Locking device

p0001The invention relates to a closing device with a lock cylinder and an actuating element for the lock cylinder.

p0002It is an object of the present invention to improve a locking device of the aforementioned kind such that an increased security against manipulation attempts is given.

p0003This object is achieved in that the lock cylinder comprises an actuator for actuating a closure member, wherein the actuating element has an intended for controlling the actuator primary controller, wherein the lock cylinder comprises a drilling in the actuating element facing end, wherein electrical connection means are provided, connecting the primary controller with the actuator and which are carried out by the drilling.

p0004The arrangement of the actuator in the lock cylinder, a particularly secure configuration, since the actuator is thereby protected from direct access, which usually extends from the actuator. Before the actuator can be manipulated, namely, must first be removed and arranged between the actuating element and the interior of the lock cylinder drilling to overcome the actuating element.

p0005In a preferred embodiment, a secondary control device is provided in the lock cylinder, which is connected via the electrical connection means with the primary controller and is adapted to exchange data with the primary control means. This configuration advantageously allows a direct control of the actuator unit by the secondary control means is also protected in the inner space of the lock cylinder which is arranged, during an operation of the secondary control means is controllable, for example by the primary control device. For this purpose, for example a corresponding data exchange between the control devices via the electrical connection means can take place, which may preferably also provide an encoding or encryption of the information exchanged. Thereby such attempted manipulation effectively hampered in which first the actuator is removed with its integral primary controller of the lock cylinder, and in which then tried to drive through the now possibly exposed electrical connection means the actuator so that it has a locking member of the lock cylinder unlocked.

p0006In a further preferred embodiment, the primary control means is adapted, via an interface unit information, in particular control commands and / or identification data, received from an identification device and to transmit a function of the received information data to the secondary control means. The data exchange with the information transmitter may preferably take place wirelessly, for example via a suitable wireless protocol, or using an RFID system, wherein the interface unit comprises an RFID reader, and wherein the information transmitter on in manner known per se at least one RFID transponder features, save the identification data and corresponding query can send through the RFID reader to this.

p0007The interface unit may have alternatively or additionally via means for entering biometric data (fingerprints, retina / iris structures, DNA data). A contact-bound electronic transmission, for example by means emitted by the identification transmitter RF signals undergoing spread the actuator contact person on the body surface is also conceivable.

p0008In a variant of the invention the primary control means is adapted to forward the received by means of the interface unit by the identification encoder signals via the electrical connection means to the secondary control means. In this embodiment, the primary controller can be relatively easily formed, because they alone must forward the received signals substantially, while an evaluation of the received signals and, if necessary, subsequent activation of the actuator by the secondary control means arranged in the lock cylinder is carried out.

p0009In the simplest case, the primary controller can therefore be passive formed, so even only serve to establish an electrical connection between the interface unit and the electrical connection means which lead to the secondary controller. An authorization check, and / or other analysis of the data obtained from the interface unit data can be preferably carried out in this variant by the secondary control means.

p0010In addition to pure forwarding of received signals, the primary controller may be of a further embodiment according also adapted to amplify the signals received by means of the interface unit by the identification transmitter and / or to demodulate in terms of their frequency spectrum shaping (filtering) and / or and / or modulating, for example, to secure data transmission to ensure a further signal processing or evaluation exporting secondary controller.

p0011In another, particularly preferred embodiment, the primary controller is adapted to undergo received identification data to an authorization check, and to transfer the positive result of the authorization check signaling control information with a positive result of the authorization check to the secondary controller. In this variant of the invention therefore been an evaluation of the received signals or data in the primary controller. The authorization check can for example have a comparison to article in which it is determined whether the received identification data with stored in the primary and / or secondary controller ID data representing as legitimate users of the closing device match. Depending on the location of the stored identification data (primary / secondary control means) may thus be effected an appropriate data communication between the control devices.

