The Hidden History Behind Every Lock

Joseph Bramah (1784)

Name: Multi-lever lock
Inventor: Joseph Bramah (April 13, 1748 – December 9, 1814) was an English inventor and engineer. In 1784, he invented the so-called Bramah lock.

Current locks of this type 
Types that today descend from the Bramah lever principle:
• Bramah Locks Ltd. (London) – still produces locks almost identical to the original principle.
• Abus Diskus / Abus Granit Plus / Abloy Protec2
• Motorcycle and high-security padlocks (e.g., Kryptonite, Oxford, Trelock) – use wafer or combined disc/slider systems.

Lockpicking
• Destructive tools & levering attacks
• Bypass/removal due to poor installation
• Targeted drilling/milling if no drill protection is present
• Fine manipulation if manufacturing quality is poor (picking)
• Electronic attacks — if electronics are present

Risk/Security
Highest risk: Destructive attacks (hammer, chisel, angle grinder)
Bypass / circumvention (attacks on hardware/frame)
Medium risk: Targeted drilling / milling / pulling / ripping
Low risk: Fine manipulation / decoding

Insights
Even a simple lock can be very resistant when tolerances, hardening, and installation quality are right. The main danger comes from raw force. Radial wafer and disc locks are extremely precise, but vulnerable to physical attacks if they lack drill or lever protection.

Abraham (Abe) Ogier Stansbury (1805)

Name: Double-acting pin tumbler lock
Inventor: Abraham O. Stansbury received a patent in 1807 for a double-acting pin tumbler lock. The pins had to be aligned correctly from both sides at the same time. This created significantly higher resistance to manipulation compared to earlier single-acting pin systems.

Current locks of this type 
Stansbury is therefore considered a pioneer of modern pin-tumbler systems, even if the form we know today was later perfected by Linus Yale Jr. There are no direct Stansbury locks anymore, but the underlying principle lives on in modern variants: Special forms of double-pin chambers Opposing pins or dual-acting tumblers in more complex profiles High-security cylinders combining multiple levels or directions of pin movement

Lockpicking
• Exploiting large manufacturing tolerances — pins were often not perfectly symmetrical. The two active planes could sometimes be influenced one after the other instead of simultaneously.
• Mechanical feedback (e.g., slight give, blocking, friction) to detect which side was already in position, allowing indirect separation of the planes.
• Wear — over time, small gaps formed, sometimes reducing the double requirement to a practically single-action mechanism.

Risk/Security
Highest risk: Destructive attacks (hammer, chisel, angle grinder) and bypass (attacks on hardware/frame)
Medium risk: Targeted drilling / milling / pulling / tearing
Low risk: Fine manipulation

Insights
The double-acting pin tumbler system was a historical breakthrough, but from today’s perspective it is no longer a high-security mechanism. Its greatest protection at the time came from requiring simultaneous alignment of both pin sides — a concept effective against primitive tools, but clearly limited when confronted with modern testing and manipulation techniques.

James Sargent (1873)

Bezeichnung: Zeitschloss
Erfinder: James Sargent entwickelte eines der ersten mechanischen Zeitschlösser, ein Sicherheitssystem, das einen Tresor nur innerhalb eines definierten Zeitfensters öffnen ließ – unabhängig davon, ob Schlüssel, Kombination oder Zugangscode bekannt waren. Der Kern seiner Idee: - ein präziser, federgetriebener Uhrmechanismus, - gekoppelt mit einer Sperreinrichtung, die den Riegel erst freigibt, wenn die voreingestellte Zeit verstrichen ist, - mehrere Zeitschaltwerke (oft 2–3), um Redundanz zu schaffen. Ziel war: Raubüberfälle, Komplizenfälle und erzwungene Öffnungen zu verhindern – selbst dann, wenn ein Räuber den Tresorwärter bedrohte. Sargents Zeitschloss wurde internationaler Standard für Banken, Geldtransporte und Hochsicherheitsbereiche.

Aktuelle Schlösser dieses Typs 
Zeitschlösser sind bis heute Standard bei:
- Banktresoren
- Geldautomaten
- Werttransportfahrzeugen
- Hochsicherheitstresoren
- Cash-Management-Systemen 

Moderne Varianten kombinieren oft: 
- digitale Programmierung,
- redundante Uhrwerke,
- manipulationssichere Gehäuse,
- automatische Sperrprotokolle,
- Eintrittsverzögerung (Time Delay).
Viele Hersteller (z. B. S&G, Kaba-Mas, Lagard) produzieren weiterhin mechanische und elektronische Zeitschlösser, die Sargents Grundprinzip nahezu unverändert aufgreifen.

Lockpicking
Ausnutzung von Fertigungstoleranzen Frühe Zeitschlösser hatten gelegentlich:
- ungleichmäßige Ganggenauigkeit der Uhrwerke
- Toleranzen in den Kupplungsmechanismen
- leichte Variationen der Rückstellfedern
In seltenen Fällen konnte der Mechanismus „stehen bleiben“ oder hörbare Unterschiede produzieren, die Rückschlüsse auf die verbleibende Zeit gaben – allerdings ohne die eigentliche Sperre zu überwinden. Wichtig: Toleranzen halfen nicht beim Manipulieren – sie führten höchstens zu Fehlfunktionen.
• Mechanisches Feedback Ein echtes Zeitschloss gibt praktisch kein nutzbares Feedback:
- kein Drehmoment
- keine Rastpunkte
- keine mechanisch interpretierbaren Rücksignale Die Uhr läuft, egal was der Angreifer tut. Man hört nur das Ticken – und das gibt keinerlei Information über die Sperrposition. Höchstens beim Hineinhören konnten Fachleute damals Unterschiede im Geräuschverhalten feststellen, die auf Wartungszustände oder Defekte hindeuteten – aber nicht auf eine Möglichkeit, das Schloss zu manipulieren.
• Abnutzung im Betrieb Alterung erzeugte typische Effekte:
- Gangungenauigkeit
- stärkeres oder schwächeres Ticken
- erhöhte Reibung in alten Uhrwerken
Diese Effekte machten das Zeitschloss unzuverlässiger, aber nicht angreifbarer. Im Gegenteil: Ein verschlissenes Zeitschloss schloss oft strenger als ein neues.

Risiko/Sicherheit
Höchstes Risiko: Zerstörende Angriffe: Aufbrechen des Tresorgehäuses Trennwerkzeuge, Brennschneider, Bohrer Angriff auf Rahmen/Beschlag statt auf den Mechanismus → Das Zeitschloss selbst ist extrem robust – der umgebende Tresor ist der realistischere Schwachpunkt.
Mittleres Risiko: Gezielte teilzerstörende Angriffe: Bohren bis zum Zeitschloss (bei alten Modellen theoretisch möglich, aber extrem schwierig) Fräsen des Schlosskastens Herauslösen der Zeitschlossplatte bei schlechter Befestigung
Geringes Risiko: Feinmanipulation: klassisches Manipulieren ist praktisch unmöglich Uhrwerk läuft unabhängig vom Angreifer kein nutzbares Feedback keine Stift- oder Scheibenmechanik

Erkenntnisse
James Sargent schuf mit seinem Zeitschloss ein System, das nicht nur den Zugriff reguliert, sondern ihn im entscheidenden Moment unmöglich macht. Es war kein Anti-Manipulations-Schloss im klassischen Sinne – es war ein Anti-Zugriff-Schloss, das Gewalt über Zeit stellte. Seine Schwachstellen liegen nicht im Konzept, sondern in: Uhrwerkstoleranzen, Wartungsbedarf, und dem Tresorumfeld. Bis heute gilt Sargents Zeitschloss als eine der zuverlässigsten und wirkungsstärksten Erfindungen der physischen Sicherheitstechnik.

Theodor Kromer (1874)

Bezeichnung: Protector-Schloss
Erfinder: Theodor Kromer präsentierte 1874 das Protector-Schloss, ein hochkomplexes Hebelwerk-System, das speziell für Tresore und Sicherheitsbehälter geschaffen wurde. Sein Prinzip basierte auf: mehreren hochpräzisen Hebelzuhaltungen (oft 6–12 Stück), einer aufwendig konstruierten Schlüsselkontur, die jeden Hebel in eine exakt definierte Höhe brachte, einer mehrfach gestuften Gate-Geometrie, die Manipulationsversuche deutlich erschwerte, äußerst engen Fertigungstoleranzen, die die Hebel nur dann freigaben, wenn alle exakt ausgerichtet waren. Kromers Protector war eines der ersten Hebelschlösser, das industriell zuverlässig gefertigt werden konnte und dennoch einen ungewöhnlich hohen Manipulationswiderstand bot. Es wurde schnell zu einem Standard im Tresorbau – insbesondere im deutschsprachigen Raum.

