Electronic lock or relay

Abstract

Electronic lock or relay with a device for determining authorization using a biometric feature, wherein in particular a device for determining authorization using a biometric feature is added to the lock or relay, or in particular a device for determining authorization using a biometric feature is replaced in an electronic lock, characterized by that an authorization code, preferably stored in the lock or relay, can be output, with which the device for determining authorization and / or the lock and / or the relay can be switched into a state for teaching a biometric feature authorizing the opening of the lock or the switching of the relay, that a control of the lock or the relay and / or the device for determining authorization for entering and / or retrieving the authorization code is provided, that the device is suitable for inputting a biometric feature and for determining authorization using the biometric feature, and that a memory for the authorizing biometric feature is provided in the control of the lock or relay and / or a central system for managing a plurality of, at least two, electronic locks of a locking system or relays.

Description

[0001] The invention relates to an electronic lock or relay with a device for determining authorization using a biometric feature, wherein, in particular, a device for determining authorization using a biometric feature is added to the lock or relay, or, in particular, a device for determining authorization using a biometric feature is replaced in an electronic lock.

[0002] Electronic locks and locking systems built from them, as well as methods for operating such a locking system, are known, for example, from EP 3 441 948 A1.

[0003] Such locking systems are used, for example, in buildings, where the primary requirement is that the locks can be opened and closed by a variety of keys. These keys can be of equal authority. However, it is also possible that only certain keys can open and close specific locks, while opening and closing other locks is impossible. It should be noted that an electronic lock is a unit located in the area of ​​a door or gate that can be electronically switched between a locked and an open state, or that electronically transmits and / or processes the lock code.For this purpose, a lock code can be transmitted electronically, for example by reading a transponder, by actively transmitting a lock code via a transmitter, and / or by entering a personal identification feature via a keypad. The lock typically includes an electric drive unit with a power source that, upon receiving a valid lock code, enables an opening process by, for example, coupling two aligned shaft sections, one of which carries a locking cam in a lock cylinder.

[0004] Insofar as this refers to the invention of electronic locks, electronic locking cylinders and / or devices are also included that can be mounted on mechanical lock cylinders with an inserted mechanical key and in which the mechanical key is turned as intended with the device.

[0005] Accordingly, it is also possible to incorporate a conventional mechanical locking cylinder into a lock with an additional drive mechanism. This drive mechanism is connected to a mechanical locking cylinder inserted within the mechanical cylinder in such a way that the key is turned via the drive, thus replacing the normally manual rotation of the locking cylinder with the drive mechanism. The drive mechanism includes a receiver that receives and evaluates a key code, initiating the opening process if the code matches. A significant disadvantage of such a drive mechanism lies in the energy required to turn the key.

[0006] Locking systems allow for the granting of various access permissions via key credentials, which may have local and / or time limitations. Locking systems, and thus electronic locks, are used not only in buildings but also in other areas where the goal is to issue permissions for the use of, for example, objects. Such locking systems and electronic locks are also used, for instance, in delivery systems for letters, packages, and the like.

[0007] In addition to the aforementioned designs of electronic locks or electronic locking cylinders and locking systems with access authorizations based on a data-based key secret, access authorizations have also proven useful in order to ensure the unambiguous identification of a person to whom access is to be granted, particularly in light of increased security requirements and the use of automatic access systems. For this purpose, biometric characteristics of the person are used as access authorization.

[0008] The use of biometric characteristics for verifying authorization is becoming increasingly widespread. While a biometric characteristic can uniquely identify an individual, it is also subject to a degree of uncertainty, as it can change due to external influences or simply over time. Biometric characteristics can be recorded and stored as a data set. Therefore, the use of biometric characteristics requires specific measures to ensure reliable authorization verification, particularly for the identification and / or verification of a person.

[0009] To capture biometric characteristics, devices for verifying authorization using a biometric feature are required. This could be, for example, a scanner that captures a person's fingerprint. Alternatives include the iris, which also has unique structures. Therefore, individuals can be identified and / or verified via fingerprints and / or their iris.

[0010] However, such devices can be impaired and / or disrupted in their usability and reliability over their service life or due to damage such as scratches or difficult-to-remove soiling, for example, from paint. For locking systems in buildings, such as hotels, absolute reliability of such devices is essential to offer a marketable product. Therefore, regular maintenance and checks to ensure proper functionality are generally unavoidable.

