SECURITY SYSTEM

Description

[0001] The invention relates to a security system for controlling and / or monitoring door locks for escape route security. The security system comprises door lock controls, wherein a door lock control serves to control a locking mechanism assigned to the door lock control. The security system comprises trigger elements, in particular emergency buttons, wherein actuation of a trigger element can trigger the activation of at least one locking mechanism, according to the preamble of patent claim 1.

[0002] Safety systems with an emergency button for escape route security are well known. When the emergency button is pressed, a door lock is unlocked, allowing a user to escape in the event of danger. In this case, the emergency button is always electrically connected to the door lock(s) that are to be unlocked when the emergency button is pressed. When the emergency button is pressed, the power supply between the door lock and the emergency button is interrupted, thereby unlocking the door lock.

[0003] EP 2 725 172 A2 discloses connecting an emergency button and a door lock via a bus system. In this case, only one door lock is connected to a bus system. Thus, a separate bus system is required for each door.

[0004] The document DE19937034 A1 relates to an electrically switchable locking device for escape and rescue route systems comprising a plurality of door openers and a plurality of actuating buttons, all of which are connected to a bus system, wherein each door opener comprises a locking device and a microprocessor control, wherein the assignment of door openers and actuating buttons to one another can be freely programmed and a subsequent change of the individual assignments is possible via programming of the affected door openers and actuating buttons.

[0005] It is therefore an object of the present invention to provide a security system which enables escape route security for several doors in a simple and / or material-saving manner.

[0006] This object is achieved by a security system according to independent claim 1. Advantageous developments of the security system are specified in the dependent claims, the description, and the figures. The features mentioned in the description and the claims may be essential to the invention individually or in combination.

[0007] The previously derived and demonstrated object is achieved on the basis of the security system described at the outset in that a number of door locking controls and a number of triggering elements are connected to one another via a common bus system and the number of door locking controls are assigned to the number of triggering elements in such a way that when one of the triggering elements is actuated, only the at least one door locking control assigned to the actuated triggering element controls the respective locking mechanism for unlocking.

[0008] The safety system includes the shared bus system. The shared bus system is referred to below as the first bus system. A connection to a bus system is understood below as a direct connection, so that a component connected to the bus system is considered a bus device of the bus system with its own bus address.

[0009] The security system comprises a plurality of trigger elements and a plurality of door locking controllers. A first number m of trigger elements and a second number m' of door locking controllers are connected to the first bus system. Here, m and m' correspond to a natural number of at least two, preferably at least three, particularly preferably at least four.

[0010] In one example, n is equal to four. The first number m can be the same as the second number m' or different from the second number m'. According to the invention, selective unlocking of the door locks is provided. Thus, upon actuation of one of the trigger elements connected to the first bus system, not all door lock controls connected to the first bus system are caused to control the respective locking mechanism for unlocking, but only those door lock controls that were previously assigned to the actuated trigger element. The remaining door lock controls that have not been assigned to the actuated trigger element refrain from controlling the respective locking mechanism for unlocking.

[0011] This makes it possible to arrange the door locks connected to the first bus system on different doors. If the trigger element is activated, for example, only the door on which the trigger element is located can be opened. The other doors remain locked. It is also possible to assign the door lock controls to a trigger element in such a way that multiple doors can be opened when the trigger element is activated. To do this, only a corresponding number of door lock controls must be assigned to the trigger element. By connecting the door lock controls and the trigger elements via the first bus system, a material-saving option for selectively unlocking door locks has been created.

[0012] In an embodiment not forming part of the present invention, it is also possible to assign all door locking controls to at least one trigger element, in particular all trigger elements. In this case, selective unlocking upon actuation of the trigger element is eliminated.

[0013] At least, however, the security system according to the invention allows the operator of the security system to choose whether selective unlocking is desired or not.

[0014] The trigger element may comprise a manually operable actuating element. An actuating signal may be generated upon actuation of the actuating element.

[0015] The trigger element is preferably designed as an emergency button. In this case, the actuating element corresponds to the actuating element of the emergency button. Alternatively, the trigger element can be designed as a panic bar assembly. In this case, the actuating element is designed as a panic bar. The trigger element can be designed as a fitting assembly. In this case, the actuating element is designed, for example, as a door handle.

[0016] Locking is the transfer of a door lock or locking mechanism into a locked state. Unlocking is the transfer of a door lock or locking mechanism into an unlocked state.

[0017] Each door locking controller is assigned at least one locking mechanism. For example, each door locking controller can be assigned exactly one locking mechanism. Each door lock comprises a door locking controller and a locking mechanism.

[0018] The respective locking mechanism can be designed, for example, to be electromechanical or purely electromagnetic. The locking mechanism comprises, for example, at least one coil. Control of the locking mechanism for locking or unlocking can be implemented, in particular, by switching an electrical power supply on or off. The electrical power supply can serve to supply the coil with electrical current.

[0019] An example of an electromagnetic locking mechanism is described in DE100 50 111 C1. In the unlocked state, for example, no magnetic forces act on the door. In the locked state, for example, magnetic forces act on a door.

[0020] An electromechanical locking mechanism has a mechanical connection to the door when locked. When unlocked, the mechanical connection can be removed or canceled.

[0021] For example, the electromechanical locking mechanism can have a locking element, i.e. a bolt or a door latch, which is in a retracted position when the door lock is in the unlocked state. In the retracted position, the locking element is disengaged from the door. In the locked state, the locking element is engaged with the door. In a further alternative of an electromechanical locking mechanism, the locking mechanism is constructed in the manner of a door opener. I.e., the locking mechanism comprises a latch element. In the locked state of the door lock, a door latch of the door is in engagement with the locking mechanism. In the unlocked state, the latch element releases the door latch such that the door latch can be disengaged from the locking mechanism, in particular by pressure on the door.

[0022] Preferably, switching off the electrical power supply results in the door lock being unlocked. Thus, the locking mechanism is activated to unlock the door lock by switching off the electrical power supply. Preferably, switching on the electrical power supply results in the door lock being locked. Thus, the locking mechanism is activated to lock by switching on the electrical power supply. The door lock control unit controls the respective associated locking mechanism for locking and unlocking. For this purpose, the door lock control unit can switch the electrical power supply for the locking mechanism on and off.

[0023] A "locking or unlocking command" also occurs when the safety system receives feedback about the state of the locking mechanism. A "locking or unlocking command" also occurs when, as detected by the feedback, the locking mechanism does not correspond to the desired state, and therefore an alarm is issued and / or a new attempt is made to achieve the desired state.

[0024] The security system can be designed without at least one of the locking mechanisms. In this case, the respective door locking control merely controls the locking mechanism. For example, the door locking control switches the electrical power supply for the locking mechanism on or off or initiates the switching on or off of the electrical power supply. The security system can have at least one door locking control whose associated locking mechanism is not included in the security system. In this case, the door locking control is designed as a door locking adapter. The door locking adapter serves to use the security system according to the invention with already installed locking mechanisms.

[0025] Particularly preferably, the security system includes door locks.

[0026] At least one of the door locking or locking mechanisms may be integrated into a mechanical lock.

[0027] In the following, a distinction is made between a user and an operator. A user can be any person who uses the security system. For example, a user could be a guest who wants to escape through the door secured by the security system. An operator serves to operate the security system. The operator has access to a security system guard device and / or can authenticate themselves to the security system, particularly to operate the security system. The guard device can be embodied as a PC or a monitor.

[0028] The security system is primarily designed to secure escape routes. The security system thus serves to release the escape route. This means that actuating the actuating element unlocks the door without user authentication. Unlocking can occur immediately or with a time delay.

[0029] The trigger element can trigger the locking mechanism to unlock. Triggering a trigger is understood in particular to mean sending a message via the first bus system and / or a second bus system, which message contains information and / or a command that causes the direct or indirect recipient of the message to trigger the trigger. The sender of the message initiates the trigger. Thus, triggering a trigger is understood to mean indirect triggering. For example, the trigger element can send a message via the first bus system to the door locking controller, whereupon the door locking controller triggers the locking mechanism to unlock. The trigger element can, in particular, trigger the unlocking of the locking mechanism with a time delay.

[0030] The consequence of an activity is understood to mean that an activity is causal, regardless of whether the activity continues or not.

[0031] The number of door locking controls and the number of trigger elements are assigned to each other. Therefore, it can be stated that the door locking controls are assigned to the trigger elements, or that the trigger elements are assigned to the door locking controls.

[0032] According to the invention, the door locking controls belonging to the number of door locking controls each contain a record of the at least one trigger element to which the respective door locking control is assigned. This makes it possible for the door locking control to decide whether the trigger element intended to cause the door lock to actuate the locking mechanism for unlocking is actually assigned to the trigger element.

[0033] For this purpose, it can be provided that the trigger elements comprise a bus address. Each trigger element comprises at least one bus address. The bus address of the trigger element can be stored in the at least one door locking controller assigned to the trigger element for assignment. This enables secure assignment. In particular, the bus address is stored in the respective trigger element in a non-changeable manner. This means that a user or operator cannot change the bus address. Thus, the bus address cannot be changed by a parameterization program or by a setting option of the trigger element.

[0034] According to the invention, all of the door locking controls of the number of door locking controls are notified of the actuation by the trigger element as a result of the actuation of the trigger element.

[0035] All door locking controllers of the number of door locking controllers are understood to mean all door locking devices connected to the first bus system. The actuated trigger element sends a message about the actuation to all door locking controllers of the first bus system. The notified door locking controllers decide whether the locking mechanism assigned to the door locking controllers should be activated to unlock. To do this, each door locking controller connected to the first bus system checks whether the respective door locking controller is assigned to the trigger element sending the message. Only if the door locking controller determines that the door locking controller is assigned to the trigger element sending the message does the door locking controller activate the locking mechanism to unlock.Preferably, the assignment of the door locking controls to the trigger elements only occurs during commissioning of the security system. "Commissioning" means that the assignment occurs before the security system begins operation. In particular, additional parameters for the security system are set during commissioning.

[0036] The assignment of the door locking controls to the trigger elements can be done through a conscious action by an operator. The assignment of the door locking controls to the trigger elements can be done via the first bus system. In other words, the first bus system can be involved in the assignment of the door locking controls to the trigger elements. Thus, during the assignment, a trigger element can send the bus address of the trigger element via the first bus system.

[0037] Particularly preferably, the assignment of the door locking controls to the trigger elements is set directly on the trigger elements and / or on the door locking controls. This allows, for example, the assignment to be performed only if the operator at least sees the trigger element and / or the door locking controls assigned to the trigger element, in particular physically contacts and / or manually operates them.

[0038] For example, when commissioning the security system in an assignment mode of the door locking control, a deliberate action performed on the trigger element to be assigned can assign the door locking control in the assignment mode to the trigger element on which the action is performed. The deliberate action to be performed on the trigger element can include actuating the trigger element. In particular, the deliberate action to be performed on the trigger element can correspond to actuating the trigger element. This can achieve a particularly secure assignment.

[0039] The door lock controller may comprise a first and a second digital processing means. The first and / or second processing means may each comprise a processor. The first and / or second processing means may each be embodied, for example, as microprocessors or microcontrollers. The first and / or second processing means may each comprise a non-volatile memory.

[0040] It may be that both the first processing means and the second processing means store the information to which at least one triggering element the respective door locking control is assigned. This achieves redundancy.

[0041] It is preferably provided that the locking mechanism can be controlled by the first processing means and redundantly by the second processing means.

[0042] The trigger element, in particular the emergency button, can comprise an electronic unit. The electronic unit can comprise a first and a second digital trigger element processing unit, in particular a first and a second emergency button processing unit. The first and / or the second trigger element processing unit, in particular the first and / or the second emergency button processing unit, can each comprise a processor. The first and / or the second trigger element processing unit, in particular the first and / or the second emergency button processing unit, can be designed as a microprocessor or microcontroller. The first and the second trigger element processing unit can each comprise a non-volatile memory. In addition, the electronic unit can comprise a third digital trigger element processing unit.

[0043] The first and second trigger element processing units can each independently detect an actuation signal. The first trigger element processing unit detects a first actuation signal, and the second trigger element processing unit detects a second actuation signal. The first and second trigger element processing units can then each independently, via the first bus system, trigger the activation of the locking mechanism for unlocking. In particular, at least one message, in which the first and / or second trigger element processing units inform the door locking control system about the presence of the first or second actuation signal, is sent via the first bus system. In particular, the first trigger element processing unit informs the first processing means, and the second trigger element processing unit informs the second processing means.As a result, in particular, both the first and the second processing means control the locking mechanism for unlocking, i.e. switch off the electrical power supply.

[0044] The first and second trigger element processing units can, for example, monitor each other. If an error is detected, the electronic unit, in particular the intact trigger element processing unit, causes the first and second processing means to trigger the locking mechanism for unlocking.

[0045] The first and second processing means can monitor each other. If an error is detected, at least the intact processing means triggers the locking mechanism to unlock.

[0046] A life-sign signal from the first and second trigger element processing units is preferably sent regularly to the door locking control. The first and second trigger element processing units each emit their own life-sign signal. The life-sign signals can be contained in a message. The first processing means checks the life-sign signal from the first trigger element processing unit, and the second processing means checks the life-sign signal from the second trigger element processing unit. If one of the life-sign signals fails once or more than once, the first and second processing means trigger the locking mechanism to unlock. One processing means can inform the other processing means of the lack of a life-sign signal.

[0047] The first and second processing means communicate with each other when the door locking control system has received a message about the actuation of the trigger element and / or the presence of a fire alarm signal. If only the first processing means or the second processing means determines that the trigger element has been actuated or that a fire alarm signal is present, the determining processing means controls the locking mechanism to unlock and / or causes the other processing means to also control the locking mechanism to unlock.

[0048] It may be that the first trigger element processing unit always sends the safety-relevant message, e.g., the message about the presence of an actuation signal, the life signal, to the door locking controller. The message includes the information from the first and second trigger element processing units.

[0049] In addition to the function already described, that the trigger elements cause the associated door locking controls to unlock as a result of an actuation (function a.), at least one of the trigger elements connected to the first bus system can also perform at least one further function.

[0050] The trigger element can be connected to a fire alarm system. The trigger element can receive a fire alarm signal. After receiving the fire alarm signal, the trigger element can trigger at least one locking mechanism to unlock (function b). In particular, the trigger element sends a message about the presence of the fire alarm signal to the door locking controller, whereupon the door locking controller triggers the locking mechanism to unlock. In particular, the trigger element sends such a message to all door locking controllers connected to the first bus system. Preferably, only the at least one door locking controller associated with the trigger element that sent the message then triggers the respective locking mechanism to unlock.

[0051] The trigger element can delay the activation of the locking mechanism for unlocking following actuation of the trigger element (function c). In particular, it is provided that the trigger element causes the locking mechanism to be activated for unlocking with a time delay. The trigger element can send a message regarding the actuation to the door locking controller(s) with a time delay. The message can be sent to all door locking controllers of the first bus system, as described above, or to the at least one associated door locking controller. To determine the time delay, the trigger element can comprise a timer.

[0052] The trigger element can delay the activation of the locking mechanism by a first delay period. Within the first delay period, the trigger element may receive a message to delay the activation of the locking mechanism by a second delay period. The trigger element may determine the first delay period and / or the second delay period using the timer. Upon completion of the first or second time delay period, the trigger element can trigger the activation of the locking mechanism to unlock. Of course, only those locking mechanisms whose door locking controls are assigned to the trigger element are activated.

[0053] The security system may include a central escape route control. The central escape route control is designed to be located away from the triggering element and / or the door lock. In particular, the central escape route control is designed to be located in a guard room. The guard room may also contain a security device, e.g., a monitor or personal computer for monitoring.

[0054] The central escape route control is connected to a second bus system. Devices in the first bus system and the central escape route control can communicate with each other via the first and second bus systems.

[0055] The extension of the time delay by the second extension period can be initiated by the central escape route control system. In particular, the central escape route control system can include a delay element. Upon operation of the delay element, the trigger element can receive a message to delay the activation of the locking mechanism by a second delay period. In particular, the trigger element then ends the first delay period and starts the second delay period.

[0056] It is conceivable that the trigger element can be transferred from an activated state to a deactivated state. In the deactivated state, actuation of the trigger element does not trigger a locking mechanism to unlock. In the activated state, actuation of the trigger element triggers the locking mechanism to unlock. Thus, in the deactivated state of the trigger element, the locking mechanism is prevented from being actuated to unlock as a result of actuation of the trigger element (function d.). In the deactivated state, the trigger element preferably does not trigger the actuation of the locking mechanism to unlock. This applies in particular to the door locking controls assigned to the trigger element. The deactivation of the trigger element can be initiated by the central escape route control.For this purpose, the central escape route control system can comprise a first control element. Upon operation of the first control element, at least one trigger element of the first bus system can be transferred to the deactivated state.

[0057] The trigger element can activate an audio and / or video module or initiate such activation (function f.). The audio and / or video module transmits an audio and / or video recording to the guard device. In the event of danger, this allows the operator in the guard room and the on-site user attempting to escape to communicate acoustically, and / or the operator in the guard room can view the location in front of the door where the trigger element was activated. In particular, the trigger element activates the audio and / or video module upon activation of the trigger element. Activation can occur at least in the deactivated state. Preferably, activation always occurs upon activation of the trigger element.

[0058] Preferably, it is provided that, following actuation of the triggering element, it is electronically prevented that a locking mechanism of the door lock can be activated to lock without the presence of a cancellation condition (function e.). This prevents the door lock from relocking in the event of danger, even though users still intend to escape. In this case, the door lock control, in particular, can electronically prevent the door lock from relocking. If the cancellation condition is met, the door lock control at least permits relocking. In particular, the door lock control activates the locking mechanism immediately after the cancellation condition is met.

