JP7363938B2 - Elevator control system and terminal equipment - Google Patents

Description

The present invention relates to an elevator control technology that allows a user to register a hall call from a terminal device owned by the user.

In elevator control technology, the destination floor is input for each user from the destination floor registration device installed at the landing, and the installation floor (departure floor) of the destination floor registration device and the input destination floor are combined into one hall call. There are items that are registered as (that is, items that are assigned to any one car) (see, for example, Patent Document 1). Regarding such control technology, in recent years, a technology has been proposed that allows a terminal device owned by a user (smartphone, PC, etc.) to function as a destination floor registration device, and allows registration of a hall call from the terminal device. . The present inventor has also proposed such a technique (see, for example, Patent Document 2). According to this technology, a user can register for a hall call before arriving at the hall.

Patent No. 5923802 JP2019-177988A

While the above-mentioned control techniques exist, the present inventor has further proposed a technique for improving the security of the elevator by restricting the users who can use the elevator. Specifically, the present inventor has developed a technology in which a voice input from a terminal device is authenticated (voice authentication), and only when the authentication is successful, a hall call input by the voice is registered. is proposed.

However, although this technology increases the security of elevators, a malicious person can pass authentication by recording the voice of a user who is permitted to use the elevator and playing back the voice. Security problems may occur.

Therefore, an object of the present invention is to realize high security in an elevator in which a hall call can be registered from a terminal device owned by a user.

The elevator control system according to the present invention is capable of registering a hall call by voice from a terminal device owned by a user, and includes a first authentication processing section, a second authentication processing section, an allocation processing section, Equipped with The first authentication processing unit authenticates the identification information of the terminal device transmitted from the terminal device. The second authentication processing section authenticates the voice transmitted from the same terminal device as the terminal device that transmitted the identification information that was the object of authentication by the first authentication processing section. If both the authentication in the first authentication processing unit and the authentication in the second authentication processing unit are successful, the allocation processing unit receives the hall call input in the voice that is the subject of authentication in the second authentication processing unit. is assigned to any one car.

If only the second authentication process is performed without the first authentication process, a malicious person could record the voice of a user who is permitted to use the elevator and play back the voice. Doing so may cause security problems such as passing authentication. Therefore, in the above control system, by performing two-step authentication including the first authentication process and the second authentication process, the input voice can be transmitted by the user who is authorized to input the hall call to the user himself/herself. It is now possible to accurately determine whether the input was made from a terminal device owned by the user.

The control system may control a plurality of elevators. Each elevator is equipped with an allocation processing unit, and among these, the allocation processing unit of the elevator specified by the elevator information input with the voice that is the subject of authentication in the second authentication processing unit The input hall call may be accepted. According to this configuration, the user can use his or her own terminal device to select the elevator he or she wants to use from among multiple elevators, and can also call the selected elevator by voice. become.

The terminal device of the present invention is a terminal device capable of communicating with the elevator control system described above, and includes a voice input section into which voice is input, a storage section in which identification information of the terminal device is stored. An information transmission processing section. When a voice is input from the voice input section, the information transmission processing section transmits the voice and identification information stored in the storage section to the control system.

The terminal device may further include an operation input unit into which an activation command for validating voice input from the voice input unit is inputted by a user's operation. Then, when the input of the voice from the voice input section is enabled by the input of the activation command from the operation input section, and the voice is input from the voice input section in this state, the information transmission processing section transmits information to the control system. You may also send to. According to this configuration, the user can enable the input only when inputting a voice call for a hall call, thereby preventing unnecessary voices unrelated to the hall call from being input. I can do it. As a result, it becomes possible to improve the accuracy of the second authentication process and extraction process executed by the security management server 2.

According to the present invention, high security is achieved in an elevator.

