SAFETY SYSTEM

Description

[0001] The invention relates to a safety system for controlling and / or monitoring at least one door lock for securing escape routes, comprising at least one release element, in particular an emergency button, and a door lock control unit for controlling a locking mechanism, wherein the release element and the door lock control unit are connected to each other via a first bus system. Safety systems with an emergency button for securing escape routes are known. When the emergency button is pressed, a door lock is unlocked, allowing a user to escape in case of danger. EP 2 725 172 A2 discloses the ability to connect an emergency button and a door lock via a bus system. It remains unclear whether and how non-safety-related functions can be integrated into a safety system. Furthermore, the question arises as to how a connection between a central unit and the emergency button and the door lock can be designed.

[0002] Document EP 2 725 172 A2 discloses a safety system for door control with the features of the preamble of claim 1.

[0003] Document DE 44 43 391 A1 concerns a system of locks that can be controlled by a controller via a bus.

[0004] DE 10 2014 113647 A1 concerns a solution for a security system for door control for escape route security with a remote central unit, which, however, only has one bus.

[0005] Document EP 2 366 860 A2 discloses a safety system for door control with a control device for controlling redundant drive motors, which is equipped with two redundant computer units and is configured to process signals from an emergency switching device and a signaling device for detecting hazardous situations, in particular the occurrence of fire or smoke.

[0006] Document EP 2 555 169 A2 discloses a safety system for door control with an escape route terminal that can process signals from a local emergency button, a remote access control device and a remote fire alarm system and can accordingly control the unlocking of the door lock.

[0007] It is therefore an object of the present invention to provide a safety system that, in particular, meets a variety of tasks in a simple and / or safe manner.

[0008] This problem is solved by a safety system according to independent claim 1. Advantageous embodiments of the safety system are specified in the dependent claims, the description, and the figures. The features mentioned in the description and in the claims can be essential to the invention individually or in combination.

[0009] The previously derived and demonstrated task is solved, starting from the safety system described at the beginning, by the fact that the safety system includes a control device, wherein the control device is connected to the triggering element and / or to the door locking control via the first bus system.

[0010] The safety system includes the first bus system. In the following, a connection to a bus system is understood to mean a direct connection, such that a component connected to the bus system is considered a bus participant of the bus system with its own bus address.

[0011] The release element and the door locking control are connected to the first bus system. The control device is also connected to the first bus system. The control device preferably serves to perform at least one non-safety-related function. Because the control device is connected to the first bus system, it can easily communicate with at least one other bus participant of the first bus system.

[0012] The release element includes an actuating element. Actuation of the actuating element can trigger the locking mechanism to unlock the device.

[0013] The release element is preferably designed as an emergency button. In this case, the actuating element of the release element corresponds to the actuating element of the emergency button. Alternatively, the release element can be designed as a panic bar assembly. In this case, the actuating element is designed as a panic bar. The release element can also be designed as a hardware assembly. In this case, the actuating element is, for example, designed as a door handle.

[0014] Locking refers to the process of moving the door lock or locking mechanism into a locked state. Unlocking refers to the process of moving the door lock or locking mechanism into an unlocked state.

[0015] The security system may include the locking mechanism.

[0016] The locking mechanism can be, for example, electromechanical or purely electromagnetic. The locking mechanism includes, for example, at least one coil. Control of the locking mechanism for locking or unlocking can be implemented, in particular, by switching an electrical power supply on or off. The electrical power supply can serve to supply the coil with electrical current.

[0017] An electromagnetic locking mechanism is described by way of example in DE100 50 111 C1. In the unlocked state, for example, no magnetic forces act on the door. In the locked state, for example, magnetic forces act on a door.

[0018] An electromechanical locking mechanism has a mechanical connection to the door when locked. When unlocked, this mechanical connection can be disengaged or removed.

[0019] The electromechanical locking mechanism can, for example, include a locking element, i.e., a bolt or door latch, which is in a retracted position when the door lock is unlocked. In the retracted position, the locking element is disengaged from the door. In the locked position, the locking element is engaged with the door. In another alternative electromechanical locking mechanism, the locking mechanism is designed like a door opener. That is, the locking mechanism includes a latch element. When the door lock is locked, the door latch engages with the locking mechanism. In the unlocked position, the latch element releases the door latch so that the door latch can be disengaged from the locking mechanism, particularly by applying pressure to the door.

[0020] Preferably, switching off the electrical power supply results in the door lock being unlocked. Thus, the locking mechanism is activated to unlock the door lock by switching off the electrical power supply. Preferably, switching on the electrical power supply results in the door lock being locked. Thus, the locking mechanism is activated to lock by switching on the electrical power supply.

[0021] The safety system can alternatively be designed without the locking mechanism. In this case, the safety system merely controls the locking mechanism. For example, the safety system switches the electrical power supply to the locking mechanism on or off, or initiates the switching on or off of the electrical power supply.

[0022] A "locking or unlocking signal" also occurs when the safety system receives feedback about the state of the locking mechanism. A "locking or unlocking signal" also occurs when, as detected by the feedback, the locking mechanism does not correspond to the target state, and therefore an alarm is triggered and / or another attempt is made to achieve the target state.

[0023] The door lock control unit operates the locking mechanism for locking and unlocking. For this purpose, the door lock control unit can switch the electrical power supply to the locking mechanism on and off.

[0024] The security system can include the door locking control unit, but not the locking mechanism itself. In this case, the door locking control unit is designed as a door locking adapter. The door locking adapter serves to integrate the security system according to the invention with locking mechanisms that are already installed.

[0025] The door lock comprises the locking mechanism and the door lock control. Preferably, the security system includes the door lock. The door lock or the locking mechanism may be integrated into a mechanical lock. If the security system includes the door lock, the expression "unlocking the door lock or locking the door lock" may be used instead of "actuating the locking mechanism to unlock or lock." If the security system does not include the locking mechanism, the expression "actuating the locking mechanism to unlock or lock" should be used instead of "unlocking the door lock or locking the door lock."

[0026] The following distinguishes between a user and an operator. A user can be any person who uses the security system. For example, a user could be a guest who wants to escape through a door secured by the security system. An operator is responsible for operating the security system. The operator has access to a monitoring device of the security system and / or can authenticate themselves to the security system, particularly in order to operate the security system. The monitoring device can be a PC or a monitor.

[0027] The safety system serves primarily to secure escape routes. It therefore serves to release the escape route. This means that actuating the control element unlocks the system without requiring user authentication. The unlocking can occur immediately or after a time delay.

[0028] The release element can trigger the locking mechanism to unlock. Initiating this action specifically means sending a message via the first bus system and / or a second bus system containing information and / or a command that causes the direct or indirect recipient of the message to perform the action. The sender of the message initiates the action. Thus, initiating this action is understood as indirect control. For example, the release element can send a message via the first bus system to the door locking control unit, whereupon the door locking control unit triggers the locking mechanism to unlock. The release element can, in particular, trigger the unlocking of the locking mechanism with a time delay.

[0029] The control device can perform one or more non-safety-related functions. In particular, the control device can unlock or lock the door lock in non-safety-related cases, i.e., not after actuation of the release element or in the presence of a fire alarm signal.

[0030] The control device can activate or initiate the unlocking of the door locking mechanism upon receiving a positive authentication signal (function h). For this purpose, the control device can be connected to, or connectable to, an access control system. The access control system can be connected to, or connectable to, the first bus system. The access control system can, for example, include or be configured with a reader, a key switch, a keypad for entering a code, or a locking cylinder of a mechanical lock, particularly a self-locking panic lock. A positive authentication signal can be a signal indicating that the access control system has previously verified the authorization and determined that access is authorized. Alternatively, an authentication signal can be a signal indicating that the control device itself verifies the access authorization.The authentication signal can also be a signal generated by turning a suitable key on a key switch.

[0031] The control device can, for example, activate the door locking mechanism to unlock at a predetermined time or initiate such activation (function i.). Unlocking at a predetermined time may be necessary, for example, if the door is to be unlocked within a specific time window each day.

[0032] If no emergency situation exists, i.e., neither the release element has been activated nor is a fire alarm signal present, the control device can activate the door locking mechanism for automatic relocking after a predetermined time period or initiate such activation (function k). This can be the case, for example, if the door lock was previously unlocked due to a positive authentication signal. The predetermined time period can be stored in the safety system. The predetermined time period can be selected by an operator. The predetermined time period can correspond to, in particular, several seconds (e.g., ten), several minutes (e.g., five), or even several hours (e.g., eight). The operator can define the predetermined time period using a parameterization program.

[0033] Additionally or alternatively, the control device may directly activate or initiate the locking mechanism for automatic relocking after receiving a signal indicating that the door is closed (Function I). The closed state of the door may be detectable by at least one door status monitoring device.

[0034] The door status monitoring device is used to detect whether the door is open or closed. This device can be, for example, a door contact, a sensor, a switch, and / or a door lock with a detectable bolt and / or latch position. The security system can include the door status monitoring device or be connectable to it.

[0035] Preferably, at least one first door status monitoring device and one second door status monitoring device are provided for a door leaf and / or a door lock. This allows for single-fault safety. Preferably, the first door status monitoring device differs in its design from the second door status monitoring device. This increases fault tolerance.

[0036] In addition to the non-safety-relevant locking and unlocking of the door lock, the control device can have other functions.

[0037] The safety system, in particular the control device and / or the triggering element, may have an additional input and / or output. A cable for a room light, for example, may be connected to the additional output. A measuring device, for example, may be connected to the additional input. The control device may integrate the additional input and / or output so that signals can be evaluated via the additional input and / or signals can be sent via the additional output. The control device may control an external device via the additional output or initiate such control (function v.).

[0038] The security system, in particular the triggering element, may include an acoustic alarm.

[0039] The control device can control the acoustic alarm or initiate the control of the acoustic alarm.

[0040] The safety system, in particular the release element, may include a display device for the visual indication of the locking status of the door lock. A locking status is understood to mean the locked and / or unlocked state of the door lock.

[0041] The safety system, in particular the release element, may include a display device for the visual representation of a time-delayed activation of the locking mechanism after actuation of the release element. This display may show both a first delay period that must elapse before the locking mechanism is activated to unlock, and / or a second delay period that must elapse before the locking mechanism is activated to unlock. The visual representation of the first and second delay periods may differ.

[0042] The time-delayed activation of the door locking mechanism is achieved, in particular, by the triggering element causing the door locking control to activate the door locking mechanism after a time delay. The triggering element can include a timer to determine the first and / or second delay duration. The second delay duration can be triggered by operating a delay element of a central escape route control unit of the safety system.

[0043] The safety system, in particular the triggering element, may include an indicator for the visual representation of an alarm condition. The alarm condition may indicate a hazardous situation. The alarm condition occurs in particular after activation of the triggering element and / or after receiving a fire alarm signal.

[0044] The safety system, particularly the release element, can provide a visual indication if relocking fails, especially if the door remains open, which is detectable via at least one door status monitoring device. A fire door should always be closed after an inspection. If, for example, the door lock has been unlocked due to a positive authentication signal and the door has been opened but not automatically relocked after the predetermined time period, this fact can be visually indicated. It can also be visually indicated if a user-defined opening time is exceeded. The opening time can be detected by the door status monitoring device. An operator can select the opening time. The operator can also define the opening time using the parameterization program.

[0045] The triggering element can include light sources as a display device, a visual indicator, and / or a visual indicator of a failed relocking event. Preferably, the light sources serve both as a display device, a visual indicator, and a visual indicator of a failed relocking event. For this purpose, the light sources can be controlled in at least two groups. In particular, the light sources can be controlled at least partially individually. The control device can control the light sources or initiate the control of the light sources.

[0046] The control device can control the display device, in particular the light sources, for the optical representation of the locking state or / and initiate such control (function p.).

[0047] The control device can control the display device, in particular the light source, to visually represent the time-delayed activation of the locking mechanism, or / or initiate such activation (function q). The control device can visually display the first and / or the second delay duration.

[0048] The control device can activate or initiate the display, in particular the indicator lights for the visual representation of an alarm condition, and / or the audible alarm to emit an audible alarm (function o. and / or function r.). The control device can trigger a visual or audible alarm if relocking fails, in particular if the door remains open (function s.). The control device can activate or trigger the audible alarm to emit an alarm, depending on a signal from the door status monitoring device indicating that the door has been opened, in particular if there is no authorization to enter the door (function m.). A door may be unlocked for at least a certain period of time. If the door is opened within this period, an audible alarm will be triggered.The acoustic alarm can always be sounded within the specified time window, or only if there is no authorization to enter the door.

[0049] To execute the functions, parameters can be stored in the control device. For this purpose, the control device has, in particular, non-volatile memory. The parameters can be set by an operator via the parameterization program. Thus, the control device can serve to store parameters (function u.). Logical connections relating to the functions of the control device can be stored in the control device (function u.).

[0050] The control device may include a radio module. The control device can communicate for parameterization via the radio module. For this purpose, the control device can preferably communicate with a mobile communication device, such as a laptop, tablet, or mobile phone (function n). Alternatively, the control device can communicate with a communication device for parameterization via a wired connection, particularly via the second bus system.

[0051] The control device establishes and / or maintains a communication link to a central unit. The central unit can include the monitoring device, the central emergency exit control system, and / or a multi-door display device (function t.). The control device can be connected to, or connectable to, the second bus system. The monitoring device and / or the central emergency exit control system can also be connected to the second bus system. Thus, the control device can communicate with the central unit via the second bus system. The multi-door display device can be connected to the second bus system or, alternatively, to the central emergency exit control system via a third bus system. In the latter case, the control device can communicate with the multi-door display device via the central emergency exit control system.

[0052] The central emergency exit control system can include a central emergency button. When the central emergency button is pressed, the locking mechanism is activated to unlock the barrier. The process of activating the locking mechanism to unlock the barrier following activation of the central emergency button is fail-safe and therefore suitable for emergency situations.

[0053] In particular, the control device can be used to forward a message about the activation of the central emergency button to the door locking control unit of the first bus system. The control device can adapt the message format to the first bus system. The control device can leave the message itself untouched.

[0054] The control device can be integrated into the release element. In other words, the release element can include the control device.

[0055] Alternatively, the control device can be integrated into the door lock control unit. In other words, the door lock control unit can include the control device.

[0056] In another alternative, the control device is neither integrated into a release element nor into a door locking control unit. The control device can be connected to the release element and the door locking control unit via the first bus system. This allows the control device to be located, for example, remotely from the door in a technical room. In this variant, for instance, the control device can be housed in a DIN rail enclosure.

[0057] The safety system can comprise multiple release elements and / or door locking controls. A first number m of release elements and a second number m' of door locking controls can be connected to the first bus system. Here, m and / or m' can correspond to a natural number from 1 to n. The natural number n can be at least two, preferably at least three, and particularly preferably at least four. In one example, n equals four. The first number m can be the same as the second number m' or different from the second number m'.

[0058] It is possible that exactly one control device is provided for the first bus system.

[0059] If several release elements are connected to the first bus system, the control device can be integrated into one of the release elements. The at least one further release element connected to the first bus system is designed without the control device. In this case, the control device can control the indicator device, the display element, the display, the light source, and / or the acoustic alarm of the release element that includes the control device. The at least one further release element can be caused by the control device to control the indicator device, the display element, the display, the light source, and / or the acoustic alarm of the at least one further release element. The control device causes the at least one door locking control unit to control the door locking mechanism.

[0060] Alternatively, the control device can be integrated into one of the door locking controllers if multiple door locking controllers are connected to the first bus system. The at least one additional door locking controller connected to the first bus system is configured without the door locking controller. In this case, the control device can actuate the locking mechanism of the door locking controller that includes the control device. The at least one additional door locking controller can be caused by the control device to actuate its associated locking mechanism.

[0061] In another alternative, the control device is not integrated into any of the release elements connected to the first bus system, nor into any of the door locking controllers connected to the first bus system. Instead, the control device can be connected to all release elements and door locking controllers connected to the first bus system via the first bus system. This allows the control device to be located, for example, remotely from the door in a technical room. In this variant, the control device can, for instance, comprise the DIN rail housing. The control device causes the door locking controllers to activate the door locking mechanism. The control device also causes the release elements, the indicator device, the display element, the indicator light, and / or the audible alarm to activate.

[0062] The control device can be aware of the state of the door lock of the first bus system and / or the state of the release element of the first bus system. The control device can be aware of communication, in particular all communication, between the door lock control and the release element. In particular, the control device is aware of the state of all door locks connected to the first bus system and / or the state of all release elements connected to the first bus system. The control device can be aware of communication, in particular all communication, between the door lock control and the release elements connected to the first bus system. The control device can acquire knowledge about the first bus system.The control device can monitor communication between at least one release element and at least one door lock control unit connected to the first bus system. Additionally or alternatively, the control device can selectively receive messages about the states of the at least one door lock and / or the at least one release element.

[0063] The control device is connected to the central unit via the second bus system, and the control device can send at least one message to the central unit regarding the status of at least one door locking control and / or a release element. In particular, the control device can forward messages from the release element and / or the door locking control to the central unit. For example, the control device can cause the initial time delay to be displayed visually on the central emergency exit control, especially on the central emergency button. Additionally or alternatively, the control device can cause the possibility of relocking the door after activation of a release element and / or after termination of a fire alarm signal by releasing the central emergency exit control to be displayed visually.

[0064] According to the invention, the control device is connected to the central unit via the second bus system, wherein the control device is configured to forward at least one message from the central unit, in particular the central escape route control, to at least one door locking control and / or a release element.