[0011] Furthermore, it is possible that older devices no longer meet the required security standards and that the associated and necessary software is no longer being updated, thus necessitating the replacement of such devices even if the device itself is undamaged. Additionally, it may be necessary to retrofit existing locking systems with electronic locks so that devices for verifying authorization using biometric features can also be used.

[0012] A method for determining authorization using a corresponding device is known from DE 10 2006 034 241 A1. In this prior art method, the biometric characteristic is captured by means of a sensor unit (scanner) and compared with stored data records for this characteristic assigned to an individual. The comparison leads to a result that enables a decision as to whether authorization exists, whereby, if the decision is positive, the data of the captured biometric characteristic is stored as a further data record specific to the individual.

[0013] However, if the aforementioned modifications are required on such a locking system, be it the replacement or addition of devices for determining authorization using a biometric feature, the electronic locks must subsequently be configured. A method for configuring electronic locks in general is known, for example, from EP 2 958 083 A1.

[0014] In this previously known method, a plurality of electronic locks are provided, which can be configured by an administrator and operated by a user using an electronic key. The configuration data for at least some of the electronic locks are transferred to at least one electronic key, and this configuration data is transferred to the unconfigured lock for the purpose of configuration in the event of a data communication connection between a lock that has not yet been reconfigured and the electronic key.

[0015] This method has proven effective in principle, insofar as the relevant data can be transferred to the electronic keys and from the electronic keys to the electronic locks. However, this method reaches its limits in very complex locking systems, where locks may be operated very irregularly and at long intervals, making it impossible to predict with certainty when a configuration will take place and be completed. Therefore, uncertainty remains as to whether and at what point the entire locking system with all electronic locks will be configured.

[0016] Furthermore, such a method for configuring electronic locks is not usable with every locking system, especially when the electronic locks are combined with a device for determining authorization using a biometric feature.

[0017] With these locking systems, it has proven necessary to centrally manage individual or all users for reconfiguration, and consequently, to centrally collect the biometric data required for use. This data then needs to be transferred to the individual electronic locks so that the locks can be used with the biometric features. It has proven problematic and time-consuming to activate some electronic locks only for specific individuals while allowing access to others for a larger number of people. Configuration in these locking systems often requires that the electronic locks be configured individually on-site, even if the data records of all users are centrally stored.

[0018] The object of the invention is therefore to create an electronic lock or relay according to the invention which significantly reduces the effort required to configure a locking system and which can be easily handled in a short time and without significant data processing effort, even when replacing or supplementing existing locking systems with corresponding devices for determining authorization using a biometric feature.

[0019] The solution to this problem provides that an authorization code, preferably stored in the lock or relay, can be output, with which the device for determining authorization and / or the lock and / or the relay can be switched into a state for learning a biometric feature authorizing the opening of the lock or the switching of the relay; that a control unit for the lock or the relay and / or the device for determining authorization is provided for entering and / or retrieving the authorization code; that the device is suitable for entering a biometric feature and for determining authorization using the biometric feature; and that a memory for the authorizing biometric feature is provided in the control unit of the lock or the relay and / or in a central system for managing a plurality of, at least two, electronic locks of a locking system or relays.

[0020] In the lock or relay according to the invention, a previously generated authorization code is transmitted and issued to the authorized user who is to authenticate themselves at the electronic lock. With this authorization code, which is preferably also stored in the lock, the user can authenticate themselves at the electronic lock and subsequently, using the authorization device, read their biometric feature, for example, a fingerprint. This biometric feature, in this case the fingerprint, is then automatically stored as an identification feature and subsequently assigned to a specific user, who can then, until further notice, move the electronic lock from a closed to an open position using their fingerprint.

[0021] This lock or relay is particularly suitable for locking systems that already have electronic locks with devices for determining authorization or using a biometric feature. If these devices need to be replaced or updated, the lock or relay according to the invention prevents the need for a complex reconfiguration of the locks at a central location by centrally recording all the users' biometric features and then transmitting them to the individual electronic locks. Furthermore, the lock or relay according to the invention can be used to manage devices with different software.