1 is a conceptual diagram showing the overall configuration of an elevator system to which a control system according to an embodiment is applied. It is a flowchart showing the process executed by the destination floor registration application. 7 is a flowchart showing security management processing. FIG. 2 is a conceptual diagram showing an example of information management data. It is a flowchart which showed call registration processing. It is a flowchart showing a modification (first modification) of the process executed by the destination floor registration application. It is a conceptual diagram which showed the whole structure of the elevator system to which the control system based on the 2nd modification was applied.

[1] Embodiment [1-1] Overall configuration of elevator system FIG. 1 is a conceptual diagram showing the overall configuration of an elevator system to which a control system according to an embodiment is applied. This elevator system includes a terminal device 1, a security management server 2, and an elevator installed in a building or the like. Further, the elevator includes a plurality of cars G, an elevator control device 3 provided for each car G, and a group management control device 4. In such an elevator system, in this embodiment, it is possible for a user to register a hall call by voice from a terminal device 1 (such as a smartphone or a PC) owned by the user. The elevator control system that makes this possible is mainly composed of a security management server 2 and a group management control device 4. That is, according to the control system of this embodiment, the terminal device 1 can function as a destination floor registration device for inputting the destination floor Fd. The respective configurations of the terminal device 1, security management server 2, and group management control device 4 will be specifically explained below. Although not particularly limited, FIG. 1 shows an example of an elevator having three cars G.

<Terminal device>
Application software (hereinafter referred to as "destination floor registration application") is installed in the terminal device 1 to make it function as a destination floor registration device. When the destination floor registration application is being executed, the terminal device 1, as a destination floor registration device, becomes capable of network communication with the security management server 2 and the group management control device 4, and is capable of receiving hall calls (departure calls). It becomes possible to input the floor Fc and destination floor Fd) by voice.

The terminal device 1 includes a communication section 11, an input section 12, a display section 13, a storage section 14, and a control section 15 (see FIG. 1). Here, the communication unit 11 is a part (such as a module for network communication) that is responsible for network communication with the outside. The input unit 12 includes a voice input unit 12A (microphone, etc.) into which voice is input, and an operation input unit 12B (touch panel, buttons, etc.) into which various commands are input by user operations (mainly manual input). That's the part. The display unit 13 is a part (such as a touch panel) that displays various information.

The storage unit 14 is a storage medium such as ROM or RAM. The destination floor registration application installed on the terminal device 1 is stored in the storage unit 14. The destination floor registration application is stored in a readable state in a portable storage medium (for example, a flash memory, etc.), and the application read from the storage medium and installed is stored in the storage unit 14. Alternatively, it may be saved in a downloadable manner on another server, and the one downloaded and installed from the server may be saved in the storage unit 14.

Furthermore, the storage unit 14 stores identification information Pd for identifying the terminal device 1. As an example, the identification information Pd is changeable, such as a user ID, and is registered using a registration function of a destination floor registration application installed in the terminal device 1. Then, the identification information Pd registered using the registration function of the destination floor registration application is registered in information management data Dp (see FIG. 4) in the security management server 2, which will be described later. Note that unique identification information (such as terminal ID, which cannot be changed) set in the terminal device 1 may be used as the identification information Pd.

The control section 15 is a processing device such as a CPU, and controls the operation of each section of the terminal device 1 . In this embodiment, the control unit 15 causes the terminal device 1 to function as a destination floor registration device by executing the destination floor registration application. The details of the process executed by the destination floor registration application will be described later.

<Security management server>
The security management server 2 is a server that manages elevator security, and includes a storage section 21 and a control section 22. The storage unit 21 is a memory such as ROM or RAM, and stores various information necessary for security management. In this embodiment, information management data Dp, which will be described later, is stored in the storage unit 21 as information necessary for security management. The control unit 22 is a processing device such as a CPU, and executes control processing (security management processing) for managing elevator security. In this embodiment, when the control unit 22 receives the audio data Ds and the identification information Pd from the terminal device 1, it manages the security of the elevator by authenticating them. Note that details of the security management process will be described later.

<Elevator control device>
The elevator control device 3 is provided one by one for each car G, and controls the operation of the corresponding car G. These elevator control devices 3 are centrally managed by a group management control device 4.