[0065] A safety-relevant message from the central escape route control system is preferentially forwarded by the control device to all bus participants of the first bus system. The control device can thus forward the safety-relevant message to all release elements and all door locking controls. The safety-relevant message could, for example, be a message about the activation of the central emergency button or a message about the activation of a first operating element. The central escape route control system can include the first operating element. The first operating element serves to put the release element into a deactivated state. In the deactivated state, activation of the release element does not trigger the locking mechanism to unlock the door. In the activated state, activation of the release element triggers the locking mechanism to unlock the door.

[0066] The door locking control unit can be configured to determine whether the locking mechanism should be activated to unlock the door after the central emergency button is pressed. Similarly, the release element can be configured to deactivate the release element after the first operating element is pressed. The operator can configure these settings, particularly using the parameterization program. This configuration can be set individually for each door locking control unit or for groups of door locking control units, as well as for each release element or group of release elements. This allows the control device to forward the message from the central emergency exit control unit to all bus participants while still selectively triggering unlocking or deactivation.

[0067] The release mechanism can be deactivated by the central escape route control system. Following activation or deactivation of the release mechanism by the central escape route control system, the control device can forward a message from the central escape route control system to the release mechanism.

[0068] The first bus system can be a different type of bus system than the second bus system. For example, the first bus system can be a CAN bus or a DCW bus. The second bus system can be a LAN or a LON bus.

[0069] The security system can comprise multiple bus systems connected to the second bus system. These multiple bus systems can be configured according to the first bus system type. Each of the multiple bus systems can be connected to at least one release element and at least one door interlock control. Each of the multiple bus systems, in particular each of the multiple bus systems with a release element and a door interlock control, can be connected to a control device. In particular, each of the multiple bus systems, in particular each of the multiple bus systems with a release element and a door interlock control, can be connected to exactly one control device. The control device of each of the multiple bus systems can be connected to the second bus system. The control device of each of the multiple bus systems can send or forward messages about the status of a bus participant of the respective bus system to the central unit.The control device can send or forward messages from the central unit to at least one bus participant. The control device of the respective bus system can perform at least one of the functions h. to v., preferably several of the functions h. to v., and most preferably all of the functions h. to v., for the respective bus system. This allows the information and most functions of the safety system to be bundled at the interface to the second bus system.

[0070] If multiple door locking controllers and / or multiple release elements are connected to the first bus system, the control device connected to the first bus system can selectively notify the multiple door locking controllers and / or multiple release elements. In particular, the control device can selectively control or selectively initiate control. This can include, in particular, the control actions described above. The control device can selectively execute the functions described above. This can include at least one of the functions h), i), k), l), m), o) to s), v). The control device can execute at least one of the functions h), i), k), l), m), o) to s), v).) a locking mechanism, a display device, a display unit, a device connectable to the additional output, a light source and / or an acoustic alarm can be selectively controlled or selective control can be initiated. Selective means that the function is not executed for all components reachable via the first bus system, but only for a selection or for a single component reachable via the bus system.

[0071] The following examples serve as illustrations: If the control device receives, for example, a positive authentication signal from an access control system, the control device only unlocks the door lock assigned to that access control system. If only one door lock of the first bus system is configured to unlock at a specific time, the control device only unlocks that one door lock at the specified time; the other door locks of the first bus system remain locked.If the operator has set a predetermined time interval of a first length for a door lock on the first bus system, and a predetermined time interval of a second length, which differs from the first length, has been set for a second door lock on the first bus system, the control device initiates automatic relocking for the first door lock after the first length of the predetermined time interval, and for the second door lock after the second length of the predetermined time interval. If automatic relocking immediately after the door closes has been set as permitted for one door lock, but not for another door lock, the control device initiates automatic relocking immediately after the door closes only for the first door lock.

[0072] Due to its selectivity, the control device can function as an interlock (function j): The control device can prevent the activation of a further door locking mechanism after the activation of a first door locking mechanism has occurred, until a certain condition is met, thus creating an interlock. For example, a first door can be located at an entrance to a room and a second door at an exit of the same room. The control device can, for example, initiate the unlocking of the first door's lock upon receiving a positive authentication signal for the lock. Even if the control device receives a positive authentication signal for the lock of the second door, it can prevent the unlocking of the second door's lock until a certain condition is met.If the condition is met, the control device initiates the unlocking of the second door's door lock. The door lock of the first door and the door lock of the second door are preferably connected to the first bus system. The condition can be, for example, an airlock time interval or the reaching of a measured value such as room temperature, humidity, air purity, or the number of people in the room. The control device can be connected to, or connectable to, a measuring device for this purpose. The condition can include the closing of the first opened door, which is detectable by the door status monitoring device of the first opened door. The condition and the door locks or door lock controls involved in the airlock can be stored in the control device.

[0073] Until the condition is met, the indicator lights can show that the activation of the second door locking mechanism is prevented. This provides the user with feedback that the unlocking of the second door is not prevented by the absence of a positive authentication signal.

[0074] It is possible that activating a trigger element will only cause some of the door locking controllers connected to the first bus system to actuate the locking mechanism. This portion of the door locking controllers connected to the first bus system may also consist of only one door locking controller. In this case, the trigger elements connected to the first bus system are assigned to the door locking controllers connected to the first bus system. The control device can only actuate the indicator device and / or initiate an actuation (function q.) and / or the display and / or initiate an actuation (function r.) and / or the acoustic alarm device and / or initiate such an actuation (function o.) for those trigger elements that are assigned to the same door locking controller as the actuated trigger element.It is conceivable that the control device stores information about which trigger elements of the first bus system are assigned to which door locking controls of the first bus system.

[0075] It is conceivable that the control device contains parameters and / or assignments for the selective execution of functions. These parameters and / or assignments may, for example, include or indicate which locking mechanism is to be activated according to function h) for which authentication signal, which locking mechanism is to be activated according to function i) at which time, which locking mechanisms are part of an airlock according to function j), which locking mechanism is to be activated after which time interval according to function k), which locking mechanism is permitted to be activated according to function l) for which door is monitored according to function m) and / or which acoustic alarm devices, indicators and / or displays are to be activated when which release element is actuated.The control device can also contain settings specifying which acoustic alarm should be activated for which event, at what volume and / or frequency; which lights should be activated for which event, at what brightness, color, and / or flashing frequency; and / or which condition must be met before the control device unlocks the other door lock of the airlock. Naturally, these parameters can be assigned not to the locking mechanisms themselves, but to the corresponding door locks or door lock controls within the control device. The same applies to the acoustic alarms and the lights.

[0076] To enable selective control or triggering of control, the safety system can have at least one input device. Preferably, the components connected to the first bus system can each comprise an input device. For example, the input device can have switches, in particular DIP switches. The components connected to the first bus system are referred to as bus participants.

[0077] It is conceivable that each bus participant in the first bus system has at least one bus address. The bus address can be manually set at the input device. Bus participants with the same manual setting can be assigned to each other. This makes the safety system particularly easy to configure.

[0078] It is possible that each bus participant modifies the setting in such a way that, despite the same setting, several bus participants generate different bus addresses.

[0079] The manually adjustable bus address is intended primarily for non-safety-related functions. At least one trigger element and at least one door locking control can include the manually adjustable bus address as a second bus address alongside a fixed bus address for safety-related functions.

[0080] The control device can include a digital processing unit. The digital processing unit can include a processor. The digital processing unit can include non-volatile memory. In particular, the digital processing unit can be configured as a microprocessor or a microcontroller. Most preferably, the control device comprises a first digital processing unit, a second digital processing unit, and a third digital processing unit. The first, second, and / or third processing unit can each include a processor. The first and / or second digital processing unit can each include non-volatile memory. The third digital processing unit can include non-volatile memory and / or have access to non-volatile memory.The first, second and / or third processing unit can each be designed as a microprocessor or as a microcontroller.

[0081] It is conceivable that at least one, preferably several, or preferably all functions of the control device are performed by means of the processing unit. In particular, the at least one function can be performed by means of the at least one processing unit. For this purpose, at least one program code can be stored in the processing unit. In particular, the at least one function can be executed by means of the program code. This allows the control device to be designed to be very compact.

[0082] According to the invention, the third processing unit is designed to perform non-safety-relevant functions.

[0083] The first and second processing units are configured to perform safety-related functions. Both the first and second processing units are configured to receive a fire alarm signal. Upon receiving the fire alarm signal, the control device is configured to initiate the unlocking of the door locking mechanism. Preferably, the control device can initiate the unlocking of all door locks connected to the first bus system.

[0084] The central emergency button can comprise a first digital emergency processing unit and a second digital emergency processing unit. The first and second emergency processing units can each include a processor. The first and / or the second emergency processing unit can each be a microprocessor or microcontroller. The first and second emergency processing units can each include non-volatile memory. Additionally, the emergency button electronics unit can include a third digital emergency button processing unit. The third emergency processing unit can include a processor. The third emergency processing unit can be a microprocessor or microcontroller. The third emergency processing unit can include non-volatile memory and / or have access to non-volatile memory.

[0085] For fault monitoring in particular, the central emergency button can repeatedly send a vital sign signal to the first bus system via the control device. Preferably, a vital sign signal from the first emergency processing unit and a vital sign signal from the second emergency processing unit are sent. The control device forwards the vital sign signal to the first bus system. The release element can verify the receipt of the vital sign signal. If at least one or more vital sign signals from the first or second emergency processing unit fail to be received, the release element can activate itself, provided it was previously deactivated.

[0086] It is possible that the release element, the door locking control, and / or processing electronics comprise a receptacle, and that by placing a communication module within this receptacle, the release element, the door locking control, or the processing electronics functions as a control device. Processing electronics refers to a part of the control device that is connected to the door locking control(s) and to the release element(s) of the first bus system only via the first bus system. Thus, only by placing the communication module within the receptacle can the control device perform at least one of the described functions.

[0087] After the communication module is removed, the release element, door locking control, or electronic unit may lose its function as a control device immediately or after a predetermined time interval. Therefore, a communication module must always be present in the housing for the control device to function. Only with the communication module installed does the security system have a permanently functional control device. Preferably, the control device can only perform its intended functions when the communication module is installed in the housing.

[0088] If several bus systems of the first bus system type are provided, then in each bus system of the first bus system type the arrangement of a communication module is necessary in order to create a control device.

[0089] The invention is explained in more detail below with reference to exemplary embodiments. Technical features with the same function are indicated in the figures by identical reference numerals. The figures show: Fig. 1 shows a top view of a safety system according to the invention with an emergency button as a release element in an operational state on a door according to a first embodiment, Fig. 2 shows a functional diagram of the safety system according to the invention. Figure 1 , Fig. 3ein to Fig. 2 Modified functional diagram of a safety system according to the invention according to a second embodiment, Fig. 4; a top view of a safety system according to the invention with several emergency buttons in an operational state on a door according to a third embodiment, Fig. 5; a functional diagram of the safety system according to the invention. Figure 4 , Fig. 6ein to Fig. 5Modified functional diagram of a safety system according to the invention according to a fourth embodiment, Fig. 7; a top view of a safety system according to the invention in an operational state according to a fifth embodiment, Fig. 8; a functional diagram of a central escape route control of the safety system. Figure 7 , Fig. 9 a functional diagram of the safety system from Figure 7 , Fig. 10 a functional diagram of a safety system according to the invention in accordance with a sixth embodiment, Fig. 11 An embodiment of an emergency button according to the invention in a side view, Fig. 12 of the emergency button made of Figure 11 in a longitudinal section, Fig. 13 the emergency button made of Figure 11 In an exploded view, Fig. 14, an actuating element of the emergency button is shown. Figure 11 in a perspective view, Fig. 15 another perspective view of the actuating element from Figure 14, Fig. 16 a light guide of the emergency button made of Figure 11 in a perspective view, Fig. 17 another perspective view of the light guide made of Figure 16 and Fig. 18a-your schematic representation of a sequence of a function release in a safety system according to the invention.

[0090] The following distinguishes between a user and an operator. A user can be any person who uses security system 1. For example, a user could be a guest who wants to escape through the door secured by security system 1. An operator is responsible for operating security system 1. The operator can, for example, authenticate themselves to the security system. The operator could, for example, be a member of security personnel. Ideally, the operator can configure security system 1.

[0091] In the following, the term "activation of the emergency button" is understood to mean "activation of the actuating element of the emergency button".

[0092] In the following, a connection to a bus system is understood to mean a direct connection, such that a component connected to the bus system is to be regarded as a participant of the bus system with its own bus address.

[0093] Initiating a control action refers specifically to sending a message via a first and / or second bus system containing information and / or a command that prompts the direct or indirect recipient of the message to perform the control action. The sender of the message initiates the control action. Thus, initiating a control action is understood as indirect control. The message can, in particular, correspond to a bus telegram.

[0094] As a consequence of an activity means that an activity is the cause, regardless of whether the activity continues or not.

[0095] In the Figure 1 and 2 A first embodiment of a safety system 1 according to the invention for a door 2 is shown. The door 2 is not part of the safety system 1 according to the invention. The safety system 1 according to the invention comprises a door lock 200 and an emergency button 10. The emergency button 10 comprises a control device 100. A key switch 500 is associated with the emergency button 10. The safety system 1 can include the key switch 500. Alternatively, the safety system 1, in particular the emergency button 10, can have a key switch input via which a connection to the key switch 500 can be established.

[0096] As in Figure 2As shown, the emergency button 10 and the door lock 200 are connected to each other via a first bus system 400. The key switch 500 is electrically connected, or connectable, to the emergency button 10 via a connection 402. The connection 402 is shown as a dashed arrow to indicate that signals about the position of a key inserted into the key switch 500 are fed to an electronic unit 24 of the emergency button 10. Alternatively, the key switch 500 can also be connected to the first bus system 400 (not shown). This alternative applies to all embodiments.

[0097] The emergency button 10 is designed to send a message via the first bus system 400 to the door lock 200 following activation of the emergency button 10, thereby triggering the unlocking of the door lock. The message following activation of the emergency button 10 can be delayed.

[0098] The safety system 1 according to the invention, in particular the emergency button 10, can also be connected to a fire detector (not shown). In the event of a fire alarm signal, the safety system 1 also triggers the unlocking of the door lock 200.

[0099] The control device 100 performs non-safety-related functions: For example, the control device 100 can initiate the unlocking of the door lock 200 for authorized persons. For this purpose, the control device 100 can be connected to an access control system (not shown). The access control system can, in particular, be connected or connectable to the first bus system 400. The control device 100 receives a positive authentication signal from the access control system, in particular via the bus system 400, confirming successful authentication. The control device 100 then initiates the unlocking of the door lock 200. The access control system can, for example, include or be configured with a reader, a key switch, a keypad for entering a code, or a locking cylinder of a mechanical lock, in particular a self-locking panic lock.

[0100] The control device 100 can also automatically initiate the unlocking of the door lock 200 at a predetermined time or after a predetermined period of time, e.g. if the door is to be unlocked within a time window per day.

[0101] If no emergency situation exists, i.e., neither the emergency button 10 has been pressed nor is there a fire alarm signal, the control device 100 can automatically initiate relocking after a predetermined time period. In addition to the positive authentication signal, the control device 100 can also receive an access signal from the access control system and / or measure the duration of the positive authentication signal. Based on the access signal or the duration of the authentication signal, the control device 100 can adjust the duration of the predetermined time period. For example, a person might hold an ID card in front of the reader for an extended period or turn the key for a long time. This signals that the predetermined time period should correspond to a previously stored, longer duration in the control device 100.If the person holds the ID card briefly in front of the reader or the user briefly turns the key, it is signaled that the predetermined time period should correspond to a short time period previously stored in the control device 100.

[0102] A first door status monitoring device 204 and a second door status monitoring device 206 detect whether door 2 is open or closed. The control device 100 receives a signal from the door status monitoring devices 204 and 206, at least indirectly. If the door lock 200 has been unlocked due to a positive authentication signal, the control device 100 can initiate a relocking of the door lock 200 immediately and automatically as soon as the control device 100 receives information from the door status monitoring devices 204 and 206 that the door was initially open and is now closed again.

[0103] The emergency button 10 includes an acoustic alarm 23 and a light source 41 (see also Figure 13 The light sources 41 serve to indicate the locking or unlocking status of the door lock 200 and thus function as a display device. The light sources 41 also serve to visually indicate a time-delayed unlocking of the door lock 200 following activation of the emergency button 10 and thus function as a display device. Furthermore, the light sources 41 serve to visually indicate an alarm status after receiving the fire alarm signal or following activation of the emergency button 10 and thus function as a display. Finally, the light sources 41 provide a visual indication if a previously described relocking attempt fails.

[0104] The control device 100 activates the acoustic alarm 23 to emit an audible alarm when a hazard occurs, i.e., when a fire alarm signal is received or the emergency button 10 is pressed. The control device 100 also activates the acoustic alarm 23 to emit an audible alarm if relocking fails.

[0105] The control device 100 controls the light sources 41 to indicate the locking or unlocking state of the door lock 200, to visually indicate a time-delayed unlocking and / or to issue a visual alarm when a fire alarm signal is received or the emergency button 10 is pressed or when relocking fails.

[0106] The control device 100 can monitor the opening of the door using the door status monitoring devices 204 and 206 when the door lock 200 is unlocked. If desired, the control device 100 can emit an audible alarm if the door 2 is opened while the door lock 200 is unlocked, at least if no positive authentication signal is present. This allows monitoring to detect when someone opens the door, even when it is unlocked.

[0107] The emergency button 10 can include at least one additional output. The control device 100 can use the output to control further components that can be connected to the safety system 1 according to the invention, e.g. a room light.

