DE102011054637A1 - Method for configuring an electromechanical lock - Google Patents

Abstract

Components of locking systems of different types can communicate with each other when first at least one parameter is transmitted from a first data carrier to the lock after a first communication protocol, and then determined based on the parameter of at least a second communication protocol.

Description

Technical area

The invention relates to a method for setting up an electromechanical lock.

State of the art

Electromechanical locks exchange data with corresponding keys, either in the lock and / or in the key, the exchanged data are processed to verify authorization of the key. Depending on the result of the test, the lock releases an authorization, eg. B. access to a secured by the lock location, or the ability to lock a door.

Electromechanical locks are often realized as so-called wireless locks. These radio locks communicate via a radio link with so-called radio keys and thus enable a non-contact authorization check. The radio key can z. B. be a passive transponder, which is held in front of a wireless lock and then read from this. The distance between the radio key and the radio lock is usually only a few cm (about 0-50 cm). Alternatively, the radio key may have an active transmitter, which sends a signal after actuation of a button, which is received and evaluated by all radio locks in the transmission range of usually a few meters (about 0.5 m-50 m). This type is called an active radio key. This system has the advantage that the radio key can be actuated and the radio lock released when approaching the radio lock.

To check the authorization of electrical keys, such. B. Radio keys, there are a variety of methods, for example, describe the published patent applications DE 43 42 641 A1 . DE 199 13 931 and EP 0 671 712 A1 such methods for checking the authorization of keys. Such methods are usually based on whether data stored in the key matches data stored in the lock. At least part of this data is transmitted via a communication protocol between lock and key.

Presentation of the invention

The invention is based on the observation that there are a variety of providers of electromechanical locking systems whose components are not interchangeable or combinable with each other, although they use identically constructed remote control key, the z. B. come from a common supplier or standardized. If you have opted for a locking system of a first provider, the locking system type is set and you can not later integrate a lock from another provider in the then existing locking system, d. H. usually do not share with the already existing keys of the first provider and / or lock and / or add them to existing lock groups.

The invention has for its object to provide a method with which electromechanical locks of different manufacturers can be integrated into a locking system.

This object is achieved by a method according to claim 1. Advantageous embodiments of the invention are specified in the subclaims.

The invention is based on the recognition that a lock of a first manufacturer could theoretically communicate with keys of a locking system from another manufacturer, but that this fails in practice because the manufacturers use different communication protocols. These communication protocols are previously coded in the respective firmware locks and thus after delivery no longer or only with great effort changeable. On the other hand, the invention is based on the recognition that the communication protocols used can be parameterized between a lock and a key. Therefore, it is sufficient for a lock to transmit the information about the parameters of the communication protocol used within a particular type of locking system so that it can henceforth communicate with these parameters and thus with other components of the corresponding locking system type.

The method of setting up an electromagnetic lock has at least two steps; namely, as a first step, transferring at least one parameter from a first data carrier to the lock after a first communication protocol, and, as a later step, determining at least one second communication protocol based on the parameter or parameter transmitted after the first communication protocol. According to the method, a lock can be adapted, as it were learned, by transmitting information necessary for communication between components of a specific locking system type to this specific locking system. Typical components of a locking system are usually programmable keys and locks and usually also programming devices. It is therefore sufficient to provide a first communication protocol, by means of which the parameters of at least one locking system type, ie the parameters of a second communication protocol to the lock and / or at least one key are transferable. After the transmission of the parameters of the second communication protocol, the lock can be adapted to a specific locking system type, this can be triggered, for example, by the transmission. Then the castle z. B. be integrated into an existing locking system of this type of locking system. The installation of a manufacturer-dependent firmware is not necessary to adapt to the locking system type. Only the transmitted parameters ensure that the data transmitted according to the second communication protocol can be correctly interpreted by the lock.

The method can be used for all components of a locking system that communicate with each other, i. H. not only used for locks. It is, strictly speaking, a method of setting up a component of an electromagnetic locking system. Only for the sake of clarity, the invention will be explained using the example of a castle.

