Manual override opening of an electronic cabinet lock

Abstract

It is provided a method for enabling determining a time for a manual override opening of an electronic cabinet lock (101). The method being performed by the electronic cabinet lock (1). The method comprises: detecting (40) that a manual override opening of the electronic cabinet lock (1) has occurred; triggering (42) an elapsed-time clock (65) to run, such that the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock (1) was detected; and disabling (44) dormant state activation for the electronic cabinet lock (1). A corresponding electronic cabinet lock (1), computer program (67, 91) and computer program product (64, 90) are also provided.

Description

MANUAL OVERRIDE OPENING OF AN ELECTRONIC CABINET LOCKTECHNICAL FIELD

[0001] The present invention relates to the field of electronic security devices, particularly electronic cabinet locks.BACKGROUND

[0002] Electronic cabinet locks are used in various applications for securing cabinets and other storage units. These locks can be opened using an electronic key or e.g. using a PIN (Personal Identification Number). The electronic cabinet lock can enter a dormant state to conserve energy when not actively in use. The electronic cabinet lock can enter an active state when in communication with an electronic key, and can return to the dormant state when an inactivity timer expires. This saves power consumption, since the electronic cabinet lock is only actively used for a minute fraction of time. The electronic cabinet lock has no real-time clock since that would consume excessive amounts of power.

[0003] Some electronic cabinet locks have an ability to be opened using a manual override. This can, for instance, be of great value if the protected cabinet is a medicine cabinet for which there needs to be a way to open even if opening using an electronic key might not work. Such a manual override opening should be recorded and timestamped for auditing purposes.

[0004] Put in another way, a cabinet comprising an electronic lock can be used in various applications, for example to store medicines. Such lock can be opened in response to a main unlocking input, for example from an electronic key, in the form of a PIN (Personal Identification Number), or from a timer. In some types of cabinets, the lock can also be opened using an override element. By manually actuating the override element, an override unlocking input can be provided to unlock the lock independently of the main unlocking input. This type of opening of the cabinet may be useful in various emergency situations. Examples of such emergency situations are when a mobile phone for providing the electronic key is lost or discharged, when an application for the mobilephone to control unlocking does not work, and when a user suddenly needs access to the cabinet due to a changed medical condition.

[0005] However, how can the manual override opening be timestamped if the electronic cabinet lock has no real-time clock and is regularly in a dormant state? This limitation poses a significant challenge in security management, as it becomes difficult to track and audit manual override openings after such an event has occurred.SUMMARY

[0006] One object is to enable determining a time for a manual override opening of an electronic cabinet lock, even if the electronic cabinet lock is normally in a dormant state and has no real-time clock.

[0007] In some aspects, the embodiments described herein relate to a method for enabling determining a time for a manual override opening of an electronic cabinet lock. The method is performed by the electronic cabinet lock. The method comprises: detecting that a manual override opening of the electronic cabinet lock has occurred; triggering an elapsed-time clock to run, such that the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock was detected; and disabling dormant state activation for the electronic cabinet lock. The dormant state can be used to conserve energy.

[0008] In some aspects, the embodiments described herein relate to the method, further comprising: storing an override data item indicating the occurrence of the manual override opening.

[0009] In some aspects, the embodiments described herein relate to the method further comprises: communicating with a user device to provide a current reading of the elapsed-time clock and to provide the override data item; and enabling, based on the communicating, dormant state activation for the electronic cabinet lock.

[0010] In some aspects, the embodiments described herein relate to that the electronic cabinet lock is battery-powered.[oon] In some aspects, the embodiments described herein relate to that the elapsed-time clock is only triggered to run based on the detecting that a manual override opening has occurred.

[0012] In some aspects, the embodiments described herein relate to an electronic cabinet lock for enabling determining a time for a manual override opening of the electronic cabinet lock. The electronic cabinet lock comprises: processing circuitry; and memory circuitry storing instructions that, when executed by the processing circuitry, cause the electronic cabinet lock to: detect that a manual override opening of the electronic cabinet lock has occurred; trigger an elapsed-time clock to run, such that the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock was detected; and disable dormant state activation for the electronic cabinet lock.

[0013] In some aspects, the embodiments described herein relate to the electronic cabinet further comprising instructions that, when executed by the processing circuitry, cause the electronic cabinet lock to: store an override data item indicating the occurrence of the manual override opening.

[0014] In some aspects, the embodiments described herein relate to the electronic cabinet lock further comprising instructions that, when executed by the processing circuitry, cause the electronic cabinet lock to: communicate with a user device to provide a current reading of the elapsed-time clock and to provide the override data item; and enable, based on the communicating, dormant state activation for the electronic cabinet lock.

[0015] In some aspects, the embodiments described herein relate to the electronic cabinet further comprising a battery, wherein the electronic cabinet lock is powered by the battery.

[0016] In some aspects, the embodiments described herein relate to that the elapsed-time clock is only triggered to run based on the detecting that a manual override opening has occurred.

[0017] In some aspects, the embodiments described herein relate to a computer program for enabling determining a time for a manual override opening of the electronic cabinet lock. The computer program comprises computer program code which, when executed on an electronic cabinet lock causes the electronic cabinet lock to: detect that a manual override opening of the electronic cabinet lock has occurred; trigger an elapsed-time clock to run, such that the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock was detected; and disable dormant state activation for the electronic cabinet lock.

[0018] In some aspects, the embodiments described herein relate to a computer program product comprising the computer program and a computer readable means comprising non-transitory memory in which the computer program is stored.

[0019] In prior art cabinets comprising an electronic lock and an override element, it is not immediately apparent whether the override element has been operated to unlock the cabinet.

[0020] One object of the invention is to provide an improved cabinet.

[0021] This object is achieved by the cabinet according to appended claim 13.

[0022] The invention is based on the realization that by providing a cabinet comprising a lock including an override element, and a tamper-evident element protecting access to the override element, the tamper-evident element can be tampered with to access the override element and a visual appearance of the cabinet can be changed by the tampering.

[0023] According to a first aspect, there is provided a cabinet comprising an enclosure including a housing, and an access member movable relative to the housing between a closed position and an open position; a lock configured to lock the access member in the closed position and including an override element for being triggered to unlock the lock; and a tamper-evident element protecting access to the override element.

[0024] Due to the override element and the tamper-evident element, an emergency opening functionality is provided for the cabinet. In order to access the override element to trigger unlocking of the lock, a user may tamper with the tamper-evident element. By such tampering, the tamper-evident element may for example change from a nontampered state to a tampered state. A human user can thereby clearly judge, based on the visual appearance of the cabinet due to the tampered state of the tamper-evident element, that the lock has been unlocked using the override element.