Aktuelle Schlösser dieses Typs 
Aktuelle Vertreter:
- Kromer Protector 3/4 (moderne Versionen, teilweise mit Zusatzsicherungen)
- moderne Hebel-Tresorschlösser mehrerer Hersteller, die auf dem Kromer-Grundlayout basieren
- Varianten mit gehärteten Boxen manipulaitonssicheren Hebelgeometrien und zusätzlichen Sperrelementen.
Der originale 1874er Mechanismus wird heute nicht mehr gebaut, aber seine Konstruktionsphilosophie lebt fort: präzise Hebeltechnik, eng tolerierte Gates, hohe Manipulationsresistenz. Besonders in DACH-Ländern gelten Kromer-Schlösser bis heute als ein Synonym für zuverlässige, robuste Tresortechnik.

Lockpicking
• Ausnutzung von Fertigungstoleranzen Frühe Protector-Modelle hatten trotz hoher Qualität gewisse Streuungen:
- leichte Unterschiede in Hebelhöhen
- mikroskopisches Spiel in der Führung der Hebel
- minimale Varianz in Federhärte oder Gate-Tiefe
Diese Effekte konnten dazu führen, dass einzelne Hebel etwas früher oder definierter Feedback gaben als andere – ein möglicher Ansatzpunkt für geübte Manipulatoren.
• Mechanisches Feedback Trotz des komplexen Hebelsystems konnten einzelne Rückmeldungen wahrnehmbar sein:
- leichtes Einrasten beim Erreichen des Gates
- fein dosierbare Unterschiede im Drehmoment
- kleine Bewegungsänderungen beim Aufliegen der Hebel Gegenüber einfachen Mehrzuhaltungsschlössern war das Feedback sehr subtil, aber ein erfahrener Spezialist konnte einzelne Signale interpretieren, insbesondere bei älteren, nicht perfekt gewarteten Modellen.
• Abnutzung im Betrieb Mit den Jahren traten typische Alterungseffekte auf:
- abgeflachte Hebelkanten
- eingelaufene Gate-Flächen
- weichere Rückzugsfedern leicht erweitertes Spiel im Riegelmechanismus.
Diese Abnutzung erhöhte die mechanische Lesbarkeit des Schlosses und konnte die ursprüngliche Sicherheit graduell senken, vor allem, wenn das Schloss nur selten gewartet wurde.

Risiko/Sicherheit
Höchstes Risiko: Zerstörende Angriffe: Brechwerkzeuge (Hammer, Meißel, Vorschlagwerkzeuge) Winkelschleifer / Trenntechnik Aufbrechen des Tresorkörpers statt des Schlosses Angriff auf Rahmen, Tür oder Bolzen Einschätzung: Das Protector-Schloss selbst ist extrem robust. Die größte reale Schwachstelle bleibt das Tresorumfeld, nicht der Mechanismus.
Mittleres Risiko: Gezielte teilzerstörende Eingriffe: Bohren des Hebelschlosskastens (bei historischen Modellen ohne Hartmetall möglich) Fräsen einzelner Hebelkammertiefen Ziehen oder Herauslösen bei schlechter Tresorkonstruktion Einschätzung: Historische Modelle waren stabil, aber nicht gegen moderne Hartmetallbohrer geschützt. Moderne Protector-Versionen besitzen dagegen massive Anti-Bohr-Elemente.
Geringes Risiko: Feinmanipulation: Tasten einzelner Hebel über leichtes Drehmoment interpretieren minimaler Rastpunkte Decodieren über Hebelverschleiß oder Toleranzen Einschätzung: Das Protector-Schloss gehört historisch zu den am schwersten manipulierbaren Hebelschlössern. Feinmanipulation bleibt daher die schwächste realistische Angriffsform, selbst bei älteren Modellen.

Erkenntnisse
Theodor Kromers Protector-Schloss war eines der präzisesten, manipulationsresistentesten Hebelmechanismen seiner Zeit und gilt bis heute als ein Meilenstein im Tresorbau. Seine Stärken liegen in der engen Toleranzführung, der komplexen Hebelgeometrie und der hohen Fertigungsqualität. Schwachstellen entstehen historisch vor allem durch Abnutzung oder gegen zerstörende Methoden – nicht durch Manipulation. Moderne Varianten des Protector-Systems gehören weiterhin zu den zuverlässigsten Hebelschlössern im professionellen Sicherheitsumfeld.

Joseph Loch (1878)

Bezeichnung: Zahlenschloss
Erfinder: Joseph Loch entwickelte 1878 ein fortschrittliches mechanisches Zahlenschloss, das als eine der stärkeren Weiterentwicklungen der bis dahin bekannten Kombinationsmechanismen gilt. Sein Konzept nutzte: mehrere präzise gelagerte Zahlen- bzw. Kombinationsscheiben, eine robuste, manipulationserschwerte Gate-Geometrie, verbesserte Kopplungsmechanismen zwischen den Scheiben, ein zuverlässiges Freigabesystem für den Riegel. Lochs Ziel war, die Schwächen früher Scheibenzahlenschlösser zu reduzieren, insbesondere die manipulationsanfälligen Rückmeldungen beim Erreichen des Gates. Sein Mechanismus erreichte eine bessere Gleichmäßigkeit der Rückmeldung und galt damals als einer der sichersten Code-Schlösser im Tresorbau.

Aktuelle Schlösser dieses Typs 
Lochs Prinzip wurde zu einem der grundlegenden Mechanismen moderner Tresorzahlen­schlösser. Heute basieren viele Systeme auf seinem Aufbau:
- mechanische Tresor-Kombinationsschlösser (S&G, LaGard, Kaba-Mas)
- Zahlenschlösser an Wertschutzschränken und Waffenschränken
- sichere mechanische Schließwerke für Banktresore
Moderne Nachfolger besitzen:
- präzisionsgefertigte Scheiben
- manipulationsgeschützte Gates
- gehärtete Achsen
- Anti-Bohr-Platten
- verbesserte Kopplungssysteme

Lockpicking
• Ausnutzung von Fertigungstoleranzen Selbst bei Lochs verbesserter Konstruktion gab es Produktionsschwankungen:
- minimale Höhen- oder Tiefenabweichungen an den Gates
- leicht unterschiedliche Abstände zwischen den Scheiben
- geringfügiges Spiel in der Achsführung
- Varianzen in der Kopplungsmechanik
Diese Punkte konnten dazu führen, dass eine Scheibe etwas klareres Feedback lieferte als die anderen – ein möglicher Ansatzpunkt bei gezielter Manipulation.
• Mechanisches Feedback Während Lochs Design das Feedback bereits reduzierte, blieben bei frühen Modellen dennoch spürbare Signale:
- kleines Einfallen des Hebels in das richtige Gate
- verändertes Drehgefühl beim Erreichen der korrekten Position
- minimales „Hängenbleiben“ beim Übergang über den Gate-Schlitz
Für ungeübte Personen war das kaum wahrnehmbar, aber professionelle Manipulatoren konnten diese Rückmeldungen nutzen, um die Kombination einzukreisen.
• Abnutzung im Betrieb Durch häufige Nutzung veränderte sich das mechanische Verhalten:
- abgeschliffene Gate-Kanten
- eingelaufene Kontaktflächen
- weicher werdende Scheibenfederung
- zunehmendes Achsspiel
Diese Abnutzung machte das Schloss mechanisch deutlicher lesbar und senkte die Manipulationsfestigkeit über die Jahre hinweg.

Risiko/Sicherheit
Höchstes Risiko: Zerstörende Angriffe: Öffnen des Tresors durch massive Gewalt (Hammer, Meißel, Vorschlagwerkzeuge) Einsatz von Winkelschleifer, Brennschneider oder Trenntechnik Angriffe auf Rahmen oder Wandung statt auf das Schloss
Mittleres Risiko: Gezielte teilzerstörende Angriffe: Bohren bis zum Scheibenstapel (historisch möglich, wenn keine Hartmetallplatten vorhanden waren) Fräsen der Schlossfront Heraushebeln oder Ausfräsen bei alten Tresorbauarten
Geringes Risiko: Feinmanipulation: Abhören des Gate-Einrastverhaltens Detektieren von Rastpunkten oder Reibungsmustern Decodieren durch Toleranzen oder Abnutzungsanalyse

Erkenntnisse
Joseph Lochs Zahlenschloss war ein wichtiger Schritt in der Entwicklung von manipulationsgeschützten Tresormechanismen. Es reduzierte mechanisches Feedback, verbesserte die Fertigungstoleranzen und erhöhte die Robustheit des Kombinationsmechanismus. Seine Schwächen lagen weniger im Konzept als im Material und der damaligen Fertigungspräzision. Heute bildet Lochs Grundidee einen festen Bestandteil vieler hochwertiger Tresorsysteme weltweit.

