Locking device

0001The invention relates to a locking device with a lock cylinder and an actuating element for the lock cylinder.

0002The <patcit id="pcit0001" dnum="DE102005034618A1"><text>DE 10 2005 034618 A1</text></patcit> shows an electronic locking device and a locking method.

0003It is the object of the present invention to improve a locking device of the type mentioned above in such a way that there is increased security against attempts at manipulation.

0004This object is achieved by the combination of features of claim 1.

0005The arrangement of the actuator unit in the lock cylinder results in a particularly secure configuration, since the actuator unit is thereby protected from direct access, which as a rule originates from the actuating element. Before the actuator can be manipulated, the actuating element must first be removed and the drilling protection arranged between the actuating element and the interior of the lock cylinder must be overcome. According to the invention, a secondary control device is provided in the lock cylinder, which is connected to the primary control device via the electrical connection means and is designed to exchange data with the primary control device. This configuration advantageously enables direct control of the actuator unit by the secondary control device, which is likewise arranged in a protected manner in the interior of the lock cylinder, while operation of the secondary control device can be controlled, for example, by the primary control device. For this purpose, for example, a corresponding data exchange between the control devices can take place via the electrical connection means, which preferably also includes coding or Can provide encryption of exchanged information. This effectively makes manipulation attempts more difficult in which the actuating element with the primary control device integrated therein is first removed from the lock cylinder, and in which an attempt is then made to control the actuator unit via the electrical connection means that may now be exposed so that it becomes a locking element of the lock cylinder unlocked. According to the invention, the primary control device is designed to receive information, in particular control commands and / or identification data, from an identification transmitter via an interface unit and to transmit data to the secondary control device as a function of the received information. The data exchange with the information transmitter can preferably take place wirelessly, for example via a suitable radio protocol or using an RFID system in which the interface unit has an RFID reader and in which the information transmitter in a known manner via at least one RFID transponder which can save identification data and send it to the RFID reader when requested.

0006As an alternative or in addition, the interface unit can have means for inputting biometric data (fingerprints, retina / iris structures, DNA data). A contact-based electronic transmission, for example by means of high-frequency signals transmitted by the identification transmitter, which propagate over the body surface of a person touching the actuating element, is also conceivable.

0007In one variant of the invention, the primary control device is designed to forward the signals received from the identification transmitter by means of the interface unit to the secondary control device via the electrical connection means. In this embodiment, the primary control device can be made relatively simple because it essentially only has to forward the received signals, while an evaluation of the received signals and, if necessary, the subsequent control of the actuator unit takes place by the secondary control device arranged in the lock cylinder.

0008In the simplest case, the primary control device can therefore be of passive design, that is to say even only serve to establish an electrical connection between the interface unit and the electrical connection means that lead to the secondary control device. In this variant, an authorization check and / or other analysis of the data received from the interface unit can preferably be carried out by the secondary control device.

0009In addition to the pure forwarding of received signals, according to a further embodiment, the primary control device can also be designed to amplify the signals received from the identification transmitter by means of the interface unit and / or to shape (filtering) and / or demodulate and / or to shape them with regard to their frequency spectrum modulate, for example, to ensure secure data transmission to which further signal processing or -Evaluation of the secondary control device. According to the invention, the primary control device is particularly advantageously designed to subject received identification data to an authorization check and, in the event of a positive result of the authorization check, to transmit control information signaling the positive result of the authorization check to the secondary control device. In this variant of the invention, the received signals or data are evaluated in the primary control device. The authorization check can, for example, have a comparison to the object in which it is determined whether the received identification data match the identification data stored in the primary and / or the secondary control device, which represent, for example, authorized users of the locking device. Depending on the storage location of the stored identification data (primary / secondary control device), corresponding data communication can accordingly take place between the control devices.

