently. The deposit is made with the aid of the parameterization program by the operator during commissioning.

The control device 100 causes an audible and visual alarm as a result of the operation of an emergency button 10 . 1010 . 2010 . 3010 even in the at least one other emergency button 10 . 1010 . 2010 . 3010 is issued, the same door lock 200 . 1200 . 2200 . 3200 like the pressed emergency button 10 . 1010 . 2010 . 3010 assigned. Is in the embodiment of 4 and 5 z. B. the emergency button 10 operated, so causes the control device 100 through communication with the electronics unit 24 the emergency button 1010 that too the audible alarm 23 and the bulbs 41 the emergency button 1010 to emit an audible or visual alarm.

Will after pressing an emergency button 10 . 1010 . 2010 . 3010 Delayed causes a release, so causes the control device 100 in that the first delay time period with which the unlocking is initiated also in the at least one further emergency button 10 . 1010 . 2010 . 3010 is shown, the same door lock 200 . 1200 . 2200 . 3200 like the pressed emergency button 10 . 1010 . 2010 . 3010 assigned. For this purpose, the control device communicates 100 with the electronics unit 24 the at least one other emergency button 1010 . 2010 . 3010 or controls the bulbs 41 the emergency button 10 in which the control device 100 is integrated.

The control device 100 can the non-safety-related assignment for selective communication, eg. B. the assignment of an access control system to a door lock 200 . 1200 . 2200 . 3200 using a bus address. Here, the participants of the first bus system 400 one setting device each for manual setting of a bus address. The adjustment device may include DIP switches. At least the participants of the first bus system 400 that have the same setting on the adjuster are automatically assigned to each other. Subscribers of the first bus system can assign subscribers with the same setting to different bus addresses 400 different key figures from which different bus addresses are configured with the aid of the setting made. The bus address detected with the help of the setting is for the emergency buttons 10 . 1010 . 2010 . 3010 and for the door locks 200 . 1200 . 2200 . 3200 just one more bus address, which is the emergency button 10 . 1010 . 2010 . 3010 and the door locks 200 . 1200 . 2200 . 3200 next to the bus address used in safety-related communication.

Has already been a door lock 200 . 1200 . 2200 . 3200 unlocked, so the control device 100 a release of another door lock 200 . 1200 . 2200 . 3200 prevent until there is a condition, unless there is a danger. If the condition is fulfilled, causes the control device 100 the unlocking of the other door lock 200 . 1200 . 2200 . 3200 , In this way, the control device 100 with several door locks 200 . 1200 . 2200 . 3200 communicate so that a lock is formed. For example, the door 2002 at an entrance to a room and the door 3002 be arranged at an exit of the same room. The control device 100 may be in the presence of a positive authentication signal for the door lock 2200 a release of the door lock 2200 cause. Even if a positive authentication signal for the door lock 3200 the control device 100 is present, the control device 100 until the presence of a condition unlocking the door lock 3200 prevent. If the condition is present, then the control device causes 100 a release of the door lock 3200 , The condition may be z. B. to a lock-time interval or the achievement of a measured variable, such as room temperature, humidity, air purity or number of people in the room act. The control device 100 For this purpose, it can be connected or connectable to a measuring device. The condition may be closing the first opened door 2002 What is covered by the door condition monitoring devices 204 . 206 is measurable. The condition and the door locks involved in the lock 2200 . 3200 can in the control device 100 be deposited. The deposit can be made by the operator using the parameterization program.

In 6 is a variant of the in the 4 and 5 shown section of the security system 1 shown. Here is the control device 100 separate from the emergency buttons 10 . 1010 . 2010 . 3010 and the door locks 200 . 1200 . 2200 . 3200 educated. The first bus system 400 connects the control device 100 with the door locks 200 . 1200 . 2200 . 3200 and the emergency buttons 10 . 1010 . 2010 . 3010 , The control device 100 of the 6 corresponds in structure to the control device 100 of the 3 , The emergency button 10 of the 6 corresponds in construction to the emergency button 10 of the 3 , Incidentally, the structure and the functionalities previously agreed 5 described, the structure and the functionalities of the security system 1 of the 6 ,

Characterized in that in the embodiments of 4 to 6 the door locks 200 . 1200 . 2200 . 3200 , the emergency button 10 . 1010 . 2010 . 3010 and possibly the control device 100 as a participant of a single first bus system 400 are only the cables of the bus system 400 necessary so that the participants can communicate with each other. Thus, the security system points 1 only a few cables up.

The bus system 400 may comprise at least two cables for communication and at least two cables for the power supply. In particular, the bus system 400 exactly two cables for communication and two cables for power supply. In each of the embodiments of the security system according to the invention 1 is a power supply connected to a power grid at any point in the bus system 400 integrated. Thus, the power supply as an independent component of the security system 1 outside the emergency button 10 or the emergency button 10 . 1010 . 2010 . 3010 and the door lock 200 or the door locks 200 . 1200 . 2200 . 3200 be provided. This is the security system 1 flexible in space.

Are as in the third and fourth embodiments, several emergency buttons 10 . 1010 . 2010 . 3010 available and is one of the emergency buttons 10 . 1010 . 2010 . 3010 has been actuated, so electronically by the electronic detection only prevents the operated emergency button 10 . 1010 . 2010 . 3010 associated door locks 200 . 1200 . 2200 . 3200 be locked. The achievement of the cancellation condition allows the locking of the operated emergency button 10 . 1010 . 2010 . 3010 assigned door lock (s) 200 . 1200 . 2200 . 3200 , To achieve the cancellation condition is the overlapping operation of the actuator 11 that emergency button 10 . 1010 . 2010 . 3010 which was previously operated, and the authentication at the operated emergency button 10 . 1010 . 2010 . 3010 assigned key switch 500 . 1500 . 2500 . 3500 necessary. At least this course of action is for the one pressed emergency button 10 . 1010 . 2010 . 3010 assigned door lock 200 . 1200 . 2200 . 3200 necessary, at least one of the door condition monitoring devices 204 . 206 has detected that the door 2 or one of the doors 3 . 4 after pressing the emergency button 10 was opened.

Have the door condition monitoring devices 204 . 206 the pressed emergency button 10 . 1010 . 2010 . 3010 associated door locks 200 . 1200 . 2200 . 3200 that detects the door 2 after pressing the emergency button 10 . 1010 . 2010 . 3010 has remained permanently closed, the cancellation condition can be achieved by expiration of the predetermined time interval. Thus, the cancellation condition z. B. after 60 Seconds after last pressing the emergency button 10 be reached. The admissibility of whether a lock after the lapse of the predetermined time interval with the door closed 2 . 2002 . 3002 It should be possible for every door lock 200 . 1200 . 2200 . 3200 or for groups of door locks 200 . 1200 . 2200 . 3200 , In particular for door locks, which are intended to be arranged on the same door, be individually adjustable and storable. The deposit can z. B. in the emergency rooms 10 . 1010 . 2010 . 3010 respectively. Likewise, for every door lock 200 . 1200 . 2200 . 3200 or for groups of door locks 200 . 1200 . 2200 . 3200 , Especially for door locks, which are intended to be arranged on the same door, the length of the predetermined time interval to be individually adjustable stored. This can be a minimum length, z. B. 60 s, be predetermined for the predetermined time interval. The deposit is made by the parameterization program.

In 7 is a fifth embodiment of the security system according to the invention 1 shown. The fifth embodiment includes the security system 1 according to the first embodiment of the 1 and 2 , That is, the emergency button 10 that the control device 100 includes is via the bus system 400 with the door lock 200 connected. The key switch 500 is about a connection 402 with the emergency button 10 connected or connectable. In the fifth embodiment are compared to the first embodiment, further components 301 . 510 intended. The central escape route control 300 already part of the embodiments of the 1 and 2 is, is shown explicitly.

The security system 1 includes the central escape route control 300 , The central escape route control 300 is intended to be away from the door 2 to be arranged. So can the central escape route control 300 z. B. together with a watch device 301 , which may be designed as a monitor or personal computer, and / or a multi-door display device 350 (S. 10 ) to be arranged in a guardroom. The watch device 301 is optional part of the security system according to the invention 1 , Alternatively, the watch device 301 to the security system according to the invention 1 be connectable.

The central escape route control 300 is modular. An emergency module 310 includes a first mounting plate 311 , The first mounting plate 311 takes a central emergency button 302 and an identification device designed by way of example as a key switch 312 on. By means of the first mounting plate 311 are the central emergency button 302 and the identification device 312 mechanically rigidly connected. The central emergency button 302 serves as a result of pressing the central emergency button 302 the door lock 200 is unlocked. Thus, by the central emergency button 302 away from the door 2 the door lock 200 be unlocked. The unlocking as a result of pressing the central emergency button 302 takes place with a one-fault-security. The operation of the central emergency button 302 is thus suitable for hazardous situations.

A deactivation module 320 comprises a first, designed as a key switch operating element 322 and a second, designed as a button control 323 , The first control 322 is used to disable the emergency button 10 , This is achieved by an actuation of the first operating element 322 the emergency button 10 converted into a deactivated state. Is the emergency button 10 in a deactivated state, so is omitted as a result of pressing the emergency button 10 a release of the door lock 200 , The second control 323 is used to activate the emergency button 10 , Is the emergency button 10 in the deactivated state and becomes the second operating element 323 pressed, then becomes the emergency button 10 converted into an activated state. In the activated state of the emergency button 10 causes the emergency button 10 a release of the door lock 200 when the emergency button 10 was pressed. The deactivation module comprises a second mounting plate 321 , The second mounting plate 321 serves to receive the first and the second control element 322 . 323 , The second mounting plate 321 connects the first and the second control element 322 . 323 mechanically rigid with each other.

