Access control system for buildings

Abstract

Access control system (1) for buildings (2) with a stationary unit (20) and a mobile unit (10), wherein the mobile unit (10) has a mobile transceiver (11) which is designed to transmit wirelessly and encrypted signals (S) for authentication and authorization of the mobile unit (10) with respect to the stationary unit (20) and for control of the stationary unit (20) by the mobile unit (10) to a stationary transceiver (21) of the stationary unit (20), wherein the stationary unit (20) comprises a control device (22) which is designed to determine a position of the mobile unit (10) relative to the stationary unit (20) from the signals (S) transmitted from the mobile transceiver (11) to the stationary transceiver (21) and to control a function if a control command for triggering the function is transmitted to the stationary unit (20) by a mobile unit (10) authenticated and authorized by the stationary unit (20) and / or the position of the mobile unit (10) is within a predetermined access area (30) that can be changed by a user.

Description

The invention relates to an access control system for buildings.Access control systems in the sense of the invention are understood to be systems which have a stationary or stationary unit and a mobile unit which can be carried along by a user and in which the units mentioned communicate with one another wirelessly for authenticating and authenticating the mobile unit and thus the user with respect to the stationary unit. On the basis of the authentication and authorization, the stationary unit controls various functions and in particular enables or locks an associated access, for example a door or a gate. Beyond most conventional access systems, a position determination is also provided in the access system according to the invention, as will be explained in detail.Wirelessly operating access control systems are known from the prior art and are known, for example, from the documents WO 2023 / 222462 A1 and DE 10 2020 114 403 A1.However, such systems are further optimizable.The object of the invention is therefore to overcome the aforementioned disadvantages and to provide an access control system with improved security and increased comfort.This object is achieved by the combination of features according to claim 1.According to the invention, therefore, an access control system for buildings or a building access control system is proposed, which correspondingly has a stationary, i.e. stationary and preferably stationary unit connected to the building and a mobile, i.e. non-stationary unit that is portable in particular by a user. The mobile unit is essentially an electronic key, which can be designed, for example, in the form of a smart FOB or else a smartphone. Fundamentally, both the stationary unit and the mobile unit have a respective transceiver, wherein a transceiver unit is to be understood as a transceiver. For the transceiver of the mobile unit referred to as a mobile transceiver, it preferably has at least one antenna and an evaluation unit for transmitting signals via the at least one antenna and for evaluating the signals received via the at least one antenna. For the transceiver of the stationary unit, which is referred to as a stationary transceiver, it preferably has at least two antennas and an evaluation unit for transmitting signals via at least one of the two antennas and for evaluating the signals received via both of the antennas. The mobile transceiver is designed to transmit signals wirelessly, in particular via radio, to the transceiver of the stationary unit, which is referred to as the stationary transceiver, for authentication and authorization of the mobile unit with respect to the stationary unit and optionally for control of the stationary unit by the mobile unit.It is fundamentally to be established that authentication is understood to mean the checking of whether the mobile unit or its identity of the stationary unit is known, in particular a unique identification number of the mobile unit is stored in the stationary unit, whereas authorisation is understood to mean the checking of whether the authenticated mobile unit has access authorisation for the access controlled by the access control system. Authentication and authorization can be carried out integrally with one another or separately from one another.It is essential to the invention that the stationary unit has a control device which is designed to determine a position of the mobile unit relative to the stationary unit from the signals transmitted from the mobile transceiver to the stationary transceiver and to trigger or control a function which corresponds in particular to a corresponding control command if a control command for triggering the function is transmitted to the stationary unit by a mobile unit authenticated and authorized by the stationary unit and / or the position of the mobile unit is within a predetermined access range which can be learned or changed by a user and is in particular by a user or an authenticated and further preferably authorized user.An access area is understood to be a two-dimensional and horizontally extending area on or around the stationary unit and accordingly, for example and abstracts, an area on a floor in the area of the stationary unit or an access that can be controlled by the access control system, as would be possible, for example, in a view from above or a top view.Functions to be controlled by corresponding control commands are, in particular, comfort functions, so that, for example, illumination elements can also be controlled by a corresponding control command.However, basic functions of the access control system and thus in particular unlocking and locking an access controlled by the access control system preferably do not require a transmission of a control command, but rather are carried out automatically by the control device when an authenticated and authorized mobile unit, i.e. its position, is located within the access area. By repeated position determination, it is also possible to distinguish between entering the access area and leaving the access area and to actuate a corresponding function, for example unlocking the access when entering and locking the access when leaving.The transceivers are preferably combined Bluetooth or Bluetooth Low Energy, BLE for short, and ultra-wideband transceivers, UWB transceivers for short, it also being possible to use other radio methods or radio transceivers, provided they make possible a determination of the position according to the invention.The fact that position determination is possible