[0108] The control device 100 contains the parameters for executing the aforementioned functions. These parameters include, for example, the preset time(s), the predetermined time interval(s), parameters for the acoustic alarms (e.g., the volume and frequency of the acoustic alarm), and parameters for the various control functions of the light sources 41 for the visual representation of the various states of the security system 1 mentioned above. The parameters for the light sources can include flashing frequencies, emitted colors, color intensities, and / or light patterns. For parameterization, the control device 100 can communicate with a mobile communication device via a radio module 64. Alternatively, parameterization can be performed using a monitoring device 301 via a second bus system 401 (see...). Figures 9 and 10A parameterization program must be provided for setting the parameters. This program can be executed on a communication device, such as a personal computer, mobile phone, and / or tablet. The operator can adjust the parameters using this parameterization program.

[0109] In Figure 2 The construction of the door lock 200 and the emergency button 10 is shown in more detail.

[0110] The emergency button 10 comprises a first emergency button processing unit 20, a second emergency button processing unit 21, and a third emergency button processing unit 22. The first, second, and third emergency button processing units 20, 21, 22 are each implemented as microprocessors or microcontrollers. The first and second emergency button processing units 20, 21 include non-volatile memory. The third emergency button processing unit 22 includes non-volatile memory and / or has access to non-volatile memory. The first, second, and third emergency button processing units 20, 21, 22 are collectively referred to as the electronics unit 24 of the emergency button 10.

[0111] The electronic unit 24 also serves as a control device 100. The first emergency button processing unit 20 serves as the first processing unit 103 of the control device 100. The second emergency button processing unit 21 serves as the second processing unit 104 of the control device 100. The third emergency button processing unit 22 serves as the third processing unit 105 of the control device 100.

[0112] The first and second emergency button processing units 20 and 21 are used to execute the safety-related functions of the emergency button. The third emergency button processing unit 22, or processing unit 105, is used to execute the non-safety-related functions. The safety-related functions include initiating the unlocking in case of danger. The non-safety-related functions include the other functions listed above.

[0113] When the emergency button 10 is pressed, an actuating element 11 is moved from a starting position 11.I to an actuating position 11.II, thereby actuating a switch 63 (see also Figure 12 , 13 This generates a first and a second actuation signal. This opens a first and a second circuit (not shown). A signal indicating the opening of the first circuit is detected by the first emergency button processing unit 20. A signal indicating the opening of the second circuit is detected by the second emergency button processing unit 21. The actuation signal is understood to be the signal generated by the user by actuating the actuator to unlock the door and clear the escape route. The expression "as a result of actuating the emergency button 10" is used specifically to mean "after the actuation signal has been generated," i.e., regardless of whether the actuator11 is still in the operating position 11.II or has already returned to the starting position 11.I.

[0114] The first emergency button processing unit 20 and the second emergency button processing unit 21 each independently initiate the unlocking of the door lock 200 after detecting the actuation signal via the first bus system 400. The second emergency button processing unit 21 thus acts redundantly to the first emergency button processing unit 20.

[0115] The door lock 200 comprises a door lock control unit 201. The door lock control unit 201 comprises a first processing unit 202 and a second processing unit 203. The first and second processing units 202, 203 are collectively referred to as an electronic device 207. The first and second processing units 202, 203 are each configured as a microprocessor or microcontroller. The first and second processing units 202, 203 can each control a locking mechanism 205 of the door lock 200 for unlocking. In the event of danger, i.e., as a result of the activation of the emergency button 10 or after receiving a fire alarm signal, both the first processing unit 202 and the second processing unit 203 control the locking mechanism 205 for unlocking. The second processing unit 203 is thus redundant to the first processing unit 202. This design achieves single-fault safety.

[0116] The locking mechanism 205 is electromechanical. The locking mechanism 205 includes, for example, an electromechanically actuated latch element (not shown) that locks a door latch of the door 2 when the door lock 200 is locked and releases it when the door lock 200 is unlocked. When the locking mechanism 205 is activated to lock, the first and second processing elements 202, 203 switch on an electrical current for the locking mechanism 205. When the locking mechanism 205 is activated to unlock, the first and second processing elements 202, 203 switch off the electrical current for the locking mechanism 205. Each processing element 202, 203 has its own switch for this purpose. Opening only one of the switches switches off the current for the locking mechanism 205.

[0117] The door locking control unit 201 receives feedback on the state of the locking mechanism 205 via a locking mechanism status monitoring device (not shown). Specifically, the position of an armature of a coil within the locking mechanism 205 is monitored. If the state of the door locking mechanism 205 does not correspond to the target state, an alarm is triggered. Additionally or alternatively, another attempt can be made to achieve the target state.

[0118] Following activation of the emergency button 10, the first and second emergency button processing units 20, 21 communicate with the first and second processing units 202, 203 via the first bus system 400 using a message. The message can contain information about the activation or a control command for unlocking. The first emergency button processing unit 20 informs the first processing unit 202, and the second emergency button processing unit 21 informs the second processing unit 203. Through this message, the first and second emergency button processing units 20, 21 cause both the first and second processing units 202, 203 to activate the locking mechanism 205 for unlocking, i.e., to switch off the electrical current.

[0119] The presence of a fire alarm signal is detected by the first and second emergency button processing units 20 and 21. Subsequently, the first and second emergency button processing units 20 and 21 send a message to the first and second processing units 202 and 203, respectively, instructing the door locking control unit 201 to activate the locking mechanism 205 for unlocking. The first emergency button processing unit 20 informs the first processing unit 202, and the second emergency button processing unit 21 informs the second processing unit 203. This message then causes both the first and second processing units 202 and 203 to activate the locking mechanism 205 for unlocking, thus switching off the electrical current.

[0120] The activation of the emergency button 10 or the presence of a fire alarm signal can be transmitted in a message by one of the two emergency button processing units 20, 21, with the first emergency button processing unit 20 writing the first part of the message and the second emergency button processing unit 21 writing the second part. The first and second processing units 202, 203 are each responsible for at least one part of the message. The emergency button processing units 20, 21, 22 and the first and second processing units 202, 203 can each receive messages via the first bus system 400. The electronic unit 24 and the door locking control 201 can each be assigned a bus address.

[0121] The first and second emergency button processing units 20, 21 monitor each other. If a fault is detected, the electronic unit 24, in particular the functioning emergency button processing unit 20, 21, causes the first and second processing units 202, 203 to activate the door locking mechanism 205 for unlocking. The first and second processing units 202, 203 monitor each other. If a fault is detected, at least the functioning processing unit 202, 203 activates the locking mechanism 205 for unlocking. Likewise, in the event of a fault in the bus system 400, the door locking control unit 201 activates the locking mechanism 205 for unlocking. For this purpose and to check the first and second emergency button processing units 20, 21, a vital sign signal from the first and second emergency button processing units 20, 21 is regularly sent to the door locking control unit 201.If the vital sign signal is absent, the first and second processing units 202, 203 activate the locking mechanism 205 to unlock the door. The first and second processing units 202, 203 communicate with each other when the door locking control 201 receives a message about the activation of the emergency button 10 and / or the presence of a fire alarm signal. If only the first processing unit 202 or the second processing unit 203 detects that the emergency button 10 has been activated or that a fire alarm signal is present, the detecting processing unit 202, 203 activates the door locking mechanism 205 to unlock the door and initiates the other processing unit 202, 203 to also activate the door locking mechanism 205 to unlock the door. A fault and a malfunction always involve a failure of the respective component.In the event of a power failure, the locking mechanism 205 automatically returns to the unlocked state. During the processes described in this section, the safety system 1 also issues an audible and / or visual alarm, in particular by means of the control device 100.

[0122] Once the actuation signal has been generated, the door lock 200 is electronically prevented from being moved into the locked position without a release condition being present. This prevents the door from being locked while a hazardous condition persists. An electronic hold-open device is integrated into the electronic device 207 for this purpose. The electronic hold-open device is activated by the actuation of the actuating element. 11, The mechanism used to release the escape route is switched to an actuated state. In this actuated state, the activation of the door lock 200 for locking is prevented.

[0123] The electronic locking mechanism comprises an initial program code. This initial program code includes, or has access to, a first variable. In the initial state of the electronic locking mechanism, the first variable is set to an initial value. In the activation state, the first variable is set to an activation value that prevents the door lock 200 from being activated. The first variable can be binary. When the release condition is met, the electronic locking mechanism returns to an initial state. For this purpose, the value of the first variable is set to the initial value. In the initial state of the electronic locking mechanism, activation of the door lock 200 is permitted.The first program code captures the first value of the first variable and allows the door lock 200 to lock if the value of the first variable corresponds to the initial value, and prevents the door lock 200 from locking if the value of the first variable corresponds to the actuation value.

[0124] The electronic record is stored in both the first processing unit 202 and redundantly in the second processing unit 203. The first program code is stored in the first processing unit 202. The first variable is stored in the non-volatile memory of the first processing unit 202. A second program code with the same functionality as the first program code is stored in the second processing unit 203. The first variable is redundantly stored in the non-volatile memory of the second processing unit 203.

[0125] The first variable is additionally stored in the non-volatile memory of both the first emergency button processing unit 20 and the second emergency button processing unit 21. Upon activation of the emergency button 10, the first variable is converted from its initial value to its activation value in both the first and second emergency button processing units 20 and 21. The changed value of the first variable is transmitted to the electronic device 207 via the bus system 400. Until a reset condition is met, the emergency button 10 repeatedly sends the activation value of the first variable to the electronic device 207. This transmission can occur at regular intervals, particularly in conjunction with the vital sign signal.

[0126] At least if at least one of the door status monitoring devices 204, 206 has detected that the door 2 was opened after the emergency button 10 was pressed, then a cancellation action at the emergency button 10 is necessary to achieve the cancellation condition.

[0127] The actuating element 11 is designed without latching. When actuated, the actuating element 11 moves from the initial position 11.I to the actuating position 11.II (see figure). Figure 11 ). Immediately after actuation, the actuating element 11 moves back to its initial position 11.I by the force of a spring-shaped restoring element 12 (see. Figure 12 , 13 The actuation of the actuating element 11 is translational.

[0128] The release action at the emergency button 10 is performed by actuating the actuator 11. This generates a release signal that corresponds to the actuation signal. In order for the control device 100 to recognize whether actuating the emergency button 10 serves to unlock the door lock 200 or whether a release action is taking place, another signal must be generated simultaneously to meet the release condition. For this purpose, an operator authenticates themselves. Authentication is carried out by inserting and turning a key in the key switch 500. The actuation of the actuator 11 and the authentication must overlap in time. That is, the operator must hold the key in the turned position while the actuator 11 is in the actuation position 11.II. The actuator 11 must return to the initial position 11.I while the key is still in the turned position.The sequence of actions is sufficient to meet the condition for cancellation.

[0129] If the door status monitoring devices 204, 206 have detected that door 2 has remained closed continuously as a result of the activation of the emergency button 10, the release condition can be reached in at least one further way, namely by the elapse of a predetermined time interval. For example, the release condition can be reached 60 seconds after the last generation of the activation signal, provided that door 2 has remained closed. In this case, authentication at the key switch 500 and a release action at the emergency button 10 are not necessary.

[0130] The first and second door status monitoring devices 204, 206 are designed to detect with one-fault reliability that door 2 has remained closed following activation of the emergency button 10. For this purpose, the door status monitoring devices 204, 206 are preferably configured differently. The first door status monitoring device 204 can, for example, be configured as a door contact. The second door status monitoring device 206 can, for example, be configured as a latch contact. Alternatively, at least one of the door status monitoring devices can, for example, monitor the status of door 2 magnetically, e.g., as a reed switch. The door locking control 201 receives a signal from both the first and the second door status monitoring devices 204, 206 indicating whether door 2 is open or closed.Only if no signal indicating that the door has been opened has been sent by either the first door status monitoring device 204 or the second door status monitoring device 206 during the predetermined time interval, can the cancellation condition be achieved by the expiry of the predetermined time interval.

[0131] The door locking control unit 201 contains a timer to measure the predetermined time interval. The door locking control unit 201 starts the timer after the emergency button 10 is pressed. If, during the predetermined time interval, the door locking control unit 201 receives a signal from the first or second door status monitoring device 204, 206 that the door has been opened, the emergency button 10 must be pressed to release the lock. In this case, the elapsed time interval alone is insufficient. The length of the predetermined time interval is stored in the door locking control unit 201.

[0132] The door locking control 201 checks whether reaching the release condition by elapsed within the predetermined time interval is permissible before the door locking control 201 activates the locking mechanism 205 to lock. Thus, during the commissioning of safety system 1, i.e., before the safety system 1 begins operating, an operator can specify whether elapsed within the predetermined time interval without opening door 2 is permissible as a release condition, thereby leading to door 2 relocking. This setting can be entered in the emergency button 10. A check of the permissibility, elapsed within the predetermined time interval, and the absence of a signal from the first and second door status monitoring devices 204, 206 indicating that door 2 has been opened are sufficient for the release condition to be met.

[0133] The door locking control 201 communicates the open or closed state of the door via the bus 400 to the emergency button 10 and / or to the control device 100.

[0134] Electronic unit 24 includes a timer. An initial delay duration can be stored in electronic unit 24. If the unlocking of the door lock 200 is to be delayed, electronic unit 24 waits for the initial delay duration after the activation signal is generated before the first and second emergency button processing units 20, 21 communicate with the door lock control unit 201 via the first bus system 400 to initiate unlocking.

[0135] The third processing unit 105 causes the following Figure 1 and 2The described non-safety-related unlocking and locking operations of the door lock 200, e.g., unlocking after receiving the authentication signal, at a predetermined time or after a predetermined duration, or locking after a predetermined time period or immediately after the door 2 is closed. For this purpose, the third processing unit 105 communicates with the door lock control 201 via the first bus system 400. The communication can, for example, contain information or a control command that causes the door lock control 201 to activate the locking mechanism to unlock or lock. If the control device 100 is connected to the second bus system (see... Fig. 7 ), the third processing unit 105 serves to forward messages to and / or from a central escape route control 300.

[0136] The third emergency button processing unit 22 controls the acoustic alarm device 23 and the light sources 41.

[0137] If at least one of the processing means 202, 203 indicates that the locking mechanism 205 has entered the unlocked state, the processing means 202, 203 sends a corresponding signal via bus 400 to the electronic unit 24. The electronic device 207 is connected or connectable to the door status monitoring devices 204, 206 and receives signals about the open or closed state of the door from the door status monitoring devices 204, 206.

[0138] The aforementioned functions, performed by the control device 100, the door locking control 2021, and / or the emergency button 10, can be executed using software modules. Program codes are stored in the electronic device 207 and / or the electronic unit 24, which enable the functions to be executed.

[0139] Figure 3 represents a variant of the one in the Figure 1 and 2 The illustrated safety system 1 is shown. Here, the control device 100 is designed separately from the emergency button 10 and the door lock 200. The control device 100 can, for example, be arranged in a DIN rail housing (not shown). The control device 100 is not integrated into an emergency button 10 or a door lock 200. For example, the control device 100 can be designed for installation in a technical room. The first bus system 400 connects the control device 100, the door lock 200, and the emergency button 10. As in the first embodiment, the key switch 500 is electrically connected or connectable to the emergency button 10 via a connection 402.

[0140] Unless otherwise described, the structure and function correspond to the first embodiment, with the functions belonging to the Figure 1and 2 described with the aid of the control device 100 or the processing units 103, 104, 105, from the control device 100 of the Figure 3 to be executed and the functions that belong to the Figure 1 and 2The following actions are performed by the emergency button 10 or the emergency button processing units 20, 21, 22: In particular, the first and second emergency button processing units 20, 21 detect the actuation signal, communicate with the first and second processing units 202, 203 via the first bus system 400 as a result of actuation of the emergency button 10, and thus trigger the door locking control unit 201 to actuate the locking mechanism 205. The measures to achieve single-fault safety or redundancy are carried out by the first and second emergency button processing units 20, 21. The first variable is stored in the first and second emergency button processing units 20, 21 and is transmitted from there to the door locking control unit 201. The emergency button 10 includes the timer for determining the first delay time.The control device 100 is connected or connectable to the second bus system 401. The third processing unit 105 initiates the following. Figure 1 and 2 described non-safety-relevant unlocking and locking of the door lock 200, e.g. unlocking after receiving the authentication signal, at a predetermined time or after the expiry of a predetermined time period or automatic relocking after the expiry of a predetermined time period or immediately after the door has been closed 2.

[0141] The first, second, and third processing units 103, 104, 105 are each configured as a microprocessor or microcontroller. Together, these three processing units form a processing electronics unit 101. The first and second processing units 103 and 104 have non-volatile memory. The third processing unit 105 includes non-volatile memory and / or has access to non-volatile memory.

[0142] A fire alarm signal can be received by either the control device 100 or the emergency button 10. The presence of a fire alarm signal is detected by the first and second emergency button processing units 20, 21 for the emergency button 10, or by the first and second processing units 103, 104 for the control device 100. Accordingly, both the control device 100, using the first and second processing units 103, 104, and the emergency button 10, using the first and second emergency button processing units 20, 21, can initiate the unlocking of the door lock 200. This is accomplished through communication via the first bus system 400 with the door lock control unit 201.

[0143] The control device 100 is informed via the first bus system 400 when the emergency button 10 triggers the unlocking of the door lock 200, i.e., as a result of the emergency button 10 being activated or after receiving a fire alarm signal. The control device 100 is also informed of a time-delayed unlocking of the door lock 200 following the activation of the emergency button 10. The control device 100 is informed of the locked and unlocked status of the door lock 200. The control device 100 is informed of the open or closed status of the door 2.