Walter Reinhold Schlage (1909)

Name: Door lock with two buttons for light control
Inventor: Walter Reinhold Schlage – later founder of the globally known brand Schlage – developed in 1909 an unusual and technically innovative door lock with integrated electric light control. The design combined:
- a classic door lock mechanism
- two push buttons on the inside
- an integrated electrical contact mechanism
- the ability to switch the light on and off when entering or leaving a room without needing a separate wall switch.
The idea was ahead of its time: Schlage combined mechanical security with the then-modern electrification of buildings. This lock is considered one of the earliest examples of electromechanical building technology, decades before “smart locks” became a topic.

Current locks of this type 
The exact system Schlage created in 1909 is no longer produced, but its principle lives on in modern form: Current representatives can be found, among others, in: electromechanical door locks, hotel card locks, push-button mortise locks, access solutions with integrated control functions, smart home door locks with light and building control. Schlage as a brand (still a major player in the US market) later produced cylinder locks, lever sets, and electromechanical systems that directly evolved the core principle: a lock that does more than just lock.

Lockpicking
• Exploiting manufacturing tolerances Even Schlage’s early electromechanical locks had natural production variances:
- slightly different switching travel of the contacts
- varying spring force in the push buttons
- minimal variations in the mechanical couplings between latch/bolt and switching mechanism. These tolerances could help cause malfunctions on the electrical side, but not bypass the lock mechanism itself.
• Mechanical feedback The mechanical bolt section was relatively simple and provided:
- noticeable detents when opening
- slight binding or give in the bolt mechanism
- audible noises from the contact switching
For attackers, however, these signals offered no real manipulation advantage, as the core lock mechanism was comparatively simple and robust.
• Wear in operation Over time, typical aging effects appeared:
- worn button springs
- reduced switching precision of the light contacts
- wear in the bolt mechanism
- contact corrosion due to early electrical materials.
This wear impaired the function of the light control, but not the mechanical security of the lock itself. Important: The security effect of a normal door lock was not weakened by the electrical add-on function.

Risk/Security
Highest risk: Destructive attacks: hammer, chisel, brute force against the hardware use of angle grinder / cutting tools attacks on the door frame / surrounding structure as bypass
Medium risk: Targeted partial destruction: drilling the lock case (historically quite easy), milling the bolt pocket or hardware, pulling out weakly mounted lock cases
Low risk: Fine manipulation: probing the bolt mechanism manipulation via small tolerances or wear slight torque changes when moving the bolt

Insights
Walter Reinhold Schlage was one of the first to combine traditional locking technology with electrical auxiliary functions. His door lock with light control was an early form of building system integration – a precursor of what we now call “smart home”. The lock itself provided the mechanical security of its time, while the electrical component increased convenience without creating a relevant security weakness. Schlage’s invention clearly shows how early electromechanics were integrated into everyday applications and how strongly this influenced later generations of locks.

John Junkunc (1910)

Name: Single-dial combination lock
Inventor: John Junkunc developed around 1910 a combination lock with only a single dial which, unlike earlier multi-part or multi-dial concepts, offered a much simpler operation. The core of his design: a central, rotating single dial, a stack of several internal combination wheels behind it, a precise coupling mechanism that controls the internal wheel stack via the single dial, a fence or lever that is only released when all gates are perfectly aligned. The advantage of the system: much simpler operation, faster entry of the combination, and a more compact mechanism without sacrificing the security logic of traditional combination locks. Junkunc’s approach later became especially popular for compact safes, cash boxes, and industrial security containers.

Current locks of this type 
Current representatives include:
- compact combination locks on small safes
- portable safes
- cash and security cases
- some consumer models (e.g., common fire safes)
- simplified safe locks with only one operating dial
Modern systems use:
- precision-machined wheels
- hardened axles
- manipulation-resistant gate geometry
- anti-drill and anti-mill plates
- friction-optimized coupling mechanisms
The single-dial operating logic introduced by Junkunc is today standard in many small mechanical combination locks.

Lockpicking
• Exploiting manufacturing tolerances Junkunc’s systems were also subject to the production limits of their time:
- slightly varying wheel spacing
- uneven axial tolerances
- differences in gate depth and width
- play in the coupling between dial and wheel stack
These tolerances could cause individual wheels to give clearer feedback than others – a factor professional manipulators could exploit.
• Mechanical feedback Like most wheel-based mechanisms, Junkunc’s lock showed:
- a noticeable drop of the fence when reaching the gate
- perceptible friction changes while dialing
- slight “catching” when passing a gate
- changing torque when the wheel pack was differently loaded
The single dial made the system more convenient, but mechanically it could also transmit manipulation signals.
• Wear in operation Over time, typical wear patterns appeared:
- worn gate surfaces
- weakening springs on the fence
- increased axial play of the wheels
- worn contact points between dial and coupling mechanism
This wear made the lock more acoustically and mechanically readable, reducing the manipulation resistance of older models.

Risk/Security
Highest risk: Destructive attacks: forcing open the safe door or deforming the housing angle grinders, cutting torches, heavy striking tools bypass via door frame instead of attacking the lock itself
Medium risk: Targeted partial destruction: drilling to the wheel stack (possible on historical models), milling the faceplate or opening the lock housing, pulling out poorly mounted lock plates.
Low risk: Fine manipulation: listening for the gate drop, feeling friction changes via the dial, decoding through wear or tolerances.

Insights
With his single-dial combination lock, John Junkunc created a system that successfully combined user comfort and security. His mechanism made combination entry more intuitive and enabled more compact lock designs without weakening the underlying safe mechanics. Its weaknesses – as with most wheel locks – lie in tolerances and wear, not in the concept itself. His principle is still used today and forms the basis of many compact mechanical combination locks in both private and industrial applications.

Johann Schweiger (1912)

Name: Pass-through key lock
Inventor: Johann Schweiger patented the so-called pass-through key lock in 1912 — a system in which the key is inserted from one side through the entire lock and directly actuates the tumblers on both sides. What made Schweiger’s design special: the key passes completely through the lock, it acts simultaneously on tumblers or sliders on both sides, the entire locking action is triggered by a linear push movement rather than rotation, the mechanism allows very compact lock bodies with reduced complexity. This system was intended mainly for interior doors, furniture, and light protection applications rather than high-security environments. Its strength lay in easy operation and quick, cost-efficient production.

Current locks of this type 
Modern representatives can be found in:
- furniture and cabinet locks
- simple box locks
- interior doors in nostalgic or retro designs
- simple metal cabinets and lockers
- toolboxes and light suitcase locks
Modern pass-through systems are technically refined but fundamentally still:
- straightforward
- inexpensive to manufacture
- designed for everyday doors or furniture
- not intended for high manipulation resistance
The basic idea of the pass-through mechanism is still in use today – but not in the high-security sector.

Lockpicking
• Exploiting manufacturing tolerances Early pass-through lock models had typical deviations:
- different height positions of the tumblers
- play in the guide paths of the pass-through mechanism
- small variations in slider or tumbler positioning
- uneven spring force
These tolerances could cause individual tumblers to react earlier or more distinctly, creating mechanical readability.
• Mechanical feedback Despite its simple construction, there was noticeable feedback:
- slight binding of sliders before reaching the end position
- a perceptible drop of the tumblers when the correct position was reached
- differing friction points while pushing the key through
A skilled manipulator could use these signals to test the mechanism step by step.
• Wear in operation Regular use led to typical signs of wear:
- worn guide paths
- rounded slider edges
- weakening springs
- increased play in the pass-through channel
This aging made the mechanism much more audible and tangible, making manipulation approaches easier.

Risk/Security
Highest risk: Destructive attacks: brute force (hammer, chisel, breaking the lock case), prying or punching through thin hardware, attacking the door or frame instead of the lock itself.
Medium risk: Targeted partial destruction: drilling in the slider or tumbler area, milling the lock case, pulling out or prying off the lock with weak mounting.
Low risk: Fine manipulation: probing the sliders through the keyway, detecting detent points via tool movement, decoding through wear and tolerances.

