Door opening device with a mechanism for changing between "fail-safe" and "fail-secure" modes
The described electromechanical locking device facilitates mode switching between fail-safe and fail-secure modes through sensor connection changes and actuator polarity reversal, eliminating the need for physical intervention and reducing inventory and installation costs.
Patent Information
- Application Number
- PCT/ES2025/070448
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2024-08-06
- Filing Date
- 2025-07-21
- Publication Date
- 2026-02-12
AI Technical Summary
Existing electromechanical locking devices require physical access and manual intervention to switch between fail-safe and fail-secure modes, increasing inventory and installation costs.
An electromechanical locking device with a sensor system and switch mechanism that remotely changes sensor connections and optionally reverses actuator polarity, allowing mode switching without mechanical or complex electronic modifications.
Enables quick and efficient switching between fail-safe and fail-secure modes using simple electronics, reducing the need for different device models and on-site modifications.
Smart Images

Figure ES2025070448_12022026_PF_FP_ABST
Abstract
Description
[0001] DOOR OPENING DEVICE WITH MECHANISM FOR SWITCHING BETWEEN “FAIL-SAFE” AND “FAIL-SECURE” MODES
[0002] DESCRIPTION
[0003] The present invention relates to electromechanical locking devices and, more specifically, to electric door openers, although the present invention is not necessarily limited to this type of device. Electromechanical locking devices are commonly used in access control systems in residential, commercial, and industrial buildings.
[0004] Electromechanical locking devices can have two different operating modes:
[0005] “Fail-safe” or unlocked in case of power failure. The opening device remains open in the absence of electrical power. When power is restored, the device closes, and
[0006] "Fail secure" or locked in case of power failure. The opening device remains closed when power is unavailable. When power is restored, the device opens.
[0007] In general, devices operate in only one mode. Some devices, however, offer the option of selecting fail-safe or fail-secure mode. Selecting between these modes is done on-site by orienting mechanical parts or adjusting screws, requiring physical access to the device's internal mechanism. This limitation necessitates either having different device models for each mode or stopping system operation to change the mode, increasing inventory and installation costs. US patent 6,595,563 B2 describes a door opener that allows the installer to switch between fail-safe and fail-secure by removing a solenoid and actuator assembly, turning the actuator over, and reinserting the removed parts, which still requires direct access to the device and manual intervention.US patent 7,540,542 B2 illustrates a simplified dual-mode fail-safe / fail-secure mechanism that employs a control screw accessible from outside the housing. The screw is manually adjusted using a physical tool and user intervention. As the screw moves within a sliding slot, the solenoid block is displaced the same distance inside the housing, allowing switching between fail-safe and fail-secure modes.
[0008] The present invention aims to propose an alternative for changing the operating mode between fail safe and fail secure of a locking device that does not involve changing the position of internal parts of the device and does so with simple elements, and that are applicable to different types of devices.
[0009] In particular, the present invention discloses an electromechanical closing device comprising an electric actuator that activates a pusher with a stroke, which in turn activates or deactivates a locking device of the electromechanical closing device, a control device, and further comprising a sensor system configured to detect the pusher in a first position of the stroke, the sensor system generating a first signal that is transmitted to the control device through a first connection between the sensor system and the control device; and the sensor system also being configured to detect the pusher in a second position of the stroke, the sensor system generating a second signal that is transmitted to the control device through a first connection between the sensor system and the control device.
[0010] The device also comprises a switch that interchanges the aforementioned first and second connections, such that, after the exchange, the first signal is transmitted through the second connection and the second signal is transmitted through the first connection.
[0011] Preferably, the sensor system comprises a first sensor for detecting the first position, the first sensor being connected to the control device via the first connection, and a second sensor for detecting the second position, the second sensor being connected to the device via the second connection. In this embodiment, the first signal is generated by the first sensor, while the second signal is generated by the second sensor. The transmitted signal can indicate detection by a change in its value. This change in value can correspond to a change in the state of the sensor system or of the corresponding sensor.
[0012] Preferably, the first position corresponds to the beginning of the pusher's travel and the second position corresponds to the end of the pusher's travel.
[0013] Preferably, the device also comprises a polarity changing device for the electric actuator.