[0025] The lock may be configured to unlock the access member in the closed position in response to a main unlocking input, and optionally to lock the access member in the closed position in response to a main locking input. As an alternative to the main locking input, the access member may be locked automatically by the lock by closing the access member. The triggering of the override element provides an override unlocking input, different from the main unlocking input, to unlock the lock. The lock can thus be independently actuated to unlock based on main unlocking input and override unlocking input.

[0026] The lock may be an electronic lock. In these cases, the cabinet may be referred to as a digital cabinet and the main unlocking and locking inputs maybe digital, e.g., from a keypad on the cabinet, or from a mobile phone, a remote control or other type of external device. Alternatively, the lock maybe a mechanical lock, e.g., operated by a mechanical key providing mechanical main unlocking and locking inputs.

[0027] Once the lock has been unlocked by triggering the override element, the lock can again be locked, e.g., by the main locking input or by closing the access member, and again be unlocked by the main unlocking input. The cabinet thus function as intended in this respect also after triggering of the override element.

[0028] The tampered state of the tamper-evident element may for example be a deformed state. When the tamper-evident element adopts the tampered state, a visual appearance of the cabinet, e.g., from an exterior region outside of the cabinet, may change. An easy recognition of a changed visual appearance indicating that an emergency opening has taken place is valuable for tracking and auditing purposes, which are not described in greater detail herein.

[0029] According to some examples, the tamper-evident element is visible from the exterior region in the non-tampered, but not in the tampered state. According to some further examples, the tamper-evident element is visible from the exterior region in the tampered state, but not in the non-tampered state. According to some further examples, the tamper-evident element is visible from the exterior region in both the non-tampered and tampered states. In these cases, tampering of the tamper-evident element can be concluded if the tampered state clearly differs from the non-tampered state, for example by an irreversible tearing of the tamper-evident element, such as a seal. According to some further examples, tampering of the tamper-evident element causes a secondary component of the cabinet to indicate tampering. For example, a secondary component in the form of a lid maybe possible to close when the tamper-evident element adopts the non-tampered state, but not when the tamper evident element adopts the tampered state. Such lid may for example be a lid to a battery compartment containing a battery for electrically powering the lock. The lid maybe spring -biased towards an open position.

[0030] The tamper-evident element may for example be tampered from the nontampered state to the tampered state by hand, or by using an ordinary tool, such as a pen, a screwdriver, or a physical key not associated with the cabinet. In some examples, the same tool used for tampering with the tamper-evident element can be used to trigger, e.g., contact and move, the override element. When the tool is used to trigger the override element, the tool may be referred to as a trigger element.

[0031] In some further examples, the cabinet comprises a built-in trigger element for triggering the override element. In these cases, the tamper-evident element may protect access to the trigger element to thereby also protect access to the override element. In any case, the override element maybe triggered without needing any special tool separate from the cabinet.

[0032] The access member may for example be a door. The access member may be rotatable relative to the housing between the closed position and the open position. The lock may comprise a latch for locking the access member. The latch may be positioned in a locked position and an unlocked position when the lock is locked and unlocked, respectively. Alternatively, the latch may adopt a blocked state and an unblocked statewhen the lock is locked and unlocked, respectively. In any case, the latch may engage the access member, such as an engageable feature thereof, when the access member is closed and the lock is locked.

[0033] The tamper-evident element may be secured to the enclosure, e.g., to the housing or to the access member. This variant enables easy restoration of the tamper evidence of the cabinet by replacing the tamper-evident element with a new tamper- evident element. Moreover, the tamper-evident element can thereby be robustly maintained in the non-tampered state even though being subjected to vibrations, e.g., during transportation of the cabinet. Some cabinets are frequently transported between different users.

[0034] The housing may comprise a top side, a bottom side, a left-hand side, a righthand side and a back side. In these cases, the tamper-evident element may be secured to any of the left hand side and the right-hand side.

[0035] The tamper-evident element may be secured to an inside of the enclosure.

[0036] The tamper-evident element may be deformable. The tamper-evident element may be permanently or temporarily deformable. In case of permanent deformation, the tamper-evident element may break, e.g., into two or more parts.

[0037] The tamper-evident element may be visible from an exterior region with respect to the cabinet. The tamper-evident element may be visible from an exterior region in one or both of the non-tampered state and the tampered state.

[0038] The cabinet may comprise an opening in the enclosure through which the override element can be triggered by a trigger element. In these cases, the tamper- evident element may cover the opening.

[0039] The tamper-evident element may comprise a deformable plate. Alternatively, the tamper-evident element may comprise a deformable bolt or a deformable plug.

[0040] The plate may be positioned along a straight line from the opening to the override element.

[0041] The plate may comprise a fixed section fixed to the enclosure, and an actuation section aligned with the opening. The plate may comprise a weakened section between the fixed section and the actuation section. The weakened section may provide a hinge between the fixed section and the actuation section, such as a living hinge. Alternatively, the actuation section may be configured to break off from the fixed section at the weakened section.

[0042] The actuation section and a section of the enclosure adjacent to the opening may have a common color. For example, in case the actuation section covers the opening in the non-tampered state and is removed from the opening in the tampered state, there may be a clear contrast between the opening not covered by the tamper- evident element and the section of the enclosure adjacent to the opening. The color may for example be a light color, such as white or light gray.

[0043] The plate maybe made of a sheet material, such as of sheet metal. Alternatively, or in addition, the plate may be made of metal or plastic.

[0044] The plate may have a thickness of 0.5 mm to 1.5 mm, such as 1 mm.

[0045] The cabinet may comprise an elongated support element fixed to the enclosure. In these cases, the plate may comprise a through hole receiving the support element. The support element maybe a bolt. The plate maybe fixed to the enclosure by a locking nut threadingly engaging the support element.

[0046] A protruding length of the support element from the enclosure may be at least twice the thickness of the plate. In this way, two or more plates can be provided on the support element, e.g., between the enclosure and the locking nut. In this way, the emergency opening functionality can be disabled.

[0047] Generally, all terms used in the claims are to be interpreted according to their ordinary meaning in the technical field, unless explicitly defined otherwise herein. All references to "a / an / the element, apparatus, component, means, step, etc." are to be interpreted openly as referring to at least one instance of the element, apparatus, component, means, step, etc., unless explicitly stated otherwise. The steps of anymethod disclosed herein do not have to be performed in the exact order disclosed, unless explicitly stated.BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Aspects and embodiments are now described, by way of example, with reference to the accompanying drawings, in which:

[0049] Fig 1 is a schematic diagram showing an environment in which embodiments presented herein can be applied;

[0050] Fig 2 is a schematic diagram illustrating components of the electronic cabinet lock of Fig 1;

[0051] Fig 3 is a schematic graph illustrating state changes in the electronic cabinet lock of Fig 1;

[0052] Fig 4 is a flow chart illustrating embodiments of methods for enabling determining a time for a manual override opening of an electronic cabinet lock;

[0053] Fig 5 shows one example of a computer program product comprising computer readable means;