[0022] A method can be carried out with the lock or relay according to the invention in which the electronic locks are reconfigured by the individual users themselves by transmitting an authorization code to each user. The authorization code can be individualized so that each user receives an individual authorization code, which, for example, is generated centrally beforehand.

[0023] The authorization code can, for example, be stored in an electronic key, such as a transponder chip, a transmitter, or the like, or the identifier of the transponder or transmitter can be linked to an authorization code so that the electronic lock recognizes that this authorization code should subsequently enable the capture and storage of a biometric characteristic for future use.

[0024] There are, of course, alternative ways to issue an authorization code to the user. In the simplest case, it could be a PIN that the user enters via a keypad before their biometric data is scanned. This instructs the electronic lock, specifically the electronic cylinder with its corresponding control and storage module, to initiate the process of capturing and storing the biometric data. Once the biometric data has been captured and stored, the authorization to capture another biometric data based on the transmitted authorization code is blocked. However, the biometric data of other authorized users can be stored with different authorization codes, allowing different users to operate the electronic lock, each with their own unique biometric data.

[0025] In a simple manner, the lock or relay according to the invention can enable a method that can also be used in locking systems that are retrofitted with appropriate devices.

[0026] The authorization code can also be read by the electronic lock if the device for determining authorization using a biometric feature is connected to the lock. This connection can be wireless or wired. The lock accesses a memory containing the authorization code in the device for determining authorization using a biometric feature, and the authorization code is either read from the device or transmitted to the lock. Therefore, it is no longer necessary for the user to actively initiate a transmission. Consequently, the user does not need to be given instructions, nor does the user need to know the authorization code, as long as the authorization code is automatically transmitted to the lock.

[0027] Furthermore, the authorization code can be read from the device used to determine authorization using a biometric feature or transmitted via an IT network, a WAN, a cloud system, or a comparable device for data communication between two systems connected to a network. Peer-to-peer connections have also proven suitable for this purpose. For example, a lock can contact a data cloud at regular intervals and request new data for the lock in order to then import it. If no new data is available in the data cloud, the lock deactivates its readiness to receive data for a certain period. This conserves the lock's energy resources.

[0028] The data for the data cloud is transferred from a central data storage system on a computer system. After the lock is authenticated in the data cloud, the data is exchanged with the lock. This data may also include data related to the device for determining authorization using a biometric feature, such as the transmission of an authorization code to be stored in the lock. The user then has the option of identifying themselves at the lock by submitting their authorization code and, after approval, also reading a biometric feature via the device for determining authorization using a biometric feature as a future authentication factor.

[0029] The described method is also applicable to switchable relays, such as those used in elevator systems to enable special or priority trips for an elevator car. In this case, the relay can be controlled, for example, via a mechanical lock. The mechanical lock can be supplemented or replaced by a device for verifying authorization using a biometric feature.

[0030] According to the invention, an authorization code can be issued. This authorization code enables both the lock or relay and the authorization verification device to be set to a state that allows the transmission of a new authorization based on a new biometric feature. The authorization code is therefore preferably known within the lock or relay and the authorization verification device, and is recognized as such in order to switch the lock or relay and the device to readiness for capturing a new biometric feature for future authorized use. The authorization code is preferably transmitted wirelessly.

[0031] Once the authorization verification device and / or the lock or relay is / are switched to a learning position, the new biometric feature can be entered via the authorization verification device and saved as a future authorization. This new biometric feature is then stored in the lock or relay and can be used to operate the lock or relay in the future.

[0032] The process of adding another biometric feature, usable for operating the lock or relay, is then completed to prevent the entry of any further biometric features. For this purpose, the procedure would have to be repeated. The addition process can, for example, be time-limited, so that the process is interrupted if a time interval is exceeded. Alternatively, the process can be terminated by a signal from the lock's control unit when the control unit detects that the process is complete and the stored data has been saved.

[0033] According to a further feature of the invention, the authorization code is at least partially identical to the opening code. In this further development, it has proven advantageous that the user can also control the activation level in the configuration area of ​​the device for determining authorization using a biometric feature with their opening code, which is particularly personalized. This can be achieved, if necessary, by using an opening code shortened by one digit, which is then terminated, for example, with at least one terminating character, such as a hash symbol (#), to access the corresponding software level. This feature simplifies the operation of the electronic lock for the user, as a special authorization code is not required.It is sufficient to instruct the user to use their opening code, which only needs to be slightly modified to capture their biometric data and be able to use it for subsequent opening and closing operations.