[0014] Preferably, the actuator is an electric motor.
[0015] The present invention facilitates switching between fail-safe and fail-secure modes, or vice versa. The invention comprises a sensor system with at least two sensors capable of providing information corresponding to a first and second position of the actuator's stroke (typically, the start / end of the electric pusher's stroke). A switch allows for the exchange of the input from both sensors to the control device. Consequently, the invention makes it easy to reverse the information provided by the sensor system to the control device, which, without further modification, will interpret the two positions as distinct due to the switch's inversion. In particular, after the input exchange, the sensor system position interpreted as the "start of stroke" of the actuator will be interpreted as the "end of stroke" of the actuator.This allows switching between fail-safe and fail-secure operation, and vice versa, with little to no modifications to the control device, which will not need to store, for example, separate instruction sets for each operating mode. This enables the control device to use simple, preferably analog, electronics, without requiring, if desired, any devices that need programming.
[0016] The sensor system can be of any type. For example, the sensors can be microswitches. For instance, one sensor might transmit a detection signal when the pusher is in one extreme position, and the other sensor might transmit a detection signal when the pusher is in the opposite extreme position. It is also possible for both sensors to transmit a detection signal at the same position and no detection signal at the opposite position, provided that at least one of the sensors transmits no detection signal for intermediate positions between the two extreme positions.
[0017] Preferably, the aforementioned switch is an electronic switch. The electronic switch has the advantage of being remotely operated. However, the present invention also contemplates that the electromechanical device includes a physical switch, such that the user must physically operate the switch to change modes. Changing modes involves actuating the switch that swaps the connections of the first and second sensors and, where applicable, a polarity-changing device that reverses the polarity of the electrical actuator (for example, a second switch or relay that changes the polarity of a motor).
[0018] In short, one advantage of the invention is that it can be implemented using analog electronics. The control device, for example, can be an electronic board comprising the aforementioned first and second connections. The board can be located inside the device.
[0019] In certain embodiments, the polarity of the actuator is also reversed. For this purpose, the electromechanical locking device may include a polarity-changing device for the electric actuator, which may be, for example, a switch or a relay, depending on the application. By altering the detection of the start and end of movement and reversing the actuator's action, a direct change in the operating mode is achieved simply by operating two switches that exchange positions, without the need for complex mechanical devices or electronics. The present invention is particularly applicable to electric motors, since the polarity of the electric motor is easily reversed by means of a simple switch that changes the polarity of the power supply.
[0020] Preferably, the actuator is such that a polarity reversal produces a reversal in the direction of the force. For example, it may be an electric motor or a coil actuator of a type in which a polarity reversal produces a reversal in the direction of the force, such as a latching solenoid or a push-pull solenoid, or an electric motor. Preferably, according to the present invention, the change in the direction of the force must occur without physical intervention in the system.
[0021] The pusher's path is preferably a linear path, although it can be of any other type, such as a turn, or a compound path.
[0022] Advantageously, the electromechanical locking device can be an electric door opener.
[0023] For better understanding, drawings of embodiments of the object of the present invention are attached as an explanatory, but not limiting, example.
[0024] Figure 1 shows a schematic diagram of the operation of a sensor connection exchange according to the present invention.
[0025] Figures 2 and 3 show two wiring diagrams of a connection embodiment according to the present invention in which the connection of the position sensors (microswitches) and the switch that exchanges its input to a control board can be observed.
[0026] Figure 4 shows a perspective view of a first embodiment of an electric door opener in which the latch is locked by a long bar and short bar mechanism.
[0027] Figure 5 shows a top plan view of the door opener in Figure 4, in which the armature has been removed to allow observation of the long bar and short bar mechanism.
[0028] Figure 6 shows the view of Figure 5, in which the long bar has been removed to allow observation of the internal mechanism.
[0029] Figure 7 shows a close-up of the perspective view in Figure 4, in which the long bar has been removed to allow for a more detailed view of the internal mechanism. Figure 8 shows an alternative embodiment of the door opener without the front cover, revealing the interior of the mechanism adapted to withstand preload forces.
[0030] Figure 9 shows a plan view of the implementation of the door opener in Figure 8.
[0031] Figure 10 shows a detailed view visualizing the location of the travel sensors inside the door opener of Figure 8 in the actuated position.
