Elevator safety system, portable terminal and safety system control method

Abstract

An elevator safety system, a portable terminal, and a control method for the safety system. The elevator safety system includes an elevator device and a safety management device. The elevator device includes a control panel. The safety management device includes a processing unit (122), a sending unit (121), and a sending unit (132). The processing unit (122) generates authentication information. When the sending unit (132) receives a request (R) for information from the portable terminal, it sends management floor information and first authentication information to the portable terminal. When the sending unit (121) receives a request (R) from the portable terminal, it sends second authentication information to the control panel. The control panel includes a receiving unit (61), a checking unit (63), and a control unit (65). The checking unit (63) checks the first authentication information received from the portable terminal and the second authentication information received from the sending unit (121). When the checking unit (63) succeeds in checking, the control unit (65) controls the car according to the elevator call registration information.

Description

Technical Field

[0001] The invention relates to a safety system of an elevator, a portable terminal and a control method of the safety system. Background Art

[0002] Patent Document 1 discloses an elevator system. In the elevator system described in Patent Document 1, when a call is registered using a mobile terminal, terminal information is acquired from the mobile terminal held by the user, and personal authentication is performed by referring to a terminal information database.

[0003] Prior art literature

[0004] Patent Literature

[0005] Patent Document 1: Japanese Patent Application Publication No. 2014-31263 Summary of the invention

[0006] However, in the elevator system described in Patent Document 1, only users who have registered in advance in the user's terminal information database can use the elevator system.

[0007] The present invention has been made to solve the above-mentioned problems. An object of the present invention is to provide an elevator safety system, a portable terminal, and a control method of the safety system that can register an elevator call using a portable terminal without prior registration of use.

[0008] The elevator safety system of the present invention comprises: an elevator device and a safety management device. The elevator device comprises: a car, which is arranged in a hoistway; and a control panel, which controls the car. The safety management device comprises: a first processing unit, which generates authentication information; a first sending unit, which, when receiving a request for information from a portable terminal, uses the authentication information generated by the first processing unit as first authentication information, and sends the first authentication information and management floor information indicating the floor at which the car can stop to the portable terminal; and a second sending unit, which, when receiving a request from the portable terminal, uses the authentication information generated by the first processing unit as second authentication information, and sends the second authentication information to the control panel. The control panel comprises: a receiving unit, which receives the first authentication information and the elevator call registration information generated according to the management floor information from the portable terminal, and receives the second authentication information from the second sending unit; a checking unit, which checks the first authentication information received by the receiving unit from the portable terminal and the second authentication information received by the receiving unit from the second sending unit; and a control unit, which, when the checking is successful by the checking unit, controls the car according to the elevator call registration information.

[0009] The portable terminal of the present invention can communicate with a security management device, the security management device includes: a first processing unit that generates authentication information; and a first sending unit that sends the authentication information generated by the first processing unit as the first authentication information to a control panel that controls the elevator car, and the portable terminal includes: a second sending unit that sends a request for information to the security management device; a receiving unit that receives the second authentication information and the management floor information of the car as a response to the request from the security management device; a display unit that displays the possible destination floor according to the management floor information received by the receiving unit; an input unit that allows the input of the destination floor according to the display of the possible destination floor; and a second processing unit that generates elevator call registration information according to the information of the destination floor input by the input unit. The authentication information generated by the first processing unit is sent from the security management device as the second authentication information, and the second sending unit sends the second authentication information and the elevator call registration information generated by the second processing unit to the control panel. The second authentication information is information used to check with the first authentication information received from the security management device in the control panel.

[0010] The control method of the safety system of the present invention is a control method of the following safety system, which comprises: an elevator device, which comprises a car and a control panel for controlling the car; and a safety management device. The control method comprises the following steps: Step 1, the safety management device generates authentication information; Step 2, when receiving a request for information from a portable terminal, the authentication information generated in Step 1 is used as the first authentication information, and the safety management device sends the first authentication information and management floor information indicating the floor where the car can stop to the portable terminal; Step 3, when receiving a request from the portable terminal, the authentication information generated in Step 1 is used as the second authentication information, and the safety management device sends the second authentication information to the control panel; Step 4, the control panel receives the first authentication information and the elevator call registration information generated according to the management floor information from the portable terminal; Step 5, in the control panel, the first authentication information received from the portable terminal in Step 4 and the second authentication information received from the safety management device are checked; and Step 6, when the check is successful in Step 5, the car is controlled according to the elevator call registration information received in Step 4.

[0011] Effects of the Invention

[0012] According to the present invention, the first authentication information is sent from the security management device to the portable terminal, and the second authentication information is sent to the control panel. In the control panel, the first authentication information received from the portable terminal and the second authentication information received from the security management device are checked. Therefore, the portable terminal can be used to register the elevator call without prior registration. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is a structural diagram of a building to which the security system according to the first embodiment is applied.

[0014] Figure 2 This is a diagram showing an example of a security management device according to the first embodiment.

[0015] Figure 3 This is a diagram showing an example of a mobile terminal according to the first embodiment.

[0016] Figure 4 This is a diagram showing an example of a server according to the first embodiment.

[0017] Figure 5 This is a diagram showing an example of a control panel according to the first embodiment.

[0018] Figure 6 This is a flowchart for explaining the outline of the operation of the security management device according to the first embodiment.

[0019] Figure 7 This is a flowchart for explaining the outline of the operation of the mobile terminal according to the first embodiment.

[0020] Figure 8 This is a diagram showing an example of a mobile terminal on which an operation screen is displayed according to the first embodiment.

[0021] Fig. 9 This is a flowchart for explaining the outline of the operation of the control panel according to the first embodiment.

[0022] Fig.10 This is a flowchart for explaining the outline of the operation of the server in Implementation Example 1.

[0023] Fig.11 This is a flowchart for explaining the operation outline of the security management device according to the second embodiment.

[0024] Fig.12 This is a flowchart for explaining the outline of the operation of the control panel according to the second embodiment.

[0025] Fig.13 This is a flowchart for explaining the outline of the operation of updating authentication information of the security management device of Implementation Example 3.

[0026] Fig.14 This is a flowchart for explaining the outline of the operation of the security management device according to the third embodiment.

[0027] Fig.15A This is a flowchart for explaining the outline of the operation of the control panel according to the third embodiment.

[0028] Fig. 15B This is a flowchart for explaining the outline of the operation of the control panel according to the third embodiment.

[0029] Fig.16 This is a hardware structure diagram of the security management device according to implementation mode 1.