Insights
Johann Schweiger’s pass-through key lock was a functional and production-friendly solution for everyday applications. It relied on linear operation instead of rotation and offered a simple design that spread quickly — but without serious security ambitions. Its weaknesses naturally lie in manufacturing tolerances, mechanical feedback, and wear. Today, the system is still used, but mainly in furniture and interior applications, not in high-security contexts.

Samuel Segal (1912)

Name: Jimmy-proof lock
Inventor: Samuel Segal – himself a New York police officer – invented the jimmy-proof lock in 1912, a new type of door lock developed specifically against the standard break-in method of the time: “jimmying”, i.e., prying the door open with crowbars or wedges. His system was based on: two vertically moving locking bolts, a swinging or rotating mechanism that blocks both bolts simultaneously, a strong surface-mounted interior installation that functions independently of the door frame, a design that prevents the door and frame from being pried apart. The jimmy-proof lock was one of the first systems specifically engineered against prying attacks and thus created an entirely new category of door security.

Current locks of this type 
This lock is still used millions of times today. Modern jimmy-proof locks are still common, particularly in the USA and Asia, typically on:
- rental apartments
- wooden doors in older buildings
- multi-family homes
- apartments and brownstones in big cities
The reason: They can be mounted on the interior without weakening the door structure itself. Current models feature: hardened bolts, improved swing bars, anti-drill plates, better mounting systems, modern cylinder interfaces (Euro or rim cylinders). This makes the jimmy-proof lock still a widespread and reliable retrofit solution for door security today.

Lockpicking
• Exploiting manufacturing tolerances Even early jimmy-proof models had certain tolerance issues:
- slightly different vertical positions of the double bolts
- play in the swing-bar mechanism
- inconsistent fit between bolts and strike box
- varying bolt travel distances
If these tolerances were too large, an attacker could in rare cases apply excessive pressure to the door leaf so that the bolt mechanism gave way slightly.
• Mechanical feedback Since the lock is mounted on the inside, manipulable feedback is very limited. Early models could still offer minor indications:
- slight play in the swing mechanism
- noticeable detents in the turning mechanism
- audible contact noises in thinner housings
However, this information is hardly sufficient for real fine manipulation, because the mechanism, unlike pin or wheel locks, does not work sequentially.
• Wear in operation With regular use, typical wear patterns developed:
- worn swing bars
- beveled bolt edges
- slight play in mounting screws
- increased play in the mechanism
This wear could make the lock somewhat more vulnerable to strong prying forces, but not to manipulation attempts.

Risk/Security
Highest risk: Destructive attacks: brute-force breaking of the door itself (not the lock), violent prying on door leaf or frame, use of crowbars, wedges, striking tools, attacks on weak door structures.
Medium risk: Targeted partial destruction: drilling the cylinder (not the lock body), removing or ripping off the faceplate with poor mounting, milling the cylinder interface.
Low risk: Fine manipulation: probing the installed cylinder (only if the cylinder itself is manipulable), decoding the cylinder via wear or tolerances, slight use of play in the swing mechanism.

Insights
Samuel Segal’s jimmy-proof lock was a milestone in practical door security. It directly addressed the most commonly exploited weakness of its time: prying. Instead of focusing on protecting the cylinder or mechanism, the system reinforced the door structure as a whole – a revolutionary concept at the time. Its weaknesses lie: - primarily in the door and frame materials - secondarily in the installed cylinder - hardly in the mechanism itself To this day, the jimmy-proof lock remains one of the most effective retrofit systems against prying attacks on standard doors.

Harry Soref (1924)

Name: Padlock
Inventor: Harry Soref founded the Master Lock Company in 1924 and developed a new type of particularly robust padlock that permanently changed the market. His key contribution was: a laminated lock body made of stacked and riveted steel plates, an extremely strong shackle made of hardened steel, a cost-effective yet resilient manufacturing process, a compact design that was more resistant to many common attacks of the time. Soref wanted to create a padlock that was both affordable and secure — and he succeeded. The laminated padlock became a worldwide standard in industry, transport, and private use.

Current locks of this type 
Soref’s basic concept is a global standard. Current representatives include:
- classic laminated padlocks for industrial and home use
- weather-resistant outdoor variants
- padlocks with pin tumbler or disc detainer mechanisms
- high-security shackles made of boron steel or hardened carbon steel
- combination lock versions based on the laminated body
Master Lock still produces modernized versions of Soref’s original design today. Numerous manufacturers around the world have adopted the principle. Soref’s concept is one of the most enduring designs in lock engineering history.

Lockpicking
• Exploiting manufacturing tolerances Early models sometimes had:
- lateral play in the shackle
- slightly inconsistent lamination quality
- uneven fit of the core mechanism
- tolerances in the pin chambers (for pin cylinder versions)
This could make the mechanism more mechanically readable, especially in aging locks.
• Mechanical feedback Depending on the model (bolt-based or pin cylinder), there was noticeable feedback:
- slight pin “setting” in cylinder variants
- perceptible shackle binding just before opening
- audible feedback from internal bolts
These signals could be used to analyze the mechanism, though mainly in locks with simple cylinders.
• Wear in operation Weather and use led to typical problems:
- rust in the laminations (especially in unplated steel versions)
- worn shackle guides
- pin wear in the cylinder
- corroded springs or bolts
This wear made some padlocks much easier to manipulate, and very old models sometimes even failed under “tapping” or shackle pressure.

Risk/Security
Highest risk: Destructive attacks: bolt cutters / cutting tools angle grinders / cutoff wheels hammer and chisel attacks levering and breaking the shackle
Medium risk: Targeted partial destruction: drilling the cylinder (if there is no anti-drill protection) milling the lock body at thin points pushing or pulling out the shackle where fit is poor prying when poorly mounted
Low risk: Fine manipulation: probing the pin cylinder (if present) decoding simple combination versions exploiting mechanical feedback in worn mechanisms

Insights
In 1924, Harry Soref revolutionized the padlock with a laminated steel body that was robust, inexpensive, and suitable for mass production. His concept remains one of the most widely used standards worldwide and is a prime example of how industrial manufacturability and security can be combined. Traditional weak points lie in the shackle and in simple cylinder designs, not in the robust laminated construction. Modern versions still rely on Soref’s basic idea and remain a fixed component of global security technology.

Sylvester Wöhrle (1924)

Name: Cylinder lock with Hahn profile
Inventor: Sylvester Wöhrle registered in 1924 a new cylinder lock system with a Hahn profile, an advanced mid-profile for its time designed to improve the security and flexibility of cylinder locks. The so-called “Hahn profile” was characterized by: a profile-guided keyway that could not easily be copied, additional lateral guiding contours, a more complex key geometry than common round or flat keys, a cylinder form that made manipulation with simple tools more difficult. Wöhrle wanted to create a system that still relied on classic pin tumblers but added extra mechanical barriers through a distinctive key profile. The Hahn profile was later imitated in various forms and influenced the development of modern profile cylinders.

Current locks of this type 
Modern successors exist in the form of:
- European profile cylinders with individual key profiles
- proprietary brand profiles for master key systems
- security profiles with lateral guides or asymmetric key edges
- historical reproduction, retro, or museum cylinders
Many of today’s profile cylinders follow Wöhrle’s basic idea: a complex key profile as passive manipulation protection. Technically, these systems were later enhanced with security pins, carbide barriers, and multi-function keyways.

Lockpicking
• Exploiting manufacturing tolerances As with many cylinders of the early 1920s, there were typical production variances:
- uneven pin chambers
- varying spring tension
- slight lateral and vertical play of the pins
- inconsistent profile shaping of the Hahn keyway
These tolerances meant that individual pins gave feedback earlier or more clearly, which encouraged manipulation, especially in older or poorly maintained cylinders.
• Mechanical feedback The Hahn profile made it harder to insert tools, but the cylinder itself still provided:
- precise set points at each pin chamber
- slight plug rotation when a pin pair was correctly set
- audible and tactile friction differences in worn models
- noticeable torque changes when individual pins were addressed
Thus, like any pin tumbler system, it remained fundamentally manipulable even though the profile made access more difficult.
• Wear in operation Regular use led to typical wear:
- beveled key pin heads
- worn pin chambers
- aged springs with inconsistent force
- increased plug play due to wear
These changes made the mechanics more readable and manipulation easier, particularly in heavily used cylinders.