A delay module 330 includes a third mounting plate 331 , The third mounting plate 331 takes a delay element 332 on. The delay element 332 is exemplified as a key switch. The delay element 332 serves to unlock the door lock within the first delay period 200 to delay further. The delay module 330 includes a termination element 333 , which is designed as a button. The terminator 333 is on the third mounting plate 331 attached. The terminator 333 is by means of the third mounting plate 331 mechanically rigid with the delay element 332 connected. By pressing the termination element 333 may delay the unlocking of the door lock 200 to be ended.

The central escape route control 300 includes a unilaterally open escape route control housing 340 in which the emergency module 310 , the deactivation module 320 and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central escape route security 300 , In the escape route control housing 340 can also, if available, the multi-door indicator 350 be arranged.

The escape route control housing 340 can the emergency module 310 , the deactivation module 320 and the delay module 330 mechanically fasten. The emergency module 310 , the deactivation module 320 and the delay module 330 are each individually on the escape route control housing 340 fastened, in particular screwed. For attachment to the escape route control housing 340 serve the first mounting plate 311 for the emergency module 310 , the second mounting plate 321 for the deactivation module 320 and / or the third mounting plate 331 for the delay module 330 , The escape route control housing 340 and the modules 310 . 320 . 330 are designed to have different sequences in which the modules 310 . 320 . 330 can be arranged side by side, are possible. So z. B. in a central escape route, not shown 300 z. B. the emergency module 310 between the deactivation module 320 and the delay module 330 be arranged. In another, not shown, exemplary central escape route control 300 can left a clearance, delay module 330 in the middle and the emergency module 310 be arranged on the right. The free space is created by the absence of the deactivation module 320 and is hidden by a plate. The escape route control housing 340 can rails for inserting the modules 310 . 320 . 330 exhibit. The escape route control housing 340 can attachment options, eg. B. perforated strips or slots, for variable attachment of the module 310 . 320 . 330 exhibit.

On the first mounting plate 311 , on the second mounting plate 321 and on the third mounting plate 331 is in each case a purely schematically illustrated display area 314 . 324 respectively. 334 intended. There are icons on the display area that indicate the function of the modules 310 . 320 . 330 explain. In addition, optical lights can be used to indicate states of the security system 1 in the ad areas 314 . 324 . 334 be provided.

In the embodiment of 7 includes the security system 1 also an audio and video module 510 , The audio and video module 510 is to be placed near the door 2 passing through the door lock 200 can be locked provided. Is the audio and video module 510 unlocked, so an operator in the guardroom with the user in front of the door 2 speak and the room near the door 2 members.

As in 8th shown, is the central emergency button 302 similar to the emergency button 10 built up. So includes the central emergency button 302 an emergency button electronics unit 308 , The emergency button electronics unit 308 includes a first emergency processing unit 303 , a second emergency processing unit 304 and a third emergency processing unit 305 , The first, second and third emergency processing units 303 . 304 . 305 are each designed as a microprocessor or microcontroller. The first and second emergency processing units 303 . 304 have a non-volatile memory. The third emergency processing unit 305 has nonvolatile memory and / or has access to nonvolatile memory. The central emergency button 302 is actuated by an emergency button actuator 306 is pressed. This will cause an emergency button switch 307 actuated. As a result, a first and a second signal are generated. For this purpose, a first and a second circuit (not shown) are opened. A signal on the opening of the first circuit is from the first emergency processing unit 303 detected. A signal on the opening of the second circuit is from the second emergency processing unit 304 detected.

The central emergency button 302 is with a second bus system 401 connected. As in 9 is shown, the control device 100 also with the second bus system 401 connected. In the second bus system 401 it is a different type of bus system than the first bus system 400 , For example, the second bus system 401 as a LON or LAN bus and the first bus system 400 be designed as a CAN or DCW bus.

In 9 includes the emergency button 10 the control device 100 , The emergency button 10 and the door lock 200 , in the 9 are shown correspond to the emergency button 10 and the door lock 200 of the 2 ,

In an alternative, not shown, are the control device 100 , the emergency button 10 and the door lock 200 according to the 3 educated. In this alternative, not shown, are the control device 100 , the emergency button 10 and the door lock 200 over the first bus system 400 connected to each other, wherein the control device 100 with the second bus system 401 connected is.

The control device 100 receives messages from the central escape route security 300 over the second bus system 401 , The control device 100 forwards the messages via the first bus system to other users of the first bus system 400 further. In particular, the message may contain information concerning an actuation of the central emergency button 302 , the key switch 312 , the first control element 322 , the second operating element 323 , the delay element 332 and / or the termination element 333 or a control command resulting from an operation of one of the aforementioned elements 302 . 312 . 322 . 323 . 332 . 333 be. Is the control device 100 in the emergency button 10 integrated, so eliminates forwarding to those emergency button 10 in which the control device 100 is integrated. For example, conducts according to the 9 the control device 100 the message to the door lock 200 further. Are control device 100 and the emergency button 10 over the first bus system 400 connected, so the control device conducts 100 the message to the emergency button 10 and / or the door lock 200 further. The control device 100 the message matches the format of the first bus system 400 at. Security-relevant messages are otherwise left untouched.

Is the central emergency button 302 have been actuated, then cause the first emergency processing unit 303 and redundantly, the second emergency processing unit 304 a release of the door lock 200 , Here, the central emergency button communicates 302 via the control device 100 with the door lock control 201 , in particular the first and the second processing means 202 . 203 , The first and the second processing means 202 . 203 then control the locking mechanism 205 at. Previously, the first and the second processing unit 103 . 104 forwarded the message. Here, the control device 100 the content of the message is left untouched.

The central emergency button 302 has an input for receiving a fire alarm signal. If the fire alarm signal is received, then the central emergency button causes 302 a release of the door lock 200 , For this purpose, the first and the second emergency processing unit communicate 303 . 304 via the control device 100 namely the first and the second processing unit 103 . 104 , with the door lock control 201 , Like previously described.

A signal via an actuation of the key switch 312 of the first module 310 is from the emergency button electronics unit 308 , in particular the third emergency processing unit 305 , received. The emergency button electronics unit 308 sends a message regarding the operation of the key switch 312 over the second bus system 401 to the control device 100 , The control device 100 directs the message to the first bus system 400 further.

The emergency button actuator 306 is non-latching. The emergency button actuator 306 is identical to the actuator 11 the emergency button 10 trained (s. 13 to 15 ). This becomes the emergency operating element 306 on actuation from an initial position to an actuated position (analog 11 ). Immediately after the operation, the emergency operating member moves 306 back to the starting position by the force of a spring formed as a return means back (analog 11 ). The operation of the emergency operating element 306 is translational. Is due to the operation of the central emergency button 302 the door lock 200 transferred to the unlocked state, so prevents the electronic device 207 by the electronic statement that without the presence of a cancellation condition the door lock 200 can be converted back into the locked state. The cancellation condition after pressing the central emergency button 302 can by pressing the key switch 312 be achieved. In particular, an actuation of the key switch 312 sufficient to achieve the cancellation condition.

Includes the security system 1 the central escape route control 300 , as a result of pressing the emergency button 10 the cancellation condition may be achievable in another manner: have the door condition monitors 204 . 206 that detects the door 2 after pressing the emergency button 10 has remained permanently closed, the cancellation condition may be canceled by elapse of a predetermined time interval and cancellation treatment at the central escape route control 300 be reached after the predetermined time interval. The suspension action may be authentication at the central escape route control 300 , in particular an actuation of the key switch 312 , correspond. By the Aufhebehandlung, z. B. the operation of the key switch 312 , a Aufhebbesignal is generated. The cancel signal is sent via the control device 100 to the door lock control 201 forwarded. An authentication at the key switch 500 and a suspension action at the emergency button 10 are not necessary in this case.

The door lock control 201 checks whether reaching the cancellation condition by elapse of the predetermined time interval and the authentication at the central escape route control 300 when the door is closed 2 is allowed before the door lock control 201 the locking mechanism 205 activates for locking. This allows an operator to commission the security system 1 deposit whether a lapse of the predetermined time interval without opening the door 2 and the additional operation of the key switch 312 as a cancellation condition is allowed and thus to a re-locking of the door 2 leads. A check of admissibility, a lapse of the predetermined time interval, an operation of the key switch 312 after the predetermined time interval and the fact that neither of the first door condition monitoring device during the predetermined time interval 204 still from the second door condition monitoring device 206 a signal has been sent about opening the door is sufficient to achieve the cancellation condition.

This is a variant for achieving a cancellation condition, which belongs to the 1 and 2 has been described. This variant can z. B. be selected by the operator, if only the lapse of the predetermined time interval with the door closed 2 the operator does not seem confident enough. The operator can select and save this variant by means of the parameterization program.

In particular, if the operator has selected this option, the elapse of the predetermined time interval will be with the door closed 2 will be at the central escape route control 300 visually displayed. In particular, the bulbs are used 313 indicating that the predetermined time interval has elapsed without a signal on the opening of the door 2 was received within the predetermined time interval. The visual display tells the operator that through authentication at the central escape route control 300 the door 2 can be locked.

Have the door condition monitoring devices 204 . 206 no signal is sent about opening the door during the presence of a fire alarm signal, so after completion of the fire alarm signal lock the door lock 200 also by the same operation of the key switch 312 be achieved. Also the possibility by the operation of the key switch 312 after completion of the fire alarm signal locking the door lock 200 to achieve, is optically through the bulbs 313 displayed.