<Group management control device>
The group management control device 4 is a device that centrally manages (that is, group management) the plurality of elevator control devices 3, and includes a storage section 41 and a control section 42. The storage unit 41 is a memory such as ROM or RAM, and stores various information necessary for group management. The control unit 42 is a processing device such as a CPU, and executes control processing to enable group management. Specifically, each time the control unit 42 receives the departure floor Fc and the destination floor Fd from the security management server 2, it performs call registration using those information (call registration processing). Note that details of the call registration process will be described later.

[1-2] Control processing [1-2-1] Processing executed by the destination floor registration application FIG. 2 is a flowchart showing the processing executed by the destination floor registration application. The destination floor registration application is activated when an execution command is input from the operation input unit 12B by a user's operation.

After starting the destination floor registration application, the terminal device 1 first enables voice input from the voice input section 12A (validation of voice input. Step S10 in FIG. 2). This allows the user to input the hall call (departure floor Fc and destination floor Fd) by voice using the terminal device 1.

Thereafter, the terminal device 1 determines whether or not audio has been input from the audio input unit 12A (step S11 in FIG. 2). Here, this step S11 is repeatedly executed until it is determined in step S11 that "the input has been made (Yes)". If the terminal device 1 determines in step S11 that the voice has been input (Yes), the voice is transmitted by a terminal owned by the user who is permitted to input the hall call. In order to have the security management server 2 determine whether or not the input is from the device 1, digital data of the voice input from the voice input unit 12A (hereinafter referred to as "voice data Ds") is used as information necessary for the determination. ) and the identification information Pd stored in the storage unit 14 are transmitted to the security management server 2 (information transmission process; step S12 in FIG. 2). At this time, the terminal device 1 enables the security management server 2 to accurately perform extraction processing (extraction of the departure floor Fc and destination floor Fd from the voice; see step S23 in FIG. 3), which will be described later. , information regarding the language setting on the terminal device 1 may be transmitted to the security management server 2 together with the audio data Ds.

After executing step S12 (information transmission process), the security management server 2 transmits various information (including signals) indicating the results of the security management process. Therefore, after executing step S12, the terminal device 1 determines whether or not any information has been received from the security management server 2 (step S13A in FIG. 2). Here, in step S13A, if it is determined that the information has been received (Yes) in step S13A, or if a predetermined period of time has elapsed from the time when the information was transmitted in step S12 and a timeout has occurred, step S13B is executed. It is executed repeatedly until a decision is made. If the terminal device 1 determines in step S13A that the information has been received (Yes), it displays the screen according to the information received from the security management server 2 (display processing; step S14 in FIG. 2). .

More specifically, when an error signal Se (specifically, any of the error signals Se1 to Se3 described later) is transmitted from the security management server 2, the control unit 15 performs the following in response to the error signal Se. The content of the error (failed authentication for identification information Pd, failed authentication for voice data Ds, mismatch between destination floor Fd input by voice and alighting permission floor Fe) is displayed on the display unit 13. This allows the user to recognize that the hall call registration has failed.

Alternatively, if the hall call allocation information (car information Pg, departure floor Fc, destination floor Fd) is transmitted from the group management control device 4 via the security management server 2, the control unit 15 transmits the allocation information. The content of is displayed on the display unit 13. Thereby, the user can recognize the car G in which he or she should ride (the car G assigned to the hall call input by voice).

After executing step S14, the control unit 15 moves to step S15. Further, when the control unit 15 can determine in step S13B that "timeout has occurred (Yes)", the process proceeds to step S15.

In step S15, the control unit 15 determines whether or not the destination floor registration application should be terminated. If the control unit 15 determines in step S15 that it should be terminated (Yes) due to the destination floor registration application being closed by the user's operation, the control unit 15 terminates the destination floor registration application. let On the other hand, if the control unit 15 determines in step S15 that the process should not be terminated (No), the process returns to step S11 and executes the process from step S11 again.

