Elevator system

Abstract

An elevator system capable of managing entry of a mobile body to a safety floor. In an elevator system (1), a safety management device (22) manages a call registration restriction of a car (10) of an elevator (4) stopping at a safety floor. The safety management device (22) transmits an instruction to release the call registration restriction of the car (10) stopping at the safety floor to an elevator control device (17) upon receiving a legitimate release request for the call registration restriction toward the safety floor from a mobile body control device (3). The mobile body control device (3) transmits a call registration request of the car (10) stopping at the safety floor after transmitting the release request for the safety floor.

Description

Technical Field

[0001] This invention relates to elevator systems. Background Technology

[0002] Patent Document 1 discloses an example of an elevator system. The elevator system includes a mobile body and an elevator. The elevator is installed in a building with a safety floor. The elevator is wirelessly connected to the mobile body. When the mobile body enters the elevator car, it generates a car call registration request information setting the safety floor as the destination floor and wirelessly sends it to the elevator. Only the mobile body is permitted to enter the safety floor; general users are not permitted to enter. When the elevator receives the registration request information from the mobile body, if it identifies no general user through images from a camera installed inside the car, it registers the mobile body's car call.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2020-93883

[0004] In the elevator system described in Patent Document 1, access to the safe floor is restricted to moving bodies, thereby ensuring the safety of the safe floor. Therefore, in this elevator system, calls for the safe floor from moving bodies are registered without safety restrictions when there are no users present. That is, there is no management of moving bodies' access to the safe floor. Summary of the Invention

[0005] This invention relates to a solution to this problem. The invention provides an elevator system capable of managing the entry of moving bodies to secure floors.

[0006] The elevator system of the present invention comprises: a movement control device for controlling the movement of a movement body in a facility having multiple floors, the movement body being able to ride in an elevator car installed in the facility; an elevator control device for collecting elevator status information and controlling the operation of the elevator; a safety management device for managing call registration restrictions for the car stopping at safe floors among the multiple floors; and a relay device for relaying call registration requests sent from the movement control device to the elevator control device, and relaying registration responses to the registration requests and elevator status information sent from the elevator control device to the movement control device. When the safety management device receives a legitimate release request for the safe floor from the movement control device, it sends an instruction to the elevator control device to release the call registration restriction for the car stopping at the safe floor. After sending the release request for the safe floor, the movement control device sends the call registration request for the car stopping at the safe floor.

[0007] If it is the elevator system of the present invention, it is able to manage the entry of moving bodies to safe floors. Attached Figure Description

[0008] Figure 1 This is a structural diagram of the elevator system according to Implementation Method 1.

[0009] Figure 2 This is a diagram showing an example of the hardware structure of the main part of the elevator control device according to Embodiment 1.

[0010] Figure 3 This is a timing diagram illustrating an example of the operation of the elevator system according to Embodiment 1.

[0011] Figure 4 This is a timing diagram illustrating an example of the operation of the elevator system according to Embodiment 1.

[0012] Figure 5 This is a timing diagram illustrating an example of the operation of the elevator system according to Embodiment 1.

[0013] Figure 6A This is a flowchart illustrating an example of the operation of the elevator system according to Embodiment 1.

[0014] Figure 6B This is a flowchart illustrating an example of the operation of the elevator system according to Embodiment 1.

[0015] Figure 6C This is a flowchart illustrating an example of the operation of the elevator system according to Embodiment 1.

[0016] Figure 6D This is a flowchart illustrating an example of the operation of the elevator system according to Embodiment 1.

[0017] Label Explanation

[0018] 1: Elevator system; 2: Moving body; 3: Moving body control device; 4: Elevator; 5: Shaft; 6: Landing; 7: Landing control panel; 8: Landing display panel; 9: Landing controller; 10: Car; 11: Traction machine; 12: Main rope; 13: Car door; 14: Car control panel; 15: Car display panel; 16: Car controller; 17: Elevator control device; 18: Communication unit; 19: Landing transmission cable; 20: Car transmission cable; 21: Relay device; 22: Safety management device; 23: Verification terminal; 17a: ROM; 17b: RAM; 17c: EEPROM; 17d: CPU. Detailed Implementation

[0019] The embodiments for carrying out the present invention will be described with reference to the accompanying drawings. In the drawings, identical or equivalent parts are labeled with the same reference numerals, and repeated descriptions are simplified or omitted as appropriate. Furthermore, the present invention is not limited to the following embodiments, and any modifications or omissions of structural elements of the embodiments are possible without departing from the spirit of the invention.

[0020] Implementation Method 1

[0021] Figure 1 This is a structural diagram of elevator system 1 according to implementation method 1.

[0022] Elevator system 1 is applied to a facility. The facility may be an indoor facility, an outdoor facility, or a combination of both. The facility may consist of one or more buildings. The facility may also be part of a building. Multiple floors are provided within the facility.

[0023] Within the facility, mobile body 2 performs its functions. Multiple mobile bodies 2 may also operate within the facility. Mobile body 2 may be, for example, a robot or other device that moves autonomously within the facility. In this example, mobile body 2 is equipped with sensors and cameras. Mobile body 2 is equipped with user detection functions using sensors and cameras. In this example, the movement of mobile body 2 within the facility is remotely controlled by mobile body control device 3. Mobile body control device 3 may be, for example, a server device that manages the movement of mobile body 2 and the services provided by mobile body 2. Part or all of the functions of mobile body control device 3 may be configured within the facility or outside the facility. Part or all of the functions of mobile body control device 3 may be installed on a virtual machine of a cloud service or installed using storage or processing resources on a cloud service. Mobile body 2 communicates with mobile body control device 3 wirelessly. Mobile body 2 and mobile body control device 3 may be devices constituting part of elevator system 1 or external devices of elevator system 1.

[0024] Elevator system 1 includes elevator 4. Elevator 4 is installed in a facility. A shaft 5 for elevator 4 is provided within the facility. Shaft 5 is a space extending through multiple floors, with the vertical direction defined as the length direction. At least one floor in the facility is designated as a safety floor. Safety floors are floors for managing the entry of users as people and moving objects 2, etc. Multiple floors may be designated as safety floors in the facility. Users and moving objects 2, etc., utilize elevator 4 to move between multiple floors in the facility.

[0025] In the facility, elevator 4 has landings 6 on each floor. Landings 6 are adjacent to the hoistway 5. Each landing 6 has a landing control panel 7, a landing display panel 8, and a landing controller 9. The landing control panel 7 is a device that receives operations from users located at landing 6. The landing control panel 7 includes, for example, landing call buttons with indicator lights. The landing display panel 8 is a device that displays information about elevator 4 to users located at landing 6. The landing display panel 8 includes, for example, analog indicators, digital indicators, and a destination floor display. The landing controller 9 is a device that controls the landing control panel 7 and landing display panel 8 located at landing 6. The landing controller 9 is electrically connected to the landing control panel 7 and landing display panel 8, for example, via a UART (Universal Asynchronous Receiver / Transmitter).

