Elevator system with anonymous imaging solution and method for providing anonymous imaging solution of elevator system
By setting an anonymous mode imaging equipment and control system in the elevator system, the privacy and network security issues in the elevator system are solved, and passenger privacy protection and emergency identification are achieved.
Patent Information
- Application Number
- CN202280099561.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2022-09-08
- Publication Date
- 2025-03-28
AI Technical Summary
The emergency telephone solution based on optical cameras in existing elevator systems has privacy problems and is vulnerable to cyber attacks, making it difficult to protect passenger privacy.
An elevator system is designed to ensure that passenger characteristics cannot be identified from the image data by arranging imaging equipment in the elevator car and controlling it by the elevator control system. The system also allows passengers to agree to switch to non-anonymous mode to identify passenger characteristics if necessary.
An anonymous imaging solution that protects passenger privacy in the elevator system is realized, avoiding the risks of privacy leakage and cyber attacks, and meeting the identification needs in emergencies.
Smart Images
Figure CN119731107A_ABST
Abstract
Description
Technical Field
[0001] The present invention generally relates to the technical field of elevator systems. In particular, the present invention relates to imaging solutions for elevator systems. Background Art
[0002] Typically, an elevator system may include one or more optical camera-based solutions. However, optical camera-based solutions may lead to privacy issues. For example, an emergency call solution may be based on the use of a camera and / or video stream that cannot ensure the privacy of a passenger trapped in an elevator car of the elevator system and a rescue service operator when the trapped passenger generates an emergency call to the rescue service operator.
[0003] Furthermore, cameras inside elevator cars may be vulnerable to cyberattacks and hacking. Privacy aspects have become increasingly important due to legislative developments in recent years around the world (e.g., in the EU, North America, and China). New legislation will make it more difficult for non-government-related companies to install cameras in certain elevators. However, technologies that do protect privacy are not affected. In addition to legislative developments, passengers may also become more sensitive to issues of digital surveillance and data collection.
[0004] Therefore, there is a need for further solutions to develop imaging based solutions for elevator systems. Summary of the invention
[0005] A simplified overview is presented below to provide a basic understanding of some aspects of various invention embodiments. This overview is not a broad overview of the present invention. It is neither intended to identify key or important elements of the present invention nor to describe the scope of the present invention. The following overview only presents some concepts of the present invention in a simplified form as a preface to a more detailed description of exemplary embodiments of the present invention.
[0006] The object of the present invention is to propose an elevator system and a method for providing an anonymous imaging solution for an elevator system. Another object of the present invention is to provide an elevator system and a method for providing an anonymous imaging solution for an elevator system to realize an anonymous imaging solution for an elevator system.
[0007] The objects of the invention are achieved by an elevator system and a method as defined by the respective independent claims.
[0008] According to a first aspect, an elevator system is provided, wherein the elevator system comprises: at least one elevator car configured to travel along a corresponding at least one elevator shaft, at least one imaging device arranged inside the at least one elevator car and configured to provide image data from inside the elevator car, and an elevator control system configured to control the at least one imaging device to be in an anonymous mode by default, wherein in the anonymous mode, features identifying a passenger cannot be discerned from the image data provided by the at least one imaging device.
[0009] At least one of the at least one imaging device may be part of an emergency phone solution.
[0010] Alternatively or additionally, at least one of the at least one imaging device may be part of a sign language based user interface solution.
[0011] The at least one imaging device may include at least one optical imaging device configured to provide optical image data as the image data.
[0012] At least one optical imaging device may include a processing portion, wherein in an anonymous mode of the at least one optical imaging device, the processing portion of the at least one optical imaging device may be configured to process the optical image data such that features identifying a passenger cannot be discerned from the optical image data.
[0013] Alternatively or additionally, the at least one imaging device may include at least one time-of-flight (ToF) sensor device configured to provide depth image data as image data.