[0054] Fig 6 schematically represents a perspective view of a pen, a mobile phone, and a cabinet when a door is locked in a closed position;

[0055] Fig 7 schematically represents a perspective view of the cabinet when the door is in an open position;

[0056] Fig 8 schematically represents a partial and partially cross-sectional perspective view of the cabinet;

[0057] Fig 9 schematically represents a partial interior view of the cabinet showing a plate therein;

[0058] Fig 10 schematically represents a partial cross-sectional side view of the cabinet when the plate is in a non-tampered state;

[0059] Fig11schematically represents a partial cross-sectional side view of the cabinet when the plate is in a tampered state;

[0060] Fig 12 schematically represents a side view of a cabinet according to a further example;

[0061] Fig 13 schematically represents a perspective view of a trigger element;

[0062] Fig 14 schematically represents a partial side view of the cabinet in Fig 12;

[0063] Fig 15 schematically represents a partial perspective view of a cabinet according to a further example;

[0064] Fig 16 schematically represents a side view of a plate according to a further example;

[0065] Fig 17 schematically represents a partial perspective view of the cabinet in Fig 15;

[0066] Fig 18 schematically represents a partial cross-sectional side view of a cabinet according to a further example when a plate according to a further example is in a tampered state;

[0067] Fig 19 schematically represents a side view of a cabinet according to a further example when a tamper-evident bolt is in a non-tampered state;

[0068] Fig 20 schematically represents a partial cross-sectional top view of the cabinet in Fig 19;

[0069] Fig 21 schematically represents a side view of a cabinet according to a further example when a tamper-evident plug is in a non-tampered state; and

[0070] Fig 22 schematically represents a partial cross-sectional top view of the cabinet in Fig 21.DETAILED DESCRIPTION

[0071] The aspects of the present disclosure will now be described more fully hereinafter with reference to the accompanying drawings, in which certain embodiments of the invention are shown. These aspects may, however, be embodied in many different forms and should not be construed as limiting; rather, these embodiments are provided by way of example so that this disclosure will be thorough and complete, and to fully convey the scope of all aspects of invention to those skilled in the art. Like numbers refer to like elements throughout the description.

[0072] According to embodiments presented herein, a solution is presented for enabling determining a time for a manual override opening of an electronic cabinet lock, that does not rely on a constantly running clock. Specifically, when a manual override opening is detected, an elapsed-time clock is triggered to run. Additionally, the electronic cabinet lock is prevented from assuming a dormant state, at least until communication with a user device has occurred. When a user device eventually arrives and communicates with the electronic cabinet lock, a reading of the elapsed-time clock is communicated to the user device as an elapsed-time indicator. The user device can then calculate when the manual override opening occurred by subtracting the elapsed- time indicator from a current time obtained from a real-time clock (of the user device or other source). Once the elapsed-time indicator has been communicated, the electronic cabinet lock can again be enabled to return to the dormant state. In this way, in normal use, the electronic cabinet lock can be in a default dormant state, except for when the electronic cabinet lock needs to be active, e.g. for access evaluation. Still, the time of the manual override opening can be derived by using the elapsed-time indicator and temporary disabling of dormant state activation.

[0073] Fig 1 is a schematic diagram showing an environment in which embodiments presented herein can be applied. Access to a cabinet no is restricted by a cabinet door which is selectively unlockable using an electronic cabinet lock 101. The electronic cabinet lock 101 can be provided in the cabinet door or a part of the cabinet 110 that surrounds the cabinet door. The electronically controllable lock 101 is controllable to be in a locked state or in an unlocked state.

[0074] A user 105 carries an electronic key 102. The electronic key 102 is a user device that can be in any suitable format that enables communication with the electronic cabinet lock 101. For instance, the electronic key 102 can be embedded in a smartphone, or the electronic key 102 can be in the form of a key fob, a key card, a hybrid mechanical / electronic key. Based on communication with the electronic key 102, the electronic cabinet lock 101 evaluates whether to grant access, in which case the electronic cabinet lock 101 sets itself in an unlocked state, enabling the user 105 to open the cabinet.

[0075] The electronic cabinet lock 101 is battery-powered and thus needs to be power efficient. For this reason, the electronic cabinet lock 101 can normally be in a dormant state, in which no, or negligible, amount of power is consumed. When the electronic key 102 arrives and starts communicating with the electronic cabinet lock 101, the electronic cabinet lock 101 transitions to an active state. In the active state, the electronic cabinet lock 101 can communicate with the electronic key 102, evaluate access, and control its unlocked / locked state.

[0076] The electronic key 102 is, at least part of the time, connected to a communication network 107, which can be an internet protocol (IP) based network. The communication network 107 can e.g. comprise any one or more of a local wireless network, a cellular network, a wired local area network, a wide area network (such as the Internet), etc. A server 103 is also connected to the communication network 107.

[0077] The interaction between the electronic key 102 and the electronic cabinet lock 101 can be recorded in data records in the electronic key 102 and be communicated to the server 103. Optionally, such data records are signed and / or encrypted by the electronic cabinet lock 101, to allow the server 103 to trust the authenticity of such records.

[0078] As explained in more detail below, the electronic cabinet lock 101 is provided with a manual override opening function. This can e.g. be useful if the cabinet no is a medicine cabinet and it should be possible to perform an emergency opening of the cabinet 110 if there is a problem with opening the cabinet 110 using an electronic key 102. In such a case, it is more important that there is an emergency opening possibilitythan that the cabinet is completely secure. Nevertheless, when a manual override opening occurs, this is recorded and logged for auditing purposes. As explained in more detail below, in order to be able to derive a time of the manual override opening, when this occurs, the electronic cabinet lock 101 triggers an elapsed-time indicator to run and prevents the electronic cabinet lock 101 from assuming the dormant state.

[0079] Fig 2 is a schematic diagram illustrating components of the electronic cabinet lock 101 of Fig 1. Processing circuitry 160 is provided using any combination of one or more of a suitable central processing unit (CPU), graphics processing unit (GPU), multiprocessor, neural processing unit (NPU), microcontroller, digital signal processor (DSP), etc., capable of executing software instructions 167 stored in memory circuitry 164, which can thus be a computer program product. The processing circuitry 160 could alternatively be implemented using an application specific integrated circuit (ASIC), field programmable gate array (FPGA), etc. The processing circuitry 160 can be configured to execute the method described with reference to Fig 4 below.

[0080] The memory circuitry 164 can be any combination of random-access memory (RAM) and / or read-only memory (ROM). The memory circuitry 164 also comprises non-transitory persistent storage, which, for example, can be any single one or combination of magnetic memory, optical memory, or solid-state memory.

[0081] A data memory 166 is also provided for reading and / or storing data during execution of software instructions in the processing circuitry 160. The data memory 166 can be any combination of RAM and / or ROM.