Risk/Security
Highest risk: Destructive attacks: breaking or drilling through the door structure angle grinders, striking tools, prying at the hardware attacks on frame or door leaf instead of the cylinder
Medium risk: Targeted partial destruction: drilling the pin chambers (historically easy without hardened inserts), milling or breaking out the cylinder, pulling the cylinder where hardware protection is poor.
Low risk: Fine manipulation: probing the cylinder via torque decoding via set points manipulation through wear or tolerances limited tool access due to the Hahn profile

Insights
Sylvester Wöhrle’s Hahn profile cylinder was an important step between simple round cylinders and modern profile cylinders. He created a system that added an extra barrier through the key profile itself, making manipulation more difficult without changing the core mechanism. As usual, the weaknesses lay in wear, tolerances, and lack of material protection against destructive attacks. As a concept, the Hahn profile is an early precursor of today’s security and brand profiles used in complex master key systems.

Fritz Schori (1934)

Name: Kaba 8 reversible key system
Inventor: Fritz Schori developed the revolutionary Kaba 8 reversible key system in 1934 — one of the first truly high-precision cylinder systems with a double-sided usable key that combined several security innovations. His concept was based on: eight radially arranged pins (instead of linear pin pairs as in Yale locks), a symmetrical reversible key that works regardless of insertion direction, a highly compact cylindrical mechanism with extremely tight tolerances, a key geometry that was much harder to duplicate than classic single-cut keys. Kaba 8 was thus one of the first high-security cylinder systems that could be manufactured reliably on an industrial scale. Schori created a system that for decades was regarded as a benchmark for manipulation-resistant locking technology.

Current locks of this type 
Modern successors include:
- Kaba 20, Kaba quattro, Kaba experT
- further generations with multi-row systems, magnetic code elements, or variable key depths.
Even today: many master key systems worldwide still use the basic Kaba 8 principle, hotels, authorities, and industrial clients rely on successor systems with the same core logic, reversible key cylinders are regarded as a high-security standard. Schori’s Kaba 8 is a direct precursor of almost all modern reversible key systems, and its fundamental principle is still in use.

Lockpicking
• Exploiting manufacturing tolerances Even the Kaba 8 system could show production spreads, though significantly smaller than in older systems:
- minimally different preset pin positions
- slight radial play in individual tunnels
- variations in spring tension
- differences in the rounding of key profile contours
In rare cases, these deviations could give tiny hints as to which pins were already near their correct position.
• Mechanical feedback Kaba 8 was known for providing very little usable feedback. Experienced manipulators could still detect certain signals:
- slight clicking when setting a radial pin
- barely noticeable torque changes
- fine friction points while turning
However, the feedback was clearly weaker than in linear pin tumbler systems, since all pins act radially and the plug is less prone to tilting.
• Wear in operation Over the years, typical wear patterns occurred:
- beveled pin tips
- slightly increased tunnel play
- worn key grooves
- aged springs
This wear made the system more mechanically readable, but still far more resistant to manipulation than classic profile cylinders.

Risk/Security
Highest risk: Destructive attacks: brute force on hardware or cylinder angle grinders / cutting tools prying the door frame instead of attacking the cylinder
Medium risk: Targeted partial destruction: drilling the radial pin chambers (on models without carbide inserts), milling the cylinder, pulling or breaking it off where mounting is insufficiently protected.
Low risk: Fine manipulation: probing the radial pins exploiting minimal torque changes decoding via wear or rare production tolerances

Insights
Fritz Schori’s Kaba 8 system was a milestone in cylinder lock engineering. He combined an innovative reversible key profile with a radial pin layout that made manipulation attacks far more difficult while still allowing high manufacturing precision. Any weaknesses lay, if at all, in minimal tolerances, wear, and destructive methods, not in the principle itself. Kaba 8 became one of the most long-lived and influential high-security cylinder systems in the world and forms the basis for modern reversible key technologies.

Tor Sornes (1976)

Designation: Punch-card lock
Inventor: Tor Sornes invented the first electromechanical punch-card lock in 1976, laying the foundation for modern hotel locking technology. The idea was radically new: instead of a physical key coding the lock, a punch card activated electrical or mechanical contacts when inserted, thereby releasing the door. The system was based on:
- A plastic or paper punch card with a defined perforation code.
- A reading mechanism that detected the perforations electrically or mechanically.
- An electromechanical locking mechanism that released the bolt.
- A rapidly replaceable coding principle, changing the card effectively recoded the lock.
For the hotel industry, this was revolutionary: Lost keys no longer posed a major risk, codes could be changed immediately, and guests did not have to carry metal keys. Sornes thus laid the foundation for today’s magnetic-stripe, chip and RFID hotel locks.

Current locks of this type 
Traditional punch-card locks based on Sornes’ design are now rarely manufactured, but their successor technologies are used worldwide:
- Magnetic-stripe hotel locks
- Chip cards / smart cards
- RFID cards
- Electronic access-control systems with interchangeable coded media
- NFC and smartphone-based systems Many manufacturers, including VingCard, which later became part of ASSA ABLOY, built directly on Sornes’ principle.

Lockpicking
• Exploiting manufacturing tolerances
Early punch-card readers exhibited typical production variations:
- Uneven sensor activation
- Variations in contact-spring tension
- Minor deviations in the position of the reading pins
- Slight displacement caused by mechanical wear
These tolerances could result in slightly bent or imprecisely punched cards still being recognised as valid, increasing the potential for misuse.
• Mechanical feedback Because the card guide was mechanical, a certain amount of feedback was present:
- A perceptible click when the card was inserted
- Slight movement in individual reading contacts
- Audible differences between worn contact pins
Trained individuals could theoretically use this information to determine the location of active reading contacts, making it easier to reproduce a functioning card.
• Wear during use Continuous use, particularly in hotels, caused typical signs of wear:
- Worn contact pins
- Reduced spring tension
- Corroded electrical contacts
- Worn card slots
This wear could lead to incorrect interpretation of the code, making the lock more susceptible to imprecise or manipulated cards.

Risk/security
Highest risk: Destructive attacks: Forcing the door or mortise-lock case Levering attacks against the door frame Mechanical force against the card reader
Medium risk: Targeted, partially destructive attacks: Drilling or forcing open the reader head Short-circuiting or manipulating the electromechanical mechanism Removing the card-slot cover
Low risk: Fine manipulation: Analysing the card through mechanical feedback, Reproducing a functioning punch card, Decoding caused by tolerances using test cards.

Findings
Tor Sornes revolutionised the access-control market with his punch-card lock in 1976. For the first time, access was governed not by a metal mechanism but by variably codable data carriers. The system was pioneering, even though, from today’s perspective, it was susceptible to wear, tolerances and electromechanical manipulation. Its greatest strength: Immediate recoding, a decisive advantage over conventional key systems. Sornes’ invention forms the historical foundation of modern hotel locking and access-control systems, making it a milestone in the development of locking technology.

Charles Walton (1983)

Designation: Electronic RFID lock
Inventor: Charles Walton is regarded as the inventor of the RFID principle for security-related applications. In 1983, he filed a patent that described the contactless identification of an authorised credential, such as a transponder or card, for access control. This marked the birth of the modern RFID lock. His system was based on: A passive or active RFID transponder, A reader that generated an electromagnetic field, a coded response signal transmitted only by the authorised transponder, and an electronic control unit that released the bolt following successful identification. Walton’s approach was revolutionary because it introduced contactless identification into security-related applications. This laid an important foundation for modern hotel doors, company locking systems, access-control systems and smart locks.

Current locks of this type 
RFID is now one of the world’s most important access-control technologies. Direct successors can be found in:
- Hotel card locks using MIFARE, LEGIC, HID and similar technologies
- Access systems for companies and public authorities
- Car parks and barriers
- Smart-home door locks
- Industrial and laboratory access systems
RFID has evolved through several technological generations:
- LF RFID at 125 kHz, used in early systems
- HF RFID at 13.56 MHz, including MIFARE and NFC
- UHF RFID for industrial access and longer reading ranges
- Latest-generation RFID keys with cryptographic protection
Walton’s principle is now found almost everywhere and forms the basis of most modern contactless access-control systems.