[0014] The elevator control system may also be configured to, in response to receiving consent data indicating consent from the passenger to switch to the non-anonymous mode, control at least one imaging device operating in the anonymous mode to switch to the non-anonymous mode, wherein in the non-anonymous mode, features identifying the passenger may be discerned from image data provided by the at least one imaging device operating in the non-anonymous mode.
[0015] Alternatively or additionally, the at least one imaging device may include at least one radar device, the at least one radar device being configured to provide radar data as image data.
[0016] According to a second aspect, a method for providing an anonymous imaging solution for an elevator system is provided, wherein the method comprises controlling at least one imaging device arranged inside at least one elevator car of the elevator system to be in an anonymous mode by default, wherein in the anonymous mode, features identifying a passenger cannot be discerned from image data provided by the at least one imaging device.
[0017] At least one of the at least one imaging device may be part of an emergency phone solution.
[0018] Alternatively or additionally, at least one of the at least one imaging device may be part of a sign language based user interface solution.
[0019] The at least one imaging device may include at least one optical imaging device configured to provide optical image data as the image data.
[0020] The method may include processing the optical image data in an anonymous mode of at least one optical imaging device such that features identifying the passenger are not discernible from the optical image data.
[0021] Alternatively or additionally, the at least one imaging device may include at least one time-of-flight (ToF) sensor device configured to provide depth image data as image data.
[0022] The method may also include, in response to receiving consent data indicating consent from the passenger to switch to a non-anonymous mode, controlling at least one imaging device operating in an anonymous mode to switch to a non-anonymous mode, wherein in the non-anonymous mode, features identifying the passenger can be identified from image data provided by at least one imaging device operating in the non-anonymous mode.
[0023] Alternatively or additionally, the at least one imaging device may include at least one radar device, the at least one radar device being configured to provide radar data as image data.
[0024] Various exemplary and non-limiting embodiments of the invention, both as to constructions and methods of operation, together with additional objects and advantages thereof, will be best understood from the following description of specific exemplary and non-limiting embodiments when read in connection with the accompanying drawings.
[0025] The verbs "comprise" and "include" are used in this document as open limitations, which neither exclude nor require the existence of unrecited features. Unless explicitly stated otherwise, the features recited in the dependent claims are mutually freely combinable. Furthermore, it should be understood that the use of "a" or "an" (i.e. the singular) throughout this document does not exclude a plurality. BRIEF DESCRIPTION OF THE DRAWINGS
[0026] Embodiments of the invention are illustrated by way of example and not limitation in the figures of the accompanying drawings.
[0027] Figure 1A An example elevator system is schematically shown.
[0028] Figure 1B An example implementation of at least one imaging device inside an elevator car is schematically shown.
[0029] Figure 2 An example of an emergency phone solution is schematically shown.
[0030] Figure 3 An example of a sign language based user interface solution is schematically shown.
[0031] Figure 4 An example of an occupancy detection solution is schematically shown.
[0032] Figure 5 An example of a method for providing an anonymous imaging solution for an elevator system is schematically illustrated.
[0033] Fig. 6A A non-limiting example of image data provided by an example imaging device operating in an anonymous mode is schematically illustrated.
[0034] Figure 6B Another non-limiting example of image data provided by an example imaging device operating in anonymous mode is schematically illustrated.