by means of such transceivers is fundamentally known in this case.For example, the stationary transceiver can have a plurality of antennas offset from one another and can have the time differences (TDOA (Time Difference of Arrival)) between the reception at the antennas for a signal received by the mobile transceiver, so that triangulation of the position of the mobile transceiver or of the mobile unit is made possible by the time differences and the relative position of the antennas.Furthermore, for example, a method is used in which the stationary transceiver has two antennas or an antenna array comprising two antennas which are spaced apart in a known manner, wherein, for a signal received by the mobile transceiver, for example by means of the phase difference between the signal received at the antennas (phase difference of arrival (PDoA)) and the known distance of the antennas, an angle of incidence of the signal at the antennas (AoA (angle of arrival)) is determined and a distance of the mobile transceiver is determined, so that the position of the mobile transceiver or of the mobile unit results from the angle of incidence and the distance.The distance can in turn be determined by different methods, wherein these are to be mentioned in particular from the signal strength of the received signal (received signal strength indicator, RSSI for short) or the time of flight (ToF for short) of the signal from the mobile transceiver to the stationary transceiver or a signal from the stationary transceiver to the stationary transceiver via the mobile transceiver.Although the detection accuracy of the angle of incidence can be increased by more antennas and although a possible horizontal difference between mobile transceivers and stationary transceivers, i.e. their height difference from one another or the distance of the transceivers in the vertical, can be determined in three-dimensional space, exactly two antennas are preferably provided here.Possible height differences between the mobile unit and the stationary unit, which can lead to an inaccurate or incorrect determination of the distance in the currently relevant horizontal plane, in particular when using exactly two antennas, are preferably neglected according to the present application, since it is assumed that these are automatically compensated for or are negligibly small by learning the access region.An advantageous further development of the invention provides that the control device is designed to determine an angle from which the signals were received from the mobile transceiver to the stationary transceiver, and to determine a distance from which the signals were received, so that the position of the mobile unit can be specified as polar coordinates of a polar coordinate system which is accordingly two-dimensional and can also be designated as a circular coordinate system and in whose coordinate origin designated as pole the stationary transceiver is arranged.The polar coordinate system is accordingly preferably located in a horizontal plane with respect to the earth or the ground.Based on this, it can further be provided that the polar coordinate system is divided or segmented by a distance grid and an angle grid and virtual, i.e. imaginary, nodes are formed at the points of intersection of the distance grid with the angle grid, wherein the control device is designed to normalize the position of the mobile unit to the nearest node or to the node determined according to a predetermined rule, i.e. to store the coordinates or position of the nearest node as the coordinates or position of the mobile unit. Instead of the normalization to the closest node, for example, the normalization could be to the one of two nodes further away from the stationary unit in the radial direction.Based on a necessary and expected accuracy of the position determination by means of the stationary transceiver, the distance grid can provide a step size or subdivision between 2 cm and 50 cm, in particular 5 cm and 30 cm, preferably between 10 cm and 20 cm and further preferably approximately 15 cm or even approximately 30 cm.The angle grid can analogously provide a step width or subdivision between 1° and 30°, in particular between 2° and 20°, preferably between 5° and 15° and further preferably approximately 10° or even approximately 20°. Preferably, owing to the better or simpler implementability and the at the same time sufficient resolution, 5° in each case applies as lower limit.Furthermore, it is preferably provided that polar coordinates are located laterally to the right of the stationary transceiver in the positive angular direction of the polar coordinate system and polar coordinates are located laterally to the left of the stationary transceiver in the negative angular direction of the polar coordinate system. Left and right should be understood here in each case starting from a plan view and from the perspective of the stationary transceiver and pointing away from the building. Correspondingly, preferably and starting from two antennas, in particular angles of -90° to +90° and thus 180° are detected, wherein a total coverage of 360° can also be achieved by more antennas.A further development of the access control system is also advantageous, according to which the predetermined access area is stored as the nodes located in the access area or as a set of the nodes located in the access area. In this case, the control device is designed to compare the position normalized to the nearest node with the nodes located in the access area, so that it can be determined by a match and consequently without further calculations that the position of the mobile unit is within a predetermined access area.To increase the comfort, it can be provided that a user or an authorized user can define the already mentioned access area within the scope of the first device of the access control system or also at any desired point in time. This definition of the access area should, however, be able to be carried out as user-friendly as possible.For this purpose, an advantageous variant of the access control system provides that the control device has a training mode in which the predetermined access range can be set or stored in the control device, in particular by the user and further in particular by means of positioning of the mobile unit effected by the user.In this case, it is preferably provided that the control device in the training mode is designed to determine the respective position of the mobile unit when a respective training control command is transmitted by the mobile unit to the stationary unit. The positions