[0026] Elevator 4 includes a car 10, a traction machine 11, and a main rope 12. The car 10 is located inside the hoistway 5. The car 10 is a device that travels vertically within the hoistway 5, thereby transporting users and other passengers within the car 10 between multiple floors of the facility. The load of the car 10 is supported by the main rope 12. The main rope 12 is wound around the drive sheave of the traction machine 11. The traction machine 11 is located, for example, in the hoistway 5 or the machine room of elevator 4. The traction machine 11 winds the main rope 12, etc., by rotating the drive sheave, causing the car 10 to travel vertically within the hoistway 5.

[0027] The car 10 includes a car door 13, a car operation panel 14, a car display panel 15, and a car controller 16. The car operation panel 14 and the car display panel 15 are located inside the car 10. The car door 13 is the door that divides the interior and exterior of the car 10. The car door 13 is a device that opens and closes when the car 10 stops at any floor, allowing users to board and alight between the floor 6 and the car 10. The car operation panel 14 is a device that receives operations from users located inside the car 10. The car operation panel 14 includes, for example, destination floor buttons with indicator lights. The car display panel 15 is a device that displays elevator 4 information to users located inside the car 10. The car display panel 15 includes, for example, analog indicators, digital indicators, and destination floor displays. The car controller 16 is a device that controls the car operation panel 14, car display panel 15, and other devices located in the car 10. The car controller 16 is electrically connected to the car operation panel 14 and the car display panel 15, for example, via a UART.

[0028] Elevator 4 has an elevator control device 17. The elevator control device 17 is installed, for example, in the hoistway 5 or the machine room of elevator 4. The elevator control device 17 is a device for controlling the operation of elevator 4. The elevator control device 17 has a communication unit 18. The communication unit 18 is responsible for communication between the elevator control device 17 and external devices. The communication unit 18 is electrically connected to the landing controller 9 via a landing transmission cable 19, for example, via a UART. The communication unit 18 is also electrically connected to the car controller 16 via a car transmission cable 20, for example, via a UART. The elevator control device 17 is electrically connected to the traction machine 11.

[0029] The elevator control device 17 controls the operation of the elevator 4, for example, by managing the calls registered in the car 10. The calls in the elevator 4 include calls from users or the moving body 2 to the departure floor and calls to the destination floor. A user's call to the departure floor is, for example, a floor call. For example, at the user's departure floor (floor 6), a floor call is made via the floor operation panel 7. A user's call to the destination floor is, for example, a car call. For example, in the car 10 the user is in, a car call is made via the car operation panel 14. When a user calls a floor that is not a safe floor as the departure or destination floor, the elevator control device 17 registers the user's call in the car 10. The elevator control device 17 controls the operation of the elevator 4, for example, by causing the car 10 to travel to the user's departure or destination floor, thus responding to the calls registered in the car 10.

[0030] Elevator system 1 includes a relay device 21. The relay device 21 may be located, for example, in a management room within the facility. The relay device 21 communicates with the mobile control device 3 via, for example, UDP / IP (User Datagram Protocol / Internet Protocol). The relay device 21 is electrically connected to the communication unit 18 of the elevator control device 17. The relay device 21 may be, for example, an elevator safety gateway device.

[0031] Elevator system 1 includes a safety management device 22. The safety management device 22 is, for example, located in a management room within the facility. The safety management device 22 communicates with a relay device 21, for example, via UDP / IP. The safety management device 22 is connected to the elevator control device 17, for example, via a parallel line or a serial line via the relay device 21. The safety management device 22 is a device for performing safety management within the facility. For example, the safety management device 22 manages restrictions on the registration of calls to the elevator control device 17 for calls to the car 10 stopping at a safe floor. In this example, the elevator control device 17 restricts the registration of calls to the car 10 stopping at a safe floor by users who are not authorized to access the safe floor. Here, a call to the car 10 stopping at a safe floor is a call that sets the safe floor as the departure floor or the destination floor. The safety management device 22 outputs a restriction release command signal to the elevator control device 17, thereby releasing the restriction on the registration of calls to the elevator control device 17 for calls to the car 10 stopping at a safe floor. In addition, the safety management device 22 outputs a restriction restoration command signal to the elevator control device 17, thereby restoring the registration restriction of the elevator control device 17 for the call of the car 10 stopping at a safe floor.

[0032] A verification terminal 23 is installed in the facility. The verification terminal 23 is, for example, a terminal device that reads verification information from a verification medium held by the user. The verification medium is, for example, an information storage medium such as a card or key. The verification information is, for example, an ID (IDentifier) ​​identifying the user. In the elevator system 1, the verification information may include, for example, security permissions related to whether or not access to a safe floor is permitted.

[0033] The safety management device 22 is communicatively connected to the verification terminal 23. Based on the user's verification information and associated security permissions read by the verification terminal 23, the safety management device 22 determines whether to authorize the user to enter the secure floor. For example, when reading the verification information of a user authorized to enter the secure floor, the safety management device 22 sends a command signal to the elevator control device 17 to lift the restriction on the user's legitimate call registration towards the secure floor. After registering the user's legitimate call, the safety management device 22 sends a command signal to the elevator control device 17 to restore the restriction on the call registration towards the secure floor.

[0034] The mobile body 2 sends its call registration request for the departure or destination floor to the communication unit 18 of the elevator control unit 17 via the mobile body control device 3 and the relay device 21. When the elevator control unit 17 receives a call registration request from the mobile body 2 that sets a floor that is not a safe floor as the departure or destination floor, it registers the call of the mobile body 2 in the car 10. Here, the call registration request made by the mobile body 2 includes verification information that identifies the mobile body 2. In the elevator system 1, the verification information of the mobile body 2 may include, for example, security permissions related to whether or not it can enter a safe floor.

[0035] The communication unit 18 can read the communication between the relay device 21 and the car operation panel 14 via the car transmission cable 20. Therefore, it can obtain information such as whether the destination floor buttons on the car operation panel 14 inside the car 10 have been operated through serial transmission. More specifically, when the user operates the destination floor button on the car operation panel 14, the communication unit 18 and the relay device 21 detect that the button has been operated by illuminating the button. In addition, sometimes a prohibition signal that prohibits call registration for the corresponding destination floor based on the operation of the destination floor button is transmitted from the elevator control device 17 to the car operation panel 14. At this time, the communication unit 18 and the relay device 21 can also obtain the prohibition signal. Furthermore, a prohibition signal that prohibits call registration for a certain floor as the destination floor is transmitted to the car operation panel 14 of the car 10, for example, when the car 10 is stopped at that floor.

[0036] The relay device 21 continuously transmits the elevator call information of the moving body 2 for the destination floor, etc., to the car control panel 14 and the car display panel 15 via the elevator control device 17 and the car transmission cable 20. The communication unit 18 can read the communication between the relay device 21 and the car control panel 14 via the car transmission cable 20, and therefore can obtain information related to all indicator codes of each indicator in the car 10 through serial transmission or the like.

