Building system for elevator call input via offline qr code credentials

Abstract

A building system (1) with an elevator system (1) comprises a controller system (18) controlling the elevator system (1) to move an elevator car (14) between floors of a building and a registration computer system (4) communicatively coupled to the controller system (18). The registration computer system (4) generates an activation code in the form of a QR code that a user (2) requesting elevator service can scan with a mobile communication device (20). The activation code encodes user information including access rights of the user (2) in the building. Upon the activation code being provided to the mobile communication device (20), a software application (APP) executable by the mobile communication device (20) generates a graphical user interface (23), wherein the display content of the graphical user interface (23) is determined by the encoded user information of the activation code. The software application (APP) generates an optical voucher (47, 48, 50, 52) upon the user (2) specifying elevator service. A voucher acquisition unit (9) reads the optical voucher (47, 48, 50, 52) from the mobile communication device (20) presented by the user (2), wherein the controller system (18) is configured to cause the elevator system (1) to perform the specified elevator service upon determining the optical voucher (47, 48, 50, 52) to be valid.

Description

Technical Field

[0001] The present disclosure of various embodiments generally relates to building systems having elevator systems and their operation. More specifically, various embodiments described herein relate to building systems that provide improved passenger comfort and confidence when using elevators, and methods of controlling the operation of such building systems. Background Art

[0002] Multi-story residential and commercial buildings typically have elevator systems for transporting users (e.g., tenants and visitors) from landing floors to destination floors. Elevator systems and the elevator control technologies implemented therein are generally known. Some of these buildings may also have physical building control systems to allow only authorized users to access the building and / or areas within the building. When the user presents some form of credential (e.g., a key, an optical code (e.g., a barcode, QR code), an RFID badge, or a biometric feature), the physical building control system releases or unlocks a physical barrier (e.g., a gate, door, or revolving door) to grant access to the authorized user. US 9,077,716 describes a building control system in which a mobile electronic device communicates with an electronic door lock via a Bluetooth or WLAN radio link and communicates with a web server via a WAN (wide area network) radio link to open the electronic lock. For example, one of these building control systems can be configured to automatically input an elevator call for an authorized user based on a default destination stored in a user profile.

[0003] In addition to providing delivery and physical access control, building owners and / or building operators (building managers) also need to ensure a safe and clean environment within the building. Of particular concern are the panels and buttons that users must touch to request building services, such as elevator trips. Users may be concerned that these panels and buttons could spread bacteria and / or viruses to healthy users. To address this concern, building managers can enhance their cleaning and disinfection efforts.

[0004] Such efforts and processes can increase user confidence when seeking to use building services. However, some of the aforementioned systems for using vouchers are quite complex, and cleaning and disinfection efforts may still not provide sufficient comfort to users. Therefore, a technology that overcomes at least some of these issues is needed. Summary of the Invention

[0005] One aspect of this technology relates to a building system having an elevator system. The building system includes a controller system configured to control the elevator system to move elevator cars between floors of the building; and a registration computer system communicatively coupled to the controller system. The registration computer system is configured to generate an activation code for a user requesting elevator service; store data associated with the activation code; and make at least one system component of the registration computer system user-accessible in a public area of ​​the building. The activation code encodes user information, including at least one of a user identification, an encryption key, and the user's access rights within the building, and is configured to, when provided to a mobile communication device of a user located near at least one of the system components, activate a software application installed on and executable by the mobile communication device. The activated software application is configured to generate a graphical user interface on a display of the mobile communication device, wherein the displayed content of the graphical user interface is predetermined solely by the user information encoded in the activation code. Furthermore, the software application is configured to generate an optical credential when the user requests elevator service, wherein the optical credential includes the user information. The building system also includes a credential acquisition unit communicatively coupled to the controller system and configured to acquire an optical credential from a mobile communication device presented to the credential acquisition unit by a user. The controller system is configured to, upon determining that the optical credential is valid, cause the elevator system to perform the designated elevator service.

[0006] Another aspect relates to a method for operating a building system having an elevator system. The building system includes a controller system configured to control the elevator system, an enrollment computer system communicatively coupled to the controller system, and a credential acquisition unit communicatively coupled to the controller system. According to the method, the enrollment computer system generates an activation code based on information contained in a user profile stored for a user. The activation code encodes user information, including at least one of a user identification, an encryption key, and the user's access rights within the building. The enrollment computer system issues the activation code for acquisition by the user's mobile communication device. The acquired activation code activates a software application installed on and executable by the mobile communication device. The activated software application generates a graphical user interface on a display of the mobile communication device, wherein the display content of the graphical user interface is predetermined solely by the user information encoded in the activation code. The software application further generates and displays an optical credential when the user specifies an elevator service, wherein the optical credential includes the user information. According to the method, the credential acquisition unit acquires the optical credential from the mobile communication device presented by the user, and the controller system controls the elevator system to execute the specified elevator service if the optical credential is determined to be valid.