[0034] Furthermore, it is provided that the authorization code can be transferred to an electronic key. The transfer of the electronic code can take place at a central location, for example, in an administrator's area. However, it is also conceivable that the administrator could configure specific areas with locks located therein in such a way that the authorization code is automatically transferred from a lock to the electronic keys located within a specific local area of ​​those electronic locks. Preferably, this could be, for example, the building entrance area, which is regularly used by all users who have access to the building with an electronic key.

[0035] The user can then, for example, be shown on a display in the area of ​​an electronic lock (input device) that an authorization code exists, which allows him to configure the device to determine authorization using a biometric feature.

[0036] According to a further feature of the invention, the authorization code can be transmitted via a keypad or wirelessly, for example, by reading it from a transponder or by actively transmitting it to a receiver in the lock's control system. This allows the user to transmit the authorization code at a specific time, for example, when they have the opportunity to configure access authorization via their biometric feature. Alternatively, automated transmission to a receiver in the lock's control system can be provided, so that the electronic lock is immediately available to configure authorization by transmitting a data set that matches the user's biometric feature. This feature also enables the use of temporarily restricted access, as may be necessary in hotels, for example.The user, in this case a hotel guest, receives the authorization code electronically before their arrival. This authorization code is limited to a specific room and a booked period, allowing the hotel guest to configure the device for authorization using a biometric feature at the beginning of their stay and subsequently use this device for the duration of their booked period.

[0037] According to a further feature of the invention, the authorization code is limited to a specific number of uses and / or time. This feature has the advantage that the authorization code can be used only once or possibly multiple times, but with a limited number of uses. In the case of a user who is only to operate a single electronic lock, a one-time usage restriction can be provided. However, if a user is to be able to operate a large number of electronic locks in a locking system and their biometric feature is also stored in each electronic lock, the authorization code can be limited to a specific number of uses, enabling the user to configure all electronic locks they are to operate according to their biometric feature.

[0038] It is also possible to implement a time limit, allowing, for example, remote monitoring of lock configurations by restricting such configurations to specific time intervals. Similarly, an authorization code may have a limited validity period, preventing subsequent use by unauthorized individuals for further configuration. This is particularly relevant when an authorization code is sent to a smartphone or tablet, as it cannot be guaranteed that the device is only being used by the authorized person at the time the code is sent and for a period of time afterward, or that the code is not being passed on to an unauthorized individual.It may also be provided that the transmission of the authorization code is combined with a unique code of the smartphone or tablet PC, so that the authorization code cannot be used if it is transmitted from a different smartphone or tablet PC.

[0039] According to a further feature of the invention, the authorization code can be repeatedly limited to a specific time interval. This design offers the advantage that an electronic lock, for example, can be regularly configured with respect to a biometric characteristic at a specific time interval. This allows, for instance, a tradesperson to be provided with an authorization code, granting them access for maintenance work. Outside of this time interval, neither access nor configuration of the electronic lock is possible, thus enabling access for different tradespeople, while limiting access both to a specific time interval and to a specific duration.

[0040] According to a further feature of the invention, the authorization code can be generated in an algorithm, the authorization code is then transmitted to a mobile device, such as a smartphone or a tablet PC, and stored in an application software (APP), wherein retrieving or sending and accepting the authorization code from the application software is made dependent on an authentication process of an authorized user.

[0041] In this setup, for example, the administrator generates an authorization code centrally. The user to be authenticated has a smartphone or tablet PC with the application software installed. The administrator sends the authorization code to this smartphone or tablet PC, where it is automatically associated with the application software. The user of the smartphone or tablet PC can then retrieve the authorization code on their device only with this application software, and only after an authentication process that recognizes the user as authorized. This could involve, for example, entering a fingerprint or facial recognition, or, in the simplest case, entering a personal identification number.Once the user is authenticated, the user receives the authorization code and can then use this authorization code to configure the electronic lock.