[0037] The relay device 21 continuously transmits the elevator call information of the moving body 2 for the departure floor, etc., to the landing operation panel 7 and the landing display panel 8 via the elevator control device 17 and the landing transmission cable 19. The communication unit 18 can read the communication between the relay device 21 and the landing operation panel 7 via the landing transmission cable 19, and therefore can obtain information related to all indicator codes of each indicator of the landing 6 through serial transmission or the like.

[0038] Here, in the elevator control device 17 of elevator 4, each floor of the facility is managed by an elevator management floor. An elevator management floor is, for example, a floor number assigned to each floor in elevator 4. Similarly, in the mobile body control device 3, each floor of the facility is managed by a building management floor. A building management floor is, for example, a floor number assigned to each floor in a system including mobile body 2.

[0039] The communication unit 18 transmits the elevator management floor information to the mobile body control device 3 based on the elevator management floor check indicator code and the elevator management floor. The mobile body 2 switches from the elevator management floor to the building management floor, thereby enabling the identification of the departure floor and destination floor for the elevator call registration request, as well as the current position of the car 10.

[0040] Based on call information for destination floors received from the relay device 21, the car control panel 14 instructs the destination floor buttons to light up according to the physical connection sequence of the buttons, starting from the lowest floor and following the call information for lighting up or turning off. As a result, the destination floor button corresponding to the destination floor is lit up.

[0041] The destination floor display on the car display panel 15 determines the elevator management floor whose destination floor button has been illuminated based on call information received from the relay device 21. The destination floor display retrieves the indicator code from the floor table information for the illuminated elevator management floor. The destination floor display shows the name of the floor corresponding to the indicator code as the name of the destination floor. Then, the elevator control device 17 moves the car 10 towards the destination floor. During this time, the elevator control device 17 continuously sends the indicator code corresponding to the current position of the car 10 to the car 10 via the car transmission cable 20. The same applies to analog indicators.

[0042] Based on information obtained from the elevator control device 17 via the relay device 21, the mobile body 2 or the mobile body control device 3 identifies that the car 10 has arrived at the departure floor of the mobile body 2. At this time, for example, the mobile body control device 3 outputs a door opening request to the communication unit 18 so that the mobile body 2 can board the car 10. The communication unit 18 transmits the door opening request to the car operation panel 14 via the elevator control device 17 via serial or parallel transmission, thereby realizing the opening control of the car door 13 by the mobile body 2. The communication unit 18 can read the communication between the elevator control device 17 and the car operation panel 14 via the car transmission cable 20, so it can obtain information on whether the door opening and closing buttons of the car operation panel 14 inside the car 10 have been operated via serial transmission or the like. Based on the obtained information, the communication unit 18 transmits door opening and closing information via the relay device 21 and the mobile body control device 3, thereby enabling the mobile body 2 to confirm the opening of the car door 13. At this time, for example, the mobile body control device 3 outputs a door opening request at a preset time, thereby maintaining the opening of the car door 13. The same applies to the request related to closing the car door 13 after the mobile body 2 has boarded the car 10.

[0043] Next, use Figure 2 An example of the hardware structure of the elevator control device 17 will be described.

[0044] Figure 2 This is a diagram showing an example of the hardware structure of the main part of the elevator control device 17 according to Embodiment 1.

[0045] The elevator control device 17 includes a ROM 17a (Read Only Memory), a RAM 17b (Random Access Memory), an EEPROM 17c (Electrically Erasable Programmable Read-Only Memory), and a CPU 17d (Central Processing Unit). The ROM 17a stores the program executed on the elevator control device 17. The RAM 17b stores, for example, information used for operations such as temporary storage of communication packet data. The EEPROM 17c stores information such as instruction data and instruction response data for playback. The CPU 17d executes the program stored in the ROM 17a and communicates with the moving body control device 3 and the relay device 21. Thus, the various functions of the elevator control device 17 are implemented by a processing circuit that includes storage devices such as ROM 17a, RAM 17b, and EEPROM 17c, and a processing unit such as the CPU 17d. Part or all of the processing circuitry can also be constructed using dedicated hardware. Part or all of the processing circuitry can also be composed of software or firmware.

[0046] Similar to the elevator control device 17, the functions of various devices in the elevator system 1, such as the moving body control device 3, the relay device 21, and the safety management device 22, are also realized through the processing circuits mounted on each device.

[0047] In elevator system 1, for example, each device such as elevator control device 17, moving body control device 3, relay device 21, and safety management device 22 reads the program recorded in the recording medium and performs actions according to the program, thereby executing various functions. The recording medium for recording the program may be, for example, a recording medium built into the processing circuitry of each device, a recording medium connected to each device, or a recording medium whose information is read by a reading device such as a driver of each device. The program may also be a software package containing multiple software programs that perform actions on multiple devices constituting elevator system 1.

[0048] Next, use Figure 3 An example of the operation of the elevator system 1 when the moving body 2 rides on the car 10 from the departure floor, which is a safe floor, will be explained.

[0049] Figure 3 This is a timing diagram illustrating an example of the operation of elevator system 1 according to embodiment 1.

[0050] When the mobile body 2, which uses elevator 4 to move between floors, arrives at the departure floor station 6, it entrusts the mobile body control device 3 to send an elevator call registration request. The mobile body control device 3 outputs the elevator call registration request of the mobile body 2 for the departure floor to the relay device 21.

[0051] The relay device 21 determines, for example, whether the departure floor for which the call registration request to the moving body control device 3 has been made is a safe floor. The relay device 21 transmits the call registration request from the moving body control device 3 to the elevator control device 17. Then, based on signals obtained from the elevator control device 17, if the button lights on the landing control panel 7 or the car control panel 14 are still off, the relay device 21 determines that the departure floor of the moving body 2 is a safe floor. Alternatively, if the elevator control device 17 outputs a prohibition signal prohibiting call registration for the departure floor of the moving body 2, the relay device 21 determines whether the departure floor of the moving body 2 is a safe floor based on that prohibition signal. If the departure floor of the moving body 2 is a safe floor, the relay device 21 instructs the moving body control device 3 to request a safety release.

[0052] The mobile body control device 3, receiving instructions from the relay device 21, confirms whether the mobile body 2 is located at the departure floor's landing station 6. If the mobile body 2 is not located at the departure floor's landing station 6, the mobile body control device 3 controls the mobile body 2 to move it to the departure floor's landing station 6. On the other hand, if the mobile body 2 is located at the departure floor's landing station 6, the mobile body control device 3 sends a release request for the departure floor as a safe floor to the safety management device 22. In this case, the mobile body control device 3 can also send the release request via the relay device 21. The safe floor release request output from the mobile body control device 3 may, for example, include verification information about the mobile body 2.

[0053] The relay device 21 sends the information on the current position of the car 10 received from the elevator control device 17 to the safety management device 22. The moving body control device 3 sends the information on the current position of the moving body 2 to the safety management device 22.