p0012Particularly preferably, the authorized users associated identification data in one of the primary control means associated memory are stored, which can be preferably integrated into the primary controller. Provided that the primary control means comprises a microcontroller, for example, the authorized users associated identification data may be stored in a nonvolatile memory of the microcontroller. In this variant of the invention, the authorization check can be carried out solely in the primary control device, so that no resources in the secondary controller and for data communication to be reserved between two control devices. But the favorable outcome of the authorization check signaling control information is transmitted to the evaluation in the primary controller to the secondary controller. The secondary controller can then advantageously directly control the actuator, for example, to unlock a locking member of the lock cylinder.

p0013The actuator can act in a known manner directly to a locking member of the lock cylinder. Alternatively, it is also possible to construct the actuating element, for example, relative to the lock cylinder rotatably, and to provide a mechanical coupling between the actuating element and the closing member, which mechanical coupling can be interrupted by arranged between the actuating element and the closing element coupling agent, for example, as long as no proper has been sent identification signal to the interface unit. In this embodiment, the actuator thus does not act directly on the closure member, but on the coupling means in order to control a mechanical coupling between the actuating member and closing member. This has the advantage that an operating force for driving the closing member must be applied by a person using the closure means, and not by an actuator of the actuator unit.

p0014In a further, particularly preferred embodiment, the secondary control means is adapted to transmit at least one data sequence at the primary controller after the reception of the positive result of the authorization check signaling control information, wherein the data sequence from the primary controller for a future communication with the secondary control means is usable. The data sequence preferably represents a secret information, known only to the two control devices, and thus can be used for verification of future data communications between the two control devices.

p0015Alternatively, or in addition to sending such data sequences after the reception of the positive result of the authorization check signaling control information, the secondary controller may also to other, generally arbitrary times or more data sequences send to the primary control means to ensure that this always has a sufficient supply of data sequences has.

p0016In a further, particularly preferred embodiment, the secondary control means is adapted to form the data sequence depending on a random process and / or a quasi-random process, wherein the control means are adapted to store at least one data sequence in each case in a volatile memory. This results in a particularly high degree of protection against manipulation because Unauthorised generating data sequences can not observe and because after a power outage in the system again, new data sequences are formed. The data sequences generated during the operation of the locking device can be individually and constantly changing, ie of sequence sequence.

p0017In another preferred embodiment, both control devices each have at least one non-volatile stored, identical data sequence for initialization, so that a first signaling from the primary controller to the secondary controller can be recognized as a proper communication operation. This initialization can be used eg after a battery change. The initialization sequence is preferably written in the manufacture of the closing device in the memory of the two control devices, wherein for each instance of the closing device 100, in turn, a different value is used. The initialization sequence is preferably written to the internal EEPROM memory of the respective microcontroller. a "pairing" process is made possible through the initialization sequence thus enabling an initial communication of the controllers together. For more, future communications data sequences preferably dynamically generated are used.

p0018In order for a subsequent replacement of components of the closing device (for example, actuating element together with, arranged therein, a primary control means) is possible, in a further advantageous embodiment of the invention, a reset mechanism may be provided, which is preferably only after disassembly of the locking device accessible and memorizing a new initialization sequence for example, in the control device (s) possible.

p0019It is also possible, the primary control device be designed so that it once a standard value for the initialization sequence can be transmitted via the interface, eg by a special information transmitter, and that it stores these for future operation. This default can for example be forwarded to the secondary controller, which is also configured so that it receives the default value once through the cable connection and non-volatile stores.

p0020In a further, particularly preferred embodiment, the primary control means is adapted to form the positive result of the authorization check signaling control information in dependence of at least one sequence of data previously received from the secondary control means. The control information may for example be identical to the data sequence. Since the data sequence has been formed beforehand and stored by the secondary controller, the secondary controller may recognize in the reception of a corresponding data sequence or derived therefrom data, that the primary control means or its data communication to the secondary control means, not been tampered with. Only then will the secondary controller may for example control the actuator.