0010The identification data assigned to authorized users are particularly preferably stored in a memory assigned to the primary control device, which memory can preferably also be integrated into the primary control device. If the primary control device has a microcontroller, for example, the identification data assigned to authorized users can be stored in a non-volatile memory of the microcontroller. In this variant of the invention, the authorization check can take place solely in the primary control device, so that no resources need to be reserved for this in the secondary control device and for data communication between the two control devices. Only the control information signaling the positive result of the authorization check is transmitted to the secondary control device after the evaluation in the primary control device. The secondary control device can then advantageously control the actuator unit directly, for example in order to unlock a locking element of the lock cylinder.

0011The actuator unit can act directly on a locking member of the lock cylinder in a manner known per se. As an alternative to this, however, it is also possible to use the actuating element, for example to be rotatable relative to the lock cylinder, and to provide a mechanical coupling between the actuating element and the locking member, this mechanical coupling being interruptible by coupling means arranged between the actuating element and the locking member, for example as long as no proper identification signal has been sent to the interface unit. In this embodiment, the actuator unit does not act directly on the closing element, but rather on the coupling means in order to control a mechanical coupling between the actuating element and the closing element. This has the advantage that an actuating force for the drive of the closing element has to be applied by a person using the closing device, and not by an actuator of the actuator unit.

0012According to the invention, the secondary control device is designed to transmit at least one data sequence to the primary control device after receiving the control information signaling the positive result of the authorization check, the data sequence being usable by the primary control device for future communication with the secondary control device. The data sequence preferably represents secret information that is only known to the two control devices and can thus be used to verify future data communications between the two control devices.

0013As an alternative or in addition to sending such data sequences after receiving the control information signaling the positive result of the authorization check, the secondary control device can also send one or more data sequences to the primary control device at other, generally arbitrary, times in order to ensure that they always have an adequate Supply of data sequences.

0014According to the invention, the secondary control device is designed to form the data sequence as a function of a random process and / or a quasi-random process, the control devices being designed to store the at least one data sequence in a volatile memory. This results in a particularly high level of security against manipulation because unauthorized persons cannot observe the generation of the data sequences and because new data sequences are formed again in the system after a power failure. The data sequences generated in the course of the operation of the locking device are individual and change continuously, ie from sequence to sequence.

0015In a further preferred embodiment, both control devices each have at least one non-volatile stored, identical data sequence for initialization, so that a first signaling from the primary control device to the secondary control device can also be recognized as a proper communication process. This initialization sequence can be used, for example, after changing the battery. The initialization sequence is preferably written into the memories of the two control devices when the locking device is manufactured, with a different value in turn being used for each copy of the locking device 100. The initialization sequence is preferably written into an internal EEPROM memory of the relevant microcontroller. The initialization sequence thus enables a “pairing” process which enables the control devices to communicate with one another for the first time. For further, future communications, dynamically generated data sequences are preferably used.

0016So that a subsequent exchange of components of the locking device (e.g. actuating element together with the primary control device arranged therein) is possible, a reset mechanism can also be provided in a further advantageous embodiment of the invention, which is preferably only accessible after the locking device has been dismantled and a new initialization sequence is impressed eg in the control device (s).

0017It is also conceivable to design the primary control device in such a way that a default value for the initialization sequence can be transmitted to it once via the interface, e.g. from a special information transmitter, and that it is forwarded to this secondary control device for future operation, which is also configured so that it receives the default value once via the cable connection and saves it in a non-volatile manner.

0018In a further, particularly preferred embodiment, the primary control device is designed to form the control information signaling the positive result of the authorization check as a function of at least one data sequence previously received by the secondary control device. The control information can, for example, also be identical to the data sequence. Since the data sequence has previously been formed and stored by the secondary control device, the secondary control device can recognize upon receipt of a corresponding data sequence or data derived therefrom that the primary control device or its data communication to the secondary control device has not been manipulated. Only then can the secondary control device control the actuator unit, for example.