[0032] Figure 11 shows a detailed view visualizing the location of the travel sensors inside the door opener of Figure 8 in the non-actuated position.
[0033] Figure 12 shows a different embodiment of the present invention, wherein the door opener is a double-latch door opener.
[0034] Figure 13 shows a detailed view of the door opener in Figure 12.
[0035] Figure 14 shows a new embodiment in which the door opener is a knee-operated door opener.
[0036] Figure 15 shows a plan view of the interior of the door opener, in which the door opener's travel sensors are visible.
[0037] Figure 16 shows a detailed view in which the actuated and non-actuated positions of the travel sensors are observed.
[0038] Figure 1 shows a schematic diagram of an embodiment of the present invention in which the sensor connections are exchanged. In this embodiment, two states of the sensor system and the effect produced by the switch are represented. State 1, “ACT,” initially represents a first state of the sensor system connected to an input of the control device corresponding to information about whether the device is in the “actuated” position. State 2, “NOT ACT,” represents a second state of the sensor system connected to an input of the control device corresponding to information about the detection when the actuator is not actuated, i.e., in the “not actuated” position. For example, the first and second states of the sensor system could correspond to the signal given by, respectively, a first and a second position sensor.
[0039] According to the present invention, a switch reverses the connection of the sensors to the control device, such that state 1 “ACT”, which previously corresponded to the actuated state, becomes state 1 “NOT ACT”, meaning it now provides information about the position that the control device will consider as “not actuated” or the default position. Conversely, state 2 “NOT ACT”, which the control system considers as not actuated (i.e., the default state), now corresponds to an actuated position 2 “ACT”. By reversing the meaning of the information provided by the sensors, a change in the device's behavior can be generated with minimal or even no additional changes to the device itself. This, in turn, allows for a quick and / or efficient switch from “fail-safe” to “fail-secure” mode.Depending on the actuator design, to achieve a complete change, it may be necessary and sufficient to reverse the polarity of the electrical actuator (for example, when the actuator is a motor). Depending on the type of actuator and the device's actuation system, reversing the polarity of the electrical actuator may not be necessary.
[0040] Figures 2 and 3 show a wiring diagram for a sensor embodiment and the switch that changes the sensor signal input to the control device. The embodiment shown comprises two microswitches that detect the position of a physical actuator (not shown in Figures 2 and 3). The detected positions correspond to the locked and unlocked positions of the door opener. The embodiment also includes a sensor switching switch, represented by the connection terminals T, R, P, and N, and physically located on the control board. Figures 2 and 3 illustrate the switch's operation, which modifies the sensor connection to the control device, thereby changing the operating mode (from fail-safe to fail-secure or vice versa).
[0041] Figure 2 illustrates the mechanism in a first mode (e.g., fail-safe mode). In this mode, the V terminal of the control device is connected to the N terminal of the switch, allowing the control device to receive a signal when the first microswitch, MICRO 1, performs a detection. The U terminal of the control device is connected to the R terminal of the switch, ensuring that the control system receives a signal if the second microswitch, MICRO 2, performs a detection. The control device also includes a B terminal, which serves as the common line connecting both microswitches, MICRO 1 and MICRO 2, thus closing the circuit.Assuming that the first microswitch MICRO 1 is in the unactuated position and the second microswitch MICRO 2 is in the actuated position, with this configuration the control device would receive the information that the actuator is not located in the position of the first microswitch MICRO 1, but is actuating the second microswitch MICRO 2.
[0042] Figure 3 illustrates the same mechanism as Figure 2, but in a different operating mode (e.g., fail-secure). In this diagram, terminal V, which connects to the control device, is connected to terminal P of the switch. This allows the control device to receive detection information from the second microswitch, MICRO 2, via terminal V. Terminal U is connected to terminal T of the switch, allowing the control device to receive detection information from the first microswitch, MICRO 1, via terminal U. Terminal B remains connected to both microswitches, MICRO 1 and MICRO 2. As can be seen by comparing this diagram with Figure 2, the switch has switched the input of information from the sensors to the control device.In this way, the actuated position would no longer correspond to a detection by the second microswitch MICRO 2, but instead to a detection by the first microswitch MICRO 1, and the non-actuated position would no longer correspond to a detection by the first microswitch MICRO 1 but to a detection by the second microswitch MICRO 2.
