WO2012015399A1

WO2012015399A1 - Elevator system with credential confirmation at a position of the elevator car

Info

Publication number: WO2012015399A1
Application number: PCT/US2010/043493
Authority: WO
Inventors: Baudelaire St. Louis
Original assignee: Otis Elevator Company
Priority date: 2010-07-28
Filing date: 2010-07-28
Publication date: 2012-02-02

Abstract

An exemplary method of controlling an elevator system includes determining that a desired destination of a passenger corresponds to a secured location. Security credential information is obtained from the passenger at a position of an elevator car that the passenger intends to ride to the desired destination. A determination is made at the position of the elevator car whether the obtained security credential information indicates that the passenger is authorized to access the secured location. The elevator car is permitted to take the passenger to the desired destination only if the passenger is authorized to access the secured location.

Description

ELEVATOR SYSTEM

WITH CREDENTIAL CONFIRMATION AT A POSITION OF THE ELEVATOR CAR

BACKGROUND

[0001] Elevator systems are useful for carrying individuals among various levels within a building, for example. Elevator systems provide a variety of different features to address particular needs in different situations. For example, it is known to provide security functions in association with an elevator system to limit who has access to specific locations served by an elevator. This provides security to particular locations within buildings that should not be accessible to the general public, for example.

[0002] One drawback associated with known techniques for providing such a security feature is that it requires a security system in addition to the normal elevator control system. The additional security system components introduce additional cost and installation expenses. This is particularly true when a central security controller has to be linked with various security system devices strategically located to provide the desired level of elevator system control. This introduces additional cost, which is undesirable.

[0003] Additionally, known security systems associated with elevators do not prevent an unauthorized individual from accompanying an authorized individual on an elevator car.

SUMMARY

[0004] An exemplary method of controlling an elevator system includes determining that a desired destination of a passenger corresponds to a secured location. Security credential information is obtained from the passenger at a position of an elevator car that the passenger intends to ride to the desired destination. A determination is made at the position of the elevator car whether the obtained security credential information indicates that the passenger is authorized to access the secured location. The elevator car is permitted to take the passenger to the desired destination only if the passenger is authorized to access the secured location. [0005] An exemplary security device for an elevator system includes a credential reader supported on an elevator car. The credential reader is configured to obtain security credential information from a passenger at a position of the elevator car when the passenger intends to ride to a desired destination that corresponds to a secured location. The credential reader itself makes a determination whether the obtained security credential information indicates that the passenger is authorized to access the secured location. The credential reader allows for the elevator car to take the passenger to the desired destination only if the passenger is authorized to access the secured location.

[0006] The various features and advantages of a disclosed example arrangement will become apparent to those skilled in the art from the following detailed description. The drawings that accompany the detailed description can be briefly described as follows.

BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Figure 1 schematically illustrates selected portions of an elevator system.

[0008] Figure 2 schematically illustrates an example arrangement of a security device supported on an elevator car.

[0009] Figure 3 schematically illustrates an example security device and credential holder useful in an embodiment of this invention.

[00010] Figure 4 is a flowchart diagram summarizing an example approach.

DETAILED DESCRIPTION

[00011] A disclosed example security device is supported on an elevator car. The security device autonomously determines whether to grant a passenger access to a secured floor depending on security credential information provided by the passenger to the security device. Making the decision whether the passenger is authorized to access the secured floor at the position of the car eliminates a need to communicate with a separate security system.

[00012] Figure 1 schematically shows selected portions of an elevator system 20. An elevator car 22 is situated for movement within a hoistway 24. The elevator car 22 is able to service a plurality of building levels by providing access at landings 30, 32 and 34, for example.

[00013] The illustrated example includes a destination entry device 40 that allows passengers to request elevator service. The destination entry device 40 allows a passenger to enter an indication of a desired destination to which the passenger desires to be carried by the elevator system 20. This information is provided outside of the elevator car 22.

[00014] The illustrated example also includes a hall call device 42 that allows a passenger to provide an indication of a desire for elevator service. If the hall call device 42 is utilized by a passenger, the passenger then provides an indication of the desired destination to which the passenger desires to be carried once the passenger has entered the elevator car 22.

[00015] An elevator control 44 controls whether the elevator car 22 is assigned to respond to a particular request for elevator service. The elevator control 44 is also involved in controlling whether the elevator car 22 provides the service corresponding to a particular call. Only a single elevator control 44 is illustrated for discussion purposes. Those skilled in the art will realize that different functions discussed in this description performed by the elevator control 44 can be performed by individual controllers being programmed for particular tasks associated with elevator system control.

