DE102011054637B4 - Procedure for configuring an electromechanical lock - Google Patents

Abstract

Method for setting up an electromechanical lock (10), comprising at least the steps:
- transmitting at least one parameter (33) from a first data carrier (20) to the lock (10) according to a first communication protocol, wherein at least one parameter (33) is transmitted which stands for at least one memory address in at least one key (24) from which data is read to check the authorization of the key (24) and
- Determining at least a second communication protocol by the lock based on the parameter transmitted after the first communication protocol (33).

Description

There are a variety of procedures for checking the authorization of electronic keys, such as radio keys, for example the disclosure documents describe DE 43 42 641 A1 , DE 199 13 931 and EP 0 671 712 A1 such methods for checking the authorization of keys. Such methods are usually based on whether data stored in the key matches data stored in the lock. At least part of this data is transmitted between the lock and the key via a communication protocol.

DE 102 37 715 A1 describes a gateway control unit for accessing a vehicle control system. The gateway control unit can receive data from a server via a radio data link and is connected to several control units in the vehicle via at least one vehicle bus in order to apply new program codes to the control units via software download or remote flashing. The gateway control unit can be freely configured for this purpose. In short, the gateway control unit is configured via a radio data link so that the gateway control unit then serves as a programming device for a control unit.

DE 197 01 740 A1 describes a "Keyless Go" locking system for a motor vehicle. The locking system has a key in which a first, relatively long code is stored, which is queried by the immobilizer and, if necessary, unlocks it. This key also has a second, shorter code, which can be transmitted quickly and is queried to unlock the door. The codes are transmitted in encrypted form, as usual. The selection of a corresponding code is carried out by the respective "lock", either by a precommand or by the length of a random number transmitted by the lock, which is encrypted using the corresponding code and then transmitted back to the lock.

DE 101 38 217 A1 proposes that, during communication between a transponder and a base station, the header of the data packets should contain information about the data transmitted in the middle section of the data packets, e.g. their identifier.

In the WO 2010/039598 A2 A method is described for integrating a lock into a locking system. To do this, the corresponding lock is first put into a learning mode by holding up a special smart card. In this learning mode, a second communication channel to a PDA (Personal Digital Assistant) is opened. The information about the locking system is transmitted to the lock via this previously known second communication channel. In the learning mode, the PDA can also install a firmware update, among other things.

The technical teaching of WO 00/55796 A1 is based on the observation that ATM card readers are not able to read subsequent and therefore faster generations of data cards. The solution is proposed that a more modern data card initially transmits the information in a standard mode that it can also transmit in a faster mode. The card reader then reads the information from the card using the new transmission mode and always uses the new transmission mode for this card in the future. The new transmission mode is defined using two tables that show at what times of a reference clock certain information is read by the lock from a defined data frame or written by the lock into a data frame.

WO 2008/144 804 A1 reveals a lock with a card reader. The card reader is integrated into a locking system by holding up a learning card.

representation of the invention

The invention is based on the observation that there are a large number of suppliers of electromechanical locking systems whose components are not interchangeable or combinable with one another, even though they use identical radio keys that, for example, come from a common supplier or are standardized. Once you have decided on a locking system from a first supplier, the type of locking system is fixed and you cannot later integrate a lock from another supplier into the existing locking system, i.e. you cannot usually unlock and/or lock with the existing keys from the first supplier and/or add them to existing locking groups.

The invention is based on the object of offering a method with which electromechanical locks from different manufacturers can be integrated into a locking system.

This object is achieved by a method according to claim 1. Advantageous embodiments of the invention are specified in the subclaims.

The invention is based on the realization that a lock of a first manufacturer ler could theoretically communicate with keys of a locking system from another manufacturer, but that this fails in practice because the manufacturers use different communication protocols. These communication protocols are currently encoded in the respective firmware of the locks and thus can no longer be changed after delivery or can only be changed with great effort. On the other hand, the invention is based on the knowledge that the communication protocols used between a lock and a key can be parameterized. It is therefore sufficient to transfer the information about the parameters of the communication protocol used within a certain locking system type to a lock so that it can then communicate with these parameters and thus with other components of the corresponding locking system type.