The component, ie the lock, generates the second communication protocol after transmission of the parameters, ie. H. it has all the information to exchange data with other components of the locking system type determined by the second communication protocol. Exchanging data may be, for example, performing an authorization query. The result may also be that a key (as a synonym for another component) does not have the necessary authorization.

Preferably, information about the authorization of keys of a particular locking system is transmitted to the lock according to the second communication protocol. This makes it possible to transfer this information with the respective manufacturer-specific tools ("tools").

For some types of locking systems, the authorization check is performed in such a way that a secure, i. H. encrypted data link between the communication partners is established. In so doing, so-called crypto-keys are used, which are values to be kept secret, by means of which the data to be transmitted is encrypted and / or decrypted. If the crypto-keys of two communication partners do not match, no secure data link can be established; Nevertheless, the communication partners communicate with each other, because they are able to exchange the data necessary for setting up the secure data link through the second communication protocol. This exchange is also initiated correctly, but the authorization check is aborted because the check of the crypto-keys reveals that they do not match. The cryptokey is not included in most locking systems to the parameters of the locking system type, but most of the encryption algorithm. However, the encryption algorithm can also be specified by a standard and is then preferably stored in the hardware or firmware.

If the crypto-keys match each other, this is usually rated as "basic authorization". For some types of locking equipment, additional data stored in the key and / or lock are compared, e.g. B. whether the key has an authorization for a particular door and / or locking group, whether the authorization is limited in time, whether there are exceptions within a locking group etc. This additional information is usually evaluated before the release of the corresponding lock.

The parameters of the second communication protocol are usually not the information associated with a particular object or building (hereinafter "object-specific information"), such as the lock facility number or membership of a component to a particular lock group, but the information necessary to be object specific To read and / or write information, if authorized. The term parameter in one embodiment of the invention does not necessarily designate the commands available for the communication, it preferably designates at least the information necessary for the assignment of transmitted data to given variables. This is particularly important if, according to a communication protocol, the values of several variables are exchanged one after another as a bit sequence.

As "parameter" is meant any information transmitted from the volume to the lock after the first communication protocol to determine the second communication protocol. By contrast, what is referred to as "data" is all that is transmitted according to the second communication protocol.

Preferably, the lock communicates by means of the second communication protocol with at least one key. The lock can therefore communicate with appropriate parameters with keys of any locking system type and thus be integrated into this lock system type.

wobei m die Dimension des Vektorraums ist und somit die beim gegebenen Schließanlagentyp maximale Anzahl der verwaltbaren Schließgruppen angibt. Ein binärer Vektor der Länge m wird manchen Schließsystemtypen sowohl auf dem Schlüssel (γ →) als auch in der Tür (ρ →) gespeichert. Eine Berechtigung eines bestimmten Schlüssels an einer bestimmten Tür kann vorliegen wenn das Skalarprodukt γ →·ρ → = 1. Entsprechend wird bei der Berechtigungsprüfung entweder γ → oder/oder ρ → und die jeweils andere Komponente übertragen und m kann ein relevanter Parameter sein, um eine einen Vektor γ → enthaltende Bitfolge auszuwerten. Entsprechend kann auch die Darstellung von binären Vektoren, wie z. B. der binären Vektoren der Vektorräume T, G, S Parameter des zweiten Kommunikationsprotokolls sein. Bevorzugt wird bei der Übertragung der Parameter ein Header übertragen, der nachfolgende Informationen der Übertragung als Parameter des zweiten Kommunikationsprotokolls kennzeichnet. Dadurch kann das Schloss anhand des Headers unterscheiden, ob eine Kommunikation mit einem Schlüssel erfolgt oder ob es an einen Schließsystemtyp angepasst wird.Preferably, at least the size of the vector spaces of the doors and / or the keys and / or the locking groups is transmitted as at least one parameter. These sizes are often essential for the memory management of the lock and / or the key and for the bit length of the corresponding variables and fields, because in many locking systems in the authorization check the information is exchanged in which locks and / or locking groups of the respective key is authorized. All doors, locking groups and keys of a locking system form the basis for the respective binary vector space T, G or S. Thus, the dimensions of the respective vector spaces T, G, S limit the maximum number of locks, locking groups or locking mechanisms that can be integrated in a locking system of the given locking system type Key. The dimension of the corresponding vector space is information about the storage space required for representing the vectors, which is relevant when extracting such vectors from a bit sequence. For example, the vector space G of the groups can be represented as

