WO2019180173A1 - Safe and safe security system - Google Patents

Abstract

The invention relates to a safe (12, 14) for use by changing users, particularly a rental safe, having a user interface (22) for the input of at least one authentication means (30) for authorizing the access to the interior of the safe (12, 14) directly on the safe (12, 14), and an access monitoring device (26) for monitoring the access by means of at least one access feature (28) for verifying the at least one authentication means (30) authorizing access. The safe comprises at least one data transmission interface (24), wherein the access monitoring device (26) is configured to receive information (32) from outside via said data transmission interface (24) or one of the data transmission interfaces (24), which information specifies the period of validity of the at least one access feature (28), and wherein the authentication means (30) can only be input via the user interface (22), and at least one operating function of the safe (12, 14) differing from the input of the authentication means (30) can be performed by data transmission over a network. The invention further relates to the use of a safe (12, 14) of this kind by changing users and a safe security system (10) comprising at least one safe (12, 14) of this kind.

Description

 SAFE AND SAFE SAFETY SYSTEM

The invention relates to a safe for use by changing users, with a Benut zerschnittstelle to enter at least one access to the interior of the safe authorize the authentication means directly at the safe, an access control device for controlling the access by means of at least one access feature for verifying the at least one authentication means. The invention further relates to a safe-security system with at least one such safe.

Such safes are known as hotel safes or other Mietsafes. A conventional hotel safe has a locking device and a control device controlling this locking device with a display and a number pad keyboard as user interfaces. The ses control unit serves as an access control device. The user of the safe enters via the Ziffemblock keyboard an access feature forming a access record in the form of a sequence of numbers, closes the safe, and waits for the locking of the safe through the Verriege treatment device. To open the safe, the user enters access data as an authentication means via the number pad keypad. If the entered access data correspond to the access data record, the safe opens. In such a safe usually stored in the control unit master access record is provided. The safe opens independently of the currently selected access data record by entering the access data via the key pad keypad corresponding to this master access data record. Such a master access record is required whenever the user selects the currently selected forgot access record or leaves the safe locked at check-out. The master credential is typically a fixed set of data known in the practice of using an ever-increasing number of peers. This is a certain security gap of such safes.

It is an object of the invention to provide measures that increase the security of safes, where the access to the safe via a manual input of the authentication means, he to heights. The object is solved by the features of the independent claims. Preferred embodiments of the invention are set forth in the dependent claims and the description which follows, each of which individually or in combination may constitute an aspect of the invention. In the safe according to the invention with the user interface and the Zugangkontrollein direction is provided that the safe continues to have a data transmission interface, wherein the access control device is configured to receive information via this data transmission interface or via one of the data transmission interfaces from the outside, which determines the period of validity of the at least one access feature, and wherein the input of the authentication means via the user interface, and at least one different from the input of the authentication means control function of the safe by data transfer via network feasible. By means of this measure, it is possible for the validity period of the at least one access feature to be provided by means of a data processing device from a location which is independent of the location of the safe. At the same time, it is ensured that the user is "on-site" to enter the authentication means, while other control functions, such as configuring safe properties, can also be performed remotely. The corresponding data transmission over the network can be achieved via the mentioned data transmission Interface or alternatively via an optional further a data transfer interface of the safe done. The data processing device can be particularly secured - for example, in that it is placed in a place that is under a special observation device. For example, in a hotel, this can be a computer at the concierge desk or at work. The safe is accordingly a hotel safe. The information determining the period of validity of the access feature is, for example, a data record with (a) an address of the individual safe and (b) a relatively or absolutely indicated time indication of a loss of validity of the access feature for the (respective) safe. In general, the safe is a safe for use by changing users, usually a Mietsafe. Such a safe is often located in a housing unit to be rented, eg a hotel room, etc. A safe for use by changing users often allows the user to independently define and / or modify the authentication means. Normally, the user uses the safe by spending at least one thing in the interior of the safe, beginning at the beginning of use, during use, and retrieving this thing or all things that have been brought into the interior during use from inside the safe, so that At the end of use, he has taken all things out of the safe. For this purpose, the safe usually has a designed as a door device for opening Ver close the safe. The removal of things in the safe as well as the retrieval of things from the safe then done via this device for openable closing the safe. In other words, the access to the inside of the safe, which is due to use, takes place via this device for the purpose of opening the safe. The Zugangkontrolleinrich device acts accordingly on this device for openable closing the safe. Normally, every access is made via the same device for the openable closing of the safe.