[0007] The technology described herein allows users to request elevator service without touching elevator buttons or an elevator operating panel. For example, a user can enter an elevator call using a mobile communication device with which the user is familiar. Any touch used to call the elevator is thus limited to touching the "personal" mobile communication device, which helps users feel more confident when seeking to use an elevator. Furthermore, mobile communication devices can be operated via a graphical user interface (GUI); this facilitates the use of the technology described herein because users are generally accustomed to using such GUIs.

[0008] In certain embodiments, an optical code and an optical credential are used. The registration computer system issues an activation code, and a credential acquisition unit acquires the optical credential from a mobile communication device presented by the user. In one embodiment, the optical code and optical credential are displayed as a Quick Response (QR) code. Users are also accustomed to such optical codes, so when they see the optical code, they intuitively know what to do: scan it with the mobile communication device or present it to an electronic reader. This facilitates the use of the technology described herein.

[0009] Furthermore, the activation code generated by the registration computer system essentially includes all the information, particularly access rights, that allows the user to enter an elevator call to reach the desired destination in the building. Around the time the activation code is generated based on the user profile, the registration computer system generates an encryption key specific to the user. The activation code transmits the encryption key to the mobile communication device, which then uses it to encode the optical credential. After the optical credential has been read by the credential acquisition device, the encryption key is used by the building system's controller system to verify the optical credential. This restricts the duplication and sharing of the optical credential with other users.

[0010] The technology described herein provides further improved security for the entire building system in the event that the activation code and / or optical credential is subject to unauthorized decoding or decryption efforts (hacking). Because the encryption key is unique and specific to the user, obtaining the encryption key only affects the hacked activation code or optical credential, not other codes or credentials. The registration computer system generates a new and independent encryption key for each elevator service request.

[0011] Furthermore, the technology described herein provides an additional level of security for building systems. Around the time an activation code is generated, its validity or expiration (i.e., the date / time its validity begins and ends) and access rights are stored in a data storage device. When a user presents an optical credential containing information regarding validity and access rights, the controller system checks whether the information from the read optical credential matches the information stored in the data storage device. Only then is elevator service performed.

[0012] Furthermore, because the activation code conveys substantially all information to the mobile communication device, the mobile communication device does not require a radio communication link to request elevator service. In response to receiving the activation code, the mobile communication's graphical user interface displays predetermined content, including the optical credential, without requiring additional information external to the mobile communication device. In other words, the technology described herein provides for offline use of a mobile communication device to request elevator service.

[0013] The technology described herein is not limited to a particular elevator control technology. In one embodiment, a controller system is configured to control an elevator system according to a raise / lower control technology, wherein a first credential capture unit is disposed on a building floor to provide input for a floor call that specifies a direction of travel and calls an elevator car to the building floor, and wherein a second credential capture unit is disposed in the elevator car to provide input for a car call that specifies a destination floor. In another embodiment using the raise / lower control technology, direction buttons are disposed on the building floor to provide input for a floor call that specifies a direction of travel and calls an elevator car to the building floor, and the credential capture unit is disposed in the elevator car to provide input for a car call that specifies a destination floor. Alternatively, the controller system is configured to control the elevator system according to a destination call control technology, wherein the credential capture unit is disposed on the building floor to provide input for a floor call that specifies a destination floor and calls an elevator car to the building floor. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] The various aspects of the improved technology are described in more detail below with reference to exemplary embodiments in conjunction with the accompanying drawings. In the accompanying drawings, the same elements have the same reference numerals. In the accompanying drawings:

[0015] Figure 1 A schematic illustration showing an exemplary situation in a building with a building system;

[0016] Figure 2 Shown by Figure 1 A schematic illustration of an exemplary embodiment of an input mask displayed by a registration computer system of a building system is shown;

[0017] Figure 3 A flow chart illustrating an exemplary embodiment of a method of operating a building system;

[0018] Figures 4A to 4D a first embodiment of a graphical user interface displayed on a user's mobile communication device for use with the raise / lower elevator control technology;

[0019] Figures 5A to 5B a second embodiment of a graphical user interface displayed on a user's mobile communication device for use with the raise / lower elevator control technology; and

[0020] Figures 6A to 6B A third embodiment of a graphical user interface is displayed on a user's mobile communication device for use with destination call control technology. DETAILED DESCRIPTION

[0021] Figure 1 is a schematic illustration of an exemplary situation in a building having a building system 1 that can be configured to operate according to at least one of several system implementation and control techniques. For illustrative purposes, these system implementation and control techniques are described in detail in the accompanying drawings. Figure 1 Those skilled in the art will appreciate that fewer than the illustrated system implementation and control techniques, or only one of the illustrated system implementation and control techniques, may be provided in a building.