[0030] Description of symbols

[0031] 1: safety management device; 2: car; 3: counterweight; 4: main rope; 5: traction machine; 6: control panel; 7: hoistway; 8: machine room; 9: landing; 10a: landing operation panel; 10b: car internal operation panel; 11a: landing door device; 11b: inner door; 12: information management device; 13: communication device; 14: user; 15: portable terminal; 16: server; 61: receiving unit; 62: storage unit; 63: checking unit; 64: processing unit; 65: control unit; 100 : building; 121: sending unit; 122: processing unit; 123: storage unit; 131: receiving unit; 132: sending unit; 151: input unit; 152: display unit; 153: processing unit; 154: storage unit; 155: request unit; 156: sending unit; 157: receiving unit; 161: processing unit; 162: storage unit; 163: receiving unit; 164: sending unit; 1000: processing circuit; 1001: processor; 1002: memory; 1003: hardware. DETAILED DESCRIPTION

[0032] The embodiment of the present invention will be described with reference to the accompanying drawings. In addition, in each figure, the same reference numerals are given to the same or corresponding parts, and the repeated description of the parts is appropriately simplified or omitted.

[0033] Implementation Method 1

[0034] Figure 1 This is a configuration diagram of a building 100 to which the security system according to the first embodiment is applied.

[0035] The elevator safety system includes an elevator device and a safety management device 1 .

[0036] The elevator device includes a car 2 , a counterweight 3 , a main rope 4 , a traction machine 5 , and a control panel 6 .

[0037] The car 2 is installed in a shaft 7. The car 2 moves up and down in the shaft 7. The counterweight 3 moves up and down in the shaft 7. The main rope 4 is hung on the traction machine 5. The car 2 is suspended on one side of the main rope 4. The counterweight 3 is suspended on the other side of the main rope 4. The traction machine 5 is installed in a machine room 8. The control panel 6 is installed in the machine room 8. The control panel 6 is provided so as to be able to control the elevator device as a whole. The control panel 6 controls the car 2.

[0038] The hoistway 7 passes through each floor of the building 100. The machine room 8 is provided just above the hoistway 7. The landing 9 is opposite to the hoistway 7 and is provided on each floor of the building 100. The landing operating panel 10a is provided at the landing 9 of each floor. The landing operating panel 10a is electrically connected to the control panel 6. The landing operating panel 10a registers the destination floor by the operation of the user. The landing operating panel 10a generates the elevator call registration information based on the information of the registered destination floor. The landing operating panel 10a sends the elevator call registration information to the control panel 6. The car operating panel 10b is provided on the inner side of the car 2. The car operating panel 10b is electrically connected to the control panel 6. The car operating panel 10b registers the destination floor by the operation of the user. The car operating panel 10b generates the elevator call registration information based on the information of the registered destination floor. The car operating panel 10b sends the elevator call registration information to the control panel 6.

[0039] The landing door device 11a is installed at the entrance and exit of the landing 9 on each floor. The car door device is installed at the entrance and exit of the car 2. The inner door 11b of the building 100 is installed on each floor of the building 100.

[0040] The security management device 1 includes an information management device 12 and a communication device 13. The information management device 12 can be installed anywhere in the building 100. The security management device 1 is installed in the machine room 8. The information management device 12 communicates with the control panel 6. The communication device 13 is installed in the landing station 9 of each floor. The communication device 13 can also be installed in the inner door 11b. The communication device 13 communicates with the portable terminal 15 held by the user 14 through short-range communication. The communication device 13 is a card reader. The short-range communication is a communication such as a BLE (Bluetooth Low Energy: Bluetooth is a registered trademark) method or an RFID (Radio Frequency Identifier: Radio Frequency Identification) method.

[0041] The portable terminal 15 is a smart phone or a tablet terminal. The portable terminal 15 can access the server 16 using an Internet line through a carrier communication network or the like. The portable terminal 15 is pre-installed with a dedicated application for elevator call registration. For the dedicated application, it is not necessary to perform individual settings such as information related to the elevator device to be used in advance. The dedicated application is not dedicated to the elevator device of a specific building.

[0042] In addition, the dedicated application does not necessarily need to be pre-installed in the portable terminal 15. The user 14 can use the present security system by accessing the cloud service via a browser using the portable terminal 15. In this case, a two-dimensional barcode is posted at the landing station 9 on each floor. The user 14 uses the portable terminal 15 to read the two-dimensional barcode. The portable terminal 15 calls the cloud service based on the read information. Alternatively, the user 14 can be prompted to install the dedicated application by posting a two-dimensional barcode for installing the dedicated application. As a result, the user 14 does not need to install the dedicated application in advance. As long as the user 14 has a portable terminal 15, anyone can start using it on the spot, thereby improving convenience.

[0043] The server 16 is installed at a place far away from the building 100 where the elevator device is installed. The server 16 may be installed at a maintenance company of the elevator device. The server 16 communicates with the portable terminal 15. The server 16 communicates with the control panel 6. The server 16 may also be a cloud server.

[0044] In addition, the car 2 can also be applied to an elevator device without a machine room 8. In this case, the traction machine 5 and the control panel 6 are installed at the lower part or the upper part of the hoistway 7.

[0045] Next, use Figure 2 The functions of the security management device 1 are described.

[0046] Figure 2 This is a diagram showing an example of the security management device 1 according to the first embodiment.

[0047] The security management device 1 includes an information management device 12 and a communication device 13. The information management device 12 includes a transmission unit 121, a processing unit 122, and a storage unit 123. The communication device 13 includes a reception unit 131 and a transmission unit 132.

[0048] Next, use Figure 3 The functions of the mobile terminal 15 will be described.

[0049] Figure 3 This is a diagram showing an example of the mobile terminal 15 according to the first embodiment.

[0050] The mobile terminal 15 includes an input unit 151 , a display unit 152 , a processing unit 153 , a storage unit 154 , a request unit 155 , a transmission unit 156 , and a reception unit 157 .

[0051] Next, use Figure 4 The function of the server 16 will be described.

[0052] Figure 4 This is a diagram showing an example of the server 16 according to the first embodiment.

[0053] The server 16 includes a processing unit 161 , a storage unit 162 , a receiving unit 163 , and a transmitting unit 164 .

[0054] Next, use Figure 5 The function of the control panel 6 will be described.

[0055] Figure 5 This is a diagram showing an example of the control panel 6 according to the first embodiment.

[0056] The control panel 6 includes a receiving unit 61, a storage unit 62, a checking unit 63, a processing unit 64, and a control unit 65. The control unit 65 is electrically connected to the equipment of the hoisting machine 5 and the car 2.

[0057] See also below Figures 6 to 10 , the functions of the present security system are explained. In the following content, an example of a user 14 using the present system is described in detail.

[0058] Figure 6 This is a flowchart for explaining the outline of the operation of the security management device 1 according to the first embodiment. Figure 7 This is a flowchart for explaining the outline of the operation of the mobile terminal 15 according to the first embodiment. Figure 8 1 is a diagram showing an example of the mobile terminal 15 in which the operation screen is displayed on the display unit 152 . Fig. 9 This is a flowchart for explaining the outline of the operation of the control panel 6 according to the first embodiment. Fig.10 This is a flowchart for explaining the outline of the operation of the server 16 according to the first embodiment.