[0082] The electronic cabinet lock 101 further comprises an 1 / O interface 162 for communicating with external and / or internal entities, such as with the electronic key 102. The I / O interface 162 comprises an input device (e.g. reset button / pushbutton) for manual override opening, which, when activated, sets the electronic cabinet lock 101 in an unlocked state. This can be an electronic opening of the electronic cabinet lock 101 or a mechanical override of the electronic control. When the input device is triggered, this causes the electronic cabinet lock 101 to enter the active state and perform processing as described in more detail below.

[0083] A battery 169 provides power to the electronic cabinet lock 101. The battery 69 can be a primary (non-chargeable) battery or a secondary (rechargeable) battery.

[0084] An elapsed-time clock 165 is provided to provide elapsed-time indications from when it was triggered to run. The function of the elapsed-time clock 165 is similar to a stopwatch. The elapsed-time clock 165 can be implemented using hardware and / or software. The elapsed-time clock 165 measures the duration since the elapsed-time clock 165 was triggered to run, yielding the elapsed-time indication. The elapsed-time indication can be in a human-understandable unit, such as milliseconds or seconds, or the elapsed-time indication can be in an arbitrary clock cycle unit, that is convertible using a fixed factor to a human-understandable unit.

[0085] Other components of the electronic key 102 are omitted in order not to obscure the concepts presented herein.

[0086] Fig 3 is a schematic graph illustrating state changes in the electronic cabinet lock 101 of Fig 1. The horizontal axis indicates time, and the vertical axis indicates a state120 of the electronic cabinet lock 101. A scenario with two normal interactions and one manual override opening will now be described with reference to Fig 3.

[0087] The electronic cabinet lock 101 starts in the dormant state 122. At time ti, an electronic key 102 arrives and initiates communication with the electronic cabinet lock 101, at which point the electronic cabinet lock 101 transitions to the active state 121 to evaluate access and control the locked / unlocked state of the electronic cabinet lock 101 appropriately. After an inactivity timeout expires, indicating a period of non-activity, the electronic cabinet lock 101 reverts to (its default) dormant state 122 at time t2. This procedure repeats at time t3, when the electronic cabinet lock 101 enters the active state121 due to communication with an electronic key 102, and at time t4, when the electronic cabinet lock 101 returns to the dormant state 122 after an inactivity timeout expires.

[0088] At time t5, the electronic cabinet lock 101 detects that a manual override opening of the electronic cabinet lock 101 has occurred, resulting in the electronic cabinet lock 101 assuming the active state 121. At this stage, the possibility to return to the dormant state 122 is (at least temporarily) deactivated, whereby the electroniccabinet lock 101 remains in the active state 121 for a prolonged period. This can be implemented by a so-called power-hold circuit, which ensures power supply to the electronic cabinet lock until explicit deactivation.

[0089] During this time, the elapsed-time clock 165 is activated and measures the time elapsed since when the manual override opening occurred, i.e. since time t5. At time te, an electronic key 102 arrives and engages in communication with the electronic cabinet lock 101, allowing the electronic key 102 to read an elapsed-time indicator from the elapsed-time clock 165. In this way, the electronic key 102 can derive the point in time that the manual override opening was detected. After this communication, the possibility to return to the dormant state is reactivated, e.g. by deactivating the powerhold circuit. At time t7, the electronic cabinet lock 101 returns to the dormant state 122 after an inactivity timeout expires.

[0090] Fig 4 is a flow chart illustrating embodiments of methods for enabling determining a time for a manual override opening of an electronic cabinet lock 101. The method is performed by the electronic cabinet lock. This method enhances the security and monitoring capabilities of the electronic cabinet lock by enabling the determination of time for a manual override event, without requiring a constantly running real-time clock (RTC). The electronic cabinet lock 101 can be battery-powered, greatly improving flexibility of where the electronic cabinet lock 101 can be installed.

[0091] In a detect manual override opening step 140, the electronic cabinet lock 101 detects that a manual override opening of the electronic cabinet lock 101 has occurred. This detection can be achieved through the use of internal sensors in the electronic cabinet lock 101 that are configured to recognise actions indicative of a manual override opening. Alternatively, the detection is achieved by reading a signal that is generated when the manual override opening. In one embodiment, the manual override opening is performed by means of a mechanical key. In other words, if the electronic opening needs to be circumvented, a manual key can be used to open the electronic cabinet lock 101, thereby implementing the manual override opening.

[0092] In one embodiment, a first signal is generated with movement occurs inside the lock, e.g. by a latch or bolt, and a second signal is generated when a valid electronicopening of the electronic cabinet lock 101 occurs. When there is presence of the first signal without presence of the second signal, it is determined that a manual override opening is indicated. This will i.a. catch the case with the mechanical-key based manual override opening.

[0093] Optionally, at this stage, communication can be initiated by the electronic cabinet lock 101 to attempt to communicate with any nearby user devices. If this succeeds, i.e. the person that performs the manual override opening carries a user device that is capable of communicating with the electronic cabinet lock 101, an identity of the user device can be recorded for auditing purposes.

[0094] In a trigger elapsed time clock step 142, the electronic cabinet lock 101 triggers an elapsed-time clock 165 to run. In this way, the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock 101 was detected. Optionally, the elapsed-time clock 165 is only triggered to run based on the detecting 140 that a manual override opening has occurred. As explained above, the elapsed-time clock 165 is an integral software and / or hardware component that records duration since the manual override event.

[0095] In a disable dormant state activation step 144, the electronic cabinet lock 101 disables dormant state activation for the electronic cabinet lock 101. By preventing the electronic cabinet lock 101 to enter the dormant state, the elapsed-time clock 165 can keep running without being shut off due to the electronic cabinet lock 101 assuming the dormant state. In this way, the elapsed-time clock 165 keeps an accurate indication of the duration since the manual override opening of the electronic cabinet lock 101.

[0096] In an optional store override data item step 146, the electronic cabinet lock 101 stores an override data item indicating the occurrence of the manual override opening. Optionally, if available, the data item comprises an identity of a user device that is nearby when the manual override opening i detected. The override data item can be in any suitable format. At this stage, the override data item does not have a timestamp since the electronic cabinet lock 101 does not comprise a real-time clock.

[0097] In an optional communicate with user device step 148, the electronic cabinet lock 101 communicates with a user device to provide a current reading of the elapsed- time clock and to provide the override data item. The user device can then process this information, for instance for security audits. The user device can be an electronic key 102, for instance in the form of a smartphone, etc. as explained above. The user device can calculate a timestamp indicating when the manual override opening occurred by subtracting the elapsed-time indicator from a current time obtained from a real-time clock (of the user device or other source). The data item can be complemented with the timestamp. The user device can issue an alert of the manual override opening, including the time when it occurred. The alert can comprise a notification on the user device itself and / or a signal to the server 103 indicating the manual override opening.