[0022] Building system 1 can be configured for a variety of different applications. For example, building system 1 may include an elevator system for performing elevator services (e.g., transporting user 2 from a landing floor to a destination floor within a building). An elevator controller (ECS) controls the operation of the elevator system based on control techniques implemented in the elevator system. These control techniques are known to those skilled in the art; they are described herein only to the extent that they are considered helpful for understanding the technology described herein.

[0023] refer to Figure 1 On the right side, the elevator system can be configured to operate according to (conventional) up / down control technology. In that case, the elevator system has floor terminals 6a, 6b installed on the building floors near the elevator doors 7 and an elevator car 14a equipped with a car operating panel 10. The floor terminals 6a, 6b and the car operating panel 10 are communicatively coupled to the controller system 18. At the floor terminals 6a, 6b on the landing floor, the user 2 can enter the direction of travel (up / down) to call the elevator car 14a to the landing floor; the up / down direction is Figure 1 The car operating panel 10 is depicted as a triangle, which can be provided on a button or displayed on a touch screen. At the car operating panel 10, the user 2 - after logging into the elevator car 14a - can enter the destination floor. The car operating panel 10 can have a plurality of individually numbered buttons or numbered fields on the touch panel; for example Figure 1 As shown, the floor labels on or next to these buttons or fields can specify the name (individual, legal entity) or service (reception, dentist, restaurant, gym) located on the building floor.

[0024] refer to Figure 1On the left side, the elevator system can be configured to operate according to a destination call control technique. In that case, the elevator system has floor terminals 8 installed on the building floors near the elevator doors 7 or at the entrance 12 to the restricted access area 5 controlled by the gate 17. At the floor terminal 8 on the floor of entry, the user 2 can enter a destination floor to call the elevator car 14b to the floor of entry. Similar to the car operating panel 10, the floor terminal 8 can have a plurality of individually numbered buttons or numbered fields on a touch panel, which can also be provided with floor labels. Upon entering such a destination call, the elevator controller registers the information specifying the floor of entry and the destination floor. Inside the elevator car 14b, the user 2 has not entered a destination floor, and any in-car operating panel typically does not provide such an input of a destination floor.

[0025] In addition to the elevator system, the building system 1 can comprise a physical access control system configured to control whether the user 2 is authorized to access the restricted access area 5 and / or to use the elevator service. An access controller (ACS) controls the operation of the access control system. The elevator system and the physical access control system, or their respective functionalities, can be integrated into a single system. In Figure 1 In the present embodiment and for illustrative purposes, the elevator controller and the access controller are shown as comprised in a controller system 18 controlling the building system 1, as indicated by the arrow 26. However, depending on the different buildings, the access controller is contemplated to be optional. If provided in the building, the access controller grants the user 2 the right to access the restricted access area 5 and / or the elevator service, for example, if a presented credential by the user 2 is valid.

[0026] The restricted access area 5 can be an elevator lobby, where the user 2 can go to and from one or more elevator cars 14. In Figure 1 In the present embodiment, the entrance 12 separates the public area 3, which is not access restricted, from the access restricted area 5, where the gate 17 (with or without a physical barrier, such as a door, a turnstile, a cross-turnstile) controls access to the restricted access area 5 at the entrance 12. In one embodiment, the gate 17 and the floor terminal 8 can be arranged close to each other or arranged in a common structure or housing, as shown in Figure 1 In another embodiment, the gate 17 can be omitted if the elevator lobby is not access controlled; the elevator lobby can then be considered as the public area 3, where the interior of the elevator cars 14 can be considered as the restricted access area 5. It is contemplated that the building can have one or more public areas 3 and / or one or more restricted access areas 5, and any arrangement of these areas 3, 5 is building specific. In the following, emphasis is put on the case where the building has one public area 3 and one restricted access area 5, as shown in Figure 1The user 2 requesting elevator service in the illustrated building environment is used to describe embodiments of the present technology. However, the skilled person realizes that the technology described herein is independent of the particular building environment.

[0027] In the embodiments described herein, the user 2 presents a credential using a mobile communication device 20 carried by the user 2, wherein the credential is represented using an optical code, in particular a Quick Response (QR) code. The mobile communication device 20 can be configured as a smartphone that is typically used for, e.g., making phone calls, accessing the Internet, taking pictures, scanning barcodes or QR codes, and executing various other specialized software applications, also referred to as “apps”. The software application can be a mobile application that the user 2 installs, e.g., after downloading from an app store, i.e., a digital distribution platform for computer software; the software application can also be an offline web application that is accessed via browser software. The mobile communication device 20 (smartphone) has a camera 19 and a display 21, which can be configured as a touch screen allowing the user 2 to interact with the mobile communication device 20. The application, once executed by the mobile communication device 20, controls the communication device 20 to generate a graphical user interface (also referred to as “GUI”) that is displayed on the display 21. The credential and the application used in connection with the technology described herein will be described in more detail below.

