EP3598398A1 - Access system - Google Patents

Abstract

The invention relates to an access system (1) for controlling access to a system (3) controlled by a controller (2). This is done by means of an access system (1) with an access control unit (4) and at least one electronic key (5). The access control unit (4) is designed to read key data stored in an electronic key (5). Criteria can be specified in the access control unit (4) on the basis of which the validity of the key data read from this electronic key (5) can be determined. The access control unit (4) sends at least one signal to the controller (2) when a valid electrical key (5) is recognized.

Description

The invention relates to an access system and a method for controlling access to a system controlled by a controller.

Access systems of this type are used, in particular, for access control to systems, systems in the sense of the present invention also comprising machines, work equipment and the like. In general, with such access systems, defined authorizations can be specified in such a way that only certain people can have access to the system, with further individual access to certain areas or functions of the system can be limited.

Known access systems work, for example, with mechanical key switches. With this access system, a key switch can be inserted into a key receptacle of an access control unit in different rotary and locking positions. Depending on the respective rotating and locking position, different access authorizations can be specified for access to the system. The disadvantage here is that the number of rotation and locking positions is very limited, so that only slightly different access authorizations can be assigned.

Further known access systems work with electronic keys, which are designed, for example, in the form of transponders, USB memories or magnetic strips. An identifier is stored in the electronic keys, which can be read by an access control unit. If an identifier is recognized as valid in the access control unit, this enables access to the system. Can in the electronic keys further information can also be stored. In this case, this information can be linked to one another or to the identifier, as a result of which different access codes can be formed for access to the system.

Access systems in the form of password systems are also known. The advantage here is that almost any number of passwords are available, so that a corresponding number of accesses to the system are available. A disadvantage of such access systems is that the users cannot remember as many passwords as they like, which is user-unfriendly. Also, passwords are typically not changed by users and are often made accessible to other people, so that the passwords ultimately do not provide secure access protection.

Finally, it is known to implement access control by programming the control of the system. The disadvantage of this is that the control of the system is not designed for such access control. A high level of effort is therefore required for appropriate programming.

The invention has for its object to provide an access system that has a high functionality.

The features of the independent claims are provided to achieve this object. Advantageous embodiments and expedient developments of the invention are described in the dependent claims.

The invention relates to an access system for controlling access to a system controlled by a controller, having an access control unit and at least one electronic key, the access control unit being designed to read key data stored in an electronic key. Criteria can be specified in the access control unit the validity of an electronic key is determined on the basis of the key data read from it. When a valid electronic key is recognized, the access control unit sends at least one signal to the controller.

The invention further relates to a corresponding method.

With the access system according to the invention, different accesses to the system can be predefined flexibly and adapted to application-specific boundary conditions. The access system, together with the access control unit and the electronic keys assigned to it, forms a secure, in particular tamper-proof, system with which access to the system can be controlled.

The basic idea of the invention is that a user can specify different criteria in the access control unit, by means of which the validity of an electronic key can be determined. The user can use all or only part of the key data stored in the electronic key for a validity check. It is also possible to select the operating mode of the system based on key data. A mode selection can, as for example in DE 10 2015 114 717 A1 described, include automatic operation of a system and / or operation of the system with or without safety monitoring.

The access control unit forms a programmable unit with a processor or the like. Using a suitable configuration system with input options, a user can easily and quickly define criteria for the validity of an electronic key. By defining different criteria, the user can also define different access authorizations in such a way that with an electronic key Key data are read by the access control unit and classified as valid, only certain areas or certain functions of the system are released.

It is particularly advantageous here that all key data stored on an electronic key can be used individually or in combination to define validity criteria. This enables a corresponding variety of different access rights for the system.

An essential aspect of the invention is that the criteria for the validity of an electronic key are determined solely in the access control unit, with a user entering suitable input commands into the access control unit. This has the advantage that no units, in particular no modules to be programmed, need to be provided in the control system for access control to the system. Rather, signals are sent to the controller in the access control unit, which can be used directly by the controller as control commands.

The access control unit can be used to carry out a general recognition of the validity of an electronic key, in particular in such a way that the validity of an electronic key is determined on the basis of an identifier stored in a non-writable memory of the electronic key. As is known, the electronic key has a memory with a user-writable and a non-writable part.