where m is the dimension of the vector space and thus indicates the maximum number of manageable locking groups in the given locking system type. A binary vector of length m is stored on some types of locking systems both on the key (γ →) and in the door (ρ →). An authorization of a certain key at a certain door may be present if the scalar product γ → · ρ → = 1. Accordingly, in the authorization check either γ → or / or ρ → and the respective other component is transmitted and m can be a relevant parameter to to evaluate a bit sequence containing a vector γ →. Accordingly, the representation of binary vectors, such. B. the binary vectors of the vector spaces T, G, S be parameter of the second communication protocol. In the transmission of the parameters, a header is preferably transmitted which identifies the following information of the transmission as a parameter of the second communication protocol. This allows the lock to distinguish based on the header whether it is communicating with a key or whether it is being adapted to a type of locking system.

Preferably, parameters of the second communication protocol are transmitted in blocks, wherein a specific block section identifies the parameter and at least one further block section identifies the value of the parameter. The block preferably contains an indication of its size. This increases the flexibility of the first communication protocol, and makes it possible to omit unnecessary parameters.

A preferred parameter of a second communication protocol is, for. For example, the type of encryption of the lock-to-key communication, or the way in which authorizations are temporally limited.

Another preferred parameter is the way of retrieving data from the lock or key. For example, the second communication protocol allow immediate read and / or write access to specific memory areas of the respective communication partner. Then also the jump addresses (pointers) to the corresponding memory locations are preferably parameters of the second communication protocol. In particular, in the transmission of the parameters, the information can be transmitted on how a bit sequence transmitted according to the second communication protocol is to be interpreted. Some types of locking equipment, when checking authorization of a key, read data from standardized storage areas of the key, e.g. As a passive RFID transponder from. This data is preferably transmitted as a bit sequence in which values of two or more variables are stored. Then the values of the individual variables for checking the authorization, such as As a lock group number, a door number, etc., extracted from the bit sequence. The information about the positions of the values of the variables in the bit string are preferably transmitted after the first communication protocol.

Preferably, at least one parameter in the lock has a standard value (default value) which can be replaced by another value when transmitting the information. As a result, the amount of information to be transmitted can be reduced and there can be a "default protocol". It is then sufficient to transmit the deviations of the second communication protocol to the lock.

Preferably, at least one piece of information is transmitted which represents the data format of the data stored or to be stored on the key and / or the lock. For example, data can be stored in compressed form and / or transferred. Then also the information would be if and if so which compression method application is a preferably transmitted parameter of the second communication protocol.

Preferably, at least one piece of information is transmitted, which stands for at least one memory address in at least one key from which data is read for checking the authorization of the key become. For example, an entry address for reading a crypto-key can be transmitted.

Preferably, at least one parameter is transmitted, by means of which an encryption method for protecting data transmitted according to the second communication protocol is selected. Then the lock can be used in locking systems with various encryption methods.

Preferably, the information about the affiliation of the lock is transmitted to a specific locking system as a parameter.

Likewise, the information about a particular locking system type can be transmitted to the lock as a parameter. In this case, a corresponding parameter set is stored on the lock for at least one locking system type. The transmission of only one locking system type can be done much faster than the transmission of a whole parameter set. As a result, the time to learn the lock can be significantly shortened.

The information is preferably transmitted via the same interface from the data carrier, via which the communication with the keys is also carried out later. This avoids additional interfaces and thus costs. For example, it may be sufficient to hold a first RFID transponder with the parameters in front of a lock, so that the first RFID transponder and the lock can communicate so as to provide the parameters for later communication with the keys, which are also RFID transponders to hand over. Then, the communication with the first RFID transponder via the first communication protocol and the communication with the other RFID transponders according to the second communication protocol.