In the terminal device 1 in which such processing is executed by the destination floor registration application, the information transmission processing and display processing described above are executed by the information transmission processing section 151 and the display processing section 152 configured in the control section 15. (See Figure 1). In this embodiment, these processing units are configured by software by causing the control unit 15 to execute a destination floor registration application. Note that the various processing units described above may be configured in hardware by constructing circuits within the terminal device 1.

[1-2-2] Security Management Processing FIG. 3 is a flowchart showing the security management processing. The security management process is started when the security management server 2 receives the audio data Ds and the identification information Pd from the terminal device 1 (see step S20 in FIG. 2).

When the security management process is started, the security management server 2 authenticates the identification information Pd of the terminal device 1 included in the information received from the terminal device 1 (hereinafter referred to as "received information Pr1"). (first authentication process, step S21 in FIG. 3). Furthermore, the security management server 2 receives voice data Ds included in the received information Pr1 (i.e., from the same terminal device 1 as the one that sent the identification information Pd that was the subject of authentication in the first authentication process). The transmitted audio data Ds) is authenticated (second authentication process, step S22 in FIG. 3). Specifically, the details are as follows.

First, information management data Dp is stored in the storage unit 21 of the security management server 2 as information necessary for security management. FIG. 4 is a conceptual diagram showing an example of the information management data Dp. As shown in FIG. 4, in the information management data Dp, for each identification information Pd of the terminal device 1, comparison audio data Dt and alighting permitted floor Fe are associated.

Here, the identification information Pd registered in the information management data Dp is that of the terminal device 1 that is permitted to function as a destination floor registration device. In this embodiment, the identification information Pd registered using the registration function of the destination floor registration application is used as the information management data Dp as the identification information Pd of the terminal device 1 permitted to function as a destination floor registration device. will be registered.

The comparison audio data Dt is used to determine whether the audio input from the audio input section 12A of the terminal device 1 (audio data Ds) is that of the user (owner) who owns the terminal device 1. This data is used as a reference for comparison with the input voice (sound data Ds). This comparative voice data Dt is the voice of the owner of the terminal device 1 registered in advance, and is registered using, for example, a registration function of a destination floor registration application. As an example, the comparison voice data Dt is registered by having a user read words and sentences displayed on the display unit 13 and recording the voice of the user at that time.

Further, the disembarkation permission floor Fe is a disembarkation floor permitted to the user (owner) who owns the terminal device 1, and is registered in advance by the owner of the terminal device 1 or the elevator manager. .

In the authentication process described above, the success or failure of authentication is determined using the information management data Dp as follows. In step S21 (first authentication process), the security management server 2 determines that among the identification information Pd registered in the information management data Dp, there is one that matches the identification information Pd included in the received information Pr1. The success or failure of authentication is determined by determining whether or not the authentication is successful. In other words, if it is determined that they match (Yes), it is determined that the authentication in the first authentication process was successful, and if it is determined that they do not match (No), the authentication in the first authentication process is determined to be successful. It is judged as a "failure".

As an example, a person who is not permitted to input a hall call by voice (that is, a person whose information such as identification information Pd is not registered in the information management data Dp) is permitted to input a hall call by voice. If you try to make a hall call from your own terminal device 1 using the voice of another person who is present, the identification information Pd of that terminal device 1 is not registered in the information management data Dp, so the first authentication process It will be determined that the authentication has "failed".

According to such a first authentication process, in determining the success or failure of authentication for the identification information Pd, it is determined that the terminal device 1 that has transmitted the identification information Pd is a device that is permitted to function as a destination floor registration device. It is possible to judge whether there is or not.