The identifier thus stored in the electronic key thus forms an immutable, individual code that can be used to identify the electronic key.

Furthermore, the validity of an electronic bowl can also be checked using an expiry date stored in it.

Finally, the validity of an electronic key is determined on the basis of a checksum for key data stored in the electronic key.

The scope of the checksum is expediently adjustable.

The checksum advantageously includes the identifier stored in the electronic key in the non-writable part of the memory.

The checksum is checked in such a way that the checksum in the access control unit is calculated on the basis of the key data stored in the electronic key and compared with a value stored in the electronic key.

With the checksum control, protection against copying of the electronic key is made possible, since when the key is copied, the identifier is not copied as well, but only further key data stored in a writable memory. Since the copying onto an electronic key takes place with a different identifier, the checksum for this new electronic key is no longer correct after copying, as a result of which the unauthorized copying process is recognized.

In addition to the general recognition of the validity of an electronic key, a special recognition of the validity of an electronic key is also possible according to the invention. For this purpose, various key data stored on this electronic key are linked to an adjustable logic function as a criterion for the validity of an electronic key.

This makes use of the fact that different types of key data are stored in different areas of a writable memory of an electronic key.

The access control unit can thus read out the various key data in the different areas of the writable memory from the electronic key and link it with logic functions for defining validity criteria.

Users of the electronic key, information about the system, such as the plant where it is installed, possibly supplemented by the area or department, or specific parts of the system, can also be stored in the electronic key as various types of data.

Since, in particular, user-specific data of the electronic key are also stored, validity criteria can also be defined for electronic keys from different manufacturers, which means that access to the system is possible with electronic keys from different manufacturers, with a user-specific programming of the access control unit, in particular a specification of logic function, type and scope of access can be flexibly specified.

The access control unit offers a selection of different logic functions.

In particular, any combination of logic functions such as an "AND", an "OR", a "NOT" or a "COMPARE" can be provided.

In this case, several logic functions can be combined into one logic condition in the access control unit, the logic condition being a criterion for the validity of an electronic key and / or for specifying functions of the system.

In particular, logic functions are grouped with brackets in the logic condition.

An essential aspect of the invention consists in the fact that the user-specific specification of the access control for the system takes place solely in the access control unit and passes this directly on to the control of the system, signals, in particular control commands, which can be used directly in the control.

According to an advantageous embodiment, the signal output to the controller is an ON signal to enable operation of the system or an OFF signal to shut down the system.

Alternatively, a system operating mode is selected with a signal sent to the controller.

This significantly extends the functionality of the access control unit. In particular, it is advantageous that the access control unit also provides a secure, ie. H. Fail-safe mode selection in the sense of machine security, not access security can be accomplished, which is necessary for the use of the access system in the area of security technology. In general, the access system according to the invention has a fail-safe functionality in the sense of machine safety.

The mode selection can be initiated by reading an electronic key using the access control unit. This is done in an electronic Authorization for selecting the operating mode of the system is stored as the key data.

The access control unit via a bus system or another suitable communication interface, such as USB, is advantageously connected to an operating device, for example with a touch screen as an input unit, for a mode selection. After reading an authorization for a mode selection in an electronic key, the access control unit sends a request to the operating device, whereupon the operating device sends a selected operating mode to the access control unit, which is passed on to the control as a signal.

A non-secure bus system is provided for the connection between the access control unit and the operating device. Nevertheless, a safe operating mode selection can be carried out by using the access control unit and / or the operating device to carry out a safe selection process as in the registration DE 10 2015 114 717 A1 is provided for the operating mode selection.

The operating mode selection is also advantageously configurable, i. H. the user can specify the type and scope of the operating mode selection.

Figur 1:

Erstes Ausführungsbeispiel des erfindungsgemäßen Zugangssystems.

Figur 2:

Schematische Darstellung des Speichers eines elektronischen Schlüssels für das Zugangssystem gemäß Figur 1.

Figur 3:

Zweites Ausführungsbeispiel des erfindungsgemäßen Zugangssystems.

The invention is explained below with reference to the drawings. Show it:

Figure 1:

First embodiment of the access system according to the invention.