The control device 100 conducts messages from the emergency button 10 and / or the door lock 200 over the second bus system 401 further. In this case, the control device fits 100 the message the format of the second bus system 401 at. The control device 100 sends information about the state of the emergency button 10 and / or the door lock 200 over the second bus system 401 ,

For example, the central escape route control 300 and the multi-door indicator 350 with a third bus system 403 be connected (s. 10 ). Preferably, the central emergency button 302 , particularly preferably the emergency button electronics unit 308 , with the third bus system 403 be connected (s. 8th ). The multi-door indicator 350 can lock and unlock the door lock 200 visually display. In addition, with the help of the multi-door indicator 350 one of the door locks 200 . 200' . 1200' . 2200' of the security system 1 (S. 10 ) are unlocked. The unlocking with the help of the multi-door indicator 350 is not one-error-safe. In the third bus system 403 It may be the same type of bus system as the first bus system 400 act, z. B. to a CAN or DCW bus.

The control device 100 conducts over the second bus system 401 to the central escape route control 300 continue if the emergency button 10 a first delay period waits before the emergency button 10 the door lock control 201 causes the locking mechanism 205 to trigger for unlocking.

The first delay time period is at the central escape route control 300 visually displayed. This is the central emergency button 302 according to the emergency button 10 built, as befits the 13 . 16 . 17 is described. For optical representation of the first delay time period, the lighting means 313 of the central emergency button 302 from the emergency button electronics unit 308 driven. As the first delay period progresses, fewer bulbs illuminate 313 in the same color. For example, fewer bulbs 313 in a first color and increasingly many bulbs 313 shine in a second color. The bulbs 41 the emergency button 10 are driven identically to optically represent the first delay time period.

During the first delay period, z. B. 8 s, the operator can the delay element 332 actuate. For this purpose, the operator turns a key in the key switch, as a delay element 332 serves. An actuation of the delay element 332 is from the emergency button electronics unit 308 , in particular the third emergency processing unit 305 , detected. A corresponding message is sent via the second bus system 401 and possibly the first bus system 400 Posted. The emergency button 10 receives the message. As a result of the actuation of the delay element 332 the emergency button stops 10 the first delay period and starts with a second delay period. The second delay period, e.g. B. 180 s, is longer than the first delay period. At the end of the second delay period, the emergency button causes 10 the unlocking of the door lock 200 , The second delay time is in the emergency button 10 determined by means of the same timer used to determine the first delay time period. During the second delay period, the key of the delay element must be 322 do not stay turned. Rather, a single turn of the key is sufficient to start the second delay period.

The second delay time period is at the central escape route control 300 and at the emergency button 10 visually displayed. The visual representation at the central escape route control 300 is similar to the visual display on the emergency button 10 , As the second delay period progresses, fewer bulbs illuminate 41 . 313 in the same color. For example, fewer bulbs 41 . 313 in a first color and increasingly many bulbs 41 . 313 shine in a second color. To illustrate that the second delay period lasts long, a time lapse pattern may be repetitively added within the second delay time period, e.g. B. a circumferential color point or a circumferential color window (see description to 16 . 17 ) are visually displayed.

During the first or the second delay period, the termination element 333 actuated, then detects the emergency electronics unit 308 , in particular the third emergency processing unit 305 , the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 over the second bus system 401 , This causes the emergency electronics unit 308 the emergency button 10 not to delay the release further, but immediately unlocking the Türverrieglung 200 to induce. The terminator 333 is formed non-latching. One-time operation of the termination element 333 is sufficient to stop the delay of starting the unlocking.

The emergency button 10 can by an operation of the first operating element 322 in the deactivated state to be transferred. For this purpose, the operator turns a key in the key switch, the first control element 322 serves. An actuation of the first operating element 322 is from the emergency button electronics unit 308 detected. Upon actuation of the first operating element 322 A first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is initiated by the first emergency processing unit 303 detected. The opening or closing of the second deactivation circuit is performed by the second emergency processing unit 304 detected. The first and second emergency processing units 303 . 304 communicate via the second bus system 401 with the emergency button 10 , Located between the emergency button 10 and the central emergency button 302 the first bus system 400 so the control device conducts 100 the message of the first and second emergency processing units 303 . 304 further. When forwarding, the format is changed, but the content remains unchanged.

In the deactivated state of the emergency button 10 is the operation of the emergency button 10 ineffective on the door lock 200 ,

The activated state and the deactivated state are in the emergency button 10 deposited electronically. Thereby, that the activated state and the deactivated state in the emergency button 10 stored, the key must be in the first control 322 not stay turned during the disabled state. Rather, a single turn of the key is sufficient to the emergency button 10 to disable.

The deactivation remains until the second control element 323 is pressed. The actuation of the second operating element 323 is from the emergency button electronics unit 308 , in particular the third emergency processing unit 305 , detectable. The emergency electronics unit 308 sends a message regarding the operation of the second control 323 over the second bus system 401 and optionally via the first bus system 400 to the emergency button 10 , whereupon the emergency button 10 is transferred to the activated state. The second control 323 is not restraining. By having the enabled and disabled states in the emergency button 10 is stored, reaches a single actuation of the second control element 323 to the emergency button 10 to transfer to the activated state.

The central escape route control 300 includes a bus 341 over which the emergency electronics unit 308 , in particular the third emergency processing unit 305 , Signals of the second control element 323 , the delay element 332 and the termination element 333 can capture. The emergency electronics unit 308 serves as the intelligence of the entire central escape route control 300 , Only the emergency electronics unit 308 includes microprocessors. The deactivation module 320 and / or the delay module 322 can be configured processor-free. The bus 341 can be configured as an I ² C bus.

In order to deposit the activated and the deactivated state, in the first emergency button processing unit 20 and redundant in the second emergency button processing unit 21 , in particular in the non-volatile memories, a second variable may be stored. The second variable can be binary. Is the emergency button 10 in the deactivated state, the second variable is set to a deactivation value. Is the emergency button 10 in the activated state, the second variable is set to an activation value. As a result of an actuation of the first operating element 322 the second variable is set to the deactivation value. As a result of an actuation of the second operating element 323 the second variable is set to the activation value. Before the emergency button 10 the unlocking of the door lock 200 causes the emergency button checks 10 the value of the second variable. The emergency button detects that the emergency button 10 is deactivated, the communication of the emergency button is omitted 10 with the door lock control 201 to unlock 200 to induce.

The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for errors. If an error is detected, a message is sent via the second bus system 401 Posted. The emergency button 10 receives the message and then transfers itself to the activated state if the emergency button 10 is in the disabled state. For this the emergency button changes 10 the value of the second variable to the activation value.

The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly, in particular at regular intervals, send a sign of life signal via the second bus system 401 , The emergency button 10 receives the life sign signals. If a sign of life signal remains off once or several times, then the emergency button is transferred 10 in the activated state, if the emergency button 10 is in the disabled state.

Receives the security system 1 a fire alarm signal, so transfers the emergency button 10 in the activated state, if the emergency button 10 is in the disabled state.

The operation of the emergency button 10 in the deactivated state is at the central escape route control 300 , at the watch device 301 and/ or at the multi-door indicator 350 displayed. If there really is a danger, then the emergency button 10 be transferred by the operator in the activated state by the operator, the second control element 323 operated, or it can be controlled by the operator directly the door lock for unlocking. For this purpose, the operator can use the central emergency button 302 actuate. Whether a hazard exists, the operator z. B. via the audio and video module 510 perceive. As a result, increased security is achieved.

The deactivation can z. B. be made at night in a department store. Furthermore, it is conceivable to deactivate the emergency button 10 in a building where people with an impaired state of mind live. So can emergency button 10 can also be used on doors accessible to people with impaired mental state, eg On a psychiatry or dementia ward.

Will be in the disabled state of the emergency button 10 pressed and then the emergency button 10 converted into the activated state, which is carried out in the deactivated state pressing the emergency button 10 even after the transfer to the activated state not to unlock the door lock 200 , The operation of the emergency button in the deactivated state 10 remains ineffective. This is due, first, to the fact that the actuator 11 and the switch 63 are executed non-latching. The other was the operation of the emergency button 10 in the deactivated state not in the emergency button 10 saved. The door lock control 201 receives no message concerning the operation of the emergency button 10 in the deactivated state. The electronic detection was therefore not transferred to the operating state. This ensures that not immediately with the activation of the emergency button 10 the door lock 100 is unlocked, z. B. because long before the emergency button 10 was pressed. As a result, an increased building security is achieved.

In order to achieve a particularly high level of security, it can be provided that during the first and / or the second delay time period the audio and video module 510 is turned on. This switches the emergency button 10 the audio and video module 510 free at the beginning of the first and / or second delay period. Also will be the audio and video module 510 from the emergency button 10 unlocked when in the disabled state the emergency button 10 is pressed. The emergency button communicates with this 10 over the second bus system 401 and optionally via the first bus system 400 with the audio and video module 510 ,

It may be that the emergency button 10 only disables when the audio and video module 510 is unlockable. Is the audio and video module 510 Part of the security system according to the invention 1 , so deactivation can be omitted if the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module 510 is disturbed. This does not apply if the security system 1 no audio and video module 510 but one from the security system 1 separate monitoring system is provided in the building.

It may be that the emergency button 10 delays the cause of the unlocking only by the first and / or second delay time period when the audio and video module 510 is unlockable. Is the audio and video module 510 Part of the security system according to the invention 1 , so there may be a delay when the audio and video module 510 z. B. is not functional and / or the connection to the audio and video module is disturbed. This does not apply if the security system 1 no audio and video module 510 but one from the security system 1 separate monitoring system is provided in the building.