[0144] The control device 100 initiates the activation of the alarm transmitter 23 and the light sources 41 for the Figure 1 and 2The described acoustic alarms and visual displays. For this purpose, the control device 100 can communicate with the electronic unit 24, in particular with the third emergency button processing unit 22, via the first bus system 400. The third emergency button processing unit 22 then controls the alarm device 23 or the light source 41. The parameters for the alarm device 23 and the light source 41 are stored in the control device 100.

[0145] In the exemplary embodiments of the Figures 1 to 3 The door locking mechanism 200 includes the door status monitoring devices 204, 206. Alternatively, and not shown, the door status monitoring devices 204, 206 can be connected to the first bus system 400 or directly to the emergency button 10 and / or the control device 100.

[0146] In the exemplary embodiments of the Figures 1 to 3At least one further emergency button (not shown) can be connected to the first bus system 400, which is designed without the control device 100. This further emergency button is like the emergency button 10 in Figure 3 It is designed and, when activated, can trigger the unlocking of door lock 200. The other emergency button corresponds in construction and function to emergency button 10 of the Figure 3 .

[0147] In the exemplary embodiments of the Figures 1 to 3 At least one further door lock (not shown) can be connected to the first bus system 400. This further door lock is like door lock 200 in Figure 2 or 3 It is designed and can also be unlocked by pressing the emergency button 10. The further door locking mechanism corresponds in design and functionality to the door locks 200. Figures 1 to 3 .

[0148] In Figure 4Figure 1 shows a third embodiment of a safety system 1 according to the invention, comprising several emergency buttons 10, 1010, 2010, 3010. The safety system 1 includes several door locks 200, 1200, 2200, 3200. Each emergency button 10, 1010, 2010, 3010 is associated with a key switch 500, 1500, 2500, 3500. The safety system 1 serves to arrange the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 on various doors 2, 2002, 3002. The doors 2, 2002, 3002 are not part of the safety system 1 according to the invention. The multiple emergency buttons 10, 1010, 2010, 3010 are connected to the first bus system 400 and thus correspond to a number of emergency buttons 10, 1010, 2010, 3010. The door locks 200, 1200, 2200, 3200 are connected to the first bus system 400 and thus correspond to a number of door locks 200, 1200, 2200, 3200.

[0149] In the example of the Figure 4Emergency release buttons 10 and 1010 are assigned to door locks 200 and 1200, respectively. Emergency release button 2010 is assigned to door lock 2200, and emergency release button 3010 is assigned to door lock 3200. Therefore, pressing one of the emergency release buttons 10 or 1010 unlocks both door locks 200 and 1200, but not door locks 2200 and 3200. Pressing emergency release button 2010 unlocks only door lock 2200. Similarly, pressing emergency release button 3010 unlocks only door lock 3200. Thus, in this embodiment, door locks 200, 1200, 2200, and 3200 are unlocked selectively.

[0150] For example, emergency buttons 10 and 1010 can be installed on a double-leaf door 2. One door lock 200 and one door lock 1200 are to be installed on each of the door leaves 3 and 4 of door 2. Emergency button 2010 and door lock 2200 are to be installed on another door 2002. Emergency button 3020 and door lock 3200 are to be installed on a door 3002, as shown in Figure 4 depicted.

[0151] The security system 1 out Figure 4 can also be used for by Figure 4 Different selective release mechanisms may be adjustable. In the case of a Figure 4With the alternative setting shown, pressing one of the emergency buttons 10, 1010, 2010, or 3010 will unlock only a single assigned door lock 200, 1200, 2200, or 3200. Thus, each emergency button 10, 1010, 2010, or 3010 is assigned only one door lock 200, 1200, 2200, or 3200. In particular, a security system 1 configured in this way is suitable for four single-leaf doors, each with one door lock 200, 1200, 2200, or 3200.

[0152] In another exemplary setting of the safety system 1 (not shown), pressing one of the emergency buttons 10, 1010 unlocks only the two door locks 200, 1200, and pressing one of the emergency buttons 2010, 3010 unlocks only the other two door locks 2200, 3200. Thus, the emergency buttons 10, 1010 are assigned to the door locks 200, 1200, and the emergency buttons 2010, 3010 are assigned to the door locks 2200, 3200. In particular, the safety system 1 configured in this way is suitable for two double-leaf doors, each with one door lock 200, 1200, 2200, 3200 per door leaf.

[0153] The security system 1 can also be set so that when an emergency button 10, 1010, 2010, 3010 is activated, all door locks 200, 1200, 2200, 3200 are unlocked.

[0154] In contrast to security system 1, which is in Figure 4As shown, a safety system 1 according to the invention can comprise a number of emergency buttons 10, 1010, 2010, 3010, which does not correspond to the number of door locks 200, 1200, 2200, 3200. For example, in Figure 4 The door 2 must be single-leaf and one of the emergency buttons 10, 1010 or one of the door locks 200, 1200 must be missing.

[0155] In Figure 5 The figure shows that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 are interconnected via the first bus system 400. Each emergency button 10, 1010, 2010, 3010 is electrically connected, or connectable, to a key switch 500, 1500, 2500, 3500 assigned to the respective emergency button 10, 1010, 2010, 3010 via a connection 402, 1402, 2402, or 3402, respectively. Alternatively, the key switches 500, 1500, 2500, 3500 are connected to the first bus system 400 (not shown). In the embodiment of the Figures 4 and 5The control device 100 is integrated into one of the emergency buttons 10, 1010, 2010, 3010, e.g., emergency button 10. The first bus system 400 is connected to only a single control device 100. Unless otherwise described below, the structure and functions of the door locks 200, 1200, 2200, 3200 correspond to the structure and functions of the door lock 200 of the Figures 2 and 3 , the structure and functions of the emergency button 10 the structure and functions of the emergency button 10 the Figure 2 and the structure and functions of the emergency buttons 1010, 2010, 3010, the structure and functions of the emergency button 10 of the Figure 3 The reference symbols from the Figures 2 and 3are used. It is understood that the door locks 200, 1200, 2200, 3200 each comprise their own door locking mechanism, processing elements, etc., and the emergency buttons 10, 1010, 2010, 3010 each comprise their own emergency button processing units, alarm devices, light sources, switches and operating elements.

[0156] To assign emergency buttons 10, 1010, 2010, and 3010 to door locks 200, 1200, 2200, and 3200, the emergency buttons 10, 1010, 2010, and 3010 are assigned to the door locks 200, 1200, 2200, and 3200 during the commissioning of safety system 1, i.e., before safety system 1 starts operating. For this purpose, one of the door locks 200, 1200, 2200, and 3200 is put into assignment mode. Then, a deliberate action is performed on the emergency buttons 10, 1010, 2010, and 3010. This deliberate action can be described as pressing the operating element. 11of the respective emergency button 10, 1010, 2010, 3010. After all emergency buttons 10, 1010, 2010, 3010 that are to be assigned to the door lock 200, 1200, 2200, 3200 that is in the assignment mode have been actuated, the assignment mode of the door lock 200, 1200, 2200, 3200 is terminated. In the exemplary embodiment of the Figure 4For example, door lock 200 is first put into assignment mode, and then emergency buttons 10 and 1010 are activated, thus assigning them to door lock 200. The assignment mode for door lock 200 is then terminated. Next, door lock 1200 is put into assignment mode, and then emergency buttons 10 and 1010 are activated, thus assigning them to door lock 1200. The assignment mode for door lock 1200 is then terminated. Finally, door lock 2200 is put into assignment mode, and then emergency button 2010 is activated, thus assigning emergency button 2010 to door lock 2200. The assignment mode for door lock 2200 is now complete. The same procedure can then be followed for door lock 3200 and emergency button 3010.

[0157] The assignment process stores in the respective door locks 200, 1200, 2200, 3200, and in particular in the respective door lock controllers 201, which emergency button 10, 1010, 2010, 3010 is assigned to the respective door lock 200, 1200, 2200, 3200. This assignment process stores the assignment of the emergency buttons 10, 1010, 2010, 3010 to the door locks 200, 1200, 2200, 3200 for all emergency buttons 10, 1010, 2010, 3010 and all door locks 200, 1200, 2200, 3200 of the first bus system 400 in the control device 100. For the assignment, a bus address, in particular an unchangeable bus address, is stored for each of the respective emergency buttons 10, 1010, 2010, 3010.

[0158] The assignment in the respective door locks 200, 1200, 2200, 3200 is stored in the first digital processing device 202 and redundantly in the second digital processing device 203, in particular in the non-volatile memories of the processing devices 202, 203.

[0159] For example, if emergency button 10 is pressed, it communicates with all door locks 200, 1200, 2200, and 3200 of the first bus system 400. The door locks 200, 1200, 2200, and 3200 each check their stored data to determine whether they have been assigned to the pressed emergency button 10. Only if an assignment is confirmed do the assigned door locks 200 and 1200 then control the respective door locking mechanism 205.

[0160] In the event of a fire alarm signal, the door locks 200, 1200, 2200, 3200, which are assigned to the emergency buttons 10, 1010, 2010, 3010 receiving the fire alarm signal, are unlocked.

[0161] If a door lock 200, 1200, 2200, 3200 is to be unlocked after a time delay following the activation of an associated emergency button 10, 1010, 2010, 3010, then an initial delay duration is stored in that emergency button 10, 1010, 2010, 3010. This initial delay duration is stored during the commissioning of the safety system 1 by the parameterization program. A different initial delay duration can be stored for each emergency button 10, 1010, 2010, 3010 by the operator. For example, an initial delay duration stored in emergency button 10 differs from the initial delay duration stored in emergency button 2010. The emergency buttons 1010 and 3010 should trigger the unlocking of the associated door locks 2200 and 3200 respectively without any time delay, so that no initial delay duration or an initial delay duration of 0 s is stored in the emergency buttons 1010 and 3010.Alternatively, the safety system 1 can be configured such that the emergency buttons 10, 1010, 2010, 3010, which are assigned to the same door lock 200, 1200, 2200, 3200, always have the same initial delay time stored. For this purpose, the parameterization program allows the operator only one common setting.

[0162] The control device 100 performs the non-safety-related functions for unlocking and locking all door locks 200, 1200, 2200, 3200, as previously described. Figure 1 and 2As described, the control device 100 can selectively communicate with the door locks 200, 1200, 2200, and 3200. The control device 100 stores information about which door lock (200, 1200, 2200, and 3200) is assigned to which access control system. Therefore, upon receiving a positive authentication signal from an access control system, only the assigned door lock(s) (200, 1200, 2200, and 3200) will be unlocked. The control device 100 also stores information about whether and when, and if so, which door lock (200, 1200, 2200, and 3200) should be unlocked at a predetermined time. The control device 100 can also contain information about which door lock 200, 1200, 2200, 3200 should be relocked after which specified time period or periods.The control device 100 also specifies whether, and if so, which door locks 200, 1200, 2200, 3200 should be relocked immediately after door 2, 2002, 3002 is closed. The control device 100 can also specify whether, and if so, for which door lock 200, 1200, 2200, 3200, an audible alarm should be triggered if the unlocked door 2, 2002, 3002 is opened without a positive authentication signal. The control device 100 can also specify whether an audible alarm should be triggered if door 2, 2002, 2003 is not closed again. The settings can be configured differently for each door lock (200, 1200, 2200, 3200) or for groups of door locks (200, 1200, 2200, 3200) to be installed on a door (2, 2002, 3002). The settings are configured by the operator using the parameterization program during commissioning.

[0163] The control device 100 causes an acoustic and visual alarm to be triggered by the activation of an emergency button 10, 1010, 2010, 3010, also in at least one further emergency button 10, 1010, 2010, 3010, which is assigned to the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. In the exemplary embodiment of the Figures 4 and 5 For example, if the emergency button 10 is activated, the control device 100, through communication with the electronic unit 24 of the emergency button 1010, causes the acoustic alarm device 23 and the light source 41 of the emergency button 1010 to also issue an acoustic or optical alarm.

[0164] If, after activation of an emergency button 10, 1010, 2010, 3010, an unlocking action is initiated after a time delay, the control device 100 ensures that the initial delay duration for the unlocking action is also displayed in at least one further emergency button 10, 1010, 2010, 3010, which is assigned to the same door lock 200, 1200, 2200, 3200 as the activated emergency button 10, 1010, 2010, 3010. For this purpose, the control device 100 communicates with the electronic unit 24 of the at least one further emergency button 1010, 2010, 3010 or controls the light source 41 of the emergency button 10, in which the control device 100 is integrated.

[0165] The control device 100 can perform non-safety-related assignments for selective communication, e.g., assigning an access control system to a door lock 200, 1200, 2200, or 3200, based on a bus address. Each participant in the first bus system 400 has a setting device for manually configuring a bus address. This setting device may include DIP switches. At least those participants in the first bus system 400 with the same setting are automatically assigned to each other. To allow participants with the same setting to be assigned different bus addresses, participants in the first bus system 400 have different identifiers, from which different bus addresses are configured using the configured settings.The bus address determined using the setting is for the emergency buttons 10, 1010, 2010, 3010 and for the door locks 200, 1200, 2200, 3200, only one further bus address that the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200 use in addition to the bus address used for safety-relevant communication.

[0166] If a door lock 200, 1200, 2200, or 3200 has already been unlocked, the control device 100 can prevent the unlocking of another door lock 200, 1200, 2200, or 3200 until a certain condition is met, provided there is no emergency. If the condition is met, the control device 100 initiates the unlocking of the next door lock 200, 1200, 2200, or 3200. In this way, the control device 100 can communicate with multiple door locks 200, 1200, 2200, or 3200 to form an airlock. For example, door 2002 can be located at an entrance to a room, and door 3002 at an exit of the same room. The control device 100 can initiate the unlocking of the door lock 2200 if a positive authentication signal for the door lock 2200 is present.Even if a positive authentication signal for door lock 3200 is present at control device 100, control device 100 can prevent the unlocking of door lock 3200 until a condition is met. If the condition is met, control device 100 initiates the unlocking of door lock 3200. The condition could be, for example, an airlock time interval or the reaching of a measured value such as room temperature, humidity, air purity, or the number of people in the room. Control device 100 can be connected to, or connectable to, a measuring device for this purpose. The condition could include the closing of the first opened door 2002, which can be measured by door status monitoring devices 204 and 206. The condition and the door locks 2200 and 3200 involved in the airlock can be stored in control device 100.The user can enter the data using the parameterization program.

[0167] In Figure 6 is a variant of the one in the Figures 4 and 5 The safety system 1 is shown. Here, the control device 100 is designed separately from the emergency buttons 10, 1010, 2010, 3010 and the door locks 200, 1200, 2200, 3200. The first bus system 400 connects the control device 100 to the door locks 200, 1200, 2200, 3200 and the emergency buttons 10, 1010, 2010, 3010. The control device 100 of the Figure 6 The design of the control device corresponds to 100 of the Figure 3 The emergency button 10 of the Figure 6 The design corresponds to emergency button 10 of the Figure 3 Furthermore, the structure and functionalities that were previously described correspond to Figure 5 are described, the structure and functionalities of the security system 1 of the Figure 6 .

[0168] Because in the exemplary embodiments of the Figures 4 to 6 Since the door locks 200, 1200, 2200, 3200, the emergency buttons 10, 1010, 2010, 3010 and, if applicable, the control device 100 act as participants in a single first bus system 400, only the cables of bus system 400 are necessary for the participants to communicate with each other. Therefore, security system 1 has only a few cables.

[0169] The bus system 400 can comprise at least two cables for communication and at least two cables for power supply. In particular, the bus system 400 has exactly two cables for communication and two cables for power supply. In each of the embodiments of the safety system 1 according to the invention, a power supply unit can be integrated at any point in the bus system 400 as a connection to a power grid. Thus, the power supply unit can be provided as an independent component of the safety system 1 outside of the emergency button 10 or emergency buttons 10, 1010, 2010, 3010 and the door lock 200 or door locks 200, 1200, 2200, 3200. This makes the safety system 1 spatially flexible.

[0170] If, as in the third and fourth embodiments, several emergency buttons 10, 1010, 2010, 3010 are present and one of the emergency buttons 10, 1010, 2010, 3010 has been activated, the electronic locking mechanism only prevents the door locks 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010 from locking. Reaching the release condition allows the locking of the door lock(s) 200, 1200, 2200, 3200 associated with the activated emergency button 10, 1010, 2010, 3010. To reach the release condition, the activation of the actuating element must occur in a time-overlapping manner. 11of the emergency button 10, 1010, 2010, 3010 that was previously activated, and the authentication at the key switch 500, 1500, 2500, 3500 assigned to the activated emergency button 10, 1010, 2010, 3010. At least this sequence of actions is necessary for the door lock 200, 1200, 2200, 3200 assigned to the activated emergency button 10, 1010, 2010, 3010 where at least one of the door status monitoring devices 204, 206 has detected that the door 2 or one of the door leaves 3, 4 was opened after the emergency button 10 was activated.