determined during the transmission of the respective training control command correspond in each case to a boundary point of the access area. The control device is correspondingly designed to determine the predetermined access range from the boundary points.The determination of the access area is preferably effected stepwise and in particular in that the control device is designed to normalize the boundary points to the respectively closest node, to subsequently determine the boundary points determined along virtual lines between respectively two immediately consecutive boundary points and the nodes closest along a virtual line between a boundary point determined as the first and a boundary point determined as the last for each distance grid and each angle grid or for each distance grid and / or each angle grid and / or their points of intersection as boundary line points, to subsequently determine the nodes enclosed by the virtual lines as boundary line points and to subsequently store the access area as a set of the boundary points, boundary line points and boundary line points.The boundary line points can be determined, for example, by determining the respective closest node or, for example, the closest node in the radial direction outwards from the stationary unit for each intersection point of the respective virtual line with the distance grid and / or the angle grid.According to a further aspect of the invention, an access control system according to the invention and in particular the control device is designed to carry out a method for learning an access area by a user on an access control system according to the invention, such that everything executed for the access control system also applies directly to the method. According to the method, it is provided that the control device is placed in the training mode by the user, which can be carried out, for example, manually at the stationary unit or by transmitting a start signal from the mobile unit to the stationary unit. The user then moves the mobile unit in succession to positions of the access area to be defined by it which are desired as limit points, wherein the user initiates the transmission of a training control command in each case via the mobile unit at each of the positions, such that the control device determines the respective position of the mobile unit relative to the stationary unit in succession from the signals transmitted in this case from the mobile transceiver to the stationary transceiver and defines the positions in succession as limit points of the access area.Starting from the boundary points taught by the user, of which a boundary point was determined as the first and a boundary point as the last, the control device of the access control system normalizes the boundary points to the respectively closest node point of the polar coordinate system divided by distance and angle grids.Subsequently, the boundary points determined along virtual lines between two immediately following boundary points each, as well as the node closest along a virtual line between a boundary point determined as the first and a boundary point determined as the last at or for each distance grid and / or each angle grid and / or their intersection points, are determined by the control device as boundary points.By means of the boundary line points or directly by means of the virtual lines, the control device subsequently determines the nodes enclosed by the virtual lines as boundary surface points.The control device stores a set formed from the boundary points, boundary line points and boundary surface points or comprising these points exactly and exclusively subsequently as the access area.The end of the training process or the exit from the training mode can be effected, for example, manually at the stationary unit or by transmission of a stop signal from the mobile unit to the stationary unit.Both for the start signal and for the stop signal, which can also be designated as a start control command or stop control command, it applies that these can simultaneously be a training control command independently of one another.The learned access area can also be stored generally for all mobile units or specifically for the mobile unit used during the learning, for example by means of its identification number.Since a two-dimensional access area, i.e. an area, is to be defined by boundary points, preferably at least three boundary points should be determined, of which a boundary point is the first defined boundary point and a boundary point is the last defined boundary point according to the detection order or according to the detection time.The features disclosed above can be combined as desired, provided that this is technically possible and they do not conflict with one another.Other advantageous developments of the invention are characterized in the dependent claims or are illustrated in more detail below together with the description of the preferred embodiment of the invention on the basis of the figures. The following are shown: FIG. 1 shows an access control system; FIG. 2 shows a first state when learning an access area; FIG. 3 shows a second state during the learning of the access region; FIG. 4 shows a third state during the learning of the access area; FIG. 5 shows a fourth state in the teaching of the access area; FIG. 6 shows a sequence in the training of the access area.The figures are schematic by way of example. Like reference numerals in the figures indicate like functional and / or structural features.FIG. 1 schematically shows the essential components of an access control system 1 on a building 2 within the meaning of the invention.Such an access control system 1 fundamentally has a stationary unit 20 and a mobile unit 10, wherein the stationary unit 20 is connected in a stationary manner or to the building 2 and is designed to control the access 3, for example a door, of the building 2 and accordingly in particular to lock or unlock the access 3 or the door 3 depending on the position of the mobile unit 10, wherein the stationary unit 20 receives signals S from the mobile unit 10 for determining the position and for authenticating and authorizeing the mobile unit 10. The mobile unit 10 has a mobile BLE UWB transceiver 11 which is designed to transmit signals S to a stationary BLE UWB transceiver 21 of the stationary unit 20 wirelessly and in encrypted form for authenticating and authenticating the mobile unit 10 with respect to the stationary unit 20 and, if appropriate, for controlling the stationary unit 20 by the mobile unit 10.In general, identification or authentication preferably