[0059] To achieve the cancellation condition, a cancellation action can be performed on the trigger element. The cancellation action, which is performed directly on the trigger element, can be generated by actuating an actuating element of the trigger element. In particular, the cancellation action on the trigger element corresponds to the actuation of the actuating element to release the escape route. A cancellation signal generated in this way can thus correspond to the actuation signal. In order for the door locking control system to recognize that the actuation of the actuating element is being performed to achieve the cancellation condition and not to generate the actuation signal to release the escape route, the door locking control system must have additional information. For example, it may be necessary for an operator to authenticate themselves.

[0060] An authentication device that is connected or connectable to the trigger element can be used for this purpose. This can be the authentication. Following the authentication, the trigger element can receive a positive identification signal. To achieve the cancellation condition, a predetermined time sequence and / or order for the generation of the cancellation signal and the authentication, in particular the reception of the positive identification signal, may be required. In particular, the cancellation signal and the authentication must be present, at least partially, simultaneously.

[0061] In particular, if the door, in particular the door leaf, remains closed after the actuation signal has been generated, the security system has at least one further possibility to achieve the cancellation condition. The expiration of a predetermined period of time and, in the absence of a signal, opening the door within the predetermined period can contribute to or be sufficient for achieving the cancellation condition. In addition, receipt of a cancellation signal from the central escape route control system can contribute to achieving the cancellation condition. It may also be necessary for one of the possibilities for achieving the cancellation condition without a cancellation action on the trigger element to be stored as permissible.

[0062] If a trigger element is activated, the at least one door locking control associated with the activated trigger element electronically prevents the corresponding locking mechanism from being activated for locking until the cancellation condition is met. However, the door locking controls of the first bus system not associated with the activated trigger element remain lockable.

[0063] The central escape route control may include a central emergency button. If the central emergency button is actuated, at least one locking mechanism can be activated to unlock as a result of the actuation. The process by which the locking mechanism is activated to unlock as a result of the actuation of the central emergency button is preferably single-fault safe and is thus suitable for use in the event of danger. In particular, as a result of the actuation of the central emergency button, a message regarding the actuation of the central emergency button is sent to at least one door locking control of the security system, preferably several door locking controls of the security system, particularly preferably all door locking controls of the security system. As a result, at least some of the notified door locking controls may activate the respective locking mechanism to unlock.

[0064] It is conceivable that, following the actuation of the central emergency button, only some of the door locking controls will trigger the respective locking mechanism to unlock, while the remaining door locking controls will not trigger such a trigger. This ensures selectivity in unlocking following the actuation of the central emergency button. Thus, following the actuation of the central emergency button, at least one locking mechanism can be prevented from being triggered to unlock.

[0065] For this purpose, it can be stored in the security system, preferably in the door locking controls of the security system, whether unlocking is permitted following the actuation of the central emergency button. In particular, an operator can perform this setting. For this purpose, the operator can, for example, use a parameterization program to specify which door lock should be unlocked following the actuation of the central emergency button.

[0066] If the door locking control receives a message regarding the actuation of the central emergency button, it can first check whether unlocking is permitted following actuation of the central emergency button. Only if unlocking is permitted following actuation of the central emergency button will the door locking control activate the locking mechanism to unlock the door. If, however, unlocking is not permitted following actuation of the central emergency button, the locking mechanism will not be activated to unlock the door. This procedure is particularly useful if all door locking controls in the security system are notified of the actuation of the central emergency button.

[0067] It is conceivable that the security system includes multiple central escape route controls. For example, one of the central escape route controls can be located in the guard room. Another central escape route control can be located in a nurse's station. Thus, the security system can include multiple central emergency buttons.

[0068] Preferably, selectivity is provided with regard to unlocking the door locks as a result of the actuation of the different emergency buttons. For example, it can be stored in the security system, in particular in the door locking controls, as to which central emergency button is actuated to unlock the locking mechanism. For example, it can be that a specific door locking control activates the locking mechanism as a result of the actuation of a first emergency button, and as a result of the actuation of a second emergency button, the door locking fails to activate the locking mechanism to unlock. For this purpose, a list of the central emergency buttons can be stored in the door locking control, as a result of which the locking mechanism is to be activated to unlock. The list is, for example,This is done by an operator setting the selectivity of the central emergency buttons to the door locks in the parameterization program. This approach is particularly useful if all door lock controllers of the security system are notified of the activation of the central emergency buttons of the security system.

[0069] The security system may comprise multiple bus systems, each connected to a number of trigger elements and a number of door locking controllers, wherein the number of door locking controllers is assigned to the number of trigger elements in such a way that, upon actuation of one of the trigger elements, only the at least one door locking controller assigned to the actuated trigger element controls the respective locking mechanism for unlocking. The multiple bus systems may, in particular, be of the same bus system type. The bus system type is, in particular, the bus system type of the first bus system, e.g., a CAN or a DCW bus. The second bus system may be of a different bus system type, e.g., a LON or a LAN bus.

[0070] The security system, in particular the triggering element, may comprise an acoustic alarm device.

[0071] The security system, in particular the triggering element, can comprise a display device for visually displaying a locking state of the door lock. A locking state is understood to be the locked and / or unlocked state of the door lock.

[0072] The safety system, in particular the triggering element, can comprise a display device for optically displaying a time-delayed activation of the locking mechanism after actuation of the triggering element.

[0073] Both the first and / or second delay periods can be visually displayed. The visual representation of the first and second delay periods may differ.

[0074] The security system, in particular the trigger element, can include a display for visually indicating an alarm condition. The alarm condition can indicate the danger. The alarm condition occurs, in particular, after the trigger element is activated and / or after a fire alarm signal is received.

[0075] The security system, in particular the trigger element, can provide a visual indication if relocking fails, in particular if the door remains open, which can be detected by the at least one door status monitoring device. A fire door should always be closed after an ingress. If, for example, the door lock has been unlocked due to a positive authentication signal and the door was opened but not automatically relocked after the predetermined period of time, this fact can be displayed visually. It can also be displayed visually if a preset opening time is exceeded. The door status monitoring device can detect the opening time. An operator can select the opening time. The operator can store the opening time using the parameterization program.

[0076] The trigger element can comprise illuminants as an indicator, as an indicator device, as an indicator for the visual representation of an alarm state and / or for the visual representation of a failed relocking attempt. The illuminants preferably serve both as an indicator, as an indicator device, as an indicator for the visual representation of an alarm state and for the visual representation of a failed relocking attempt. For this purpose, the illuminants can be controlled in at least two groups. In particular, the illuminants can be controlled at least partially individually.

[0077] Preferably, each triggering element comprises the acoustic alarm device and / or the display device, the display apparatus, the display and / or the lighting means.

[0078] The security system may comprise at least one control device.

[0079] It is conceivable that the control device is connected to the first and second bus systems. Thus, participants of the first bus system can be connected to the central escape route control system via the control device.

[0080] The control device can control the display device, in particular the lighting means, for the optical representation of the locking state and / or initiate such control (function p.).

[0081] The control device can control the display device, in particular the lighting means, to visually display the time-delayed activation of the locking mechanism and / or initiate such activation (function q.). In this case, the control device can visually display the first and / or second delay period.

[0082] The control device can control the display, in particular the lighting means for the optical representation of an alarm condition and / or the acoustic alarm device for issuing an acoustic alarm, or can cause such a control (function o. and / or function r.).

[0083] The control device can issue a visual or audible alarm if relocking fails, particularly if the door remains open (see function).

[0084] The control device can activate or have activated the audible alarm device to trigger an alarm, depending on a signal from the door status monitoring device regarding the door opening, particularly when there is no authorization to access the door. A door may be unlocked for at least a certain time window. If the door is opened within this time window, an audible alarm is triggered. The audible alarm can be triggered within the time window or only if there is no authorization to access the door.

[0085] To execute the functions, parameters can be stored in the control device. For this purpose, the control device has, in particular, a non-volatile memory. The parameters can be set by an operator using the parameterization program. Thus, the control device can be used to store parameters. Logical links relating to the functions of the control device can be stored in the control device.

[0086] The control device is in particular connected to the first bus system. Thus, the control device can be integrated into one of the triggering elements. The at least one further triggering element, which is connected to the first bus system, is preferably designed without the control device. In this case, the control device can control the display device, the display element, the display, the lighting means, and / or the acoustic alarm device of the triggering element, which comprises the control device. The at least one further triggering element can be caused by the control device to control the display device, the display element, the display, the lighting means, and / or the acoustic alarm device of the at least one further triggering element.

[0087] Alternatively, the control device can be integrated into one of the door locking controllers. The at least one further door locking controller connected to the first bus system is preferably designed without the control device.

[0088] In a further alternative, the control device is integrated neither into any of the trigger elements connected to the first bus system nor into any of the door locking controllers connected to the first bus system. Rather, the control device can be connected to all trigger elements connected to the first bus system and to all door locking controllers connected to the first bus system via the first bus system. This allows the control device to be arranged away from the door, for example, in a utility room. For example, in this variant, the control device can comprise the DIN rail housing.

[0089] The control device can have knowledge of the state of the door locks connected to the first bus system and / or the state of the trigger elements connected to the first bus system. The control device can have knowledge of communication between the door lock controllers and the trigger elements via the first bus system. In particular, the control device has knowledge of the state of all door locks connected to the first bus system and / or knowledge of the state of all trigger elements connected to the first bus system. The control device can have knowledge of communications between the door lock controllers and the trigger elements connected to the first bus system.

[0090] The control device connected to the first bus system can selectively notify the number of door locking controllers and / or the number of trigger elements. Selectively means that the function is not executed for all components accessible via the first bus system, but only for a selection or for a single component accessible via the first bus system. In particular, the control device can selectively control or selectively initiate control. The control device can control the display device and / or initiate control (function q.) and / or control the display and / or initiate control (function r.) only for the trigger elements that are assigned to the same door locking controller as the actuated trigger element.

[0091] It is conceivable that parameters and / or assignments for selective control are stored in the control device. In particular, the control device stores which of the door locking controllers belonging to the number of door locking controllers is assigned to which trigger element of the number of trigger elements. This assignment is stored in the control device for all door locking controllers of the first bus system.

[0092] If a trigger element is actuated and the control of the locking mechanism of at least one door lock associated with the actuated trigger element is to be triggered with a time delay, the control device causes the time delay to be visually displayed only in all trigger elements that are assigned to the door lock control associated with the actuated trigger element. If the control device is integrated into one of the affected trigger elements, the control device activates the display device for this purpose.

[0093] If a door locking controller detects a change in the locking state, the control device can cause the change in the locking state to be visually displayed on the at least one trigger element associated with the detecting door locking controller. The trigger elements not associated with the detecting door locking controller are not triggered to do so.

[0094] If a trigger element is activated, the control device preferably causes an alarm condition to be visually and / or acoustically indicated only in those trigger elements that are assigned to the door locking control associated with the activated trigger element. If the control device is integrated into one of the affected trigger elements, the control device activates the display and / or the acoustic alarm device for this purpose.

[0095] If a trigger element receives a fire alarm signal, the control device preferably ensures that an alarm condition is visually and / or acoustically indicated only in those trigger elements that are assigned to the door locking control associated with the trigger element receiving the fire alarm signal. If the control device is integrated into one of the affected trigger elements, the control device activates the display and / or the acoustic alarm device for this purpose.

[0096] The control device can also selectively initiate non-safety-relevant activations for unlocking or locking.

[0097] For example, the control device can trigger the locking mechanism to unlock upon receipt of a positive authentication signal or initiate such a triggering (function h.). For this purpose, the control device can be connected or connectable to an access control system. If the control device receives, for example, a positive authentication signal from an access control system, the control device only triggers the unlocking of the door lock associated with the access control system.

[0098] The control device can, for example, trigger the locking mechanism to unlock at a predetermined time or initiate such a triggering (function i.). Unlocking at a predetermined time can be provided if, for example, the door is to be unlocked during a specific time window per day. If it is stored for only one door lock of the first bus system that the door lock is to be unlocked at a predetermined time, the control device initiates unlocking at the predetermined time only for that one door lock; the remaining door locks of the first bus system remain locked.

[0099] If there is no danger, i.e. if neither the triggering element has been actuated nor is there a fire alarm signal, the control device can activate the locking mechanism for automatic relocking after a predetermined period of time has elapsed or initiate such activation (function k.). If a predetermined period of time of a first length has been stored by the operator for a door lock of the first bus system and a predetermined period of time of a second length, which differs from the first length, has been stored for a further door lock of the first bus system, the control device initiates automatic relocking for the one door lock after the first length of the predetermined period of time and relocking for the further door lock after the second length of the predetermined period of time.

[0100] Additionally or alternatively, it can be provided that the control device immediately activates the locking mechanism for automatic relocking after receiving a signal indicating that the door is closed, or initiates such activation (function I). If automatic relocking immediately after closing the door has been stored as permitted for one door lock and not for a subsequent door lock, the control device initiates automatic relocking immediately after closing the door only for the first door lock.

[0101] It may be that exactly one control device is provided for the first bus system. If there are multiple bus systems that connect to the second bus system and to which at least one door locking controller and one trigger element are each connected, each of the multiple bus systems can have exactly one control device.

[0102] To enable selective control or to initiate selective control, the safety system may have at least one input device. For this purpose, the components connected to the first bus system may preferably each comprise an input device.

[0103] For example, the input device can have switches, in particular DIP switches. The components connected to the first bus system are referred to as bus devices.

[0104] It is conceivable that the bus devices of the first bus system each have a bus address that can be manually set using the input device. Bus devices with the same manual setting can be assigned to one another. It is possible that the respective bus device modifies the setting in such a way that, despite multiple bus devices sharing the same setting, a different bus address is generated. The manually settable bus address is intended specifically for non-safety-relevant functions. Each bus device can include the manually settable bus address as a second bus address in addition to the unchangeable bus address for the safety-relevant functions.It is preferably provided that the control device is connected to a control center, in particular a central escape route control and / or security device, via a second bus system, wherein in particular information on the number of door locking controls or the number of triggering elements can be transmitted to the control center via the control device.

[0105] The invention is explained in more detail below using exemplary embodiments. Technical features with the same function are provided with identical reference numerals in the figures. They show: Fig. 1 a plan view of a security system with an emergency button as a triggering element in a ready-to-use state on a door according to a first embodiment, Fig. 2 a functional diagram of the security system from Figure 1 , Fig. 3 to Fig. 2modified functional diagram of a security system according to a second embodiment, Fig. 4 a plan view of a security system according to the invention with several emergency buttons in a ready-to-use state on a door according to a third embodiment, Fig. 5 a functional diagram of the security system according to the invention from Figure 4 , Fig. 6 to Fig. 5 modified functional diagram of a security system according to the invention according to a fourth embodiment, Fig. 7 a plan view of a security system in a ready-to-use state according to a fifth embodiment, Fig. 8 a functional diagram of a central escape route control of the security system from Figure 7 , Fig. 9 a functional diagram of the security system Figure 7, Fig. 10 a functional diagram of a safety system according to the invention according to a sixth embodiment, Fig. 11 an embodiment of an emergency button according to the invention in a side view, Fig. 12 the emergency button from Figure 11 in a longitudinal section, Fig. 13the emergency button from Figure 11 in an exploded view, Fig. 14 an actuating element of the emergency button from Figure 11 in a perspective view, Fig. 15 a further perspective view of the actuating element from Figure 14 , Fig. 16a light guide of the emergency button Figure 11 in a perspective view, Fig. 17 another perspective view of the light guide from Figure 16 and Fig. 18a-a schematic representation of a sequence of a function release in a safety system according to the invention.

[0106] In the following, a distinction is made between a user and an operator. A user can be any person who uses the security system 1. A user can, for example, be a guest who wants to escape through the door secured by the security system 1. An operator serves to operate the security system 1. The operator can, for example, authenticate themselves to the security system. The operator can, for example, be a member of the security staff. Particularly preferably, the operator can configure the security system 1.

[0107] In the following, the term "operation of the emergency button" is understood to mean "operation of the actuating element of the emergency button".

[0108] In the following, a connection to a bus system is understood to mean a direct connection, so that a component connected to the bus system is to be regarded as a participant in the bus system with its own bus address.

[0109] Initiating a control is understood in particular to mean the sending of a message via a first and / or second bus system containing information and / or a command that prompts the direct or indirect recipient of the message to initiate the control. The sender of the message initiates the control. Thus, initiating a control is understood to mean indirect control. The message can, in particular, correspond to a bus telegram.

[0110] As a result of an activity means that an activity is causal, regardless of whether the activity continues or not.

[0111] In the Figures 1 to 3 , 7 and 9A safety system is shown in each case. Although only one emergency button 10 and one door lock 200 are shown in the figures, the principles shown there, in particular with regard to the structure and function of the emergency button 10, the control device 100 and the central escape route control 300, also apply to the safety systems according to the invention with several emergency buttons 10, 10', 1010, 1010', 2010, 3010 and several door locks 200, 200', 1200, 1200', 2200, 3200 as in the Figures 4 to 6 and 10 An audio and video module 510 can also be integrated into the security systems 1 according to the invention.

[0112] In the Figures 1 and 2A first embodiment of a security system 1 for a door 2 is shown. The door 2 is not part of the security system 1. The security system 1 comprises a door lock 200 and an emergency button 10. The emergency button 10 comprises a control device 100. A key switch 500 is assigned to the emergency button 10. The security system 1 can comprise the key switch 500. Alternatively, the security system 1, in particular the emergency button 10, can have a key switch input via which a connection to the key switch 500 can be established.

[0113] As in Figure 2As shown, the emergency button 10 and the door lock 200 are connected to each other via a first bus system 400. The key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402. The connection 402 is shown as a dashed arrow to indicate that signals about the position of a key inserted into the key switch 500 are fed to an electronic unit 24 of the emergency button 10. As an alternative to the connection 402, the key switch 500 can also be connected to the first bus system 400 (not shown). This alternative applies to all embodiments.