Lockpicking
• Exploiting manufacturing tolerances
Early RFID systems suffered from technical variations: Uneven antenna-coil sensitivity, Varying reading ranges, minor inaccuracies when evaluating weak transponder signals, Incorrect interpretation of interference signals caused by component tolerances. In rare cases, these deviations could result in unauthorised or imprecisely copied RFID tags being accepted, particularly by early systems with weak coding.
• Mechanical feedback
Mechanical feedback played only a minor role in RFID locks. The only perceptible signs were:
- Audible relays or magnetic latches
- Minimal vibration from the bolt motor
- Hardly any perceptible feedback from the reader itself
This provided attackers with no useful points for manipulation because the security-relevant logic was entirely electronic.
• Wear during use Wear mainly affected:
- Buttons or covers on the reader module
- Oxidised contacts in hybrid readers
- Ageing coils or weakening transponder elements
- The bolt mechanism in electromechanically coupled systems
 Electronic ageing could increase the likelihood of incorrect readings, but it could rarely be exploited deliberately.

Risk/security
Highest risk: Destructive attacks: Forcing the door frame or lock case Levering tools, chisels and angle grinders Attacking the door leaf or fittings instead of the electronics
Medium risk: Targeted, partially destructive attacks: Drilling or tearing off the reader, Short-circuiting the electronics, Disconnecting cables, depending on the system, Bypassing the electric bolt by gaining direct access to the mechanism.
Low risk: Fine manipulation / electronic attacks: Copying simple RFID tags, with early 125 kHz systems being particularly vulnerable, Reading unencrypted transponders, Replay attacks against very old models, Interference signals intended to cause incorrect interpretation.

Findings
In 1983, Charles Walton created the foundation for an entirely new security concept: contactless identification instead of mechanical keys. His RFID lock fundamentally changed access control and made flexible authorisation systems possible, with permissions that could be changed quickly. The weaknesses of early models were primarily:
- Unencrypted RFID transponders
- Electromechanical components that could be attacked relatively easily
- Destructive attacks against the surrounding door structure
Walton’s RFID lock is now regarded as one of the most important predecessors of modern digital access-control systems with cryptographic protection, and as a milestone in security technology.

Paul E. Szabo (1985)

Designation: Kaba Nova
Inventor: Paul E. Szabo developed the Kaba Nova system in 1985, one of the most advanced developments of the multi-row reversible-key principle. While earlier Kaba systems, including Kaba 8 and Kaba 20, were based on radial pin arrangements, Nova introduced complex multi-channel and multi-row coding, combined with increased protection against unauthorised key duplication and extremely precise manufacturing. The main characteristics of the Kaba Nova system included: Several rows of radial pins coded simultaneously, a highly complex reversible-key profile with an asymmetrical, deeply guided design, additional profile barriers that severely restricted the insertion of foreign tools, a cylinder plug with minimal movement and high precision, and optional mechanical security elements designed to resist picking and unauthorised key duplication. Szabo combined mechanical security, key-copy protection and master-key-system compatibility in a form that had not previously been achieved. Kaba Nova became one of the most robust locking systems of the late 1980s and early 1990s.

Current locks of this type 
The original Kaba Nova series is no longer manufactured in this form. However: The technology continues in several successor systems, including:
- Kaba quattro
- Kaba quattro plus
- Kaba experT / experT plus
- Kaba pextra / pextra+
- Modern dormakaba high-security cylinders
All these systems are based on Szabo’s design philosophy: Radially operating pin rows, the reversible-key principle, Complex profile barriers, High manufacturing precision, Certifiable master-key technology. Nova can therefore be regarded as a direct predecessor of many current high-security key profiles.

Lockpicking
• Exploiting manufacturing tolerances
The Nova system also has natural tolerances, although these are considerably smaller:
- Minimal differences in the positions of individual pin chambers
- Slight radial or axial play
- Variations in spring force in heavily used cylinders
- Differences in the microgeometry of the key
In rare cases, these minute manufacturing variations could provide minimal feedback, although only to highly experienced specialists.
• Mechanical feedback Nova was specifically designed to provide as little feedback as possible. Nevertheless, a small amount of theoretically usable residual feedback exists:
- Barely perceptible setting points in the radial pins
- Minimal differences in torque as the correct height is approached
- Slight variations in friction in worn cylinders
Compared with conventional pin-tumbler systems, the feedback is extremely subdued.
• Wear during use Use causes typical signs of wear:
- Worn pin tips, slight but perceptible
- Increased plug movement after many years
- Slightly worn key grooves
- Fatigued springs in the multi-row arrangement
Depending on the age of the cylinder, these factors increase its mechanical readability, although the security level remains considerably higher than that of many conventional systems.

Risk/security
Highest risk: Destructive attacks: Breaking, drilling or milling out the cylinder Angle grinders and impact tools Bypass attacks against the door or frame rather than the cylinder
Medium risk: Targeted, partially destructive attacks: Drilling individual pin chambers, historically possible in versions without carbide inserts, Pulling the cylinder where no security fitting is installed, Milling the front plate, Forcing open the keyway.
Low risk: Fine manipulation: Setting individual radial pins using minimal torsional pressure, Decoding through rare manufacturing or wear-related tolerances, Manipulation requiring extremely sophisticated tools and considerable expertise.

Findings
Paul E. Szabo’s Kaba Nova was a milestone in the development of modern high-security cylinders. It combined radial multi-row systems, an asymmetrical key profile and extreme precision in a way that made manipulation considerably more difficult. As with all high-quality cylinders, its weaknesses lay less in the mechanism itself and more in:
- Destructive attacks
- Missing security fittings
- Age-related wear
Nova became the foundation for many later dormakaba systems and remains an important technical development in the history of modern reversible-key technology.

Klaus Abend, Dieter Wienert, Johannes Filthaut (1987)

Designation: Electronic Winkhaus lock
Inventors: In 1987, Abend, Wienert and Filthaut presented a complete electronic locking system for Winkhaus. It was one of the early solutions to combine electronic identification, access control and mechanical locking in a coherent system. The system was based on: An electronically coded key using early transponder or chip technology, An electronic reader inside the cylinder, An electronic control unit that verified whether the key was authorised, and a mechanical locking mechanism that was released only after successful identification. This resulted in one of Europe’s first true mechatronic cylinders. Winkhaus was among the pioneers exploring the combination of mechanical locking technology and electronic access control, long before smart locks became a mass-market product. The system was particularly suitable for:
- Master-key systems with changing access permissions
- Companies and public authorities
- Large residential complexes
- Areas requiring protection against lost keys, where a missing key could be blocked immediately

Current locks of this type 
The 1987 Winkhaus system is regarded as a direct predecessor of modern mechatronic cylinders. Successor systems are now used worldwide:
- Winkhaus blueChip
- Winkhaus X-tra systems
- Modern transponder and chip cylinders
- Hybrid mechanical and electronic master-key systems
- Time-controlled access profiles in companies and public authorities
The basic principle of mechanical locking combined with electronic authorisation is now standard in modern access control. The electronic Winkhaus lock was one of the most important European steps towards intelligent door systems.

Lockpicking
• Exploiting manufacturing tolerances
As with early electronic systems, certain production variations were present: Differences in the sensitivity of contact points or reader coils, Minimal variations in the key insertion path, Slight differences in the positioning of electronic components, Different response times in the control electronics. These tolerances occasionally caused reading errors, but could only rarely be used as a basis for manipulation.
• Mechanical feedback Because the security-relevant verification process was electronic, the lock itself provided: Almost no usable mechanical feedback, Only an audible click from the release motor or solenoid, Minimal changes in torque during release. There were therefore few points of attack for conventional mechanical manipulation. Only the subsequent mechanical locking element could be manipulated at all, and then only following successful electronic identification.
• Wear during use Wear primarily affected: Electrical contacts, Insertion channels inside the cylinder, Key surfaces in hybrid key types, Motor or magnetic locking components under intensive use. Wear could cause malfunctions, but could only rarely be exploited deliberately.

Risk/security
Highest risk: Destructive attacks: Forcing the security fitting or door frame, Angle grinders, breaking tools and chisels, Attacking the door material instead of the lock.
Medium risk: Targeted, partially destructive attacks: Drilling or breaking out the electronic module, Manipulating the release motor through direct physical access, Milling the cylinder where insufficient mechanical protection is present.
Low risk: Fine manipulation / electronic attacks: Signal analysis, possible in early unencrypted systems, Replay attacks, relevant only to very early prototypes, Exploiting communication errors or interference signals.

Findings
The electronic Winkhaus lock of 1987 was an important milestone in access technology. By combining electronic identification with mechanical locking, Abend, Wienert and Filthaut created one of Europe’s first mechatronic cylinder systems. Its strengths included:
- Flexible allocation of access permissions
- Effective protection against lost keys
- Minimal feedback that could be used for manipulation
Its weaknesses were primarily:
- Destructive attacks
- Early electronic modules without sufficient physical protection
- Age-related electronic malfunctions
The system laid the foundation for many modern access solutions and remains one of the important innovations in 1980s locking technology.