[0098] In an optional enable dormant state activation step 150, the electronic cabinet lock 101 enables, based on the communicating having occurred in step 148, dormant state activation for the electronic cabinet lock 101. This signifies the end of the event monitoring phase and the return of the lock to its standard energy-efficient operation. The activation of the dormant state can be conditional, relying on successful transmission of the elapsed-time and override data to the user device.

[0099] Using embodiments presented herein, the time of the manual override opening can be derived even though the electronic cabinet lock 101 does not comprise a real-time clock. This provides a more secure and reliable auditing of such events, preventing frivolous or other excessive use of the manual override opening. Significantly, the normal operation with the default dormant state of the electronic cabinet lock 101 is unaffected and the electronic cabinet lock 101 remains extremely power efficient.

[0100] Fig 5 shows one example of a computer program product 190 comprising computer readable means. On this computer readable means, a computer program 191 can be stored in a non-transitory memory. The computer program can cause processing circuitry to execute a method according to embodiments described herein. In this example, the computer program product 190 is in the form of a removable solid-state memory, e.g. a Universal Serial Bus (USB) drive. As explained above, the computer program product could also be embodied in a memory of a device, such as the computerprogram product 164 of Fig 2. While the computer program 191 is here schematically shown as a section of the removable solid-state memory, the computer program can be stored in any way which is suitable for the computer program product, such as another type of removable solid-state memory, or an optical disc, such as a CD (compact disc), a DVD (digital versatile disc) or a Blu-Ray disc.

[0101] In the following, a cabinet comprising a tamper-evident element will be described. The same or similar reference numerals will be used to denote the same or similar structural features.

[0102] Fig 6 schematically represents a perspective view of a cabinet 10a. The cabinet 10a comprises an enclosure 12 including a housing 14 and a door 16. The door 16 is one example of an access member according to the present disclosure. In Fig 6, the door 16 is in a closed position 18. The cabinet 10a further comprises a lock (not shown) for locking the door 16 in the closed position 18.

[0103] The cabinet 10a can for example be used to store medicines for a particular person. The cabinet 10a may for example be located in a home of a person receiving home care, such as an elderly person, a care home or a hospital.

[0104] The housing 14 of this specific and non-limiting example is rectangular and comprises a top side 20, a bottom side 22, a left-hand side 24, a right-hand side 26 and a back side 28. The housing 14 here further comprises two hinges 30 supporting rotation of the door 16 relative to the housing 14 around a rotation axis 32. In this example, the rotation axis 32 is vertically oriented. The rotation axis 32 may however be oriented arbitrarily in space, such as in a horizontal orientation parallel with the top side 20 and the bottom side 22. The housing 14 of this example comprises an opening 34a, here exemplified as a through hole in the left-hand side 24.

[0105] The cabinet 10a further comprises a plate 36a. The plate 36a is one example of a tamper-evident element according to the present disclosure. The plate 36a is here positioned inside of the housing 14 and covers the opening 34a. The plate 36a is thus visible from an exterior region 38 with respect to the cabinet 10a through the opening 34a. In this example, both the plate 36a and the housing 14 are of a common light color,here white. It can thereby readily detected should the plate 36a not be visible through the opening 34a.

[0106] The cabinet 10a of this specific example further comprises a lid 40 for closing a battery compartment. The lid 40 here forms part of the enclosure 12. The battery compartment contains one or more batteries for electrically powering the lock, which is an electronic lock in this example. The lid 40 can be opened after unthreading a lid bolt 42, here threadingly engaging the left-hand side 24 of the housing 14. In some examples, the cabinet 10a comprises a spring (not shown) that forces the lid 40 to open once the lid bolt 42 is removed.

[0107] Fig 6 further shows a pen 44a. The pen 44a is one example of a trigger element according to the present disclosure. The pen 44a can be used to provide an override unlocking input to the lock as described herein, here through the opening 34a.

[0108] Fig 6 further shows a mobile phone 46. The mobile phone 46 is one example of an external device according to the present disclosure. The mobile phone 46 can provide a wireless main unlocking input 48 to the lock in response to which the lock unlocks the cabinet 10a such that the door 16 can be opened or such that the door 16 is automatically opened, e.g., by one or more springs in the hinges 30. Such unlocking of a cabinet is previously known as such.

[0109] Fig 7 schematically represents a perspective view of the cabinet 10a. Fig 7 shows the lock 50 inside of the housing 14. In Fig 7, the door 16 has moved from the closed position 18 to an open position 52 after the lock 50 has been unlocked in response to the main unlocking input 48.

[0110] The lock 50 is configured to lock the door 16 in the closed position 18. Fig 7 shows that the lock 50 of this example comprises a latch 54. Moreover, the door 16 of this example comprises an engageable feature 56. The engageable feature 56 is engaged and locked by the latch 54 when the door 16 is in the closed position 18 and the lock 50 is locked.

[0111] Fig 7 further shows two plate bolts 58 secured to the housing 14, here to the left-hand side 24. The plate bolts 58 are examples of elongated support elementsaccording to the present disclosure. As can be gathered from Fig 6, the plate bolts 58 do not pass through the housing 14. Rather, the plate bolts 58 are fixed to an inside 60 of the housing 14. The plate 36a is supported on the plate bolts 58. A locking nut (not shown in Fig 7) may be added and threadingly engage each plate bolt 58 to fix the plate 36a.

[0112] Fig 8 schematically represents a partial and partially cross-sectional perspective view of the cabinet 10a. The lock 50 further comprises an override element 62. As shown, the plate 36a protects access to the override element 62.

[0113] By triggering the override element 62, the lock 50 can be unlocked. For example, when the override element 62 is moved downwards, the latch 54 is caused to move to an unlocked position or to adopt an unblocked state to thereby enable or cause opening of the door 16. The lock 50 comprising the override element 62 is commercially available and thus previously known as such.

[0114] Fig 8 further shows that the plate 36a is positioned along a straight line 64 from the override element 62 to the opening 34a.

[0115] Fig 9 schematically represents a partial interior view of the cabinet 10a. In Fig 9, the plate 36a is shown in more detail. The plate 36a is deformable from an illustrated non-tampered state 66 to a tampered state.

[0116] The plate 36a of this example comprises a fixed section 68a fixed to the housing 14, here the left-hand side 24 thereof. The fixed section 68a comprises two through holes 70 through which a respective plate bolt 58 is received. The plate 36a of this example further comprises an actuation section 72a covering the opening 34a. The plate 36a of this example further comprises a weakened section 74a between the fixed section 68a and the actuation section 72a. The weakened section 74a here has a smaller width than each of the fixed section 68a and the actuation section 72a. When a force acts on the actuation section 72a, bending of the plate 36a is initiated at the weakened section 74a. The weakened section 74a of this example thus provides a living hinge in the plate 36a for deformation of the plate 36a.