[0059] The example in which the user 14 uses the elevator device to move from the 4th floor to the 3rd floor is shown. The user 14 approaches the landing 9 on the 4th floor. The user 14 brings the portable terminal 15 close to the communication device 13 to a distance at which communication with the communication device 13 is possible. The portable terminal 15 approaches to a distance at which communication with the communication device 13 is possible, thereby starting short-distance communication. By starting short-distance communication, the use of the present safety system starts.

[0060] The security management device 1 determines whether the receiving unit 131 of the communication device 13 can communicate with the portable terminal 15 (S101). If the receiving unit 131 can communicate with the portable terminal 15, it is determined as "yes" in S101. If the receiving unit 131 cannot communicate with the portable terminal 15, it is determined as "no" in S101. If it is determined as "no" in S101, it is further determined whether the receiving unit 131 can communicate with the portable terminal 15.

[0061] In the portable terminal 15, it is determined whether the receiving unit 157 can communicate with the communication device 13 (S201). When the receiving unit 157 can communicate with the communication device 13, it is determined as "yes" in S201. When the receiving unit 157 cannot communicate with the communication device 13, it is determined as "no" in S201. When it is determined as "yes" in S201, the request unit 155 generates a request R for information required for car call registration. The sending unit 156 sends the request R for information to the communication device 13 (S202).

[0062] In the security management device 1, when it is determined as "yes" in S101, it is determined whether the receiving unit 131 has received a request R for information from the portable terminal 15 (S102). When the receiving unit 131 has received the request R from the portable terminal 15, it is determined as "yes" in S102. When the receiving unit 131 has not received the request R from the portable terminal 15, it is determined as "no" in S102. When it is determined as "no" in S102, it is further determined whether the request R has been received from the portable terminal 15.

[0063] When it is determined as "yes" in S102, authentication information is generated in the processing unit 122 of the information management device 12 (S103). The authentication information is used to prevent the user 14 from analyzing the communication and maliciously registering the elevator call of the car through the server 16. Every time it is determined as "yes" in the processing of S102, authentication information with the same content is generated. The authentication information is stored in the storage unit 123. The elevator number and the management floor information are pre-stored in the storage unit 123. The elevator number is information for identifying a specific elevator device from a plurality of elevator devices located in a building. In addition, the elevator number may also be information for identifying an elevator group as a collection of a plurality of cars 2. The management floor information is information about the floors at which the car 2 can stop. The management floor information is information indicating all the stop floor identification information of the elevator device for registering the elevator call of the car. The content of the management floor information of the building 100 shows "1F, 2F, 3F, 4F, 5F". In S104, the transmission unit 132 of the security management device 1 transmits the elevator number, the management floor information, and the authentication information to the mobile terminal 15. The authentication information transmitted in S104 is referred to as authentication information A.

[0064] In the security management device 1, after the elevator number, the management floor information, and the authentication information A are transmitted in S104, the communication with the portable terminal 15 is immediately cut off (S105). As a result, communication with other portable terminals is enabled. Thus, even if many users approach the communication device 13 at the same time, it is possible to immediately handle. Thus, it is possible to prevent a congestion situation such as a plurality of users being stranded around the communication device 13.

[0065] In the receiving unit 157 of the portable terminal 15, it is determined whether the elevator number, the management floor information, and the authentication information A as a response to the request R sent in S202 are received from the security management device 1 (S203). In the case where the elevator number, the management floor information, and the authentication information A are received from the security management device 1, it is determined as "yes" in S203. In the case where the elevator number, the management floor information, and the authentication information A are not received from the security management device 1, it is determined as "no" in S203. In the case of "no" in S203, it is further determined whether the elevator number, the management floor information, and the authentication information A as a response to the request R sent in S202 are received by the receiving unit 157. In the case of "yes" in S203, the received elevator number, the management floor information, and the authentication information A are stored in the storage unit 154 (S204). In S205, after receiving the elevator number, the management floor information, and the authentication information A, the receiving unit 157 of the portable terminal 15 immediately cuts off the communication with the security management device 1. By completing the short-distance communication with the communication device 13 through the mobile terminal 15, the user 14 no longer needs to stay around the communication device 13. Thus, the next user can smoothly start using the present security system.

[0066] In the mobile terminal 15, the management floor information is read by the processing unit 153 (S206). In S207, the display unit 152 displays the possible destination floors that are candidates for the floors that the user 14 can move to in the building 100 based on the management floor information read by the processing unit 153. In the building 100 with 5 floors, since the user 14 is using the 4th floor, "1F, 2F, 3F, 5F" are the possible destination floors.

[0067] Figure 8 1 is a diagram showing an example of a portable terminal 15 in which an operation screen is displayed on a display unit 152. In the operation screen, a display such as "Please press the destination floor" is performed. The display of the operation screen is used to prompt the user 14 to perform an operation. The possible destination floors are displayed in the operation screen. For example, in the operation screen, "1" indicating the 1st floor, "2" indicating the 2nd floor, "3" indicating the 3rd floor, and "5" indicating the 5th floor are displayed. Since the user 14 is using the 4th floor, "4" is not displayed so that "4" is not selected. The user 14 can select the destination floor from the display of possible destination floors by clicking "3" indicating the 3rd floor as the destination floor. In addition, when the possible destination floors cannot be fully displayed in one screen, they can also be displayed in multiple pages or scrolled.

[0068] It is determined whether the destination floor is input from the user 14 in the input unit 151 of the portable terminal 15 (S208). When the destination floor is input from the user 14, it is determined as "Yes" in S208. When the destination floor is not input from the user 14, it is determined as "No" in S208. When it is determined as "No" in S208, it is continuously determined whether the destination floor is input from the user 14. When it is determined as "Yes" in S208, in the processing unit 153, call registration information is generated based on the input of the destination floor (S209). In S210, it is determined whether the transmission unit 156 can communicate with the server 16. When the transmission unit 156 can communicate with the server 16, it is determined as "Yes" in S210. When the transmission unit 156 cannot communicate with the server 16, it is determined as "No" in S210. When it is determined as "No" in S210, it is continuously determined whether it can communicate with the server 16.

[0069] In the server 16, it is determined whether the receiving unit 163 can communicate with the portable terminal 15 (S401). If the receiving unit 163 can communicate with the portable terminal 15, it is determined as "yes" in S401. If the receiving unit 163 cannot communicate with the portable terminal 15, it is determined as "no" in S401. If it is determined as "no" in S401, it is further determined whether the receiving unit 163 can communicate with the portable terminal 15.

[0070] In the mobile terminal 15, when it is determined as "YES" in S210, the transmission unit 156 transmits the elevator number, the authentication information A, and the call registration information to the server 16 (S211). When the processing of S211 is completed, the processing of the mobile terminal 15 is completed.