[0171] If the door status monitoring devices 204, 206 of the door locks 200, 1200, 2200, 3200 assigned to the activated emergency button 10, 1010, 2010, 3010 have detected that door 2 has remained closed continuously after the emergency button 10, 1010, 2010, 3010 has been activated, the release condition can be reached after the predetermined time interval has elapsed. For example, the release condition can be reached 60 seconds after the last activation of the emergency button 10. The setting for whether locking should occur after the predetermined time interval has elapsed if the door 2, 2002, 3002 remains closed can be individually adjustable and stored for each door lock 200, 1200, 2200, 3200 or for groups of door locks 200, 1200, 2200, 3200, particularly for door locks intended for installation on the same door. This setting can be stored, for example, in the emergency release buttons 10, 1010, 2010, 3010.Similarly, for each door lock (200, 1200, 2200, 3200) or for groups of door locks (200, 1200, 2200, 3200), especially for door locks intended for installation on the same door, the length of the predetermined time interval can be individually set and stored. A minimum length, e.g., 60 seconds, can be predefined for the predetermined time interval. This setting is configured via the parameterization program.

[0172] In Figure 7 A fifth embodiment of the safety system 1 according to the invention is shown. The fifth embodiment comprises the safety system 1 according to the first embodiment of the Figure 1 and 2This means that the emergency button 10, which includes the control device 100, is connected to the door lock 200 via the bus system 400. The key switch 500 is connected or connectable to the emergency button 10 via a connection 402. In the fifth embodiment, additional components 300, 301, and 510 are provided compared to the first embodiment.

[0173] The safety system 1 includes the central escape route control unit 300. The central escape route control unit 300 is designed to be located remotely from door 2. For example, the central escape route control unit 300 can be installed together with a monitoring device 301, which may be configured as a monitor or personal computer, and / or a multi-door display device 350 (see...). Fig. 10) to be arranged in a guardroom. The guard device 301 is optionally part of the security system 1 according to the invention. Alternatively, the guard device 301 can be connected to the security system 1 according to the invention.

[0174] The central escape route control unit 300 has a modular design. An emergency module 310 comprises a first mounting plate 311. The first mounting plate 311 accommodates a central emergency button 302 and an identification device 312, which is exemplified as a key switch. The central emergency button 302 and the identification device 312 are rigidly connected to each other by means of the first mounting plate 311. The central emergency button 302 serves to unlock the door lock 200 when activated. Thus, the door lock 200 can be unlocked remotely from the door 2 by pressing the central emergency button 302. The unlocking process following activation of the central emergency button 302 is single-fault safe. Therefore, the activation of the central emergency button 302 is suitable for use in emergency situations.

[0175] A deactivation module 320 comprises a first control element 322, designed as a key switch, and a second control element 323, designed as a push button. The first control element 322 serves to deactivate the emergency stop button 10. Actuating the first control element 322 puts the emergency stop button 10 into a deactivated state. If the emergency stop button 10 is in a deactivated state, pressing the emergency stop button 10 will not unlock the door lock 200. The second control element 323 serves to activate the emergency stop button 10. If the emergency stop button 10 is in the deactivated state and the second control element 323 is actuated, the emergency stop button 10 is put into an activated state. In the activated state of the emergency button 10, the emergency button 10 triggers the unlocking of the door lock 200 when the emergency button 10 is pressed. The deactivation module includes a second mounting plate 321.The second mounting plate 321 serves to accommodate the first and second control elements 322, 323. The second mounting plate 321 rigidly connects the first and second control elements 322, 323 to each other mechanically.

[0176] A delay module 330 includes a third mounting plate 331. The third mounting plate 331 accommodates a delay element 332. The delay element 332 is designed, for example, as a key switch. The delay element 332 serves to further delay the unlocking of the door lock 200 within the initial delay period. The delay module 330 includes a termination element 333, which is designed as a push button. The termination element 333 is attached to the third mounting plate 331. The termination element 333 is rigidly connected to the delay element 332 by means of the third mounting plate 331. By actuating the termination element 333, the delay in unlocking the door lock 200 can be terminated.

[0177] The central escape route control unit 300 comprises a single-sided open escape route control housing 340, in which the emergency module 310, the deactivation module 320, and the delay module 330 are arranged. The deactivation module 320 and the delay module 330 are optional components of the central escape route security system 300. The escape route control housing 340 can also accommodate the multi-door indicator device 350, if present.

[0178] The escape route control housing 340 can mechanically mount the emergency module 310, the deactivation module 320, and the delay module 330. The emergency module 310, the deactivation module 320, and the delay module 330 are each individually attached to the escape route control housing 340, in particular by screws. The first mounting plate 311 for the emergency module 310, the second mounting plate 321 for the deactivation module 320, and / or the third mounting plate 331 for the delay module 330 serve for mounting to the escape route control housing 340. The escape route control housing 340 and the modules 310, 320, and 330 are designed such that various sequences in which the modules 310, 320, and 330 can be arranged side by side are possible. For example, the emergency module 310, 320, and 330 can be arranged in a different configuration. B. in a central escape route security system 300 (not shown), the emergency module 310 may be arranged between the deactivation module 320 and the delay module 330.In another example of a central escape route control unit 300 (not shown), a space can be arranged on the left, a delay module 330 in the middle, and the emergency module 310 on the right. The space is created by the absence of the deactivation module 320 and is covered by a plate. The escape route control unit housing 340 can have rails for inserting the modules 310, 320, and 330. The escape route control unit housing 340 can have mounting options, such as perforated strips or elongated holes, for the variable mounting of the modules 310, 320, and 330.

[0179] On the first mounting plate 311, the second mounting plate 321, and the third mounting plate 331, a purely schematic display area 314, 324, and 334, respectively, is provided. Symbols are present on the display area that explain the function of modules 310, 320, and 330. In addition, optical indicator lights for displaying the status of safety system 1 may be provided in the display areas 314, 324, and 334.

[0180] In the exemplary embodiment of the Figure 7 Security system 1 also includes an audio and video module 510. The audio and video module 510 is designed to be installed near door 2, which can be locked by the door interlock 200. When the audio and video module 510 is activated, an operator in the guardroom can speak to the user in front of door 2 and view the area near door 2.

[0181] As in Figure 8As shown, the central emergency button 302 is constructed similarly to the emergency button 10. The central emergency button 302 comprises an emergency button electronics unit 308. The emergency button electronics unit 308 includes a first emergency processing unit 303, a second emergency processing unit 304, and a third emergency processing unit 305. The first, second, and third emergency processing units 303, 304, and 305 are each implemented as a microprocessor or microcontroller. The first and second emergency processing units 303 and 304 have non-volatile memory. The third emergency processing unit 305 has non-volatile memory and / or access to non-volatile memory. The central emergency button 302 is activated by actuating an emergency button actuator 306. This actuates an emergency button switch 307, generating a first and a second signal.For this purpose, a first and a second circuit (not shown) are opened. A signal indicating the opening of the first circuit is detected by the first emergency processing unit 303. A signal indicating the opening of the second circuit is detected by the second emergency processing unit 304.

[0182] The central emergency button 302 is connected to a second bus system 401. As in Figure 9 As shown, the control device 100 is also connected to the second bus system 401. The second bus system 401 is a different type of bus system than the first bus system 400. For example, the second bus system 401 can be a LON or LAN bus, and the first bus system 400 a CAN or DCW bus.

[0183] In Figure 9 The emergency button 10 includes the control device 100. The emergency button 10 and the door lock 200, which are in Figure 9The items shown correspond to the emergency button 10 and the door lock 200. Figure 2 .

[0184] In an alternative not shown, the control device 100, the emergency button 10 and the door lock 200 are arranged according to the Figure 3 trained. In this alternative not shown, the control device 100, the emergency button 10 and the door lock 200 are connected to each other via the first bus system 400, wherein the control device 100 is connected to the second bus system 401.

[0185] The control device 100 receives messages from the central escape route control system 300 via the second bus system 401. The control device 100 forwards the messages via the first bus system to other participants of the first bus system 400. The message can, in particular, be information regarding the activation of the central emergency button 302, the key switch 312, the first operating element 322, the second operating element 323, the delay element 332, and / or the termination element 333, or a control command resulting from the activation of one of the aforementioned elements 302, 312, 322, 323, 332, 333. If the control device 100 is integrated into the emergency button 10, forwarding to the emergency button 10 in which the control device 100 is integrated is omitted. For example, forwards according to the Figure 9The control device 100 forwards the message to the door lock 200. If the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100 forwards the message to the emergency button 10 and / or the door lock 200. The control device 100 adapts the message to the format of the first bus system 400. Safety-relevant messages are otherwise left untouched.

[0186] If the central emergency button 302 is pressed, the first emergency processing unit 303 and, redundantly, the second emergency processing unit 304 initiate the unlocking of the door lock 200. In this process, the central emergency button 302 communicates with the door lock control unit 201 via the control device 100, specifically with the first and second processing units 202 and 203. The first and second processing units 202 and 203 then control the locking mechanism 205. Prior to this, the first and second processing units 103 and 104 forwarded the message. The control device 100 left the content of the message untouched.

[0187] The central emergency button 302 has an input for receiving a fire alarm signal. When the fire alarm signal is received, the central emergency button 302 triggers the unlocking of the door lock 200. For this purpose, the first and second emergency processing units 303 and 304 communicate with the door lock control unit 201 via the control device 100, specifically via the first and second processing units 103 and 104, as described previously.

[0188] A signal indicating activation of the key switch 312 of the first module 310 is received by the emergency button electronics unit 308, in particular by the third emergency processing unit 305. The emergency button electronics unit 308 sends a message regarding the activation of the key switch 312 via the second bus system 401 to the control device 100. The control device 100 forwards the message to the first bus system 400.

[0189] The emergency button actuator 306 is designed without latching. The emergency button actuator 306 is identical to the actuator. 11 of the emergency button 10 (see Figures 13 to 15 ). Thus, the emergency actuation element 306 is moved from a starting position to an actuation position when actuated (analogous to Figure 11 Immediately after actuation, the emergency actuating element 306 returns to its initial position by the force of a spring-shaped return element (analogous to...). Figure 11 ) .The emergency actuation element 306 is translational. If, as a result of actuating the central emergency button 302, the door lock 200 is moved to the unlocked state, the electronic device 207 prevents the door lock 200 from being moved back to the locked state without a release condition being present. The release condition after actuating the central emergency button 302 can be achieved by actuating the key switch 312. In particular, actuating the key switch 312 is sufficient to achieve the release condition.

[0190] If the safety system 1 includes the central escape route control unit 300, the release condition can be achieved in another way following activation of the emergency button 10: If the door status monitoring devices 204, 206 have detected that the door 2 has remained closed after activation of the emergency button 10, the release condition can be achieved by the elapse of a predetermined time interval and a release action at the central escape route control unit 300 after the predetermined time interval. The release action can correspond to authentication at the central escape route control unit 300, in particular by activation of the key switch 312. A release signal can be generated by the release action, e.g., activation of the key switch 312. The release signal is forwarded via the control device 100 to the door locking control unit 201.Authentication at key switch 500 and cancellation at emergency switch 10 are not necessary in this case.

[0191] The door locking control 201 checks whether the release condition can be reached by the elapse of the predetermined time interval and authentication at the central escape route control 300 with door 2 remaining closed, before the door locking control 201 activates the locking mechanism 205 to lock the door. This allows an operator to configure, during the commissioning of the safety system 1, whether the elapse of the predetermined time interval without opening door 2 and the additional activation of the key switch 312 are permissible release conditions, thus resulting in door 2 relocking.A check of admissibility, the expiry of the predetermined time interval, the actuation of the key switch 312 after the predetermined time interval and the fact that during the predetermined time interval neither the first door status monitoring device 204 nor the second door status monitoring device 206 sent a signal about the opening of the door are sufficient to achieve the cancellation condition.

[0192] This is a variant for achieving a cancellation condition, which is one of the Figure 1 and 2 This option has been described. For example, the operator can select this option if simply allowing the predetermined time interval to elapse while door 2 remains closed does not seem secure enough. The operator can select and save this option using the parameterization program.

[0193] In particular, if the operator has selected this option, the elapsed time of the predetermined interval while door 2 remained closed is visually indicated on the central escape route control unit 300. Specifically, the indicator lights 313 serve to show that the predetermined time interval has elapsed without a signal being received that door 2 had been opened within that interval. The visual indication informs the operator that door 2 can be locked by authentication at the central escape route control unit 300.

[0194] If the door status monitoring devices 204, 206 have not sent a signal indicating that the door has been opened while a fire alarm signal is present, the door lock 200 can also be engaged by pressing the key switch 312 after the fire alarm signal has ended. The possibility of engaging the door lock 200 by pressing the key switch 312 after the fire alarm signal has ended is also visually indicated by the indicator lights 313.

[0195] The control device 100 forwards messages from the emergency button 10 and / or the door lock 200 via the second bus system 401. The control device 100 adapts the message to the format of the second bus system 401. The control device 100 sends information about the status of the emergency button 10 and / or the door lock 200 via the second bus system 401.

[0196] For example, the central escape route control 300 and the multi-door display device 350 can be connected to a third bus system 403 (see below). Fig. 10 Preferably, the central emergency button 302, and especially preferably the emergency button electronics unit 308, can be connected to the third bus system 403 (see below). Fig. 8 The multi-door indicator unit 350 can visually display the locked and unlocked status of the door lock 200. Additionally, the multi-door indicator unit 350 can be used to display one of the door locks 200, 200', 1200', 2200' of the security system 1 (see...). Fig. 10 ) can be unlocked. Unlocking using the multi-door indicator unit 350 is not fault-proof. The third bus system 403 can be the same type of bus system as the first bus system 400, e.g., a CAN or DCW bus.

[0197] The control device 100 forwards the signal via the second bus system 401 to the central escape route control 300 when the emergency button 10 waits for an initial delay period before the emergency button 10 causes the door locking control 201 to activate the locking mechanism 205 for unlocking.

[0198] The first delay duration is visually displayed on the central escape route control unit 300. For this purpose, the central emergency button 302 is configured according to emergency button 10, as described in the Figure 13 , 16, 17As described above, the emergency button electronics unit 308 controls the light sources 313 of the central emergency button 302 to visually represent the initial delay time. As the initial delay time progresses, fewer light sources 313 illuminate in the same color. For example, fewer light sources 313 may illuminate in a first color, while an increasing number illuminate in a second color. The light sources 41 of the emergency button 10 are controlled in the same manner to visually represent the initial delay time.

[0199] During the first delay period, e.g., 8 s, the operator can activate the delay element 332. To do this, the operator turns a key in the key switch, which serves as the delay element 332. Activation of the delay element 332 is detected by the emergency button electronics unit 308, in particular by the third emergency processing unit 305. A corresponding message is sent via the second bus system 401 and, if necessary, the first bus system 400. The emergency button 10 receives the message. As a result of the activation of the delay element 332, the emergency button 10 ends the first delay period and begins a second delay period. The second delay period, e.g., 180 s, is longer than the first delay period. At the end of the second delay period, the emergency button 10 triggers the unlocking of the door lock 200.The second delay duration is determined in the emergency button 10 using the same timer that determines the first delay duration. During the second delay duration, the key of the delay element 322 does not need to remain turned. Rather, a single turn of the key is sufficient to start the second delay duration.

[0200] The second delay duration is displayed visually on the central escape route control unit 300 and on the emergency button 10. The visual display on the central escape route control unit 300 is identical to the visual display on the emergency button 10. As the second delay duration progresses, fewer light sources 41, 313 illuminate in the same color. For example, fewer light sources 41, 313 may illuminate in a first color, while an increasing number of light sources 41, 313 illuminate in a second color. To indicate that the second delay duration is long, a pattern associating the passage of time, e.g., a rotating colored dot or a rotating colored window (see description of...), can be displayed repeatedly within the second delay duration. Figures 16, 17 ) are visually represented.

[0201] If the termination element 333 is actuated during the first or second delay period, the emergency electronics unit 308, in particular the third emergency processing unit 305, detects the actuation of the termination element 333 and sends a message regarding the actuation of the termination element 333 via the second bus system 401. This causes the emergency electronics unit 308 to stop delaying the unlocking by pressing the emergency button 10 and instead immediately trigger the unlocking of the door lock 200. The termination element 333 is designed to be non-latching. A single actuation of the termination element 333 is sufficient to end the delay in initiating the unlocking.

[0202] The emergency button 10 can be deactivated by actuating the first operating element 322. To do this, the operator turns a key in the key switch, which serves as the first operating element 322. Actuation of the first operating element 322 is detected by the emergency button electronics unit 308. When the first operating element 322 is actuated, a first and a second deactivation circuit are opened or closed. The opening or closing of the first deactivation circuit is detected by the first emergency processing unit 303. The opening or closing of the second deactivation circuit is detected by the second emergency processing unit 304. The first and second emergency processing units 303 and 304 communicate with the emergency button 10 via the second bus system 401.If the first bus system 400 is located between the emergency button 10 and the central emergency button 302, the control device 100 forwards the message to the first and second emergency processing units 303 and 304. The format is changed during forwarding, but the content remains unchanged.

[0203] In the deactivated state of the emergency button 10, the actuation of the emergency button 10 has no effect on the door lock 200.

[0204] The activated and deactivated states are stored electronically in the emergency button 10. Because the activated and deactivated states are stored in the emergency button 10, the key does not need to remain turned in the first control element 322 while the emergency button is deactivated. A single turn of the key is sufficient to deactivate the emergency button 10.

[0205] The deactivation remains in effect until the second control element 323 is actuated. Actuation of the second control element 323 can be detected by the emergency button electronics unit 308, in particular by the third emergency processing unit 305. The emergency electronics unit 308 sends a message regarding the actuation of the second control element 323 via the second bus system 401 and, if necessary, via the first bus system 400 to the emergency button 10, whereupon the emergency button 10 is switched to the activated state. The second control element 323 is not latching. Because the activated and deactivated states are stored in the emergency button 10, a single actuation of the second control element 323 is sufficient to switch the emergency button 10 to the activated state.