[0028] As mentioned above, the building system 1 can be configured to operate in accordance with at least one of the mentioned system implementations and control technologies. Depending on the configuration of the building system, at least one credential acquisition device 9 can be provided on the building floors and / or in the elevator cars 14a. The credential acquisition device 9 can be provided instead of the floor terminals 6a, 6b, 8, e.g., at the time of installation of the building system 1, or in addition to the floor terminals 6a, 6b, 8, e.g., at the time of installation of the building system 1 or at a later time in connection with a modernization of the building system 1. For illustration purposes, Figure 1 Several credential acquisition devices 9 and floor terminals 6a, 6b, 8 that can be used independently of the credential acquisition devices 9 are shown.

[0029] Referring again to the right side of Figure 1 , each of the elevator cars 14a comprises such a credential acquisition device 9. The acquisition device 9 can be integrated in the car operating panel 10 or can be a separate component, e.g., arranged in the vicinity of the car operating panel 10. In one embodiment, such an acquisition device 9 is also provided on the floors, integrated in the floor terminals 6a or arranged in the vicinity of the floor terminals 6a. Referring to the left side of Figure 1 , the acquisition device 9 is integrated in or arranged in the vicinity of each of the floor terminals 8. It is contemplated that each acquisition device 9 is communicatively coupled to the controller system 18.

[0030] Each acquisition device 9 is configured to acquire an optical code displayed on a user's mobile communication device 20. The acquisition device 9 includes an optical sensor (e.g., a sensor array) and a processor that decodes the information contained in the optical code. In one embodiment, the optical code is a QR code, and the acquisition device 9 is configured to read the QR code; accordingly, the acquisition device 9 includes a QR code reader, such as the commercially available types MX86 or QT660 (Beijing Vguang Technology Co., Ltd.). In some embodiments, the acquisition device 9 includes a logic controller (e.g., UNO-2271G (Advantech Co., Ltd.)) and an I / O controller (e.g., ADAM-6060 (Advantech Co., Ltd.)), wherein the QR code reader is connected to the logic controller via a digital interface (e.g., a USB interface), and wherein the logic controller is connected to the I / O controller via an Ethernet connection. In one embodiment, if the acquisition device 9 is arranged in an elevator car 14a of a lift / lower control elevator system, the I / O controller can be connected to the car operating panel 10 or a bus connected to the controller system 18; the I / O controller outputs a signal indicating the destination floor selected by the user. Accordingly, the I / O controller of the acquisition device 9, if used in a destination call control elevator system, outputs signals indicating the landing floor and the destination floor. Other implementations with or without an I / O controller or logic controller, as well as components from other manufacturers, are contemplated. Furthermore, it is contemplated that decoding of the QR code may be performed by the acquisition device 9 and / or by the controller system 18.

[0031] exist Figure 1In an embodiment, the building system 1 includes a registration computer system 4. The registration computer system 4 includes a processing unit 28 (CPU), a user interface 32 (UI) (e.g., a computer monitor connected to a keyboard or touch screen that generates a GUI), and a communication interface 30 (COM). The communication interface 30 couples the registration computer system 4 to a communication network 22 (NW), which communicatively couples the registration computer system 4 to the controller system 18 and a data storage device 24 (DATA). The data storage device 24 can be any device configured to store digital data, such as a hard disk drive (HDD) or CD / DVD drive, a semiconductor drive / solid state drive (SSD), or a combination thereof, or other digital data storage device for digital data storage. In one embodiment, the communication network 22 can include a wired communication bus (e.g., Ethernet); alternatively, wireless (radio frequency) technology, or a combination of wired and wireless technologies, can be used. Communication via the wired communication bus can follow LON, BACnet, or another serial bus protocol. Any other known technology for communication via a wired network can be used. Communication between connected entities (e.g., registration computer system 4, controller system 18, and data storage device 24) can use bus addresses. In one embodiment, a unique identifier (e.g., device code, MAC address, IP address) is assigned to each of these entities.

[0032] At least one system component of the registration computer system 4 (e.g., user interface 32) is located in the public area 3 so that it is accessible to users 2. In one embodiment, at least the user interface 32 can be included in a housing to form a lobby terminal that is configured to be mounted on the lobby floor or mounted to a lobby wall. The lobby terminal can be configured as a self-service terminal that allows users 2 to self-register. In another embodiment, at least the user interface 32 can be located at the front desk where building personnel (receptionist, security personnel) register users 2.

[0033] The user interface 32 comprises, for example, a display device and is configured to display an input mask 34 having various fields 35 to 41 thereon. Figure 2One embodiment of an input mask 34 is shown. During the registration process, these fields 35 to 41 are filled in based on user 2 providing the requested information and / or registration computer system 4 generating corresponding information. Registration of user 2 includes, for example, recording a user profile, which may include at least one of the following: user identification (e.g., name and / or affiliation) (fields 35, 36), the floors to which user 2 is authorized to access (access rights), the name or identifier of the floor (e.g., lobby, parking lot, restaurant, etc.) (fields 39, 40), the expiration time or date of the access rights (fields 37, 38), an encryption key, and a site or building identifier. In certain embodiments, the user profile may store a history of the user's travel or calls within the building. The user profile may be stored in registration computer system 4 and / or data storage device 24.