[0071] In the server 16, when it is determined as "yes" in S401, it is determined whether the elevator number, authentication information A, and call registration information are received from the portable terminal 15 by the receiving unit 163 (S402). In the case where the elevator number, authentication information A, and call registration information are received from the portable terminal 15 by the receiving unit 163, it is determined as "yes" in S402. In the case where the elevator number, authentication information A, and call registration information are not received from the portable terminal 15 by the receiving unit 163, it is determined as "no" in S402. In the case of "no" in S402, it is further determined whether the elevator number, authentication information A, and call registration information are received from the portable terminal 15. In the case of "yes" in S402, the received elevator number, authentication information A, and call registration information are stored in the storage unit 162 (S403). In S404, the elevator number is read by the processing unit 161. The processing unit 161 specifies the control panel 6 as the transmission destination of the authentication information A and the call registration information based on the read elevator number information.

[0072] In the safety management device 1, in S106, it is determined whether the transmission unit 121 can communicate with the control panel 6. If the transmission unit 121 can communicate with the control panel 6, it is determined as "yes" in S106. If the transmission unit 121 cannot communicate with the control panel 6, it is determined as "no" in S106. If it is determined as "no" in S106, it is further determined whether the transmission unit 121 can communicate with the control panel 6.

[0073] In the control panel 6, it is determined whether the receiving unit 61 can communicate with the security management device 1 (S301). If the receiving unit 61 can communicate with the security management device 1, it is determined as "yes" in S301. If the receiving unit 61 cannot communicate with the security management device 1, it is determined as "no" in S301. If it is determined as "no" in S301, it is further determined whether the receiving unit 61 can communicate with the security management device 1.

[0074] In the security management device 1, when the determination result in S106 is "Yes", the sending unit 121 sends the authentication information to the control panel 6 (S107). The authentication information sent in S107 is the information generated by the processing unit 122 in S103. The content of the authentication information sent in S107 is the same as the authentication information A sent in S104. The authentication information sent in S107 is set as the authentication information B. The authentication information generated by the processing unit 122 is sent to the control panel 6 as the authentication information B. When the processing of S107 is completed, the processing of the security management device 1 is completed.

[0075] In the control panel 6, when it is determined as "yes" in S301, it is determined whether the authentication information B is received from the security management device 1 by the receiving unit 163 (S302). In the case where the authentication information B is received from the security management device 1 by the receiving unit 163, it is determined as "yes" in S302. In the case where the authentication information B is not received from the security management device 1 by the receiving unit 163, it is determined as "no" in S302. In the case where it is determined as "yes" in S302, the authentication information B is stored in the storage unit 62 (S303).

[0076] In the server 16, it is determined whether the transmission unit 164 can communicate with the control panel 6 determined in S404 (S405). When the transmission unit 164 can communicate with the control panel 6, it is determined as "yes" in S405. When the transmission unit 164 cannot communicate with the control panel 6, it is determined as "no" in S405. When it is determined as "no" in S405, it is further determined whether it is possible to communicate with the control panel 6.

[0077] In the control panel 6, it is determined in S304 whether the receiving unit 61 can communicate with the server 16. If the receiving unit 61 can communicate with the server 16, it is determined as "yes" in S304. If the receiving unit 61 cannot communicate with the server 16, it is determined as "no" in S304. If it is determined as "no" in S304, it is further determined whether the receiving unit 61 can communicate with the server 16.

[0078] In the server 16, when the determination result in S405 is "yes", the sending unit 164 sends the authentication information A and the call registration information to the control panel 6 (S406). The server 16 sends the authentication information A and the call registration information to the control panel 6 corresponding to the elevator number. When the processing of S406 is completed, the processing of the server 16 is completed.

[0079] In the control panel 6, when it is determined as "yes" in S304, it is determined whether the call registration information and the authentication information A are received from the server 16 by the receiving unit 61 (S305). In the case where the call registration information and the authentication information A are received from the server 16 by the receiving unit 61, it is determined as "yes" in S305. The authentication information A is received from the portable terminal 15 by the receiving unit 61 via the server 16. In the case where the receiving unit 61 does not receive the call registration information and the authentication information A from the server 16, it is determined as "no" in S305. In the case where it is determined as "no" in S305, it is further determined whether the receiving unit 61 receives the call registration information and the authentication information A from the server 16. In the case where it is determined as "yes" in S305, the call registration information and the authentication information A are stored in the storage unit 62 (S306).

[0080] In the control panel 6, the verification unit 63 verifies the authentication information A and the authentication information B (S307). In the verification unit 63, it is determined whether the authentication information A is consistent with the authentication information B (S308). When the authentication information A is consistent with the authentication information B, the verification unit 63 determines that the verification is successful. In this case, it is determined as "yes" in S308. Thus, it is proved that the elevator call registration of the car is performed through the portable terminal 15. Therefore, the elevator call registration of the car performed by the user 14 is authenticated. When the authentication information A is inconsistent with the authentication information B, the verification unit 63 determines that the verification has failed. In this case, it is determined as "no" in S308. Thus, it cannot be proved that the elevator call registration of the car is performed through the portable terminal 15. Therefore, the elevator call registration of the car performed by the user 14 is not authenticated. When it is determined as "no" in S308, the processing of the control panel 6 ends. When it is determined as "yes" in S308, the elevator call registration information is read by the processing unit 64. In the processing unit 64, the destination floor of the car 2 is determined based on the read information (S309). In S310, the car 2 is controlled by the control unit 65. In S310, the car 2 is moved from the 4th floor to the 3rd floor by the control unit 65 (S310). The user 14 uses the car 2 to move from the 4th floor to the 3rd floor. When the processing of S310 is completed, the processing of the control panel 6 is completed.

[0081] In the present embodiment, the authentication information A and the call registration information are transmitted from the portable terminal 15 to the control panel 6 via the server 16. However, the authentication information A and the call registration information may be transmitted directly from the portable terminal 15 to the control panel 6. In this case, the elevator number is read by the processing unit 153 of the portable terminal 15. The control panel 6 as the transmission destination is determined based on the information read by the processing unit 153.

[0082] In addition, in this embodiment, the control panel 6 is identified by the elevator number. However, if the safety system is composed of only one elevator device, the control panel 6 of the elevator device of the transmission destination is clear. Therefore, if the safety system has only one elevator device, it is not necessary to identify the control panel 6. In this case, the elevator number is not required. Therefore, if the safety system has only one elevator device, it is not necessary to identify the control panel 6.

[0083] According to the first embodiment described above, the dedicated application does not have the management floor information of the elevator device to be used in advance. The dedicated application obtains the management floor information after starting to use the present safety system. As a result, even if it is an elevator device that cannot be registered in advance at a visit destination or commercial facility, the portable terminal 15 can be used to immediately register the elevator call of the car. In addition, even if the user 14 uses the present safety system for the first time, it can start using it immediately. In addition, the portable terminal 15 does not need to maintain the user registration information, or it is not necessary to input the user registration information into the portable terminal 15. As a result, the elevator call registration of the car using the portable terminal 15 can be performed without using the user information or the portable terminal information. As a result, any user of the elevator device can immediately use the present safety system.