[00016] In the illustrated example, at least the landings 30 and 32 correspond to secured locations to which access is only allowed to selected, authorized individuals. The example elevator system 20 controls whether the elevator car 22 will provide service to a passenger desiring to reach the landings 30 or 32 depending on whether that passenger provides valid security credential information indicating that the passenger is authorized to access the secured location.

[00017] As shown in Figure 2, a security device 50 is supported on the elevator car 22. The security device 50 in some examples is part of a car operating panel 52. In an example that also provides for destination entry, the security device 50 and the car operating panel 52 can be referred to as a secure destination entry computer control operating panel ("secure DEC-COP"). The DEC-COP can be used in a destination entry system or a regular elevator system. The security device 50 includes a reader that obtains security credential information from a credential holder 54 that can be carried by a passenger 56. In the illustrated example, the credential holder 54 communicates with the security device 50 using wireless communications.

[00018] Depending on a particular embodiment, the security device 50 may be able to obtain the credential information from a credential holder 54 in a variety of manners. One example includes providing a magnetic strip or bar code on the credential holder 54. The reader of the security device 50 in such an example will read the magnetic strip or bar code information. In another example, the credential holder 54 comprises a key fob. In another example, the credential holder 54 comprises a smart phone. Those skilled in the art who have the benefit of this description will realize how to configure security devices 50 and compatible credential holders 54 to meet the needs of their particular situation.

[00019] In this example, the passenger 56 provides security credential information to the security device 50 from the credential holder 54 when the passenger 56 is inside of the elevator car 22. The security device 50 provides control over whether the elevator car 22 will carry the passenger 56 to a desired destination corresponding to a secured location depending on whether the security credential information from the credential holder 54 is valid.

[00020] In this example, the security device 50 will only accept or respond to security credential information that is provided when elevator car doors 58 are closed. The illustrated arrangement allows for the passenger 56 to ensure that there are no unauthorized individuals on the elevator car 22 when requesting the elevator car 22 to carry the passenger 56 to the desired destination. The car doors 58 remain closed unless the passenger 56 requests that they be opened from inside the elevator car 22, the elevator car 22 has completed carrying the passenger 56 to the desired destination or the request to be carried to a secured location is denied.

[00021] In one example, no other call is assigned to a car that has been assigned to carry a passenger to a secured destination until that passenger has been served or the assignment has been cancelled because no valid security credential information was provided to allow that car to service that request. In one example, other assignments can be made to that car but the car will not be allowed to begin servicing them until one of the other conditions has been met. For example, it is possible to make an assignment to that elevator car but not allow the doors to be opened at the landing where a passenger desires to enter the car until one of the other conditions has been met.

[00022] Figure 3 schematically illustrates one example configuration of the security device 50 and the credential holder 54. In this example, the security device 50 includes a transceiver 60 and a processor 62. The transceiver 60 and the processor 62 cooperatively operate as a credential reader as the former obtains the credential information and the processor analyzes the information. An indictor 64 is also provided on the example security device 50.

[00023] The example credential holder 54 includes a transceiver 66 and memory

68 containing security credential information.

[00024] The transceivers 60 and 66 allow for two-way communication between the security device 50 and the credential holder 54. For example, the security device 50 may send a request signal to the credential holder 54 requesting that the credential holder 54 provide the security credential information to the security device 50. This allows for saving battery power on the credential holder 54 and allows for the credential holder 54 to be passive so that the passenger 56 need not activate any switches or take any other action for providing the security credential information (other than being in an appropriate location relative to the transceiver 60). The transceiver 60 in this example is also useful for communicating between the security device 50 and other equipment such as the elevator control 44, for example.

[00025] The processor 62 is configured to autonomously determine whether security credential information obtained from the credential holder 54 is valid for a particular service request. The processor 62 is programmed to make a determination whether the security credential information indicates that the passenger 56 is authorized to be taken to the desired destination. One feature of the illustrated example is that the processor 62 is located at the position of the elevator car 22. Having the security device 50 supported on the elevator car 22 and including programming within the processor 62 to allow it to autonomously make the determination whether presented security credential information is valid eliminates any need to utilize a central security system controller for making such determinations. The ability to make that determination at the position of the elevator car 22 eliminates cost associated with installing various security system devices within a building. Instead, the security device 50 may be supported on the elevator car 22 to provide the ability to control access to secured locations serviced by the elevator 22. Each elevator car 22 of the example system 20 will have its own security device 50 in one example. Only one is illustrated for discussion purposes but multiple elevator cars 22, each with its own security device 50, will be included in many systems 20 designed consistent with this description.