[0034] As described in more detail below, once user 2 is enrolled, enrollment computer system 4 generates an activation code and outputs the activation code, for example, via user interface 32. In the embodiment described in more detail herein, the activation code is displayed on user interface 32 ( Figure 2 The activation code is displayed as an optical code (e.g., as a QR code) on the field 41 in the figure so that the user 2 can scan it using the mobile communication device 20, for example, using the camera 19 of the mobile communication device 20. In another embodiment, the activation code can be sent to the user's mobile communication device 20 (e.g., the user interface 32 using NFC or Bluetooth technology).

[0035] If the activation code is generated with an expiration time or date in mind, the activation code expires at the expiration time or date specified in fields 37, 38. After expiration, the activation code can no longer be used. In one embodiment, any activation code stored in the user profile can be marked as invalid. In addition, the application on the mobile communication device 20 is configured to prevent the activation code from being stored on the mobile communication device 20 for possible future use after the set expiration time or date.

[0036] exist Figure 1In the illustrated scenario, the technology described herein can advantageously be used to operate the building system 1 without the user 2 touching a common, possibly bacteria / virus-contaminated button or touchscreen, so that the user 2 feels more confident about using the service or services provided by the building system 1. Moreover, the activation code used according to the technology described herein provides substantially all information required for using the service. The user’s mobile communication device 20 does not need an active radio communication connection with the building system 1, i.e. the user’s mobile communication device 20 is offline for using the service. To summarize and by way of example, the building system 1 according to one exemplary embodiment, the registration computer system 4 generates and stores an activation code for a user 2 requesting an elevator service. The activation code, in particular in the form of a QR code, encodes user information including at least one of a user identification, an encryption key, and access rights of the user 2 in the building including any expiration date or time. The user 2 uses the mobile communication device 20 and an installed software application (APP) to scan the activation code. The application generates a graphical user interface 23 on the display 21 of the mobile communication device 20, wherein the display content of the graphical user interface 23 is determined by the encoded user information of the activation code; for example, only identifiers of those floors are displayed that the user 2 is allowed to access (e.g. floor names or floor numbers). The display content further includes an optical voucher, in particular in the form of a QR code. To request the elevator service, the user 2 brings the mobile communication device 20 to the voucher acquisition device 9 so that the optical voucher can be scanned. In response to determining that the presented voucher is valid, the building system 1 causes the elevator service to be performed according to one of the above-described control techniques.

[0037] While certain embodiments of the technology disclosed herein are described with reference to QR codes and devices configured to scan or read QR codes, it is contemplated that another type of optical code can also be used, e.g. a 2D code (e.g. a stacked 2D code, a DataMatrix code, an Aztec code, or a dot code) or a color code as described in WO 2015 / 049186 Al. Moreover, it is contemplated that the software application of the mobile communication device 20 can display a static or a dynamic optical voucher. To display a dynamic optical voucher, e.g. a dynamic QR code, the software application generates a new optical voucher at a set frequency, e.g. every minute. Such a dynamic optical voucher can be used to limit the copying of the optical voucher and sharing the optical voucher with other users.

[0038] As described above, the activation code encodes an encryption key that is a unique system-generated key; that is, the enrollment computer system 4 generates an encryption key specific to user 2 and the immediate elevator service request, approximately when the activation code is generated for user 2. Once generated, this encryption key is stored along with the user profile in the enrollment computer system 4 or data storage device 24. Thus, the activation code provides the encryption key that is transmitted to the mobile communication device 20; thus, the activation code essentially instructs the mobile communication device 20 (or its application) on how to encode the optical credential. According to the techniques described herein, the mobile communication device 20 then uses the encryption key to encode the optical credential. After the optical credential has been read by the credential acquisition device, the encryption key is used by the building system's controller system to verify the optical credential. A valid encrypted optical credential can only be generated by that specific mobile communication device 20. This also limits the duplication of the optical credential and its sharing with other users. Furthermore, the techniques described herein provide improved security for the entire building system 1 in the event that the activation code and / or optical credential are hacked. Because the encryption key is unique and specific to User 2 and the immediate service request (specifically, because the registration computer system generates a new and independent encryption key for each elevator service request), obtaining the encryption key only affects the attacked activation code or optical credential, and not other codes or credentials.

[0039] Refer to the above understanding Figure 1 and Figure 2 The basic system components and their functions are described below in conjunction with Figure 3 A description is provided of an exemplary method of operating a building system 1. The description is made with reference to a user 2 who wants to use an elevator in a building. The exemplary method shown begins in step S1 and ends in step S9.