[0084] Furthermore, the user 14 can register the destination floor using the mobile terminal 15. Thus, the car call registration can be performed without using the landing operating panel 10a and the car operating panel 10b. Figure 1 In the embodiment, the landing operation panel 10a and the car operation panel 10b are provided for users who do not have a portable terminal, but when all users have a portable terminal, the landing operation panel 10a and the car operation panel 10b are not required. Thus, the user can use the elevator device without touching the landing operation panel 10a and the car operation panel 10b. Thus, the sanitation state in the landing 9 and the car 2 is improved. In addition, when there are multiple users, it is possible to prevent crowding around the landing operation panel 10a and the car operation panel 10b.

[0085] In addition, regarding the authentication information, the control panel 6 checks the authentication information B directly sent from the safety management device 1 to the control panel 6 with the authentication information A sent via the portable terminal 15. This can prevent the user 14 from analyzing the communication and maliciously registering a car call via the server 16 from outside the building 100.

[0086] Furthermore, the mobile terminal 15 obtains the authentication information A from the communication device 13 by short-distance communication. Thus, only the mobile terminal 15 within the communication range of the communication device 13 can obtain the authentication information A. This prevents the user 14 from illegally registering a car call from outside the building 100.

[0087] The portable terminal 15 transmits the elevator number, authentication information A, and call registration information via the server 16. Thus, the security management device 1 can cut off the communication after transmitting the elevator number, management floor information, and authentication information A. Thus, even if many users approach the communication device 13 at the same time, it can be processed immediately. Thus, it is possible to prevent a congestion situation such as a plurality of users staying around the communication device 13.

[0088] Next, use Fig.16 An example of hardware constituting the security management device 1 will be described.

[0089] Fig.16 This is a hardware configuration diagram of the security management device 1 according to the first embodiment.

[0090] Each function of the security management device 1 can be implemented by a processing circuit. The processing circuit includes at least one processor 1001 and at least one memory 1002. The processing circuit can also include at least one dedicated hardware 1003.

[0091] When the processing circuit includes a processor 1001 and a memory 1002, each function of the security management device 1 is implemented by software, firmware, or a combination of software and firmware. At least one of the software and firmware is described as a program. At least one of the software and firmware is stored in the memory 1002. The processor 1001 implements each function of the security management device 1 by reading and executing the program stored in the memory 1002. The processor 1001 is also called a central processing unit, a processing unit, a computing unit, a microprocessor, a microcomputer, or a DSP. The memory 1002 is a nonvolatile or volatile semiconductor memory such as RAM (Random Access Memory), ROM (Read Only Memory), flash memory, EPROM (Erasable Programmable Read Only Memory), EEPROM (Electrically Erasable Programmable Read Only Memory), a magnetic disk, a floppy disk, an optical disk, a CD (compact disk), a mini disc, a DVD (Digital Versatile Disk), etc.

[0092] When the processing circuit has dedicated hardware 1003, the processing circuit is implemented by a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array), or a combination thereof. Each function of the security management device 1 can be implemented by the processing circuit separately. Each function of the security management device 1 can be implemented collectively by the processing circuit.

[0093] The functions of the security management device 1 may be partially implemented by dedicated hardware 1003, and the other parts may be implemented by software or firmware. Alternatively, the function of generating authentication information may be implemented by a processing circuit as dedicated hardware 1003, and the functions other than the function of generating authentication information may be implemented by the processor 1001 reading and executing a program stored in the memory 1002.

[0094] In this way, the processing circuit implements the various functions of the security management device 1 through hardware 1003, software, firmware or a combination thereof.

[0095] Although not shown in the figure, each function of the mobile terminal 15 may be realized by a processing circuit equivalent to a processing circuit that realizes each function of the security management device 1 .

[0096] Although not shown in the figure, each function of the server 16 may be realized by a processing circuit equivalent to a processing circuit that realizes each function of the security management device 1 .

[0097] Although not shown in the drawings, each function of the control panel 6 may be realized by a processing circuit equivalent to a processing circuit that realizes each function of the security management device 1 .

[0098] Implementation Method 2

[0099] In the first embodiment, an example is shown in which authentication information generated by the security management device 1 is used as authentication information A and authentication information B and is checked by the control panel 6. In this embodiment, an example is described in which an expiration date is given to the authentication information in the security management device 1 and the expiration date is determined in the control panel 6. The structure of the security system of this embodiment is similar to Figure 1 The examples shown are the same.

[0100] Fig.11 This is a flowchart for explaining the outline of the operation of the security management device 1 according to the second embodiment. Fig.12This is a flowchart for explaining the outline of the operation of the control panel 6 according to the second embodiment. The same reference numerals are used to denote the same or corresponding parts as those in the first embodiment, and the description of such parts will be omitted.

[0101] Fig.11 The steps S501 to S503 are the same as Figure 6 The steps from S101 to S103 are the same as those shown in FIG. 1. In S504, the processing unit 122 gives an expiration date to the authentication information. Fig.11 The steps S505 to S508 are the same as Figure 6 The steps from S104 to S107 are the same.

[0102] Fig.12 The steps S601 to S606 are the same as Fig. 9 The steps S301 to S306 are the same as those shown in S607. In S607, the checking unit 63 determines whether the authentication information A received from the server 16 is within the validity period assigned in S504. If the authentication information A is within the validity period, it is determined as "yes". In the case where the authentication information A exceeds the validity period, it is determined as "no". When it is determined as "no" in S607, the processing of the control panel 6 ends and the control of the car 2 is not performed. When it is determined as "yes" in S607, the processing of S608 is performed. Fig.12 The steps S608 to S611 are the same as Fig. 9 The steps from S307 to S310 are the same.

[0103] Furthermore, although validity periods are given to both authentication information A and authentication information B, only authentication information A or only authentication information B may be given a validity period.

[0104] Furthermore, the determination of the validity period is performed only on the authentication information A, but may be performed only on the authentication information B or on both.

[0105] The determination of the validity period is performed by the control panel 6, but may be performed by the server 16. The determination of the validity period may be performed by both the server 16 and the control panel 6. Since the present safety system is a system for preventing abuse of the elevator device, it is preferably performed by the control panel 6.

[0106] According to the second embodiment described above, an expiration date is given to the authentication information. This prevents the user 14 from illegally making a car call via the server 16 by analyzing the communication and copying the authentication information.

[0107] Implementation 3

[0108] In this embodiment, an example in which authentication information is updated by the security management device 1 is described. Figure 1 The examples shown are the same.

[0109] Fig.13 This is a flowchart for explaining the outline of the operation of updating the authentication information of the security management device 1 according to the third embodiment. Fig.14 This is a flowchart for explaining the outline of the operation of the security management device 1 according to the third embodiment. Fig.15A This is a flowchart for explaining the outline of the operation of the control panel 6 according to the third embodiment. Fig. 15B This is a flowchart for explaining the outline of the operation of the control panel 6 according to the third embodiment. The same reference numerals are used to denote the same or corresponding parts as those in the first embodiment, and the description of such parts will be omitted.