Since a validity period of the access feature is defined in the safe according to the invention, which determines an earliest use beginning and a latest end of use for use by a corresponding user, the use of the safe according to the invention by a user thus characterized by a defined beginning of use and a defined use de. Different use of the safe is strictly speaking not to be regarded as a "normal" use. The user interface or user interface is by definition the place or action with which a person comes in contact with a machine (in this case the safe). In the simplest case, this is for example a switch. The user interface provides an immediate human-machine interaction or quasi-direct human-machine interaction that extends to a near-field region limited to the wavelength of the corresponding signal transmission. Thus, communication by means of - in particular implanted chips for near-field communication (NFC: Near Field Communication) is to be understood as such a quasi-immediate interaction between human and machine. The safe is preferably a safe class B, more preferably a safe of the security level Cl or C2.

According to a preferred embodiment of the invention, the access control device is set up to continue to receive information via a data transmission interface of the safe by data transmission from the outside, from which the access feature itself results.

According to a further preferred embodiment of the invention, the at least one authentication means is a pure authentication information and / or an authentication means carrying the authentication information. The access feature as well as the authentication information can be present as pure data (access or authentication data), for example as a code consisting of a four-digit number sequence. This is the authentication means carrying authentication means in particular a chip card or other access card. In principle, the authentication means can naturally also be a key or the like.

The safe is preferably set up in such a way that the access control takes place via a manual input of authentication means to be compared with the access feature. For this purpose, the safe on the user interface such as the aforementioned Ziffemblock keyboard.

In particular, it is provided that the user interface is a user interface for inputting biometric data of the user. Such a user interface is, for example, a fingerprint scanner, a camera system for face recognition and / or iris recognition.

According to yet another preferred embodiment of the invention, the safe has a locking system with a locking device and a control device that controls this locking device and that forms the access control device. Accordingly, this locking device acts in particular on the already he mentioned device for openable closing of the safe. Advantageously, the safe further comprises at least one of the following components:

 a sensor for monitoring the interior of the safe,

 a receiver of a navigation satellite system,

 Means for implementing a WLAN and / or Bluetooth and / or 3G communication,

a coded-decoding device for encrypted communication and

a redundant locking system. The data transfer interface of the safe is in the simplest case an interface for receiving data. According to a preferred embodiment of the invention, the data transmission interface is designed as a bidirectional interface, that is to say as an interface for the transmission and reception of data.

According to a further preferred embodiment of the invention, the data transmission interface is designed as an interface for a wireless data transmission (air interface). According to an alternative, but also preferred embodiment of the invention, the data transmission interface is designed as an interface for a wired data transmission.

Finally, the safe advantageously also has means for providing service functions, in particular for transmitting service information to the user or a mobile device of the user. This service information is in particular information about the state of the safe and / or state changes of the safe. These are determined by the safe, for example, by means of the mentioned sensor for monitoring the interior of the safe, etc.

The invention further relates to the use of an above-mentioned safe, in particular as Mietsafe in a rental unit, by changing users.

The safe security system according to the invention comprises at least one safe and a data processing device for providing (i) at least one piece of information, from which an access characteristic for the at least one safe results and / or (ii) at least one information forming the validity periods of the Access feature for the at least one safe be true. In this case, the data processing device with the at least one safe data transmission technology connected, wherein the at least one safe is designed as above-mentioned safe.

According to a preferred embodiment of the invention, it is provided that the system has a user terminal with an interface for inputting an input, from which the information about the period of validity of the access feature and / or the information about the access feature results. This interface is in particular a user interface for manually inputting the input. In this case, it is preferably provided that the user terminal has an authentication device for authenticating a user of the user terminal and / or for authenticating a data source which inputs the information about the access feature and / or the information about the validity period of the access feature via the interface , According to a further preferred embodiment of the invention, the safe security system has a network for data transmission (data network), in which the at least one safe, the data processing device and the user terminal are interconnected. Via this network, the access features and information about the validity of the access features are transmitted.

In one embodiment of the invention, the user terminal on the Datenverarbeitungsein direction. It is preferably provided that the network is a local area network (LAN network). In another embodiment of the invention, the network is a network set up for cloud computing. Such a network configured for cloud computing accordingly comprises a cloud, this cloud having the data processing device. Such a network is part of the Internet in particular. According to yet another preferred embodiment of the invention, the data transfer takes place between the data processing device and the at least one safe via at least one of the following standards for data transmission:

(i) Bluetooth,

 (ii) Zigbee,

 (iii) LAN, in particular WLAN, or

 (iv) another known standard for wireless and / or wired data transmission.