Figure 2:

Schematic representation of the memory of an electronic key for the access system according to Figure 1 ,

Figure 3:

Second embodiment of the access system according to the invention.

Figure 1 shows a first embodiment of the access system 1 according to the invention for controlling access to a system 3 controlled by a controller 2. The system 3 can generally also be a machine, a working device or a mobile system. The controller 2 can be formed by a PLC controller or the like.

As essential components, the access system 1 has an access control unit 4 and associated electronic keys 5, of which in Figure 1 only one is shown. In the present case, the electronic keys 5 consist of a transponder. In principle, the electronic keys 5 can also be formed by chips, magnetic strips and the like.

The access control unit 4 has a processor 6, in particular a microprocessor, which controls the functions of the access control unit 4. The access control unit 4 also has an output structure 7 with one or more outputs and / or a communication system, for example a bus, via which the access control unit 4 is connected to the controller 2. Furthermore, the access control unit 4 has a sensor unit 8 with which key data stored in an electronic key 5 can be read. In order to be able to read out key data from an electronic key 5, the electronic key 5 must be brought so close to the access control unit 4 that it is arranged within a reading distance from the reading unit. For this purpose, the electronic key 5 can in principle be introduced by receiving the access control unit 4, which is not shown.

Finally, for the purpose of configuration, the access control unit 4 is connected to an input / output unit 9 with a suitable user interface, via which a user can enter input variables into the access control unit 4 or its processor 6. In principle, the input / output unit 9 could also be integrated in the access control unit 4.

The functioning of the access system 1 is generally such that key data read out from an electronic key 5 is checked in the access control unit 4 according to the validity criteria specified there as to whether a valid electronic key 5 is present. If an electronic key 5 is recognized as valid, the access control unit 4 grants controlled access to the system 3. For this purpose, the access control unit 4 sends corresponding signals to the controller 2 via the output structure 7.

According to the invention, validity criteria for the electronic keys 5 are specified in a user-specific manner by suitable inputs by the user via the input / output unit 9. The assignment of validity criteria and the checking of the fulfillment of the validity criteria for the individual electronic keys 5 thus takes place in the access control unit 4 and not in the control unit 2. When a valid electronic key 5 is detected, the access control unit 4 sends signals in the form of control commands to the control unit 2 sent, which can be determined there or provided for the control 2 of the system 3.

In particular, the signal output to the controller 2 can also be an ON signal to enable the operation of the system 3 or an OFF signal to stop the system 3. Furthermore, data can be sent to the system 3, in particular in order to specify its functions.

Figure 2 schematically shows the memory of an electronic key 5 divided into different areas a, b1 ... bN. Area a forms a non-writable memory in which an identifier of the electronic key 5 is stored. The areas b1 ... bN are writable memories. A corresponding subdivision of the memory is provided in all electronic keys 5. User key data are stored in the individual areas b1 ... bN. Such key data can be data relating to Appendix 3. Furthermore, an expiry date for an electronic key 5 can be stored. Finally, there is an area for storage a preferably adjustable checksum is provided. The checksum comprises the identifier and preferably some or all of the further key data.

A validity check of an electronic key 5 takes place in the access control unit 4 on the basis of the data read from it, the validity criteria in the access control unit 4 being able to be specified by a user via the input / output unit 9.

Validity criteria can be, for example, the recognition of the identifier, the checksum and / or the expiry date.

If a valid identifier or the checksum is recognized or if the expiration data has not yet expired, the electronic key 5 is recognized as valid and the access control unit 4 generates a signal for the controller 2, for example an ON signal for releasing functions of the system 3. depending on the result of the validity check, only some of the functions of Appendix 3 are released.

As an alternative or in addition, key data from different areas b1 ... bN can be linked by a user-specific logic function for a validity check. A logic function is an "always TRUE", an "AND", an "OR", a "NOT" or a "COMPARE".

In particular, several logic functions can be combined to form a logic condition, the logic condition being a criterion for the validity of an electronic key 5.

Here, logic functions can be grouped with brackets in the logic conditions.

The validity criteria can be linked to different access authorizations, so that different accesses to the system 3 are released depending on the validity determined.