Further, in step S22 (second authentication process), the security management server 2 uses the audio data Ds included in the received information Pr1 as the first authentication among the comparison audio data Dt registered in the information management data Dp. The voice input from the voice input unit 12A of the terminal device 1 (voice data Ds) is determined to belong to the terminal device 1 by comparing it with that associated with the identification information Pd that was successfully authenticated in the process. Determine whether it belongs to the user (owner) (success or failure of authentication). In other words, if it is determined that the item belongs to the owner (Yes), it is determined that the authentication in the second authentication process was successful, and if it is determined that the item does not belong to the owner (No), then the second authentication process is determined to have been successful. It is determined that the authentication in the 2 authentication process "failed". Although not particularly limited, for example, voiceprint authentication technology can be used for such authentication using voice. Note that the comparison voice data Dt used in the second authentication process is not limited to that registered in the information management data Dp, and may be stored in a downloadable manner on another server, etc. , may be downloaded from the other server based on the identification information Pd that was successfully authenticated in the first authentication process.

As an example, even if voice is input from the terminal device 1 whose identification information Pd is registered in the information management data Dp, the voice may be from someone other than the user (owner) who owns the terminal device 1. If the other person's voice data Ds does not match the comparison voice data Dt, it will be determined that the authentication in the second authentication process has "failed".

According to such a second authentication process, by determining the success or failure of authentication for the voice data Ds, it is determined that the voice input from the voice input unit 12A of the terminal device 1 is permitted to input a voice hall call. It is possible to determine whether the item belongs to the user or not.

If only the second authentication process is performed without the first authentication process, a malicious person could record the voice of a user who is permitted to use the elevator and play back the voice. Doing so may cause security problems such as passing authentication. Therefore, in this embodiment, by performing two-step authentication using the first authentication process and the second authentication process, the input voice can be transmitted by the user who is permitted to input the hall call to the user himself/herself. This allows the security management server 2 to accurately determine whether the input is from the terminal device 1 or not. According to these authentication processes, although it is a two-step authentication, the user only needs to input the voice for the hall call, and is not forced to perform other operations for authentication. There is no. Therefore, security can be improved without reducing convenience for users.

Then, if the security management server 2 succeeds in both the authentication in the first authentication process (step S21) and the authentication in the second authentication process (step S22), the input voice is used as the hall call. Since it can be determined that the input was made from the user's own terminal device 1 by a user who is permitted to input, the hall call input by that voice can be registered (specifically, the group management control device 4), the departure floor Fc and destination floor Fd are extracted from the voice (extraction process; step S23 in FIG. 3).

Specifically, the security management server 2 extracts the departure floor Fc and the destination floor Fd input by voice from the voice data Ds by analyzing the voice data Ds that was the subject of authentication in the second authentication process. do.

Here, in the present embodiment, in the information management data Dp (see FIG. 4), a user who is permitted to input a hall call (that is, a terminal device specified by the identification information Pd registered in the information management data Dp) The destination floor Fd (alighting floor) of the user who owns the vehicle 1 is limited to the alighting-permitted floor Fe registered in the information management data Dp.

Therefore, the security management server 2 determines whether the destination floor Fd extracted from the voice by the extraction process is the alighting floor that is permitted for the user who inputted the voice. Determine whether or not it matches any of the disembarkation permitted floors Fe that are associated with the identification information Pd that was successfully authenticated in the first authentication process, out of the disembarkation permitted floors Fe registered in the information management data Dp. (determination process; step S24 in FIG. 3).

If it is determined in step S24 that they match (Yes), the security management server 2 uses the departure floor Fc and destination floor Fd extracted in step S23 (extraction process) and the first authentication process (step The identification information Pd that was successfully authenticated in S21) is transmitted to the group management control device 4 as information necessary for the call registration process (information transmission process, step S25 in FIG. 3).

After executing step S25 (information transmission process), the group management control device 4 transmits hall call allocation information (car information Pg, departure floor Fc, destination floor Fd) as a result of the call registration process described later. . Therefore, after executing step S25, the security management server 2 determines whether or not the hall call allocation information has been received from the group management control device 4 (step S26 in FIG. 3). Here, this step S26 is repeatedly executed until it is determined in step S26 that it has been received (Yes). If the security management server 2 determines that it has been received (Yes) in step S26, the security management server 2 uses the received allocation information as the identification information that was the object of authentication in the first authentication process (step S21). The information is transmitted to the terminal device 1 specified by Pd (information transmission process; step S27 in FIG. 3). That is, the security management server 2 relays the transmission of assignment information from the group management control device 4 to the terminal device 1.