[0040] At step S2, user 2 is detected. User 2 may be detected by the registration computer system 4 when user 2 at the self-service terminal or a receptionist at the front desk begins interacting with the registration computer system 4. The self-service terminal may be in an inactive or standby state, for example, and activated by user 2. The interaction may include, for example, touching the user interface 32 and / or selecting a touch-sensitive field for a new registration or a touch-sensitive field for a recurring user.

[0041] The process proceeds to step S3 to determine whether a new registration has been requested. If a new registration has been requested, the process proceeds along the "Yes" branch to step S5. If user 2 is considered a frequent or known user (i.e., user 2 who requested elevator service prior to the immediate request), a new registration is not required, for example, because user 2 lives or works in the building or is a frequent visitor. In this case, the process proceeds along the "No" branch to step S4.

[0042] At step S5, a new user profile is created for user 2. Figure 2 As illustrated by the input mask 34 shown, during the registration process, fields 35 to 41 are filled in based on user 2 providing requested information and / or registration computer system 4 generating corresponding information. The user profile may include at least one of the following: an identification of the user (e.g., name and / or affiliation, user ID) (fields 35, 36), the floors to which user 2 is authorized to access (access rights), the name or identifier of the floor (e.g., lobby, parking lot, restaurant, etc.) (fields 39, 40), an expiration time or date for the access rights (fields 37, 38), an encryption key, and a site or building identifier.

[0043] For such a regular user 2 , a user profile may already be stored in the building system 1 .

[0044] If user 2 is a frequent user, then in step S4, the user's existing (stored) user profile is retrieved. In order to retrieve the stored user profile, the user's name or user ID needs to be entered. With this information, the registration computer system 4 can search the user profile.

[0045] Proceeding to step S6, any activation code previously generated and stored in the user profile is reset; the activation code is invalid and can be deleted from the user profile.

[0046] At step S5 and, after step S6, at step S7, an activation code is generated. The generation of the activation code is user-specific and based on information contained in the user profile. The contents of the activation code are stored in the enrollment computer system 4 and / or the data storage device 24. When the building system 1 and / or the enrollment computer system 4 are configured, or at any other time, it can be specified which information of the user profile is to be encoded in the activation code. Figure 2 . In one embodiment, processing unit 28 executes a software program that reads information from a user profile, uses the information to create a data string to be encoded, and encodes the information into a QR code. The software program is also referred to as a QR code generator.

[0047] Proceed to step S8, release the activation code. Release the activation code so that the activation code can be used by user 2. As described above, in one embodiment, the activation code is displayed on the user interface 32 ( Figure 2 The QR code in the field 41 in the image is displayed so that the user 2 can use the mobile communication device 20 to scan the activation code. Once the activation code is issued, Figure 3 The method shown and relating to one aspect of operating the building system 1 ends at step S9.

[0048] The following will refer to Figures 4A to 6B The use of an activation code obtained by a user's mobile communication device 20 is described. In conjunction with these figures, it is assumed that the registration computer system 4 generates and issues an activation code for user 2, and user 2 activates the software application of mobile communication device 20. During the registration process, the user's access rights and the validity (expiration) of the activation code are set. Figures 4A to 6B , the display 21 of the mobile communication device 20 displays various embodiments of a graphical user interface 23 (GUI 23) at different stages of use of the mobile communication device 20 by the user 2. It is contemplated that an application executing on the mobile communication device 20 controls the GUI 23.

[0049] Figures 4A to 4D The use of a mobile communication device 20 in conjunction with a building system 1 operating according to conventional lift / lower control techniques is shown. Figure 1 As shown on the right side of FIG, the building system 1 is equipped with a floor terminal 6a, a car operating panel 10 and a credential acquisition device 9 on the floor and in the elevator car 10.

[0050] exist Figure 4A In FIG. 4 , the GUI 23 displays a field 44 (Activation Code) that the user 2 can touch to scan the activation code issued by the registration computer system 4. At this time, the user 2 may be standing at a self-service terminal or a reception desk. In response to the activation code having been scanned, the GUI 23 displays a field 45 indicating an upward direction symbol and a downward direction symbol, such as Figure 4B The symbol may be a triangle, an arrow, or any other directional symbol. In some embodiments, the symbol may be supplemented by or replaced with letters or text. For example, when approaching or in front of an elevator (elevator car 14a), user 2 may touch Figure 4B Select the direction of travel by pressing one of the symbols shown.

[0051] exist Figure 4C In the illustrated embodiment, the GUI 23 displays a field 45 indicating the user-selected direction of travel (here, up) and a field 47 containing a QR code. The QR code encodes the selected direction of travel and at least one of the aforementioned access rights and validity information. To call an elevator to the entry floor, the user 2 holds the mobile communication device 20 to the credential acquisition device 9 near the floor terminal 6a so that the QR code can be read. In response to the elevator call, the controller system 18 causes the elevator car 14a to move, for example, to the entry floor so that the user 2 can board the elevator car 14a there.