p0021In another embodiment, in the lock cylinder, a tensioning device is provided which is adapted to at least one component of the electrical connection means, in particular at least one electrical connection cable, with a tensile force to act upon. For this purpose, the clamping device can for example have a spring device. The tension with which the clamping device acts on the connecting cable is chosen so that a proper connection of the connecting cable is not affected to the primary controller that, for a mechanical interruption of the connection cable as they may occur in a sabotage attempt, this, however, preferably completely , is drawn into an inner region of the locking cylinder by drilling through it. This is an unauthorized beneficial deprived of the possibility to supply the actuator with signals or electrical energy for driving. The embodiment described above can also be provided with such locking devices that have a secondary controller in the lock cylinder. then the clamping device between the drilling and the secondary controller is preferably arranged.

p0022In another embodiment, an electrical and / or mechanical contact is at least one component of the electrical connection means to a contact point in the region of the lock cylinder is formed so that at least the electrical contact of the component to the contact point opens when the component is subjected to a tensile force, greater than a holding force of the whole plug-in connection, in particular greater than about 1 Newton per plug-in contact is. The contact point can be configured for example as a socket, in which one end of a cable, the electrical connection means or a corresponding plug is frictionally held, for example by means of electrically conductive spring means. Once a - based on the design of the system - acts to great tension on the cable, at least tear off the electrical connection between the Kotaktpunkt and the cable so that it can no controlled triggering integrated into the lock cylinder components done more over the cable. As to large tensile force, for example, be each plug contact of the connector defines a force of about 1 Newton. To ensure optimal function of this embodiment, the length of the connecting cable and / or the positive connection at the contact point and / or the arrangement of the contact point and / or the management of the connection cable into the lock cylinder connecting cable are possible precisely coordinated. In general, the set for the tearing off of the electrical connection between the contact point and the cable force required in a wide range by design of the components.

p0023In another embodiment, the electrical connection means comprise a plurality of individual conductors, wherein at least some of conductors formed of enamelled copper wire. This variant of the invention advantageously allows to speak a "mechanical code" because an unauthorized person from the similarity of the individual conductors and their large number can not be derived easily, which is the head of which, or even a purpose.

p0024In a further embodiment, the electrical connection means comprise at least one breakable electrical conductor that causes the targeted interruption of the electrical connection between the actuating element and the components arranged therein and the inner space of the lock cylinder in a tampering attempt. Preferably carried out at least the destruction of such a section of the fragile conductor disposed in the interior of the lock cylinder, especially behind the drilling so that the deliberately induced interruption point is accessible only by overcoming the Bohrschutzes from the side of the actuating element from.

p0025In another embodiment, in the actuator, an actuator is provided which is adapted to unlock under the control by the primary control device a locking mechanism wherein the locking mechanism is intended to impede or prevent unauthorized opening of a housing of the actuating element. For example, the actuator can be designed such that it has a bolt moved when driven from a locking position in which the bolt has a first housing part (for example, holding area) of the actuating member with a second housing part (for example, lid) locks the operation member. The control of the actuator can for example be carried out by the primary control device and can be triggered for example by the reception of an identification signal of a particular transponder.

p0026As a further solution of the object of the present invention, a method of operation is specified according to claim 14th

p0027In a preferred embodiment of the method according to the invention it is provided that one arranged in the lock cylinder secondary controller sends at least one data sequence at the primary controller, the primary controller and the secondary controller store the data sequence in a volatile memory, and wherein the primary control means, the stored data sequence and / or dependent on the data sequence information to the secondary controller sends. The data sequence is generated from the secondary controller first, preferably from random, acts as so-called. "Shared secret" of the two control devices that they can use for future communications, making these communications can be protected against tampering. Since preferably no valid data communications between the control devices can be made without knowledge of the secret data sequences, it is unauthorized impossible as replicate the primary controller and causing in this way the secondary controller for controlling the actuator.