[00026] The programming provided to the processor 62 in one example allows for the processor 62 to autonomously make a determination when a desired designation corresponds to a secured location. If so, the processor 62 determines whether security credential information obtained from the credential holder 54 indicates that the passenger 56 can be carried to the desired destination. If the security credential information is valid, the security device 50 communicates with the elevator control 44 so that the elevator car 22 provides the desired service. If the security credential information is not valid, the security device 50 communicates with the elevator control 44 so that the assignment will be cancelled and the passenger 56 will not be permitted to travel to the desired destination.

[00027] In one example, the processor 62 has a preconfigured list of landings serviced by the elevator car 22. The processor 62 has enough information to determine which of the landings corresponds to a secured location. Whenever one of those landings corresponds to the desired destination, the security device 50 will provide an indication to the passenger 56 that security credential information is needed. Once proper information is provided, the desired service will be provided as described above.

[00028] The example of Figure 3 includes the indicator 64 associated with the security device 50 to provide an indication to the passenger 56 when a particular request has been denied. The indicator 64 may be visible or audible, for example.

[00029] Figure 4 includes a flowchart diagram 70 summarizing an example approach. A determination is made at 72 whether a desired destination of the passenger 56 corresponds to a secured location. An eligible elevator car 22 is assigned to carry the passenger 56 to the desired destination at 74. [00030] In an example that includes destination entry capabilities, the determination regarding the desired destination and the assignment of the elevator car typically will occur before the passenger 56 enters the elevator car 22.

[00031] If a request for service is made using the hall call device 42, the determination regarding the desired destination will not be made until the passenger has provided that information using the car operating panel 52, for example. In this case, the security device 50 or the control 44 will determine whether the desired destination is a secured location.

[00032] At 76, the car doors 58 are closed after the passenger 56 enters the elevator car 22. Security credential information is obtained at 78. As indicated above, the security credential information in this example is obtained when the passenger is at the position of the elevator car. In this particular example, the passenger 56 is inside of the elevator car 22 when the security credential information is provided from the credential holder 54 to the security device 50.

[00033] At 80, a determination is made whether the obtained security credential information is valid. As indicated above, this determination is made by the processor 62 of the security device 50 autonomously at the position of the elevator car 22. In some circumstances, a first attempt at providing the security credential information may fail. This may be because the security credential information on the credential holder 54 is not valid. It may also occur because of some error by the passenger 56 if some action is required by the passenger 56 for purposes of providing the security credential information. For example, a personal identification number (PIN) may be required in some circumstances and the passenger may have incorrectly entered that information.

[00034] The example of Figure 4 includes a determination at 82 whether a number of attempts at providing the security credential information has exceeded a predetermined threshold. For example, a passenger 56 may be given three attempts to provide valid security information before the request is denied if none of those attempts results in providing valid security credential information.

[00035] Another determination is made at 84 whether a timer has expired. For example, once the car doors 58 have closed, the security device 50 may initiate a timer giving the passenger 56 a preselected amount of time to provide valid security credential information. If that time elapses before valid security credential information is provided, then the request will be denied.

[00036] As shown at 86, the assignment is cancelled and the passenger is notified regarding the denial of service if the security credential information provided by the passenger 56 is invalid. On the other hand, as shown at 88, if the security credential information is valid, the security device 50 provides an indication to the elevator control 44 that the elevator car is ready to service the assigned call. The elevator car 22 carries the passenger 56 to the desired destination at 88. Once the elevator car 22 reaches the desired destination, the car doors are opened at 90 to allow the passenger 56 to exit the elevator car 22. If, on the other hand, the request was denied as shown at 86, the car doors are opened at 90 to allow the passenger 56 to exit the elevator car 22.