During transmission, information about at least two communication protocols is preferably transferred. Then a lock can be involved simultaneously in two or more locking systems of different types. For example, it may then first attempt communication with a key after a first second communication protocol, and if this fails, begin communication for at least one further second communication protocol.

The invention has been described with reference to a lock to be fitted in a locking system. However, electronic locks and keys - apart from their mechanical components - are basically interchangeable. Therefore, in the same way a key can be adapted to a given type of locking system. The same applies to any other component of a locking system that communicates with a key or a lock.

Description of the drawings

The invention will now be described by way of example without limitation of the general inventive idea by means of embodiments with reference to the single drawing.

In the method in 1 communicates a component of an electromechanical locking system, such as an electromechanical lock 10 with a disk 20 after a given, ie the lock 10 and the disk 20 known first communication protocol. The disk 20 may be, for example, the RFID transponder card shown. The castle 10 is shown here by way of example as a knob cylinder. Communication is between the castle 10 and the disk 20 first an encrypted data link 30 built up, and then from the disk 10 to the castle 20 a header 31 transfer. Based on the header 31 recognizes the lock, that following parameters 33 a second communication protocol associated with a particular type of locker. It goes into a "learning mode" by an arrow 32 is indicated. In learning mode, a second communication protocol is based on the transmitted parameters 33 parameterized. Now the lock can be inserted in a concrete locking system, eg. B. in which you give him a lock ID 34 , and / or a group ID 35 and / or encryption parameters 36 the concrete locking system communicates. This can already be done on the basis of the second communication protocol, for example by means of a separate data carrier 22 , a configuration unit (not shown) or a control center of the locking system (not shown). The castle 10 now has all the information it needs to be authorized 37 a key 24 to check the locking system.

LIST OF REFERENCE NUMBERS

10

lock

20

Disk / RFID card

24

key

30

encrypted data link

31

Header

32

learning mode

33

parameter

34

Castle ID

35

Group ID

36

encryption parameters

37

authorization

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 4342641 A1 [0004]
• DE 19913931 [0004]
• EP 0671712 A1 [0004]

Claims (11)

Method for setting up an electromagnetic lock ( 10 ), comprising at least the steps: - transmitting at least one parameter ( 33 ) from a first volume ( 20 ) to the castle ( 10 ) according to a first communication protocol, and - determining at least one second communication protocol based on the parameter transmitted after the first communication protocol ( 33 ). Method according to claim 1, characterized in that as parameter ( 33 ) at least the position of at least one value of at least one variable in a bit string exchanged according to the second communication protocol is transmitted. Method according to claim 1 or 2, characterized in that the lock ( 10 ) by means of the second communication protocol with at least one key ( 24 ) communicates. Method according to one of the preceding claims, characterized in that information about the authorization of keys ( 24 ) of a particular locking system according to the second communication protocol to the lock ( 10 ) be transmitted. Method according to one of the preceding claims, characterized in that as parameter ( 33 ) at least the size of the vector spaces of the doors and / or the keys ( 24 ) and / or the locking groups is transmitted. Method according to one of the preceding claims, characterized in that when transmitting by means of the first communication protocol in front of the parameter a header ( 31 ) that transmits the following information as a parameter ( 33 ) of the second communication protocol. Method according to one of the preceding claims, characterized in that the parameters ( 33 ) are transferred in blocks, whereby a specific block section sets the parameter ( 33 ) and at least one further block section identifies the value of the parameter ( 33 ). Method according to one of the preceding claims, characterized in that at least one parameter ( 33 ) is transmitted for the data format of the key ( 24 ) and / or the lock ( 10 ) stored or to be stored data is. Method according to one of the preceding claims, characterized in that at least one parameter ( 33 ) transmitted for at least one memory address in at least one key ( 24 ) from which to verify the authorization of the key ( 24 ) Data are read out. Method according to one of the preceding claims, characterized in that at least one parameter ( 33 ), on the basis of which an encryption method for protecting data transmitted according to the second communication protocol is selected. Method according to one of the preceding claims, characterized in that the information about the affiliation of the lock ( 10 ) is transferred to a specific locking system.

Images