p0028Further features, application possibilities and advantages of the invention will become apparent from the following description of embodiments of the invention, which are illustrated in the drawing figures. All the features themselves or in any combination described or illustrated form the subject matter of the invention, irrespective of their summary in the claims or their dependencies and irrespective of their formulation or representation in the description or in the drawing.

p0029In the drawings:<dl id="dl0001"><dt>figure 1</dt><dd>schematically shows a first embodiment of a closing device according to the invention,</dd><dt>figure 2</dt><dd>a communication diagram of the embodiment according to <figref idrefs="f0001">figure 1</figref>.</dd><dt>3a</dt><dd>schematically shows a further embodiment of a closing device according to the invention in a proper operating condition,</dd><dt>3b</dt><dd>schematically shows the embodiment according to <figref idrefs="f0002">3a</figref> in a damaged due to a manipulation experiment condition, and</dd><dt>figure 4</dt><dd>schematically yet another embodiment of a closing device according to the invention.</dd></dl>

p00301a shows schematically a first embodiment of a locking device 100 of the invention, which has a lock cylinder 110 and a present designed as a rotary knob actuator 120th

p0031A not separately designated housing of the lock cylinder 110 may be formed, for example, like a DIN profile cylinder or other standard lock cylinder, so that the closure means 100 is for example instead of conventional lock cylinder in mortise locks of doors and the like. Although<figref idrefs="f0001">figure 1</figref> shows a configuration called "full cylinder", the principle of the invention described below can also be applied to semi-cylinder having a closing / opening a door (not shown) offer only from one side.

p0032The actuating element 120 includes a primary controller 122, which is connected via electrical connection means 130, including a multicore cable with a in the lock cylinder 110 arranged secondary controller 118 and can exchange data with it. In a preferred embodiment the data exchange between the control devices 122, 118 is bi-directional.

p0033The secondary controller 118 is connected to an actuator unit 114 and this can be controlled in response to control commands that are the secondary controller 118 transmitted from the primary controller 122 via the cable 130th As indicated by the arrow in<figref idrefs="f0001">figure 1</figref> indicated, acts the actuator unit 114 on a locking member 112 of the lock cylinder, for example with a closing latch (not shown) of a door into which the lock cylinder is installed 110, cooperates in a known manner in order to close the door the.

p0034The cylinder 110 has at its end facing the actuator 120 facing end portion 110a on a drilling 116 which is preferably configured as a bell, and the drilling of the lock cylinder 110 and other manipulations in the end portion 110a is prevented or at least hampered. In order to allow the data link described above between the control devices 122, 118, the cable 130 is passed through an opening in the drilling 116th It should be noted that<figref idrefs="f0001">figure 1</figref> represents only a schematic drawing, in the example, the opening for the cable 130 in the drilling 116 is significantly greater than is technically required indicated graphically.

p0035The electric power supply of the components 114, 118, 122 is present, accomplished through integrated into the knob 120 electric power source 124, when he can for example, be a battery. For energy transfer from the knob 120 in the lock cylinder 110, the cable can also be used 130th

p0036The primary controller 122 has an interface unit 122a and is adapted, via the interface unit 122a, information, in particular control commands and / or identification data, received from an identification transmitter 122b, and transmitted as a function of the received information data to the secondary control means 118th In this way, for example, control commands for opening and closing of the closing device 100 can be transmitted by the identification transmitter 122b via the primary controller 122 to the secondary controller 118 in the interior of the lock cylinder 110th

p0037The interface unit 122a, for example, an RFID (Radio Frequency Identification) -Leseeinheit comprise cooperating with a cylinder disposed in the identification transmitter 122b RFID transponder in known manner to transfer information from a memory of the RFID transponder to the control device 122nd Alternatively or additionally, the interface unit 122a another wireless or wired data transmission or even the exchange of biometric data (such as fingerprints, retina / iris structures, DNA data) allow.