In 10 is another embodiment of a security system according to the invention 1 shown. As in the embodiment of 7 to 9 includes the security system 1 a central escape route control 300 according to the 7 and 8th is constructed. To the respective emergency buttons 10 . 10' . 1010 . 1010' . 2010 associated key switch 500 . 500 ' . 1500 . 1500' . 2500 are not shown for the sake of clarity. The central escape route control 300 is with the second bus system 401 connected. With the second bus system 401 are a first subsystem 5 and a second subsystem 6 connected. The two subsystem 5 . 6 each include a first bus system 400 . 400' , With the respective first bus system 400 . 400' are emergency buttons 10 . 1010 respectively. 10' . 1010' . 2010 ' and door locks 200 respectively. 200' . 1200' . 2200' connected. At the first bus systems 400 . 400' it is the same bus system type, z. B. a CAN or a DCW bus. In the second bus system 401 it is another type of bus system, z. B. a LON or LAN bus.

The security system 1 includes the multi-door indicator 350 , The multi-door indicator 350 can z. B. visually indicate which door lock 200 respectively. 200' . 1200' . 2200' in the unlocked state and which door lock is in the unlocked state. With the help of the multi-door indicator 350 an operator can perform a non-safety-relevant locking and unlocking of individual door locks 200 respectively. 200' . 1200' . 2200' of the security system 1 make.

Every subsystem 5 . 6 includes only one control device 100 . 100' , In each case the control device 100 . 100' of the respective subsystem 5 . 6 is with the second bus system 401 connected. The control device 100 of the first subsystem 5 is with the emergency buttons 10 . 1010 and the door lock 200 of the first subsystem 5 over the first bus system 400 connected. The control device 100' of the second subsystem 6 is on the other hand in an emergency button 10' of the second subsystem 6 integrated and with the other emergency buttons 1010' . 2010 ' and the door locks 200' . 1200' . 2200' the further first bus system 400' connected.

In the subsystem 5 are a first emergency button 10 and a second emergency button 1010 intended. Will be one of the emergency buttons 10 . 1010 pressed, then the pressed emergency button causes 10 . 1010 one unlocking the door lock 200 ,

In the subsystem 6 are a first emergency button 10' , a second emergency button 1010' and a third emergency button 2010 ' intended. The emergency buttons 10' . 1010' . 2010 ' selectively trigger a release of the door locks 200' . 1200' . 2200' of the second subsystem 6 , For example, when pressing the first emergency button 10' only one unlocking of the first door lock 200' causes. Accordingly, upon actuation of the second emergency button 1010' only one unlocking of the second door lock 1200' and by pressing the third emergency button 2010 ' only one unlocking of the third door lock 2200' causes.

Various deviations are conceivable. Thus, a security system according to the invention 1 z. Without the first or the second subsystem 5 . 6 be designed. As the only or additional subsystem z. B. one of the in the 1 to 6 described safety systems according to the invention 1 be provided. The training and functions of emergency buttons 10 . 10' . 1010 . 1010' . 2010 ' and the door locks 200 . 200' . 1200' . 2200' are formed according to the preceding embodiments, as far as not described in addition or deviating.

In each of the door locks 200 . 200' . 1200' . 2200' of the security system 1 is stored, whether by pressing a central emergency button 302 a release of the respective door lock 200 . 200' . 1200' . 2200' he follows. So z. B. the door locks 200 . 200' . 2200' a release as a result of pressing the central emergency button 302 allow the door lock 1200' not. Will the central emergency button 302 operated, so control the door lock controls 201 the door locks 200 . 200' . 2200' the respective locking mechanism 205 for unlocking. On the other hand, such a control is omitted in the door lock 1200' ,

Will the central emergency button 302 operated, get the control devices 100 . 100' a corresponding message from the central emergency button 302 over the second bus system 401 and forward the message to all door locks 200 respectively. 200' . 1200' . 2200' of the respective first bus system 400 . 400' further. The door locks 200 . 200' . 1200' . 2200' decide on the basis of the deposit, the admission of a release as a result of pressing the central emergency button 302 includes whether the respective door lock control 201 the door locks 200 . 200' . 1200' . 2200' the respective locking mechanism 205 to unlock or not.

The deposit, whether the door lock 200 . 200' . 1200' . 2200' as a result of pressing the central emergency button 302 is unlocked, takes place at commissioning of the safety system 1 by the operator. The deposit is made by the parameterization program.

In each of the emergency buttons 10 . 1010 . 10'. 1010' . 2010 ' is deposited, whether on actuation of the first operating element 322 a transfer to the deactivated state for the respective emergency button 10 . 1010 . 10'. 1010' . 2010 ' is allowed or not. This results in a selective deactivation by the operation of the single first control element 322 of the security system 1 , So z. As the emergency button 10 . 10' . 2010 ' in consequence of an actuation of the first operating element 322 be converted into the disabled state, the emergency button 1010 . 1010' not.

Will be the first control 322 operated, get the control devices 100 . 100' a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10 . 1010 . 1010' . 2010 ' of the respective first bus system 400 . 400' that is not the control device 100 include, continue. The emergency buttons 10 . 1010 . 10' . 1010' . 2010 ' of the security system 1 decide on the basis of the deposit on the authorization for deactivation, whether the respective emergency button 10 . 1010 . 10' . 1010' . 2010 ' himself as a result of the operation of the first control element 322 converted to the disabled state or not.

When depositing, whether a deactivation of the emergency button 10 . 1010 . 10' . 1010' . 2010 ' It should be a third variable. The third variable may be binary. The third variable is in the nonvolatile storage of the respective first and second emergency button processing units 20 . 21 every emergency button 10 . 1010 . 10' . 1010' . 2010 ' saved. Is the Deactivation for the respective emergency button 10 . 1010 . 10' . 1010' . 2010 ' allowed, the third variable takes a first value. Is the deactivation for the respective emergency button 10 . 1010 . 10' . 1010' . 2010 ' prohibited, the third variable takes a second value. The emergency button 10 . 1010 . 10' . 1010' . 2010 ' checks the value of the third variable before the emergency button 10 . 1010 . 10' . 1010' . 2010 ' it deactivates and deactivates only if the third variable has the first value.

The deposit, whether the emergency button 10 . 1010 . 10' . 1010' . 2010 ' should be deactivated, takes place at startup of the security system 1 by the operator. This is stored with the aid of a parameterization program.

In each of the emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' is deposited, whether on actuation of the delay element 332 the respective emergency button 10 . 1010 . 10' , 1010' . 2010 ' the unlocking of the emergency button 10 . 1010 . 10' , 1010' . 2010 ' associated door locks 200 . 200' . 1200' . 2200' delayed by a second delay period or not. The second delay time is for the respective emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' adjustable for different lengths and in the security system 1 especially in the emergency rooms 10 . 1010 . 10' . 1010' . 2010 ' , deposited. Alternatively, the admission of the delay by the second delay time period and, if necessary, the length of the second delay time period can only be used for groups of emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' that a door lock 200 . 200' . 1200' . 2200' or a door 2 . 2002 . 3002 are assigned to be individually adjustable. The setting and the deposit are made by the operator using the parameterization program.

So z. As the emergency button 10 . 2010 ' in consequence of an actuation of the delay element 332 the unlocking of the door locks 200 respectively. 2200' delay further, the emergency button 1010 . 10' . 1010' not. The length of the second delay time for the emergency button 10 is different from the length of the second delay period for the emergency button 2010 ' selected. Will the emergency button 10 pressed and is within the first delay time period for the emergency button 10 is deposited, the delay element 332 pressed, so delayed the emergency button 10 from the actuation of the delay element 332 the unlocking by the second delay period in the emergency button 10 is deposited. Will the emergency button 2010 ' pressed and is within the first delay time period for the emergency button 2010 ' is deposited, the delay element 332 pressed, so delayed the emergency button 2010 ' from the actuation of the delay element 332 the release by the second delay time in the emergency button 2010 ' is deposited and distinguished from the second delay time for the emergency button 10 different. Will the emergency button 1010 pressed, so delayed the emergency button 1010 the release by the first delay time for the emergency button 1010 is deposited. Will during the first delay period of the emergency button 1010 , the delay element 332 pressed, the unlocking is not delayed by a second delay time, as this delay for the emergency button 1010 is not allowed, but the emergency button 1010 becomes after the first delay time immediately unlocking the door lock 200 cause. The emergency buttons 10' . 1010' delay the unlocking of the associated door lock 200' respectively. 1200' not at all. At the emergency rooms 10' . 1010' neither a first delay period nor a second delay period is allowed. Instead of a non-admission of a delay by the first and / or the second delay time period, a time duration of 0 s can also be stored. An actuation of the termination element 333 terminates any delay in unlocking.

Will the delay element 332 operated, get the control devices 100 . 100' a corresponding message via the second bus system 401 and forward the message to the emergency buttons 10 . 1010 . 1010' . 2010 ' of the respective first bus system 400 . 400' that is not the control device 100 include, continue. The emergency buttons 10 . 1010 . 10' , 1010' . 2010 ' of the security system 1 decide on the basis of the deposit, how to proceed.

The deposit, whether the emergency button 10 . 1010 . 10' . 1010' . 2010 ' the delay allows for the second delay time period and, if so, the deposit of the length of the second delay time period, takes place at startup of the safety system 1 , The deposits are determined by the operator using the parameterization program. The first and / or the second delay time period can only be selected up to a maximum, permanently predetermined time duration.