0019In a further embodiment, a tensioning device is provided in the lock cylinder, which is designed to apply a tensile force to at least one component of the electrical connection means, in particular at least one electrical connection cable. For this purpose, the tensioning device can have a spring device, for example. The tensile force with which the tensioning device acts on the connecting cable is selected so that a proper connection of the connecting cable to the primary control device is not impaired, but that if the connecting cable is mechanically interrupted, as can occur in the event of an attempted sabotage, this, however, preferably completely , is pulled through the drill protection into an inner area of ​​the lock cylinder. As a result, an unauthorized person is advantageously deprived of the possibility of supplying the actuator unit with signals or electrical energy for control. The embodiment described above can also be provided for those locking devices which have a secondary control device in the lock cylinder. The tensioning device is then preferably arranged between the drilling protection and the secondary control device.

0020In a further embodiment, electrical and / or mechanical contacting of at least one component of the electrical connecting means with a contact point in the area of ​​the lock cylinder is designed so that at least the electrical contact of the component to the contact point opens when the component is subjected to a tensile force that is greater than a holding force of the entire plug connection, in particular greater than about 1 Newton per plug contact. The contact point can be designed, for example, as a socket in which one end of a cable of the electrical connection means or a corresponding plug is held in a non-positive manner, for example by means of electrically conductive spring means. As soon as an excessive tensile force acts on the cable - based on the design of the system - at least the electrical connection between the contact point and the cable is torn off, so that the cable can no longer be used to control components integrated in the lock cylinder. Too great a tensile force can be defined, for example, as a force of about 1 Newton per plug contact of the plug connection. In order to ensure optimal functioning of this embodiment, the length of the connecting cable and / or the force-fit connection in the contact point and / or the arrangement of the contact point and / or the routing of the connecting cable in the locking cylinder connecting cable are to be coordinated as precisely as possible. In general, by designing the components, the force required to tear off the electrical connection between the contact point and the cable can be adjusted over a wide range.

0021In a further embodiment, the electrical connection means have a multiplicity of individual conductors, at least some conductors being formed from enamelled copper wire. This variant of the invention advantageously enables "mechanical coding", as it were, since an unauthorized person cannot easily deduce from the similarity of the individual conductors and their large number which of the conductors serves which or any purpose.

0022In a further embodiment, the electrical connection means have at least one fragile electrical conductor which, in the event of a manipulation attempt, causes the targeted interruption of the electrical connection between the actuating element or the components arranged therein and the interior of the lock cylinder. Preferably, at least such a section of the fragile conductor, which is arranged in the interior of the lock cylinder, is destroyed, in particular behind the drill protection, so that the deliberately created interruption point is only accessible from the side of the actuating element by overcoming the drill protection.

0023In a further embodiment, an actuator is provided in the actuating element which is designed to unlock a locking mechanism under control by the primary control device, the locking mechanism being provided to make unauthorized opening of a housing of the actuating element more difficult or to prevent it. For example, the actuator can be designed so that, when activated, it moves a bolt out of a blocking position in which the bolt locks a first housing part (e.g. grip area) of the actuating element with a second housing part (e.g. cover) of the actuating element. The control of the actuator can, for. B. be done by the primary controller and at-B. be carried out by the primary control device and triggered, for example, after receiving an identification signal from a special transponder.

0024An operating method according to claim 10 is specified as a further solution to the object of the present invention.

0025According to the invention, it is provided here that a secondary control device arranged in the lock cylinder sends at least one data sequence to the primary control device, the primary control device and the secondary control device storing the data sequence in a volatile memory, and the primary control device storing the stored data sequence and / or from the data sequence dependent information sends to the secondary control device. The data sequence, which is initially generated by the secondary control device, preferably randomly, serves as a so-called "shared secret" of the two control devices, which they can use for future communication, whereby this communication can be protected against manipulation attempts. Since no valid data communications can be established between the control devices without knowledge of the secret data sequences, it is impossible for unauthorized persons, for example, to simulate the primary control device and in this way to cause the secondary control device to control the actuator unit.