p0038In a preferred embodiment, the primary controller 122 may be relatively easily formed, because it alone has to forward the signals received from the RFID transponder signals substantially, while an evaluation of the received signals and, if necessary, subsequent activation of the actuator unit 144, for example by in the carried locking cylinder 110 located secondary controller 118th

p0039In the simplest case, the primary controller 122, therefore, may even be passively formed, possibly even only serve to make an electrical connection between the interface unit 122a and the cable 130 that leads to the secondary controller 118.

p0040In addition to pure forwarding of received signals, the primary controller 122 may be a further embodiment, according also adapted to amplify the signals received by the interface unit 122a of the identification transmitter 122b, and / or to demodulate in terms of their frequency spectrum shaping (filtering) and / or and / or modulate, for example, to provide a secure and reliable data transfer to ensure a further signal processing or evaluation exporting secondary controller 118th

p0041In another, particularly preferred embodiment, the primary controller 122 is adapted to undergo received identification data to an authorization check, and to transfer the positive result of the authorization check signaling control information with a positive result of the authorization check to the secondary controller 118th In this variant of the invention therefore already done a first evaluation of the received signals or data in the primary controller 122. The authorization check can have for example a comparison to article in which it is determined whether the received identification data with primary at the and / or the secondary controller 122, 118 stored identification data representing as legitimate users of the closing device, match. Depending on the location of the stored identification data (primary / secondary control means) may thus be effected an appropriate data communication between the control devices.

p0042Particularly preferably, the authorized users associated identification data in one of the primary control 122 associated memory 122c are stored. The primary controller 122 may for example comprise a microcontroller, and the authorized users associated identification data may be stored in a nonvolatile memory 122c of the microcontroller. In this variant of the invention, the authorization check can advantageously be carried out solely in the primary controller 122 so that these are no resources in the secondary controller 188 and for data communication between two control devices 118, to reserve the 122nd But the favorable outcome of the authorization check signaling control information is transmitted to the evaluation by the primary controller 122 to the secondary controller 118th The secondary controller 122 may then advantageously directly control the actuator 114 to unlock, for example, the closure member 112 of the lock cylinder 110 or to move between different possible operating conditions.

p0043<figref idrefs="f0001">figure 2</figref> shows an example of a communication diagram depicting data flow between the components 122b, 122, 118, 114 during an identification process according to the invention.

p0044First, the identification device sends an identification signal 122b s_2 to the primary controller 122 which receives the identification signal by means of s_2 your interface 122a.

p0045In step 200, the primary controller checks 122, if it is the received identification signal s_2 is a known identification signal s_2, is associated with an authorized user of the closing device 100 Eirich the example. For this, a search operation on the memory 122c are executed.

p0046Unless the check shows 200 determines that the ID signal is a legitimate user of the closing s_2 Eirich Tung assigned 100, transmits the primary control unit 122 an enable signal s_4 via the connection cable 130 (<figref idrefs="f0001">figure 1</figref>) To the secondary control means 118th

p0047Then evaluates the secondary controller 118, the enable signal from s_4 and finally controls, by means of the signal S 6, the actuator unit 114 in a manner corresponding to the enable signal s_4 to, for example, to unlock the closure member 112th

p0048The actuator 114, which may be an electromagnetic actuator (eg solenoid or electric motor) for example, can act in a known manner directly on the closure member 112 of the lock cylinder 110th

p0049Alternatively, it is also possible for the actuating element 120 such as to form relatively rotatably to the lock cylinder 110, and a mechanical coupling between the actuating element 120 and the closing member to provide 112, which can be done for example by means of a shaft (not shown). This mechanical coupling is then advantageously arranged between the actuating element 120 and the closing member 112 coupling agents, which are preferably arranged in the interior of the lock cylinder 110, can be interrupted. For example, in a first mode, the coupling between the knob 120 and the closing member 112 may be disabled, and only when a successful identification process, see FIG.<figref idrefs="f0001">figure 2</figref>Has taken place, the coupling means are controlled in a second mode by the actuator 114 for a predetermined period to enable the coupling between the knob 120 and the closing member 112, so that an authorized person by rotating the knob 120, the closing device 100 can open ,