[0114] The emergency button 10 is designed to send a message to the door lock 200 via the first bus system 400 following actuation of the emergency button 10, thereby causing the door lock to be unlocked. The message following actuation of the emergency button 10 can be delayed.

[0115] The security system 1, in particular the emergency button 10, can also be connected to a fire detector (not shown). If a fire alarm signal is present, the security system 1 also triggers the unlocking of the door lock 200.

[0116] The control device 100 performs non-security-relevant functions: For example, the control device 100 can initiate unlocking of the door lock 200 for authorized persons. For this purpose, the control device 100 can be connectable to an access control system (not shown). The access control system can, in particular, be connected or connectable to the first bus system 400. The control device 100 receives a positive authentication signal from the access control system, in particular via the bus system 400, confirming that authentication has been completed. The control device 100 then initiates unlocking of the door lock 200. The access control system can, for example, comprise or be designed to comprise a reader, a key switch, a keypad for entering a code, or a locking cylinder of a mechanical lock, in particular a self-locking panic lock.

[0117] Likewise, the control device 100 can automatically trigger an unlocking of the door lock 200 at a predetermined time or after a predetermined period of time, e.g., if the door is to be unlocked in a time window per day.

[0118] If there is no danger, i.e., if neither the emergency button 10 has been pressed nor is there a fire alarm signal, the control device 100 can automatically initiate relocking after a predetermined period of time has elapsed. In addition to the positive authentication signal, the control device 100 can also receive an access signal from the access control system and / or measure the length of the positive authentication signal. Using the access signal or the length of the authentication signal, the control device 100 can adjust the length of the predetermined period of time. For example, a person can hold an ID card in front of the reader for a long time or turn the key for a long time. This signals that the predetermined period of time should correspond to a long period of time previously stored in the control device 100.If the person briefly holds the ID card in front of the reader or the user briefly turns the key, it is signaled that the predetermined time period should correspond to a short time period previously stored in the control device 100.

[0119] A first door status monitoring device 204 and a second door status monitoring device 206 detect whether the door 2 is open or closed. The control device 100 receives at least indirectly a signal from the door status monitoring devices 204, 206. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can immediately and automatically relock the door lock 200 as soon as the control device 100 receives the information, with the aid of the door status monitoring devices 204, 206, that the door was initially open and is now closed again.

[0120] The emergency button 10 comprises an acoustic alarm device 23 and lighting device 41 (see also Figure 13 ). The lamps 41 serve to display the locking or unlocking state of the door lock 200 and thus serve as a display device. The lamps 41 serve to visually display a time-delayed unlocking of the door lock 200 following actuation of the emergency button 10 and thus serve as a display device. The lamps 41 serve to visually display an alarm state after receipt of the fire alarm signal or following actuation of the emergency button 10 and thus serve as a display. The lamps 41 serve to visually display if a previously described relocking fails.

[0121] The control device 100 controls the acoustic alarm device 23 to emit an acoustic alarm when a dangerous situation occurs, e.g., when a fire alarm signal is received or the emergency button 10 is pressed. The control device 100 controls the acoustic alarm device 23 to emit an acoustic alarm when relocking fails.

[0122] The control device 100 controls the lighting means 41 to display the locking or unlocking state of the door lock 200, to visually display a time-delayed unlocking and / or to emit a visual alarm when a fire alarm signal is received or the emergency button 10 is pressed or when relocking fails.

[0123] The control device 100 can monitor the opening of the door with the aid of the door status monitoring devices 204, 206 when the door lock 200 is in the unlocked state. If desired, the control device 100 can issue an audible alarm if the door 2 has been opened while the door lock 200 is in the unlocked state, at least if no positive authentication signal is present. This allows monitoring to be performed when someone opens the door, even when the door is unlocked.

[0124] The emergency button 10 can include at least one additional output. The control device 100 can use the output to control additional components that can be connected to the security system 1, e.g., a room light.

[0125] The parameters for executing the aforementioned functions of the control device 100 are stored in the control device 100. For example, the specified time(s), the predetermined time period(s), parameters for the acoustic alarms, e.g., the volume and frequency at which an acoustic alarm should be issued, and parameters for the various controls of the lighting devices 41 for visually displaying the various aforementioned states of the security system 1 are stored in the control device 100. The parameters for the lighting devices can include flashing frequencies, colors to be emitted, color intensities, and / or lighting patterns. For parameterization, the control device 100 can communicate with a mobile communication device via a radio module 64. Alternatively, the parameterization can be carried out with the aid of a monitoring device 301 via a second bus system 401 (see Figures 9 and 10). A parameterization program must be provided for parameterization, which can be run on a communication device, e.g., a personal computer, a mobile phone, and / or a tablet. The operator can set the parameters using the parameterization program.

[0126] In Figure 2 The structure of the door lock 200 and the emergency button 10 is shown in more detail.

[0127] The emergency button 10 has a first emergency button processing unit 20, a second emergency button processing unit 21, and a third emergency button processing unit 22. The first, second, and third emergency button processing units 20, 21, 22 are each embodied as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 comprise a non-volatile memory. The third emergency button processing unit 22 comprises a non-volatile memory and / or has access to a non-volatile memory. The first, second, and third emergency button processing units 20, 21, 22 are collectively referred to as the electronics unit 24 of the emergency button 10.

[0128] The electronics unit 24 also serves as the control device 100. The first emergency button processing unit 20 serves as the first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as the second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as the third processing unit 105 of the control device 100.

[0129] The first and second emergency button processing units 20, 21 are used to execute the safety-relevant functions of the emergency button. The third emergency button processing unit 22 or processing unit 105 is used to execute the non-safety-relevant functions. The safety-relevant functions include initiating unlocking in the event of danger. The non-safety-relevant functions include the other functions listed above.

[0130] When the emergency button 10 is actuated, an actuating element 11 is moved from an initial position 11.I to an actuating position 11.II, whereby a switch 63 is actuated (see also Figures 12 , 13). This generates a first and a second actuation signal. This opens a first and a second electrical circuit (not shown). A signal about the opening of the first circuit is detected by the first emergency button processing unit 20. A signal about the opening of the second circuit is detected by the second emergency button processing unit 21. The actuation signal is understood to be the signal generated by the user by actuating the actuating element in order to unlock the door lock and open the escape route. The expression "as a result of actuating the emergency button 10" is used in particular in the sense of "after generating the actuation signal," i.e., regardless of whether the actuating element 11 is still in the actuation position 11.II or has already returned to the starting position 11.I.

[0131] The first emergency button processing unit 20 and the second emergency button processing unit 21 each independently trigger an unlocking of the door lock 200 after detecting the actuation signal via the first bus system 400. The second emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20.

[0132] The door lock 200 comprises a door lock controller 201. The door lock controller 201 comprises a first processing means 202 and a second processing means 203. The first and second processing means 202, 203 are collectively referred to as electronic device 207. The first and second processing means 202, 203 are each designed as a microprocessor or microcontroller. The first and second processing means 202, 203 can each control a locking mechanism 205 of the door lock 200 for unlocking. In the event of danger, i.e., as a result of the actuation of the emergency button 10 or upon receipt of a fire alarm signal, both the first processing means 202 and the second processing means 203 control the locking mechanism 205 for unlocking. The second processing means 203 is thus redundant to the first processing means 202. This structure achieves single-fault security.

[0133] The locking mechanism 205 is electromechanically designed. The locking mechanism 205 comprises, for example, an electromechanically actuated latch element (not shown) that locks a door latch of the door 2 when the door lock 200 is locked and releases it when the door lock 200 is unlocked. When the locking mechanism 205 is activated to lock, the first and second processing means 202, 203 switch on an electrical current for the locking mechanism 205. When the locking mechanism 205 is activated to unlock, the first and second processing means 202, 203 switch off an electrical current for the locking mechanism 205. A separate switch is assigned to each processing means 202, 203 for this purpose. Opening only one of the switches results in the power to the locking mechanism 205 being switched off.

[0134] The door lock controller 201 receives feedback on the state of the locking mechanism 205 via a locking mechanism state monitoring device (not shown). In particular, the position of an armature of a coil of the locking mechanism 205 is monitored. If the state of the door lock 205 does not correspond to the desired state, an alarm is issued. Additionally or alternatively, a further attempt to achieve the desired state can be made in this case.

[0135] Following actuation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing means 202, 203 via the first bus system 400 using a message. The message can contain the notification of actuation or a control command for unlocking. The first emergency button processing unit 20 informs the first processing means 202, and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to actuate the locking mechanism 205 for unlocking, i.e., to switch off the electrical current.

[0136] The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21. The first and second emergency button processing units 20, 21 then send a message to the first and second processing means 202, 203, causing the locking mechanism 205 to be activated by the door locking control 201 to unlock. The first emergency button processing unit 20 informs the first processing means 202, and the second emergency button processing unit 21 informs the second processing means 203. Through the message, the first and second emergency button processing units 20, 21 cause both the first and second processing means 202, 203 to activate the locking mechanism 205 to unlock, i.e., to turn off the electrical power.

[0137] The actuation of the emergency button 10 or the presence of a fire alarm signal can be sent in a message from one of the two emergency button processing units 20, 21, with the first emergency button processing unit 20 writing a first part of the message and the second emergency button processing unit 21 writing a second part of the message. The first and second processing units 202, 203 are each responsible for at least one part of the message. The emergency button processing units 20, 21, 22 and the first and second processing units 202, 203 can each receive messages via the first bus system 400. The electronics unit 24 and the door locking controller 201 can each be assigned a bus address.

[0138] The first and second emergency button processing units 20, 21 monitor each other. If an error is detected, the electronic unit 24, in particular the intact emergency button processing unit 20, 21, causes the first and second processing means 202, 203 to control the door locking mechanism 205 to unlock. The first and second processing means 202, 203 monitor each other. If an error is detected, the locking mechanism 205 is controlled to unlock at least by the intact processing means 202, 203. Likewise, in the event of a fault in the bus system 400, the locking mechanism 205 is controlled to unlock by the door locking control 201. For this purpose and to check the first and second emergency button processing units 20, 21, a life sign signal from the first and second emergency button processing units 20, 21 is regularly sent to the door locking control 201.If the life-sign signal is absent, the first and second processing means 202, 203 control the locking mechanism 205 to unlock. The first and second processing means 202, 203 communicate with each other when the door locking control 201 has received a message about the actuation of the emergency button 10 and / or the presence of a fire alarm signal. If only the first processing means 202 or the second processing means 203 determines that the emergency button 10 has been actuated or that a fire alarm signal is present, the determining processing means 202, 203 controls the door locking mechanism 205 to unlock and initiates the other processing means 202, 203 to also control the door locking mechanism 205 to unlock. An error and a malfunction always include a failure of the respective component.In the event of a power failure, the locking mechanism 205 automatically enters the unlocked state. During the processes described in this section, the security system 1 also issues an acoustic and / or visual alarm, particularly via the control device 100.

[0139] Once the actuation signal has been generated, the door lock 200 is electronically prevented from being transferred to the locked state without the presence of a cancellation condition. This prevents the door from being locked while a dangerous condition persists. For this purpose, an electronic locking device is integrated into the electronic device 207. The electronic locking device is transferred to an actuation state as a result of the actuation of the actuation element 11, which serves to release the escape route. In the actuation state, the activation of the door lock 200 for locking is prevented.

[0140] The electronic locking device comprises a first program code. The first program code comprises a first variable or has access to a first variable. In an initial state of the electronic locking device, the first variable is set to an initial value. In the actuated state, the first variable is set to an actuated value that prevents the door lock 200 from being activated for locking. The first variable can be binary. If the cancellation condition is met, the electronic locking device is returned to an initial state. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic locking device, activation of the door lock 200 for locking is permitted.The first program code captures the first value of the first variable and allows locking of the door lock 200 if the value of the first variable corresponds to the initial value, and prevents locking of the door lock 200 if the value of the first variable corresponds to the actuation value.

[0141] The electronic determination is stored both in the first processing means 202 and redundantly in the second processing means 203. For this purpose, the first program code is stored in the first processing means 202. The first variable is stored in the non-volatile memory of the first processing means 202. A second program code with the same functionality as the first program code is stored in the second processing means 203. The first variable is stored redundantly in the non-volatile memory of the second processing means 203.

[0142] The first variable is additionally stored in the non-volatile memories of the first emergency button processing unit 20 and the second emergency button processing unit 21, respectively. Following the actuation of the emergency button 10, the first variable in the first and second emergency button processing units 20, 21 is converted from the initial value to the actuation value. The changed value of the first variable is transmitted to the electronic device 207 via the bus system 400. Until a cancellation condition is met, the emergency button 10 repeatedly transmits the actuation value of the first variable to the electronic device 207. The transmission can occur at regular intervals, in particular together with the life-sign signal.

[0143] At least if at least one of the door status monitoring devices 204, 206 has detected that the door 2 was opened after the emergency button 10 was actuated, a cancellation action on the emergency button 10 is necessary to achieve the cancellation condition.

[0144] The actuating element 11 is designed to be non-latching. When actuated, the actuating element 11 is moved from the initial position 11.I to the actuating position 11.II (see Figure 11 ). Immediately after actuation, the actuating element 11 moves back to the starting position 11.I by the force of a return means 12 designed as a spring (see Figure 12 , 13 ). The actuation of the actuating element 11 is translational.

[0145] The override action on the emergency button 10 is performed by actuating the actuating element 11. This generates a override signal that corresponds to the actuation signal. In order for the control device 100 to recognize whether actuation of the emergency button 10 serves to unlock the door lock 200 or whether an override action is present, another signal must be generated simultaneously to achieve the override condition. For this purpose, an operator authenticates himself. Authentication is performed by inserting and turning a key in the key switch 500. The actuation of the actuating element 11 and the authentication must overlap in time. This means that the operator must hold the key in the turned state while the actuating element 11 is in the actuation position 11.II. The actuating element 11 must return to the starting position 11.I while the key is in the turned state.The sequence of actions is sufficient to achieve the cancellation condition.

[0146] If the door status monitoring devices 204, 206 have detected that the door 2 has remained continuously closed as a result of the actuation of the emergency button 10, the cancellation condition can be met in at least one further way, namely by the elapse of a predetermined time interval. For example, the cancellation condition can be met 60 seconds after the last generation of the actuation signal, provided the door 2 has remained closed. Authentication at the key switch 500 and a cancellation action at the emergency button 10 are not necessary in this case.

[0147] The first and second door status monitoring devices 204, 206 are provided to detect with single-fault reliability that the door 2 has remained continuously closed as a result of the actuation of the emergency button 10. For this purpose, the door status monitoring devices 204, 206 are preferably designed differently. The first door status monitoring device 204 can be designed, for example, as a door contact. The second door status monitoring device 206 can be designed, for example, as a latch contact. Alternatively, at least one of the door status monitoring devices can monitor the status of the door 2 magnetically, e.g., as a reed switch. The door locking controller 201 receives a signal from each of the first and second door status monitoring devices 204, 206 indicating whether the door 2 is open or closed.Only if no signal about the opening of the door has been sent by either the first door condition monitoring device 204 or the second door condition monitoring device 206 during the predetermined time interval, the cancellation condition can be achieved by the elapse of the predetermined time interval.

[0148] The door locking controller 201 contains a timer to measure the predetermined time interval. The door locking controller 201 starts the timer upon actuation of the emergency button 10. If the door locking controller 201 receives a signal from the first or second door status monitoring device 204, 206 during the predetermined time interval that the door has been opened, a cancellation action must be performed on the emergency button 10. In this case, the elapse of the predetermined time interval is not sufficient. The length of the predetermined time interval is stored in the door locking controller 201.

[0149] The door locking controller 201 checks whether reaching the cancellation condition is permissible by expiration of the predetermined time interval before the door locking controller 201 activates the locking mechanism 205 to lock. Thus, when commissioning the security system 1, i.e., before the start of operation of the security system 1, an operator can store whether expiration of the predetermined time interval without opening the door 2 is permissible as a cancellation condition and thus leads to relocking of the door 2. The storage can be made in the emergency button 10. A check of the permissibility, expiration of the predetermined time interval, and the absence of a signal from the first and second door status monitoring devices 204, 206 regarding the opening of the door 2 is sufficient to achieve the cancellation condition.

[0150] The door locking controller 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and / or to the control device 100.

[0151] The electronics unit 24 includes a timer. A first delay period can be stored in the electronics unit 24. If unlocking of the door lock 200 is to occur with a time delay, the electronics unit 24 waits for the first delay period after the actuation signal has been generated before the first and second emergency button processing units 20, 21 communicate with the door lock controller 201 via the first bus system 400 to initiate unlocking.

[0152] The third processing unit 105 causes the Figure 1 and 2described non-security-relevant unlocking and locking of the door lock 200, e.g., unlocking after receipt of the authentication signal, at a predetermined time or after a predetermined period of time has elapsed, or locking after a predetermined period of time has elapsed or immediately after the door 2 has been closed. For this purpose, the third processing unit 105 communicates with the door lock controller 201 via the first bus system 400. The communication can, for example, contain information or a control command that causes the door lock controller 201 to control the locking mechanism to unlock or lock. If the control device 100 is connected to the second bus system (see Fig. 7 ), the third processing unit 105 serves to forward messages from and / or to a central escape route control 300.

[0153] The third emergency button processing unit 22 controls the acoustic alarm device 23 and the lighting devices 41.

[0154] If at least one of the processing means 202, 203 detects that the locking mechanism 205 has assumed the unlocked state, the processing means 202, 203 sends a corresponding signal via the bus 400 to the electronic unit 24. The electronic device 207 is connected or connectable to the door condition monitoring devices 204, 206 and receives signals about an open or closed state of the door from the door condition monitoring devices 204, 206.