The method for setting up an electromechanical lock has at least two steps; namely, as a first step, the transmission of at least one parameter from a first data carrier to the lock according to a first communication protocol, and as a later step, the determination of at least one second communication protocol based on the parameter or parameters transmitted according to the first communication protocol. According to the method, a lock can be adapted to this specific locking system, or so to speak, taught, by transmitting information necessary for communication between components of a specific locking system type. Typical components of a locking system are usually programmable keys and locks and usually also programming devices. It is therefore sufficient to provide a first communication protocol by means of which the parameters of at least one locking system type, i.e. the parameters of a second communication protocol, can be transmitted to the lock and/or at least one key. After the parameters of the second communication protocol have been transmitted, the lock can be adapted to a specific locking system type; this can be triggered, for example, by the transmission. The lock can then be integrated, for example, into an existing locking system of this locking system type. It is not necessary to install manufacturer-specific firmware to adapt to the locking system type. Only the transmitted parameters ensure that the data transmitted using the second communication protocol can be correctly interpreted by the lock.

The method can be used for all components of a locking system that communicate with each other, i.e. not just for locks. Strictly speaking, it is therefore a method for setting up a component of an electromechanical locking system. For the sake of clarity, the invention is explained using the example of a lock.

The component, i.e. the lock, generates the second communication protocol after the parameters have been transferred, i.e. it has all the information it needs to exchange data with other components of the locking system type determined by the second communication protocol. Exchanging data can, for example, involve carrying out an authorization query. The result can therefore also be that a key (as a synonym for another component) does not have the necessary authorization.

Preferably, information about the authorization of keys of a specific locking system is transferred to the lock using the second communication protocol. This makes it possible to transfer this information using the manufacturer-specific tools.

In some locking system types, the authorization check is carried out in such a way that a secure, i.e. encrypted, data path is first established between the communication partners. So-called crypto keys are used for this, which are secret values that are used to encrypt and/or decrypt the data to be transmitted. If the crypto keys of two communication partners do not match, a secure data path cannot be established; the communication partners still communicate with each other because the second communication protocol enables them to exchange the data required to establish the secure data path. This exchange is also initiated correctly, but the authorization check is aborted because the crypto key check shows that they do not match. In most locking systems, the crypto key is not one of the parameters of the locking system type, but the encryption algorithm usually is. The encryption algorithm, however, can also be specified by a standard and is then preferably stored in the hardware or firmware.

If the crypto keys match, this is usually assessed as "basic authorization". With some types of locking systems, additional data stored in the key and/or lock is compared with each other, e.g. whether the key has authorization for a specific door and/or locking group, whether the authorization is time-limited, whether there are exceptions within a locking group, etc. This additional information is usually evaluated before the corresponding lock is released.

The parameters of the second communication protocol are generally not the information belonging to a specific object or building (hereinafter "object-specific information"), such as the locking system number or the membership of a component in a specific locking group, but the information that is necessary to be able to read and/or write object-specific information, provided that the authorization to do so exists. In one embodiment of the invention, the term parameter does not necessarily refer to the commands available for communication; it preferably refers to at least the information necessary for assigning transmitted data to given variables. This is particularly important when, according to a communication protocol, the values of several variables are exchanged one after the other as a bit sequence.

A "parameter" refers to any information that is transferred from the data carrier to the lock using the first communication protocol in order to determine the second communication protocol. On the other hand, "data" refers to everything that is transferred using the second communication protocol.

Preferably, the lock communicates with at least one key using the second communication protocol. With appropriate parameterization, the lock can therefore communicate with keys of any locking system type and can thus be integrated into this locking system type.

wobei m die Dimension des Vektorraums ist und somit die beim gegebenen Schließanlagentyp maximale Anzahl der verwaltbaren Schließgruppen angibt. Ein binärer Vektor der Länge m wird manchen Schließsystemtypen sowohl auf dem Schlüssel $\left(\stackrel{\rightharpoonup }{\gamma }\right)$

als auch in der Tür $\left(\overrightarrow{\rho }\right)$

gespeichert. Eine Berechtigung eines bestimmten Schlüssels an einer bestimmten Tür kann vorliegen wenn das Skalarprodukt $\overrightarrow{\gamma }\cdot \overrightarrow{\rho }$