0026Further features, possible applications and advantages of the invention emerge from the following description of exemplary embodiments of the invention, which are shown in the figures of the drawing. All of the features described or shown form the subject matter of the invention individually or in any combination, regardless of how they are summarized in the claims or their reference, and regardless of their wording or representation in the description or in the drawing.

0027In the drawing shows:<dl id="dl0001"><dt>Figure 1</dt><dd>schematically a first embodiment of a locking device according to the invention,</dd><dt>Figure 2</dt><dd>Fig. 3 is a communication diagram of the embodiment according to <figref idref="f0001">Figure 1</figref>,</dd><dt>Figure 3a</dt><dd>schematically a further embodiment of a locking device according to the invention in a proper operating state,</dd><dt>Figure 3b</dt><dd>schematically the embodiment according to <figref idref="f0002">Figure 3a</figref> in a damaged state due to an attempted tampering, and</dd><dt>Figure 4</dt><dd>schematically yet another embodiment of a locking device according to the invention.</dd></dl>

0028<figref idref="f0001">Figure 1a</figref> shows schematically a first embodiment of a locking device 100 according to the invention, which has a locking cylinder 110 and an actuating element 120 designed in the present case as a rotary knob.

0029A not separately designated housing of the lock cylinder 110 can be designed, for example, in the manner of a DIN profile cylinder or some other standardized lock cylinder, so that the lock device 100 can be used, for example, instead of conventional lock cylinders in mortise locks for doors and the like. Although<figref idref="f0001">Figure 1</figref> shows a configuration which is referred to as a "full cylinder", the principle according to the invention described below can also be applied to half cylinders which offer locking / opening of a door (not shown) only from one side.

0030The actuating element 120 has a primary control device 122, which is connected via electrical connection means 130, for example a multi-core cable, to a secondary control device 118 arranged in the lock cylinder 110 and can exchange data with it. In a preferred embodiment, the data exchange between the control devices 122, 118 takes place bidirectionally.

0031The secondary control device 118 is connected to an actuator unit 114 and can control this as a function of control commands which are transmitted to the secondary control device 118 from the primary control device 122 via the cable 130. As indicated by the arrow in<figref idref="f0001">Figure 1</figref> indicated, the actuator unit 114 acts on a locking member 112 of the lock cylinder which, for example, interacts in a known manner with a locking bolt (not shown) of a door in which the lock cylinder 110 is installed in order to lock the door.

0032The lock cylinder 110 has a drill protection 116 in its end area 110a facing the actuating element 120, which is preferably approximately bell-shaped and prevents or at least makes more difficult the drilling of the lock cylinder 110 and other manipulations in the end area 110a. In order to enable the data connection described above between the control devices 122, 118, the cable 130 is passed through an opening in the drill protection 116. It should be noted that <figref idref="f0001">Figure 1</figref> represents only a schematic drawing in which, for example, the passage opening for the cable 130 in the drilling protection 116 is shown in the drawing to be significantly larger than is technically necessary.

0033In the present case, the electrical energy supply of the components 114, 118, 122 is brought about by an electrical energy source 124 integrated in the knob 120, which can be a battery, for example.

0034The primary control device 122 has an interface unit 122a and is designed to receive information, in particular control commands and / or identification data, from an identification transmitter 122b via the interface unit 122a and to transmit data to the secondary control device 118 as a function of the received information. In this way, for example Control commands for opening and closing the locking device 100 are transmitted from the identification transmitter 122b via the primary control device 122 to the secondary control device 118 in the interior of the lock cylinder 110.

0035The interface unit 122a can for example have an RFID (radio frequency identification) reading unit which interacts in a known manner with an RFID transponder arranged in the identification transmitter 122b in order to transmit information from a memory of the RFID transponder to the control device 122. As an alternative or in addition, the interface unit 122a can enable another wireless or wired data transmission or the exchange of biometric data (for example fingerprints, retina / iris structures, DNA data).