On the other hand, if the security management server 2 determines that the authentication in the first authentication process (step S21) or the second authentication process (step S22) "failed", or in the determination process (step S24), (No), the error signal Se corresponding to each event (in this embodiment, three types of error signals Se1 to Se3) is sent to the various information (identification information Pd , audio data Ds) to the transmitting terminal device 1 (information transmission process; steps S28A to 28C in FIG. 3).

In the security management server 2 that executes such security management processing, the above-described first authentication processing, second authentication processing, extraction processing, judgment processing, and information transmission processing are the first authentication processing built in the control unit 22. 221, second authentication processing section 222, extraction processing section 223, judgment processing section 224, and information transmission processing section 225 (see FIG. 1). In this embodiment, these processing units are configured by software by causing a processing device such as a CPU included in the security management server 2 to execute a program. Such a program is stored in a readable state in a portable storage medium (for example, a flash memory, etc.), and even if the program is read from the storage medium and installed, it is stored in the storage unit 21. Alternatively, it may be saved in a downloadable manner on another server or the like, and the information downloaded and installed from the server may be saved in the storage unit 21. Note that the various processing units described above may be configured in hardware by constructing circuits within the security management server 2.

[1-2-3] Call Registration Processing FIG. 5 is a flowchart showing the call registration processing. The call registration process is started when the group management control device 4 receives information necessary for the process (departure floor Fc, destination floor Fd, identification information Pd) from the security management server 2 (see step S30 in FIG. 2). ).

When the call registration process is started, the group management control device 4 sets the departure floor Fc and destination floor Fd included in the information received from the security management server 2 (hereinafter referred to as "reception information Pr2") to 1. Assignment to any one car G as one hall call (assignment process, step S31 in FIG. 5).

Thereafter, the group management control device 4 identifies the assigned car G in order to notify the terminal device 1 of the current hall call assignment information (information regarding the hall call assignment) via the security management server 2. The car information Pg (numbers, symbols, etc.) and the corresponding hall call information (departure floor Fc, destination floor Fd) are transmitted to the security management server 2 as one piece of allocation information (information transmission process). Step S32 in FIG. 5). At this time, the allocation information is transmitted to the security management server 2 in a state in which it is associated with the identification information Pd obtained from the received information Pr2. As a result, when the security management server 2 receives the assignment information from the group management control device 4, the security management server 2 can determine which terminal device 1 the assignment information corresponds to and which hall call is inputted therein. This can be determined from the identification information Pd associated with the allocation information.

In the group management control device 4 that executes such call registration processing, the above-mentioned allocation processing and information transmission processing are executed by an allocation processing section 421 and an information transmission processing section 422 constructed within the control section 42 (see FIG. (see 1). In this embodiment, these processing units are configured by software by causing a processing device such as a CPU included in the group management control device 4 to execute a program. Such a program is stored in a readable state in a portable storage medium (for example, a flash memory, etc.), and even if the program read from the storage medium and installed is stored in the storage unit 41. Alternatively, it may be saved in a downloadable manner on another server or the like, and the information downloaded and installed from the server may be saved in the storage unit 41. Note that the various processing units described above may be configured in hardware by constructing circuits within the group management control device 4.

As described above, according to the elevator control system according to the present embodiment, it becomes possible to register a hall call by voice from the terminal device 1 owned by the user. As described above, the security management server 2 executes two-step authentication using the first authentication process and the second authentication process, so that the input voice is permitted to input the hall call. It is determined with high precision whether the information has been input by the user from the user's own terminal device 1 or not. Therefore, high security is achieved in an elevator in which hall calls can be registered from the terminal device 1.