[0035] Figure 7 An example of components of an elevator control system is schematically shown. DETAILED DESCRIPTION
[0036] Figure 1A An example elevator system 100 is schematically illustrated. The elevator system 100 includes at least one elevator car 102 configured to travel between a plurality of landings (ie, floors) along a corresponding at least one elevator shaft 104. Figure 1A The example elevator system 100 includes one elevator car 102 traveling along one elevator shaft 104, however the elevator system 100 may also include an elevator group, i.e., a group of two or more elevator cars 102, each of which travels along a separate elevator shaft 104, and the elevator shaft 104 is configured to operate as a unit serving the same platform. The elevator system 100 also includes an elevator control system 108. The elevator control system 108 may include an elevator controller and / or one or more other local controllers, such as an additional facility controller. The elevator control system 108 may be configured to at least partially control the operation of the elevator system 100. The elevator control system 108 may, for example, reside in a machine room (not shown in the figure for clarity). Figure 1A ) and / or in one of the landings of the elevator system 100 (not shown in FIG. Figure 1A). The elevator system 100 also includes at least one imaging device 110a, 110b. The at least one imaging device 110a, 110b is arranged inside at least one elevator car 102 and is configured to provide image data from inside the elevator car 102. The at least one imaging device 110a, 110b can be communicatively coupled to the elevator control system 108. The communication between the at least one imaging device 110a, 110b and the elevator control system 108 can be based on one or more known wired or wireless communication technologies. The elevator system 100 may also include one or more other known elevator-related entities, such as a hoisting system, a user interface device, safety circuits and devices, an elevator brake, an elevator door, etc., which are not shown in the figure for the sake of clarity. Figure 1A Shown in.
[0037] Figure 1B An example implementation of at least one imaging device 110a, 110b inside an elevator car 102 belonging to at least one elevator car 102 of an elevator system 100 is schematically shown. The at least one imaging device 110a, 110b may be arranged at any location inside the elevator car 102 such that the at least one imaging device 110a, 110b may provide image data from inside the elevator car 102. In other words, the at least one imaging device 110a, 110b may be arranged (e.g., placed) at different locations inside the elevator car 102 such that the at least one imaging device 110a, 110b may acquire image data of the interior of the elevator car 102. The placement of the at least one imaging device 110a, 110b inside the at least one elevator car 102 may, for example, depend on the application of the at least one imaging device 110a, 110b. Figure 1B In the example of FIG. 1 , only two non-limiting example placements of at least one imaging device 110a, 110b inside the elevator car 102 are shown. Figure 1B In the example of , the elevator system includes a first imaging device 110a and a second imaging device 110b, wherein the first imaging device 110a and the second imaging device 110b belong to at least one imaging device 110a, 110b of the elevator system 100. Figure 1BIn the example of , the first imaging device 110a is arranged to a user interface device 112 of the elevator system 100, such as a human-machine interface (HMI) device. Alternatively or additionally, at least one imaging device belonging to at least one imaging device 110a, 110b may be arranged near the user interface device 112. The user interface device 112 may, for example, be a car operating panel (COP) for generating elevator commands (e.g., elevator car calls and / or emergency calls, etc.) via user interaction. Alternatively, the user interface 112 may be a separate emergency call unit for generating emergency calls. The user interface device 112 may also include one or more other input / output (I / O) devices for receiving user input and outputting information, such as buttons, keyboards, touch screens, microphones, speakers, displays, etc. For clarity, Figure 1B One or more other I / O devices of the user interface device 112 are not shown. Figure 1B In the example of FIG. 4 , the second imaging device 110 b is arranged to the ceiling 114 of the elevator car 102 near the upper rear corner of the elevator car 102 .
[0038] According to an example, at least one imaging device 110a, 110b may include at least one optical imaging device, such as a camera. At least one optical imaging device may be configured to provide optical image data as image data. The image data provided by the at least one optical imaging device may include one or more images and / or a video image including multiple consecutive images (ie, frames). At least one optical imaging device may include a processing portion for processing the optical image data provided by the at least one optical imaging device. According to another example, at least one imaging device 110a, 110b may alternatively or additionally include at least one radar device. At least one radar device may be configured to provide radar data as image data. According to yet another example, at least one imaging device 110a, 110b may alternatively or additionally include at least one time of flight (ToF) sensor device. At least one ToF sensor device may be configured to provide depth image data as image data. The depth image data may include three-dimensional (3D) depth data. For example, the depth data may include a depth map or point cloud data.