0036In a preferred embodiment, the primary control device 122 can be of relatively simple design because it essentially only has to forward the signals received from the RFID transponder, while the received signals are evaluated and the actuator unit 144 is subsequently activated, for example by the Secondary control device 118 arranged on the locking cylinder 110 takes place.

0037In the simplest case, the primary control device 122 can therefore even be of passive design, possibly even only serve to establish an electrical connection between the interface unit 122a and the cable 130, which leads to the secondary control device 118.

0038In addition to the pure forwarding of received signals, according to a further embodiment, the primary control device 122 can also be designed to amplify the signals received from the identification transmitter 122b by means of the interface unit 122a and / or to shape (filter) and / or demodulate and / or to modulate, for example, to ensure safe and reliable data transmission to which further signal processing or -evaluation executing secondary control device 118 to ensure.

0039In a further, particularly preferred embodiment, the primary control device 122 is designed to subject received identification data to an authorization check and, in the event of a positive result of the authorization check, to transmit control information signaling the positive result of the authorization check to the secondary control device 118. In this variant of the invention, a first evaluation of the received signals or Data in the primary control device 122. The authorization check can, for example, have a comparison to the object in which it is determined whether the received identification data with identification data stored in the primary and / or the secondary control device 122, 118, which represent, for example, authorized users of the locking device, to match. Depending on the storage location of the stored identification data (primary / secondary control device), corresponding data communication can accordingly take place between the control devices.

0040The identification data assigned to authorized users are particularly preferably stored in a memory 122c assigned to the primary control device 122. The primary control device 122 can have a microcontroller, for example, and the identification data assigned to authorized users can be stored in a non-volatile memory 122c of the microcontroller. In this variant of the invention, the authorization check can advantageously take place solely in the primary control device 122, so that no resources need to be reserved for this in the secondary control device 188 and for data communication between the two control devices 118, 122. Only the control information signaling the positive result of the authorization check is transmitted to the secondary control device 118 after the evaluation by the primary control device 122. The secondary control device 122 can then advantageously control the actuator unit 114 directly, for example in order to unlock the locking element 112 of the locking cylinder 110 or to move it between different possible operating states.

0041<figref idref="f0001">Figure 2</figref> shows an example of a communication diagram that indicates a data flow between the components 122b, 122, 118, 114 during an identification process according to the invention.

0042First, the identification transmitter 122b sends an identification signal s_2 to the primary control device 122, which receives the identification signal s_2 by means of its interface 122a.

0043In step 200, the primary control device 122 checks whether the received identification signal s_2 is a known identification signal s_2 that is assigned to an authorized user of the locking device 100, for example. For this purpose, a search process can be carried out via the memory 122c.

0044If the check 200 shows that the identification signal s_2 is assigned to an authorized user of the locking device 100, the primary control device 122 sends a release signal s_4 via the connecting cable 130 (<figref idref="f0001">Figure 1</figref>) to the secondary control device 118.

0045The secondary control unit then evaluates

0046The secondary control device 118 then evaluates the release signal s_4 and finally controls the actuator unit 114 by means of the signal s6 in a manner corresponding to the release signal s_4, for example in order to unlock the closing element 112.

0047The actuator unit 114, which can be, for example, an electromagnetic control element (for example lifting magnet or electric motor), can act directly on the locking element 112 of the locking cylinder 110 in a manner known per se.

0048As an alternative to this, however, it is also possible to design the actuating element 120 to be rotatable relative to the lock cylinder 110, for example, and to provide a mechanical coupling between the actuating element 120 and the closing element 112, which can be done for example by means of a shaft (not shown). This mechanical coupling can then advantageously be interrupted by coupling means arranged between the actuating element 120 and the closing element 112, which coupling means are preferably arranged in the interior of the lock cylinder 110. For example, in a first operating mode, the coupling between the knob 120 and the locking element 112 can be deactivated, and only if a successful identification process, cf.<figref idref="f0001">Figure 2</figref>, has taken place, the coupling means are activated in a second operating mode by the actuator unit 114 for a predetermined period of time in order to activate the coupling between the knob 120 and the locking member 112 so that an authorized person can open the locking device 100 by turning the knob 120 .