[0110] An example of updating authentication information in the security management device 1 is shown. In the security management device 1, the processing unit 122 generates authentication information (S701). The authentication information generated in S701 is stored in the storage unit 123. In the storage unit 123, the authentication information generated in S701 is retained (S702). In S703, it is determined whether a prescribed time has passed since the processing unit 122 generated the authentication information. In the case where the prescribed time has passed since the authentication information was generated, it is determined as "yes" in S703. In the case where it is within the prescribed time since the authentication information was generated, it is determined as "no" in S703. In the case where it is determined as "no" in S703, it is further determined whether the prescribed time has passed. In the case where it is determined as "yes" in S703, the authentication information is deleted by the processing unit 122 (S704). After the authentication information is deleted in S704, the process returns to S701 and authentication information with different contents from the previous one is generated. Through the above-mentioned processing, the authentication information is updated at any time by the security management device 1.

[0111] An example in which the security management device 1 periodically updates authentication information five times is described. In the following content, when it is necessary to identify the authentication information, the five generated authentication information are labeled with numbers a to e. The authentication information A sent by the sending unit 132 to the portable terminal 15 is also labeled with numbers a to e. The authentication information B sent by the sending unit 121 to the control panel 6 is also labeled with numbers a to e. When the present security system is used between the first update and the second update, between the third update and the fourth update, and between the fourth update and the fifth update, in the process of S803, authentication information a, authentication information c, and authentication information d are respectively obtained.

[0112] The security management device 1 periodically updates the authentication information. The security system is used once between the first update and the second update, and once between the third update and the fourth update, for a total of two times. The example in which the user 14 starts using the security system between the fourth update and the fifth update is shown. The steps shown in S801 to S802 are the same as those in Figure 6 The steps from S101 to S102 of the security management device 1 are the same. In the case where the determination in S802 is "Yes", the processing unit 122 acquires the authentication information d held by the storage unit 123 (S803). Fig.14 The steps S804 to S807 are the same as Figure 6 The steps from S104 to S107 of are the same. In S804, the authentication information A sent by the sending unit 132 is the information obtained in S803. In S804, the authentication information Ad is sent by the sending unit 132. In S807, the authentication information B sent by the sending unit 121 is the information obtained in S803. In S807, the authentication information Bd is sent by the sending unit 121. In addition, in the processing of S804, the authentication information Aa is sent when the present security system is used between the first update and the second update, and the authentication information Ac is sent when the present security system is used between the third update and the fourth update. In the processing of S807, the authentication information Ba is sent when the present security system is used between the first update and the second update, and the authentication information Bc is sent when the present security system is used between the third update and the fourth update.

[0113] In the storage unit 62 of the control panel 6, an upper limit value N of the number of authentication information B received from the security management device 1 is set to be stored. When the upper limit value N is 2, the storage unit 62 stores at most two pieces of authentication information B received from the transmission unit 121. The storage unit 62 stores the authentication information B in descending order of the date and time when the authentication information B is received within the range of the upper limit value N. At the time when the user 14 starts to use the present security system, the two pieces of authentication information B are stored in the storage unit 62 in the order of authentication information Bc and authentication information Ba.

[0114] The steps shown in S901 of the control panel 6 are the same as Fig. 9The steps shown in S301 of . When the receiving unit 61 receives the authentication information Bd, it is determined as "yes" in S901. When it is determined as "yes" in S901, it is determined whether the number of authentication information B stored in the storage unit 62 is less than the number obtained by subtracting 1 from the upper limit value N (S902). When the upper limit value N is two, it is determined in S902 whether the number of authentication information B is less than one. When the number of authentication information B stored in the storage unit 62 is less than one, it is determined as "yes" in S902. When the number of authentication information B stored in the storage unit 62 is more than one, that is, when it is two, it is determined as "no" in S902. When it is determined as "no" in S902, the oldest authentication information among the authentication information B stored in the storage unit 62 is deleted (S903). In the storage unit 62, two authentication information are stored in the order of authentication information Bc and authentication information Ba, and the authentication information B with the earliest reception date and time is authentication information Ba. As a result, authentication information Ba is deleted. If it is determined to be "yes" in S902, or if the process of S903 is completed, the authentication information B received in S901 is stored in the storage unit 62 (S904). In S904, the authentication information Bd is stored in the storage unit 62. When the process of S904 is completed, the storage unit 62 stores the authentication information B in the order of authentication information Bd and authentication information Bc.

[0115] Fig. 15B The steps S905 to S907 are the same as Fig. 9The steps from S304 to S306 are the same as those shown in . In S907, the authentication information Ad is stored in the storage unit 62. In S908, the verification unit 63 verifies the authentication information A received from the server 16 and the latest authentication information B stored in the storage unit 62. In the storage unit 62, authentication information Bd and authentication information Bc are stored, and the authentication information Bd has the latest reception date. Thus, the authentication information Ad and the authentication information Bd are verified in S907. In S909, it is determined whether the verified authentication information A is consistent with the authentication information B. In the case that the verified authentication information A is consistent with the authentication information B, it is determined as "yes" in S909. In the case that the verified authentication information A is inconsistent with the authentication information B, it is determined as "no" in S909. Since the authentication information Ad is consistent with the authentication information Bd, it is determined as "yes" in S909. When it is determined as "No" in S909, the verification unit 63 verifies the authentication information A received from the server 16 and the second oldest authentication information B stored in the storage unit 62 (S910). In S911, the verification unit 63 determines whether the verified authentication information A is consistent with the authentication information B. In the case that the verified authentication information A is consistent with the authentication information B, it is determined as "Yes" in S911. In the case that the verified authentication information A is inconsistent with the authentication information B, it is determined as "No" in S911. In the case of "No", the processing of the control panel 6 ends. In the case of "Yes" in S911, the processing of S912 starts. Fig. 15B The steps from S912 to S913 are the same as Fig. 9 The steps from S309 to S310 are the same as those shown in FIG. 1. When the processing of S913 is completed, the processing of the control panel 6 is completed.

[0116] In addition, although the authentication information B is stored in the storage unit 62 in descending order of the received date and time, the authentication information B may be stored in another order. Alternatively, the authentication information B may be stored in ascending order of the received date and time in the storage unit 62. In this case, in the process of S903, the oldest authentication information among the authentication information B stored in the storage unit 62 is deleted regardless of the order of the storage unit 62.

[0117] In addition, the verification unit 63 verifies the authentication information B stored in the storage unit 62 from the latest authentication information B, but other orders are also possible. Alternatively, the verification unit 63 verifies the authentication information B stored in the storage unit 62 in ascending order of the received date and time.