[0054] The security management device 22 verifies whether the security floor release request output from the mobile control device 3 is a legitimate request. For example, if the security management device 2 determines that the mobile 2 is permitted to enter the security floor based on the verification information of the mobile 2 included in the release request, then the security management device 22 determines that the release request is legitimate. If the release request is legitimate, the security management device 22 sends a release permission response to the mobile control device 3. Conversely, if the release request is not legitimate, the security management device 22 sends a release rejection response to the mobile control device 3. In this case, the security management device 22 may also send a response to the mobile control device 3 via the relay device 21.

[0055] When the safety management device 22 receives a valid release request from the moving body control device 3, it determines, for example, whether to send a release command for the safety floor restriction to the elevator control device 17 based on the current positions of the car 10 and the moving body 2. The safety management device 22 does not send a release command to the elevator control device 17 during the period before the moving body 2 reaches the departure floor (station 6) or after the car 10 reaches the departure floor. On the other hand, the safety management device 22 sends a release command to the elevator control device 17 during the period from when the moving body 2 reaches the departure floor (station 6) until the car 10 reaches the departure floor.

[0056] When the elevator control device 17 receives a restriction release instruction from the safety management device 22 based on a safety floor release request from the motion control device 3, it will not accept the registration signal from the car operation panel 14 that sets the safety floor as the destination floor. This prevents the user from registering a call for the safety floor through their own operation when the safety restriction has been released for the purpose of registering a call for the motion 2. The elevator control device 17 continues to release the safety floor until it receives a restriction restoration instruction from the safety management device 22.

[0057] If the mobile body control device 3 receives a response of safety release denial from the safety management device 22, it notifies the mobile body 2 of elevator call registration failure. On the other hand, if the mobile body control device 3 receives a response of safety release permission from the safety management device 22, it outputs the elevator call registration request of the mobile body 2 for the departure floor to the relay device 21.

[0058] The relay device 21 periodically receives the status of elevator 4 from elevator control device 17 and stores it in a storage unit (not shown). Here, the status of elevator 4 includes the illumination status of the button lights on landing 6 and car 10, the display status of the indicators on landing 6 and car 10, the travel status including information such as the direction of travel or no-direction stop of car 10, and the opening and closing status of car door 13. The relay device 21 transmits the status of elevator 4 received from elevator control device 17 to moving body control device 3 at regular intervals.

[0059] The relay device 21 determines the travel status of the car 10. For example, if the travel direction of the car 10 is the same as the direction of the moving body 2 from the departure floor to the destination floor, or if the car 10 stops without a direction, it requests a call registration from the moving body 2 to the elevator control device 17. The elevator control device 17 stops the car 10 at the departure floor of the moving body 2. If the travel direction of the car 10 is not the same as the direction of the moving body 2 from the departure floor to the destination floor, the relay device 21 continues to determine the travel status of the car 10.

[0060] When the elevator call registration is successful and the motion control device 3 detects that the car 10 has arrived at the departure floor, the motion control device 3 sends a restriction restoration request for the departure floor (which is a safe floor) to the safety management device 22. At this time, the motion control device 3 can also send the restriction restoration request to the safety management device 22 via the relay device 21. Upon receiving the restriction restoration request, the safety management device 22 sends a restriction restoration response to the motion control device 3, sending the restriction restoration instruction to the elevator control device 17. At this time, the elevator control device 17 resumes applying the safety restriction for the departure floor (which is a safe floor). Then, the motion control device 3 causes the motion 2 to board the car 10.

[0061] Here, if the elevator call registration is successful and the car 10 reaches the departure floor without sending a restriction restoration request from the movement control device 3, the relay device 21 sends a restriction restoration request for the departure floor (which is considered a safe floor) to the safety management device 22. Upon receiving the restriction restoration request, the safety management device 22 sends a restriction restoration response to the relay device 21 and the movement control device 3, and sends a restriction restoration instruction to the elevator control device 17. At this time, the elevator control device 17 resumes implementing safety restrictions on the departure floor (which is considered a safe floor). Thus, even if the movement control device 3 experiences an anomaly, a restriction restoration request is still output from the relay device 21, thereby ensuring the safety of the safe floor.

[0062] Next, use Figure 4 An example of the operation of elevator system 1 under conditions of communication delays, etc., will be explained.

[0063] Figure 4 This is a timing diagram illustrating an example of the operation of elevator system 1 according to embodiment 1.

[0064] Depending on the communication environment of the network connected to elevator system 1, communication delays such as communication packet delays may occur in the communication between safety management device 22 and elevator control device 17, or between mobile control device 3 and elevator control device 17. In this case, elevator control device 17 may sometimes receive a call registration request from mobile body 2 before the instruction to release the restriction on the safe floor is issued. To address this situation, relay device 21, when a call registration fails for elevator control device 17, retransmits the call registration request to elevator control device 17 up to a maximum number of times. Here, the maximum number of times is, for example, preset to 5 times. Relay device 21 detects call registration failure, for example, by illuminating the button lights on the landing operation panel 7 or car operation panel 14, or by using a prohibition signal that prohibits call registration for safe floors. When the number of retransmissions of the registration request reaches the maximum number, relay device 21 notifies mobile control device 3 of the call registration failure. At this time, mobile control device 3 notifies mobile body 2 of the failure and stops the movement of mobile body 2.

[0065] Next, use Figure 5 An example of the operation of the elevator system 1 when the moving body 2 descends from the car 10 at the destination floor, which is a safe floor, will be explained.

[0066] Figure 5 This is a timing diagram illustrating an example of the operation of elevator system 1 according to embodiment 1.

[0067] Before the mobile body 2 has boarded the car 10, from Figure 3 The elevator system 1 begins operation from the state of motion. The mobile body 2 entrusts the mobile body control device 3 to send an elevator call registration request for the destination floor. The mobile body control device 3 outputs the elevator call registration request for the destination floor from the mobile body 2 to the relay device 21.

[0068] The relay device 21 determines, in the same manner as in the case of the departure floor, whether the destination floor for which the call registration was requested from the mobile body control device 3 is a safe floor. If the destination floor of the mobile body 2 is a safe floor, the relay device 21 instructs the mobile body control device 3 to request a safety release.

[0069] The mobile body control device 3, receiving instructions from relay device 21, confirms whether the car 10 has stopped at the departure floor. If the car 10 has not stopped at the departure floor, the mobile body control device 3 outputs a call registration request for the departure floor to relay device 21. On the other hand, if the car 10 has stopped at the departure floor's landing 6, the mobile body control device 3 sends a release request to the safety management device 22, designating the destination floor as a safe floor. In this case, the mobile body control device 3 can also send the release request via relay device 21. The safe floor release request output from the mobile body control device 3 may, for example, include verification information from the mobile body 2.

[0070] The relay device 21 sends the information on the current position of the car 10 received from the elevator control device 17 to the safety management device 22. The moving body control device 3 sends the information on the current position of the moving body 2 to the safety management device 22.

[0071] The security management device 22 verifies whether the security floor release request output from the mobile control device 3 is a legitimate request. For example, if the security management device 2 determines that the mobile 2 is permitted to enter the security floor based on the verification information of the mobile 2 included in the release request, then the security management device 22 determines that the release request is legitimate. If the release request is legitimate, the security management device 22 sends a release permission response to the mobile control device 3. Conversely, if the release request is not legitimate, the security management device 22 sends a release rejection response to the mobile control device 3. In this case, the security management device 22 may also send a response to the mobile control device 3 via the relay device 21.