[0052] refer to Figure 4DOnce user 2 is in elevator car 14a, user 2 can touch display 21, and in response, GUI 23 displays a field 49 containing a list of floors from which user 2 can select a desired destination floor. GUI 23 generates the list of floors based on the access rights assigned to user 2 and encoded in the activation code. Thus, the list contains only the floors that user 2 is permitted to access.

[0053] Each floor can be numbered (such as Figure 4D The floor list is represented by a number (e.g., a matrix or a ring / wheel) or any other identifier suitable for distinguishing between floors. It is contemplated that instead of a list, any other representation of floors may be implemented, for example in the form of a matrix or a ring / wheel. The application and / or GUI 23 is configured to allow the user 2 to scroll through the list until the desired destination floor is displayed. The user 2 may then touch the number of the desired destination floor. Figure 4D In the example shown, the selected floor number "3" is shaded. In response, GUI 23 displays a field 48 containing a QR code. The QR code encodes the selected destination floor and at least one of the aforementioned access rights and validity information. To enter the destination floor, user 2 holds mobile communication device 20 to credential acquisition device 9 in elevator car 14a so that the QR code can be read. In response, controller system 18 causes elevator car 14a to move from the landing floor to the destination floor.

[0054] Figure 5A and Figure 5B The use of a mobile communication device 20 is shown in conjunction with a building system 1 which also operates according to conventional lift / lower control techniques. Figure 1 As shown on the right side of , the building system 1 is equipped with a floor terminal 6b, a car operating panel 10 and a credential acquisition device 9 in the elevator car 14a (only) in this embodiment. In this embodiment, the user 2 calls the elevator to the landing floor without using the mobile communication device 20. Instead, the user 2 needs to select and activate one of the direction symbols of the floor terminal 6b. To this end, the floor terminal 6b can be equipped with a proximity sensor (for example, one for each direction) that allows the user 2 to select a direction without actually touching the floor terminal 6b. As is known in the art, the proximity sensor can be configured as a capacitive proximity sensor or a photoelectric sensor, for example. Alternatively, the floor terminal 6b can have conventional direction buttons; however, in order to reduce the risk of spreading bacteria and / or viruses, the user 2 may need to wear gloves to touch the buttons or use his elbow to press the buttons.

[0055] exist Figure 5A , the GUI 23 displays field 44 (activation code), as shown above with reference to Figure 4A Then, the GUI 23 displays fields 50, 51, as shown in FIG. Figure 5BThese fields 50 and 51 correspond to the above reference Figure 4D After selecting the desired destination floor, user 2 may present the displayed QR code (field 50) to credential acquisition device 9 in elevator car 14a so that the QR code can be read. In response, controller system 18 causes elevator car 14a to move from the landing floor to the destination floor.

[0056] Figure 6A and Figure 6B The use of a mobile communication device 20 in conjunction with a building system 1 operating according to destination call control technology is shown. Figure 1 As shown on the left side of FIG, the building system 1 is equipped with a floor terminal 6 (or floor terminal 8) and a credential acquisition device 9 on each floor in this embodiment. Figure 6A , the GUI 23 displays field 44 (activation code), as shown above with reference to Figure 4A Then, the GUI 23 displays fields 52, 53, as shown in FIG. Figure 6B shown.

[0057] When user 2 is on the landing floor, user 2 selects a desired destination floor from the floors displayed in field 53. In response, GUI 23 generates a QR code that is displayed in field 52. After selecting the desired destination floor and while still on the landing floor, user 2 can present the displayed QR code (field 52) to credential acquisition device 9 located on the landing floor (outside of elevator car 14) so ​​that the QR code can be read. In response, controller system 18, for example, causes elevator car 14 to move to the landing floor to allow user 2 to log into elevator car 14 and then move from the landing floor to the destination floor.

Claims

1. A building system (1) having an elevator system (1), comprising: a controller system (18) configured to control the elevator system (1) to move elevator cars (14) between floors of a building; A registration computer system (4) communicatively coupled to the controller system (18), wherein the registration computer system (4) is configured to generate an activation code for a user (2) requesting elevator service, store data associated with the activation code, and make at least one system component (32) of the registration computer system (4) user-accessible within a public area (3) of the building, wherein the activation code encodes user information including at least one of a user identification, an encryption key, and access rights of the user (2) in the building, and is configured to be activated when provided to a mobile device of the user (2) located near the at least one system component (32). a communication device (20), activating a software application APP installed on and executable by the mobile communication device (20), wherein the activated software application APP is configured to generate a graphical user interface (23) on a display (21) of the mobile communication device (20), wherein the display content of the graphical user interface (23) is predetermined only by the encoded user information of the activation code, wherein the software application APP is configured to generate an optical credential (47, 48, 50, 52) when the user (2) specifies the elevator service, wherein the optical credential (47, 48, 50, 52) includes the user information; and a credential acquisition unit (9) communicatively coupled to the controller system (18) and configured to acquire the optical credential (47, 48, 50, 52) from the mobile communication device (20) presented to the credential acquisition unit (9) by the user (2), wherein the controller system (18) is configured to cause the elevator system (1) to perform the designated elevator service upon determining that the optical credential (47, 48, 50, 52) is valid.