p0050In another, particularly preferred embodiment, the secondary controller 118 is adapted signaling after receiving the positive result of the authorization check 200 control information (= enable signal s_4) at least one data sequence on the primary controller to transfer 122, the data sequence from the primary controller 122 used for future communication with the secondary controller 118th The data sequence preferably represents a secret information, 122 is only the two control devices 118 and thus known for the verification of future data communications between the two control devices 118, 122 may be used.

p0051Particularly advantageously, the secondary controller 118 is arranged to form the data sequence (s) depending on a random process and / or a quasi-random process. For example, the secondary controller 118, which may comprise similarly to the primary controller 122 and a microcontroller, after the receipt of the enable signal s_4 from the primary control 122, which form, one or more data sequences cf. Step 220 from<figref idrefs="f0001">figure 2</figref>, Subsequently, the secondary controller 118 to transfer the data sequence (s) to the primary controller 122, see FIG. S_8 signal.

p0052The control devices 118, 122 are preferably adapted to the data sequence (s) each in a volatile memory, eg in a working memory (RAM, Random Access Memory) to store the respective microcontroller. This results in a particularly high degree of protection against manipulation because Unauthorised generating data sequences can not be observed, and because after a power failure in the system 100 back new data sequences are formed.

p0053The data sequences 100 generated during the operation of the locking device can be individually and constantly changing, ie, so that the greatest possible protection against manipulation is given from one sequence to another. In this way, for example, is advantageously prevents an unauthorized person to handle 120 forcibly separated from the lock cylinder 110 and successfully sending control commands via the then exposed cable 130 to the secondary controller 118th

p0054can alternatively or additionally s_4 to sending such data sequences after the reception of the enable signal the secondary controller 118 send also to other, generally arbitrary points in time, one or more data sequences to the primary controller 122 to ensure that they always have a sufficient supply of data sequences features.

p0055In another, particularly preferred embodiment, the primary controller 122 is adapted to the favorable outcome of the authorization check signaling control information (= enable signal s_4) function to form at least one data sequence previously received from the secondary controller 118th The control information and the enable signal s_4 can for example be identical to a data sequence. Since the data sequence formed previously from the secondary controller 118 and, preferably volatile, has been saved, the secondary controller 118 can recognize in the reception of a corresponding data sequence or derived therefrom data, that the primary controller 122 and their data communications to the secondary controller 118 , has not been tampered with because the data sequences, only the two components 118, 122 are known. Only then will the secondary controller 118 may for example control the actuator.

p0056The production according to the invention the data sequence by the secondary controller 118 is preferably carried out randomly based or at least quasi-randomly. Random-based data sequences can be derived for example from an electronic noise signal at an A / D (analog / digital) -Wandlereingang a microcontroller 118a (<figref idrefs="f0001">figure 1</figref>) Of the secondary control means is obtained 118, or from a value of a timer register of the microcontroller 118a. Quasi-random numbers can be determined in known manner by means of a suitable software program for the microcontroller.

p0057In a preferred embodiment, a data sequence has a length of at least 8 bytes (= 64 bits) on.

p0058In another preferred embodiment, both control devices 118, 122 each at least one non-volatile stored, identical data sequence for initialization, so that a first signaling from the primary controller 122 to the secondary St your device can be detected 118 as proper communication operation. This initialization can be used eg after a battery change. The initialization sequence is preferably written in the manufacture of the closing device 100 in the memory of the two control devices 118 122, wherein for each instance of the closing device 100, in turn, a different value is used. The initialization sequence is preferably written to the internal EEPROM memory of the respective microcontroller.

p0059It can be provided that the initialization is only used for communication between the control devices 118, 122, if previously a correspondingly coded key is recognized by the interface 122a. In the coded key can as a kind of "master" transponder 122b act itself, which is authorized to do so, to initiate the use of the initialization sequence.