[0039] The at least one imaging device 110a, 110b can be used in different applications in the elevator system 100. Some examples of different applications of the at least one imaging device 110a, 110b in the elevator system 100 are discussed below. However, the at least one imaging device 110a, 110b can also be used in any other application in the elevator system 100. According to an example, at least one imaging device 110a, 110b of the at least one imaging device 110a, 110b can be implemented as part of an emergency phone solution (i.e., system) 200 of the elevator system 100. Figure 2 An example of an emergency phone solution 200 is schematically shown. For example, Figure 1B The first imaging device 110a of the example can be used in an emergency call solution implementation of at least one imaging device 110a, 110b of the elevator system 100. The emergency call solution 200 can also include an audio system 202 and an external entity 204. The audio system 202 can, for example, include one or more input / output (I / O) devices, such as a microphone and / or a speaker. One or more I / O devices of the user interface device 112 can be used as one or more I / O devices of the audio system of the emergency call solution 200. The external entity 204 can, for example, be a service center, a maintenance center, and / or a control center. The external center 204 can be communicatively coupled to the elevator system 100, for example, to the elevator control system 108. The communication between the external center 204 and the elevator system 100 can be based on one or more known wired or wireless communication technologies. Image data provided by at least one imaging device 110a, 110b as part of the emergency call solution 200 and / or audio data provided by the audio system of the emergency call solution 200 can be transmitted to the external entity 204 via the elevator control system 108. Similarly, audio data may be provided from an external entity via the elevator control system 108 to the audio system of the emergency phone solution.
[0040] According to another example, at least one of the at least one imaging device 110a , 110b may alternatively or additionally be implemented as a part of a sign language based user interface solution 300 for the elevator system 100 . Figure 3 An example of a sign language based user interface solution 300 is schematically shown. For example, Figure 1BThe example first imaging device 110a of the embodiment can be used in a sign language based user interface solution implementation of at least one imaging device 110a, 110b of the elevator system 100. The sign language based user interface solution can be used, for example, to provide sign language commands to the elevator control system 108 to control the operation of the elevator system 100, such as controlling the movement of at least one elevator car 102 along the corresponding elevator shaft 104. For example, one or more elevator calls, such as elevator car calls and / or emergency calls, can be generated based on the sign language commands performed by at least one passenger 116 of the at least one elevator car 102. In the sign language based user interface solution 300 implementation of the at least one imaging device 110a, 110b, the at least one imaging device 110a, 110b can be selected so that the resolution of the at least one imaging device 110a, 110b is such that the hand signs are recognizable. In addition, the distance between the hand of the passenger 116 using the sign language and the at least one imaging device 110a, 110b may have an impact on the resolution. The greater the distance between the hand and the at least one imaging device 110a, 110b, the greater the resolution needs to be.
[0041] According to yet another example, at least one of the at least one imaging device 110a , 110b may alternatively or additionally be implemented as a part of an occupancy detection solution 400 of the elevator system 100 . Figure 4 An example of an occupancy detection solution 400 is schematically illustrated. The occupancy detection solution 400 may also include a computing unit 402, which may include the elevator control system 108 and / or any other computing unit. For example, at least one imaging device 110a, 110b of the elevator system 100 may be configured to obtain occupancy state data representing an occupancy state of the elevator car 102. The occupancy state of the elevator car 102 may, for example, be empty (i.e., no objects, such as passengers 116 or other objects) or occupied (i.e., at least one object, such as at least one passenger 116 and / or any other object is within the elevator car 102). The occupancy state data obtained by the at least one imaging device 110a, 110b may be provided to the computing unit 402 for detecting the occupancy state of the elevator car 102. For example, Figure 1B The second imaging device 110 b of the example may be used to implement an occupancy detection solution of at least one imaging device 110 a , 110 b of the elevator system 100 .
[0042] Next, by referring to Figure 5 An example of a method for providing an anonymous imaging solution for the elevator system 100 is described below. Figure 5 The method is schematically shown in a flow chart.