0049According to the invention, the secondary control device 118 is designed to transmit at least one data sequence to the primary control device 122 after receiving the control information signaling the positive result of the authorization check 200 (= release signal s_4), the data sequence from the primary control device 122 for future communication the secondary control device 118 can be used. The data sequence preferably represents secret information that is only known to the two control devices 118, 122 and can thus be used to verify future data communications between the two control devices 118, 122.

0050The secondary control device 118 is designed to form the data sequence (s) as a function of a random process and / or a quasi-random process. For example, the secondary control device 118, which analogously to the primary control device 122 can also have a microcontroller, can form one or more data sequences after receiving the release signal s_4 from the primary control device 122, cf. step 220<figref idref="f0001">Figure 2</figref>. The secondary control device 118 then transmits the data sequence (s) to the primary control device 122, see signal s_8.

0051The control devices 118, 122 are designed to store the data sequence (s) in each case in a volatile memory, that is to say, for example, in a working memory (RAM, random access memory) of the respective microcontroller. This results in a particularly high level of security against manipulation, because unauthorized persons cannot observe the generation of the data sequences, and because new data sequences are formed again in the system 100 after a power failure.

0052The data sequences generated in the course of the operation of the locking device 100 are individual and change continuously, ie from sequence to sequence, so that the greatest possible security against manipulation is provided. In this way, it is advantageously prevented, for example, that an unauthorized person forcibly separates the knob 120 from the lock cylinder 110 and successfully sends control commands to the secondary control unit 118 via the then exposed cable 130.

0053As an alternative or in addition to sending such data sequences after receiving the release signal s_4, the secondary control device 118 can also send one or more data sequences to the primary control device 122 at other, generally arbitrary, times in order to ensure that they always have a sufficient supply of data sequences disposes.

0054In a further, particularly preferred embodiment, the primary control device 122 is designed to form the control information (= release signal s 4) signaling the positive result of the authorization check as a function of at least one data sequence previously received by the secondary control device 118. The control information or the release signal s_4 can, for example, also be identical to a data sequence. Since the data sequence has previously been formed by the secondary control device 118 and, preferably volatile, stored, the secondary control device 118, upon receipt of a corresponding data sequence or data derived therefrom, can recognize that the primary control device 122 or its data communication to the secondary control device 118 is not has been manipulated because the data sequences are only known to the two components 118, 122. Only then can the secondary control device 118 control the actuator unit, for example.

0055The generation of the data sequence according to the invention by the secondary control device 118 takes place randomly or at least quasi-randomly. Random-based data sequences can be derived, for example, from an electronic noise signal that is sent to an A / D (analog / digital) converter input of a microcontroller 118a (<figref idref="f0001">Figure 1</figref>) of the secondary control device 118, or from a value of a timer register of the microcontroller 118a. Quasi-random numbers can be determined in a manner known per se by means of a suitable software program for the microcontroller. a data sequence with a length of at least 8 bytes (= 64 bits).

0056In a further preferred embodiment, both control devices 118, 122 each have at least one non-volatile stored, identical data sequence for initialization, so that a first signaling from the primary control device 122 to the secondary control device 118 can also be recognized as a proper communication process. This initialization sequence can be used, for example, after changing the battery. The initialization sequence is preferably written into the memories of the two control devices 118, 122 during manufacture of the locking device 100, a different value in turn being used for each copy of the locking device 100. The initialization sequence is preferably written into an internal EEPROM memory of the relevant microcontroller.

0057It can be provided that the initialization sequence is only used for communication between the control devices 118, 122 if a correspondingly coded key has previously been recognized via the interface 122a. The coded key can be a type of “master” transponder 122b, for example, which is authorized to initiate the use of the initialization sequence.