[0042] Finally, according to a further feature of the invention, the authorization code is deleted or blocked after a single use. This feature has the advantage that if the authorization code is shared, further configuration of the electronic lock is no longer possible. This also prevents, for example, unauthorized interception of an authorization code from a smartphone. An unauthorized user cannot use the already used authorization code to, for example, introduce their own biometric feature into the device and thus into the electronic lock, thereby gaining unauthorized access.

[0043] Further features and advantages of the invention will become apparent from the following description of the accompanying drawing. The drawing shows: Fig. 1 a first embodiment of a locking system in schematic representation and Fig. 2 a second embodiment of a locking system with an electronic lock in a schematic representation.

[0044] One in the Fig. 1 The depicted locking system 1 has three electronic locks 2, each of which, for example, has a lock housing 3 in which a latch 4 and a bolt 5 are slidably guided, whereby each lock 2 can be moved from a closed position to an open position and vice versa via the latch 4 and / or the bolt 5.

[0045] A control device 6 is also arranged in the lock housing 3. The control device 6 can receive and verify the correctness of the locking codes before it releases the electronic lock 2 for movement from the closed to the open position. For this purpose, an electric drive in the lock 2 is supplied with electrical energy to initiate the opening process. The movement of the latch 4 or the bolt 5 can be accomplished, for example, via a rotary knob that is free-running in the closed position, so that the lock 2 cannot be opened using the rotary knob.

[0046] Upon correct entry of an access code, a coupling process is initiated via the control device 6, which then connects the handle to the lock 2 and the latch 4 or the bolt 5 in such a way that the latch 4 or bolt 5 can now be moved from the closed position to the open position via the previously free-running hand knob.

[0047] The one in Fig. The embodiment shown in Figure 1 has a keyboard 7, via which, for example, an opening code or an authorization code can be entered into the control device 6.

[0048] Additionally, an electronic key 8 can be provided, which can also transmit an authorization code or an opening code to the control device 6. The necessary data communication link between the key 8 and the control device 6 can be established using short-range radio technology, such as Bluetooth, NFC, RFID, and / or the like. This is, in particular, a wireless communication link.

[0049] The electronic key 8 can be used as an alternative or in addition to the keyboard 7.

[0050] Finally, the lock 2 has a device 9 that serves to determine authorization using a biometric feature. This device 9 can be a reader that can capture fingerprints from fingers 10. The reader generates an image of the biometric features of the finger 10 in the area of ​​its tip, which are transmitted as data to the control device 6 via a wireless data line 11. The control device 6 has a computer unit (not shown) in which a data storage device is located. The data storage device is divided into a plurality of units, each representing a section of the data storage device in which data records of a person are stored.

[0051] If the control device 6 recognizes a fingerprint that is already stored as authorized in the data storage, the control device 6 controls the lock 2 to move it from the closed position to the open position and to enable the person to open a door equipped with the lock 2.

[0052] For this purpose, however, it is necessary that, as a first step, the fingerprints of fingers 10 are recorded and stored in the data storage, which will henceforth serve as authorization for access.

[0053] In the Fig. 1. Also shown is a smartphone 12 and a central computing unit 13.

[0054] The central computing unit 13 can transmit an authorization code to both the electronic key 8 and the smartphone 12 of an authorized person. Transmission occurs, for example, wirelessly, as shown by arrows 14. This authorization code enables the user of the electronic key 8 or the smartphone 12 to activate the device 9 for authorization using a biometric feature by transmitting the authorization code to the control device 6 in the lock 2. After the authorization code has been transmitted and verified, the control device 6 enables the device 9 to capture a biometric feature, namely a fingerprint. This fingerprint is then captured by the device 9 and transmitted to the control device 6, which adds this biometric feature to the data storage (not shown) as an authorizing data record.

[0055] Once the data set has been acquired, the control device 6 switches off the acquisition function of the device 9, so that the device 9 is subsequently available for recording the biometric feature.

[0056] Additional biometric features can be entered using further authorization codes.

[0057] The authorization code can, moreover, be at least partially identical to an opening code, so that the keypad 7 can be used both to open the lock 2 and to transmit an authorization code. After entering the authorization code, the data record of the biometric feature is read via the device 9 and stored in the control device 6, namely the data storage device. Consequently, the lock 2 can be controlled via both the opening code and the user's biometric feature.The authorization code and opening code can have a specific sequence of digits that is entered via the keypad, whereby the authorization code and opening code differ by one digit, for example by a version of the opening code shortened by the last digit as the authorization code, which is activated, for example, after entering a specific key or key combination, such as the hash key, or after a certain time has elapsed and allows the process of configuring the lock 2 via the device 9.