[2] Modifications [2-1] First Modification FIG. 6 is a flowchart showing a modification (first modification) of the process executed by the destination floor registration application. As shown in FIG. 6, the activation of voice input from the voice input unit 12A (step S10) is not limited to the case where activation of the destination floor registration application serves as a trigger (see FIG. 2); The execution may be triggered by input from the operation input section 12B of a command for validating the voice input from the voice input section 12A (hereinafter referred to as "validation command").

Specifically, after starting the destination floor registration application, the terminal device 1 determines whether an activation command is input from the operation input unit 12B by the user's operation (step S10A in FIG. 6). Here, this step S10A is repeatedly executed until it is determined in step S10A that "the input has been made (Yes)". When the terminal device 1 determines that "the input has been made (Yes)" in step S10A, the terminal device 1 enables the voice input from the voice input unit 12A (step S10 in FIG. 6), and in this state, it performs step S11 Execute processing from.

According to this kind of processing, the user can enable the input only when inputting a voice call for the hall, so it is possible to avoid inputting unnecessary voices that are not related to the hall call. It can be prevented. As a result, it becomes possible to improve the accuracy of the second authentication process and extraction process executed by the security management server 2.

[2-2] Second Modification The configuration of the control system and control processing described above can also be applied to a case where a plurality of elevators (a plurality of different elevators installed in a plurality of buildings) are to be controlled.

FIG. 7 is a conceptual diagram showing the overall configuration of an elevator system to which a control system according to a second modification is applied. This elevator system includes a plurality of elevators (for example, a plurality of different elevators installed in a plurality of buildings), and each elevator has a plurality of cars G, an elevator control device 3, and a group management control. A device 4 is provided. In such an elevator system, in this modification, the user selects the elevator to use by voice from the terminal device 1 (smartphone, PC, etc.) owned by the user, and also issues a hall call for the selected elevator. It is possible to register. The elevator control system that makes this possible is mainly composed of a security management server 2 and a group management control device 4 provided in each elevator. Hereinafter, differences from the above-described embodiments in the control processing executed by the control system of this modified example will be specifically described.

In this modification, if the security management server 2 succeeds in both the first authentication process (step S21 in FIG. 3) and the second authentication process (step S22 in FIG. 3), the security management server 2 performs the extraction process. (Step S23 in FIG. 3) not only extracts the departure floor Fc and destination floor Fd from the input voice, but also extracts elevator information Pe (e.g., elevator identification number) for identifying the elevator selected by the user. and the number and name of the building where the elevator is installed).

If the security management server 2 can determine that they match (Yes) in step S24 of FIG. 3, in the information transmission process (step S25 of FIG. The departure floor Fc and destination floor Fd extracted in step S23 (extraction process) and the identification information Pd that was successfully authenticated in the first authentication process (step S21) are sent to the elevator group management control device 4 specified by Send.

After the security management server 2 executes step S25 (information transmission process), the information necessary for the call registration process (departure floor Fc, destination floor Fd, identification information Pd) of the plurality of group management control devices 4 is sent. The group management control device 4, which has received the information from the security management server 2, assigns the departure floor Fc and destination floor Fd included in the received information (received information Pr2) to any one car G as one hall call. (Allocation processing; see step S31 in FIG. 5). That is, among the plurality of group management control devices 4, the group management control device 4 of the elevator specified by the elevator information Pe input by the voice that was the subject of authentication in the second authentication process (step S22) is selected. , accepts the hall call input by the voice. Then, the group management control device 4 notifies the terminal device 1 of the current hall call assignment information (car information Pg, departure floor Fc, destination floor Fd) via the security management server 2 (information transmission process). Step S32 in FIG. 5, Step S27 in FIG. 3).

According to such control processing, a user selects the elevator he/she wishes to use from among a plurality of elevators (a plurality of different elevators installed in a plurality of buildings) by voice through the terminal device 1 that the user owns. Furthermore, it becomes possible to make a voice call for the hall of the selected elevator.