takes place via BLE, whereas the localization or position determination preferably takes place via UWB by means of cryptologically secured communication.It is essential that the control of the stationary unit 20 should not be based, or preferably at least not exclusively based, on control commands received from the mobile unit 10, but should be checked whether the mobile unit is within a predetermined access range 30.Accordingly, the stationary unit 20 has a control device 22, which is designed to determine a position of the mobile unit 10 relative to the stationary unit 20 from the signals S transmitted from the mobile transceiver 11 to the stationary transceiver 21 and to automatically control a function if the position of the mobile unit 10 is within a predetermined access range 30. Optionally, it may also be necessary for a control command for triggering the function to be transmitted to the stationary unit 20 by a mobile unit 10 authenticated and authorized by the stationary unit 20.For this purpose, it is provided that the control device 22 determines an angle φ from which the signals S were received and a distance r from which the signals S were received from the signals S transmitted from the mobile transceiver 11 to the stationary transceiver 21, so that the respective position of the mobile unit 10 can be specified as polar coordinates of a polar coordinate system. It follows that the stationary transceiver 21 is located at the coordinate origin of this two-dimensional polar coordinate system.In order to simplify calculations and comparisons and thus to speed up them, it is provided that the polar coordinate system is divided or segmented by a distance grid 41 and an angle grid 42, so that virtual, i.e. imaginary, nodes 43 are thus formed at the points of intersection of the distance grid 41 with the angle grid 42, as is illustrated in FIGS. 2 to 5.Based on this, the control device 22 is configured to normalize the previously determined position of the mobile unit 10 to the nearest node 43.In order to enable the user who carries the mobile unit 10 with him to set up the access area as comfortably and individually as possible, the control device 22 is designed to carry out the method illustrated by way of example and schematically in FIG. 6. FIGS. 2 to 6 each show individual states or intermediate steps during the execution of the method.According to the method according to FIG. 6, which method is based on a flow diagram, the control device 22 is suitable or designed for carrying out the following method steps:Step A The control device 22 is placed in the teaching mode by the user.Step B The user moves the mobile unit 10 to a position desired as the boundary point 31 of the access area 30, and initiates the transmission of the teaching control command at the mobile unit 10.Step A and a first execution of step B for determining a first determined boundary point 31 can be carried out integrally with one another by transmitting a start control command, which is at the same time a training control command.Step C The control device 22 determines the position of the mobile unit 10 relative to the stationary unit 20 from the signals S transmitted from the mobile transceiver 11 to the stationary transceiver 21 when transmitting the training control command.Step D The position of the mobile unit 10 when the teaching control command is transmitted is stored by the control device 22 as a boundary point 31 of the access area 30.Step E Have steps B to D performed for all positions desired by the user, but at least three times? If so, proceed to step F otherwise back to step B.It should be noted that the normalization of the respective position determined in step C can be carried out before or after the respective storage in step D, or that the normalization of all positions determined in step C and stored in step D can be carried out after step E or after step F, the positions stored in step D then preferably being overwritten by the normalized positions.Step F The user ends learning of boundary points 31.Here, the end of the teaching by the operator may be performed manually at the stationary unit 20 or by transmitting a stop control command from the mobile unit 10 to the stationary unit 20. The stop control command can also be a training control command at the same time, so that step F can be carried out integrally with the last execution of steps B to E for ascertaining a limit point determined last.The state immediately at or after step F, in which therefore all boundary points 31 have been determined and normalized, corresponds to that depicted in FIG. 2, in which all boundary points 31 are highlighted with respect to the non-relevant nodes 43.Step G The control device 22 determines all boundary points 31 determined along virtual lines L 1 between two immediately following boundary points 31 in each case and all node points 43 closest to one another as the last determined boundary point 31 along a virtual line L 2 as boundary line points 32.The state in step G, in which the virtual lines L 1, L 2 are determined and the boundary line points 32 are determined based thereon, corresponds to that depicted in FIG. 3. The first boundary point 31 determined and the last boundary point 31 determined with its virtual line L 2 resulting therefrom are arbitrarily selected in the present case and do not have to be formed by the boundary points 31 closest to the stationary unit 20.The state immediately at and after step G, in which all boundary line points 32 have been determined, corresponds to that depicted in FIG. 4, in which, in addition to the boundary points 31, all boundary line points 32 are emphasized with respect to the non-relevant nodes 43.Step H The controller 22 determines all the nodes 43 surrounded by the virtual lines L 1, L 2 as boundary points 33.Step J The controller 22 stores the access area 30 as the set of the boundary points 31, boundary line points 32, and boundary surface points 33.The state immediately at step H or J at which all boundary points 33 have been determined corresponds to that depicted in FIG. 5, in which, in addition to the boundary points 31 and the boundary line points 32, all boundary points 33 are emphasized with respect to the non-relevant nodes 43.References included in the specificationThis list of documents cited by the applicant has been produced in an automated manner and is only included for the better information of the reader. The list is not part of the German patent application or utility model application. The DPMA does not take any adhesion for any faults or omissions.Patent Literature citedWO 2023 / 222462 A1