0058It is also conceivable to design the primary control device 122 in such a way that a default value for the initialization sequence can be transmitted to it once via the interface 122a, for example from a special information transmitter, and that it stores this for future operation. This default value can be, for example can also be forwarded to the secondary control device 118, which is also configured in such a way that it receives the default value once via the cable connection 130 and stores it in a non-volatile manner.

0059Furthermore, in a further embodiment, a reset mechanism for the programming of an initialization sequence can be provided, which is only accessible after an authorized opening of the lock cylinder 110 and allows the reprogramming of an initialization sequence. As a result, individual components of the closing device 100 can advantageously also be exchanged subsequently.

0060Particular advantages of the aspects of the invention and embodiments described above are:<ul id="ul0001" list-style="dash"><li>the possibility of arranging the battery 124, the radio interface 122a and the means 122 for identifying or checking the authorization of an identification transmitter 122b in the knob 120, which offers relatively little protection against manipulation compared to the interior of the lock cylinder 110, whereby installation space in the lock cylinder 110 is saved;</li><li>a simple replacement of the battery 124 by opening the knob 120;</li><li>the generation and transmission of new data sequences to the primary control device 122 only when an authorized identification transmitter has already been recognized;</li><li>the generation of the data sequences cannot be observed because this takes place in the shielded secondary control device 118;</li><li>unpredictable, changeable values ​​of the data sequences; - no inexpensive possibility of manipulating an initialization sequence;</li><li>no complex decoding required in the secondary control device 118; a simple comparison of the received data sequence s_4 with a data sequence previously sent to the primary control device 122 is sufficient;</li><li>with half-cylinder configurations there is no loss of safety.</li></ul>

0061<figref idref="f0002">Figure 3a</figref> shows a further embodiment 100a of a locking device according to the present invention in a first operating state. How out<figref idref="f0002">Figure 3a</figref> As can be seen, a tensioning device 140 is provided in the lock cylinder 110 between the drill protection 116 and the secondary control device 118, which is designed to apply a tensile force to at least one component of the electrical cable 130, in particular at least one core of the cable 130, cf. the block arrow in the tensioning device 140. For this purpose, the tensioning device 140 can, for example, have a spring device (not shown).

0062The tensile force with which the tensioning device 140 attaches the connecting cable 130 or individual cores thereof acted upon is selected so that a proper connection of the connecting cable 130 to the primary control device 122 is not impaired, that in the event of a mechanical interruption of the connecting cable 130, as can occur during a manipulation attempt, the cable 130, preferably completely, through the drill protection 116 is pulled through into a protected inner region 110b of the lock cylinder 110. As a result, an unauthorized person is advantageously deprived of the possibility of supplying the actuator unit 114 with signals or electrical energy for control.

0063<figref idref="f0002">Figure 3b</figref> shows the locking device 100a according to FIG <figref idref="f0002">Figure 3a</figref> in a damaged state due to an attempted tampering. The knob 120 has been mechanically separated from the lock cylinder 110.

0064In the case of a conventional locking device 100a, the cable 130 would protrude from the locking cylinder in this state and thus give unauthorized persons the opportunity to control the actuator 114 or to apply control commands to the control device 118.

0065However, the tensioning means 140 according to the invention have advantageously completely withdrawn the cable 130, which was also severed during the manipulation attempt, using their spring force through the opening 116a of the drill protection 116 into the interior 110b of the lock cylinder 110, so that the cable end 130a cannot be reached without the drill protection 116 to overcome.

0066The embodiment of the <figref idref="f0002">Figures 3a, 3b</figref> can also be provided for those locking devices that do not have a secondary control device in the locking cylinder 110. The tensioning device 140 is then preferably provided directly between the drill protection 116 and the actuator unit 114. This embodiment has the advantage that in addition to the actuator unit 114 and the clamping means 140, no further components have to be integrated into the lock cylinder 110, in particular no control unit 118, and that there is nevertheless increased protection against manipulation.