Entsprechend wird bei der Berechtigungsprüfung entweder $\overrightarrow{\gamma }$

oder/oder $\overrightarrow{\rho }$

und die jeweils andere Komponente übertragen und m kann ein relevanter Parameter sein, um eine einen Vektor $\overrightarrow{\gamma }$

enthaltende Bitfolge auszuwerten. Entsprechend kann auch die Darstellung von binären Vektoren, wie z.B. der binären Vektoren der Vektorräume T,G,S Parameter des zweiten Kommunikationsprotokolls sein. Bevorzugt wird bei der Übertragung der Parameter ein Header übertragen, der nachfolgende Informationen der Übertragung als Parameter des zweiten Kommunikationsprotokolls kennzeichnet. Dadurch kann das Schloss anhand des Headers unterscheiden, ob eine Kommunikation mit einem Schlüssel erfolgt oder ob es an einen Schließsystemtyp angepasst wird.Preferably, at least the size of the vector spaces of the doors and/or the keys and/or the locking groups is transmitted as at least one parameter. These sizes are often essential for the memory management of the lock and/or the key as well as for the bit length of the corresponding variables and fields, because in many locking systems, the information about which locks and/or locking groups the respective key is authorized for is exchanged during the authorization check. All doors, locking groups and keys of a locking system form the basis for the respective binary vector space T, G or S. Thus, the dimensions of the respective vector spaces T, G, S limit the maximum number of locks, locking groups or keys that can be integrated into a locking system of the given locking system type. The dimension of the corresponding vector space is information about the storage space required to represent the vectors, which is relevant when extracting such vectors from a bit sequence. For example, the vector space G of the groups can be represented as $$\stackrel{\rightharpoonup }{\gamma }=\left(\begin{array}{c}{\gamma }_1\\ {\gamma }_2\\ ⋮\\ {\gamma }_m\end{array}\right);{\gamma }_i\in \left\{\mathrm{0,1}\right\},$$

where m is the dimension of the vector space and thus indicates the maximum number of locking groups that can be managed for a given locking system type. A binary vector of length m is used for some locking system types both on the key $\left(\stackrel{\rightharpoonup }{\gamma }\right)$

as well as in the door $\left(\overrightarrow{\rho }\right)$

stored. An authorization of a certain key on a certain door can exist if the scalar product $\overrightarrow{\gamma }\cdot \overrightarrow{\rho }$

Accordingly, the authorization check either $\overrightarrow{\gamma }$

or/or $\overrightarrow{\rho }$

and the other component and m can be a relevant parameter to create a vector $\overrightarrow{\gamma }$

containing bit sequence. Accordingly, the representation of binary vectors, such as the binary vectors of the vector spaces T, G, S, can also be parameters of the second communication protocol. When transmitting the parameters, a header is preferably transmitted that identifies subsequent information in the transmission as parameters of the second communication protocol. This allows the lock to use the header to distinguish whether communication is taking place with a key or whether it is being adapted to a locking system type.

Preferably, parameters of the second communication protocol are transmitted in blocks, with a specific block section identifying the parameter and at least one further block section identifying the value of the parameter. Preferably, the block contains an indication of its size. This increases the flexibility of the first communication protocol and makes it possible to omit parameters that are not required.

A preferred parameter of a second communication protocol is, for example, the type of encryption of the communication between lock and key, or the type of representation of time limitations of authorizations.

Another preferred parameter is the type of data query from the lock or key. For example, the second communication protocol can enable immediate read and/or write access to certain memory areas of the respective communication partner. In this case, the jump addresses (pointers) to the corresponding memory locations are also preferably parameters of the second communication protocol. In particular, when the parameters are transmitted, information can be transmitted about how a protocol is to be interpreted. When checking the authorization of a key, some types of locking systems read data from standardized memory areas of the key, e.g. a passive RFID transponder. This data is preferably transmitted as a bit sequence in which the values of two or more variables are stored. The values of the individual variables for checking the authorization, such as a locking group number, a door number, etc., are then extracted from the bit sequence. The information about the positions of the values of the variables in the bit sequence is preferably transmitted according to the first communication protocol.

Preferably, at least one parameter in the lock has a standard value (default value) that can be replaced by another value when the information is transmitted. This can reduce the amount of information to be transmitted and there can be a "default protocol". It is then sufficient to transmit the deviations of the second communication protocol to the lock.

Preferably, at least one piece of information is transmitted that represents the data format of the data stored or to be stored on the key and/or the lock. For example, data can be stored and/or transmitted in a compressed form. Then the information on whether and, if so, which compression method is used would also be a preferably transmitted parameter of the second communication protocol.

According to the invention, at least one piece of information is transmitted which represents at least one memory address in at least one key, from which data is read to check the authorization of the key. For example, an entry address can be transmitted to read a crypto key.

Preferably, at least one parameter is transmitted, based on which an encryption method is selected to protect data transmitted according to the second communication protocol. The lock can then be used in locking systems with various encryption methods.

Preferably, the information about the lock's affiliation to a specific locking system is transmitted as a parameter.