[0117] The plate 36a of this example is flat and made of sheet metal, such as steel of the grade DC01. Fig 9 shows a thickness 76 of the plate 36a. The thickness 76 is in this example 1 mm. A protruding length 78 of each plate bolt 58 from the housing 14 is more than twice as large as the thickness 76 enabling two plates 36a to be supported on the plate bolts 58 while also enabling respective locking nuts to be threaded on the plate bolts 58 and to secure the two plates 36a.

[0118] Fig 10 schematically represents a partial cross-sectional side view of the cabinet 10a. The plate 36a is in the non-tampered state 66. Fig 10 shows a locking nut 80a threadingly engaging the plate bolt 58 and thereby fixing the plate 36a to the housing 14. In this way, the plate 36a can remain securely fixed to the housing 14 even if the cabinet 10a is subjected to vibrations, such as during transportations.

[0119] Fig 11 schematically represents a partial cross-sectional side view of the cabinet 10a. In Fig 11, the pen 44a is manipulated by a human user and inserted into the opening 34a. By pushing the pen 44a into the opening 34a, the pen 44a contacts the plate 36a such that the plate 36a bends and is thereby tampered with. In this example, the pen 44a contacts and pushes the actuation section 72a such that the actuation section 72a bends relative to the fixed section 68a at the weakened section 74a. The plate 36a is thereby deformed from the non-tampered state 66 to a tampered state 82. By forming the weakened section 74a differently, e.g., by slots or made narrower, the plate 36a can be designed such that the actuation section 72a breaks off from the fixed section 68a in the tampered state 82.

[0120] The override element 62 can now be triggered by the pen 44a. As shown, the override element 62 is contacted and moved by the pen 44a (downwards in Fig 11) to provide an override unlocking input 84. In response to the override unlocking input 84, the lock 50 is unlocked. When the pen 44a is retracted out from the exterior region 38, the plate 36a remains in the tampered state 82. In the tampered state 82, the plate 36a is not visible through the opening 34a from the exterior region 38. The plate 36a thereby provides a clear tamper evidence and the visual appearance of the cabinet 10a is changed. It can thereby readily and intuitively be detected that an emergency opening of the cabinet 10a has been performed. Thus, the deformation of the plate 36a provides a tamper evidence that is clearly visible from the exterior region 38. The plate 36a thusprovides two effects in combination, namely enabling access to the override element 62 and indicating that the override element 62 has been triggered.

[0121] An instruction as to how to use the pen 44a or similar tool to emergency opening the cabinet 10a may for example be provided in an application of the mobile phone 46, or may be provided by a call center providing support for the cabinet 10a.

[0122] By using an ordinary tool, such as the pen 44a, to trigger the override element 62, valuable time can be saved in an emergency situation. That is, only time has to be spent to find any suitable elongated ordinary tool, such as the pen 44a, rather than a special tool dedicated to the particular cabinet 10a. Moreover, in case a particular key should be needed to trigger the override element 62, the key may be lost and administration of such keys is required, which also adds costs.

[0123] The plate 36a may be either permanently deformed or temporarily deformed from the non-tampered state 66 to the tampered state 82. In this example, the plate 36a is temporarily deformed from the non-tampered state 66 to the tampered state 82. Once the plate 36a has adopted the tampered state 82, the plate 36a may either be replaced by another plate 36a, or restored. The plate 36a can be replaced from the interior of the cabinet 10a. Since the plate 36a is made of a sheet material, the plate 36a is relatively cheap. Alternatively, the plate 36a can be restored from the tampered state 82, e.g., bent back to the non-tampered state 66 using a hammer outside of the cabinet 10a. In case the plate 36a is permanently deformed, the plate 36a maybe referred to as a sacrificial plate. In any case, the cabinet 10a enables a very cost-efficient handling of emergency openings. Moreover, when the plate 36a is in the tampered state 82, the lock 50 can still be unlocked in response to the main unlocking input 48.

[0124] By securing two identical plates 36a to the plate bolts 58, the two plates 36a will be too strong to bend in common, e.g., using the pen 44a. In this way, the emergency functionality can also be disabled easily and in a cost-efficient manner. Alternatively, a plate without weakened section between the fixed section 68a and the actuation section 72a can be used for this purpose. As a further example, a plate having a larger thickness 76 than the plate 36a can be used for this purpose.

[0125] Fig 12 schematically represents a side view of a cabinet 10b according to a further example. Mainly differences with respect to the cabinet 10a will be described. The cabinet 10b of this example does not comprise the plate 36a and the opening 34a. Instead, the cabinet 10b comprises a tearable seal 36b glued over the lid bolt 42 and over parts of the lid 40 and the housing 14. The seal 36b may for example be made of plastic.

[0126] By tearing the seal 36b, the lid bolt 42 can be accessed to open the lid 40. The tearing of the seal 36b is clearly visible from the exterior region 38. The seal 36b is thus a further example of a tamper-evident element according to the present disclosure.

[0127] Fig 13 schematically represents a perspective view of a trigger element 44b according to a further example. The cabinet 10b comprises the trigger element 44b. The trigger element 44b of this specific example comprises a first arm 86, a second arm 88 rotatably connected to the first arm 86, and an actuation element 90 fixed to the second arm 88.

[0128] Fig 14 schematically represents a partial side view of the cabinet 10b. In Fig 14, the battery compartment 92 can be seen. The first arm 86 here extends into the battery compartment 92 through an opening 34b. The second arm 88 is rotatably supported to the lock 50. By pulling the first arm 86 (to the left in Fig 14) from inside of the battery compartment 92, the second arm 88 and the actuation element 90 are caused to rotate (in a clockwise direction in Fig 14). The actuation element 90 can thereby contact the override element 62 to trigger unlocking of the lock 50. As an alternative to the first arm 86, a rope or wire can be used. After the emergency unlocking, the lid 40 is closed by screwing back the lid bolt 42 and the seal 36b is replaced from the outside of the cabinet 10b.

[0129] Fig 15 schematically represents a partial perspective view of a cabinet 10c according to a further example. Mainly differences with respect to the cabinets 10a, 10b will be described. The cabinet 10c comprises a plate 36c. The plate 36c is a further example of a tamper-evident element according to the present disclosure. The plate 36c is secured to the housing 14, here to the left-hand side 24 thereof and is visible from the exterior region 38 through an opening 34c when the lid 40 is opened, like in Fig 15.

[0130] Fig 16 schematically represents a side view of the plate 36c. The plate 36c is of a similar design as the plate 36a. The plate 36c comprises a fixed section 68c, an actuation section 72c and an intermediate weakened section 74c. The actuation section 72c comprises a threaded hole 94 configured to be threadingly engaged by the lid bolt 42. The plate 36c does thus not have to be changed every time the battery is changed. The weakened section 74c of this example comprises a plurality of slots 96 to provide a living hinge in the plate 36c.