[0072] Upon receiving a valid release request from the moving body control device 3, the safety management device 22 determines, based on the current positions of the car 10 and the moving body 2, whether to send a release command for the safety floor restriction to the elevator control device 17, for example, as follows: The safety management device 22 does not send a release command to the elevator control device 17 during the period before the car 10 reaches the departure floor or after the car 10 reaches the destination floor. On the other hand, the safety management device 22 sends a release command to the elevator control device 17 during the period from when the car 10 reaches the departure floor until when the car 10 reaches the destination floor.

[0073] When the elevator control device 17 receives a restriction release instruction from the safety management device 22 based on a safety floor release request from the motion control device 3, it will not accept the registration signal from the car operation panel 14 that sets the safety floor as the destination floor. This prevents the user from registering a call for the safety floor through their own operation when the safety restriction has been released for the purpose of registering a call for the motion 2. The elevator control device 17 continues to release the safety floor until it receives a restriction restoration instruction from the safety management device 22.

[0074] If the mobile body control device 3 receives a safety release denial response from the safety management device 22, it notifies the mobile body 2 of a call registration failure. Conversely, if the mobile body control device 3 receives a safety release permission response from the safety management device 22, it outputs a request to continue opening the car door 13 and a call registration request from the mobile body 2 for the destination floor to the relay device 21. The relay device 21 relays the request to continue opening the door to the elevator control device 17, and the elevator control device 17 continues to open the car door 13. Here, the relay device 21 and... Figure 3 The same process applies to collecting and relaying the status of elevator 4.

[0075] In addition, regarding the communication delay when requesting elevator registration, Figure 4 The same procedure applies to other situations. That is, when a call registration to the elevator control device 17 fails, the relay device 21 retransmits the call registration request to the elevator control device 17 up to a maximum number of times. Here, the maximum number of times is preset, for example, to 5 times. The relay device 21 detects the call registration failure, for example, by the illumination signal of the button lights on the landing operation panel 7 or the car operation panel 14, or by a prohibition signal that prohibits call registration to safe floors. When the number of retransmissions of the registration request reaches the maximum number, the relay device 21 notifies the moving body control device 3 of the call registration failure. At this time, the moving body control device 3 notifies the moving body 2 of the failure and stops the movement of the moving body 2.

[0076] The mobile body control device 3 detects whether the mobile body 2 is on the car 10. After the mobile body 2 is on the car 10, the mobile body control device 3 outputs a door closing request for the car door 13 to the relay device 21. The relay device 21 relays the door closing request to the elevator control device 17, and the elevator control device 17 closes the car door 13. Then, the elevator control device 17 moves the car 10 to the destination floor of the mobile body 2.

[0077] When the elevator call registration is successful and the motion control device 3 detects that the car 10 has arrived at the destination floor, the motion control device 3 sends a restriction restoration request for the destination floor (which is a safe floor) to the safety management device 22. At this time, the motion control device 3 can also send the restriction restoration request to the safety management device 22 via the relay device 21. Upon receiving the restriction restoration request, the safety management device 22 sends a restriction restoration response to the motion control device 3, sending the restriction restoration instruction to the elevator control device 17. At this time, the elevator control device 17 resumes applying safety restrictions to the destination floor (which is a safe floor).

[0078] Then, the moving body control device 3 outputs the request to continue opening the car door 13 to the elevator control device 17 via the relay device 21. After the moving body 2 descends from the car 10, the moving body control device 3 outputs the request to close the car door 13 to the elevator control device 17 via the relay device 21.

[0079] Here, even if the elevator call registration is successful and the car 10 reaches the destination floor without sending a restriction restoration request from the movement control device 3, the relay device 21 sends a restriction restoration request for the destination floor (designated as a safe floor) to the safety management device 22. Upon receiving the restriction restoration request, the safety management device 22 sends a restriction restoration response to both the relay device 21 and the movement control device 3, and sends a restriction restoration instruction to the elevator control device 17. At this time, the elevator control device 17 resumes implementing safety restrictions for the destination floor (designated as a safe floor). Thus, even if the movement control device 3 experiences an anomaly, a restriction restoration request is still output from the relay device 21, thereby ensuring the safety of the safe floor.

[0080] Next, an example of the operation of elevator system 1 will be explained using Figure 6.

[0081] Figures 6A to 6D This is a flowchart illustrating an example of the operation of elevator system 1 according to embodiment 1.

[0082] exist Figure 6A In step S601, the mobile body 2 arrives at the departure floor station 6. Then, in step S602, the mobile body 2 requests the mobile body control device 3 to send an elevator call registration request. Then, in step S603, the mobile body control device 3 outputs the elevator call registration request from the mobile body 2 for the departure floor to the relay device 21. Then, the elevator system 1 proceeds to step S604.

[0083] In step S604, the relay device 21 determines whether the departure floor of the moving body 2 is a safe floor. If the departure floor is a safe floor, the elevator system 1 proceeds to step S605. On the other hand, if the departure floor is not a safe floor, the elevator system 1 proceeds to step S613.

[0084] In step S605, the relay device 21 sends a safety release request to the moving body control device 3. Then, in step S606, the moving body control device 3 determines whether the moving body 2 is located at the departure floor's landing 6. If the moving body 2 is not located at the departure floor's landing 6, as per step S607, the moving body control device 3 controls the moving body 2 to move it towards the departure floor's landing 6. Then, the elevator system 1 proceeds to step S601. On the other hand, if the moving body 2 is located at the departure floor's landing 6, as per step S608, the moving body control device 3 sends a safety release request for the departure floor to the safety management device 22. Then, the elevator system 1 proceeds to step S609.

[0085] In step S609, the safety management device 22 determines whether the release request for the departure floor output from the mobile body control device 3 is a legitimate request. If the release request is not legitimate, as per step S610, the safety management device 22 sends a release rejection response to the mobile body control device 3. Then, the processing of elevator system 1 ends. On the other hand, if the release request is legitimate, as per step S611, the safety management device 22 sends a release permission response to the mobile body control device 3 and sends a restriction release instruction to the elevator control device 17. Then, in step S612, the elevator control device 17 continues to perform safety release for the departure floor until it receives a restriction restoration instruction from the safety management device 22. Then, in step S613, the mobile body control device 3 outputs the call registration request for the departure floor from the mobile body 2 to the relay device 21. Then, elevator system 1 enters... Figure 6B The processing of step S614.

[0086] exist Figure 6B In step S614, the relay device 21 requests the elevator control device 17 to register the call for the moving body 2 based on the travel status of the car 10. Then, in step S615, the relay device 21 determines whether the call registration has failed. If the call registration fails, the elevator system 1 proceeds to step S616. On the other hand, if the call registration is successful, the elevator system 1 proceeds to step S618.