Figure 3 shows a second embodiment of the access system 1. This access system 1 differs from the embodiment according to Figure 1 only in that the access control unit 4 is connected to an operating device 11 via a bus system 10 or another communication interface. For this purpose, the access control unit 4 and the operating device 11 have a bus connection 12. The bus system 10 is designed as a non-safe bus system 10. In principle, the operating device 11 can also be connected to the controller 2.

Using this access system 1, a mode of operation can be selected for the system 3. An operating mode selection is initiated when the access control unit 4 reads an electronic key 5 in which an authorization for an operating mode selection is stored. The access control unit 4 then sends a request to the operating device 11, which then selects a selected operating mode, for example as in the registration DE 10 2015 114 717 A1 sends described, and forwards this from the access system 1 as a signal to the controller 2, where the operating mode is activated. The operating mode can be selected in a fail-safe manner, although the bus system 10 is not secure. The required security is achieved by secure selection processes in the access control unit 4 or in the operating device 11. The operating mode selection is configurable and can thus be specified by a user.

LIST OF REFERENCE NUMBERS

(1)

access system

(2)

control

(3)

investment

(4)

Access control unit

(5)

electronic key

(6)

processor

(7)

output structure

(8th)

sensor unit

(9)

Input / output unit

(10)

bus system

(11)

control unit

(12)

bus connection

a

Area

b1 - bN

areas

Claims (15)

Access system (1) for controlling access to a system (3) controlled by a controller (2), having an access control unit (4) and at least one electronic key (5), the access control unit (4) for reading in an electronic key (5) stored key data is formed, characterized in that criteria can be specified in the access control unit (4), on the basis of which the validity of an electronic key (5) is determined on the basis of the key data read by it, and that upon detection of a valid electronic key ( 5) the access control unit (4) sends at least one signal to the controller (2). Access system (1) according to claim 1, characterized in that the validity of an electronic key (5) is determined on the basis of an identifier stored in a non-writable memory of the electronic key (5). Access system (1) according to one of claims 1 or 2, characterized in that the validity of an electronic key (5) is determined on the basis of a checksum for key data stored in the electronic key (5). Access system (1) according to claim 3, characterized in that the scope of the checksum is adjustable. Access system (1) according to one of Claims 1 to 4, characterized in that various key data which are stored on this electronic key (5) for specifying functions of the system and / or as a criterion for the validity of an electronic key (5), are linked to one or a combination of adjustable logic functions, a logic function, in particular an "AND", an "OR", a "NOT" or a "COMPARE". Access system (1) according to claim 5, characterized in that different types of key data are stored in different areas of a writable memory of an electronic key (5). Access system (1) according to one of claims 5 or 6, characterized in that a plurality of logic functions are combined to form a logic condition, the logic condition being a criterion for the validity of an electronic key (5), and / or predetermined by the logic condition of functions of the system are. Access system (1) according to claim 7, characterized in that in the logic condition logic functions are grouped with brackets. Access system (1) according to one of claims 1 to 8, characterized in that the signal output to the controller (2) is an ON signal for enabling functions of the system (3). Access system (1) according to one of Claims 1 to 9, characterized in that an operating mode of the system (3) is selected with a signal sent to the controller (2). Access system (1) according to one of claims 1 to 10, characterized in that it has a fail-safe functionality in the sense of machine safety. Access system (1) according to one of claims 1 to 11, characterized in that an authorization for a mode selection of the system (3) is stored in an electronic key (5) as key data. Access system (1) according to claim 12, characterized in that for an operating mode selection the access control unit (4) is connected via a bus system (10) to an operating device (11), that the access control unit (4) after reading an authorization for an operating mode selection in one electronic key (5) sends a request to the operating device (11), whereupon the operating device (11) sends a selected operating mode to the access control unit (4), which is passed on as a signal to the controller (2). Access system (1) according to claim 13, characterized in that the possibility of operating mode selection is configurable. Method for controlling access to a system (3) controlled by a controller (2) by means of an access system (1) with an access control unit (4) and at least one electronic key (5), the access control unit (4) for reading in a Electronic key (5) stored key data is formed, characterized in that criteria can be specified in the access control unit (4), on the basis of which the validity of an electronic key is determined on the basis of the key data read by it, and that upon detection of a valid electronic key (5 ) the access control unit (4) sends at least one signal to the controller (2).

Images