[0043] Using the sensor exchange switch, the connections of the two microswitches MICRO 1 MICRO 2 with the control device are electrically swapped.
[0044] Simultaneously, the actuator's polarity can be changed using a polarity reversal device. If the polarity reversal reverses the actuator's operating mode, this allows the transition from "fail-safe" to "fail-secure" mode to be completed without further modifications. If the actuator is a motor, this can be achieved with a second switch or a commercially available relay connected to the motor's power supply.
[0045] Not shown in the figures, the example device comprises a capacitor that provides the motor with sufficient energy to move from the start of travel to the end of travel, or vice versa, in the absence of external power supply.
[0046] In fail-secure mode, the first microswitch 1007 is connected to the control device via a primary connection that provides information about the unactuated position. In fail-safe mode, this first microswitch is connected to a secondary connection that provides information about the actuated position. Correspondingly, the second microswitch 1009 is connected to the secondary connection in fail-secure mode and to the primary connection in fail-safe mode. In the event of an external power failure, the control device will check the "actuated" or "unactuated" state of the system based on the information it receives from the microswitches via their respective connections.If the system is not in the default position, the motor will operate (using the energy stored in the capacitor) until it receives information through the connection corresponding to the default state (operated in the case of fail secure and not operated in the case of fail safe) that the system is in the correct position.
[0047] Figures 4 to 7 show an embodiment of door opener 1000 with a locking device of the long bar 1002, short bar 1003 type. In this door opener 1000, a first microswitch 1007 is associated with the start of the actuator's travel, while a second microswitch 1009 is associated with the end of the actuator's travel. The start of the travel corresponds to the locked position of the latch 1001.
[0048] The door opener 1000 comprises, as an electric actuator, a motor 1006 and a kinematic device that transforms the circular motion of the motor 1006 into a linear motion that drives the short bar 1003 to the unlocked position. The kinematic device comprises a part 1010 connected to and fixed to the shaft of the motor 1006. Part 1010, rotating with the motor shaft, pushes a guided bar 1011, which, in turn, pushes the short bar 1003 to the unlocked position. The guided bar 1011 is guided by a guide element. An additional elastic element / spring (not shown) acts on the guided bar 1011, ensuring its permanent contact with part 1011.The door opener 2000 also comprises a sensor system that includes position sensors 1007 and 1009 whose function is to give information to the control device of the door opener 1000 about the state or position of the system so that the control device can give the motor 1006 the appropriate commands.
[0049] During a mode change from "fail-secure" to "fail-safe" or vice versa, sensors 1007 and 1009 reverse their connection to the control device via an electronic switch (not shown in the figures). The input signals from the sensors to the control device can be redirected, for example, by electrical connections such as those shown in Figures 2 and 3. Additionally, the polarity of motor 1006 is reversed by means of a second switch (not shown) or a relay. Only with these changes can the device in Figures 4 to 7 switch from fail-safe mode to fail-secure mode, and vice versa. To cover the case of a power outage when the actuator is not in the position corresponding to its operating mode (fail-safe or fail-secure), a capacitor with sufficient capacity can be installed in the control device to allow the motor to move the actuator to the predetermined position in the absence of an external power supply.
[0050] Figures 8 to 11 show another embodiment, specifically another door opener 2000. This embodiment comprises, as device actuation elements, a motor 2005, a worm gear 2004, an actuator 2003, a sliding element 2002, a first microswitch 2007 for starting travel and a second microswitch 2006 for ending travel.
[0051] The rotation of the motor 2005 turns the screw 2004, which advances or retracts the pusher piece 2003. This, in turn, actuates an assembly comprising a sliding piece 2002 and a spring 2008, which then extend or retract a latch locking piece 2001 (locking piece not visible in the figures). Figure 10 represents a starting position of travel. The threaded piece 2003 actuates the first microswitch 2006. Additionally, the position bar 2010 fully actuates the second microswitch 2007. Both sensing signals indicate the position of the mechanism at the start of travel.
[0052] Figure 11 represents the end-of-travel position. The position bar 2010 stops actuating the second microswitch 2007.