[0087] In step S616, the relay device 21 determines whether the number of retransmissions of the elevator call registration request has reached the upper limit. If the number of retransmissions has not reached the upper limit, the relay device 21 retransmits the elevator call registration request to the elevator control device 17, and the elevator system 1 proceeds to step S614. On the other hand, if the number of retransmissions has reached the upper limit, as part of step S617, the relay device 21 notifies the moving body control device 3 of the elevator call registration failure. Then, the processing of the elevator system 1 ends.

[0088] In step S618, the relay device 21 receives the status of elevator 4 from the elevator control device 17 and sends the received status of elevator 4 to the moving body control device 3. Then, in step S619, the moving body control device 3 determines whether the car 10 has reached the departure floor. If the car 10 has not reached the departure floor, the elevator system 1 proceeds to the processing in step S618. On the other hand, if the car 10 has reached the departure floor, as part of the processing in step S620, the moving body control device 3 sends a restriction restoration request for the departure floor to the safety management device 22. Then, in step S621, the safety management device 22 sends a restriction restoration instruction related to the departure floor to the elevator control device 17. Then, the elevator system 1 proceeds to... Figure 6C The processing of step S622.

[0089] exist Figure 6C In step S622, the mobile body 2 entrusts the mobile body control device 3 to send an elevator call registration request. Then, in step S623, the mobile body control device 3 outputs the elevator call registration request of the mobile body 2 for the destination floor to the relay device 21. Then, the elevator system 1 proceeds to the processing in step S624.

[0090] In step S624, the relay device 21 determines whether the destination floor of the moving body 2 is a safe floor. If the destination floor is a safe floor, the elevator system 1 proceeds to step S625. On the other hand, if the destination floor is not a safe floor, the elevator system 1 proceeds to step S632.

[0091] In step S625, the relay device 21 indicates a safety release request to the moving body control device 3. Then, in step S626, the moving body control device 3 determines whether the car 10 has stopped at the departure floor. If the car 10 has not stopped at the departure floor, the elevator system 1 enters... Figure 6A The process proceeds to step S602. On the other hand, if the car 10 stops at the departure floor, as part of step S627, the moving body control device 3 sends a safety release request to the destination floor to the safety management device 22. Then, the elevator system 1 proceeds to step S628.

[0092] In step S628, the safety management device 22 determines whether the release request for the destination floor output from the mobile body control device 3 is a legitimate request. If the release request is not legitimate, as per step S629, the safety management device 22 sends a release rejection response to the mobile body control device 3. Then, the processing of elevator system 1 ends. On the other hand, if the release request is legitimate, as per step S630, the safety management device 22 sends a release permission response to the mobile body control device 3 and a restriction release instruction to the elevator control device 17. Then, in step S631, the elevator control device 17 continues to perform safety release for the destination floor until it receives a restriction restoration instruction from the safety management device 22. Then, in step S632, the mobile body control device 3 outputs a continued door opening request for the car door 13 and a call registration request for the destination floor from the mobile body 2 to the relay device 21. Then, elevator system 1 enters... Figure 6D The processing of step S633.

[0093] exist Figure 6D In step S633, the relay device 21 requests the elevator control device 17 to allow the car door 13 to continue opening and for the moving body 2 to register its call. Then, in step S634, the relay device 21 determines whether the call registration has failed. If the call registration fails, the elevator system 1 proceeds to step S635. On the other hand, if the call registration is successful, the elevator system 1 proceeds to step S637.

[0094] In step S635, the relay device 21 determines whether the number of retransmissions of the elevator call registration request has reached the upper limit. If the number of retransmissions has not reached the upper limit, the relay device 21 retransmits the elevator call registration request to the elevator control device 17, and the elevator system 1 proceeds to step S633. On the other hand, if the number of retransmissions has reached the upper limit, as part of step S636, the relay device 21 notifies the moving body control device 3 of the elevator call registration failure. Then, the processing of the elevator system 1 ends.

[0095] In step S637, the relay device 21 receives the status of elevator 4 from elevator control device 17 and sends the received status of elevator 4 to the moving body control device 3. Then, in step S638, the moving body control device 3 determines whether the moving body 2 is riding in car 10. If the moving body 2 is not riding in car 10, elevator system 1 proceeds to the process in step S637. On the other hand, if the moving body 2 is riding in car 10, as part of the process in step S639, the moving body control device 3 outputs a door closing request for car door 13 to elevator control device 17 via relay device 21. Then, elevator system 1 proceeds to the process in step S640.

[0096] In step S640, the moving body control device 3 determines whether the car 10 has reached the destination floor. If the car 10 has not reached the destination floor, as per step S641, the relay device 21 receives the status of the elevator 4 from the elevator control device 17 and sends the received status of the elevator 4 to the moving body control device 3. Then, the elevator system 1 proceeds to step S640. On the other hand, if the car 10 has reached the destination floor, as per step S642, the moving body control device 3 sends a restriction restoration request for the departure floor to the safety management device 22. Then, in step S643, the safety management device 22 sends a restriction restoration instruction related to the destination floor to the elevator control device 17. Then, in step S644, the moving body control device 3 outputs a continued door opening request for the car door 13 to the elevator control device 17 via the relay device 21. Then, in step S645, the moving body control device 3 causes the moving body 2 to descend from the car 10. Then, the process of the elevator system 1 ends.

[0097] As described above, the elevator system 1 of Embodiment 1 includes a motion control device 3, an elevator control device 17, a safety management device 22, and a relay device 21. The motion control device 3 controls the movement of the motion body 2 within the facility. The elevator control device 17 collects status information of the elevator 4 and controls the operation of the elevator 4. The safety management device 22 manages the call registration restriction for the car 10 stopping at a safe floor. The relay device 21 relays the call registration request sent from the motion control device 3 to the elevator control device 17. The relay device 21 also relays the registration response to the registration request and the status information of the elevator 4 sent from the elevator control device 17 to the motion control device 3. When the safety management device 22 receives a valid release request from the motion control device 3 for the call registration restriction towards a safe floor, it sends an instruction to release the call registration restriction for the car 10 stopping at the safe floor to the elevator control device 17. After sending a release request for the safe floor, the moving body control device 3 sends an elevator call registration request for the car 10 to stop at the safe floor.

[0098] According to this structure, for safe floors where call registration is normally restricted, the restriction is lifted when a proper release request is output from the mobile body control device 3. After sending the release request, the mobile body control device 3 sends a call registration request; therefore, even for safe floors where call registration is restricted, mobile bodies 2 permitted to enter the safe floors can also register for call registration. Thus, the entry of mobile bodies 2 to safe floors can be appropriately managed.

[0099] Furthermore, when the safety management device 22 receives a legitimate release request for a safe floor from the movement control device 3, it sends a release response to the release request to the movement control device 3. Thus, the movement control device 3 can control the movement 2 after confirming whether the safety has been released.