[0118] According to the third embodiment described above, the content of the authentication information is periodically updated by the security management device 1. In the control panel 6, a specified number of authentication information B received from the security management device 1 is stored in descending order of the reception date and time. When the authentication information B stored in the storage unit 62 exceeds the specified number, it is deleted in ascending order of the reception date and time. In the verification unit 63, it is determined whether any authentication information B among the stored authentication information B is consistent with the authentication information A received from the server 16. Thus, the old authentication information B is deleted, thereby being able to add an effective period to the authentication information B. Thus, it is possible to prevent the user 14 from analyzing the communication and copying the authentication information, thereby making a car call via the server 16. Furthermore, the determination of the effective period performed in the second embodiment is no longer necessary. Thus, the processing speed is improved.

Claims

1. A safety system for an elevator, wherein: The elevator safety system has: Elevator installations; as well as Security management device, The elevator device comprises: a car disposed in the hoistway; and a control panel, which controls the car, The security management device comprises: a first processing unit that generates authentication information when receiving a request for information from a portable terminal; a first sending unit which, when receiving the request from the portable terminal, uses the authentication information generated by the first processing unit as first authentication information and sends management floor information indicating floors at which the car can stop and the first authentication information to the portable terminal; as well as a second sending unit which, upon receiving the request from the portable terminal, uses the authentication information generated by the first processing unit as second authentication information and sends the second authentication information to the control panel; The control panel has: a receiving unit that receives the first authentication information and the elevator call registration information generated according to the management floor information from the portable terminal, and receives the second authentication information from the second sending unit; a checking unit that checks the first authentication information received by the receiving unit from the portable terminal and the second authentication information received by the receiving unit from the second sending unit; as well as A control unit controls the car based on the call registration information when the verification by the verification unit succeeds.

2. The elevator safety system according to claim 1, wherein: The security management device immediately cuts off communication with the portable terminal after sending the management floor information and the first authentication information to the portable terminal.

3. The elevator safety system according to claim 1, wherein: When receiving the request from the portable terminal, the first transmitting unit transmits the elevator number to the portable terminal. The mobile terminal specifies the control panel as a destination of the first authentication information and the call registration information based on the elevator number.

4. The elevator safety system according to claim 2, wherein: When receiving the request from the portable terminal, the first transmitting unit transmits the elevator number to the portable terminal. The mobile terminal specifies the control panel as a destination of the first authentication information and the call registration information based on the elevator number.

5. The safety system for an elevator according to claim 1, wherein: When receiving the request from the portable terminal, the first transmitting unit transmits the elevator number to the portable terminal. The portable terminal sends the first authentication information, the elevator call registration information and the elevator number to the server, The server determines the control panel as a destination for sending the first authentication information and the elevator call registration information based on the elevator number, The receiving unit receives the first authentication information from the portable terminal via the server.

6. The safety system for an elevator according to claim 2, wherein: When receiving the request from the portable terminal, the first transmitting unit transmits the elevator number to the portable terminal. The portable terminal sends the first authentication information, the elevator call registration information and the elevator number to the server, The server determines the control panel as a destination for sending the first authentication information and the elevator call registration information based on the elevator number, The receiving unit receives the first authentication information from the portable terminal via the server.

7. The safety system for an elevator according to any one of claims 1 to 6, wherein: The security management device assigns a validity period to the authentication information generated by the first processing unit, The checking unit determines whether the validity period is within the period.

8. The safety system for an elevator according to any one of claims 1 to 6, wherein: The security management device comprises a first storage unit, The first processing unit periodically generates different authentication information, The first storage unit stores the latest authentication information generated by the first processing unit. When the second transmitting unit receives the request from the portable terminal, the second transmitting unit transmits the authentication information stored in the first storage unit to the control panel as the second authentication information. The control panel includes a second storage unit that stores a predetermined number of the second authentication information in descending order of date and time when the receiving unit receives the second authentication information. The checking unit determines whether any second authentication information among the second authentication information stored in the second storage unit is consistent with the first authentication information received from the portable terminal.

9. A safety system for an elevator, wherein: The elevator safety system has: Elevator installations; as well as Security management device, The elevator device comprises: a car disposed in the hoistway; and a control panel, which controls the car, The security management device comprises: A first processing unit that generates authentication information; a first sending unit which, when receiving a request for information from a portable terminal, uses the authentication information generated by the first processing unit as first authentication information and sends management floor information indicating floors at which the car can stop and the first authentication information to the portable terminal; as well as a second sending unit which, upon receiving the request from the portable terminal, uses the authentication information generated by the first processing unit as second authentication information and sends the second authentication information to the control panel; The control panel has: a receiving unit that receives the first authentication information and the elevator call registration information generated according to the management floor information from the portable terminal, and receives the second authentication information from the second sending unit; a checking unit that checks the first authentication information received by the receiving unit from the portable terminal and the second authentication information received by the receiving unit from the second sending unit; as well as a control unit that controls the car according to the elevator call registration information when the verification by the verification unit succeeds, When receiving the request from the portable terminal, the first transmitting unit transmits the elevator number to the portable terminal. The portable terminal sends the first authentication information, the elevator call registration information and the elevator number to the server, The server determines the control panel as a destination for sending the first authentication information and the elevator call registration information based on the elevator number, The receiving unit receives the first authentication information from the portable terminal via the server.

10. The safety system for an elevator according to claim 9, wherein: The security management device immediately cuts off communication with the portable terminal after sending the management floor information and the first authentication information to the portable terminal.

11. The elevator safety system according to claim 9 or 10, wherein: The security management device assigns a validity period to the authentication information generated by the first processing unit, The checking unit determines whether the validity period is within the period.

12. The safety system for an elevator according to claim 9 or 10, wherein: The security management device comprises a first storage unit, The first processing unit periodically generates different authentication information, The first storage unit stores the latest authentication information generated by the first processing unit. When the second transmitting unit receives the request from the portable terminal, the second transmitting unit transmits the authentication information stored in the first storage unit to the control panel as the second authentication information. The control panel includes a second storage unit that stores a predetermined number of the second authentication information in descending order of date and time when the receiving unit receives the second authentication information. The checking unit determines whether any second authentication information among the second authentication information stored in the second storage unit is consistent with the first authentication information received from the portable terminal.

13. A safety system for an elevator, wherein: The elevator safety system has: Elevator installations; as well as Security management device, The elevator device comprises: a car disposed in the hoistway; and a control panel, which controls the car, The security management device comprises: A first processing unit that generates authentication information; a first sending unit which, when receiving a request for information from a portable terminal, uses the authentication information generated by the first processing unit as first authentication information and sends management floor information indicating floors at which the car can stop and the first authentication information to the portable terminal; as well as a second sending unit which, upon receiving the request from the portable terminal, uses the authentication information generated by the first processing unit as second authentication information and sends the second authentication information to the control panel; The control panel has: a receiving unit that receives the first authentication information and the elevator call registration information generated according to the management floor information from the portable terminal, and receives the second authentication information from the second sending unit; a checking unit that checks the first authentication information received by the receiving unit from the portable terminal and the second authentication information received by the receiving unit from the second sending unit; and a control unit that controls the car according to the elevator call registration information when the verification by the verification unit succeeds, The security management device comprises a first storage unit, The first processing unit periodically generates different authentication information, The first storage unit stores the latest authentication information generated by the first processing unit. When the second transmitting unit receives the request from the portable terminal, the second transmitting unit transmits the authentication information stored in the first storage unit to the control panel as the second authentication information. The control panel includes a second storage unit that stores a predetermined number of the second authentication information in descending order of date and time when the receiving unit receives the second authentication information. The checking unit determines whether any second authentication information among the second authentication information stored in the second storage unit is consistent with the first authentication information received from the portable terminal.