Volker Ziegler (1988)

Designation: CES alpha electronic locking system
Inventor: Volker Ziegler developed CES alpha for CES in 1988, one of the first complete electronic locking systems in cylinder form. It was among the earliest systems to combine electronic identification and mechanical locking within the compact dimensions of a profile cylinder, making it a genuine innovation of the 1980s. The system was based on: An electronically coded key using early chip or transponder technology, An electronic reader module located directly inside the cylinder, An intelligent control unit that checked the authorisation, a mechanical locking core that was released only after successful identification, The ability to block lost keys through software without replacing the cylinder. CES alpha was therefore one of the first digitally managed master-key systems, long before electronic access control became standard in buildings.

Current locks of this type 
CES alpha is no longer manufactured in its original form, but the principle continues in modern CES systems. Current successors include:
- CES OMEGA FLEX
- CES OMEGA ACTIVE
- CES eCLIQ / electronic CLIQ systems, developed in cooperation
- Mechatronic and fully electronic cylinders with online and offline management
The central elements, an electronic key, electronic authentication and mechanical locking, can be traced directly to the 1988 alpha concept. CES alpha is now regarded as a predecessor of modern mechatronic and electronic locking technology in Europe.

Lockpicking
• Exploiting manufacturing tolerances
As with early electronic cylinders, certain production variations were present: Variations in the sensitivity of the reading contacts, Different ranges of the identification field, Differences in the positioning of electronic components, Minor mechanical tolerances where the electronic and mechanical components interacted. These tolerances occasionally caused incorrect readings or recognition problems, but offered very little scope for useful manipulation.
• Mechanical feedback Because CES alpha primarily operated electronically, mechanical feedback was minimal: An audible click from the release element, A slight change in torque when the plug was released, No usable sequential feedback of the kind found in mechanical cylinders. There was very little that could be felt by someone attempting manipulation because the security-relevant logic was located entirely within the electronics. • Wear during use Wear affected both the electronic and mechanical components: Contact wear between the key and reader unit in hybrid-key systems, Ageing electronic components, Fatigue in the electromechanical release module, Wear in the mechanical core. Ageing components could cause malfunctions, but could rarely be exploited deliberately.

Risk/security
Highest risk: Destructive attacks: Breaking or drilling out the door fitting Angle grinders, chisels and crowbars Attacking the door or frame instead of the cylinder
Medium risk: Targeted, partially destructive attacks: Physically drilling the electronic or mechanical unit, Tearing off the front electronic modules, Milling the cylinder where no security fitting is installed, Directly manipulating the release mechanism by gaining access through force.
Low risk: Fine manipulation / electronic attacks: Reading old, unencrypted chips, primarily relevant to early prototypes, Replay attacks against weak authentication protocols, Disrupting the electronics through targeted manipulation of the electromagnetic field.

Findings
The electronic CES alpha system was a visionary step in locking technology in 1988. Volker Ziegler created one of Europe’s first electronic profile cylinders, combining identification, access management and mechanical locking in a format that remains standard today. Its strengths: Immediate blocking of lost keys, Flexible management of access permissions, High resistance to conventional picking methods. Its weaknesses: Electronic modules susceptible to physical destruction, Limited protection against brute force, Early chip technology without modern cryptography. CES alpha is one of the most important milestones on the path towards today’s high-end mechatronic cylinders.

Mijodrag Makivic (1992)

Designation: EVVA EMZY electronic motorised cylinder
Inventor: Mijodrag Makivic developed the EMZY for EVVA in 1992. It was one of the first fully motorised locking cylinders and did more than combine mechanical and electronic components, it actively powered the entire locking process. The EMZY was not simply an electronic version of a mechanical system, but an entirely new approach: An integrated electric motor that turned the cylinder plug independently, an electronic identification unit, such as a transponder, chip or higher-level access-control system, a set of sensors that monitored the key status, position and rotational state, Automatic locking and unlocking governed by the electronics, with optional event logging and connection to building-management systems. The EMZY is regarded as a milestone in mechatronics: It transferred responsibility for the locking process from the person to the system, an important step towards today’s automated access solutions.

Current locks of this type 
The EMZY itself and its successors remain in use. Modernised versions include: - Different generations of EVVA EMZY - Electronic motorised cylinders in master-key systems - Motor-controlled panic and access systems - Integrated solutions in modern building-management architectures Other manufacturers later adopted similar approaches, but EVVA remains one of the reference companies in this category.

Lockpicking
• Exploiting manufacturing tolerances Early EMZY models also exhibited tolerances in:
- Motor mounting
- Sensor positions
- Locking travel
- Transmission of force between the motor shaft and cylinder plug
In the worst case, these tolerances could cause incorrect interpretations, for example the system reporting that the door was closed when it remained slightly open. However, they offered little value for manipulation because the motor and electronics strictly governed the locking process.
• Mechanical feedback Because the EMZY was not operated like a conventional mechanical cylinder, almost all picking feedback was eliminated. Only minimal feedback could be perceived:
- A quiet motor sound
- A change in torque when the plug was moved automatically
These signals were irrelevant for manipulation. Without electronic authorisation, the cylinder remained mechanically rigid.
• Wear during use The EMZY exhibited typical electromechanical ageing:
- Motor wear
- Wear in the gear stages
- Ageing sensors or electronic contacts
- Wear in the mechanical coupling
As the system aged, malfunctions could occur, such as the motor becoming blocked or key states being recognised incorrectly. However, this had little relevance to deliberate manipulation.

Risk/security
Highest risk: Destructive attacks: Attacking the fitting or door frame, Breaking out the cylinder, Angle grinders, crowbars and impact tools, Drilling the mechanical locking mechanism.
Medium risk: Targeted, partially destructive attacks: Drilling the motor or electronic components, Milling the cylinder face, Removing the electronic module by force, Accessing the mechanical coupling after destroying the security fitting.
Low risk: Fine manipulation / electronic attacks: Picking and decoding attacks are largely irrelevant because the plug cannot move without authorisation. Electronic attacks, such as protocol analysis, were theoretically possible against early EMZY models, but extremely difficult. Interference signals could cause malfunctions, but rarely resulted in the lock opening.

Findings
With the EMZY in 1992, Mijodrag Makivic created one of the first fully motorised locking cylinders, a system that used the key solely for identification and left the actual locking process to the electronics. Its strengths: High resistance to manipulation, Flexible connection to access-control systems, Automated locking, Integrated mechatronics. Its weaknesses: Destructive attacks against the door or fitting, Physical attacks against the motor and cylinder body, Electronic ageing after many years of operation. The EMZY remains an important milestone in motorised access technology and has influenced almost all modern smart-lock architectures.

Günter Uhlmann (1996)

Designation: Electronic locking cylinder with transponder
Inventor: Günter Uhlmann developed an electronic locking cylinder with an integrated transponder reader in 1996. It combined mechanical and electronic locking technology in a compact format suitable for the mass market. While earlier systems often required external readers, motors or additional modules, Uhlmann integrated:
- A transponder reader directly into the cylinder head
- Electronics that checked and authorised the transponder
 - An electromechanical release unit that disengaged the plug only after successful identification
 - A conventional mechanical locking core, allowing the door to be operated normally with a key, but only after electronic authorisation.
This created a true mechatronic cylinder whose shape, dimensions and installation largely corresponded to those of a conventional profile cylinder. The transponder-based approach was particularly attractive for:
- Residential complexes
- Companies
- Master-key systems with dynamic access permissions
- Users who required electronic management without a complicated infrastructure

Current locks of this type 
The basic principle behind Uhlmann’s development is now widely used and forms the basis of many modern mechatronic systems. Successors and further developments include:
- CES OMEGA ACTIVE / ACTIVE 2
- EVVA AirKey and AirKey hybrid systems
- Winkhaus blueChip
- dormakaba mechatronic cylinders
- eCLIQ / electronic CLIQ systems
- Numerous modern transponder locking cylinders
The principle of electronic transponder authorisation combined with mechanical locking remains one of the dominant concepts in the electronic locking market.