Likewise, with the aid of the parameterization program, the operator can selectively store for which emergency button 10 . 1010 . 1010' . 2010 ' which cancellation condition is allowed. The cancellation condition for the on-site termination is always allowed. For every emergency button 10 . 1010 . 1010' . 2010 ' but may selectively achieve the cancellation condition by elapse of the predetermined time interval or the achievement of the cancellation condition by elapse of the predetermined time interval and subsequent operation of the identification device 312 when the door is closed 2 admitted or not.

The deposit, whether the emergency button 10 upon actuation of the first operating element 322 can be deactivated, whether the emergency button 10 upon actuation of the delay element 332 the delay is to delay by a second delay period, the length of the first and the second delay period, the deposit of the cancellation condition and / or the deposit, whether the door lock 200 upon actuation of the central emergency button 302 can also be unlocked for the security system 1 according to the embodiment of the 7 to 9 be made.

Notwithstanding and not shown by the 7 to 10 can also use several central escape route controls 300 . 300' with the second bus system 401 be connected. For example, in a psychiatry a central escape route control 300 be provided for arrangement in a guard room and another central escape route control 300' be provided for arrangement in a nurse's room.

In the respective door locks 200 . 200' . 1200' . 2200' can be stored in each case with the help of the parameterization program, as a result of an operation which of the central emergency buttons 302 . 302' a release should take place. For this purpose, a list is stored in the door locks. In the respective emergency buttons 10 . 10' . 1010 . 1010' . 2010 ' can be stored in each case with the help of the parameterization program, as a result of an operation which of the first control elements 322 . 322' a deactivation is allowed. Deviating from the third variable is a list in the emergency buttons 10 . 10' . 1010 . 1010' . 2010 ' deposited.

The first to fourth embodiments of the security system according to the invention 1 also has a second bus system 401 and a central escape route control 300 on, even if the second bus system 401 and the central escape route control are not shown. Here are each the control device 100 and the central escape route control 300 with the second bus system 401 connected. The central escape route control can, as in the 7 and 8th be formed represented. In addition, embodiments of the safety system according to the invention 1 conceivable in which the first to fourth embodiments additionally the missing components 301 . 510 at least partially. Is the security system 1 Designed for multiple doors, each door can have an audio and video module 510 be assigned. The emergency buttons 1010 . 2010 . 3010 that is not the control device 100 include, and the door locks 200 . 1200 . 2200 . 3200 are not connected to the second bus system 401 connected.

In the 1 to 10 are the door locks 200 . 200' . 1200 . 1200' . 2200 . 2200' . 3200 Part of the security system according to the invention 1 , It is conceivable, however, that in each case only the door lock controls 201 Part of the security system according to the invention 1 are. In this case, the door lock controls 201 each with the locking mechanism 205 and possibly the door condition monitoring devices 204 . 206 connectable. Unlocking the door lock 200 does not find in the security system in this case 1 instead, however, is part of the security system 1 in that the door lock control 201 the locking mechanism 205 controls, ie the door lock control 201 Switches the electric current for the locking mechanism 205 on or off. In this case, instead of the terms "lock or unlock the door lock" each "activation of the locking mechanism for locking or unlocking" are used.

In the 11 to 13 is an emergency button 10 shown. The in 11 emergency button shown 10 is as emergency button 10 . 10' . 1010 . 1010' . 2010 . 3010 in one of the security systems according to the invention 1 of the 1 to 10 can be used or used.

The emergency button 10 includes the actuator 11 , The actuator 11 can be from the starting position 11.I that in the 11 is shown in the operating position 11.II move in 11 is indicated. In 12 is the actuator 11 also in the starting position 11.I ,

In the operating position 11.II becomes the switch 63 actuated. The desk 63 also changes from a first 63.I in a second position 63.II , as in 12 indicated.

After actuation, the actuator returns 11 immediately and without manual intervention in the starting position 11.I back. For this purpose, a return means designed as a spring is provided 12 in the emergency button 10 intended. Also the switch 63 returns to the first position immediately after actuation without manual intervention 63.I back.

The emergency button 10 includes at least a first board 60 , This makes it possible, compact and with a secure operation of the emergency button 10 embody.

The emergency button 10 points from a dome 32 a front surface 19 of the actuating element 11 in the installation direction a mounting height AH of less than 48 mm, preferably less than 45 mm, more preferably less than 43 mm.

The desk 63 is on the first board 60 attached. The first and the second circuit will be on the first board 60 by the operation of the switch 63 interrupted.

The emergency button 10 also includes a second board 61 , On the second board 61 are the first, second and third emergency button processing units 20 . 21 . 22 arranged. The arrangement of the first, the second and the third emergency button processing units 20 . 21 . 22 regardless of whether the first, the second and the third emergency button processing unit 20 . 21 . 22 as a processing unit 103 . 104 . 105 the control device 100 serve.

The opening of the first and second circuits is by the first and second emergency button processing unit, respectively 20 . 21 wirelessly detectable. These are the first and the second board 60 . 61 over plug 68 connected with each other.

The first and the second boards 60 . 61 are arranged at a fixed distance from each other. These are bolts 69 provided by screws 70 the first and the second board 60 . 61 attached to each other at a fixed distance from each other (s. 13 ). The first and the second boards 60 . 61 are arranged parallel to each other.

The emergency button 10 includes a mounting plate 62 , The mounting plate 62 is also at a fixed distance to the first and second boards 60 . 61 arranged. These are bolts 71 provided by screws 72 the mounting plate 62 with the first board 61 connect.

The mounting plate 62 serves for attachment to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. Extending from the mounting plate 62 in the installation direction extending part of the emergency button 10 is called a built-in part 73 designated. The built-in part 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, more preferably less than 29 mm. This provides enough space for cables in the flush-mounted box. The distance MP from a bottom of the mounting plate 62 up to a top of the second board 62 is less than 22 mm, preferably less than 20 mm, more preferably less than 17 mm. The mounting plate 62 can also serve for attachment to a cover element of a surface-mounted housing (not shown). The distances mentioned apply in particular to an emergency button, in which the Bluetooth module 64 notwithstanding the representation in the figures on an underside of the second board 61 is attached.

As described above, the repeal action is immediately at the emergency button 10 is carried out without a rotational movement of the actuating element 11 and the switch 63 executed. This makes it possible to use a switch 63 to use with a low height. So that's the switch 63 formed such that the switch 63 is rotation free. The desk 63 has a height SH of less than 20 mm, preferably less than 17 mm, more preferably less than 15 mm.

The nature of the cancellation act and the low height of the switch 63 contributes to the low installation height AH of the emergency button 10 at.

Also contributes to the low height AH emergency button 10 at that, the switch 63 Centric under the actuator 11 is arranged and the actuating element 11 eccentric in the emergency button 10 is guided.

As in the 14 and 15 shown, the actuating element 11 rod-shaped guide means 35 on. The guiding means 35 are in guide sleeves 65 guided. The guide sleeves 65 are with the mounting plate 62 connected. To achieve good guidance, one of the guide sleeves extends 65 through the first board 60 ,

The guiding means 35 are parallel to the switch 63 arranged. The guiding means 35 prevent rotational movement of the actuator 11 around an imaginary axis 701 in the direction of actuation 700 runs.

Through the in the guide sleeves 65 guided guide 35 is the actuator 11 only translationally movable.

The actuator 11 has an actuating means 36 on. As in the 12 and 15 shown, is the actuating means 36 formed in the shape of a circular cylinder. This ensures that always the actuating means 36 the switch 63 actuated. In particular, so are always at the same time a first and a second switching element 74 . 75 of the switch pressed (s. 13 ). By the first switching element 74 becomes the first circuit and the second switching element 75 the second circuit is opened.

The actuating means 36 is with a hollow interior 38 educated. In the switch 63 a light source (not shown) is arranged. The light emitted by the light source passes through the hollow interior 38 to the dome 32 the front surface 19 of the actuating element 11 directed where the light passes through the actuator 11 occurs. The dome 32 thus serves as Illuminierbereich 32 of the actuating element 11 ,

The actuator 11 can be an opaque base body 33 include. The main body 33 may be provided deviating from the representation in the figures with an opening. In the opening, an unillustrated translucent, in particular translucent insert can be arranged. The insert can be fixed in the opening, in particular pressed. This allows the actuator 11 be particularly easy to produce.

The front surface 19 is partially conical. The illuminator area 32 forms the top of the truncated cone. The illuminator area 32 protrudes against the direction of actuation 700 from a lid 14 the emergency button 10 out. This is the light that is the Illuminierbereich 32 leaves, sideways from the emergency button 10 clearly visible.

The return means 12 has a cavity 37 on. In the cavity 37 protrude the actuating means 36 of the actuating element 11 and the switch 36 with the first and the second switching element 74 . 75 , This results in a space-saving arrangement.

The Bluetooth module 64 is between the first and the second board 60 . 61 arranged. The Bluetooth module 64 is used for parameterization. Alternatively and not shown and space saving is the Bluetooth module 64 at one of the actuator 11 opposite side of the second board 61 attached. This allows the distance of the first and the second board 60 . 61 be further reduced.

A sabotage switch 66 is on the first board 60 arranged. Due to the low construction height is an actuating extension 67 the sabotage switch 66 through the mounting plate 62 passed. The actuating extension 67 lies directly on the lid 14 the emergency button 10 at.

Is the control device 100 in the emergency button 10 integrated, so despite the low height AH the emergency button 10 include the functions described above and thus be designed intelligently. The functions described above are implemented by means of a program code which is present in at least one of the processing units 103 . 104 . 105 deposited, executed.

The emergency button 10 has a covering means 13 on. The covering agent 13 is transparent and covers the front surface 19 of the actuating element 11 from. This prevents the covering 13 the immediate contact of the actuator 11 by a user. The covering agent 13 serves as a mental obstacle for the user.