[0155] The aforementioned functions performed by the control device 100, the door lock controller 2021, and / or the emergency button 10 can be executed using software modules. Program codes are stored in the electronic device 207 and / or the electronic unit 24, with the aid of which the functions can be executed.

[0156] Figure 3 represents a variant of the Figures 1 and 2 1. Here, the control device 100 is designed separately from the emergency button 10 and the door lock 200. The control device 100 can be arranged, for example, in a DIN rail housing (not shown). The control device 100 is not integrated into an emergency button 10 or a door lock 200. For example, the control device 100 can be provided for arrangement in a technical room. The first bus system 400 connects the control device 100, the door lock 200, and the emergency button 10 to one another. As in the first exemplary embodiment, the key switch 500 is or can be electrically connected to the emergency button 10 via a connection 402.

[0157] Unless otherwise described, the structure and function corresponds to the first embodiment, whereby the functions belonging to the Figures 1and 2 described with the aid of the control device 100 or the processing units 103, 104, 105, from the control device 100 of the Figure 3 are executed and the functions that belong to the Figures 1 and 2with the aid of the emergency button 10 or the emergency button processing units 20, 21, 22 are carried out by the emergency button 10: In particular, the first and second emergency button processing units 20, 21 detect the actuation signal, communicate with the first and second processing means 202, 203 via the first bus system 400 as a result of an actuation of the emergency button 10, and thus cause the locking mechanism 205 to be actuated by the door locking controller 201. The measures for achieving single-fault safety or redundancy are carried out with the aid of the first and second emergency button processing units 20, 21. The first variable is stored in the first and second emergency button processing units 20, 21 and is transmitted from there to the door locking controller 201. The emergency button 10 comprises the timer for determining the first delay period.The control device 100 is connected or connectable to the second bus system 401. The third processing unit 105 initiates the . Figure 1 and 2 described non-security-relevant unlocking and locking of the door lock 200, e.g., unlocking after receipt of the authentication signal, at a predetermined time or after a predetermined period of time, or automatic relocking after a predetermined period of time or immediately after closing the door 2.

[0158] The first, second, and third processing units 103, 104, 105 are each embodied as a microprocessor or microcontroller. The first, second, and third processing units 103, 104, 105 together form processing electronics 101. The first and second processing units 103, 104 have a non-volatile memory. The third processing unit 105 comprises a non-volatile memory and / or has access to a non-volatile memory.

[0159] A fire alarm signal can be received by both the control device 100 and the emergency button 10. The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21 for the emergency button 10 or by the first and second processing units 103, 104 for the control device 100. Accordingly, both the control device 100, with the aid of the first and second processing units 103, 104, and the emergency button 10, with the aid of the first and second emergency button processing units 20, 21, can initiate an unlocking of the door lock 200. For this purpose, communication with the door lock controller 201 takes place via the first bus system 400.

[0160] The control device 100 is informed via the first bus system 400 when the emergency button 10 triggers the unlocking of the door lock 200, i.e., as a result of the emergency button 10 being actuated or after receiving a fire alarm signal. The control device 100 is also informed of a time-delayed unlocking of the door lock 200 as a result of the actuation of the emergency button 10. The control device 100 is informed of the locking and unlocking state of the door lock 200. The control device 100 is informed of the open or closed state of the door 2.

[0161] The control device 100 causes the alarm device 23 and the lighting means 41 to be activated for the Figures 1 and 2described acoustic alarms and visual representations. For this purpose, the control device 100 can communicate with the electronics unit 24, in particular with the third emergency button processing unit 22, via the first bus system 400. The third emergency button processing unit 22 then controls the alarm device 23 or the lighting means 41. For this purpose, the parameters for the alarm device 23 and the lighting means 41 are stored in the control device 100.

[0162] In the examples of the Figures 1 to 3 the door lock 200 comprises the door condition monitoring devices 204, 206. Alternatively, and not shown, the door condition monitoring devices 204, 206 can be connected to the first bus system 400 or directly to the emergency button 10 and / or the control device 100.

[0163] In the examples of the Figures 1 to 3At least one further emergency button (not shown) can be connected to the first bus system 400, which is designed without the control device 100. The further emergency button is like the emergency button 10 in Figure 3 and can, when activated, trigger the unlocking of the door lock 200. The additional emergency button corresponds in structure and functionality to the emergency button 10 of the Figure 3 .

[0164] In the examples of the Figures 1 to 3 At least one further door lock (not shown) can be connected to the first bus system 400. The further door lock is like the door lock 200 in Figure 2 or 3 and can also be unlocked by pressing the emergency button 10. The further door locking corresponds in structure and functionality to the door locking devices 200 of the Figures 1 to 3 .

[0165] In Figure 4An embodiment of a security system 1 according to the invention with several emergency buttons 10, 1010, 2010, 3010 is shown. The security system 1 comprises several door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is assigned a key switch 500, 1500, 2500, 3500. The security system 1 serves to arrange the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on various doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the security system 1 according to the invention. The plurality of emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to a number of emergency buttons 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and thus correspond to a number of door locks 200, 1200, 2200, 3200.

[0166] In the example of Figure 4The emergency buttons 10, 1010 are assigned to the door locks 200, 1200. The emergency button 2010 is assigned to the door lock 2200. The emergency button 3010 is assigned to the door lock 3200. Thus, when one of the emergency buttons 10, 1010 is actuated, both door locks 200, 1200 are unlocked, but not the door locks 2200, 3200. If the emergency button 2010 is actuated, only the door lock 2200 is unlocked. Accordingly, when the emergency button 3010 is actuated, only the door lock 3200 is unlocked. Thus, in this embodiment, the door locks 200, 1200, 2200, 3200 are selectively unlocked.

[0167] For example, the emergency buttons 10, 1010 can be provided for placement on a double-leaf door 2. A door lock 200, 1200 is to be arranged on each door leaf 3, 4 of the door 2. The emergency button 2010 and the door lock 2200 are provided for placement on another door 2002. The emergency button 3020 and the door lock 3200 are to be arranged on a door 3002, as shown in Figure 4 shown.

[0168] The security system 1 from Figure 4 can also be used for Figure 4 Different selective unlocking can be set. Figure 4In a different exemplary setting, when one of the emergency buttons 10, 1010, 2010, 3010 is actuated, only a single assigned door lock 200, 1200, 2200, 3200 is unlocked. Thus, only one door lock 200, 1200, 2200, 3200 is assigned to each emergency button 10, 1010, 2010, 3010. In particular, a security system 1 configured in this way is suitable for four single-leaf doors, each with a door lock 200, 1200, 2200, 3200.

[0169] In another exemplary setting of the security system 1 (not shown), when one of the emergency buttons 10, 1010 is actuated, only the two door locks 200, 1200 are unlocked, and when one of the emergency buttons 2010, 3010 is actuated, only the other two door locks 2200, 3200 are unlocked. Thus, the emergency buttons 10, 1010 are assigned to the door locks 200, 1200, and the emergency buttons 2010, 3010 are assigned to the door locks 2200, 3200. In particular, the security system 1 configured in this way is suitable for two double-leaf doors, each with one door lock 200, 1200, 2200, 3200 per door leaf.

[0170] The security system 1 can also be set so that when an emergency button 10, 1010, 2010, 3010 is pressed, all door locks 200, 1200, 2200, 3200 are unlocked.

[0171] Deviating from the security system 1, which is Figure 4As shown, a security system 1 according to the invention can comprise a number of emergency buttons 10, 1010, 2010, 3010 which does not correspond to the number of door locks 200, 1200, 2200, 3200. For example, in Figure 4 the door 2 must be single-leaf and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 must be missing.

[0172] In Figure 5 It is shown that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 are connected to one another via the first bus system 400. Each emergency button 10, 1010, 2010, 3010 is electrically connected or connectable to a key switch 500, 1500, 2500, 3500 assigned to the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402 or 3402. Alternatively, the key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the embodiment of the Figures 4 and 5The control device 100 is integrated in one of the emergency buttons 10, 1010, 2010, 3010, e.g., the emergency button 10. The first bus system 400 is only connected to a single control device 100. Unless otherwise described below, the structure and functions of the door locks 200, 1200, 2200, 3200 correspond to the structure and functions of the door lock 200 of the Figures 2 and 3 , the structure and functions of the emergency button 10 the structure and functions of the emergency button 10 of the Figure 2 and the structure and functions of the emergency buttons 1010, 2010, 3010 the structure and functions of the emergency button 10 of the Figure 3 . The reference symbols from the Figures 2 and 3are used. It is understood that the door locks 200, 1200, 2200, and 3200 each comprise their own door locking mechanism, processing means, etc., and the emergency buttons 10, 1010, 2010, and 3010 each comprise their own emergency button processing units, alarm devices, lighting devices, switches, and actuating elements.

[0173] To ensure that the emergency buttons 10, 1010, 2010, and 3010 are assigned to the door locks 200, 1200, 2200, and 3200, the emergency buttons 10, 1010, 2010, and 3010 are assigned to the door locks 200, 1200, 2200, and 3200 during commissioning of security system 1, i.e., before the start of operation of security system 1. To do this, one of the door locks 200, 1200, 2200, and 3200 is transferred to assignment mode. A deliberate action is then performed on the emergency buttons 10, 1010, 2010, and 3010. The conscious action can be carried out as an actuation of the actuating element 11 of the respective emergency button 10, 1010, 2010, 3010. After all emergency buttons 10, 1010, 2010, 3010 that are to be assigned to the door lock 200, 1200, 2200, 3200 that is in the assignment mode have been actuated, the assignment mode of the door lock 200, 1200, 2200, 3200 is ended. In the embodiment of the Figure 4For example, door lock 200 is first switched to assignment mode and then emergency buttons 10, 1010 are pressed, thereby assigning emergency buttons 10, 1010 to door lock 200. The assignment mode of door lock 200 is then ended. For example, door lock 1200 is then switched to assignment mode and then emergency buttons 10, 1010 are pressed, thereby assigning emergency buttons 10, 1010 to door lock 1200. The assignment mode of door lock 1200 is then ended. Door lock 2200 is then switched to assignment mode and then emergency button 2010 is pressed, thereby assigning emergency button 2010 to door lock 2200. The assignment mode of the door lock 2200 is ended. The door lock 3200 and the emergency button 3010 can then be used in the same way.

[0174] Through the assignment, the respective door locks 200, 1200, 2200, 3200, in particular the respective door lock controllers 201, store which emergency button 10, 1010, 2010, 3010 is to be assigned to the respective door lock 200, 1200, 2200, 3200. Through the assignment, the assignment of the emergency buttons 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200 is stored in the control device 100 for all emergency buttons 10, 1010, 2010, 3010 and all door locks 200, 1200, 2200, 3200 of the first bus system 400. For the assignment, a bus address, in particular an unchangeable bus address, is stored for the respective emergency button 10, 1010, 2010, 3010.

[0175] The assignment is stored in the respective door locks 200, 1200, 2200, 3200 in the first digital processing means 202 and redundantly in the second digital processing means 203, in particular in the non-volatile memories of the processing means 202, 203.

[0176] If, for example, the emergency button 10 is activated, the emergency button 10 communicates with all door locks 200, 1200, 2200, and 3200 of the first bus system 400. The door locks 200, 1200, 2200, and 3200 each check the deposit to determine whether the respective door lock 200, 1200, 2200, and 3200 has been assigned to the activated emergency button 10. Only if the assignment has been made do the assigned door locks 200, 1200 then control the respective door locking mechanism 205.

[0177] In the event of a fire alarm signal, the door locks 200, 1200, 2200, 3200, which are assigned to the emergency button 10, 1010, 2010, 3010 receiving the fire alarm signal, are unlocked.

[0178] If a door lock 200, 1200, 2200, or 3200 is to be unlocked with a time delay following the actuation of an assigned emergency button 10, 1010, 2010, or 3010, a first delay period is stored in that emergency button 10, 1010, 2010, or 3010. This is stored during commissioning of the safety system 1 by the parameterization program. A different first delay period can be stored by the operator for each emergency button 10, 1010, 2010, or 3010. For example, a first delay period is stored in the emergency button 10 that differs from the first delay period stored in the emergency button 2010. The emergency buttons 1010, 3010 are intended to unlock the associated door locks 2200 and 3200 without any time delay, so that no first delay time or a first delay time of 0 s is stored in the emergency buttons 1010, 3010.Alternatively, the safety system 1 can be designed such that the same first delay time is always stored in the emergency buttons 10, 1010, 2010, 3010 assigned to the same door lock 200, 1200, 2200, 3200. For this purpose, the parameterization program allows the operator to make only one common setting.

[0179] The control device 100 takes over the non-safety-relevant functions for unlocking and locking all door locks 200, 1200, 2200, 3200, as previously described. Figure 1 and 2described. For this purpose, the control device 100 can selectively communicate with the door locks 200, 1200, 2200, 3200. Thus, the control device 100 stores information about which door lock 200, 1200, 2200, 3200 is assigned to which access control system, so that upon a positive authentication signal from an access control system, only the assigned door lock(s) 200, 1200, 2200, 3200 are unlocked. The control device 100 also stores information about whether and when, which door lock 200, 1200, 2200, 3200 should be unlocked, and at what specified time. Likewise, the control device 100 can store information about which door lock 200, 1200, 2200, 3200 is to be locked again after a predetermined period of time or periods of time.The control device 100 also stores whether and, if so, which door locks 200, 1200, 2200, 3200 are to be relocked immediately after the door 2, 2002, 3002 is closed. The control device 100 can store whether and, if so, for which door lock 200, 1200, 2200, 3200 an acoustic alarm should be triggered if the unlocked door 2, 2002, 3002 is opened without a positive authentication signal. The control device 100 can store whether an acoustic alarm should be triggered if the door 2, 2002, 2003 is not closed again. The deposits can be different for each door lock 200, 1200, 2200, 3200 or for the groups of door locks 200, 1200, 2200, 3200 that are to be arranged on a door 2, 2002, 3002. The deposit is made by the operator during commissioning using the parameterization program.

[0180] The control device 100 causes an acoustic and visual alarm to be issued as a result of the actuation of an emergency button 10, 1010, 2010, 3010 in the at least one further emergency button 10, 1010, 2010, 3010 that is assigned to the same door lock 200, 1200, 2200, 3200 as the actuated emergency button 10, 1010, 2010, 3010. If, in the exemplary embodiment, the Figures 4 and 5 For example, if the emergency button 10 is actuated, the control device 100, through communication with the electronic unit 24 of the emergency button 1010, causes the acoustic alarm device 23 and the lighting means 41 of the emergency button 1010 to also emit an acoustic or optical alarm.

[0181] If, after actuation of an emergency button 10, 1010, 2010, 3010, an unlocking is initiated with a time delay, the control device 100 causes the first delay period with which the unlocking is initiated to also be displayed in the at least one further emergency button 10, 1010, 2010, 3010 that is assigned to the same door lock 200, 1200, 2200, 3200 as the actuated emergency button 10, 1010, 2010, 3010. For this purpose, the control device 100 communicates with the electronics unit 24 of the at least one further emergency button 1010, 2010, 3010 or controls the lighting means 41 of the emergency button 10, in which the control device 100 is integrated.

[0182] The control device 100 can perform the non-safety-relevant assignment for selective communication, e.g., the assignment of an access control system to a door lock 200, 1200, 2200, 3200, based on a bus address. The participants of the first bus system 400 each have a setting device for manually setting a bus address. The setting device can comprise DIP switches. At least the participants of the first bus system 400 that have the same setting on the setting device are automatically assigned to one another. In order to be able to assign different bus addresses to participants with the same setting, the participants of the first bus system 400 have different identification numbers, from which different bus addresses are configured using the setting made.The bus address determined using the setting is just another bus address for the emergency buttons 10, 1010, 2010, 3010 and for the door locks 200, 1200, 2200, 3200, in addition to the bus address used for safety-relevant communication.

[0183] If a door lock 200, 1200, 2200, 3200 has already been unlocked, the control device 100 can prevent the unlocking of another door lock 200, 1200, 2200, 3200 until a condition is met, provided no danger exists. If the condition is met, the control device 100 initiates the unlocking of the additional door lock 200, 1200, 2200, 3200. In this way, the control device 100 can communicate with several door locks 200, 1200, 2200, 3200 such that a lock is formed. For example, the door 2002 can be arranged at an entrance to a room and the door 3002 at an exit of the same room. The control device 100 can cause the door lock 2200 to be unlocked if a positive authentication signal for the door lock 2200 is present.Even if a positive authentication signal for the door lock 3200 of the control device 100 is present, the control device 100 can prevent the unlocking of the door lock 3200 until a condition is met. If the condition is met, the control device 100 initiates the unlocking of the door lock 3200. The condition can be, for example, a lock time interval or the reaching of a measured variable, such as room temperature, humidity, air purity, or the number of people in the room. The control device 100 can be connected or connectable to a measuring device for this purpose. The condition can include the closing of the first opened door 2002, which can be measured by the door status monitoring devices 204, 206. The condition and the door locks 2200, 3200 involved in the lock can be stored in the control device 100.The operator can enter the data using the parameterization program.

[0184] In Figure 6 is a variant of the Figures 4 and 5 shown security system 1. Here, the control device 100 is designed separately from the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 with the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of the Figure 6 corresponds in structure to the control device 100 of the Figure 3 . The emergency button 10 of the Figure 6 corresponds in structure to the emergency button 10 of the Figure 3 . In addition, the structure and functionalities described above correspond to Figure 5 are described, the structure and functionalities of the security system 1 of the Figure 6 .

[0185] Because in the embodiments of the Figures 4 to 6 Since the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010, and, if applicable, the control device 100 act as participants in a single first bus system 400, only the cables of the bus system 400 are necessary for the participants to communicate with each other. Thus, the security system 1 has only a few cables.