[0003] DE 10 2020 114 403 A1

[0003]

Claims

Access control system (1) for buildings (2) having a stationary unit (20) and a mobile unit (10), wherein the mobile unit (10) has a mobile transceiver (11) which is designed to transmit signals (S) for authentication and authorization of the mobile unit (10) with respect to the stationary unit (20) and for control of the stationary unit (20) by the mobile unit (10) to a stationary transceiver (21) of the stationary unit (20), wherein the stationary unit (20) has a control device (22) which is designed to determine a position of the mobile unit (10) relative to the stationary unit (20) and to control a function from the signals (S) transmitted from the mobile transceiver (11) to the stationary transceiver (21), if a control command for triggering the function is transmitted to the stationary unit (20) by a mobile unit (10) authenticated and authorized by the stationary unit (20) and / or the position of the mobile unit (10) is within a predetermined access range (30) that can be changed by a user.Access control system according to claim 1, wherein the control device (22) is configured to determine an angle (Φ) from which the signals (S) were received from the signals (S) transmitted from the mobile transceiver (11) to the stationary transceiver (21), and to determine a distance (r) from which the signals (S) were received, such that the position of the mobile unit (10) can be specified as polar coordinates of a polar coordinate system, in the coordinate origin of which the stationary transceiver (21) is arranged.Access control system according to claim 2, wherein the polar coordinate system is divided by a distance grid (41) and an angle grid (42) and virtual nodes (43) are formed at the points of intersection of the distance grid (41) with the angle grid (42), wherein the control device (22) is configured to normalize the position of the mobile unit (10) to the nearest node (43).Access control system according to the preceding claim, wherein the predetermined access area (30) is stored as the nodes (43) located in the access area (30), and wherein the control device (22) is configured to compare the position of the mobile unit (10) normalized to the nearest node (43) with the nodes (43) located in the access area (30), such that it can be determined by a match that the position of the mobile unit (10) is within the predetermined access area (30).Access control system according to one of the preceding claims, wherein the control device (22) has a training mode in which the predetermined access area (30) can be stored in the control device (22) and / or can be defined by a user.Access control system according to the preceding claim, wherein the control device (22) is designed, in the training mode, to determine the respective position of the mobile unit (10), which respectively correspond to a boundary point (31) of the access area (30), when a respective training control command is transmitted by the mobile unit (10) to the stationary unit (20), and to determine the predetermined access area (30) from the boundary points (31).Access control system according to claims 3 to 6, wherein the control device (22) is configured to normalize the boundary points (31) to the respectively closest node (43), to determine the boundary points (31) determined along virtual lines (L1) between respectively two immediately consecutive boundary points (31) and to determine the boundary points (43) closest to each distance grid and / or each angle grid and / or their points of intersection along a virtual line (L2) between a boundary point (31) determined as the first and a boundary point (31) determined as the last boundary point (32), to determine the nodes (43) enclosed by the virtual lines (L1, L2) as the boundary point (33) and to store the access region (30) as the set of the boundary points (31), boundary point (32) and boundary point (33).

Images