[0043] At step 510, the elevator control system 108 controls the at least one imaging device 110a, 110b to be in the anonymous mode by default. In other words, the anonymous mode is the default operation mode of the at least one imaging device 110a, 110b. In the anonymous mode of the at least one imaging device 110a, 110b, features for identifying the passenger 116 cannot be discerned from the image data 600 provided by the at least one imaging device 110a, 110b. The features for identifying the passenger 116 may, for example, include one or more facial features of the passenger 116 or any other features that may be considered as personal information or used to identify the passenger 116. Fig. 6A A non-limiting example of image data 600 provided by example imaging devices 110a, 110b of elevator system 100 is schematically shown. Fig. 6A In the example of FIG. 1 , the image data 600 includes a depth image of the face of the passenger 116 , where the depth image data may be provided by a ToF sensor device as an example imaging device 110 a , 110 b . Fig. 6A In the example image data 600 , features identifying the passenger 116 are not discernible. Fig. 6A The example image data 600 may be used, for example but not limited to, in an emergency phone solution implementation of at least one imaging device 110a, 110b. Figure 6B Another non-limiting example of image data provided by example imaging devices 110a, 110b of elevator system 100 is schematically shown. Figure 6B In the example of FIG. 1 , the image data 600 includes a set of depth images 600a, 600b of the passenger 116, where the depth image data may be provided by a ToF sensor device as an example imaging device 110a, 110b. Figure 6B In the example image data 600, features identifying the passenger 116 are not discernible, but a gesture performed by the passenger 116 is discernible. The resolution of the example ToF sensor device used to provide the depth images 600a, 600b of the example image data 600 is HQVGA (half quarter video graphics array) 224×172 (38K) pixels, and the distance between the ToF sensor device and the passenger 116's hand is less than 50 centimeters. Figure 6B The example image data 600 may be implemented, for example, but not limited to, a sign language based user interface solution for at least one imaging device 110a, 110b.
[0044] According to an example, if at least one imaging device 110a, 110b is an optical imaging device, then when the optical imaging device is in anonymous mode, the processing portion of the at least one optical imaging device can process the optical image data so that features identifying the passenger 116 cannot be discerned from the optical image data. The processing of the optical image data can, for example, include blurring. The processing portion can be configured to at least partially blur the optical image data. For example, the processing portion can apply blurring only to a portion of the image data in which features identifying the passenger 116 can be detected. Alternatively, the processing portion can apply blurring to the entire optical image data.
[0045] At step 520, the elevator control system 108 may obtain image data provided by at least one imaging device 110a, 110b operating in anonymous mode, i.e., anonymous image data. The acquisition of anonymous image data may depend on the application in which the at least one imaging device 110a, 110b is used. According to an example, in an emergency call solution 200 implementation of at least one imaging device 110a, 110b, in response to a passenger 116 generating an emergency call, for example, via an elevator user interface device 112, anonymous image data may be obtained from at least one imaging device 110a, 110b operating in anonymous mode. In other words, in an emergency call solution 200 implementation of at least one imaging device 110a, 110b, the generation of an emergency call may trigger the acquisition of anonymous image data from at least one imaging device operating in anonymous mode. According to another example, in a sign language-based user interface solution 300 implementation of at least one imaging device 110a, 110b, anonymous image data may be obtained from at least one imaging device 110a, 110b operating in anonymous mode, for example, in response to activation of the use of a sign language command. When necessary, the use of sign language commands can be activated. For example, the use of sign language commands can be activated in response to activation of an emergency phone solution and / or via user interaction of the passenger 116. According to another example, in an occupancy detection solution 400 implementation of at least one imaging device 110a, 110b, anonymous image data can be obtained from at least one imaging device 110a, 110b operating in an anonymous mode, for example, continuously or in response to activation of occupancy detection (e.g., in response to receiving a request to obtain occupancy data).