[0186] The bus system 400 can comprise at least two cables for communication and at least two cables for power supply. In particular, the bus system 400 has exactly two cables for communication and two cables for power supply. In each of the exemplary embodiments of the security system 1 according to the invention, a power supply can be integrated as a connection to a power grid at any point in the bus system 400. Thus, the power supply can be provided as an independent component of the security system 1 outside the emergency button 10 or the emergency buttons 10, 1010, 2010, 3010 and the door lock 200 or the door locks 200, 1200, 2200, 3200. This makes the security system 1 flexible in its spatial configuration.

[0187] If, as in the third and fourth embodiments, several emergency buttons 10, 1010, 2010, 3010 are present and one of the emergency buttons 10, 1010, 2010, 3010 has been actuated, the electronic locking only prevents the door locks 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010 from being locked. Reaching the cancellation condition enables the locking of the door lock(s) 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010. To achieve the cancellation condition, the temporally overlapping actuation of the actuating element 11 of the emergency button 10, 1010, 2010, 3010 that was previously actuated and the authentication on the key switch 500, 1500, 2500, 3500 assigned to the actuated emergency button 10, 1010, 2010, 3010 is necessary.At least this sequence of actions is necessary for the door lock 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010, in which at least one of the door status monitoring devices 204, 206 has detected that the door 2 or one of the door leaves 3, 4 was opened after the emergency button 10 was actuated.

[0188] If the door status monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 assigned to the actuated emergency button 10, 1010, 2010, 3010 have detected that the door 2 has remained continuously closed after the emergency button 10, 1010, 2010, 3010 was actuated, the cancellation condition can be reached by the expiration of the predetermined time interval. For example, the cancellation condition can be reached 60 seconds after the last actuation of the emergency button 10. The permissibility of whether locking should occur after the predetermined time interval has elapsed while door 2, 2002, or 3002 remains closed can be individually adjustable and stored for each door lock 200, 1200, 2200, or 3200 or for groups of door locks 200, 1200, 2200, or 3200, particularly for door locks intended for installation on the same door. The storage can be made, for example, in the emergency buttons 10, 1010, 2010, or 3010.Likewise, the length of the predetermined time interval can be individually adjustable for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, especially for door locks intended for installation on the same door. A minimum length, e.g., 60 seconds, can be specified for the predetermined time interval. This setting is done by the parameterization program.

[0189] In Figure 7 A fifth embodiment of a security system 1 is shown. The fifth embodiment comprises the security system 1 according to the first embodiment of the Figures 1 and 2That is, the emergency button 10, which includes the control device 100, is connected to the door lock 200 via the bus system 400. The key switch 500 is connected or connectable to the emergency button 10 via a connection 402. In the fifth embodiment, additional components 300, 301, 510 are provided compared to the first embodiment.

[0190] The security system 1 comprises the central escape route control 300. The central escape route control 300 is intended to be arranged remotely from the door 2. Thus, the central escape route control 300 can be located, for example, together with a guard device 301, which can be designed as a monitor or personal computer, and / or a multi-door display device 350 (see Fig. 10) in a guard room. The guard device 301 is optionally part of the security system 1 according to the invention. Alternatively, the guard device 301 can be connectable to the security system 1 according to the invention.

[0191] The central escape route control 300 has a modular design. An emergency module 310 comprises a first mounting plate 311. The first mounting plate 311 accommodates a central emergency button 302 and an identification device 312, exemplified as a key switch. The central emergency button 302 and the identification device 312 are mechanically rigidly connected to one another by means of the first mounting plate 311. The central emergency button 302 serves to unlock the door lock 200 following actuation of the central emergency button 302. Thus, the door lock 200 can be unlocked remotely from the door 2 by the central emergency button 302. The unlocking following actuation of the central emergency button 302 occurs with a single-fault safety mechanism. Actuation of the central emergency button 302 is thus suitable for use in the event of an emergency.

[0192] A deactivation module 320 comprises a first operating element 322, designed as a key switch, and a second operating element 323, designed as a push button. The first operating element 322 is used to deactivate the emergency button 10. Thus, actuation of the first operating element 322 transfers the emergency button 10 to a deactivated state. If the emergency button 10 is in a deactivated state, actuation of the emergency button 10 will not unlock the door lock 200. The second operating element 323 is used to activate the emergency button 10. If the emergency button 10 is in the deactivated state and the second operating element 323 is actuated, the emergency button 10 is transferred to an activated state. In the activated state of the emergency button 10, the emergency button 10 causes the door lock 200 to unlock when the emergency button 10 has been pressed. The deactivation module includes a second mounting plate 321.The second mounting plate 321 serves to accommodate the first and second operating elements 322, 323. The second mounting plate 321 mechanically rigidly connects the first and second operating elements 322, 323 to one another.

[0193] A delay module 330 comprises a third mounting plate 331. The third mounting plate 331 accommodates a delay element 332. The delay element 332 is embodied, for example, as a key switch. The delay element 332 serves to further delay the unlocking of the door lock 200 within the first delay period. The delay module 330 comprises a termination element 333 embodied as a switch. The termination element 333 is attached to the third mounting plate 331. The termination element 333 is mechanically rigidly connected to the delay element 332 by means of the third mounting plate 331. By actuating the termination element 333, the delay in unlocking the door lock 200 can be terminated.

[0194] The central escape route control system 300 comprises a one-sided open escape route control housing 340 in which the emergency module 310, the deactivation module 320, and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central escape route control system 300. The multi-door display device 350, if present, can also be arranged in the escape route control housing 340.

[0195] The escape route control housing 340 can mechanically fasten the emergency module 310, the deactivation module 320 and the delay module 330. The emergency module 310, the deactivation module 320 and the delay module 330 are each individually fastened, in particular screwed, to the escape route control housing 340. The first fastening plate 311 for the emergency module 310, the second fastening plate 321 for the deactivation module 320 and / or the third fastening plate 331 for the delay module 330 serve for fastening to the escape route control housing 340. The escape route control housing 340 and the modules 310, 320, 330 are designed such that different sequences in which the modules 310, 320, 330 can be arranged next to one another are possible. For example, For example, in a central escape route security system 300 (not shown), the emergency module 310 may be arranged between the deactivation module 320 and the delay module 330.In another exemplary central escape route control system 300 (not shown), a free space can be arranged on the left, the delay module 330 in the middle, and the emergency module 310 on the right. The free space is created by the absence of the deactivation module 320 and is concealed by a plate. The escape route control system housing 340 can have rails for inserting the modules 310, 320, 330. The escape route control system housing 340 can have mounting options, e.g., perforated strips or elongated holes, for variable mounting of the modules 310, 320, 330.

[0196] A purely schematic display area 314, 324, and 334 is provided on the first mounting plate 311, the second mounting plate 321, and the third mounting plate 331, respectively. Symbols explaining the function of modules 310, 320, and 330 are provided on the display area. In addition, optical lights for indicating states of the security system 1 can be provided in the display areas 314, 324, and 334.

[0197] In the embodiment of the Figure 7 The security system 1 further includes an audio and video module 510. The audio and video module 510 is intended for placement near the door 2, which can be locked by the door lock 200. If the audio and video module 510 is enabled, an operator in the guard room can speak with the user in front of the door 2 and view the room near the door 2.

[0198] As in Figure 8As shown, the central emergency button 302 is constructed similarly to the emergency button 10. The central emergency button 302 comprises an emergency button electronics unit 308. The emergency button electronics unit 308 comprises a first emergency processing unit 303, a second emergency processing unit 304, and a third emergency processing unit 305. The first, second, and third emergency processing units 303, 304, 305 are each designed as a microprocessor or microcontroller. The first and second emergency processing units 303, 304 have a non-volatile memory. The third emergency processing unit 305 has a non-volatile memory and / or has access to a non-volatile memory. The central emergency button 302 is actuated by actuating an emergency button actuating element 306. This actuates an emergency button switch 307. This generates a first and a second signal.For this purpose, a first and a second circuit (not shown) are opened. A signal indicating the opening of the first circuit is detected by the first emergency processing unit 303. A signal indicating the opening of the second circuit is detected by the second emergency processing unit 304.

[0199] The central emergency button 302 is connected to a second bus system 401. As in Figure 9 As shown, the control device 100 is also connected to the second bus system 401. The second bus system 401 is a different type of bus system than the first bus system 400. For example, the second bus system 401 can be configured as a LON or LAN bus, and the first bus system 400 can be configured as a CAN or DCW bus.

[0200] In Figure 9 The emergency button 10 comprises the control device 100. The emergency button 10 and the door lock 200, which are Figure 9shown correspond to the emergency button 10 and the door lock 200 of the Figure 2 .

[0201] In an alternative not shown, the control device 100, the emergency button 10 and the door lock 200 are arranged according to the Figure 3 In this alternative, not shown, the control device 100, the emergency button 10, and the door lock 200 are connected to one another via the first bus system 400, with the control device 100 being connected to the second bus system 401.

[0202] The control device 100 receives messages from the central escape route security system 300 via the second bus system 401. The control device 100 forwards the messages via the first bus system to other participants of the first bus system 400. The message can in particular be information regarding an actuation of the central emergency button 302, the key switch 312, the first operating element 322, the second operating element 323, the delay element 332 and / or the termination element 333 or a control command following an actuation of one of the aforementioned elements 302, 312, 322, 323, 332, 333. If the control device 100 is integrated in the emergency button 10, there is no need to forward it to the emergency button 10 in which the control device 100 is integrated. For example, according to the Figure 9The control device 100 forwards the message to the door lock 200. If the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100 forwards the message to the emergency button 10 and / or the door lock 200. The control device 100 adapts the message to the format of the first bus system 400. Safety-relevant messages are otherwise left untouched.

[0203] If the central emergency button 302 has been activated, the first emergency processing unit 303 and, redundantly, the second emergency processing unit 304 initiate the unlocking of the door lock 200. The central emergency button 302 communicates via the control device 100 with the door lock controller 201, in particular the first and second processing means 202, 203. The first and second processing means 202, 203 then control the locking mechanism 205. Previously, the first and second processing units 103, 104 forwarded the message. The control device 100 left the message content untouched.

[0204] The central emergency button 302 has an input for receiving a fire alarm signal. If the fire alarm signal is received, the central emergency button 302 triggers the unlocking of the door lock 200. For this purpose, the first and second emergency processing units 303, 304 communicate with the door lock controller 201 via the control device 100, namely via the first and second processing units 103, 104, as previously described.

[0205] A signal regarding the actuation of the key switch 312 of the first module 310 is received by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency button electronics unit 308 sends a message regarding the actuation of the key switch 312 to the control device 100 via the second bus system 401. The control device 100 forwards the message to the first bus system 400.

[0206] The emergency button actuating element 306 is designed to be non-latching. The emergency button actuating element 306 is identical to the actuating element 11 of the emergency button 10 (see Figures 13 to 15 ). Thus, the emergency actuating element 306 is transferred from an initial position to an actuating position when actuated (analog Figure 11 ). Immediately after actuation, the emergency actuating element 306 moves back to its initial position by the force of a return means designed as a spring (analog Figure 11). The emergency actuation element 306 is actuated in a translational manner. If the door lock 200 is transferred to the unlocked state as a result of the actuation of the central emergency button 302, the electronic device 207 prevents, by electronic detection, the door lock 200 from being transferred back to the locked state without the presence of a cancellation condition. The cancellation condition after actuation of the central emergency button 302 can be achieved by actuating the key switch 312. In particular, actuation of the key switch 312 is sufficient to achieve the cancellation condition.

[0207] If the security system 1 includes the central escape route control 300, the cancellation condition can be achieved in another way following actuation of the emergency button 10: If the door status monitoring devices 204, 206 have detected that the door 2 has remained continuously closed after actuation of the emergency button 10, the cancellation condition can be achieved by the elapse of a predetermined time interval and a cancellation process at the central escape route control 300 after the predetermined time interval. The cancellation process can correspond to an authentication at the central escape route control 300, in particular an actuation of the key switch 312. A cancellation signal can be generated by the cancellation process, e.g., the actuation of the key switch 312. The cancellation signal is forwarded to the door locking control 201 via the control device 100.In this case, authentication at the key switch 500 and cancellation at the emergency button 10 are not necessary.

[0208] The door locking controller 201 checks whether the cancellation condition can be met by elapse of the predetermined time interval and authentication at the central escape route controller 300 while the door 2 remains closed before the door locking controller 201 activates the locking mechanism 205 to lock. Thus, when commissioning the security system 1, an operator can specify whether elapse of the predetermined time interval without opening the door 2 and the additional actuation of the key switch 312 is permissible as a cancellation condition, thus leading to the relocking of the door 2.A check of the admissibility, an expiration of the predetermined time interval, an actuation of the key switch 312 after the predetermined time interval and the fact that during the predetermined time interval neither the first door condition monitoring device 204 nor the second door condition monitoring device 206 sent a signal about the opening of the door are sufficient to achieve the cancellation condition.

[0209] This is a variant for achieving a cancellation condition that belongs to the Figures 1 and 2 This variant can be selected by the operator, for example, if the elapse of the predetermined time interval with door 2 remaining closed does not seem safe enough. The operator can select and store this variant using the parameterization program.

[0210] In particular, if the operator has selected this option, the elapse of the predetermined time interval while door 2 remained closed is visually indicated on the central escape route control system 300. In particular, the lamps 313 serve to indicate that the predetermined time interval has elapsed without a signal about the opening of door 2 being received within the predetermined time interval. The visual indication informs the operator that door 2 can be locked by authentication at the central escape route control system 300.

[0211] If the door status monitoring devices 204, 206 have not sent a signal indicating that the door has been opened while a fire alarm signal is present, the door lock 200 can also be locked by the same actuation of the key switch 312 after the fire alarm signal has ended. The possibility of locking the door lock 200 by actuating the key switch 312 after the fire alarm signal has ended is also visually indicated by the lamps 313.

[0212] The control device 100 forwards messages from the emergency button 10 and / or the door lock 200 via the second bus system 401. The control device 100 adapts the message to the format of the second bus system 401. The control device 100 sends information about the status of the emergency button 10 and / or the door lock 200 via the second bus system 401.

[0213] For example, the central escape route control 300 and the multi-door display device 350 can be connected to a third bus system 403 (see Fig. 10 ). Preferably, the central emergency button 302, particularly preferably the emergency button electronics unit 308, can be connected to the third bus system 403 (see Fig. 8 ). The multi-door display device 350 can visually display the locking and unlocking status of the door lock 200. In addition, one of the door locks 200, 200', 1200', 2200' of the security system 1 (see Fig.10 ). Unlocking using the multi-door display device 350 is not single-fault safe. The third bus system 403 can be the same type of bus system as the first bus system 400, e.g., a CAN or DCW bus.

[0214] The control device 100 forwards to the central escape route control 300 via the second bus system 401 when the emergency button 10 waits a first delay period before the emergency button 10 causes the door locking control 201 to control the locking mechanism 205 for unlocking.

[0215] The first delay time is visually displayed on the central escape route control 300. For this purpose, the central emergency button 302 is constructed in accordance with the emergency button 10, as is the case with the Figures 13 , 16, 17described. To visually display the first delay period, the lamps 313 of the central emergency button 302 are controlled by the emergency button electronics unit 308. As the first delay period progresses, fewer lamps 313 illuminate in the same color. For example, fewer lamps 313 may illuminate in a first color and an increasing number of lamps 313 may illuminate in a second color. The lamps 41 of the emergency button 10 are controlled in an identical manner to visually display the first delay period.

[0216] During the first delay period, e.g., 8 s, the operator can actuate the delay element 332. To do so, the operator turns a key in the key switch, which serves as the delay element 332. Actuation of the delay element 332 is detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and, if applicable, the first bus system 400. The emergency button 10 receives the message. As a result of the actuation of the delay element 332, the emergency button 10 ends the first delay period and begins a second delay period. The second delay period, e.g., 180 s, is longer than the first delay period. At the end of the second delay period, the emergency button 10 triggers the unlocking of the door lock 200.The second delay period is determined in the emergency button 10 using the same timer used to determine the first delay period. During the second delay period, the key of the delay element 322 does not need to remain turned. Rather, turning the key once is sufficient to start the second delay period.

[0217] The second delay period is visually displayed on the central escape route control 300 and on the emergency button 10. The visual display on the central escape route control 300 is similar to the visual display on the emergency button 10. As the second delay period progresses, fewer lamps 41, 313 illuminate in the same color. For example, fewer lamps 41, 313 may illuminate in a first color and an increasing number of lamps 41, 313 may illuminate in a second color. To illustrate that the second delay period lasts a long time, a time-associated pattern, e.g., a rotating colored dot or a rotating colored window (see description of Figures 16, 17 ) can be visually displayed.

[0218] If the termination element 333 is actuated during the first or second delay period, the emergency electronics unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 via the second bus system 401. As a result, the emergency electronics unit 308 causes the emergency button 10 not to further delay the unlocking, but to immediately initiate unlocking of the door lock 200. The termination element 333 is designed to be non-latching. A single actuation of the termination element 333 is sufficient to end the delay in initiating the unlocking.

[0219] The emergency button 10 can be deactivated by actuating the first operating element 322. To do so, the operator turns a key in the key switch, which serves as the first operating element 322. Actuation of the first operating element 322 is detected by the emergency button electronics unit 308. Upon actuation of the first operating element 322, a first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is detected by the first emergency processing unit 303. The opening or closing of the second deactivation circuit is detected by the second emergency processing unit 304. The first and second emergency processing units 303, 304 communicate with the emergency button 10 via the second bus system 401.If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 forwards the message to the first and second emergency processing units 303, 304. During forwarding, the format is changed, but the content remains unchanged.