[00037] The illustrated example allows for controlling when an elevator car provides service to a secured location by making security determinations at the position of the elevator car. The disclosed example includes a reader supported on the elevator car to obtain security credential information from a passenger inside the car. The reader, itself determines whether the obtained information is valid indicating authorized access to a secured location. This eliminates any need to incorporate a separate security system with the elevator system. There is no need, for example, for a central security system controller to make determinations whether security credential information allows for a desired service request to be honored. The illustrated example allows for retrofitting existing elevator systems or can be incorporated in newly installed elevator systems much easier than an approach that would require an entirely separate security system with its own central controller and communication lines.

[00038] The preceding description is exemplary rather than limiting in nature. Variations and modifications to the disclosed examples may become apparent to those skilled in the art that do not necessarily depart from the essence of this invention. The scope of legal protection given to this invention can only be determined by studying the following claims.

Claims

I claim: 1. A method of controlling an elevator system, comprising the steps of:

determining that a desired destination of a passenger corresponds to a secured location;

obtaining security credential information from the passenger at a position of an elevator car that the passenger intends to ride to the desired destination;

determining, at the position of the elevator car, whether the obtained security credential information indicates that the passenger is authorized to access the secured location; and

permitting the elevator car to take the passenger to the desired destination only if the passenger is authorized.

2. The method of claim 1, comprising

receiving an indication of the desired destination outside of the elevator car.

3. The method of claim 1, comprising

receiving an indication of the desired destination inside of the elevator car.

4. The method of claim 1, comprising

providing a credential reader on the elevator car, the credential reader being programmed to determine whether the obtained security credential information indicates that the passenger is authorized to access the secured location.

5. The method of claim 4, wherein the credential reader is positioned to obtain the security credential information when the passenger is inside the elevator car.

6. The method of claim 1, comprising

preventing the elevator car from servicing any other assignments between a time when the elevator car is assigned to take the passenger to the desired destination

and

at least one of (i) the elevator car traveling to the desired destination or (ii) determining that the obtained security credential information is invalid.

7. The method of claim 1, comprising

determining that the passenger has entered the elevator car; and

closing a door of the elevator car prior to obtaining the security credential information.

8. The method of claim 1, comprising

determining that the obtained security credential information is invalid;

prompting the passenger to provide additional security credential information; determining whether the additional security credential information indicates that the passenger is authorized to access the secured location.

9. The method of claim 8, comprising

cancelling an assignment of the desired destination if the passenger does not provide valid security credential information within at least one of a predetermined time or a predetermined number of times of providing invalid security credential information.

10. The method of claim 9, comprising

providing an indication that the passenger is not authorized to travel to the desired destination.

11. A security device for use in controlling an elevator system, comprising:

a reader supported on an elevator car, the reader being configured to obtain security credential information from a passenger at a position of the elevator car, the reader including a processor that is configured to determine whether a desired destination of the passenger corresponds to a secured location and to autonomously determine whether the obtained security credential information indicates that the passenger is authorized to access the secured location, the processor providing an indication that the elevator car is permitted to take the passenger to the desired destination only if the passenger is authorized.

12. The security device of claim 11, wherein the reader and processor are associated with a car operating panel inside of the elevator car.

13. The security device of claim 11, comprising a transceiver for receiving a signal providing an indication of the security credential information.

14. The security device of claim 13, wherein the transceiver is configured to communicate with an elevator control to provide an indication of a determination made by the processor regarding whether a passenger is authorized to travel to the desired destination.

15. The security device of claim 11, wherein the reader is positioned to obtain the security credential information when the passenger is inside the elevator car.

16. The security device of claim 15, wherein the processor is configured to provide an indication to prevent the elevator car from servicing any other assignments between a time when the elevator car is assigned to take the passenger to the desired destination and at least one of (i) the elevator car travels to the desired destination or (ii) the processor determines that the obtained security credential information is invalid.

17. The security device of claim 11, wherein the elevator car includes at least one door and the reader is configured to only accept security credential information after the at least one door is closed.

18. The security device of claim 11, wherein the processor is configured to

determine that the obtained security credential information is invalid;

obtain additional security credential information;

determine whether the additional security credential information indicates that the passenger is authorized to access the desired destination.

19. The security device of claim 18, wherein the processor is configured to provide an indication for cancelling an assignment of the desired destination if the passenger does not provide valid security credential information within at least one of a predetermined time or a predetermined number of times of obtaining invalid security credential information.

20. The security device of claim 11, comprising

an indicator configured to provide at least one indication to the passenger for at least one of (i) prompting the passenger to provide security credential information or (ii) notifying the passenger that a service request has been denied.