The invention will now be described by way of example with reference to the accompanying drawings with reference to preferred embodiments, the following dargestell th features each individually and in combination may represent an aspect of the invention. Show it:

1 shows a safe security system with a data processing device and safes according to a first preferred embodiment of the invention and

2 shows a safe security system with a data processing device and safes according to a second preferred embodiment of the invention.

Fig. 1 shows a safe security system 10 with two safes 12, 14 and a user end device (terminal) 16, which are interconnected at various nodes in a network 18 (data network). Each of the safes 12, 14 comprises a locking system 20 with a locking device, a user interface 22, a data transmission interface 24 and an access control device 26 for controlling access to the interior of the safe 12, 14 by means of at least one access feature 28 for verifying at least one of them Access authoritative authentication means 30. The user interface 22 is at For example, a keyboard, a touch screen or a fingerprint scanner; The locking system 20 is in particular a redundant locking system 20. The safes 12, 14 may have further components, such as: a sensor for monitoring the interior of the safe 12, 14, a receiver of a navigation satellite system, means for implementing a WLAN and / or or Bluetooth and / or 3G communication and / or an encoding / decoding device for an encrypted communication (said further components are not explicitly shown). The electronics housings of the respective safes 12, 14 are provided with "anti-tamper" engagement protection. While the input of the authentication means 30 can be made only via the user interface 22, at least one of this input of the authentication means 30 different operating function of the safe 12, 14 carried by data transmission via network. This network may be the aforementioned network 18, in which also the user terminal (terminal) 16 is interconnected, or another network. The different operating function of the safe 12, 14 takes place in particular by means of a mobile terminal, for example a mobile phone called a smartphone or a tablet.

The access feature 28 indicated here, as well as the indicated authentication means 30, is in the example a pure information in the form of a code consisting of four digits di - d ₄ . In this case, the access control device 26 of each safe 12, 14 is set up to receive via the respective data transmission interface 24 of the safe 12, 14 an information 32 via the network 18 from the outside, the validity of the at least one access feature 28 for this safe 12th , 14 determined. The information shown here includes the number # of the safe 12, 14 and the expiration date of the next access feature (in a common form "dd.mm.yy"). The user terminal 16 is for example a computer (PC: personal computer) and comprises a data processing device 34, a data transmission interface 36, a plurality of user interfaces 38 and an authentication device 40. The user interface 38 is, for example, a keyboard and the authentication device 40 is also, for example a fingerprint scanner. The data processing Device 34 serves (among other things) to provide at least one item of information 42, from which the access feature 28 for the at least one safe 12, 14 results and / or at least one information 32, which determines the validity period of the access feature 28 for the at least one safe 12 , 14 determined. The data processing device 34 of the user terminal 16 is connected via its data transmission interface 36 and the network 18 to the safes 12, 14 of the system 10 in terms of data transmission technology. The network 18 is a local network or the Internet itself.

The result is the following function:

To use one of the safes 12, 14, the access feature 28 and the validity period of this access feature 28 are provided by the user terminal 16 from a location that differs from the location of the safe 12, 14, namely the user terminal 16. The user terminal 16 is particularly secured, since it is placed in a place that is under a special observation. In a hotel, for example, this can be a computer at the concierge desk or at work. The user terminal 16 has the data processing device 34 in this example. Safe 12, 14 is a hotel safe. The information 42 determining the access feature 28 and the information 32 determining the validity period of the access feature are input by the user / hotel guest via the user interface 38, after he has authenticated himself at the reception by personal document or via the authentication device 40. The information 32 determining the period of validity of the access feature is a data record with (i) an address of the individual safe # and (ii) an absolutely specified time indication of a loss of validity of the access feature for the corresponding safe. Usually this is the day of departure.

Subsequently, the user / hotel guest can access the corresponding safe 12, 14 by simply inputting the code consisting of four digits dd ₄ (authentication information). This is during the period (validity period), which is determined by the validity of the access feature determining information 32. After expiry of the validity period, the access feature 28 and its new validity period must be redetermined.