[0131] When closing the lid 40, the lid bolt 42 only threadingly engages the threaded hole 94, and not the housing 14. The through holes 70 of the fixed section 68c are used to secure the plate 36c to the housing 14 using the plate bolts 58 in the same way as for the plate 36a (although with a different positioning of the plate bolts 58).

[0132] Fig 17 schematically represents a partial perspective view of the cabinet 10c. The cabinet 10c here comprises a trigger element 44c according to a further example. The trigger element 44c differs from the trigger element 44b in that the first arm 86 does not extend into the battery compartment 92 and in that the second arm 88 and the actuation element 90 are of a mirrored design.

[0133] By unthreading the lid bolt 42 and opening the lid 40, the plate 36c can be accessed. By pushing the actuation section 72c, either by hand or using an ordinary tool, the actuation section 72c is bent or breaks off from the fixed section 68c at the weakened section 74c. When the actuation section 72c is removed from the position shown in Fig 17, the first arm 86 can be accessed inside of the housing 14 but outside of the battery compartment 92. By pushing the first arm 86 (to the right in Fig 17), the second arm 88 and the actuation element 90 are caused to rotate (in a counterclockwise direction in Fig 17). The actuation element 90 can thereby contact the override element 62 to trigger unlocking of the lock 50. After the emergency unlocking, the lid 40 can no longer be closed properly since there is no longer any support for the lid bolt 42. The open lid 40 caused by the plate 36c adopting the tampered state 82 provides a clear visual indication that an emergency opening has taken place. The plate 36c can then be replaced from the interior of the cabinet 10c in order to enable proper closing of the lid 40.

[0134] Fig 18 schematically represents a partial cross-sectional side view of a cabinet lod according to a further example. The cabinet lod differs from the cabinet 10a in that the cabinet lod comprises a plate 36d. The plate 36b is a further example of a tamper- evident element according to the present disclosure. The plate 36b is designed to break, i.e., to permanently deform. The plate 36b of this example is thus a sacrificial plate. To this end, the plate 36b of this example is made of rigid plastic. Fig 18 shows the plate 36b in the tampered state 82 where the actuation section 72a has broken off from the plate 36b at the weakened section 74a due to being contacted by the pen 44a. The plate 36b can then be replaced by a new plate 36b.

[0135] Fig 19 schematically represents a partial cross-sectional top view of a cabinet loe according to a further example. Mainly differences with respect to the cabinet 10b will be described. Instead of the seal 36b and the lid bolt 42, the cabinet loe of this example comprises a tamper-evident bolt 36c. The tamper-evident bolt 36c is a further example of a tamper-evident element according to the present disclosure. By unthreading the tamper-evident bolt 36c, the lid 40 can be opened.

[0136] Fig 20 schematically represents a partial cross-sectional top view of the cabinet loe. In Fig 20, the tamper-evident bolt 36c is in the non-tampered state 66. The tamper-evident bolt 36c of this example comprises a fixed section 68e. The fixed section 68e passes through a hole in each of the lid 40 and the housing 14, here the left-hand side 24 thereof. The fixed section 68e threadingly engages a stud 98 fixed to the housing 14 inside of the cabinet loe. The fixed section 68e is thereby fixed to the housing 14.

[0137] The tamper-evident bolt 36c of this example further comprises an actuation section 72c. The actuation section 72c of this example has a polygonal shape, here hexagonal, for being engaged by a key to unthread the tamper-evident bolt 36c in the non-tampered state 66 to open the lid 40. As shown in Fig 20, there is a gap between the actuation section 72c and the lid 40.

[0138] The tamper-evident bolt 36c of this example further comprises a weakened section 74c, here exemplified as a narrowed waist, between the fixed section 68e and the actuation section 72c. The tamper-evident bolt 36c may for example be made of metal or plastic.

[0139] By inserting a tool 97 into the gap between the actuation section 72c and the lid 40 and bending and / or twisting the tool 97, the tamper-evident bolt 36c can be broken at the weakened section 74c. In this way, the tamper-evident bolt 36c can be permanently deformed to thereby switch from the non-tampered state 66 to the tampered state 82. The tool 97 maybe an ordinary tool, such as a knife, a fork, a key, a screwdriver, pliers or a credit card that is not necessarily associated with the cabinet loe.

[0140] In the tampered state 82, the actuation section 72c may fall away from the cabinet loe and the fixed section 68e may be maintained fixed to the housing 14. When the tamper-evident bolt 36c has adopted the tampered state 82, tampering of the tamper-evident bolt 36c can easily be detected in a number of ways. For example, if the lid 40 is biased into an open position, the fact that the lid 40 is open and cannot be closed indicates tampering. Furthermore, the fact that the broken tamper-evident bolt 36e is visible from the exterior region 38 indicates tampering. Furthermore, an outer surface section of the lid 40 that is hidden by the actuation section 72c in the nontampered state 66 may be of a different color, such as red, to contrast from a color of the remaining outer surface of the lid 40, such as white. When the lid 40 is open, the trigger element 44b maybe manipulated in the same way as described in connection with Fig 14.

[0141] Fig 21 schematically represents a partial cross-sectional top view of a cabinet lof according to a further example. Mainly differences with respect to the cabinet loe will be described. Instead of the tamper-evident bolt 36c, the cabinet lof comprises a tamper-evident plug 36b The tamper-evident plug 36f is a further example of a tamper- evident element according to the present disclosure. The tamper-evident plug 36f may for example be made of metal or plastic.

[0142] The tamper-evident plug 36f of this example comprises an actuation section 72b In contrast to the lid bolt 42 and the tamper-evident bolt 36c, the tamper-evident plug 36f of this example does not comprise any drive for being engaged to unthread the tamper-evident plug 36b Instead, the actuation section 72!' includes a flat spherical surface facing the exterior region 38.

[0143] Fig22schematically represents a partial cross-sectional top view of the cabinet lof. In addition to the actuation section 72f, the tamper-evident plug 36f comprises a fixed section 68f and a weakened section 74b The tamper-evident plug 36f of this example further comprises a plurality of barbs 99, here protruding from the fixed section 68f. Due to the barbs 99, the tamper-evident plug 36f is fixed to the housing 14, here by engaging the stud 98.

[0144] The tamper-evident plug 36f can be pressed through the lid 40 and into the housing 14 as shown in Fig 22 to secure the lid 40 to the housing 14. The tamper-evident plug 36f however cannot be retracted without breaking the barbs 99 and / or the weakened section 74b

[0145] By inserting the tool 97 into the gap between the actuation section 72f and the lid 40 and bending and / or twisting the tool 97, the tamper-evident plug 36f can be permanently deformed to thereby switch from the non-tampered state 66 to the tampered state 82. The permanent deformation may comprise a breaking of the tamper- evident plug 36f at the weakened section 74f and / or a breaking of the barbs 99 from the fixed section 68f. When the tamper-evident plug 36f adopts the tampered state 82, the tamper-evident plug 36f no longer prevents the lid 40 from opening. Furthermore, the fact that the broken tamper-evident plug 36f is visible from the exterior region 38 indicates tampering. Furthermore, an outer surface section of the lid 40 that is hidden by the actuation section 72f in the non-tampered state 66 maybe of a different color, such as red, to contrast from a color of the remaining outer surface of the lid 40, such as white. When the lid 40 is open, the trigger element 44b maybe manipulated in the same way as described in connection with Fig 14.