14. The safety system for an elevator according to claim 13, wherein: The security management device immediately cuts off communication with the portable terminal after sending the management floor information and the first authentication information to the portable terminal.

15. The safety system for an elevator according to claim 13 or 14, wherein: When receiving the request from the portable terminal, the first transmitting unit transmits the elevator number to the portable terminal. The mobile terminal specifies the control panel as a destination of the first authentication information and the call registration information based on the elevator number.

16. A portable terminal capable of communicating with a security management device, wherein the security management device comprises: a first processing unit that generates authentication information when receiving a request for information from a portable terminal; as well as a first sending unit that sends the authentication information generated by the first processing unit as first authentication information to a control panel that controls the elevator car; Wherein, the portable terminal has: A second sending unit, which sends the request to the security management device; a receiving unit that receives second authentication information and management floor information of the car as a response to the request from the security management device; a display unit that displays a possible destination floor based on the management floor information received by the receiving unit; an input unit for inputting a destination floor according to the display of possible destination floors; and a second processing unit for generating call registration information based on the information of the destination floor inputted by the input unit, sending the authentication information generated by the first processing unit from the security management device as the second authentication information, the second transmitting unit transmitting the second authentication information and the elevator call registration information generated by the second processing unit to the control panel; The second authentication information is information used to check the first authentication information received from the security management device in the control panel.

17. The portable terminal according to claim 16, wherein: The receiving unit cuts off communication immediately after receiving the second authentication information and the managed floor information from the security management device.

18. The portable terminal according to claim 16 or 17, wherein: The receiving unit receives the elevator number as a response to the request, The second processing unit determines the control panel as the transmission destination based on the elevator number. The second transmitting unit transmits the second authentication information and the call registration information to the control panel identified by the second processing unit.

19. The portable terminal according to claim 16 or 17, wherein: The receiving unit receives the elevator number as a response to the request, The second sending unit sends the second authentication information, the elevator call registration information, and the elevator number to the server, The elevator number is sent by the server to identify the control panel to which the second authentication information and the elevator call registration information are to be sent.

20. A portable terminal capable of communicating with a security management device, wherein the security management device comprises: A first processing unit that generates authentication information; as well as a first sending unit that sends the authentication information generated by the first processing unit as first authentication information to a control panel that controls the elevator car; Wherein, the portable terminal has: a second sending unit, which sends a request for information to the security management device; a receiving unit that receives second authentication information and management floor information of the car as a response to the request from the security management device; a display unit that displays a possible destination floor based on the management floor information received by the receiving unit; an input unit for inputting a destination floor according to the display of possible destination floors; and a second processing unit for generating call registration information based on the information of the destination floor inputted by the input unit, sending the authentication information generated by the first processing unit from the security management device as the second authentication information, the second transmitting unit transmitting the second authentication information and the elevator call registration information generated by the second processing unit to the control panel; The second authentication information is information used to verify in the control panel with the first authentication information received from the security management device. The receiving unit receives the elevator number as a response to the request, The second sending unit sends the second authentication information, the elevator call registration information, and the elevator number to the server, The elevator number is sent by the server to identify the control panel to which the second authentication information and the elevator call registration information are to be sent.

21. The portable terminal according to claim 20, wherein: The receiving unit cuts off communication immediately after receiving the second authentication information and the managed floor information from the security management device.

22. A method for controlling a safety system, the safety system comprising: An elevator device including a car and a control panel for controlling the car; and Security management device, in, The control method of the safety system includes the following steps: Step 1, upon receiving a request for information from a portable terminal, the security management device generates authentication information; Step 2, when receiving the request from the portable terminal, the authentication information generated in the step 1 is used as the first authentication information, and the security management device sends the first authentication information and management floor information indicating the floors at which the car can stop to the portable terminal; Step 3, when receiving the request from the portable terminal, the authentication information generated in the step 1 is used as the second authentication information, and the security management device sends the second authentication information to the control panel; Step 4, the control panel receives the first authentication information and the elevator call registration information generated according to the management floor information from the portable terminal; Step 5, in the control panel, checking the first authentication information received from the portable terminal in step 4 and the second authentication information received from the security management device; as well as In step 6, when the verification in step 5 is successful, the car is controlled based on the call registration information received in step 4.

23. The control method of the safety system according to claim 22, wherein: In the second step, when the safety management device receives the request from the portable terminal, the elevator number is sent from the safety management device to the portable terminal. In the mobile terminal, the control panel as the destination of transmission of the first authentication information and the call registration information is identified based on the elevator number received from the safety management device.

24. The method for controlling a safety system according to claim 22, wherein: In the second step, when the safety management device receives the request from the portable terminal, the elevator number is sent from the safety management device to the portable terminal. The portable terminal sends the first authentication information, the elevator call registration information and the elevator number to the server, the server determines the control panel as a destination for sending the first authentication information and the elevator call registration information based on the elevator number received from the mobile terminal, In the fourth step, the control panel receives the first authentication information from the portable terminal via the server.

25. A method for controlling a safety system, the safety system comprising: An elevator device including a car and a control panel for controlling the car; and Security management device, in, The control method of the safety system includes the following steps: Step 1, the security management device generates authentication information; Step 2, when receiving a request for information from a portable terminal, the authentication information generated in the step 1 is used as first authentication information, and the security management device sends the first authentication information and management floor information indicating the floors at which the car can stop to the portable terminal; Step 3, when receiving the request from the portable terminal, the authentication information generated in the step 1 is used as the second authentication information, and the security management device sends the second authentication information to the control panel; Step 4, the control panel receives the first authentication information and the elevator call registration information generated according to the management floor information from the portable terminal; Step 5, in the control panel, checking the first authentication information received from the portable terminal in step 4 and the second authentication information received from the security management device; as well as Step 6, when the verification in step 5 is successful, controlling the car according to the elevator call registration information received in step 4, In the second step, when the safety management device receives the request from the portable terminal, the elevator number is sent from the safety management device to the portable terminal. The portable terminal sends the first authentication information, the elevator call registration information and the elevator number to the server, the server determines the control panel as a destination for sending the first authentication information and the elevator call registration information based on the elevator number received from the mobile terminal, In the fourth step, the control panel receives the first authentication information from the portable terminal via the server.

Images