The covering agent 13 remains when pressing the emergency button 10 destructively. The covering agent 13 moves when the emergency button is pressed 10 from a starting position 13.I in an operating position 13.II , Through the cover 13 becomes the actuator 11 only indirectly via the cover 13 operated by the user.

The covering agent 13 is indispensable in the emergency button 10 arranged. This ensures that a user the covering 13 can not abusively remove.

The covering agent 13 is fixed to the actuator 11 connected. For this purpose, the covering means 13 projections 27 on that in 13 are shown. As in the 13 . 14 and 15 shown, the actuating element 11 holes 28 on, through which the extensions 27 guided and cohesively with the actuator 11 are connected.

The actuator 11 has a flange-like section 31 on, on which the covering means 13 is attached. The flange-like section 31 shows the holes 28 on.

The flange-like section 31 serves as a stop of the actuator 11 in the direction of actuation 700 , The actuator 11 reaches the operating position 11.II if the flange-like section 31 on the mounting plate 62 or on the guide sleeves 65 is applied.

The flange-like section 31 serves as a stop of the actuator 11 against the actuation direction 700 , The actuator 11 reaches the starting position 11.I if the flange-like section 31 on a light guide 40 is applied. The light guide 40 holds the actuator 11 against the force of the return means 12 , For this purpose, the light guide 40 a contact surface 51 on.

The light guide 40 is on the mounting plate 62 attached. This leaves the actuator 11 against the force of the return means 12 kept even when the lid 14 Will get removed. The light guide 40 has a flange 52 on, with which the light guide 40 on the mounting plate 62 is attached (s. 17 ). The light guide 40 is through the same screws 72 on the mounting plate 62 fastened by the mounting plate 62 on the first board 60 is attached.

Alternatively and not shown, the covering means 13 be formed as an elastic film, which is the actuating element 11 spans.

Due to the fixed connection correspond to the distance of the operating position 11.II and the starting position 11.I and the distance of the operating position 13.II and the starting position 13.I each other. Immediately after the end of the operation and without manual intervention is the covering 13 in the starting position 13.I moved back. This purpose is the return means 12 , The return means 12 transfers the cover 13 indirectly via the actuator 11 in the starting position 13.I ,

The covering agent 13 and the actuator 11 each have a circular cross-section. The lid 14 has a circular recess 15 on. The covering agent 13 protrudes counter to the direction of actuation 700 through the recess 15 , Also protrudes the actuator 11 through the recess 15 ,

The recess 15 , the actuator 11 and the covering means 13 have a common imaginary axis 701 on. The recess 15 , the actuator 11 and the covering means 13 are arranged concentrically.

The covering agent 13 has an actuating surface 17 spaced apart from the front surface 19 of the actuating element 11 is. Also, the cover means 13 a side surface 16 spaced apart from the side surface 18 of the actuating element 11 is trained.

By the spacing of the front surface 19 and the actuating surface 17 can the transparent cover 13 far from the lid 14 protrude while the partially opaque actuator 11 only to a small extent from the lid 14 protrudes. This leaves the light guide 40 , which essentially plan with the lid 14 closes, even for diagonally in front of the emergency button 10 standing users clearly visible. The light guide deviates a maximum of ± 3 mm, preferably a maximum of ± 2 mm, more preferably ± 1 mm from a flat finish with the lid 14 from.

Due to the fact that the covering means 13 far from the lid 14 stands out, is the emergency button 10 operable for the user with the flat hand. This is the covering 13 in the operating position 13.II plan with the lid 14 or the covering agent 13 is in the operating position 13.II against the actuation direction 700 from the lid 14 out. In other words, the distance ABS corresponds to the starting position 13.I and the operating position 13.II at most the distance DF of a survey 30 the actuating surface 17 to the lid 14 , Likewise, the amount of the distance AB corresponds to the operating position 11.II and the starting position 11.I at most the distance DF. In 11 The distance ABS and the amount of the distance AB correspond to the distance DF.

The emergency button 10 includes bulbs 41 , The bulbs 41 serve the unlocked and locked state of the door lock 200 display. For several emergency buttons 10 . 1010 . 2010 . 3010 show the bulbs 41 the unlocked and locked state of the associated door latch or door locks 200 . 1200 . 2200 . 3200 at. The bulbs 41 are concentric around the actuator 11 arranged. For example, the unlocked state is indicated by the green light and the locked state by the red light. In particular, all bulbs emit 41 the same light to indicate the locked and unlocked state, at least if there is no danger.

The bulbs 41 are controllable in at least two groups. Due to the different control z. Example, possible by the user other states of the security system 1 are displayed. Due to the additional display options, the user and / or the operator in a compact and simple way without additional display means a variety of states can be displayed. This will increase the security of the security system 1 elevated.

In 13 are of the exemplarily existing eight individual bulbs 41 six individual light sources shown, of which three bulbs with the reference numerals 41a . 41b . 41c are provided. The individual bulbs are below with 41a . 41b . 41c etc. referred to.

Each of the individually controllable groups of bulbs 41 can only use a single bulb 41a . 41b . 41c , etc. include. In the embodiment of 11 to 17 is every bulb 41a . 41b . 41c , etc. individually controllable. Every bulb 41a . 41b . 41c , etc. is each formed as an RGB LED. The bulbs 41a . 41b . 41c , etc. are so controllable that every bulb 41a . 41b . 41c , etc. can emit at least four different, preferably at least five different colors. This may be z. B. to red, blue, yellow, green and pink light act.

The bulbs 41 are from the third emergency button processing unit 22 driven. These are the emergency button processing unit 22 and the bulbs 41 connected to a ring bus (not shown).

The bulbs 41 are on the first board 60 arranged. Also is the audible alarm 23 on the first board 60 arranged. The acoustic alarm 23 is from the third emergency button processing unit 22 driven.

Are several door locks 200 . 1200 the emergency button 10 assigned, such. In 4 represented, at least two options are conceivable. For one, the emergency button 10 the unlocked state only then show when all the emergency button 10 associated door locks 200 . 1200 are in the unlocked state. In this case, the unlocked state is displayed only when the entire escape door width of the two leaves 3 . 4 to escape is available. Alternatively shows the emergency button 10 the unlocked state already when one of the door locks 200 . 1200 or all door locks of a door leaf 3 . 4 are in the unlocked state. As a result, the possibility of escape is displayed as early as possible, if already one of the doors 3 . 4 is unlocked. The options can be selected by the operator. For this purpose, z. B. a switch (not shown) in the security system 1 be provided.

Another condition of the security system 1 , which can be controlled by the bulbs that can be controlled in groups 41 is displayed is the danger case. Here, the bulbs 41 indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

The bulbs 41 can be controlled such that the progression of the time delay of the unlocking after generation of the actuating signal by the lighting means 41 is shown. This emit z. B. increasingly less bulbs 41 Light of a color, especially red light.

As another condition of the security system 1 that by the bulbs 41 can be represented, can be a mistake by the bulbs 41 being represented. The thus representable error may be a failure of the security system 1 be. For example, it may be indicated that the control device 100 , the door lock control 200 or the first or second emergency button processing unit 20 . 21 of the security system 1 not ready, defective, failed, deliberately switched off or removed. The error can be a bug with the security system 1 connected alarm system that is not ready, defective, failed, intentionally switched off or removed.

The light guide 40 includes several fiber optic areas 44 (see the 16 and 17 ). Each of the bulbs 41a . 41b . 41c , etc. is each an optical fiber area 44 assigned. The light guide 40 can mentally into the light guide areas 44 split. Between the fiber optic areas 44 are recesses 46 intended. Through the recesses 46 the light essentially remains in the light guide regions 44 ,

Each fiber optic area 44 has a forwarding section 48 on. The forwarding section 48 is in the transmission direction 702 over the bulbs 41 arranged. The transmission direction 702 takes place counter to the direction of actuation 700 , The forwarding section 48 serves for the transmission of light up to an expanding section 45 of the fiber optic area 44 , The spreading section 45 spreads in the transmission direction 702 on.

The spreading section 45 joins the forwarding section 48 in the transmission direction 702 at. The spreading section 45 serves to broaden the light beam of the emitted light. The forwarding section 48 widened less than the spreading section 45 ,

The light guide 40 is integrally formed. The light guide 40 is formed of the same material, in particular monolithic. The light guide 40 is made of translucent material.

The fiber optic areas 44 have a connection section 49 on. The connecting section 49 closes in the transmission direction 702 to the expanding section 45 at. The connecting sections 49 the fiber optic areas 44 are integrally connected to each other in such a way that the one-piece and uniform material light guide 40 results.

The connecting portions may have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light of one of the bulbs 41a . 41b . 41c etc. almost to a light area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h on the user facing surface 47 of the light guide 40 limited. In this case, each fiber-optic area comprises 44 a light area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h ,

The surface 47 of the light guide 40 corresponds to a circular ring. The lighting area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h are configured as sectors of the annulus. By emitting the light of a light source 41a . 41b . 41c , etc. becomes the associated luminous area 50a . 50b . 50c . 50d . 50e . 50f . 50g . 50h enlightened. The circular ring encloses the actuating element 11 ,

The bulbs 41 are controllable such that at least one light source 41a . 41b . 41c , etc. the light of one color and at least one other light source 41a . 41b . 41c , etc. simultaneously emit the light of a different color. For example, in this way the luminous areas 50a . 50b . 50e . 50f Show light of a color and the luminous regions 50c . 50d . 50g and 50h Light of another color. While the light areas 50a . 50b . 50e . 50f z. B. are continuously lit, the luminous areas 50c . 50d . 50g and 50h of bulbs 41 , which emit flashing light, be illuminated.