[0206] The central escape route control unit 300 includes a bus 341, via which the emergency electronics unit 308, in particular the third emergency processing unit 305, can acquire signals from the second control element 323, the delay element 332, and the termination element 333. The emergency electronics unit 308 serves as the intelligence of the entire central escape route control unit 300. Only the emergency electronics unit 308 contains microprocessors. The deactivation module 320 and / or the delay module 322 can be designed without a processor. The bus 341 can be configured as an I²C bus.

[0207] To store the activated and deactivated states, a second variable can be stored in the first emergency button processing unit 20 and redundantly in the second emergency button processing unit 21, particularly in the non-volatile memory. The second variable can be binary. If the emergency button 10 is in the deactivated state, the second variable is set to a deactivation value. If the emergency button 10 is in the activated state, the second variable is set to an activation value. As a result of actuation of the first control element 322, the second variable is set to the deactivation value. As a result of actuation of the second control element 323, the second variable is set to the activation value. Before the emergency button 10 triggers the unlocking of the door lock 200, it checks the value of the second variable.If the emergency button detects that the emergency button 10 is deactivated, communication between the emergency button 10 and the door locking control 201 to initiate an unlocking 200 will not occur.

[0208] The first emergency processing unit 303 and the second emergency processing unit 304 monitor each other for errors. If an error is detected, a message is sent via the second bus system 401. The emergency button 10 receives the message and then switches itself to the activated state if it is currently in the deactivated state. To do this, the emergency button 10 changes the value of the second variable to the activation value.

[0209] The first emergency processing unit 303 and the second emergency processing unit 304 repeatedly transmit a vital sign signal, particularly at regular intervals, via the second bus system 401. The emergency button 10 receives the vital sign signals. If a vital sign signal fails to arrive once or several times, the emergency button 10 switches to the activated state if it is currently in the deactivated state.

[0210] If the security system 1 receives a fire alarm signal, the emergency button 10 switches to the activated state if the emergency button 10 is in the deactivated state.

[0211] The activation of the emergency button 10 in its deactivated state is indicated on the central escape route control unit 300, the monitoring device 301, and / or the multi-door display unit 350. If an emergency situation actually exists, the operator can activate the emergency button 10 by pressing the second control element 323, or the operator can directly unlock the door by pressing the central emergency button 302. The operator can detect whether an emergency situation exists, for example, via the audio and video module 510. This enhances safety.

[0212] The deactivation can be carried out, for example, at night in a department store. Furthermore, it is conceivable to use the deactivatable emergency button 10 in a building where people with intellectual disabilities live. Emergency button 10 can also be installed on doors accessible to people with intellectual disabilities, such as in a psychiatric or dementia ward.

[0213] If the emergency button 10 is pressed while in the deactivated state and then switched to the activated state, the actuation of the emergency button 10 in the deactivated state will not unlock the door lock 200, even after the switch to the activated state. The actuation of the emergency button 10 in the deactivated state remains ineffective. This is due, firstly, to the fact that the actuating element 11 and the switch 63 are non-latching. Secondly, the actuation of the emergency button 10 in the deactivated state was not stored in the emergency button 10. The door lock control 201 receives no message regarding the actuation of the emergency button 10 in the deactivated state. The electronic hold-open device was therefore not switched to the actuated state. This ensures that the door lock 100 is not unlocked immediately upon activation of the emergency button 10, e.g.because emergency button 10 was activated long beforehand. This results in increased building security.

[0214] To achieve a particularly high level of safety, the audio and video module 510 can be switched on during the first and / or second delay period. In this case, the emergency button 10 activates the audio and video module 510 at the beginning of the first and / or second delay period. The audio and video module 510 is also activated by the emergency button 10 if it is pressed while the module is deactivated. For this purpose, the emergency button 10 communicates with the audio and video module 510 via the second bus system 401 and, if necessary, via the first bus system 400.

[0215] It may be that the emergency button 10 can only be deactivated if the audio and video module 510 can be unlocked. If the audio and video module 510 is part of the security system 1 according to the invention, deactivation may be omitted if the audio and video module 510 is, for example, not functional and / or the connection to the audio and video module 510 is disrupted. This does not apply if the security system 1 does not include an audio and video module 510, but rather a separate monitoring system is provided in the building.

[0216] The emergency button 10 may delay the unlocking process by only the first and / or second delay time if the audio and video module 510 can be unlocked. If the audio and video module 510 is part of the security system 1 according to the invention, a delay may be omitted if, for example, the audio and video module 510 is not functioning and / or the connection to the audio and video module is disrupted. This does not apply if the security system 1 does not include an audio and video module 510, but rather a separate monitoring system is provided in the building.

[0217] In Figure 10 A further embodiment of a safety system 1 according to the invention is shown. As in the embodiment of the Figures 7 to 9 The security system 1 includes a central escape route control 300, which, according to the Figure 7 and 8The diagram shows the system's configuration. For clarity, the corresponding key switches 500, 500', 1500, 1500', and 2500 associated with the respective emergency buttons 10, 10', 1010, 1010', and 2010 are not shown. The central escape route control unit 300 is connected to the second bus system 401. A first subsystem 5 and a second subsystem 6 are connected to the second bus system 401. Subsystems 5 and 6 each comprise a first bus system 400 and 400', respectively. Emergency buttons 10 and 1010, 1010', and 2010', respectively, and door locks 200 and 200', 1200', and 2200', respectively, are connected to each of these first bus systems. The first two bus systems, 400 and 400', are the same type of bus system, e.g., a CAN or DCW bus. The second bus system, 401, is a different type of bus system, e.g., a LON or LAN bus.

[0218] Safety system 1 includes the multi-door indicator unit 350. The multi-door indicator unit 350 can, for example, visually indicate which door lock 200 or 200', 1200', 2200' is in the unlocked state and which door lock is in the unlocked state. Using the multi-door indicator unit 350, an operator can perform non-safety-related locking and unlocking of individual door locks 200 or 200', 1200', 2200' of safety system 1.

[0219] Each subsystem 5, 6 comprises only one control device 100, 100'. The control device 100, 100' of each subsystem 5, 6 is connected to the second bus system 401. The control device 100 of the first subsystem 5 is connected to the emergency buttons 10, 1010 and the door lock 200 of the first subsystem 5 via the first bus system 400. The control device 100' of the second subsystem 6, on the other hand, is integrated into an emergency button 10' of the second subsystem 6 and is connected to the remaining emergency buttons 1010', 2010' and the door locks 200', 1200', 2200' of the second first bus system 400'.

[0220] Subsystem 5 includes a first emergency button 10 and a second emergency button 1010. If either of the emergency buttons 10 or 1010 is activated, the activated emergency button 10 or 1010 will each trigger the unlocking of the door lock 200.

[0221] Subsystem 6 includes a first emergency button 10', a second emergency button 1010', and a third emergency button 2010'. The emergency buttons 10', 1010', and 2010' selectively unlock the door locks 200', 1200', and 2200' of the second subsystem 6. For example, pressing the first emergency button 10' unlocks only the first door lock 200'. Similarly, pressing the second emergency button 1010' unlocks only the second door lock 1200', and pressing the third emergency button 2010' unlocks only the third door lock 2200'.

[0222] Numerous variations are conceivable. For example, a safety system 1 according to the invention can be configured without the first or the second subsystem 5, 6. As the sole or additional subsystem, for example, one of those described in the Figures 1 to 6The safety systems 1 described in the invention are provided. The design and functions of the emergency buttons 10, 10', 1010, 1010', 2010' and the door locks 200, 200', 1200', 2200' are designed according to the preceding embodiments, unless additionally or differently described below.

[0223] Each of the door locks 200, 200', 1200', 2200' of security system 1 is programmed to determine whether pressing the central emergency button 302 will unlock the respective door lock 200, 200', 1200', 2200'. For example, door locks 200, 200', and 2200' may be allowed to unlock following press of the central emergency button 302, while door lock 1200' may not. When the central emergency button 302 is pressed, the door lock controllers 201 of door locks 200, 200', and 2200' activate the respective locking mechanism 205 to unlock the door. However, door lock 1200' is not activated in this way.

[0224] When the central emergency button 302 is activated, the control devices 100, 100' receive a corresponding message from the central emergency button 302 via the second bus system 401 and forward the message to all door locks 200 and 200', 1200', 2200' of the respective first bus system 400, 400'. Based on the stored information, which includes the permission for unlocking following activation of the central emergency button 302, the door locks 200, 200', 1200', 2200' decide whether the respective door lock control 201 of the door locks 200, 200', 1200', 2200' activates the respective locking mechanism 205 for unlocking or not.

[0225] The setting for whether the door lock 200, 200'1200', 2200' is unlocked following activation of the central emergency button 302 is configured by the operator during commissioning of safety system 1. This setting is configured via the parameterization program.

[0226] Each of the emergency buttons 10, 1010, 10', 1010', 2010' contains a setting indicating whether actuation of the first control element 322 will allow the respective emergency button 10, 1010, 10', 1010', 2010' to be deactivated. This results in selective deactivation by actuating the single first control element 322 of the safety system 1. For example, emergency buttons 10, 10', 2010' can be deactivated by actuating the first control element 322, while emergency buttons 1010, 1010' cannot.

[0227] When the first control element 322 is actuated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to all emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400' that do not include the control device 100. Based on their deactivation settings, the emergency buttons 10, 1010, 10', 1010', 2010' of the safety system 1 decide whether or not to deactivate themselves as a result of the actuation of the first control element 322.

[0228] A third variable can be used to specify whether deactivation of emergency buttons 10, 1010, 10', 1010', 2010' should be permitted. This third variable can be implemented in binary form. The third variable is stored in the non-volatile memory of the respective first and second emergency button processing units 20, 21 of each emergency button 10, 1010, 10', 1010', 2010'. If deactivation is permitted for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a first value. If deactivation is prohibited for the respective emergency button 10, 1010, 10', 1010', 2010', the third variable takes on a second value. The emergency button 10, 1010, 10', 1010', 2010' checks the value of the third variable before the emergency button 10, 1010, 10', 1010', 2010' deactivates itself and only deactivates itself if the third variable has the first value.

[0229] The setting for whether the emergency button 10, 1010, 10', 1010', 2010' should be deactivated is configured by the operator during the commissioning of safety system 1. This is done using a parameterization program.

[0230] Each of the emergency buttons 10, 1010, 10', 1010', 2010' contains a setting indicating whether, when the delay element 332 is activated, the respective emergency button 10, 1010, 10', 1010', 2010' delays the unlocking of the door locks 200, 200', 1200', 2200' assigned to it by a second delay period. The second delay period is specified for each of the respective emergency buttons 10, 1010, 10'. The delay times of 1010' and 2010' can be set to different durations and are stored in the safety system 1, specifically in the emergency buttons 10, 1010, 10', 1010', 2010'. Alternatively, the allowance of the delay by the second delay time duration and, if applicable, the length of the second delay time duration can only be individually set for groups of emergency buttons 10, 1010, 10', 1010', 2010' that are assigned to a door lock 200, 200', 1200', 2200' or a door 2, 2002, 3002.The settings and configuration are performed by the operator using the parameterization program.

[0231] For example, emergency buttons 10 and 2010' can further delay the unlocking of door locks 200 and 2200' respectively following activation of delay element 332, while emergency buttons 1010, 10', and 1010' cannot. The length of the second delay period for emergency button 10 is different from the length of the second delay period for emergency button 2010'. If emergency button 10 is activated and delay element 332 is activated within the first delay period defined for emergency button 10, then emergency button 10 delays the unlocking by the second delay period defined for emergency button 10, starting from the activation of delay element 332.If emergency button 2010' is pressed and delay element 332 is pressed within the first delay time stored for emergency button 2010', then emergency button 2010' delays the unlocking by the second delay time stored in emergency button 2010', which differs from the second delay time for emergency button 10. If emergency button 1010 is pressed, then emergency button 1010 delays the unlocking by the first delay time stored for emergency button 1010. If the delay element 332 is activated during the first delay period of the emergency button 1010, the unlocking will not be delayed by a second delay period, as this delay is not permitted for the emergency button 1010, but the emergency button 1010 will immediately initiate an unlocking of the door lock 200 after the first delay period.Emergency release buttons 10' and 1010' do not delay the unlocking of the associated door lock 200' and 1200', respectively. For emergency release buttons 10' and 1010', neither a first nor a second delay duration is permitted. Instead of disallowing a delay of the first and / or second duration, a duration of 0 seconds can also be set. Actuation of the termination element 333 ends any delay in unlocking.

[0232] When the delay element 332 is activated, the control devices 100, 100' receive a corresponding message via the second bus system 401 and forward the message to the emergency buttons 10, 1010, 1010', 2010' of the respective first bus system 400, 400', which do not include the control device 100. The emergency buttons 10, 1010, 10', 1010', 2010' of the safety system 1 decide, based on the stored information, how to proceed.

[0233] The setting indicating whether the emergency button 10, 1010, 10', 1010', 2010' allows a second delay duration, and if so, the length of that second delay duration, is configured during the commissioning of safety system 1. These settings are defined by the operator using the parameterization program. The first and / or second delay duration can only be selected up to a maximum, predefined duration.

[0234] The operator can also selectively define, using the parameterization program, which release condition is permitted for each emergency button 10, 1010, 1010', 2010'. The release condition for on-site release is always permitted. However, for each emergency button 10, 1010, 1010', 2010', it can be selectively enabled or disabled if the release condition is reached by the elapse of a predetermined time interval, or if the release condition is reached by the elapse of a predetermined time interval followed by activation of the identification device 312 while door 2 remains closed.

[0235] The settings for whether the emergency button 10 can be deactivated when the first control element 322 is actuated, whether the emergency button 10 should delay the unlocking by a second delay period when the delay element 332 is actuated, the length of the first and second delay periods, the setting of the cancellation condition and / or the setting of whether the door lock 200 should be unlocked when the central emergency button 302 is actuated, can also be configured for the safety system 1 according to the embodiment shown in the Figures 7 to 9 be carried out.

[0236] Unlike and not shown in the Figures 7 to 10Several central escape route control units 300, 300' can also be connected to the second bus system 401. For example, in a psychiatric hospital, one central escape route control unit 300 can be located in a guard room and another central escape route control unit 300' can be located in a nurses' station.

[0237] In each of the door locks 200, 200', 1200', 2200', the parameterization program can be used to specify which of the central emergency buttons 302, 302' should unlock the door upon activation. A list of these buttons is stored in the door locks for this purpose. Similarly, in each of the emergency buttons 10, 10', 1010, 1010', 2010', the parameterization program can be used to specify which of the first operating elements 322, 322' are permitted to deactivate the door upon activation. Unlike the third variable, a separate list is stored in each of the emergency buttons 10, 10', 1010, 1010', 2010' for this purpose.

[0238] The first to fourth embodiments of the safety system 1 according to the invention do not include a second bus system 401, a central escape route control 300, a monitoring device 301, or an audio and video module 510. However, embodiments of the safety system 1 according to the invention are conceivable in which the first to fourth embodiments additionally include at least some of the missing components 401, 301, 300, and 510. If the safety system 1 is designed for multiple doors, each door can be assigned an audio and video module 510. The emergency buttons 1010, 2010, and 3010, which do not include the control device 100, and the door locks 200, 1200, 2200, and 3200 are not connected to the second bus system 401.

[0239] In the Figures 1 to 10The door locks 200, 200', 1200, 1200', 2200, 2200', 3200 are part of the safety system 1 according to the invention. However, it is conceivable that only the door lock controllers 201 are part of the safety system 1 according to the invention. In this case, the door lock controllers 201 can each be connected to the locking mechanism 205 and, optionally, to the door status monitoring devices 204, 206. In this case, unlocking the door lock 200 does not take place within the safety system 1; however, it is part of the safety system 1 that the door lock controller 201 actuates the locking mechanism 205, i.e., the door lock controller 201 switches the electrical current for the locking mechanism 205 on or off. In this case, instead of the terms "unlocking or locking the door lock", the terms "control of the locking mechanism for unlocking or locking" can be used.

[0240] In the Figures 11 to 13An emergency button 10 is shown. The one in Figure 11 The emergency button 10 shown is designated as emergency button 10, 10', 1010, 1010', 2010, 3010 in one of the safety systems 1 according to the invention. Figures 1 to 10 usable or used.

[0241] The emergency button 10 includes the actuating element 11. The actuating element 11 can move from the initial position 11.I, which is located in the Figure 11 as shown, move into the actuation position 11.II, which is in Figure 11 is indicated. In Figure 12 The actuating element 11 is also in the starting position 11.I.

[0242] In operating position 11.II, the switch 63 is actuated. The switch 63 also changes from a first position 63.I to a second position 63.II, as described in Figure 12 hinted at.

[0243] After actuation, the actuating element 11 returns immediately and without manual intervention to its initial position 11.I. For this purpose, a spring-loaded return element 12 is provided in the emergency stop button 10. The switch 63 also returns immediately and without manual intervention to its first position 63.I after actuation.

[0244] The emergency button 10 includes at least one initial circuit board 60. This makes it possible to design the emergency button 10 in a compact form with a reliable operating principle.

[0245] The emergency button 10 has a height AH of less than 48 mm, preferably less than 45 mm, particularly preferably less than 43 mm, from a dome 32 of a front surface 19 of the actuating element 11 in the installation direction.

[0246] Switch 63 is mounted on the first circuit board 60. The first and second circuits on the first circuit board 60 are interrupted by actuating switch 63.