[0220] In the deactivated state of the emergency button 10, the operation of the emergency button 10 has no effect on the door lock 200.

[0221] The activated and deactivated states are stored electronically in the emergency button 10. Because the activated and deactivated states are stored in the emergency button 10, the key in the first control element 322 does not need to remain turned during the deactivated state. Rather, turning the key once is sufficient to deactivate the emergency button 10.

[0222] The deactivation remains in effect until the second operating element 323 is actuated. The actuation of the second operating element 323 can be detected by the emergency button electronics unit 308, in particular the third emergency processing unit 305. The emergency electronics unit 308 sends a message regarding the actuation of the second operating element 323 to the emergency button 10 via the second bus system 401 and, if applicable, via the first bus system 400, whereupon the emergency button 10 is transferred to the activated state. The second operating element 323 is non-latching. Because the activated and deactivated states are stored in the emergency button 10, a single actuation of the second operating element 323 is sufficient to transfer the emergency button 10 to the activated state.

[0223] The central escape route control system 300 includes a bus 341, via which the emergency electronics unit 308, in particular the third emergency processing unit 305, can detect signals from the second control element 323, the delay element 332, and the termination element 333. The emergency electronics unit 308 serves as the intelligence of the entire central escape route control system 300. Only the emergency electronics unit 308 includes microprocessors. The deactivation module 320 and / or the delay module 322 can be designed without a processor. The bus 341 can be designed as an I 2 < C bus.

[0224] To store the activated and deactivated states, a second variable can be stored in the first emergency button processing unit 20 and redundantly in the second emergency button processing unit 21, in particular in the non-volatile memories. The second variable can be binary. If the emergency button 10 is in the deactivated state, the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. Following actuation of the first control element 322, the second variable is set to the deactivation value. Following actuation of the second control element 323, the second variable is set to the activation value. Before the emergency button 10 triggers the unlocking of the door lock 200, the emergency button 10 checks the value of the second variable.If the emergency button detects that the emergency button 10 is deactivated, the emergency button 10 no longer communicates with the door locking control 201 to initiate an unlocking 200.

[0225] The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for errors. If an error is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then transfers itself to the activated state if the emergency button 10 is in the deactivated state. To do this, the emergency button 10 changes the value of the second variable to the activation value.

[0226] The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly transmit a life-sign signal, particularly at regular intervals, via the second bus system 401. The emergency button 10 receives the life-sign signals. If a life-sign signal fails to be received one or more times, the emergency button 10 switches to the activated state if the emergency button 10 is in the deactivated state.

[0227] If the security system 1 receives a fire alarm signal, the emergency button 10 switches to the activated state if the emergency button 10 is in the deactivated state.

[0228] Activation of the emergency button 10 in the deactivated state is indicated on the central escape route control 300, on the guard device 301, and / or on the multi-door display device 350. If a hazardous situation actually exists, the emergency button 10 can be switched to the activated state by the operator by operating the second control element 323, or the operator can directly control the door lock to unlock it. To do this, the operator can press the central emergency button 302. The operator can determine whether a hazardous situation exists, for example, via the audio and video module 510. This achieves increased safety.

[0229] Deactivation can be performed, for example, at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building where people with impaired mental status live. Thus, emergency buttons 10 can also be used on doors to which people with impaired mental status have access, for example, in a psychiatric or dementia ward.

[0230] If the emergency button 10 is pressed in the deactivated state and then the emergency button 10 is transferred to the activated state, the actuation of the emergency button 10 in the deactivated state does not lead to an unlocking of the door lock 200, even after the transfer to the activated state. The actuation of the emergency button 10 in the deactivated state remains ineffective. This is due, on the one hand, to the fact that the actuating element 11 and the switch 63 are non-latching. On the other hand, the actuation of the emergency button 10 in the deactivated state was not stored in the emergency button 10. The door lock control 201 does not receive a message regarding the actuation of the emergency button 10 in the deactivated state. The electronic locking device was therefore not transferred to the actuated state. This ensures that the door lock 100 is not immediately unlocked upon activation of the emergency button 10, e.g.because emergency button 10 was activated long before. This increases building safety.

[0231] To achieve a particularly high level of safety, the audio and video module 510 can be switched on during the first and / or second delay period. The emergency button 10 enables the audio and video module 510 at the beginning of the first and / or second delay period. The audio and video module 510 is also enabled by the emergency button 10 when the emergency button 10 is pressed in the deactivated state. For this purpose, the emergency button 10 communicates with the audio and video module 510 via the second bus system 401 and, if applicable, via the first bus system 400.

[0232] It may be that the emergency button 10 can only be deactivated if the audio and video module 510 can be enabled. If the audio and video module 510 is part of the security system 1, deactivation may be omitted if, for example, the audio and video module 510 is not functional and / or the connection to the audio and video module 510 is faulty. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system separate from the security system 1 is provided in the building.

[0233] The emergency button 10 may only delay the unlocking by the first and / or second delay period if the audio and video module 510 is unlockable. If the audio and video module 510 is part of the security system 1, a delay may be omitted if, for example, the audio and video module 510 is not functional and / or the connection to the audio and video module is faulty. This does not apply if the security system 1 does not include an audio and video module 510, but rather a monitoring system separate from the security system 1 is provided in the building.

[0234] In Figure 10 A further embodiment of a security system 1 according to the invention is shown. As in the embodiment of the Figures 7 to 9 The security system 1 comprises a central escape route control 300, which is controlled according to the Figures 7 and 8is constructed. Key switches 500, 500', 1500, 1500', 2500 corresponding to the respective emergency buttons 10, 10', 1010, 1010', 2010 are not shown for the sake of clarity. The central escape route control 300 is connected to the second bus system 401. A first subsystem 5 and a second subsystem 6 are connected to the second bus system 401. The two subsystems 5, 6 each comprise a first bus system 400, 400'. Emergency buttons 10, 1010 or 10', 1010', 2010' and door locks 200 or 200', 1200', 2200' are connected to the respective first bus system 400, 400'. The first bus systems 400, 400' are of the same bus system type, e.g., a CAN or DCW bus. The second bus system 401 is of a different bus system type, e.g., a LON or LAN bus.

[0235] The security system 1 includes the multi-door display device 350. The multi-door display device 350 can, for example, visually indicate which door lock 200 or 200', 1200', 2200' is in the unlocked state and which door lock is in the unlocked state. Using the multi-door display device 350, an operator can perform non-safety-relevant locking and unlocking of individual door locks 200 or 200', 1200', 2200' of the security system 1.

[0236] Each subsystem 5, 6 comprises only one control device 100, 100'. The control device 100, 100' of the respective subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected to the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. The control device 100' of the second subsystem 6, however, is integrated into an emergency button 10' of the second subsystem 6 and connected to the remaining emergency buttons 1010', 1010' and the door locks 200', 1200', 2200' of the further first bus system 400'.

[0237] Subsystem 5 includes a first emergency button 10 and a second emergency button 1010. If one of the emergency buttons 10, 1010 is activated, the activated emergency button 10, 1010 triggers the unlocking of the door lock 200.

[0238] Subsystem 6 includes a first emergency button 10', a second emergency button 1010', and a third emergency button 2010'. Emergency buttons 10', 1010', 2010' selectively unlock the door locks 200', 1200', 2200' of the second subsystem 6. For example, actuation of the first emergency button 10' only unlocks the first door lock 200'. Accordingly, actuation of the second emergency button 1010' only unlocks the second door lock 1200', and actuation of the third emergency button 2010' only unlocks the third door lock 2200'.

[0239] A variety of variations are conceivable. For example, a security system 1 according to the invention can be designed without the first or second subsystem 5, 6. As the sole or additional subsystem, one of the Figures 1 to 6described inventive safety systems 1. The design and functions of the emergency buttons 10, 10', 1010, 1010', 2010' and the door locks 200, 200', 1200', 2200' are designed according to the preceding embodiments, unless additionally or differently described below.

[0240] Each of the door locks 200, 200', 1200', 2200' of the security system 1 stores whether the respective door lock 200, 200', 1200', 2200' is unlocked upon actuation of the central emergency button 302. For example, the door locks 200, 200', 2200' may allow unlocking upon actuation of the central emergency button 302, but the door lock 1200' may not. If the central emergency button 302 is actuated, the door lock controls 201 of the door locks 200, 200', 2200' trigger the respective locking mechanism 205 to unlock. In contrast, such activation is omitted in the door lock 1200'.

[0241] If the central emergency button 302 is actuated, the control devices 100, 100' receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 or 200', 1200', 2200' of the respective first bus system 400, 400'. Based on the deposit, which contains the authorization for unlocking following the actuation of the central emergency button 302, the door locks 200, 200', 1200', 2200' decide whether the respective door lock control 201 of the door locks 200, 200', 1200', 2200' will trigger the respective locking mechanism 205 to unlock or not.

[0242] The operator determines whether the door lock 200, 200'1200', 2200' is unlocked upon pressing the central emergency button 302. This setting is made by the parameterization program.

[0243] Each of the emergency buttons 10, 1010, 10', 1010', 2010' contains a memory that specifies whether or not a transition to the deactivated state is permitted for the respective emergency button 10, 1010, 10', 1010', 2010' upon actuation of the first operating element 322. This results in selective deactivation by actuating the single first operating element 322 of the safety system 1. For example, the emergency buttons 10, 10', 2010' can be transitioned to the deactivated state following actuation of the first operating element 322, but the emergency buttons 1010, 1010' cannot.

[0244] If the first operating element 322 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400' that do not include the control device 100. The emergency buttons 10, 1010, 10', 1010', 2010' of the security system 1 decide, based on the deactivation authorization deposit, whether the respective emergency button 10, 1010, 10', 1010', 2010' will transfer itself to the deactivated state as a result of the actuation of the first operating element 322 or not.

[0245] A third variable can be used to specify whether deactivation of the emergency buttons 10, 1010, 10', 1010', 2010' is permitted. The third variable can be implemented in binary format. The third variable is stored in the non-volatile memory of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10', 1010', 2010'. If deactivation is permitted for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a second value. The emergency button 10, 1010, 10', 1010', 2010' checks the value of the third variable before the emergency button 10, 1010, 10', 1010', 2010' deactivates and only deactivates if the third variable has the first value.

[0246] The operator determines whether the emergency button 10, 1010, 10', 1010', or 2010' should be deactivated when commissioning safety system 1. This is done using a parameterization program.

[0247] Each of the emergency buttons 10, 1010, 10', 1010', 2010' stores whether, upon actuation of the delay element 332 of the respective emergency button 10, 1010, 10', 1010', 2010', the unlocking of the door locks 200, 200', 1200', 2200' assigned to the emergency button 10, 1010, 10', 1010', 2010' is delayed by a second delay period or not. The second delay period is for the respective emergency buttons 10, 1010, 10'. 1010', 2010' can be set to different lengths and stored in the security system 1, in particular in the emergency buttons 10, 1010, 10', 1010', 2010'. Alternatively, the delay by the second delay period and, if applicable, the length of the second delay period can be individually adjustable only for groups of emergency buttons 10, 1010, 10', 1010', 2010' that are assigned to a door lock 200, 200', 1200', 2200' or a door 2, 2002, 3002.The setting and storage is carried out by the operator using the parameterization program.

[0248] For example, the emergency buttons 10, 2010' can further delay the unlocking of the door locks 200 and 2200' respectively following actuation of the delay element 332, whereas the emergency buttons 1010, 10', 1010' cannot. The length of the second delay period for the emergency button 10 is selected to be different from the length of the second delay period for the emergency button 2010'. If the emergency button 10 is actuated and the delay element 332 is actuated within the first delay period stored for the emergency button 10, the emergency button 10 delays the unlocking from the actuation of the delay element 332 by the second delay period stored in the emergency button 10.If the emergency button 2010' is pressed and the delay element 332 is pressed within the first delay period stored for the emergency button 2010', the emergency button 2010' delays the unlocking from the time the delay element 332 is pressed by the second delay period stored in the emergency button 2010', which differs from the second delay period for the emergency button 10. If the emergency button 1010 is pressed, the emergency button 1010 delays the unlocking by the first delay period stored for the emergency button 1010. If the delay element 332 is actuated during the first delay period of the emergency button 1010, the unlocking is not delayed by a second delay period, since this delay is not permitted for the emergency button 1010, but the emergency button 1010 will immediately trigger an unlocking of the door lock 200 after the first delay period.The emergency buttons 10', 1010' do not delay the unlocking of the associated door lock 200' or 1200' at all. For the emergency buttons 10', 1010', neither a first delay nor a second delay is permitted. Instead of disallowing a delay by the first and / or second delay, a time of 0 s can also be stored. Actuation of the termination element 333 ends any delay in the unlocking.

[0249] If the delay element 332 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to the emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which do not include the control device 100. The emergency buttons 10, 1010, 10', 1010', 2010' of the safety system 1 decide how to proceed based on the deposit.

[0250] The setting of whether the emergency button 10, 1010, 10', 1010', 2010' allows the second delay period and, if so, the length of the second delay period, is made during commissioning of safety system 1. The settings are determined by the operator using the parameterization program. The first and / or second delay periods can only be selected up to a maximum, fixed time period.

[0251] Likewise, with the help of the parameterization program, the operator can selectively store which cancellation condition is permitted for each emergency button 10, 1010, 1010', 2010'. The cancellation condition for the on-site cancellation action is always permitted. However, for each emergency button 10, 1010, 1010', 2010', the reaching of the cancellation condition by expiration of the predetermined time interval or the reaching of the cancellation condition by expiration of the predetermined time interval and subsequent actuation of the identification device 312 while door 2 remains closed can be selectively permitted or not.

[0252] The deposit of whether the emergency button 10 can be deactivated upon actuation of the first operating element 322, whether the emergency button 10 should delay the unlocking by a second delay period upon actuation of the delay element 332, the length of the first and the second delay period, the deposit of the cancellation condition and / or the deposit of whether the door lock 200 should be unlocked upon actuation of the central emergency button 302 can also be used for the security system 1 according to the embodiment of the Figures 7 to 9 be made.

[0253] Deviating from and not shown by the Figures 7 to 10Several central escape route controllers 300, 300' can also be connected to the second bus system 401. For example, in a psychiatric hospital, one central escape route controller 300 can be provided for placement in a guard room and another central escape route controller 300' can be provided for placement in a nurse's station.

[0254] In the respective door locks 200, 200', 1200', 2200', it can be stored with the help of the parameterization program which of the central emergency buttons 302, 302' is to be unlocked upon actuation. A list is stored for this purpose in the door locks. In the respective emergency buttons 10, 10', 1010, 1010', 2010', it can be stored with the help of the parameterization program which of the first control elements 322, 322' is to be deactivated upon actuation. In contrast to the third variable, a list is stored for this purpose in the emergency buttons 10, 10', 1010, 1010', 2010'.

[0255] The first to fourth exemplary embodiments of the security system 1 do not have a second bus system 401, a central escape route control 300, a guard device 301, or an audio and video module 510. However, exemplary embodiments of the security system 1 according to the invention are conceivable in which the first to fourth exemplary embodiments additionally at least partially comprise the missing components 401, 301, 300, and 510. If the security system 1 is designed for multiple doors, each door can be assigned an audio and video module 510. The emergency buttons 1010, 2010, 3010, which do not comprise the control device 100, and the door locks 200, 1200, 2200, 3200 are not connected to the second bus system 401.

[0256] In the Figures 1 to 10The door locks 200, 200', 1200, 1200', 2200, 2200', 3200 are part of the security system 1 according to the invention. However, it is conceivable that only the door lock controls 201 are part of the security system 1 according to the invention. In this case, the door lock controls 201 can each be connected to the locking mechanism 205 and, if applicable, the door status monitoring devices 204, 206. In this case, unlocking of the door lock 200 does not take place in the security system 1; however, part of the security system 1 is that the door lock control 201 controls the locking mechanism 205, i.e., the door lock control 201 switches the electrical current for the locking mechanism 205 on or off. In this case, instead of the terms "locking or unlocking the door lock", the term "controlling the locking mechanism for locking or unlocking" can be used.

[0257] In the Figures 11 to 13An emergency button 10 is shown. The Figure 11 The emergency button 10 shown is used as emergency button 10, 10', 1010, 1010', 2010, 3010 in one of the safety systems 1 according to the invention of the Figures 1 to 10 usable or employed.

[0258] The emergency button 10 comprises the actuating element 11. The actuating element 11 can move from the initial position 11.I, which is in the Figure 11 shown, into the operating position 11.II, which is shown in Figure 11 is indicated. In Figure 12 the actuating element 11 is also in the starting position 11.I.

[0259] In the actuating position 11.II, the switch 63 is actuated. The switch 63 also changes from a first position 63.I to a second position 63.II, as shown in Figure 12 indicated.

[0260] After actuation, the actuating element 11 returns immediately and without manual intervention to the starting position 11.I. For this purpose, a spring-type return means 12 is provided in the emergency button 10. The switch 63 also returns immediately and without manual intervention to the first position 63.I after actuation.

[0261] The emergency button 10 comprises at least a first circuit board 60. This makes it possible to design the emergency button 10 in a compact manner and with a secure function.

[0262] The emergency button 10 has a construction height AH of less than 48 mm, preferably less than 45 mm, particularly preferably less than 43 mm, from a crest 32 of a front surface 19 of the actuating element 11 in the installation direction.

[0263] The switch 63 is mounted on the first circuit board 60. The first and second circuits on the first circuit board 60 are interrupted by the actuation of the switch 63.

[0264] The emergency button 10 also includes a second circuit board 61. The first, second, and third emergency button processing units 20, 21, 22 are arranged on the second circuit board 61. The arrangement of the first, second, and third emergency button processing units 20, 21, 22 is independent of whether the first, second, and third emergency button processing units 20, 21, 22 serve as processing units 103, 104, 105 of the control device 100.