Are z. B. first, the luminous areas 50a . 50b . 50e . 50f illuminated by the light of a first color and the luminous areas 50c . 50d . 50g and 50h from the light of a second color; then the illuminated areas 50a . 50h . 50d . 50e illuminated by the light of the first color and the illuminated areas 50b . 50c . 50f and 50g the light of the second color; then the illuminated areas 50h . 50g . 50d . 50c illuminated by the light of the first color and the illuminated areas 50a . 50b . 50e and 50f from the light of the second color, this creates the impression of a circumferential color window.

The opposite luminous areas 50 ie the illuminated areas 50 on a through the imaginary Ache 701 leading straight lie, in 14 namely 50a and 50e respectively. 50b and 50f respectively. 50c and 50g respectively. 50d and 50h , are preferably illuminated in the same way, ie in the same color and the same blinking frequency. Thus, the pattern is also for diagonally in front of the emergency button 10 to suspect standing users, even if by the actuator 11 at least one of the opposing light areas 50 covered.

So that the light guide 40 As little as possible is hidden, is the Illuminierbereich 32 at most 10 mm, preferably at most 7 mm, particularly preferably at most 5 mm above the light guide 40 out.

The emergency button 10 may include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10 , If the ambient brightness decreases, so does the light intensity of the light sources 41 emitted light is reduced.

About the Bluetooth module 64 can be set via a mobile communication device parameters, eg. B. in which way the bulbs in which state of the security system 1 are to be controlled. The parameters include the flashing frequencies of the lamps 41 whether a continuous or a flashing light should be emitted, which state should be indicated by which color. The settings are after parameterization in an electronic memory of the safety system 1 , in particular the control device 100 , deposited. Also, the display of certain states for security reasons can not be selected for the operator and constantly stored in the electronic memory. The server can be states of the security system 1 choose yourself, the operator through the bulbs 41 want to show. For this purpose, colors and / or patterns through the bulbs 41 emissable, which are not assigned to any condition predetermined. For example, the operator may choose which condition the operator would like to see through blue light. In addition to the parameterization via the Bluetooth module 64 is the parameterization via the watch device 301 possible.

The change of the state of the door lock 200 is then displayed after the door lock control 201 the state change to the control device 100 has communicated. The control device 100 then controls the bulbs 41 or causes a control of the bulbs 41 ,

When commissioning the safety system 1 at fixed intervals one after the other several initialization views through the bulbs 41 generated. In one of the initialization views become possible enabled functions of the control device 100 displayed. In a second initialization view, those are added to the security system 1 lockable emergency button 10 . 1010 . 2010 . 3010 and door locks 200 . 1200 . 2200 . 3200 is displayed, with the status shown as error-free / faulty / non-existent. A third initialization view displays the status of inputs and outputs.

The central emergency button 302 is almost identical to the emergency button 10 built up. In particular, the actuating element corresponds 11 in function and structure the emergency button actuator 306 , The desk 63 corresponds to the emergency button switch 307 , Also includes the central emergency button 302 a return means 12 corresponding return means. The central emergency button 302 includes a first and a second board and / or a mounting plate corresponding to the first board 60 , the second board 61 or the mounting plate 62 constructed and interconnected. On the first board of the central emergency button 302 are the alarm device 309 and the bulbs 313 according to the alarm device 23 and the bulbs 41 arranged. On the second board of the central emergency button 302 are the first to third emergency processing units 303 . 304 . 305 arranged. The emergency button switch 307 ends on the first board of the central emergency button 302 , Upon actuation of the emergency button switch 307 A first and a second circuit are opened on the first board, which is wireless through the first and second emergency processing units 303 . 304 is detectable. For this purpose, the first and the second board are connected via connectors. The light guide of the central emergency button 302 corresponds in construction and function to the light guide 40 , The bulbs 313 are according to the bulbs 41 controllable.

It is conceivable that at the central emergency button 302 a the Abdeckmittel 13 appropriate cover 13 differently designed or missing. The bulbs 313 in particular do not serve for the optical representation of a locking state of an emergency button 10 , The bulbs 313 serve for the optical representation of the first and the second delay time period and / or for visual representation that a Aufhebehandlung is possible.

The safety system according to the invention 1 does not necessarily have all the functions that in the description to at least one of the 1 to 10 is mentioned, can perform. Rather, while in the security system 1 the functions described in the description to at least one of 1 to 10 are mentioned, deposited. However, to be able to perform the functions, the functions must be enabled. This is done by the control device 100 with a communication module 801 communicated. The communication module 801 is executed as a chip card. The communication module 801 comprises a memory in which at least one code is stored for activating at least one function. The communication module 801 includes a microprocessor that only serves to encrypt the code. The communication module 801 will be in a recording 77 the control device 100 inserted (s. 18a ). By the arrangement in the recording 77 becomes the communication module 801 positive and / or non-positive mechanically in the recording 77 held. At the same time, the communication module 801 through the arrangement in the receptacle 77 electrically contacted, so that the control device 100 the at least one code from the communication module 801 can read. The control device 100 and the communication module 801 are here wired (not shown).

To read the code must first the control device 100 with the help of a password access to the communication module 801 receive. The control device 100 must decrypt the at least one code before the function can be unlocked. By activating the function, the program code, with the aid of which the function is executable, is released.

To unlock the function, the program code, with the aid of which the function is executable, is released. Is the program code on the emergency button 10 deposited and are the control device 100 and the emergency button 10 through the first bus system 400 connected together, so causes the control device 100 after reading the code of the communication module 801 an activation in the emergency button 10 over the first bus system 400 , Is the program code in the door lock control 201 deposited, so causes the control device 100 after reading the code of the communication module 801 an activation in the door lock control 201 over the first bus system 801 ,

A code can unlock one function or several functions, in particular function blocks.

The parameterization program can only set parameters for the functions that were previously enabled. Only these parameters are displayed on the screen.

The function remains enabled only if the code is repeated again, in particular at regular intervals, from the communication module 801 is read out. For this purpose, predetermined, non-adjustable time intervals in the control device 100 be deposited. After expiration of the predetermined time interval locks the control device 100 the function if the associated code is not from the communication module 801 could be read. Will the function by the emergency button 10 performed with the control device 100 over the first bus system 400 is connected, then causes the control device 100 over the first bus system 400 a blocking of the function. Will the function be through the door lock control 201 performed with the control device 100 over the first bus system 400 is connected, then causes the control device 100 over the first bus system 400 a blocking of the function.

On the communication module 801 Several codes Code1, Code2 can be stored for different functions (s. 18a ).

If an additional function is to be released, it is conceivable to use the communication module 801 from the recording 77 to remove and another communication module 802 in the recording 77 to insert (s. 18b ). The communication module 801 is hereafter referred to as mother module 801 designated. The further communication module 802 is referred to below as an auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 comprises a memory in which at least one code is stored for activating the additional function. The auxiliary module 802 includes a microprocessor that only serves to encrypt the code. The code Code3, which is on the helper module 802 is deposited by the control device 100 read out (s. 18b ). To read code Code3 must first the control device 100 with the help of a password access to the auxiliary module 802 receive. The control device 100 must be the least decrypt a code before the function can be unlocked. The code Code3 of the auxiliary module 802 is in a store 107 the control device 100 saved (s. 18c ). After that, the code of the auxiliary module 802 on the auxiliary module 802 deleted (s. 18c ). The auxiliary module 802 will be out of the recording 77 away. Thereafter, the mother module 801 in the recording 77 inserted (s. 18d ). The code of the auxiliary module 802 will be on the mother module 801 saved (s. 18d ). The code is taken from the memory of the control device 100 deleted (s. 18d ). The additional function will be unlocked.

With a mother module 801 on the other hand, the code does not become in the control device 100 saved (s. 18a , d). With a mother module 801 the code is not deleted. Rather, the mother module is used 801 to a permanent arrangement in the recording 77 , The on the mother module 801 stored codes Code1, Code2, Code3 are read out repeatedly. The control device 100 decides on the basis of an identifier K801, K802 of the communication module 801 . 802 whether it is a mother module 801 or an auxiliary module 802 is. The identifier K801, K802 is in particular on the mother module 801 and the auxiliary module 802 stored electronically. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802 ,

The insertion and removal from the recording 77 is done manually. The remaining processes are automatic.

The insertion and removal from the recording 77 may be reserved for an operator. This is the recording 77 arranged inaccessible to an unauthorized user. In particular, the sabotage switch 66 in an unauthorized attempt to get to the recording operated. The recording can be between the first board 60 and the second board 61 , z. B. on an underside of the first board 60 be arranged.

So the security system 1 becomes functional, must be a mother module 801 in a recording 77 of the security system 1 to be ordered. So the security system 1 remains functional for more than the specified time interval, the mother module must 801 in the recording 77 remain.

Every emergency button 10 . 10' . 1010 . 1010' . 2010 . 3010 includes a recording 77 , Exactly a mother module 801 is for every first bus system 400 . 400' of the security system 1 necessary and provided. Only if the mother module 801 into the recording of an emergency button 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 is inserted, so serves the emergency button 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 at the same time as a control device 100 for the corresponding first bus system 400 . 400' , At the other emergency buttons 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 of the security system 1 in which there is no mother module 801 are the same program codes as in the control device 100 deposited. Without mother module 801 however, the program codes are not unlocked, leaving the remaining emergency buttons 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 not as a control device 100 can serve. Because of that, the mother module 801 in the recording 77 is located, serves the emergency button 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 as a control device 100 ,

If the control device 100 separate from the emergency buttons 10 . 10' . 1010 . 1010' . 2010 . 2010 ' . 3010 and the door locks 200 . 200' . 1200 . 1200' . 2200 . 2200' . 3200 be formed, so is a mother module 801 in a recording 77 the processing electronics 101 inserted. Because of that, the mother module 801 in the recording 77 is located, is the processing electronics 101 capable of the functions of the control device 100 perform.