[0046] At step 530, the elevator control system 108 may also receive consent data indicating consent from the passenger 116 to switch from the anonymous mode to the non-anonymous mode. In the non-anonymous mode, features identifying the passenger 116 may be discerned from the image data provided by the imaging devices 110a, 110b operating in the non-anonymous mode. According to an example, the consent data may be generated via a user interaction of the passenger 116 (e.g., via the user interface device 112). The user interaction may, for example, include a touch-based interaction, a button press-based interaction, a gesture-based interaction, a sign language-based interaction, a voice-based interaction, and / or a smart device-based interaction, etc. According to another example, in the case of an emergency call solution implementation of at least one imaging device 110a, 110b, in response to receiving the emergency call, the external unit 204 may generate a consent request to the passenger 116 via the user interface device 112, and in response to the consent request, the consent data may be generated via the user interaction of the passenger 116 (e.g., via the user interface device 112), similar to what is discussed above.
[0047] In step 540, the elevator control system 108 may further control at least one imaging device 110a, 110b operating (i.e., in) the anonymous mode to switch to the non-anonymous mode in response to receiving the consent data indicating the consent from the passenger 116 to switch to the non-anonymous mode in step 530. Each imaging device 110a, 110b, which is an optical imaging device or a ToF sensor device, may switch from the anonymous mode to the non-anonymous mode. According to an example, in the non-anonymous mode of the optical imaging device, the optical image data may be provided, for example, without the above-mentioned processing of the optical image data by the processing part, for example, the optical image data may be provided without blurring, so that the features identifying the passenger 116 may be recognizable from the optical image data provided by the optical imaging device operating in the non-anonymous mode. According to another example, in the non-anonymous mode of the ToF sensor device, the resolution of the ToF sensor device may be improved, for example, compared to the resolution of the ToF sensor device operating in the anonymous mode, so that the features identifying the passenger 116 may be recognizable from the depth data provided by the ToF sensor device operating in the non-anonymous mode. After switching at least one imaging device to the non-anonymous mode, the elevator control system 108 may obtain image data provided by the at least one imaging device 110a, 110b operating in the non-anonymous mode, ie, non-anonymous image data.
[0048] According to an example, when a ToF sensor device is used as part of the emergency call solution 200 to provide anonymous image data, the elevator control system 108 may control at least one other imaging device 110a, 110b (e.g., as an optical imaging device) to switch to the non-anonymous mode and provide the non-anonymous image data in response to receiving consent data indicating consent from the passenger 116 to switch to the non-anonymous mode, instead of controlling the ToF sensor device to switch to the non-anonymous mode.
[0049] Figure 7 An example of components of an elevator control system 108 is schematically shown. The elevator control system 108 may include a processing unit 710 having one or more processors, a storage unit 720 having one or more memories, a communication unit 730 having one or more communication devices, and a possible user interface (UI) unit 740. The mentioned elements may be communicatively coupled to each other via, for example, an internal bus. The storage unit 720 may store and maintain parts of a computer program (code) 725, acquired image data, and any other data. The computer program 725 may include instructions that, when executed by the processing unit 710 of the elevator control system 108, may cause the processing unit 710 and thus the elevator control system 108 to perform desired tasks, such as one or more of the above-described method steps. Therefore, the processing unit 710 may be arranged to access the storage unit 720 and retrieve any information from and store any information to the storage unit 720. For clarity, a processor herein refers to any unit suitable for processing information and controlling the operation of the elevator control system 108 and other tasks. The operation may also be implemented with a microcontroller solution with embedded software. Similarly, the storage unit 720 is not limited to a certain type of memory, but any memory type suitable for storing the described multiple information can be applied in the context of the present invention. The communication unit 730 provides one or more communication interfaces for communicating with any other unit (e.g., at least one imaging device 110a, 110b, one or more databases) or with any other unit. The user interface unit 740 may include one or more input / output (I / O) devices such as buttons, keyboards, touch screens, microphones, speakers, displays, etc. for receiving user input and output information. The computer program 725 can be a computer program product that can be included in a tangible non-volatile (non-transitory) computer-readable medium that carries the computer program code 725, which is embodied therein for use with a computer (i.e., the elevator control system 108).
[0050] The specific examples provided in the description given above should not be construed as limiting the applicability and / or interpretation of the appended claims.The lists and groups of examples provided in the description given above are not exhaustive unless expressly stated otherwise.