[0265] The opening of the first and second circuits can be detected wirelessly by the first and second emergency button processing units 20, 21, respectively. For this purpose, the first and second circuit boards 60, 61 are connected to each other via connectors 68.

[0266] The first and second circuit boards 60, 61 are arranged at a fixed distance from each other. For this purpose, bolts 69 are provided, which fasten the first and second circuit boards 60, 61 to each other at a fixed distance from each other via screws 70 (see Figure 13 ). The first and second circuit boards 60, 61 are arranged parallel to each other.

[0267] The emergency button 10 comprises a mounting plate 62. The mounting plate 62 is also arranged at a fixed distance from the first and second circuit boards 60, 61. For this purpose, bolts 71 are provided, which connect the mounting plate 62 to the first circuit board 61 via screws 72.

[0268] The mounting plate 62 is used for attachment to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. The part of the emergency button 10 extending from the mounting plate 62 in the installation direction is referred to as the installation part 73. The installation part 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, particularly preferably less than 29 mm. This provides sufficient space for cables in the flush-mounted box. The distance MP from an underside of the mounting plate 62 to a top side of the second circuit board 62 is less than 22 mm, preferably less than 20 mm, particularly preferably less than 17 mm. The mounting plate 62 can also be used for attachment to a cover element of a surface-mounted housing (not shown).The distances mentioned apply in particular to an emergency button in which the Bluetooth module 64 is attached to an underside of the second circuit board 61, contrary to the illustration in the figures.

[0269] As described above, the cancellation action, which is performed directly on the emergency button 10, is carried out without a rotational movement of the actuating element 11 and the switch 63. This makes it possible to use a switch 63 with a low height. Thus, the switch 63 is designed such that the switch 63 is rotation-free. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, particularly preferably less than 15 mm.

[0270] The manner of the cancellation action and the low height of the switch 63 contribute to the low installation height AH of the emergency button 10.

[0271] The fact that the switch 63 is arranged centrally under the actuating element 11 and the actuating element 11 is guided eccentrically in the emergency button 10 also contributes to the low installation height AH of the emergency button 10.

[0272] As in the Figures 14 and 15 As shown, the actuating element 11 has rod-shaped guide means 35. The guide means 35 are guided in guide sleeves 65. The guide sleeves 65 are connected to the mounting plate 62. To ensure good guidance, one of the guide sleeves 65 extends through the first circuit board 60.

[0273] The guide means 35 are arranged parallel to the switch 63. The guide means 35 prevent a rotational movement of the actuating element 11 about an imaginary axis 701 extending in the actuating direction 700.

[0274] Due to the guide means 35 guided in the guide sleeves 65, the actuating element 11 can only be moved in a translational manner.

[0275] The actuating element 11 has an actuating means 36. As shown in the Figures 12 and 15 As shown, the actuating means 36 is designed in the form of a circular cylinder. This ensures that the actuating means 36 always actuates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are always actuated simultaneously (see Figure 13 ). The first circuit is opened by the first switching element 74 and the second circuit is opened by the second switching element 75.

[0276] The actuating means 36 is formed with a hollow interior 38. A light source (not shown) is arranged in the switch 63. The light emitted by the light source is guided through the hollow interior 38 to the dome 32 of the front surface 19 of the actuating element 11, where the light passes through the actuating element 11. The dome 32 thus serves as the illumination area 32 of the actuating element 11.

[0277] The actuating element 11 can comprise an opaque base body 33. The base body 33 can be provided with an opening, unlike the illustration in the figures. A light-permeable, particularly translucent insert (not shown) can be arranged in the opening. The insert can be secured, particularly pressed, in the opening. This makes the actuating element 11 particularly easy to manufacture.

[0278] The front surface 19 is partially conical. The illuminated area 32 forms the tip of the truncated cone. The illuminated area 32 protrudes from a cover 14 of the emergency button 10, counter to the actuation direction 700. This makes the light exiting the illuminated area 32 clearly visible from the side of the emergency button 10.

[0279] The return means 12 has a cavity 37. The actuating means 36 of the actuating element 11 and the switch 36 with the first and second switching elements 74, 75 protrude into the cavity 37. This results in a space-saving arrangement.

[0280] The Bluetooth module 64 is arranged between the first and second circuit boards 60, 61. The Bluetooth module 64 is used for parameterization. Alternatively, and not shown, and for greater space savings, the Bluetooth module 64 is attached to a side of the second circuit board 61 facing away from the actuating element 11. This allows the distance between the first and second circuit boards 60, 61 to be further reduced.

[0281] A tamper switch 66 is arranged on the first circuit board 60. Due to the low installation height, an actuating extension 67 of the tamper switch 66 extends through the mounting plate 62. The actuating extension 67 rests directly against the cover 14 of the emergency button 10.

[0282] If the control device 100 is integrated into the emergency button 10, the emergency button 10 can incorporate the functions described above despite its low installation height AH and thus be designed intelligently. The functions described above are executed using a program code stored in at least one of the processing units 103, 104, 105.

[0283] The emergency button 10 has a cover 13. The cover 13 is transparent and covers the front surface 19 of the actuating element 11. The cover 13 thereby prevents a user from directly touching the actuating element 11. The cover 13 serves as a mental barrier for the user.

[0284] The cover 13 remains non-destructive when the emergency button 10 is actuated. When the emergency button 10 is actuated, the cover 13 moves from an initial position 13.I to an actuating position 13.II. The cover 13 allows the user to actuate the actuating element 11 only indirectly via the cover 13.

[0285] The cover 13 is arranged in a non-removable manner in the emergency button 10. This ensures that a user cannot remove the cover 13 improperly.

[0286] The covering means 13 is firmly connected to the actuating element 11. For this purpose, the covering means 13 has extensions 27 which are Figure 13 As shown in the Figures 13 , 14 and 15 As shown, the actuating element 11 has holes 28 through which the extensions 27 are guided and are materially connected to the actuating element 11.

[0287] The actuating element 11 has a flange-like portion 31 to which the covering means 13 is attached. The flange-like portion 31 has the holes 28.

[0288] The flange-like section 31 serves as a stop of the actuating element 11 in the actuating direction 700. The actuating element 11 reaches the actuating position 11.II when the flange-like section 31 rests on the mounting plate 62 or on the guide sleeves 65.

[0289] The flange-like portion 31 serves as a stop for the actuating element 11 against the actuating direction 700. The actuating element 11 reaches the starting position 11.I when the flange-like portion 31 rests against a light guide 40. The light guide 40 holds the actuating element 11 against the force of the return means 12. For this purpose, the light guide 40 has a contact surface 51.

[0290] The light guide 40 is attached to the mounting plate 62. As a result, the actuating element 11 remains held against the force of the return means 12 even when the cover 14 is removed. The light guide 40 has a flange 52 with which the light guide 40 is attached to the mounting plate 62 (see Fig. 17 ). The light guide 40 is attached to the mounting plate 62 by the same screws 72 by which the mounting plate 62 is attached to the first circuit board 60.

[0291] Alternatively and not shown, the covering means 13 can be designed as an elastic film that spans the actuating element 11.

[0292] Due to the fixed connection, the distance between the actuating position 11.II and the starting position 11.I, as well as the distance between the actuating position 13.II and the starting position 13.I, correspond to one another. Immediately after the end of the actuation and without manual intervention, the covering means 13 is moved back to the starting position 13.I. The return means 12 serves this purpose. The return means 12 transfers the covering means 13 indirectly via the actuating element 11 to the starting position 13.I.

[0293] The cover 13 and the actuating element 11 each have a circular cross-section. The cover 14 has a circular recess 15. The cover 13 protrudes through the recess 15 opposite to the actuating direction 700. The actuating element 11 also protrudes through the recess 15.

[0294] The recess 15, the actuating element 11, and the covering means 13 have a common imaginary axis 701. The recess 15, the actuating element 11, and the covering means 13 are arranged concentrically.

[0295] The cover means 13 has an actuating surface 17, which is spaced apart from the front surface 19 of the actuating element 11. The cover means 13 also has a side surface 16, which is spaced apart from the side surface 18 of the actuating element 11.

[0296] Due to the spacing of the front surface 19 and the actuating surface 17, the transparent cover 13 can protrude far from the cover 14, while the partially opaque actuating element 11 protrudes only slightly from the cover 14. As a result, the light guide 40, which is essentially flush with the cover 14, remains clearly visible even for users standing at an angle in front of the emergency button 10. The light guide deviates by a maximum of ±3 mm, preferably a maximum of ±2 mm, and particularly preferably ±1 mm from a flush connection with the cover 14.

[0297] Because the covering means 13 protrudes far out from the cover 14, the emergency button 10 can be operated by the user with the flat of the hand. For this purpose, the covering means 13 is flush with the cover 14 in the actuating position 13.II, or the covering means 13 protrudes from the cover 14 in the actuating position 13.II against the actuating direction 700. In other words, the distance ABS between the initial position 13.I and the actuating position 13.II corresponds at most to the distance DF of an elevation 30 of the actuating surface 17 from the cover 14. Likewise, the value of the distance AB between the actuating position 11.II and the initial position 11.I corresponds at most to the distance DF. Figure 11 the distance ABS and the amount of the distance AB correspond to the distance DF.

[0298] The emergency button 10 includes lamps 41. The lamps 41 serve to indicate the unlocked and locked states of the door lock 200. If there are multiple emergency buttons 10, 1010, 2010, 3010, the lamps 41 indicate the unlocked and locked states of the associated door lock or locks 200, 1200, 2200, 3200. The lamps 41 are arranged concentrically around the actuating element 11. For example, the unlocked state is indicated by a green light and the locked state by a red light. In particular, all lamps 41 emit the same light to indicate the locked and unlocked states, at least unless a hazardous situation exists.

[0299] The lighting devices 41 can be controlled in at least two groups. Different control options allow, for example, patterns to be created that indicate additional states of the safety system 1 to the user. These additional display options allow a variety of states to be displayed to the user and / or operator in a compact and simple manner without the need for additional display devices. This increases the safety of the safety system 1.

[0300] In Figure 13 Of the eight individual lamps 41 provided as examples, six individual lamps are shown, three of which are designated by reference numerals 41a, 41b, and 41c. The individual lamps are referred to below as 41a, 41b, 41c, etc.

[0301] Each of the individually controllable groups of illuminants 41 can comprise only a single illuminant 41a, 41b, 41c, etc. In the embodiment of the Figures 11 to 17Each light source 41a, 41b, 41c, etc. can be controlled individually. Each light source 41a, 41b, 41c, etc. is designed as an RGB LED. The light sources 41a, 41b, 41c, etc. can be controlled such that each light source 41a, 41b, 41c, etc. can emit at least four different, preferably at least five different colors. These can be, for example, red, blue, yellow, green, and pink light.

[0302] The lamps 41 are controlled by the third emergency button processing unit 22. For this purpose, the emergency button processing unit 22 and the lamps 41 are connected to a ring bus (not shown).

[0303] The lighting devices 41 are arranged on the first circuit board 60. The acoustic alarm device 23 is also arranged on the first circuit board 60. The acoustic alarm device 23 is controlled by the third emergency button processing unit 22.

[0304] If several door locks 200, 1200 are assigned to the emergency button 10, as in Figure 4 shown, at least two options are conceivable. Firstly, the emergency button 10 can only indicate the unlocked state when all door locks 200, 1200 assigned to the emergency button 10 are in the unlocked state. In this case, the unlocked state is only indicated when the entire escape door width of the two door leaves 3, 4 is available for escape. Alternatively, the emergency button 10 already indicates the unlocked state when one of the door locks 200, 1200 or all door locks of a door leaf 3, 4 are in the unlocked state. This indicates the escape option as early as possible, when one of the door leaves 3, 4 is already unlocked. The options can be selected by the operator. For this purpose, for example, a switch (not shown) can be provided in the safety system 1.

[0305] Another state of the security system 1, which is indicated by the group-controlled lamps 41, is a dangerous situation. In this case, the lamps 41 can indicate whether a fire alarm signal is present or whether an actuation signal has been generated.

[0306] The lamps 41 can be controlled in such a way that the progression of the unlocking delay after the activation signal is generated by the lamps 41 is indicated. In this case, for example, increasingly fewer lamps 41 emit light of one color, in particular red light.

[0307] As a further state of the security system 1 that can be represented by the lighting means 41, an error can be represented by the lighting means 41. The error that can be represented in this way can be an error of the security system 1. For example, it can indicate that the control device 100, the door lock controller 200, or the first or second emergency button processing unit 20, 21 of the security system 1 is not operational, defective, has failed, has been deliberately switched off, or has been removed. The error can be an error of the alarm system connected to the security system 1, which is not operational, defective, has failed, has been deliberately switched off, or has been removed.

[0308] The light guide 40 comprises several light guide areas 44 (see the Figures 16 and 17). Each of the illuminants 41a, 41b, 41c, etc., is assigned a respective light guide region 44. The light guide 40 can be conceptually divided into light guide regions 44. Recesses 46 are provided between the light guide regions 44. Due to the recesses 46, the light essentially remains in the light guide regions 44.

[0309] Each light guide region 44 has a forwarding section 48. The forwarding section 48 is arranged above the lighting means 41 in the transmission direction 702. The transmission direction 702 is opposite to the actuation direction 700. The forwarding section 48 serves to guide light up to an expanding section 45 of the light guide region 44. The expanding section 45 expands in the transmission direction 702.

[0310] The expanding section 45 adjoins the forwarding section 48 in the transmission direction 702. The expanding section 45 serves to broaden the beam of the emitted light. The forwarding section 48 widens less than the expanding section 45.

[0311] The light guide 40 is formed in one piece. The light guide 40 is made of a single material, in particular monolithic. The light guide 40 is made of a translucent material.

[0312] The light guide regions 44 have a connecting section 49. The connecting section 49 adjoins the expanding section 45 in the transmission direction 702. The connecting sections 49 of the light guide regions 44 are integrally connected to one another in such a way that the one-piece and uniformly materialized light guide 40 is produced.

[0313] The connecting sections can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, particularly preferably 3.5 mm to 4.5 mm. As a result, the light from one of the illuminants 41a, 41b, 41c, etc., is virtually limited to a luminous area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the surface 47 of the light guide 40 facing the user. Each light guide area 44 comprises a luminous area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

[0314] The surface 47 of the light guide 40 corresponds to a circular ring. The illuminated areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are designed as sectors of the circular ring. The corresponding illuminated areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are illuminated by the light emitted by a light source 41a, 41b, 41c, etc. The circular ring encloses the actuating element 11.

[0315] The illuminants 41 can be controlled such that at least one illuminant 41a, 41b, 41c, etc. emits light of one color and at least one further illuminant 41a, 41b, 41c, etc. simultaneously emits light of a different color. For example, in this way, the illuminating areas 50a, 50b, 50e, 50f can display light of one color, and the illuminating areas 50c, 50d, 50g, and 50h can display light of a different color. While the illuminating areas 50a, 50b, 50e, 50f are continuously illuminated, for example, the illuminating areas 50c, 50d, 50g, and 50h can be illuminated by illuminants 41 that emit flashing light.

[0316] If, for example, the luminous areas 50a, 50b, 50e, 50f are first illuminated by the light of a first color and the luminous areas 50c, 50d, 50g and 50h are illuminated by the light of a second color; then the luminous areas 50a, 50h, 50d, 50e are illuminated by the light of the first color and the luminous areas 50b, 50c, 50f and 50g are illuminated by the light of the second color; then the luminous areas 50h, 50g, 50d, 50c are illuminated by the light of the first color and the luminous areas 50a, 50b, 50e and 50f are illuminated by the light of the second color, the impression of a circumferential color window is created.

[0317] The opposite luminous areas 50, ie the luminous areas 50 which lie on a straight line passing through the imaginary axis 701, in Figure 14Namely, 50a and 50e, 50b and 50f, 50c and 50g, and 50d and 50h, are preferably illuminated in the same manner, i.e., in the same color and with the same flashing frequency. Thus, the pattern can be discerned even by users standing diagonally in front of the emergency button 10, even if the actuating element 11 obscures at least one of the opposing illuminated areas 50.

[0318] In order to cover the light guide 40 as little as possible, the illumination region 32 protrudes by a maximum of 10 mm, preferably a maximum of 7 mm, particularly preferably a maximum of 5 mm above the light guide 40.

[0319] The emergency button 10 may include a brightness sensor (not shown). The brightness sensor measures the ambient brightness of the emergency button 10. If the ambient brightness decreases, the luminous intensity of the light emitted by the lamps 41 is also reduced.

[0320] Via the Bluetooth module 64, parameters can be set via a mobile communication device, e.g., how the lamps are to be controlled for which state of the security system 1. The parameters include the flashing frequencies of the lamps 41, whether a continuous or flashing light should be emitted, and which state should be indicated by which color. After parameterization, the settings are stored in an electronic memory of the security system 1, in particular the control device 100. Likewise, for safety reasons, the display of certain states may not be selectable by the operator and may be permanently stored in the electronic memory. The operator can select states of the security system 1 that they wish to indicate using the lamps 41. For this purpose, colors and / or patterns can be emitted by the lamps 41 that are not predetermined and assigned to any state.For example, the operator can select which status they want to indicate with a blue light. In addition to parameterization via Bluetooth module 64, parameterization via the monitoring device 301 is also possible.

[0321] The change in the state of the door lock 200 is then displayed after the door lock controller 201 has communicated the state change to the control device 100. The control device 100 then controls the lighting means 41 or causes the lighting means 41 to be controlled.

[0322] When the security system 1 is commissioned, several initialization views are generated successively at fixed intervals by the lighting devices 41. One of the initialization views displays potentially enabled functions of the control device 100. A second initialization view displays the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 that can be integrated into the security system 1, with the status error-free / faulty / not present being indicated. A third initialization view displays the status of the inputs and outputs.