0067In a further embodiment 100b of the locking device according to the invention, cf. <figref idref="f0002">Figure 4</figref>, is an electrical and / or mechanical contacting of at least one component (e.g. Cable end 130a) of the electrical connection means 130 with a contact point 132 in the area of ​​the lock cylinder 110 is designed so that at least the electrical contact of the component 130a to the contact point 132 opens when the component 130a is subjected to a tensile force that is greater than a holding force of the entire plug connection, in particular greater than about 1 Newton per plug contact.

0068For this purpose, the contact point 132 can be designed, for example, as a socket in which the end 130a of the cable 130 or a corresponding plug is held in a force-locking manner, for example by means of electrically conductive spring means. As soon as an excessively high tensile force acts on the cable 130 - based on the design of the system - at least the electrical connection between the contact point 132 and the cable 130 breaks off, so that no controlled activation of components 118 integrated in the lock cylinder 110 via the cable , 114 more can be done.

0069In order to ensure optimal functioning of this embodiment, the length of the connecting cable 130 and / or the force-fit connection in the contact point 132 and / or the arrangement of the contact point 132 and / or the routing of the connecting cable 130 in the lock cylinder 110 are to be coordinated with one another as precisely as possible.

0070In yet another embodiment, the electrical connection means 130 have a multiplicity of individual conductors, at least some conductors being formed, for example, from enamelled copper wire. This variant of the invention advantageously enables a "mechanical coding" as it were, since after a manipulation attempt, which has the forcible removal of the knob 120 as an object, an unauthorized person from the similarity of the individual conductors of the cable 130 and their large number can not easily deduce which of the Head which or at all serves a purpose and / or in which order they are to be controlled.

0071In yet another embodiment, a decoder unit (not shown) can be provided between the electrical connection means 130 and the actuator unit 114, which checks a control pattern corresponding to a predetermined code on several electrical lines of the electrical connection means 130 and only controls the actuator unit 114 if that correct control pattern has been issued by the control unit 122. A simple yet efficient code can be achieved, for example, by realizing the decoder unit as a logical functional unit which has a plurality of inputs which are to be controlled by the control unit 122 via the connection means 130. The logical functional unit realizes a predeterminable logical transfer function, and an output of the logical functional unit is connected to the actuator unit 114. Thus, the correct combination of input signals, which causes the actuator unit 114 to be activated, can only be applied in a targeted manner with knowledge of the transfer function. The provision of memory elements in the logical functional unit offers a further increased security against sabotage.

0072In yet another embodiment, the electrical connection means 130 have at least one fragile electrical conductor which, in the event of a manipulation attempt, causes the targeted interruption of the electrical connection between the actuating element 120 or the components 122, 124 arranged therein and the interior 110b of the lock cylinder 110. Preferably, at least such a section of the fragile conductor which is arranged in the interior 110b of the lock cylinder 110 is destroyed, in particular behind the drill protection 116, so that the deliberately created interruption point is only accessible from the side of the actuating element 120 by overcoming the drill protection 116 .

0073Fragile electrical conductors can be produced using conventional circuit board technology, for example, in which circuit board structures with defined weaknesses or predetermined breaking points are provided. Ceramic substrates or metallized glass bodies can also be used to form fragile electrical conductors.

0074In a further embodiment, an actuator 126 (<figref idref="f0002">Figure 3a, 3b</figref>) is provided, which is designed to unlock a locking mechanism under control by the primary control device 122, the locking mechanism being provided to make unauthorized opening of a housing of the actuating element 120 more difficult or to prevent it. For example, the actuator 126 can be designed such that, when activated, it moves a bolt (not shown) out of a blocking position in which the bolt is a first housing part (eg Grip area) of the actuating element 120 is locked to a second housing part (eg cover) of the actuating element 120. Actuator 126 can be activated, for example, by primary control device 122 and triggered, for example, after receiving an identification signal from a special transponder, which signals to system 100 that an authorized person wishes to open knob 120, for example for maintenance purposes.