[0247] The emergency button 10 also includes a second circuit board 61. The first, second, and third emergency button processing units 20, 21, 22 are arranged on the second circuit board 61. The arrangement of the first, second, and third emergency button processing units 20, 21, 22 is independent of whether the first, second, and third emergency button processing units 20, 21, 22 serve as processing units 103, 104, 105 of the control device 100.

[0248] The opening of the first and second circuits can be detected wirelessly by the first and second emergency button processing units 20 and 21, respectively. For this purpose, the first and second circuit boards 60 and 61 are connected to each other via connector 68.

[0249] The first and second circuit boards 60, 61 are arranged at a fixed distance from each other. Bolts 69 are provided for this purpose, which fasten the first and second circuit boards 60, 61 to each other at a fixed distance from each other via screws 70 (see figure). Figure 13 The first and second circuit boards 60, 61 are arranged parallel to each other.

[0250] The emergency button 10 includes a mounting plate 62. The mounting plate 62 is also arranged at a fixed distance from the first and second circuit boards 60, 61. For this purpose, bolts 71 are provided which connect the mounting plate 62 to the first circuit board 61 via screws 72.

[0251] The mounting plate 62 is used for attachment to a flush-mounted box. The flush-mounted box can have a diameter of 60 mm and a depth of 41 mm. The portion of the emergency stop button 10 extending from the mounting plate 62 in the installation direction is referred to as the mounting element 73. The mounting element 73 has a diameter of less than 60 mm and a depth of less than 33 mm, preferably less than 31 mm, and particularly preferably less than 29 mm. This provides sufficient space for cables in the flush-mounted box. The distance MP from a bottom surface of the mounting plate 62 to a top surface of the second circuit board 62 is less than 22 mm, preferably less than 20 mm, and particularly preferably less than 17 mm. The mounting plate 62 can also be used for attachment to a cover element of a surface-mounted housing (not shown).The distances mentioned apply in particular to an emergency button in which the Bluetooth module 64 is attached to a lower side of the second circuit board 61, contrary to the illustration in the figures.

[0252] As described above, the release action, which is performed directly at the emergency button 10, is carried out without any rotational movement of the actuating element 11 and the switch 63. This makes it possible to use a switch 63 with a low profile. The switch 63 is designed such that it is rotation-free. The switch 63 has a height SH of less than 20 mm, preferably less than 17 mm, and most preferably less than 15 mm.

[0253] The manner of the cancellation action and the low height of switch 63 contribute to the low installation height AH of the emergency button 10.

[0254] The low installation height AH of the emergency button 10 is also due to the fact that the switch 63 is arranged centrally under the actuating element 11 and the actuating element 11 is guided eccentrically in the emergency button 10.

[0255] As in the Figures 14 and 15 As shown, the actuating element 11 has rod-shaped guide elements 35. The guide elements 35 are guided in guide sleeves 65. The guide sleeves 65 are connected to the mounting plate 62. To ensure good guidance, one of the guide sleeves 65 extends through the first circuit board 60.

[0256] The guide elements 35 are arranged parallel to the switch 63. The guide elements 35 prevent a rotational movement of the actuating element 11 about an imaginary axis 701, which runs in the actuation direction 700.

[0257] The actuating element 11 can only be moved translationally by means of the guide means 35 guided in the guide sleeves 65.

[0258] The actuating element 11 has an actuating means 36. As in the Figure 12 and 15 As shown, the actuating element 36 is designed in the form of a circular cylinder. This ensures that the actuating element 36 always actuates the switch 63. In particular, a first and a second switching element 74, 75 of the switch are always actuated simultaneously (see figure). Figure 13 The first switching element 74 opens the first circuit and the second switching element 75 opens the second circuit.

[0259] The actuating element 36 is designed with a hollow interior 38. A light source (not shown) is arranged in the switch 63. The light emitted by the light source is guided through the hollow interior 38 to the dome 32 of the front surface 19 of the actuating element 11, where the light passes through the actuating element 11. The dome 32 thus serves as the illumination area 32 of the actuating element 11.

[0260] The actuating element 11 can comprise an opaque base body 33. The base body 33 can, contrary to the illustration in the figures, be provided with an opening. A light-transmitting, in particular translucent, insert (not shown) can be arranged in the opening. The insert can be fixed in the opening, in particular pressed in. This makes the actuating element 11 particularly easy to manufacture.

[0261] The front surface 19 is partially conical. The illumination area 32 forms the apex of the truncated cone. The illumination area 32 protrudes from a cover 14 of the emergency button 10 in the direction of actuation 700. This makes the light exiting the illumination area 32 clearly visible to the side of the emergency button 10.

[0262] The return element 12 has a cavity 37. The actuating element 36 of the actuating element 11 and the switch 36 with the first and second switching elements 74, 75 protrude into the cavity 37. This results in a space-saving arrangement.

[0263] The Bluetooth module 64 is located between the first and second circuit boards 60, 61. The Bluetooth module 64 is used for parameterization. Alternatively, and in a more space-saving manner (not shown), the Bluetooth module 64 can be attached to the side of the second circuit board 61 facing away from the actuator 11. This allows the distance between the first and second circuit boards 60, 61 to be further reduced.

[0264] A tamper switch 66 is arranged on the first circuit board 60. Due to the low installation height, an actuating extension 67 of the tamper switch 66 extends through the mounting plate 62. The actuating extension 67 rests directly against the cover 14 of the emergency stop button 10.

[0265] If the control device 100 is integrated into the emergency button 10, the emergency button 10 can, despite its low installation height AH, include the functions described above and thus be intelligently designed. The functions described above are executed using program code that is stored in at least one of the processing units 103, 104, or 105.

[0266] The emergency button 10 has a cover 13. The cover 13 is transparent and covers the front surface 19 of the actuating element 11. This prevents the user from directly touching the actuating element 11. The cover 13 acts as a mental barrier for the user.

[0267] The cover 13 remains undamaged when the emergency button 10 is pressed. When the emergency button 10 is pressed, the cover 13 moves from a starting position 13.I to an actuating position 13.II. The actuating element 11 is only indirectly actuated by the user via the cover 13.

[0268] The covering material 13 is permanently installed in the emergency button 10. This prevents a user from improperly removing the covering material 13.

[0269] The covering element 13 is firmly connected to the actuating element 11. For this purpose, the covering element 13 has extensions 27 which are Figure 13 are depicted. As shown in the Figure 13 , 14 and 15 As shown, the actuating element 11 has holes 28 through which the extensions 27 are guided and are materially connected to the actuating element 11.

[0270] The actuating element 11 has a flange-like section 31 to which the cover 13 is attached. The flange-like section 31 has the holes 28.

[0271] The flange-like section 31 serves as a stop for the actuating element 11 in the actuating direction 700. The actuating element 11 reaches the actuating position 11.II when the flange-like section 31 rests against the mounting plate 62 or against the guide sleeves 65.

[0272] The flange-like section 31 serves as a stop for the actuating element 11 against the direction of actuation 700. The actuating element 11 reaches the initial position 11.I when the flange-like section 31 rests against an optical fiber 40. The optical fiber 40 holds the actuating element 11 against the force of the restoring element 12. For this purpose, the optical fiber 40 has a contact surface 51.

[0273] The light guide 40 is attached to the mounting plate 62. This ensures that the actuating element 11 remains held against the force of the return element 12 even when the cover 14 is removed. The light guide 40 has a flange 52 with which it is attached to the mounting plate 62 (see figure). Fig. 17 The light guide 40 is attached to the mounting plate 62 by the same screws 72 that attach the mounting plate 62 to the first circuit board 60.

[0274] Alternatively, and not shown, the covering material 13 can be designed as an elastic film that spans the actuating element 11.

[0275] Due to the fixed connection, the distance between the actuating position 11.II and the initial position 11.I, and the distance between the actuating position 13.II and the initial position 13.I, correspond to each other. Immediately after the end of the actuation and without manual intervention, the cover element 13 is moved back to the initial position 13.I. The return element 12 serves this purpose. The return element 12 indirectly moves the cover element 13 to the initial position 13.I via the actuating element 11.

[0276] The cover 13 and the actuating element 11 each have a circular cross-section. The cover 14 has a circular recess 15. The cover 13 projects through the recess 15 opposite to the direction of actuation 700. The actuating element 11 also projects through the recess 15.

[0277] The recess 15, the actuating element 11, and the cover 13 share a common imaginary axis 701. The recess 15, the actuating element 11, and the cover 13 are arranged concentrically.

[0278] The cover 13 has an actuation surface 17, which is spaced apart from the front surface 19 of the actuating element 11. The cover 13 also has a side surface 16, which is spaced apart from the side surface 18 of the actuating element 11.

[0279] Due to the spacing between the front surface 19 and the actuating surface 17, the transparent cover 13 can project significantly from the cover 14, while the partially opaque actuating element 11 projects only slightly from the cover 14. This ensures that the light guide 40, which is essentially flush with the cover 14, remains clearly visible even to users standing at an angle in front of the emergency button 10. The light guide deviates from a flush surface with the cover 14 by a maximum of ±3 mm, preferably a maximum of ±2 mm, and particularly preferably ±1 mm.

[0280] Because the cover 13 protrudes significantly from the lid 14, the emergency stop button 10 can be operated by the user with the flat of their hand. For this purpose, the cover 13 is either flush with the lid 14 in the actuation position 13.II, or the cover 13 protrudes from the lid 14 in the opposite direction of actuation 70° in the actuation position 13.II. In other words, the distance ABS between the initial position 13.I and the actuation position 13.II is at most the distance DF between a protrusion 30° of the actuation surface 17 and the lid 14. Likewise, the distance AB between the actuation position 11.II and the initial position 11.I is at most the distance DF. Figure 11 The distance ABS and the amount of the distance AB correspond to the distance DF.

[0281] The emergency button 10 includes light sources 41. The light sources 41 serve to indicate the unlocked and locked states of the door lock 200. With multiple emergency buttons 10, 1010, 2010, 3010, the light sources 41 indicate the unlocked and locked states of the associated door lock(s) 200, 1200, 2200, 3200. The light sources 41 are arranged concentrically around the actuating element 11. For example, the unlocked state is indicated by green light and the locked state by red light. In particular, all light sources 41 emit the same light to indicate the locked and unlocked states, at least when no emergency situation exists.

[0282] The light sources 41 can be controlled in at least two groups. Different control methods allow, for example, patterns that indicate further states of the safety system 1 to the user. These additional display options enable the user and / or operator to view a multitude of states in a compact and simple manner without additional display devices. This increases the safety of the safety system 1.

[0283] In Figure 13 Of the eight exemplary individual light sources, 41 are shown, six of which are labelled 41a, 41b, and 41c. These individual light sources will be designated 41a, 41b, 41c, etc., in the following.

[0284] Each of the individually controllable groups of light sources 41 can only comprise a single light source 41a, 41b, 41c, etc. In the exemplary embodiment of the Figures 11 to 17Each light source 41a, 41b, 41c, etc. is individually controllable. Each light source 41a, 41b, 41c, etc. is designed as an RGB LED. The light sources 41a, 41b, 41c, etc. are controllable in such a way that each light source 41a, 41b, 41c, etc. can emit at least four different, preferably at least five different colors. These could be, for example, red, blue, yellow, green, and pink light.

[0285] The light sources 41 are controlled by the third emergency button processing unit 22. For this purpose, the emergency button processing unit 22 and the light sources 41 are connected to a ring bus (not shown).

[0286] The light sources 41 are arranged on the first circuit board 60. The acoustic alarm device 23 is also arranged on the first circuit board 60. The acoustic alarm device 23 is controlled by the third emergency button processing unit 22.

[0287] Are multiple door locks 200, 1200 assigned to the emergency button 10, as e.g. in Figure 4 As depicted, at least two options are conceivable. Firstly, the emergency button 10 can indicate the unlocked state only when all door locks 200, 1200 assigned to the emergency button 10 are in the unlocked state. In this case, the unlocked state is only displayed when the entire width of both door leaves 3, 4 is available for escape. Alternatively, the emergency button 10 indicates the unlocked state as soon as one of the door locks 200, 1200, or all door locks of a door leaf 3, 4, are in the unlocked state. This indicates the escape route as early as possible, even if one of the door leaves 3, 4 is already unlocked. The operator can select these options. For this purpose, a switch (not shown) can be provided in the safety system 1.

[0288] Another state of the safety system 1, indicated by the group-controllable light sources 41, is the emergency. In this case, the light sources 41 can indicate whether a fire alarm signal is present or whether an activation signal has been generated.

[0289] The light sources 41 can be controlled in such a way that the progression of the unlocking time delay after the activation signal is generated by the light sources 41 is indicated. For example, progressively fewer light sources 41 emit light of a particular color, especially red light.

[0290] Another state of the security system 1 that can be represented by the light sources 41 is a fault. The fault represented in this way can be a fault of the security system 1. For example, it can indicate that the control device 100, the door locking control 200, or the first or second emergency button processing unit 20, 21 of the security system 1 is not operational, defective, has failed, has been deliberately switched off, or has been removed. The fault can also be a fault of the alarm system connected to the security system 1, which is not operational, defective, has failed, has been deliberately switched off, or has been removed.

[0291] The optical fiber 40 comprises several optical fiber areas 44 (see the Figures 16 and 17Each of the light sources 41a, 41b, 41c, etc., is assigned a light guide section 44. The light guide 40 can be conceptually divided into the light guide sections 44. Recesses 46 are provided between the light guide sections 44. Due to the recesses 46, the light remains essentially within the light guide sections 44.

[0292] Each light guide section 44 has a transmission section 48. The transmission section 48 is arranged above the light sources 41 in the transmission direction 702. The transmission direction 702 is opposite to the actuation direction 700. The transmission section 48 serves to conduct light up to a spreading section 45 of the light guide section 44. The spreading section 45 spreads in the transmission direction 702.

[0293] The spreading section 45 connects to the transmitting section 48 in the transmission direction 702. The spreading section 45 serves to widen the light beam of the emitted light. The transmitting section 48 widens less than the spreading section 45.

[0294] The optical fiber 40 is formed in one piece. The optical fiber 40 is made of a single material, in particular monolithic. The optical fiber 40 is made of translucent material.

[0295] The optical fiber sections 44 have a connecting section 49. The connecting section 49 adjoins the spreading section 45 in the transmission direction 702. The connecting sections 49 of the optical fiber sections 44 are integrally connected to each other in such a way that the single-piece and materially uniform optical fiber 40 is formed.

[0296] The connecting sections can have a depth of 2 mm to 6 mm, preferably 3 mm to 5 mm, and particularly preferably 3.5 mm to 4.5 mm. This restricts the light from one of the light sources 41a, 41b, 41c, etc., almost entirely to a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h on the user-facing surface 47 of the light guide 40. Each light guide section 44 comprises a lighting area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h.

[0297] The surface 47 of the light guide 40 corresponds to a circular ring. The illumination areas 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h are designed as sectors of the circular ring. By emitting light from a light source 41a, 41b, 41c, etc., the corresponding illumination area 50a, 50b, 50c, 50d, 50e, 50f, 50g, 50h is illuminated. The circular ring encloses the actuating element 11.

[0298] The light sources 41 can be controlled such that at least one light source 41a, 41b, 41c, etc. emits light of one color and at least one other light source 41a, 41b, 41c, etc. simultaneously emits light of another color. For example, in this way, the lighting areas 50a, 50b, 50e, 50f can display light of one color and the lighting areas 50c, 50d, 50g and 50h light of another color. While the lighting areas 50a, 50b, 50e, 50f are, for example, continuously illuminated, the lighting areas 50c, 50d, 50g and 50h can be illuminated by light sources 41 that emit flashing light.

[0299] For example, if first the illumination areas 50a, 50b, 50e, 50f are illuminated by the light of a first color and the illumination areas 50c, 50d, 50g and 50h by the light of a second color; then the illumination areas 50a, 50h, 50d, 50e are illuminated by the light of the first color and the illumination areas 50b, 50c, 50f and 50g by the light of the second color; then the illumination areas 50h, 50g, 50d, 50c are illuminated by the light of the first color and the illumination areas 50a, 50b, 50e and 50f by the light of the second color, the impression of a surrounding color window is created.

[0300] The opposing luminous areas 50, i.e., the luminous areas 50 that lie on a straight line passing through the imaginary axis 701, in Figure 14Namely, 50a and 50e, 50b and 50f, 50c and 50g, and 50d and 50h, respectively, are preferably illuminated in the same way, i.e., in the same color and with the same flashing frequency. Thus, the pattern can be discerned even by users standing obliquely in front of the emergency button 10, even if at least one of the opposing illuminated areas 50 is obscured by the actuating element 11.

[0301] To ensure that the light guide 40 is obscured as little as possible, the illumination area 32 protrudes at most 10 mm, preferably at most 7 mm, and particularly preferably at most 5 mm above the light guide 40.

[0302] The emergency button 10 can include a brightness sensor (not shown). The brightness sensor measures the ambient light level of the emergency button 10. If the ambient light level decreases, the luminous intensity of the light emitted by the light sources 41 is also reduced.

[0303] The Bluetooth module 64 allows parameters to be set via a mobile communication device, such as how the lights are to be controlled for each state of the safety system 1. These parameters include the flashing frequencies of the lights 41, whether a continuous or flashing light should be emitted, and which state should be indicated by which color. After parameterization, the settings are stored in an electronic memory of the safety system 1, specifically the control device 100. For safety reasons, the display of certain states can also be permanently disabled for the operator and stored in the electronic memory. The operator can select states of the safety system 1 that they wish to display via the lights 41. For this purpose, colors and / or patterns can be emitted by the lights 41 that are not predefined and not assigned to any specific state.For example, the operator can choose which status should be indicated by a blue light. In addition to parameterization via the Bluetooth module 64, parameterization via the monitoring device 301 is also possible.