[0058] In Fig.Figure 2 shows a further embodiment comprising a central computing unit 13 in which an authorization code is generated by an algorithm. The authorization code is then wirelessly transmitted to a smartphone 12 as indicated by arrow 14. The smartphone 12 has application software that stores the authorization code and, when required, wirelessly transmits it to the control device 6 as indicated by arrow 15. The transmission can be performed actively by the user of the smartphone 12 or automatically when the smartphone 12 enters a communication range of the lock 2. In this embodiment, the control device 6 can also initiate an authentication process in the smartphone 12, so that the transmitted authorization code is also checked to ensure that it was transmitted by an authorized person.The corresponding request to the smartphone 12 is schematically represented by the arrow 16.

[0059] If the user of the smartphone 12 can authenticate themselves correctly, they can then transmit their fingerprint (finger 10) via device 9 to the control device 6 of the lock 2 for storage in the data memory. The authorization code is then deleted from the application software. Consequently, the authorization code is no longer available to unauthorized users. Reference sign 1. Locking system 2. Castle 3. Lock housing 4. Trap 5. Bar 6. Control device 7. Keyboard 8. Key 9. Device 10th finger 11. Data line 12. Smartphone 13. Computer unit 14. Arrow 15. Arrow 16. Arrow QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] EP 3 441 948 A1

[0002] DE 10 2006 034 241 A1

[0012] EP 2 958 083 A1

[0013]

Claims

[1] Electronic lock or relay with a device for determining authorization using a biometric feature, wherein in particular a device for determining authorization using a biometric feature is added to the lock or relay or in particular a device for determining authorization using a biometric feature is replaced in an electronic lock, characterized by , that an authorization code, preferably stored in the lock or relay, can be output, with which the device for determining authorization and / or the lock and / or the relay can be switched into a state for teaching a biometric feature authorizing the opening of the lock or the switching of the relay, that a control of the lock or the relay and / or the device for determining authorization for entering and / or retrieving the authorization code is provided, that the device is suitable for inputting a biometric feature and for determining authorization using the biometric feature, and that a memory for the authorizing biometric feature is provided in the control of the lock or relay and / or a central system for managing a plurality of, at least two, electronic locks of a locking system or relays. [2] Electronic lock or relay according to claim 1, characterized by that the authorization code and an opening code are at least partially identical. [3] Electronic lock or relay according to claim 1 or 2, characterized by that an electronic key is provided for the transmission of the authorization code. [4] Electronic lock or relay according to any one of claims 1 to 3, characterized by that a keyboard or mobile device, such as a smartphone for wireless transmission, or a transponder for reading the authorization code or for actively transmitting the authorization code to a receiver of the lock or relay control unit is provided for the transmission of the authorization code. [5] Electronic lock or relay according to any one of claims 1 to 4, characterized by that the authorization code is limited to a specific number of applications and / or a certain time period. [6] Electronic lock or relay according to claim 5, characterized by that the authorization code can be repeatedly limited to a specific time interval. [7] Electronic lock or relay according to any one of claims 1 to 6, characterized by, that the authorization code can be generated in an algorithm, the authorization code can then be transmitted to a mobile device, such as a smartphone or a tablet PC, and can be stored in application software, whereby retrieving or sending and accepting the authorization code from the application software is possible depending on an authentication process of an authorized user. [8] Electronic lock or relay according to any one of claims 1 to 7, characterized by that the authorization code can be deleted after a single use. [9] Electronic lock or relay according to any one of claims 1 to 8, characterized by , that the authorization code from the device is used to determine authorization is readable using a biometric feature during the integration of the device for determining authorization using a biometric feature, or transferable from the device for determining authorization using a biometric feature. [10] Electronic lock or relay according to any one of claims 1 to 3 and / or 5 to 9, characterized by that the authorization code is transferable via an IT network, a WAN and / or a cloud system and / or retrievable from an IT network, a WAN and / or a cloud system.

Images