Information about a specific locking system type can also be transferred to the lock as a parameter. In this case, a corresponding parameter set is stored on the lock for at least one locking system type. The transfer of just one locking system type can be done much faster than the transfer of an entire parameter set. This can significantly reduce the time required to teach the lock.

Preferably, the information is transmitted from the data carrier via the same interface that is later used for communication with the keys. This avoids additional interfaces and therefore costs. For example, it may be sufficient to hold a first RFID transponder with the parameters in front of a lock so that the first RFID transponder and the lock can communicate in order to transfer the parameters for later communication with the keys, which are also RFID transponders. Communication with the first RFID transponder then takes place via the first communication protocol and communication with the other RFID transponders according to the second communication protocol.

Preferably, information about at least two communication protocols is transferred during transmission. A lock can then be integrated into two or more locking systems of different types at the same time. For example, it can first attempt communication according to a first second communication protocol with a key and, if this fails, start communication according to at least another second communication protocol.

The invention has been described using a lock to be fitted into a locking system. However, electronic locks and keys - apart from their mechanical components - are fundamentally interchangeable. Therefore, a key can also be adapted to a given type of locking system in the same way. The same applies to any other component of a locking system that communicates with a key or a lock.

Description of the drawings

The invention is described below without limiting the general inventive concept by means of exemplary embodiments with reference to the single drawing.

In the proceedings in 1 a component of an electromechanical locking system, for example an electromechanical lock 10, communicates with a data carrier 20 according to a given first communication path known to the lock 10 and the data carrier 20. protocol. The data carrier 20 can, for example, be the RFID transponder card shown. The lock 10 is shown here as a knob cylinder by way of example. For communication, an encrypted data path 30 is first set up between the lock 10 and the data carrier 20, and then a header 31 is transmitted from the data carrier 10 to the lock 20. The lock recognizes from the header 31 that parameters 33 of a second communication protocol belonging to a specific locking system type are subsequently transmitted. It goes into a "learning mode", which is indicated by an arrow 32. In the learning mode, a second communication protocol is parameterized based on the transmitted parameters 33. The lock can now be inserted into a specific locking system, e.g. by providing it with a lock ID 34, and/or a group ID 35 and/or encryption parameters 36 of the specific locking system. This can be done using the second communication protocol, for example using a separate data carrier 22, a configuration unit (not shown) or a central unit of the locking system (not shown). The lock 10 now has all the information it needs to check the authorization 37 of a key 24 of the locking system.

list of reference symbols

10

Lock

20

data carrier / RFID card

24

Key

30

encrypted data path

31

header (data header)

32

learning mode

33

parameter

34

lock ID

35

group ID

36

encryption parameters

37

authorization

Claims (10)

Method for setting up an electromechanical lock (10), comprising at least the steps: - transmitting at least one parameter (33) from a first data carrier (20) to the lock (10) according to a first communication protocol, wherein at least one parameter (33) is transmitted which stands for at least one memory address in at least one key (24), from which data is read out to check the authorization of the key (24), and - determining at least one second communication protocol by the lock based on the parameter (33) transmitted according to the first communication protocol. procedure according to claim 1 , characterized in that at least the position of at least one value of at least one variable in a bit sequence which is exchanged according to the second communication protocol is transmitted as a parameter (33). procedure according to claim 1 or 2 , characterized in that the lock (10) communicates with at least one key (24) by means of the second communication protocol. Method according to one of the preceding claims, characterized in that information about the authorization of keys (24) of a specific locking system is transmitted to the lock (10) according to the second communication protocol. Method according to one of the preceding claims, characterized in that at least the size of the vector spaces of the doors and/or the keys (24) and/or the locking groups is transmitted as a parameter (33). Method according to one of the preceding claims, characterized in that when transmitting by means of the first communication protocol, a header (31) is transmitted before the parameter, which identifies subsequent information as a parameter (33) of the second communication protocol. Method according to one of the preceding claims, characterized in that the parameters (33) are transmitted in blocks, wherein a specific block section identifies the parameter (33) and at least one further block section identifies the value of the parameter (33). Method according to one of the preceding claims, characterized in that at least one parameter (33) is transmitted which represents the data format of the data stored or to be stored on the key (24) and/or the lock (10). Method according to one of the preceding claims, characterized in that at least one parameter (33) is transmitted, based on which an encryption method for protecting data transmitted according to the second communication protocol is selected. Method according to one of the preceding claims, characterized in that the information about the affiliation of the lock (10) to a specific locking system is transmitted.

Images