[0323] The central emergency button 302 is constructed almost identically to the emergency button 10. In particular, the actuating element 11 corresponds in function and structure to the emergency button actuating element 306. The switch 63 corresponds to the emergency button switch 307. The central emergency button 302 also includes a reset means corresponding to the reset means 12. The central emergency button 302 comprises a first and a second circuit board and / or a mounting plate, which are constructed and connected to one another in accordance with the first circuit board 60, the second circuit board 61, and the mounting plate 62, respectively. The alarm device 309 and the lighting means 313, corresponding to the alarm device 23 and the lighting means 41, are arranged on the first circuit board of the central emergency button 302. The first to third emergency processing units 303, 304, 305 are arranged on the second circuit board of the central emergency button 302. The emergency button switch 307 ends on the first board of the central emergency button 302.When the emergency button switch 307 is actuated, a first and a second circuit on the first circuit board are opened, which can be detected wirelessly by the first and second emergency processing units 303, 304. For this purpose, the first and second circuit boards are connected via connectors. The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The lamps 313 can be controlled in the same way as the lamps 41.

[0324] It is conceivable that a covering means 13 corresponding to the covering means 13 is designed differently or is missing in the central emergency button 302. In particular, the lighting means 313 do not serve to visually indicate a locking state of an emergency button 10. The lighting means 313 serve to visually indicate the first and second delay periods and / or to visually indicate that a reversing action is possible.

[0325] The security system 1 according to the invention does not necessarily have to have all the functions described in the description for at least one of the Figures 1 to 10 Rather, the security system 1 contains the functions described in the description for at least one of the Figures 1 to 10 mentioned above. However, in order to execute the functions, the functions must be enabled. This occurs when the control device 100 communicates with a communication module 801. The communication module 801 is designed as a chip card. The communication module 801 comprises a memory in which at least one code for enabling at least one function is stored. The communication module 801 comprises a microprocessor that serves only to encrypt the code. The communication module 801 is inserted into a receptacle 77 of the control device 100 (see Fig. 18a). Due to its arrangement in the receptacle 77, the communication module 801 is mechanically held in the receptacle 77 in a form-fitting and / or force-fitting manner. At the same time, the communication module 801 is electrically contacted by its arrangement in the receptacle 77, so that the control device 100 can read the at least one code from the communication module 801. The control device 100 and the communication module 801 are wired (not shown).

[0326] To read the code, the control device 100 must first gain access to the communication module 801 using a password. The control device 100 must decrypt at least one code before the function can be enabled. Enabling the function unlocks the program code that enables the function to be executed.

[0327] To enable the function, the program code with which the function can be executed is enabled. If the program code is stored on the emergency button 10 and the control device 100 and the emergency button 10 are connected to each other via the first bus system 400, the control device 100 initiates an activation in the emergency button 10 via the first bus system 400 after reading the code from the communication module 801. If the program code is stored in the door locking controller 201, the control device 100 initiates an activation in the door locking controller 201 via the first bus system 801 after reading the code from the communication module 801.

[0328] A code can unlock one or more functions, especially function blocks.

[0329] In the parameterization program, only parameters for previously enabled functions can be set. Only these parameters are displayed on the screen.

[0330] The function remains enabled only if the code is repeatedly read from the communication module 801, in particular at regular intervals. For this purpose, predetermined, non-adjustable time intervals can be stored in the control device 100. After the predetermined time interval has elapsed, the control device 100 blocks the function if the associated code could not be read from the communication module 801. If the function is performed by the emergency button 10, which is connected to the control device 100 via the first bus system 400, the control device 100 initiates a blocking of the function via the first bus system 400. If the function is performed by the door locking controller 201, which is connected to the control device 100 via the first bus system 400, the control device 100 initiates a blocking of the function via the first bus system 400.

[0331] Several codes Code1, Code2 for different functions can be stored on the communication module 801 (see. Fig. 18a ).

[0332] If an additional function is to be enabled, it is conceivable to remove the communication module 801 from the receptacle 77 and to insert another communication module 802 into the receptacle 77 (see Fig. 18b ). The communication module 801 is referred to below as the master module 801. The additional communication module 802 is referred to below as the auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 comprises a memory in which at least one code for enabling the additional function is stored. The auxiliary module 802 comprises a microprocessor that serves only to encrypt the code.

[0333] The code Code3, which is stored on the auxiliary module 802, is read out by the control device 100 (see Fig. 18b). To read the code Code3, the control device 100 must first gain access to the auxiliary module 802 using a password. The control device 100 must decrypt at least one code before the function can be enabled. The code Code3 of the auxiliary module 802 is stored in a memory 107 of the control device 100 (see Fig. 18c ). The code of the auxiliary module 802 is then deleted on the auxiliary module 802 (see Fig. 18c ). The auxiliary module 802 is removed from the holder 77. The mother module 801 is then inserted into the holder 77 (see Fig. 18d ). The code of the auxiliary module 802 is stored on the mother module 801 (see Fig. 18d ). The code is deleted from the memory of the control device 100 (see Fig. 18d ). The additional function will be activated.

[0334] In the case of a mother module 801, however, the code is not stored in the control device 100 (see Fig. 18a, d). In a mother module 801, the code is not deleted. Rather, the mother module 801 serves for a permanent arrangement in the receptacle 77. The codes Code1, Code2, Code3 stored on the mother module 801 are repeatedly read out. The control device 100 decides, based on an identifier K801, K802 of the communication module 801, 802, whether it is a mother module 801 or an auxiliary module 802. The identifier K801, K802 is stored electronically in particular on the mother module 801 and the auxiliary module 802. The identifier K801 of the mother module 801 differs from the identifier K802 of the auxiliary module 802.

[0335] Insertion and removal from the holder 77 are performed manually. The remaining processes are performed automatically.

[0336] Insertion and removal from the receptacle 77 can be reserved for an operator. For this purpose, the receptacle 77 is arranged inaccessible to an unauthorized user. In particular, the tamper switch 66 is activated in the event of an unauthorized attempt to access the receptacle. The receptacle can be arranged between the first circuit board 60 and the second circuit board 61, e.g., on an underside of the first circuit board 60.

[0337] For the safety system 1 to function, a mother module 801 must be arranged in a receptacle 77 of the safety system 1. For the safety system 1 to remain functional for longer than the specified time interval, the mother module 801 must remain in the receptacle 77.

[0338] Each emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 comprises a receptacle 77. Exactly one mother module 801 is required and provided for each first bus system 400, 400' of the safety system 1. Only when the mother module 801 is inserted into the receptacle of an emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 does the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 simultaneously serve as a control device 100 for the corresponding first bus system 400, 400'. The remaining emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 of the safety system 1, which do not contain a mother module 801, contain the same program codes as in the control device 100. However, without the mother module 801, the program codes are not enabled, so the remaining emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 cannot serve as the control device 100.Because the mother module 801 is located in the receptacle 77, the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serves as a control device 100.

[0339] If the control device 100 is to be designed separately from the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 and the door locks 200, 200', 1200, 1200', 2200, 2200', 3200, a mother module 801 is inserted into a receptacle 77 of the processing electronics 101. Because the mother module 801 is located in the receptacle 77, the processing electronics 101 is capable of performing the functions of the control device 100.

[0340] If the safety system 1 comprises several subsystems 5, 6 and thus several first bus systems 400, 400', the safety system 1 comprises exactly the same number of mother modules 801, 801' as there are subsystems 5, 6 (see Figure 10). The emergency button 10', which communicates with the mother module 801', and the processing electronics 101 of the control device 100 from Figure 10 , which communicates with the mother module 801, are also provided to be connected to the second bus system 401.

[0341] The parent module 801, 801' can contain different codes for each subsystem 5, 6, thus enabling different functions. For example, the parent module 801' of the second subsystem 6 can contain a code for the selective assignment of the door locks 200', 1200', 2200' to the emergency buttons 10', 1010', 2010'. However, the code for the selective assignment of door locks to emergency buttons on the parent module 801 is not necessary for subsystem 5.

[0342] The communication module 801, 801', 802 can have a gap 803 through which a self-adhesive tape, in particular, is passed. The self-adhesive tape serves for manually removing the communication module 801, 801', 802 from the receptacle 77. The self-adhesive tape includes information about the functions that can be activated by the codes stored on the respective communication module 801, 801', 802. The information can be a color code, a QR code, and / or a barcode.

[0343] Alternatively, the communication module 801, 801', 802 can be designed as a chip card with a flexible section. The part of the chip card protruding from the recess 77 can be provided with the information, ie, the color code, the QR code, and / or the bar code.

[0344] A mother module 801 once inserted in a security system 1 can be functionally re-inserted in a receptacle 77 of another security system 1 according to the invention.

Claims

1. A security system (1) for controlling and / or monitoring door locking devices (200) for escape route security, having door locking controllers (201), wherein a door locking controller (201) serves to activate a locking mechanism (205), which is to be assigned to the door locking controller (201), and having trigger elements (10, 1010, 2010, 3010), in particular emergency buttons (10, 1010, 2010, 3010), wherein, as a result of an actuation of a trigger element (10, 1010, 2010, 3010), it is possible to initiate an activation of at least one locking mechanism (205), wherein a number of door locking controllers (201) and a number of trigger elements (10, 1010, 2010, 3010) are connected to one another via a common, first bus system (400), wherein the number of door locking controllers (201) and the number of trigger elements (10, 1010, 2010, 3010) each correspond to a natural number of at least two, and the number of door locking controllers (201) are assigned to the number of trigger elements (10, 1010, 2010, 3010) in such manner that, when one of the trigger elements (10, 1010, 2010, 3010) is actuated, only the at least one door locking controller (201) assigned to the actuated trigger element (10, 1010, 2010, 3010) activates the respective locking mechanism (205) for unlocking, wherein, as a result of the actuation of one of the trigger elements, which are connected to the first bus system, not all door locking controllers, which are connected to the first bus system, are initiated to activate the respective locking mechanism for unlocking, wherein in the door locking controllers (201), which belong to the number of door locking controllers (201), it is stored in each case to which at least one trigger element (10, 1010, 2010, 3010) the respective door locking controller (201) is assigned, characterised in that all door locking controllers (201) of the number of door locking controllers (201) are notified of the actuation by the trigger element (10, 1010, 2010, 3010) as a result of the actuation of the trigger element (10, 1010, 2010, 3010) and the respective door locking controller (201) decides whether the locking mechanism (205) assigned to the door locking controllers (201) is to be activated for unlocking, for which purpose each door locking controller (201), which is connected to the first bus system (400), verifies whether the respective door locking controller (201) is assigned to the trigger element (10, 1010, 2010, 3010) sending the message, wherein only if the door locking controller (201) determines that the door locking controller (201) is assigned to the trigger element (10, 1010, 2010, 3010) sending the message does the door locking controller (201) activate the locking mechanism (205) for unlocking.

2. The security system (1) according to one of the preceding claims, characterised in that the trigger elements (10, 1010, 2010, 3010) comprise a bus address and the bus address is stored for assignment in the at least one door locking controller (201) assigned to the trigger element (10, 1010, 2010, 3010).

3. The security system (1) according to one of the preceding claims, characterised in that the door locking controllers (201) each comprise a first digital processing means (202) and a second digital processing means (203) and are stored both in the first processing means (202) and in the second processing means (203), to which at least one trigger element (10, 1010, 2010, 3010) the respective door locking controller (201) is assigned, wherein in particular the locking mechanism (205) can be activated by the first processing means (202) and redundantly by the second processing means (203).

4. The security system (1) according to one of the preceding claims, characterised in that the trigger elements of the number of trigger elements (10, 1010, 2010, 3010) are configured to perform at least one of the following functions: a. Initiating an activation of at least one locking mechanism (205) for unlocking as a result of the actuation of the trigger element (10), wherein the locking mechanism (205) or the locking mechanisms (205) assigned to the trigger element (10, 1010, 2010, 3010) are activated, b. Initiating an activation of at least one locking mechanism (205) of the door lock (200, 1200, 2200, 3200) for unlocking after receipt of a fire alarm signal, c. Time-delaying the initiating of an activation of the locking mechanism (205) according to function a.), wherein the activation can be delayed by a second time delay period, in particular within a first time delay period; d. Preventing the initiating of an activation or preventing the activation of the locking mechanism (205) for unlocking as a result of the actuation of the trigger element (10, 1010, 2010, 3010) when the trigger element (10, 1010, 2010, 3010) is in a deactivated state; e. Initiating an activation of or activating the locking mechanism (205) for relocking after performing function a., provided that a cancellation condition is met, wherein in particular the cancellation condition is met: ▪ after a cancellation action on the trigger element (10, 1010, 2010, 3010), which is intended for arrangement at or near the door, and / or authentication ■ optionally after a predetermined period of time has elapsed and if there is no signal that the door has opened within the predetermined period of time; ■ optionally after a predetermined period of time has elapsed following receipt of a cancellation signal from a central escape route controller (300) and if there is no signal that the door has opened within the predetermined period of time; f. Initiating the enabling of an audio and / or video module (510), wherein in particular the audio and / or video module (510) transmits an audio and / or video recording (510) to a guard device (301).

5. The security system (1) according to one of the preceding claims, characterised in that, as a result of an actuation of a trigger element (10, 1010, 2010, 3010) of the number of trigger elements (10, 1010, 2010, 3010), the locking mechanism (205) can be electronically prevented from being activated for locking until a cancellation condition is present only by way of the at least one door locking controller (201), which is assigned to the actuated trigger element (10, 1010, 2010, 3010).

6. The security system (1) according to one of the preceding claims, characterised in that the security system (1) comprises a central escape route controller (300) with a central emergency button (302), wherein, as a result of the actuation of the central emergency button (302), at least one locking mechanism (205) is activated for unlocking and, as a result of the actuation of the central emergency button (302), actuation for unlocking is prevented at least for one of the other locking mechanisms (205).

7. The security system (1) according to one of the preceding claims, characterised in that the security system (1) has a control device (100) and the control device (100) is connected to the bus system (400), wherein the control device (100) is configured to perform at least one of the following functions, preferably a plurality of the following functions, particularly preferably all of the following functions: h. Initiating an activation of or activating the locking mechanism (205) for unlocking after receipt of a positive authentication signal, wherein the positive authentication signal can be received in particular via a bus input, i. Initiating an activation of or activating the locking mechanism (205) for unlocking at a predefined time; j. Preventing the activation of a further locking mechanism (205) after a first locking mechanism (205) has been activated until a condition is present in such manner that an interlock is formed, k. Initiating an activation of or activating the locking mechanism (205) for automatic relocking after a predetermined period of time has elapsed, in particular after performing functions h., i. and / or j. l. Initiating an activation of or activating the locking mechanism (205) for automatic relocking after receipt of a signal about a closed state of the door, in particular after performing functions h and / or j, wherein preferably the closed state of the door can be detected by at least one door state monitoring device (204, 206); m. Initiating an activation of or activating an audible alarm transmitter (23) for outputting an alarm depending on a signal from the door state monitoring device (204, 206) about the opening of the door, in particular if there is no authorisation present to enter the door; n. Communicating via a radio module (64), preferably for parameterising the security system (100), wherein the parameterisation can preferably be carried out via a mobile communication device; o. Initiating an activation of or activating an audible alarm transmitter (23) for outputting an audible alarm as a result of an actuation of the trigger element (10) or after receipt of a fire alarm signal, p. Initiating an activation of or activating a display unit (41) for the visual representation of a locking state of the door lock (200), q. Initiating an activation of or activating a display device (41) for the visual representation of the time-delayed activation of the locking mechanism (205), in particular for unlocking and in particular after actuation of the trigger element (10); r. Initiating an activation of or activating a display (41) for the visual representation of an alarm state, in particular as a result of an actuation of the trigger element (10) or after receipt of a fire alarm signal, s. Initiating an output of an audible and / or visual alarm if relocking fails, in particular if the door remains open, which can be detected by the door state monitoring device, t. Establishing and / or maintaining a communication connection (401, 403) between the control device (100) and a control centre, in particular a central escape route controller (300), a guard device (301) and / or a multi-door display unit (350).

8. The security system according to claim 7, characterised in that the door locking controllers (201) connected to the first bus system (400) and / or the trigger elements (10, 1010, 2010, 3010) connected to the first bus system (400) can be selectively notified for the control device (100) to perform at least one of the functions h.), i.), k.), l.), m.), o.) to s.) and / or the control device for performing at least one of the functions h.), i.), k.), l.), m.), o.) to s.) selectively activates or selectively initiates an activation of a locking mechanism (205), a display unit (41), a display device (41), a unit which can be connected to the additional output, light means (41) and / or an audible alarm transmitter (23).

9. The security system (1) according to claim 7 or 8, characterised in that it is stored in the control device (100) which trigger element (10, 1010, 2010, 3010) of the number of trigger elements (10, 1010, 2010, 3010) is assigned to which of the door locking controllers (201) belonging to the number of door locking controllers (201), wherein in particular the trigger elements (10, 1010, 2010, 3010) comprise the display device (41) and / or the display unit (41) and the control device (100) activates or initiates an activation of the at least one display device (41) and / or the at least one display unit (41) according to the function p.) or q.), the associated door locking controller (201) of which recognises a change of a locking state (function p.) and / or the associated door locking controller (201) of which activates the locking mechanism (205) with a time delay (function q.).

10. The security system (1) according to one of claims 7 to 9, characterised in that the control device (100) is connected via a second bus system (401) to a control centre, in particular a central escape route controller (300) and / or guard device (301), wherein in particular information of the door locking controllers (201) of the number of door locking controllers (201) or of the trigger elements (10, 1010, 2010, 3010) of the number of trigger elements (10, 1010, 2010, 3010) can be transmitted to the control centre (300, 301) via the control device (100).