Claims
1. An elevator system (100), comprising: at least one elevator car (102) configured to travel along a corresponding at least one elevator shaft (104), at least one imaging device (110a, 110b) arranged inside the at least one elevator car (102) and configured to provide image data (600) from inside the elevator car (102), and An elevator control system (108) is configured to control the at least one imaging device (110a, 110b) to be in an anonymous mode by default, wherein in the anonymous mode, features identifying a passenger (116) cannot be discerned from image data (600) provided by the at least one imaging device (110a, 110b).
2. The elevator system (100) of claim 1, wherein at least one of the at least one imaging device (110a, 110b) is part of an emergency phone solution (200).
3. The elevator system (100) according to any of the preceding claims, wherein at least one of the at least one imaging device (110a, 110b) is part of a sign language based user interface solution (300).
4. The elevator system (100) according to any of the preceding claims, wherein the at least one imaging device (110a, 110b) comprises at least one optical imaging device, the at least one optical imaging device being configured to provide optical image data as the image data.
5. The elevator system (100) of claim 4, wherein the at least one optical imaging device includes a processing portion, and wherein in an anonymous mode of the at least one optical imaging device, the processing portion of the at least one optical imaging device is configured to process the optical image data such that features identifying the passenger (116) are not discernible from the optical image data.
6. The elevator system (100) according to any of the preceding claims, wherein the at least one imaging device (110a, 110b) comprises at least one time-of-flight (ToF) sensor device, the at least one time-of-flight (ToF) sensor device being configured to provide depth image data as the image data.
7. An elevator system (100) according to any one of the preceding claims, wherein the elevator control system (108) is further configured to control at least one imaging device (110a, 110b) operating in the anonymous mode to switch to the non-anonymous mode in response to receiving consent data indicating consent from the passenger (116) to switch to the non-anonymous mode, wherein in the non-anonymous mode, features identifying the passenger (116) can be identified from image data provided by the at least one imaging device operating in the non-anonymous mode.
8. The elevator system (100) according to any one of claims 1 to 6, wherein the at least one imaging device (110a, 110b) comprises at least one radar device, the at least one radar device being configured to provide radar data as the image data.
9. A method for providing an anonymous imaging solution for an elevator system (100), the method comprising controlling (510) at least one imaging device (110a, 110b) arranged inside at least one elevator car (102) of the elevator system (100) to be in an anonymous mode by default, wherein in the anonymous mode, features identifying a passenger (116) cannot be discerned from image data (600) provided by the at least one imaging device (110a, 110b).
10. The method of claim 9, wherein at least one of the at least one imaging device (110a, 110b) is part of an emergency phone solution (200).
11. The method according to claim 9 or 10, wherein at least one of the at least one imaging device (110a, 110b) is part of a sign language based user interface solution (300).
12. The method according to any one of claims 9 to 11, wherein the at least one imaging device (110a, 110b) comprises at least one optical imaging device, the at least one optical imaging device being configured to provide optical image data as the image data (600).
13. The method of claim 12, comprising processing the optical image data in an anonymous mode of the at least one optical imaging device such that features identifying the passenger (116) are not discernible from the optical image data.
14. The method according to any one of claims 9 to 13, wherein the at least one imaging device (110a, 110b) comprises at least one time-of-flight (ToF) sensor device configured to provide depth image data as the image data.
15. The method according to any one of claims 9 to 14, further comprising: In response to receiving (530) consent data indicating consent from the passenger (116) to switch to a non-anonymous mode, controlling (540) at least one imaging device operating in the anonymous mode to switch to the non-anonymous mode, wherein in the non-anonymous mode, features identifying the passenger (116) are discernible from image data provided by the at least one imaging device operating in the non-anonymous mode.
16. The method according to any one of claims 9 to 14, wherein the at least one imaging device (110a, 110b) comprises at least one radar device, the at least one radar device being configured to provide radar data as the image data.