[0304] The change in the state of the door lock 200 is displayed after the door lock control 201 has communicated the change in state to the control device 100. The control device 100 then controls the light sources 41 or initiates the control of the light sources 41.

[0305] During commissioning of the safety system 1, several initialization views are generated sequentially at fixed intervals by the light sources 41. One of these initialization views displays any enabled functions of the control device 100. A second initialization view displays the emergency buttons 10, 1010, 2010, 3010 and door locks 200, 1200, 2200, 3200 that can be integrated into the safety system 1, indicating their status as fault-free / faulty / not present. A third initialization view displays the status of the inputs and outputs.

[0306] The central emergency button 302 is constructed almost identically to the emergency button 10. In particular, the actuating element 11 corresponds in function and construction to the emergency button actuating element 306. The switch 63 corresponds to the emergency button switch 307. The central emergency button 302 also includes a reset mechanism corresponding to the reset mechanism 12. The central emergency button 302 comprises a first and a second circuit board and / or a mounting plate, which are constructed and connected to each other according to the first circuit board 60, the second circuit board 61, and the mounting plate 62, respectively. On the first circuit board of the central emergency button 302, the alarm transmitter 309 and the indicator lights 313 are arranged according to the alarm transmitter 23 and the indicator lights 41. On the second circuit board of the central emergency button 302, the first to third emergency processing units 303, 304, and 305 are arranged. The emergency button switch 307 terminates on the first circuit board of the central emergency button 302.When the emergency button 307 is activated, a first and a second circuit on the first circuit board are opened, which can be detected wirelessly by the first and second emergency processing units 303 and 304. For this purpose, the first and second circuit boards are connected via connectors. The light guide of the central emergency button 302 corresponds in structure and function to the light guide 40. The lamps 313 can be controlled in the same way as the lamps 41.

[0307] It is conceivable that the cover 13 corresponding to the cover 13 of the central emergency button 302 is designed differently or is missing. The light sources 313 do not serve, in particular, to visually indicate the locked state of an emergency button 10. The light sources 313 serve to visually indicate the first and second delay times and / or to visually indicate that release is possible.

[0308] The safety system 1 according to the invention does not necessarily have to have all the functions described in the description relating to at least one of the Figures 1 to 10 As mentioned, they can be executed. Rather, the functions described in the security system 1 are at least one of the Figuren 1 bis 10 The functions mentioned are stored. However, in order to execute the functions, they must be activated. This is done by the control device 100 communicating with a communication module 801. The communication module 801 is designed as a chip card. The communication module 801 includes a memory in which at least one code for activating at least one function is stored. The communication module 801 includes a microprocessor that serves only to encrypt the code. The communication module 801 is inserted into a receptacle 77 of the control device 100 (see figure). Fig. 18a The communication module 801 is mechanically held in the receptacle 77 by its arrangement in the receptacle 77, either by positive locking or frictional locking. Simultaneously, the communication module 801 is electrically contacted by the arrangement in the receptacle 77, enabling the control device 100 to read at least one code from the communication module 801. The control device 100 and the communication module 801 are wired (not shown).

[0309] To read the code, the control device 100 must first gain access to the communication module 801 using a password. The control device 100 must decrypt at least one code before the function can be activated. Activating the function unlocks the program code that makes the function executable.

[0310] To activate the function, the program code that makes the function executable is enabled. If the program code is stored on the emergency button 10 and the control device 100 and the emergency button 10 are connected via the first bus system 400, the control device 100, after reading the code from the communication module 801, initiates an activation in the emergency button 10 via the first bus system 400. If the program code is stored in the door locking control 201, the control device 100, after reading the code from the communication module 801, initiates an activation in the door locking control 201 via the first bus system 801.

[0311] A code can unlock one or more functions, especially function blocks.

[0312] In the parameterization program, only parameters for functions that have been previously enabled can be set. Only these parameters are displayed on the screen.

[0313] The function remains enabled only if the code is repeatedly read from the communication module 801, particularly at regular intervals. Predefined, non-adjustable time intervals can be stored in the control device 100 for this purpose. After the predefined time interval has elapsed, the control device 100 disables the function if the corresponding code could not be read from the communication module 801. If the function is activated by the emergency button 10, which is connected to the control device 100 via the first bus system 400, the control device 100 disables the function via the first bus system 400. If the function is activated by the door locking control 201, which is connected to the control device 100 via the first bus system 400, the control device 100 disables the function via the first bus system 400.

[0314] The 801 communication module can store multiple codes, Code1 and Code2, for different functions (see...). Fig. 18a ).

[0315] If an additional function is to be enabled, it is conceivable to remove the communication module 801 from slot 77 and insert another communication module 802 into slot 77 (see Fig. 18b The communication module 801 is referred to below as the master module 801. The additional communication module 802 is referred to below as the auxiliary module. The auxiliary module 802 is designed as a chip card. The auxiliary module 802 includes a memory in which at least one code for activating the additional function is stored. The auxiliary module 802 includes a microprocessor that serves only to encrypt the code.

[0316] The code Code3, which is stored on the auxiliary module 802, is read by the control device 100 (see Fig. 18b To read the code Code3, the control device 100 must first gain access to the auxiliary module 802 using a password. The control device 100 must decrypt at least one code before the function can be activated. The code Code3 of the auxiliary module 802 is stored in a memory 107 of the control device 100 (see...). Fig. 18c ). Afterwards, the code of the auxiliary module 802 is deleted on the auxiliary module 802 (see below). Fig. 18c The auxiliary module 802 is removed from slot 77. Then the main module 801 is inserted into slot 77 (see figure). Fig. 18d The code of the auxiliary module 802 is stored on the parent module 801 (see...). Fig. 18d ). The code is deleted from the memory of control device 100 (see below). Fig. 18d The additional function will be unlocked.

[0317] In contrast, with a master module 801, the code is not stored in the control device 100 (see below). Fig. 18a, d The code is not deleted on a master module 801. Rather, the master module 801 serves as a permanent arrangement in the receptacle 77. The codes Code1, Code2, Code3 stored on the master module 801 are read repeatedly. The control device 100 decides, based on an identifier K801, K802 of the communication module 801, 802, whether it is a master module 801 or an auxiliary module 802. The identifier K801, K802 is stored electronically on the master module 801 and the auxiliary module 802. The identifier K801 of the master module 801 differs from the identifier K802 of the auxiliary module 802.

[0318] Insertion and removal from slot 77 are performed manually. All other processes are automatic.

[0319] Insertion and removal from the receptacle 77 can be restricted to an operator. For this purpose, the receptacle 77 is positioned in a way that prevents unauthorized access. In particular, the tamper switch 66 is activated in the event of an unauthorized attempt to access the receptacle. The receptacle can be located between the first circuit board 60 and the second circuit board 61, for example, on the underside of the first circuit board 60.

[0320] For safety system 1 to become functional, a parent module 801 must be installed in a receptacle 77 of safety system 1. For safety system 1 to remain functional for longer than the specified time interval, the parent module 801 must remain in the receptacle 77.

[0321] Each emergency stop button 10, 10', 1010, 1010', 2010, 2010', 3010 comprises a receptacle 77. Exactly one master module 801 is necessary and provided for each first bus system 400, 400' of the safety system 1. Only when the master module 801 is inserted into the receptacle of an emergency stop button 10, 10', 1010, 1010', 2010, 2010', 3010 does the emergency stop button 10, 10', 1010, 1010', 2010, 2010', 3010 simultaneously serve as a control device 100 for the corresponding first bus system 400, 400'. The remaining emergency stop buttons 10, 10', 1010, 1010', 2010, 2010', 3010 of safety system 1, which do not contain a master module 801, have the same program codes stored as in the control device 100. However, without master module 801, the program codes are not activated, so the remaining emergency stop buttons 10, 10', 1010, 1010', 2010, 2010', 3010 cannot serve as control device 100.Because the mother module 801 is located in the receptacle 77, the emergency button 10, 10', 1010, 1010', 2010, 2010', 3010 serves as control device 100.

[0322] If the control device 100 is to be configured separately from the emergency buttons 10, 10', 1010, 1010', 2010, 2010', 3010 and the door locks 200, 200', 1200, 1200', 2200, 2200', 3200, a mother module 801 is inserted into a receptacle 77 of the processing electronics 101. Because the mother module 801 is located in the receptacle 77, the processing electronics 101 is able to perform the functions of the control device 100.

[0323] If the safety system 1 comprises several subsystems 5, 6 and thus several first bus systems 400, 400', then the safety system 1 comprises exactly the same number of parent modules 801, 801' as there are subsystems 5, 6 (see Figur 10 ). The emergency button 10', which communicates with the main module 801', and the processing electronics 101 of the control device 100 from Figur 10 , which communicate with the parent module 801, are also intended to be connected to the second bus system 401.

[0324] The master module 801, 801' can contain different codes for each subsystem 5, 6, thereby unlocking different functions. For example, the master module 801' of the second subsystem 6 can include a code for the selective assignment of door locks 200', 1200', 2200' to emergency buttons 10', 1010', 2010'. However, the code for selectively assigning door locks to emergency buttons on the master module 801 for subsystem 5 is not necessary.

[0325] The communication module 801, 801', 802 may have a slot 803 through which a self-adhesive strip is inserted. The self-adhesive strip serves to manually remove the communication module 801, 801', 802 from the receptacle 77. The self-adhesive strip contains information about the functions that can be activated by the codes stored on the respective communication module 801, 801', 802. The information may be a color code, a QR code, and / or a barcode.

[0326] Alternatively, the communication module 801, 801', 802 can be designed as a chip card with a flexible section. The part of the chip card protruding from the exception 77 can be provided with information, i.e., the color code, the QR code and / or the barcode.

[0327] A mother module 801 that has been used once in a safety system 1 can be used again in a receptacle 77 of another safety system 1 according to the invention.

Claims

1. A security system (1) for controlling and / or monitoring at least one door lock (200) for securing escape routes, comprising at least one trigger element (10), in particular an emergency button (10), and a door locking controller (201) for activating a locking mechanism (205), wherein the trigger element (10) and the door locking controller (201) are connected to one another via a first bus system (400), wherein the security system (1) comprises a control device (100), wherein the control device (100) is connected via the first bus system (400) to the trigger element (10) and / or to the door locking controller (201), wherein the control device comprises a first digital processing unit, a second digital processing unit and a third digital processing unit, wherein the first and second processing units are designed to carry out security-related functions, characterised in that the control device (100) is connected to a central unit (300, 301) via a second bus system (401), wherein the control device (100) is designed to relay at least one message from the central unit (300, 301) to at least one door locking controller (201) connected to the first bus system (400) and / or a trigger element (10) connected to the first bus system (400), wherein the first and second processing units are designed to receive a fire alarm signal, wherein, after receiving the fire alarm signal, the control device is designed to cause the door locking mechanism to be activated for unlocking purposes, wherein the third processing unit is designed to carry out non-security-related functions.

2. The security system (1) according to claim 1, characterised in that the control device (100) is configured to carry out at least one of the following functions, preferably a plurality of the following functions, particularly preferably all of the following functions: h. initiating an activation of or activating the door locking mechanism (205) for unlocking purposes after receiving a positive authentication signal, wherein the positive authentication signal can be received in particular via a bus input, i. initiating an activation of or activating the door locking mechanism (205) for unlocking purposes at a predefined time; j. preventing the activation of a further door locking mechanism (205) after activation of a first door locking mechanism (205) has taken place until there is a condition in such manner that an interlock is formed, k. initiating an activation of or activating the door locking mechanism (205) for automatic relocking purposes after lapsing of a predetermined time period, in particular after carrying out the functions h., i., and / or j. l. initiating an activation of or activating the locking mechanism (205) for automatic relocking purposes after receiving a signal regarding a closed state of the door, in particular after carrying out the functions h and / or j., wherein preferably the closed state of the door can be detected by at least one door state monitoring device (204, 206); m. initiating an activation of or activating an audible alarm transmitter (23) for emitting an alarm as a function of a signal of the door state monitoring device (204, 206) regarding the opening of the door, in particular when there is no authorisation to access the door; n. communicating via a radio module (64) preferably for parametrisation of the security system (100), wherein the parametrisation can preferably be performed via a mobile communication apparatus; o. initiating an activation of or activating an audible alarm transmitter (23) for emitting an audible alarm following an actuation of the trigger element (10) or after receiving a fire alarm signal, p. initiating an activation of or activating a display apparatus (41) for visually illustrating a locking state of the door lock (200), q. initiating an activation of or activating a display device (41) for visually illustrating the time-delayed activation of the door locking mechanism (205), in particular for unlocking purposes and in particular after actuating the trigger element (10); r. initiating an activation of or activating a display (41) for visually illustrating an alarm state, in particular following an actuation of the trigger element (10) or after receiving the fire alarm signal, s. initiating an emission of an audible and / or visual alarm, if relocking fails, in particular if the door remains open, which can be detected via the door state monitoring device, t. establishing and / or maintaining a communication connection (401, 403) between the control device (100) and the central unit; u. storing parameters and / or links for executing at least one of the functions h.) to t.) and / or v.), v. integrating at least one additional input and / or output of the control device (100) and / or a component, in particular a trigger element (10).

3. The security system (1) according to claim 1 or 2, characterised in that the control device (100) is integrated in the trigger element (10) or the door locking controller (201), or the control device (100) is connected to the trigger element (10) and the door locking controller (201) by way of the first bus system (400).

4. The security system (1) according to one of the preceding claims, characterised in that the control device (100) has knowledge of the state of the door lock (200) and / or the state of the trigger element (10) and / or of communication between the door locking controller (201) and the trigger element (10).

5. The security system (1) according to one of the preceding claims, characterised in that exactly one control device (100) is provided for the first bus system (400), wherein, in particular, a plurality of trigger elements (10, 1010, 2010, 3010) and / or a plurality of door locking controllers (200, 1200, 2200, 3200) are connected to the first bus system (400).

6. The security system (1) according to one of the preceding claims, characterised in that the security system (1) comprises a plurality of bus systems (400, 400'), each of which is connected to at least one trigger element (10, 10', 1010, 1010', 2010) and at least one door locking controller (201), wherein a control device (100), in particular exactly one control device (100), is provided for each of the plurality of bus systems (400, 400').

7. The security system (1) according to one of the preceding claims, characterised in that a message regarding at least one state of the door lock (200) or the trigger element (10) can be sent from the control device (100) to the central unit (300, 301) and / or the control device (100) relays messages from the trigger element (10) and / or the door locking controller (201) to the central unit (300, 301).

8. The security system (1) according to one of the preceding claims, characterised in that the control device (100) relays a security-related message from the central escape route controller (300) to all bus participants of the first bus system (400).

9. The security system (1) according to one of the preceding claims, characterised in that, following an actuation of a central emergency button (302), the control device (100) relays a message regarding the actuation of the central emergency button (302) to the door locking controller (201).

10. The security system (1) according to one of the preceding claims, characterised in that the trigger element (10) can be switched to a deactivated state by a central escape route controller (300), wherein, in the deactivated state, following an actuation of the trigger element (10), an activation of a locking mechanism (205) for unlocking purposes does not take place, and the trigger element (10) can be switched to an activated state by the central escape route controller (300), wherein, in the activated state, following an actuation of the trigger element (10), an activation of the locking mechanism (205) for unlocking purposes takes place, wherein, following an actuation of the central escape route controller (300) to activate or deactivate the trigger element (10), the control device (100) relays a message from the central escape route controller (300) to the trigger element (10).

11. The security system (1) according to claim 2, characterised in that a plurality of door locking controllers (201) and / or a plurality of trigger elements (10, 1010, 2010, 3010) are connected to the first bus system (400) and the door locking controllers (201) connected to the first bus system (400) and / or the trigger elements (10, 1010, 2010, 3010) connected to the first bus system (400) can be selectively informed for the control device (100) to carry out at least one of the functions h.), i.), k.), l.), m.), o.) to s.), v.) and / or the control device for carrying out at least one of the functions h.), i.), k.), l.), m.), o.) to s.), v.), a locking mechanism (205), a display apparatus (41), a display device (41), an apparatus connectable to the additional output, light-emitting means (41) and / or an audible alarm transmitter (23) can be selectively activated or an activation can be selectively initiated.

12. The security system (1) according to claim 11, characterised in that parameters and / or assignments for selectively carrying out the functions are stored in the control device (100), wherein the parameters, for example include or indicate for which authentication signal which locking mechanism (205) is to be activated in accordance with function h.), which locking mechanism (205) is to be activated at which time in accordance with function i.), which locking mechanisms (205) form part of an interlock in accordance with function j.), which locking mechanism (205) is to be activated after which time period in accordance with function k), for which locking mechanism (205) an activation in accordance with function l.) is permitted, for which door (2, 3, 4) monitoring takes place in accordance with function m.) and / or which audible alarm transmitters (23), display apparatuses (41) and / or display devices (41) are to be activated upon actuation of which trigger element (10).

13. The security system (1) according to one of the preceding claims, characterised in that the bus participants (10, 1010, 2010, 3010, 200, 1200, 2200, 3200) of the first bus system (400) each have a bus address, wherein the bus address can be set manually, e.g. via switches, wherein, in particular, bus participants (10, 1010, 2010, 3010, 200, 1200, 2200, 3200) with the same manual setting are assigned to one another.