[2-3] Third modification In the security management process (see FIG. 3) executed by the security management server 2, the departure floor Fc and the destination floor Fd extracted in the extraction process (step S23 in FIG. 3) are Not limited to the case where it is directly sent to the management control device 4, various information targeted in the authentication process (identification information Pd targeted in the first authentication process, audio data targeted in the second authentication process) Ds) may be indirectly transmitted to the group management control device 4 via the terminal device 1 that has transmitted it.

In the call registration process (see FIG. 5) executed by the group management control device 4, the hall call assignment information (car information Pg, departure floor Fc, destination floor Fd) is sent to the terminal device 1 via the security management server 2. The information is not limited to being transmitted indirectly, and may be directly transmitted to the terminal device 1.

[2-4] Other Modifications The security management processing described above may be executed by the terminal device 1 or the group management control device 4 instead of the security management server 2. In this case, the security management server 2 becomes unnecessary.

The configuration of the control system and control processing described above is applicable not only to an elevator having a plurality of cars G, but also to an elevator having only one car G.

The above-described embodiments and modifications should be considered to be illustrative in all respects and not restrictive. The scope of the present invention is indicated by the claims rather than the above-described embodiments and modifications. Furthermore, the scope of the present invention is intended to include all changes within the meaning and range of equivalence of the claims.

Furthermore, from the above-described embodiments and modifications, the object of the invention is not limited to the elevator control system, but the devices, control processing, programs, etc. constituting the same may be extracted individually, or a part of them may be extracted. may be partially extracted.

1 Terminal device 2 Security management server 3 Elevator control device 4 Group management control device G Car 11 Communication section 12 Input section 12A Voice input section 12B Operation input section 13 Display section 14 Storage section 15 Control section 21 Storage section 22 Control section 41 Storage Section 42 Control section Dp Information management data Ds Audio data Dt Comparison audio data Fc Departure floor Fd Destination floor Fe Alighting permission floor Pd Identification information Pe Elevator information Pg Car information Se, Se1, Se2, Se3 Error signal 151 Information transmission processing section 152 Display Processing unit 221 First authentication processing unit 222 Second authentication processing unit 223 Extraction processing unit 224 Judgment processing unit 225 Information transmission processing unit 421 Allocation processing unit 422 Information transmission processing unit Pr1, Pr2 Received information

Claims (3)

When a plurality of elevators that can register hall calls by voice from a terminal device owned by a user are to be controlled, and the hall call is input by voice from the terminal device, the voice includes the relevant voice. In addition to the hall call, the control system further includes elevator information specifying any one of the plurality of elevators,
a first authentication processing unit that authenticates identification information of the terminal device transmitted from the terminal device;
a second authentication processing unit that performs authentication on the voice transmitted from the same terminal device as the terminal device that transmitted the identification information that was the target of authentication by the first authentication processing unit;
If the authentication at the first authentication processing section and the authentication at the second authentication processing section are both successful, the input voice is selected from the voice that was the subject of authentication at the second authentication processing section. an extraction processing unit that extracts the hall call and the elevator information;
an allocation processing section constructed in each of the plurality of elevators, of which the one in the elevator specified by the elevator information extracted from the voice by the extraction processing section is assigned by the extraction processing section; an allocation processing unit that allocates the hall call extracted from the voice to any one car of the elevator;
Elevator control system with. A terminal device capable of communicating with the elevator control system according to claim 1 ,
a voice input unit into which the hall call and the elevator information are input by voice;
a storage unit storing identification information of the terminal device;
an information transmission processing unit that transmits the voice and the identification information stored in the storage unit to the control system when the voice is input from the voice input unit;
A terminal device comprising: further comprising an operation input unit into which an activation command for validating the voice input from the voice input unit is inputted by a user's operation,
The information transmission processing unit is configured to enable input of the voice from the voice input unit by inputting the validation command from the operation input unit, and in that state, when the voice is input from the voice input unit. The terminal device according to claim 2 , wherein the terminal device transmits the information to the control system.

Images