[0053] As in the previous example, the system is complemented by a switch that swaps the inputs to the control device of the first and second microswitches 2006, 2007, a device that reverses the polarity of the motor 2005 and a capacitor that provides the motor with enough energy to move from the start of travel to the end of travel, or vice versa, in the absence of external power supply.
[0054] In fail-secure mode, the first microswitch 2007 is connected to the control device via a primary connection that provides information about the unactuated position. In fail-safe mode, this first microswitch is connected to a secondary connection that provides information about the actuated position. Correspondingly, the second microswitch 2006 is connected to the secondary connection in fail-secure mode and to the primary connection in fail-safe mode. In the event of an external power failure, the control device will check the "actuated" or "unactuated" state of the system based on the information it receives from the microswitches via their respective connections.If the system is not in the default position, the motor will operate (using the energy stored in the capacitor) until it receives information through the connection corresponding to the default state (operated in the case of fail secure and not operated in the case of fail safe) that the system is in the correct position.
[0055] Figures 12 and 13 show another embodiment of a double-latch door opener 3000. The arrangement of the elements that operate each latch is symmetrical. To simplify the description of the process, only one side will be described, since, being a symmetrical door opener, what happens on one side is also done on the other. The door opener 3000 comprises a latch 3004, which is connected to a pivot bar 3002. This pivot bar 3002 can be locked by a short bar 3001 perpendicular to the pivot bar 3002.
[0056] The actuator for this 3000 door opener is an electric motor 3005. The motor 3005 includes a cam-like component 3009 that converts the rotational motion of the motor 3005 into linear motion. The cam-like component 3009 has a circular surface with two flat areas between an inclined area. As it rotates, the component 3009 pushes a guide bar 3010. This guide bar 3010 actuates the short bar 3001, releasing the pivot bar 3002 and allowing the latch 3004 to rotate outwards.
[0057] In this door opener 3000, the first microswitch 3006 is associated with the start of the actuator's travel, while the microswitch 3007 is associated with the end of the actuator's travel. In this embodiment, the start of the travel corresponds to the locked position of the latch 3001. A second microswitch 3007 is actuated by the short bar 3001 when the actuator reaches the end of its travel. The input to the control device from the sensor signals can be redirected as shown in Figures 2 and 3. Additionally, the polarity of the motor 3005 is reversed by means of the switch (not shown). With these changes alone, the door opener switches from fail-safe mode to fail-secure mode.
[0058] As in the previous examples, the system is complemented by a switch that swaps the inputs to the control device of the first and second microswitches 2006, 2007, a device that reverses the polarity of the motor 2005 and a capacitor that provides the motor with enough energy to move from the start of travel to the end of travel, or vice versa, in the absence of external power supply.
[0059] Thus, when the device is in "fail secure" mode, the device position shown in Figures 12 and 13 (locked position) must correspond to the default position. Therefore, in this case, the first microswitch 3006 must be connected to the input of the control device that provides information about the not actuated position ("NO ACT"), and the second microswitch 3007 is connected to the connection corresponding to the actuated position ("ACT"). In "fail safe" mode, the connections of both microswitches 3006 and 3007 are reversed.
[0060] Figures 14 to 16 show an additional embodiment of the 4000 door opener.
[0061] The 4000 door opener is a door opener with a locking mechanism comprising a knee lever. The cam-shaped part 4009 converts the rotary motion of the motor 4002 into linear motion. Part 4009 has a circular surface with two flat areas surrounding an inclined area. As part 4009 rotates, it pushes the guided bar 4006, which is in contact with this circular surface. The pressure exerted by part 4009 on the guided bar 4006 pushes the locking element 4008 to an unlocked position, thus releasing the latch 4004. Two springs, 4007 and 4011, are used to return the mechanism to the locked position. A first spring 4007 located in the part closest to the motor 4001 allows the guided bar 4006 to remain in constant contact with the part 4009.A second spring 4011 is located at the end of the path in contact with the positioning piece 4010. Said piece 4010 comprises a projection 4005, said projection in the closed position actuates the position sensor 4002.