2. The building system (1) according to claim 1, wherein The controller system (18) is configured to control the elevator system (1) according to a raise / lower control technique, wherein a first credential acquisition unit (9) is arranged on a building floor to provide input for a floor call specifying a direction of travel and calling an elevator car (14a) to the building floor, and wherein a second credential acquisition unit (9) is arranged in the elevator car (14a) to provide input for a car call specifying a destination floor.

3. The building system (1) according to claim 1, wherein The controller system (18) is configured to control the elevator system (1) according to an up / down control technique, wherein a first floor terminal (6b) having a direction button is arranged on a building floor to provide an input for a floor call specifying a direction of travel and calling an elevator car (14a) to the building floor, and wherein the credential acquisition unit (9) is arranged in the elevator car (14a) to provide an input for a car call specifying a destination floor.

4. The building system (1) according to claim 1, wherein The controller system (18) is configured to control the elevator system (1) according to a destination call control technique, and wherein the credential acquisition unit (9) is arranged on a building floor to provide input for a floor call specifying a destination floor and calling an elevator car (14) to the building floor.

5. The building system (1) according to any one of the preceding claims, further comprising a physical access control system configured to control access from the public area (3) to the restricted access area (5, 14) and to determine whether the optical credential (47, 48, 50, 52) is valid.

6. The building system (1) according to claim 1, wherein At least one system component of the registration computer system (4) located in a public area (3) of the building and accessible to users thereof is a user interface (32), wherein the user interface (32) is integrated into a self-service terminal located in the lobby of the building or is arranged at a reception desk operated by building personnel.

7. The building system (1) according to claim 6, wherein The user interface (32) is configured to display the activation code as a QR code (41).

8. The building system (1) according to claim 1, wherein The optical credentials ( 47 , 48 , 50 , 52 ) are displayed as QR codes.

9. The building system (1) according to claim 1, further comprising a communication network (22), wherein The enrollment computer system (4) and the controller system (18) are communicatively coupled to the communication network (22).

10. The building system (1) of claim 9, further comprising a data storage device (24) communicatively coupled to the controller system (18) to read data from the data storage device (24), wherein The data storage device (24) stores the activation code and the user information.

11. A method of operating a building system (1) having an elevator system, the building system (1) comprising a controller system (18) configured to control the elevator system (1), a registration computer system (4) communicatively coupled to the controller system (18), and a credential acquisition unit (9) communicatively coupled to the controller system (18), the method comprising: generating, by the registration computer system (4), an activation code based on information contained in a user profile stored for a user (2) requesting elevator service, wherein data associated with the activation code is stored in the registration computer system, wherein the activation code encodes user information, the user information including at least one of a user identification, an encryption key, and access rights of the user (2) in the building; issuing, by the registration computer system (4), on a system component (32) located in a public area (3) of the building accessible to a user of the registration computer system (4) for acquisition by a mobile communication device (20) of the user (2), wherein the acquired activation code activates a software application APP installed on and executable by the mobile communication device (20), wherein the activated software application APP generates a graphical user interface (23) on a display (21) of the mobile communication device (20), wherein the display content of the graphical user interface (23) is predetermined solely by the encoded user information of the activation code, wherein the software application APP further generates and displays an optical credential (47, 48, 50, 52) when the user (2) specifies an elevator service, wherein the optical credential (47, 48, 50, 52) includes the user information; acquiring, by the credential acquisition unit (9), the optical credential (47, 48, 50, 52) from the mobile communication device (20) presented by the user (2); and The controller system (18) controls the elevator system (1) to perform the designated elevator service when determining that the optical credential (47, 48, 50, 52) is valid.

12. The method according to claim 11, wherein Issuing the activation code includes displaying a QR code (41) using a user interface (32) of the enrollment computer system (4).

13. The method according to claim 12, wherein: Acquiring the optical credential (47, 48, 50, 52) includes reading a QR code displayed on a display (21) of the mobile communication device (20), wherein the QR code is generated by the software application APP based on user information contained in the QR code.

14. The method according to claim 11, wherein: The controller system (18) is configured to control the elevator system (1) according to a raise / lower control technique, wherein the elevator service specifies a direction of travel or a destination floor, or wherein the controller system (18) is configured to control the elevator system (1) according to a destination call control technique, wherein the elevator service specifies a destination floor.

15. The method according to claim 11, wherein In response to the activation code, the graphical user interface (23) displays predetermined content without obtaining additional information external to the mobile communication device (20).

Images