FIG. 2 shows a safe security system 10 which essentially corresponds to the safe security system of FIG. 1, so that only the differences are to be discussed here. The safe-security system 10 of FIG. 2 comprises two safes 12, 14, a user terminal (terminal) 16, and a server serving as a data processing device 34 which are interconnected at various nodes in the network 18. In this case, the network 18 is set up for cloud computing, wherein the corresponding cloud 44 includes the server with the data processing device 34. The data processing device 34 in this embodiment of the system 10 is remotely controlled via the network 18 by means of the user terminal 16. The essential difference from the system 10 of FIG. 1 is that the user terminal (terminal) 16 and the data processing device 34 fall apart spatially.

LIST OF REFERENCE NUMBERS

10 safe security system

12 safe, first

 14 safe, second

 16 user terminal

 18 network

 20 locking system

22 user interface

 24 data transmission interface

 26 access control device

 28 access feature

 30 authentication means

32 Information (validity period)

 34 Data processing device

 36 Data transmission interface

 38 user interface

 40 authentication device

42 Information (access feature)

 44 cloud (cloud computing network)

Claims

claims 1. Safe (12, 14) for use by changing users, in particular rental safe, with a user interface (22) for entering at least one access to the interior of the safe (12, 14) authorizing authentication means (30) directly to the safe (12 , 14),  an access control device (26) for controlling the access by means of at least one access feature (28) for verifying the at least one access authorizing means (30) and  at least one data transmission interface (24), wherein the access control means (26) is adapted to receive externally via said data transfer interface (24) or one of said data transfer interfaces (24) information (32) determining the validity period of said at least one access feature (28) and wherein Input of the authentication means (30) only via the user interface (22) and at least one of the input of the authentication means (30) deviating operating function of the safe (12, 14) by data transmission over the network is feasible. 2. Safe according to claim 1, characterized in that the access control device (26) is further adapted to receive information (42) via a data transmission interface (24) of the safe (12, 14) by data transmission from the outside, from which the access feature (28). 3. Safe according to claim 1 or 2, characterized in that the at least one authentication means (30) is pure authentication information and / or authentication information carrying the authentication means. 4. Safe according to one of the preceding claims, characterized in that the user interface (22) is a user interface (22) for entering biometric data of the user. 5. Safe according to one of the preceding claims, characterized by at least one of the following components:  a sensor for monitoring the interior of the safe (12, 14),  a receiver of a navigation satellite system,  Means for implementing a WLAN and / or Bluetooth and / or 3G communication,  an encrypted communication coding / decoding device and a redundant locking system (20). 6. Safe according to one of the preceding claims, characterized in that the data transmission interface (24) is designed as a bidirectional interface. 7. Safe according to one of the preceding claims, characterized by means for providing Servicefünktionen by the safe (12, 14), in particular for transmitting service information to the user. 8. Use of a safe (12, 14) according to one of the preceding claims by changing users. 9. Safe security system (10) with at least one safe (12, 14) and with a data processing device (34) for providing at least one piece of information (42) from which an access feature (28) for the at least one safe (12, 14) results and / or at least one piece of information (32) which determines the validity periods of the access feature (28) for the at least one safe (12, 14), wherein the data processing device (34) is connected to the at least one safe (12, 14) data transmission technology and wherein the at least one safe (12, 14) as a safe according to one of claims 1 to 7 is formed. 10. System according to claim 9, characterized by a user terminal (16) having an interface (38) for inputting an input from which the information (32) about the validity period of the access feature (28) and / or the information (42) the access feature (28). 11. System according to claim 10, characterized in that the user terminal (16) has an authentication device (40).  for authenticating a user of the user terminal (16) and / or - For authentication of the information (40) via the access feature (28) and / or the information (32) over the validity period of the access feature (28) via the interface input data source. 12. System according to any one of claims 9 to 11, characterized by a network for data transmission in which the at least one safe (12, 14), the Datenverarbeitungseinrich device (34) and the user terminal (16) are interconnected. 13. System according to any one of claims 9 to 12, characterized in that the Benut zerendgerät (16) comprises the data processing device (34). 14. System according to claim 13, characterized in that the network is a set up for a cloud computing network, wherein the corresponding cloud (44) has the data processing device (34). 15. System according to any one of claims 9 to 14, characterized in that the data transmission between the data processing device (34) and the at least one safe (12, 14) via at least one of the following standards for data transmission takes place: - Bluetooth,  Zigbee,  LAN, in particular WLAN,  another known standard for wireless and / or wired data transmission.