[0146] The aspects of the present disclosure have mainly been described above with reference to a few embodiments. However, as is readily appreciated by a person skilled in the art, other embodiments than the ones disclosed above are equally possible within the scope of the invention, as defined by the appended patent claims. Thus, while various aspects and embodiments have been disclosed herein, other aspects and embodiments will be apparent to those skilled in the art. The various aspects and embodiments disclosed herein are for purposes of illustration and are not intended to be limiting, with the true scope being indicated by the following claims.

Claims

CLAIMS1. A method for enabling determining a time for a manual override opening of an electronic cabinet lock (101), the method being performed by the electronic cabinet lock (101), the method comprising: detecting (140) that a manual override opening of the electronic cabinet lock (101) has occurred; triggering (142) an elapsed-time clock (165) to run, such that the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock (101) was detected; and disabling (144) dormant state activation for the electronic cabinet lock (101).

2. The method according to claim 1, further comprising: storing (146) an override data item indicating the occurrence of the manual override opening.

3. The method according to claim 2, further comprising: communicating (148) with a user device to provide a current reading of the elapsed-time clock and to provide the override data item; and enabling (150), based on the communicating, dormant state activation for the electronic cabinet lock (101).

4. The method according to any one of the preceding claims, wherein the electronic cabinet lock (101) is battery-powered.

5. The method according to any one of the preceding claims, wherein the elapsed- time clock (165) is only triggered to run based on the detecting (140) that a manual override opening has occurred.

6. An electronic cabinet lock (101) for enabling determining a time for a manual override opening of the electronic cabinet lock (101), the electronic cabinet lock (101) comprising: processing circuitry (160); and memory circuitry (164) storing instructions (167) that, when executed by the processing circuitry, cause the electronic cabinet lock (101) to: detect that a manual override opening of the electronic cabinet lock (101) hasoccurred; trigger an elapsed-time clock (165) to run, such that the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock (101) was detected; and disable dormant state activation for the electronic cabinet lock (101).

7. The electronic cabinet lock (101) according to claim 6, further comprising instructions (167) that, when executed by the processing circuitry, cause the electronic cabinet lock (101) to: store an override data item indicating the occurrence of the manual override opening.

8. The electronic cabinet lock (101) according to claim 7, further comprising instructions (167) that, when executed by the processing circuitry, cause the electronic cabinet lock (101) to: communicate with a user device to provide a current reading of the elapsed-time clock and to provide the override data item; and enable, based on the communicating, dormant state activation for the electronic cabinet lock (101).

9. The electronic cabinet lock (101) according to any one of claims 6 to 8, further comprising a battery (109), wherein the electronic cabinet lock (101) is powered by the battery (109).

10. The electronic cabinet lock (101) according to any one of claims 6 to 9, wherein the elapsed-time clock (165) is only triggered to run based on the detecting that a manual override opening has occurred.

11. A computer program (67, 91) for enabling determining a time for a manual override opening of the electronic cabinet lock (101), the computer program comprising computer program code which, when executed on an electronic cabinet lock (101) causes the electronic cabinet lock (101) to: detect that a manual override opening of the electronic cabinet lock (101) has occurred; trigger an elapsed-time clock (165) to run, such that the elapsed-time clock indicates how long ago the manual override opening of the electronic cabinet lock (101)was detected; and disable dormant state activation for the electronic cabinet lock (101).

12. A computer program product (164, 190) comprising a computer program according to claim 11 and a computer readable means comprising non-transitory memory in which the computer program is stored.

13. A cabinet (loa-iof) comprising:- an enclosure (12) including a housing (14), and an access member (16) movable relative to the housing (14) between a closed position (18) and an open position (52);- a lock (50) configured to lock the access member (16) in the closed position (18) and including an override element (62) for being triggered to unlock the lock (50); and- a tamper-evident element (36a-36f) protecting access to the override element (62).

14. The cabinet (loa-iof) according to claim 13, wherein the tamper-evident element (36a-36f) is secured to the enclosure (12).

15. The cabinet (10a; loc-iof) according to claim 14, wherein the tamper-evident element (36a; 36c-36f) is secured to an inside (60) of the enclosure (12).

16. The cabinet (loa-iof) according to any of claims 13 to 15, wherein the tamper- evident element (36a-36f) is deformable.

17. The cabinet (loa-iof) according to any of claims 13 to 16, wherein the tamper- evident element (36a-36f) is visible from an exterior region (38) with respect to the cabinet (loa-ioc).

18. The cabinet (10a; 10c; lod) according to any of claims 13 to 17, wherein the cabinet (10a; 10c; lod) comprises an opening (34a; 34c) in the enclosure (12) through which the override element (62) can be triggered by a trigger element (443-440), and wherein the tamper-evident element (36a; 36c; 36d) covers the opening (34a; 34c).

19. The cabinet (10a; 10c; lod) according to any of claims 13 to 18, wherein the tamper-evident element (36a; 36c; 36d) comprises a deformable plate.

20. The cabinet (10a; lod) according to claim 18 and 19, wherein the plate is positioned along a straight line (64) from the opening (34a) to the override element (62).

21. The cabinet (10a; 10c; lod) according to claim 18 and 19, or according to claim 20, wherein the plate comprises a fixed section (68a; 68c) fixed to the enclosure (12), and an actuation section (72a; 72c) aligned with the opening (34a; 34c).

22. The cabinet (10a; 10c; lod) according to claim 21, wherein the plate comprises a weakened section (74a; 74c) between the fixed section (68a; 68c) and the actuation section (72a; 72c).

23. The cabinet (10a; 10c; lod) according to claim 22, wherein the actuation section (72a; 72c) and a section of the enclosure (12) adjacent to the opening (34a; 34c) have a common color.

24. The cabinet (10a; 10c; lod) according to any of claims 19 to 23, wherein the plate is made of a sheet material.

25. The cabinet (10a; 10c; lod) according to any of claims 19 to 24, wherein the plate has a thickness (76) of 0.5 mm to 1.5 mm.

26. The cabinet (10a; 10c; lod) according to any of claims 19 to 25, wherein the cabinet (10a; 10c; lod) comprises an elongated support element (58) fixed to the enclosure (12), and wherein the plate comprises a through hole (70) receiving the support element (58).

27. The cabinet (10a; 10c; lod) according to claims 25 and 26, wherein a protruding length (78) of the support element (58) from the enclosure (12) is at least twice the thickness (76) of the plate.

Images