[0062] A first microswitch 4002 is associated with the start of the actuator's travel, while a second microswitch 4003 is associated with the end of the actuator's travel. In this embodiment, the start of the travel corresponds to the locked position of the latch 4004. The input to the control device from the sensor signals can be redirected as shown in Figures 2 and 3. Furthermore, the polarity of the motor 4001 is reversed by means of a polarity reversal device (not shown). Additionally, the device may include a capacitor (not shown) that provides the motor with sufficient energy to switch from the start of the travel to the end of the travel, or vice versa, in the absence of an external power supply.
[0063] In fail-secure mode, the first microswitch 4002 is connected to the control device via a primary connection that provides information about the unactuated position. In fail-safe mode, this first microswitch is connected to a secondary connection that provides information about the actuated position. Correspondingly, the second microswitch 4003 is connected to the secondary connection in fail-secure mode and to the primary connection in fail-safe mode. In the event of an external power failure, the control device will check the "actuated" or "unactuated" state of the system based on the information it receives from the microswitches via their respective connections.If the system is not in the default position, the motor will operate (using the energy stored in the capacitor) until it receives information through the connection corresponding to the default state (operated in the case of fail secure and not operated in the case of fail safe) that the system is in the correct position.
[0064] In a fail safe position, in the absence of power, the protrusion 4005 of the position piece 4010 is actuating sensor 4003 without actuating sensor 4002, this indicates that the door opener 4000 is locked.
[0065] It should be clarified that all the implementations mentioned are based on the same principle, simply by changing the names of the sensors. The sensors swap their connection with the control device, switching, for example, from providing information about an actuated position to an unactuated position, or vice versa. This allows the operating mode to be changed with minimal or no modifications, such as reversing the actuator's polarity, which is particularly convenient when the actuator is a motor.
[0066] Although the invention has been presented and described with reference to embodiments thereof, it is understood that these are not limiting to the invention. Therefore, numerous construction details or other aspects may vary and may become apparent to those skilled in the art after interpreting the material disclosed in this description, claims, and drawings. Thus, all variations and equivalents will be included within the scope of the present invention if they can be considered to fall within the broader scope of the following claims.
Claims
CLAIMS 1. An electromechanical locking device comprising a control device, an electric actuator that activates a pusher with a stroke, which in turn activates or deactivates a locking device of the electromechanical locking device, characterized in that it further comprises - a sensor system for detecting the pusher in a first position of the stroke, the sensor system generating a first signal that is transmitted to the control device through a first connection between the sensor system and the control device; and the sensor system also being configured to detect the pusher in a second position of the stroke, the sensor system generating a second signal that is transmitted to the control device through a first connection between the sensor system and the control device, and - a switch that swaps the aforementioned first and second connections, such that, after the swap, the first signal is transmitted through the second connection and the second signal is transmitted through the first connection.
2. Device according to the preceding claim, characterized in that it comprises a first sensor for detecting the first position, the first sensor being connected to the control device via the first connection, and a second sensor for detecting the second position, the second sensor being connected to the device via the second connection.
3. Device, according to any of the preceding claims, characterized in that the actuator is an electric motor.
4. Device, according to any of the preceding claims, characterized in that the switch is an electronic switch.
5. Device, according to any of the preceding claims, characterized in that the sensors are microswitches.
6. Device, according to any of the preceding claims, characterized in that the first position corresponds to a start of the pusher's travel and the second position corresponds to an end of the pusher's travel.
7. Device, according to any of the preceding claims, characterized in that it further comprises a device for changing the polarity of the electric actuator.
8. Device, according to the preceding claim, characterized in that the polarity changing device comprises a second switch or a relay.
9. Device, according to any of the preceding claims, characterized in that the control device comprises an electronic board comprising the aforementioned first and second connections.
10. Device, according to the preceding claim, characterized in that the plate is located inside the device.
11. Device, according to any of the preceding claims, characterized in that the pusher stroke is a linear stroke.
12. Device, according to any of the preceding claims, characterized in that it is an electric door opener.
Citation Information
Patent Citations
Electric strike field-selectable fail-safe / fail-secure mechanism
US6595563B2
Electric strike
US7540542B2
Surface mounted electric strike for releasing remote panic exit devices
US8047585B1
Motorized electric strike
WO2017205870A2
Electric strike assembly
WO2020000040A1