p0060It is also possible, the primary controller 122 to be interpreted so that it once a standard value for the initialization sequence can be transmitted via the interface 122, eg by a specific information provider, and that it stores these for future operation. This default value can be for example forwarded to the secondary controller 118, which is also configured so that it receives the default value once via the wired connection 130 and non-volatile stores.

p0061Further, in another embodiment, a reset mechanism for programming an initialization sequence may be provided which is accessible, for example, only after an authorized opening of the lock cylinder 110 and the re-programming a initialization allowed. This can be exchanged 100 advantageously also subsequently individual components of the closing Eirich Tung.

p0062Particular advantages of the invention aspects and embodiments described above are:<ul><li>the possibility of the battery 124, the radio interface 122 and the means 122 for identification or verification of the permission an identification transmitter 122b in the pommel to place 120 to the inner space of the lock cylinder 110 provides a relatively low protection against manipulation, whereby the installation space in the lock cylinder 110 is saved; </li><li>a simple replacement of the battery 124 by opening the knob 120;</li><li>the generation and sending of new data sequences to the primary controller 122 only when an eligible identification signal transmitter has been recognized already;</li><li>no observation of the generation of data sequences, because this takes place in the screened secondary controller 118;</li><li>unpredictable, variable values ​​of data sequences; - No less complicated way to manipulate an initialization sequence;</li><li>no elaborate decoding in the secondary controller 118 is required, a simple comparison of data sequence with a data sequence s_4 previously transmitted to the primary controller 122 is received sufficient;</li><li>at half-cylinder configurations are no safety deficiencies result.</li></ul>

p0063<figref idrefs="f0002">3a</figref> 100a shows a further embodiment of a closing device according to the present invention in a first operating state. As from<figref idrefs="f0002">3a</figref> visible, there is provided a clamping device 140 in the lock cylinder 110 between the drilling 116 and the secondary controller 118, which is adapted to at least one component of the electrical cable 130, in particular at least one wire of the cable 130, to apply a tensile force, see FIG. the block arrow in the clamping device 140. for this purpose, the clamping device 140 may for example have a spring device not shown.

p0064The tensile force with which the clamping device 140, the connection cable 130 or individual cores subjected thereof is selected such that a proper connection of the connecting cable 130 to the primary controller 122 is not impaired, that when a mechanical interruption of the connection cable 130, as in can a manipulation attempt occur, the cable 130, preferably completely, is pulled through the drilling 116 and into a protected area 110b of the lock cylinder 110th This is an unauthorized beneficial deprived of the possibility to supply the actuator unit 114 with signals or electrical energy for driving.

p0065<figref idrefs="f0002">3b</figref> shows the closing device 100a according <figref idrefs="f0002">3a</figref> in a damaged due to a manipulation experiment condition. The knob 120 is mechanically separated from the lock cylinder 110th

p0066In a conventional locking device 100a, the cable would in this state, if necessary, 130 protrude from the lock cylinder and thus give unauthorized persons the opportunity to control the actuator 114 and the controller 118 to act upon with control commands.

p0067The clamping device according to the invention 140, however advantageous that in the manipulation attempt also severed cable 130 fully retracted by means of their spring force through the opening 116a of Bohrschutzes 116 into the interior 110b of the lock cylinder 110, so that the cable end 130a can not be achieved without the drilling 116 overcome.

p0068The embodiment described above the <figref idrefs="f0002">Figures 3a, 3b</figref> may also be provided with such locking devices that have no secondary controller in the lock cylinder 110th Preferably then the clamping device 140 is provided directly between the drilling 116 and the actuator 114th This embodiment has the advantage that in addition to the actuator 114 and the clamping means 140 no additional components have to be integrated into the key cylinder 110, in particular no control unit 118, and that, nevertheless, an increased protection is provided against manipulation.