[0100] Furthermore, when the relay device 21 receives an elevator call registration request from the moving body control device 3, it determines whether to send the registration request to the elevator control device 17 based on the current position and direction of travel of the car 10. If the relay device 21 fails to register the elevator call after sending the registration request, it resends the registration request to the elevator control device 17 up to a preset maximum number of times. When the maximum number of resends is reached, the relay device 21 notifies the moving body control device 3 of a call registration failure. Thus, even if the elevator call registration request is received before the cancellation request due to communication delays, the elevator call registration request is resent via the relay device 21, ensuring the sequential processing of safe cancellation and elevator call registration.

[0101] Furthermore, when the mobile body control device 3 receives a notification of elevator call registration failure from the relay device 21, it notifies the mobile body 2 of the failure and suspends the movement of the mobile body 2. At this time, the mobile body control device 3 can take measures such as using another elevator 4 installed in the facility to move the mobile body 2 or having the mobile body 2 perform other services first.

[0102] Furthermore, the relay device 21 transmits the current position of the car 10 from the elevator control device 17 to the safety management device 22. The moving body control device 3 transmits the current position of the moving body 2 to the safety management device 22. The safety management device 22 determines whether to send a restriction release command to the elevator control device 17 based on the current position of the car 10 and the current position of the moving body 2. Furthermore, the safety management device 22 does not send a restriction release command to the elevator control device 17 before the moving body 2 reaches the departure floor 6. On the other hand, after the moving body 2 reaches the departure floor 6, the safety management device 22 sends a restriction release command to the elevator control device 17. Furthermore, the safety management device 22 sends a restriction release command to the elevator control device 17 before the moving body 2 boards the car 10 and before the car 10 reaches the departure floor of the moving body 2. On the other hand, after the car 10 reaches the departure floor of the moving body 2, the safety management device 22 does not send a restriction release command to the elevator control device 17. Furthermore, after the mobile body 2 boards the car 10, the safety management device 22 sends a restriction release command to the elevator control device 17 before the car 10 reaches the destination floor of the mobile body 2. On the other hand, after the car 10 reaches the destination floor of the mobile body 2, the safety management device 22 does not send a restriction release command to the elevator control device 17. In this way, when it is not appropriate to register an elevator call, such as when the mobile body 2 is not located at the floor 6 of the elevator 4, the restriction release command is not sent to the elevator control device 17, and therefore the restriction on elevator call registration for the safe floor is not unnecessarily released. Therefore, the safety of the safe floor can be more reliably ensured.

[0103] Furthermore, when the elevator control device 17 receives an instruction from the safety management device 22 to release the restriction on a safety floor based on a request to release the safety floor from the movement control device 3, it will not accept the user's registration signal from the car operation panel 14 to set that safety floor as the destination floor. This prevents the user from registering a call for a safety floor through their own operation when the safety restriction has been released for the purpose of registering a call for the movement 2.

[0104] Furthermore, when the safety management device 22 receives a restriction restoration request for a safe floor from the movement control device 3, it sends an instruction to the elevator control device 17 to restore the call registration restriction for the car 10 stopping at the safe floor. When the safety management device 22 receives the restriction restoration request for a safe floor from the movement control device 3, it sends a restriction restoration response to the request to the movement control device 3. The movement control device 3 then sends this restriction restoration response to the relay device 21. In this way, the movement control device 3 can output the restriction restoration request after completing the call registration, thus quickly restoring the call registration restriction at the safe floor. This provides more reliable assurance of safety at the safe floor.

[0105] Furthermore, if the relay device 21 does not receive a restriction restoration request from the motion control device 3 after the motion body 2 has completed boarding or alighting from the car 10, it sends a restriction restoration request for the safe floor to the safety management device 22. When the safety management device 22 receives the restriction restoration request for the safe floor from the relay device 21, it sends a restriction restoration response to the request to the motion control device 3. The motion control device 3 then sends the restriction restoration response back to the relay device 21. Thus, even in the event of an anomaly in the motion control device 3, a restriction restoration request is also output from the relay device 21, thereby more reliably ensuring the safety of the safe floor.

[0106] Furthermore, in cases where the mobile body 2 fails to board or alight from the car 10, or in situations where an abnormality such as a malfunction of the mobile body 2 is detected, the mobile body control device 3 can also output a request to restore the safety floor restriction to the safety management device 22 and the relay device 21. Additionally, the mobile body control device 3 can also output a call cancellation request from the mobile body 2 to the elevator control device 17 via the relay device 21. Therefore, even in the event of an abnormality in the mobile body 2, the call registration restriction can be restored, thus ensuring the safety of the safety floor. Furthermore, the elevator control device 17 can cancel the call registration of the mobile body 2 based on the cancellation request, thereby suppressing a decrease in the operating efficiency of the elevator 4.

[0107] In addition, the call registration request from the moving body control device 3 can be used as a car call signal to call the car 10 to the departure floor or the destination floor, or it can be used as a floor call signal to call the car 10 to the departure floor or the destination floor.

[0108] Furthermore, the mobile control device 3, the safety management device 22, and the relay device 21 can be separate hardware components or can be installed using the same hardware. Additionally, the mobile control device 3 can be a separate device from the mobile body 2, or it can be a device mounted on the mobile body 2 itself.

[0109] In summarizing the above description, the technically desirable structures of the present invention include the following structures shown as appendices.

[0110] (Postscript 1)

[0111] An elevator system having:

[0112] A mobile body control device that controls the movement of a mobile body in a facility with multiple floors, the mobile body being able to ride in the car of an elevator installed in the facility.

[0113] An elevator control device that collects the elevator's status information and controls the elevator's operation;

[0114] A safety management device manages the call registration restrictions for the elevator car stopping at safe floors among the plurality of floors; and

[0115] A relay device that relays elevator call registration requests sent from the mobile body control device to the elevator control device, and relays registration responses to the registration requests and elevator status information sent from the elevator control device to the mobile body control device.

[0116] When the safety management device receives a legitimate release request for the safe floor from the moving body control device, it sends an instruction to the elevator control device to release the call registration restriction that the car is stopped at the safe floor.

[0117] After sending the release request for the safe floor, the moving body control device sends the registration request for the elevator car to stop at the safe floor.

[0118] (Postscript 2)

[0119] According to the elevator system described in Appendix 1, wherein,

[0120] When the security management device receives a legitimate release request for the security floor from the movement control device, it sends a release response to the release request to the movement control device.

[0121] (Note 3)

[0122] According to the elevator system described in Appendix 1, wherein,

[0123] When the relay device receives an elevator call registration request from the moving body control device, it determines whether to send the registration request to the elevator control device based on the current position and direction of travel of the car. If the elevator call request is not registered after being sent, the relay device resends the registration request to the elevator control device within a preset maximum number of times. When the number of resends reaches the maximum number of times, the relay device notifies the moving body control device of elevator call registration failure.

[0124] (Note 4)

[0125] According to the elevator system described in Appendix 3, wherein...

[0126] When the mobile body control device receives a notification from the relay device that the elevator call registration failed, it notifies the mobile body of the failure and stops the movement of the mobile body.

[0127] (Note 5)

[0128] According to any one of the appendices 1 to 4, the elevator system wherein,

[0129] The relay device will send the current position of the car from the elevator control device to the safety management device.