Includes the security system 1 several subsystems 5 . 6 and thus several first bus systems 400 . 400' so includes the security system 1 exactly the same number of mother modules 801 . 801' as are subsystems 5 . 6 gives (s. 10 ). The emergency button 10' who with the mother module 801' communicates, and the processing electronics 101 the control device 100 out 10 that with the mother module 801 communicate, are also intended to communicate with the second bus system 401 to be connected.

The mother module 801 . 801' can for any subsystem 5 . 6 contain different codes and thus unlock different functions. So z. B. the mother module 801' of the second subsystem 6 a code for the selective assignment of the door locks 200' . 1200' . 2200' to the emergency rooms 10' . 1010' . 2010 ' include. On the other hand, the code for a selective assignment of door locks to emergency buttons on the mother module 801 for the subsystem 5 unnecessary.

The communication module 801 . 801' . 802 can a gap 803 have, through which a particular self-adhesive tape is guided. The self-adhesive tape is used for manual removal of the communication module 801 . 801' . 802 from the recording 77 , The self-adhesive tape includes information about the functions performed by those on the respective communication module 801 . 801' . 802 stored codes are unlocked. The information may be a color code, a QR code and / or a bar code.

Alternatively, the communication module 801 . 801' . 802 be designed as a chip card with a flexible portion. Part of the exception 77 outstanding part of the chip card can be provided with the information, ie the color code, the QR code and / or the bar code.

One time in a security system 1 inserted mother module 801 can in a recording 77 another security system according to the invention 1 be used again.

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 10050111 C1 [0012]

Claims (16)

Security system ( 1 ), in particular for escape route security, with at least one triggering element ( 10 ), in particular an emergency button ( 10 ), wherein the trigger element ( 10 ) for unlocking at least one locking mechanism ( 205 ) a door lock ( 200 ), with a central escape route control ( 300 ), whereby the central escape route control ( 300 ) a central emergency button ( 302 ), the central emergency button ( 302 ) for unlocking the at least one locking mechanism ( 205 ), characterized in that the central escape route control ( 300 ) at least one manually operable element ( 322 . 332 ) for delaying and / or preventing activation of the locking mechanism ( 205 ) for unlocking as a result of an actuation of the trigger element ( 10 ). Security system ( 1 ) according to claim 1, characterized in that the manually operable element as a delay element ( 332 ), in particular as a key switch, is formed, as a result of an actuation of the trigger element ( 10 ) the activation of the locking mechanism ( 205 ) can be delayed for unlocking by a first delay time period and an actuation of the delay element ( 332 ) within the first delay period, an extension of the delay of a drive of the locking mechanism ( 205 ), in particular the central escape route control ( 300 ) a termination element ( 333 ), in particular a button, for terminating the delay. Security system ( 1 ) according to claim 1 or 2, characterized in that the manually operable element as a first operating element ( 322 ), in particular as a key switch, wherein the triggering element of the security system ( 1 ) by the first control element ( 322 ) is brought into a deactivated state, wherein in the deactivated state as a result of an actuation of the trigger element ( 10 ) an activation of a locking mechanism ( 205 ) is omitted for unlocking, in particular the central escape route control ( 300 ) a second control element ( 333 ), in particular a push button, in order to convert the triggering element into an activated state, wherein in the activated state as a result of an actuation of the triggering element ( 10 ) a control of the locking mechanism ( 205 ) takes place for unlocking. Security system ( 1 ) according to one of the preceding claims, characterized in that the extension of the delay of the driving of the locking mechanism ( 205 ) by the actuation of the delay element ( 332 ) takes place only within the first delay time period, the central escape route control ( 300 ), in particular the central emergency button ( 302 ), Illuminants ( 313 ) for the optical representation of the first delay time period, wherein in particular the lighting means ( 313 ) are driven such that with a progression of the first delay period increasing or decreasing many bulbs in a color shine. Security system ( 1 ) according to one of the preceding claims, characterized in that by the actuation of the delay element ( 332 ) the delay from the actuation of the delay element is extended by a second delay time period, wherein the central escape route control ( 302 ), in particular the central emergency button ( 302 ), Illuminants ( 313 ) for the optical representation of the second delay time period, wherein in particular the lighting means ( 313 ) are driven such that with a progression of the second delay period increasing or decreasing many bulbs illuminate in one color and / or the same bulbs that represent the first delay period optically, the second delay time period optically. Security system ( 1 ) according to one of the preceding claims, characterized in that as a result of an actuation of the manually operable element ( 322 . 332 ) via at least one bus system ( 401 ), in particular via a first bus system ( 400 ) and a second bus system ( 401 ), a signal for delaying and / or preventing activation of the locking mechanism ( 205 ) for unlocking in particular to the trigger element ( 10 ) is sent. Security system ( 1 ) according to one of the preceding claims, characterized in that the manually operable element ( 322 . 332 ) via the central emergency button ( 302 ) with the trigger element ( 10 ) is electrically connected, in particular the central escape route control ( 300 ) is designed such that upon actuation of the first operating element ( 322 ) a first deactivating circuit and a deactivating second circuit are opened or closed, wherein a signal of the first deactivating circuit from a first digital emergency processing unit ( 303 ) of the central emergency button ( 302 ) and a signal of the second deactivation circuit from a second digital emergency processing unit ( 304 ) of the central emergency button ( 302 ), wherein in particular at least one message, in which the first and / or the second emergency processing unit ( 302 . 303 ) from the presence of the first or second deactivation signal, from the central emergency button ( 302 ) to the trigger element ( 10 ) is sendable. Security system ( 1 ) according to one of the preceding claims, characterized in that the triggering element ( 10 ) comprises a timer, wherein the trigger element ( 10 ) after the triggering element ( 10 ) has been actuated, by means of the timer, a first delay period can elapse before the trigger element unlocks the locking mechanism ( 205 ), and / or the trigger element ( 10 ) after the triggering element ( 10 ) a signal of the delay element ( 332 ), the triggering element ( 10 ) lets the second delay time lapse by means of the timer before the triggering element ( 10 ) an unlocking of the locking mechanism ( 205 ). Security system ( 1 ) according to one of the preceding claims, characterized in that in the security system ( 1 ), in particular in the triggering element ( 10 ), can be stored, whether as a result of an operation of the manually operable element ( 322 . 332 ) delaying and / or preventing activation of the locking mechanism ( 205 ) is to be made for unlocking, in particular, the deposit can be carried out with the aid of an executable on a communication device parameterization program. Security system ( 1 ) according to one of the preceding claims, characterized in that the security system ( 1 ) several trigger elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) and for each triggering element ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) or groups of triggering elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) is selectively stored in the security system, whether by the respective trigger element ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) or by the respective group of triggering elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) as a result of an operation of the manually operable element ( 322 . 332 ) delaying and / or preventing activation of the locking mechanism ( 205 ) is to be made for unlocking, in particular the deposit can be carried out using an executable on the communication device parameterization program. Security system ( 1 ) according to any one of the preceding claims, characterized in that the first delay time period and / or the second delay time duration with the aid of an executable on the communication device parameterization program in the security system ( 1 ), in particular in the triggering element ( 10 ), which can be stored, wherein the first delay time period can be defined within a first time window predetermined by the parameterization program and / or the second delay time period can be defined within a second time window predetermined by the parameterization program. Security system ( 1 ) according to one of the preceding claims, characterized in that the security system ( 1 ) several trigger elements ( 10 ) comprises for each triggering element ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) or groups of triggering elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ) selectively in the security system ( 1 ), in particular in each triggering element ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ), an individual first delay time period and optionally an individual second delay time period can be stored, in particular for a group of triggering elements ( 10 . 10' . 1010 . 1010' . 2010 . 3010 ), which are intended for a common door, in each case only a first delay time period and preferably also a second delay time period is storable. Security system ( 1 ) according to one of the preceding claims, characterized in that the central emergency button ( 302 ) on a first mounting plate ( 311 ) and that at least one manually operable element ( 322 . 332 ) or the manually operable elements ( 322 . 332 ) each on a further mounting plate ( 321 . 331 ), wherein in particular the first operating element ( 322 ) and the second control element ( 323 ) on a second mounting plate ( 321 ) are attached the delay element ( 332 ) and the terminating element ( 333 ) on a third mounting plate ( 331 ) are attached. Security system ( 1 ) according to one of the preceding claims, characterized in that the fastening plates ( 311 . 321 . 331 ) to a common frame or on at least one side open escape route control housing ( 340 ) are attached. Security system ( 1 ) according to one of the preceding claims, characterized in that a multi-door display device ( 350 ) and the central escape route control ( 300 ), in particular the central emergency button ( 302 ), with a third bus system ( 403 ), in particular the multi-door display device ( 350 ) in the escape route control housing ( 340 ) can be arranged. Security system ( 1 ) according to any one of the preceding claims, characterized in that with a first authentication means authentications to a first number of elements selected from the delay element ( 332 ), first control element ( 322 ) and / or one Identification device ( 312 ), wherein with a second authentication means on a second number of elements selected from the delay element ( 332 ), first control element ( 322 ) and / or the identification device ( 312 ), the second number being less than the first number.

Images