p0069In a further embodiment of the closing device according to the invention, cf. 100b. <figref idrefs="f0002">figure 4</figref>, An electrical and / or mechanical contact is at least one component (for example, cable end 130a) of the electrical connection means 130 to a contact point 132 in the area of ​​the lock cylinder 110 is formed so that at least the electrical contact of the component 130a opens to the contact point 132 when the component 130a is applied with a tensile force which is greater than a holding force of the whole plug-in connection, in particular greater than about 1 Newton per plug contact.

p0070The contact point 132 may be designed for this purpose, for example as a socket, in which the end 130a of the cable 130 or a corresponding plug is frictionally held, for example by means of electrically conductive spring means. Once a - in relation to the design of the system - to large tensile force to the cable 130 acts, at least breaks the electrical connection between the contact point 132 and the cable 130, so that over the cable no controlled driving integrated into the key cylinder 110 components 118 , 114 can be made longer.

p0071To ensure optimal function of this embodiment, the length of the connecting cable 130 and / or the positive connection at the contact point 132 and / or the arrangement of the contact point 132 and / or the management of the connection cable 130 in the lock cylinder 110 are possible precisely coordinated.

p0072In yet another embodiment, the electrical connection means 130 includes a plurality of individual conductors on which at least some are formed of conductor such as copper wire. This variant of the invention advantageously allows to speak a "mechanical code" because after a Manipulationsversucht who has the forcible removal of the knob 120 to the object, an unauthorized person from the similarity of the individual conductors of the cable 130 and their large number can not be derived easily, which the conductor which or at all serves a purpose and / or in which order they are to be addressed.

p0073In yet a further embodiment (not shown) may be provided between the electrical connecting means 130 and the actuator unit 114, a decoder unit which checks a predetermined code corresponding control pattern to a plurality of electrical leads of the electrical connection means 130 and the actuator 114 only activates when the proper control pattern has been output from the control unit 122nd A simple, yet efficient code can be achieved for example by an implementation of the decoder unit as a logical functional unit that has a plurality of inputs, which are to be driven via the connecting means 130 by the control unit 122nd The logic function unit realized a predetermined logical

p0074Transfer function, and an output of the logic function unit is connected to the actuator 114th Thus, the right combination of input signals can be applied only with knowledge of the transfer function specifically that causes an activation of the actuator 114th The provision of storage elements in the logic function unit provides a further enhanced tamper security.

p0075In yet another embodiment, the electrical connection means 130 at least one breakable electrical conductor on which causes the targeted interruption of the electrical connection between the actuating element 120 and the components arranged therein 122, 124 and the internal space 110b of the lock cylinder 110 in an attempt at manipulation. Preferably carried out at least the destruction of such a section of the fragile conductor disposed in the interior space 110b of the lock cylinder 110, in particular behind the drilling 116, so that the deliberately induced interruption point is accessible only by overcoming the Bohrschutzes 116 from the side of the actuating element 120 from ,

p0076Fragile electrical conductors can be produced, for example, using conventional printed circuit board technology, in which the printed circuit board structures are provided with defined weakening or predetermined breaking points. Ceramic substrates or metallized glass body can also be provided for the formation of fragile electrical conductors.

p0077In another embodiment, in the actuator is an actuator 126 (<figref idrefs="f0002">Figure 3a, 3b</figref>) Is provided which is adapted to unlock under the control by the primary control device 122 includes a locking mechanism wherein the locking mechanism is intended to impede or prevent unauthorized opening of a housing of the actuating element 120th For example, may be formed of the actuator 126, that it has a pin (not shown) for control is moved out of a blocking position, in which the bolt has a first housing part (for example, holding area) of the operating member 120 with a second housing part (for example, lid) of the operating member 120 is locked , The control of the actuator 126 can for example be done by the primary controller 122 and can be triggered, for example, after receiving an identification signal of a special transponder, by the system 100 indicates that a person entitled to Knauf wants 120 for maintenance purposes, for example to open.