Lockpicking
• Exploiting manufacturing tolerances
As with other early mechatronic cylinders, variations in tolerances were present: Differences in the range of the transponder sensor, Minimal deviations in the antenna position, Slight variations in the coupling between the electronics and mechanical core, Tolerances within the mechanical pin system, where one was used. These variations could occasionally cause incorrect readings, but rarely provided a genuine basis for manipulation.
• Mechanical feedback Without a valid transponder, the electronic release system provided: No rotational feedback, No setting points, No mechanical path of attack. Following successful release, the cylinder behaved like a conventional mechanical core, although manipulation would then no longer be relevant.
• Wear during use Combining electronic and mechanical technology meant that both areas were subject to wear: Ageing transponder contacts or antenna elements, Ageing electronic components, Mechanical wear inside the cylinder core, Wear in the coupling mechanism. The decisive point: Wear increased the likelihood of malfunctions, but not the opportunity for manipulation.

Risk/security
Highest risk: Destructive attacks: Forcing the security fitting or door frame, Angle grinders, crowbars and mechanical force, Pulling or breaking off the entire cylinder body.
Medium risk: Targeted, partially destructive attacks: Drilling the electronic modules, Milling the cylinder, Attacking the mechanical coupling after removing the cylinder head, Short-circuiting or physically destroying the release unit.
Low risk: Fine manipulation / electronic attacks: Copying transponders, possible with older unencrypted models, Replay attacks against simple protocols, Manipulating interference signals, for example through shielding, Fine mechanical manipulation is ineffective while the release remains locked.

Findings
Günter Uhlmann’s electronic transponder locking cylinder from 1996 was an important step towards modern mechatronic cylinders. For the first time, it brought together in a compact form:
- Electronic identification
- Mechanical locking
- Modular master-key-system compatibility
Its weaknesses lay less in the mechanical or electronic technology itself and more in: Destructive attacks against the door or fitting, Early unencrypted transponder technologies, And the ageing of electrical components. The basic principle continues in almost all modern access-control systems and forms the basis of many market-leading electronic cylinders.

Ludger Voss and Herbert Meyerle (1997)

Designation: SimonsVoss System 3060 electronic locking cylinder
Inventors: Ludger Voss and Herbert Meyerle developed the SimonsVoss System 3060 in 1997, one of the first fully digital, battery-powered locking systems in the form of a profile cylinder. The system was particularly innovative because the lock: Operated entirely without cables, Integrated the battery power supply into the cylinder knob, Used an RFID credential or transponder as the identification medium, Released an electromechanical coupling after successful authorisation, Could be integrated into digital access-control systems. System 3060 was therefore one of the first locking systems that could be managed both offline and online without cables, a motorised cylinder or an external power supply. Its most important features: Digital management of access permissions Immediate blocking of lost keys Complete event logging, depending on the model A very compact format Modular expansion for large master-key systems The system was adopted very quickly as a standard solution in commercial and public-sector environments.

Current locks of this type 
SimonsVoss System 3060 remains one of the world’s most successful digital locking systems. Current or modernised successors include:
- SimonsVoss 3060 in various generations
- SimonsVoss AX system
- Digital SmartHandles
- Integrated online and wireless gateways
- “LDB / WaveNet / SmartIntego” access software
The operating principle, a wireless, battery-powered electronic cylinder, is now an established global standard based on the 3060 architecture.

Lockpicking
• Exploiting manufacturing tolerances
System 3060 also exhibits normal production variations: Slight variations in the range of the RFID antenna, Tolerances in the position of the coupling mechanism, Differences in the spring and magnetic mechanisms inside the knob, Variations in the recognition sensitivity of older transponders. These tolerances primarily result in recognition errors, for example when a key is not recognised, rather than security-relevant openings.
• Mechanical feedback Because the cylinder remains mechanically blocked without electronic authorisation, almost no picking feedback is present: No setting points, No plug movement, No opening signal generated by torsional pressure. The mechanism operates only after electronic authorisation, making conventional manipulation largely irrelevant.
• Wear during use Wear primarily affects: Battery contacts and electronics, The electromagnetic coupling, The knob-control mechanism, The transponder system in older versions. Wear increases the likelihood of malfunctions rather than creating additional opportunities for manipulation.

Risk/security
Highest risk: Destructive attacks: Forcing the security fitting or door frame, Mechanical force against the knob, Angle grinders, chisels and impact tools, Breaking out or completely pulling the cylinder.
Medium risk: Targeted, partially destructive attacks: Drilling or destroying the electronics inside the knob, Milling the cylinder where no security fitting is installed, Physically accessing the coupling unit after destroying the fitting, Interrupting the power supply by damaging the knob.
Low risk: Fine manipulation / electronic attacks: Copying old generations of unencrypted transponders, theoretically possible but rarely practical, Replay attacks against very early models, Interference signals intended to affect the reader, usually without success, Conventional picking methods are largely irrelevant.

Findings
SimonsVoss System 3060 was one of the most important developments in modern access control in 1997. Voss and Meyerle created a locking system that was:
- Completely wireless
- Battery-powered
- Digitally manageable
- Highly resistant to manipulation
- Mechanically more reliable than many earlier systems
Its weaknesses lie not in the technology itself, but in:
- Destructive attacks
- Insufficient protection of the door or fitting
- Ageing electronic components
System 3060 remains a milestone and forms the technical basis of both modern digital cylinder systems and smart-building architectures around the world.

Kwikset Titan (1998)

Designation: Remote keyless entry system for residential buildings
Manufacturer: Kwikset

In 1998, Kwikset introduced a remote-controlled deadbolt and matching handleset under its Titan product line. In its company history, Kwikset describes this development as a “remote keyless entry deadbolt and handleset”. This made Kwikset one of the early manufacturers to offer keyless, electronically operated access technology specifically for residential buildings.

Kwikset’s publicly available company history does not name an individual inventor. Alberto Loreti must not be identified as the inventor of this system. The previously cited US Patent 6,119,495 describes a mechanically programmable locking cylinder with a master-key function and is unrelated to the remote-entry system introduced by Kwikset in 1998.

The system combined electronic or wireless operation with a mechanical door lock. According to Kwikset, the company expanded the Titan product family in 2000 to include a wireless keypad and a remotely operated lighting unit.

Current systems from this manufacturer 
Kwikset subsequently developed several keyless and connected product lines from its early electronic products:
- Powerbolt
- SmartCode
- Kevo
- Halo
- Home Connect

Classification
The 1998 Titan system was an early step towards electronically operated residential door locks. The development is documented in Kwikset’s company history. However, this source does not identify the individual within the company who was responsible for the invention.

Findings
Kwikset demonstrably introduced a remote keyless entry system in 1998. The previous association with Alberto Loreti and US Patent 6,119,495 is factually incorrect and should be removed entirely.

Winkhaus blueChip (from 1998)

Designation: blueChip electronic locking system
Manufacturer: Aug. Winkhaus GmbH & Co. KG

Winkhaus introduced blueChip in the late 1990s. On its current product pages, the company names 1998 as the beginning of blueChip technology. The historical Winkhaus product overview, however, lists its market introduction under 1999. In view of these differing statements, the wording “from 1998” is more accurate than specifying a single definitive year.

blueChip combined contactlessly readable electronic keys with compact electronic cylinders. Authorisation was checked inside the cylinder. The electromechanical coupling was released and the locking process enabled only after an authorised key had been recognised.

The system operated without permanent wiring to each individual door. Access permissions could be managed and lost keys blocked without mechanically replacing the entire master-key system. This made blueChip particularly suitable for companies, public authorities and larger building complexes with frequently changing access permissions.

Inventor
The publicly available Winkhaus sources do not currently provide enough evidence to identify a single individual as the inventor of blueChip. Ludger Henrichmann is named as the inventor in Patent DE 198 23 699 A1. However, this patent concerns a particular locking-cylinder key, described as a mixed-code carrier, rather than the blueChip system as a whole. It therefore does not provide sufficient evidence for identifying Henrichmann as the inventor of the entire blueChip system.

Current systems from this manufacturer
Winkhaus subsequently continued the principle of electronically managed access permissions in other systems:
- blueSmart
- blueCompact
- Electronic profile cylinders
- Electronic door fittings
- Connected access solutions

Classification
blueChip was among the early electronic locking systems that could be installed in existing doors using the dimensions of conventional profile cylinders. Its combination of a contactlessly readable key, electronic authorisation and an electromechanical coupling made the system particularly suitable for larger master-key installations.

Findings
The introduction of blueChip by Winkhaus in the late 1990s is documented. However, a specific individual should only be named as its inventor if an unequivocal product or patent source can be found. The previously cited Patent DE 198 23 699 A1 is not sufficient to support this attribution.