[0130] The mobile body control device sends the current position of the mobile body to the safety management device.

[0131] The safety management device determines whether to send the instruction to the elevator control device based on the current position of the car and the current position of the moving body.

[0132] (Note 6)

[0133] According to the elevator system described in Appendix 5, wherein...

[0134] The safety management device does not send the instruction to the elevator control device before the moving body reaches the departure floor, and sends the instruction to the elevator control device after the moving body reaches the departure floor.

[0135] (Note 7)

[0136] According to the elevator system described in Appendix 6, wherein...

[0137] The safety management device sends the instruction to the elevator control device before the mobile body boards the car and before the car reaches the departure floor of the mobile body, and does not send the instruction to the elevator control device after the car reaches the departure floor of the mobile body.

[0138] (Postscript 8)

[0139] According to the elevator system described in Appendix 6, wherein...

[0140] The safety management device sends the instruction to the elevator control device after the mobile body boards the car and before the car reaches the destination floor of the mobile body, and does not send the instruction to the elevator control device after the car reaches the destination floor of the mobile body.

[0141] (Note 9)

[0142] According to the elevator system described in Appendix 1, wherein,

[0143] When the elevator control device receives an instruction from the safety management device based on the release request of the safe floor from the moving body control device, it will not accept the registration signal from the car operation panel located in the car to set the safe floor as the destination floor.

[0144] (Postscript 10)

[0145] According to any one of the appendices 1 to 9, the elevator system wherein,

[0146] When the safety management device receives a request from the moving body control device to restore the restriction on the safe floor, it sends an instruction to the elevator control device to restore the call registration restriction for the car stopping at the safe floor.

[0147] (Postscript 11)

[0148] According to the elevator system described in Appendix 10, wherein,

[0149] When the security management device receives the restriction restoration request for the secure floor from the movement control device, it sends a restriction restoration response to the restriction restoration request to the movement control device.

[0150] The mobile control device sends the restriction recovery response to the relay device.

[0151] (Postscript 12)

[0152] According to the elevator system described in Appendix 10, wherein,

[0153] If the relay device does not receive the restriction restoration request from the mobile body control device after the mobile body has completed boarding the car or alighting from the car, the restriction restoration request for the safe floor will be sent to the safety management device.

[0154] (Postscript 13)

[0155] According to the elevator system described in Appendix 12, wherein,

[0156] When the security management device receives the restriction restoration request for the secure floor from the relay device, it sends a restriction restoration response to the restriction restoration request to the movement control device.

[0157] The mobile control device sends the restriction recovery response to the relay device.

[0158] (Postscript 14)

[0159] According to the elevator system described in Appendix 10, wherein,

[0160] In the event that the mobile body fails to board or alight from the elevator car, or if an anomaly is detected in the mobile body, the mobile body control device will send a request to restore the restriction on the safe floor to the safety management device and a call cancellation request to the relay device.

[0161] The relay device relays the cancellation request sent from the moving body control device to the elevator control device.

Claims

1. An elevator system, the elevator system having: A mobile body control device that controls the movement of a mobile body in a facility with multiple floors, the mobile body being able to ride in the car of an elevator installed in the facility. An elevator control device that collects the elevator's status information and controls the elevator's operation; A safety management device that manages the call registration restrictions for the elevator car stopping at safe floors among the multiple floors; as well as A relay device that relays elevator call registration requests sent from the mobile body control device to the elevator control device, and relays registration responses to the registration requests and elevator status information sent from the elevator control device to the mobile body control device. When the safety management device receives a legitimate release request for the safe floor from the moving body control device, it sends an instruction to the elevator control device to release the call registration restriction that the car is stopped at the safe floor. After sending the release request for the safe floor, the moving body control device sends the registration request for the elevator car to stop at the safe floor.

2. The elevator system according to claim 1, wherein, When the security management device receives a legitimate release request for the security floor from the movement control device, it sends a release response to the release request to the movement control device.

3. The elevator system according to claim 1, wherein, When the relay device receives an elevator call registration request from the moving body control device, it determines whether to send the registration request to the elevator control device based on the current position and direction of travel of the car. If the elevator call request is not registered after being sent, the relay device resends the registration request to the elevator control device within a preset maximum number of times. When the number of resends reaches the maximum number of times, the relay device notifies the moving body control device of elevator call registration failure.

4. The elevator system according to claim 3, wherein, When the mobile body control device receives a notification from the relay device that the elevator call registration failed, it notifies the mobile body of the failure and stops the movement of the mobile body.

5. The elevator system according to any one of claims 1 to 4, wherein, The relay device will send the current position of the car from the elevator control device to the safety management device. The mobile body control device sends the current position of the mobile body to the safety management device. The safety management device determines whether to send the instruction to the elevator control device based on the current position of the car and the current position of the moving body.

6. The elevator system according to claim 5, wherein, The safety management device does not send the instruction to the elevator control device before the moving body reaches the departure floor, and sends the instruction to the elevator control device after the moving body reaches the departure floor.

7. The elevator system according to claim 6, wherein, The safety management device sends the instruction to the elevator control device before the mobile body boards the car and before the car reaches the departure floor of the mobile body, and does not send the instruction to the elevator control device after the car reaches the departure floor of the mobile body.

8. The elevator system according to claim 6, wherein, The safety management device sends the instruction to the elevator control device after the mobile body boards the car and before the car reaches the destination floor of the mobile body, and does not send the instruction to the elevator control device after the car reaches the destination floor of the mobile body.

9. The elevator system according to claim 1, wherein, When the elevator control device receives an instruction from the safety management device based on the release request of the safe floor from the moving body control device, it will not accept the registration signal from the car operation panel located in the car to set the safe floor as the destination floor.

10. The elevator system according to any one of claims 1 to 4, wherein, When the safety management device receives a request from the moving body control device to restore the restriction on the safe floor, it sends an instruction to the elevator control device to restore the call registration restriction for the car stopping at the safe floor.

11. The elevator system according to claim 10, wherein, When the security management device receives the restriction restoration request for the secure floor from the movement control device, it sends a restriction restoration response to the restriction restoration request to the movement control device. The mobile control device sends the restriction recovery response to the relay device.

12. The elevator system according to claim 10, wherein, If the relay device does not receive the restriction restoration request from the mobile body control device after the mobile body completes boarding the car or disembarking from the car, it will send the restriction restoration request for the safe floor to the safety management device.

13. The elevator system according to claim 12, wherein, When the security management device receives the restriction restoration request for the secure floor from the relay device, it sends a restriction restoration response to the restriction restoration request to the movement control device. The mobile control device sends the restriction recovery response to the relay device.

14. The elevator system according to claim 10, wherein, In the event that the mobile body fails to board or alight from the elevator car, or if an anomaly is detected in the mobile body, the mobile body control device will send a request to restore the restriction on the safe floor to the safety management device and a call cancellation request to the relay device. The relay device relays the cancellation request sent from the moving body control device to the elevator control device.

Images