Elevator control method for preventing vulnerable passenger destination floor information leakage

Abstract

The application discloses an elevator control method for preventing weak passenger destination floor information leakage, which comprises the following steps: step 1, judging whether a weak passenger enters an elevator car; step 2, judging whether there is a first suspicious passenger in the elevator car before the weak passenger enters the elevator car, and if yes, receiving and hiding the destination floor registration information of the weak passenger; step 3, judging whether there is a second suspicious passenger who follows the weak passenger into the elevator car after the weak passenger enters the elevator car, and if yes, hiding the destination floor information of the weak passenger before the second suspicious passenger enters the elevator car; step 4, receiving the destination floor information of the second suspicious passenger; step 5, controlling the elevator to stop at each destination floor of the suspicious passengers until there is no suspicious passenger in the elevator car; step 6, controlling the elevator to stop at the destination floor of the weak passenger; and step 7, ending. The elevator control method can comprehensively reduce the leakage risk of the destination floor information of the passengers.

Description

Technical Field

[0001] This invention relates to the field of elevator technology, and specifically to an elevator control method for preventing the leakage of destination floor information of vulnerable passengers such as single women. Background Technology

[0002] Elevators have become the primary vertical transportation mode for people to move between floors in buildings, providing great convenience for daily life. However, safety risks may arise for vulnerable passengers such as single women and minors using elevators during off-peak hours, such as at night. To improve elevator safety for these vulnerable passengers, existing technologies offer various solutions.

[0003] Reference 1 (CN201580085261.0) proposes an elevator control device that automatically analyzes the gender of users when they board the elevator. If there is one female and one male passenger, the device enters an anti-following mode. Each user registers their destination floor individually. During registration, each user is associated with their destination floor. When the elevator reaches the female's destination floor, she disembarks first. After she has disembarked, the doors are temporarily closed completely. After a predetermined time interval, the doors are fully reopened, and the male passenger disembarks. This scheme essentially prevents women from being followed by men by ensuring a predetermined time interval between the female passenger disembarking first and the male passenger disembarking later; it addresses the problem of women being followed after disembarking.

[0004] Reference 2 (CN201780089528.2) proposes an elevator anti-operation device that, after detecting a lone passenger entering the elevator, registering a call, and initiating door closing, measures the passenger's walking speed when the person enters the first zone. If the walking speed exceeds the detected abnormal speed, an output signal is generated to control the door closing speed to a first speed faster than normal. The first zone is defined as surrounding and larger than a second zone adjacent to the car door. When the person enters the second zone, the walking speed is measured. If the walking speed exceeds the detected abnormal speed, an output signal is generated to control the door closing speed to a second speed faster than the first speed. Essentially, this solution improves the safety of vulnerable passengers by accelerating door closing when a suspicious person is detected in the area adjacent to the car door, thus preventing vulnerable passengers from sharing the elevator with potentially dangerous tailgating passengers. It addresses the safety issue of vulnerable passengers sharing the same elevator with tailgating passengers.

[0005] Reference 3 (CN201780095200.1) provides an elevator security system equipped with an autonomous mobile robot capable of riding and moving autonomously in and out of elevator cars. The system includes: a detection unit that detects the identification information of elevator users; and a suspicious person determination unit that determines whether an elevator user is a suspicious person based on the identification information detected by the detection unit. When a suspicious person determined by the suspicious person determination unit and a legitimate passenger determined not to be a suspicious person are riding in the same elevator car, the autonomous mobile robot moves between the suspicious person and the legitimate passenger inside the elevator car. This solution essentially uses a robot to separate suspicious persons from legitimate passengers, thereby improving the safety of legitimate passengers. It addresses the security problem when legitimate passengers and suspicious persons share the same elevator.

[0006] The elevator nighttime security method proposed in Reference 4 (CN202410239750.8) is as follows: Upon receiving an external call command, the corresponding external call floor is obtained; it is determined whether the current time is within the preset security time range and whether the external call floor is a preset security floor; if so, the elevator is assigned to respond to the external call command and reach the external call floor; the current passenger's button command is received through the internal call button in the elevator, and the destination floor corresponding to the button command is obtained; it is determined whether the destination floor is a non-security floor; if so, the elevator is switched to nighttime security mode. In nighttime security mode, the elevator only responds to the button command of the internal call button in the elevator and cancels the external call display on the elevator; after the elevator responds to the button command and reaches the destination floor, it is determined whether the current passenger has left the elevator; if so, the elevator is moved to a random floor and then switched to normal mode. This solution essentially prevents the destination floor information of vulnerable passengers from being known by waiting passengers at the elevator station by displaying the elevator external call display board (which displays the elevator car's floor information), thus addressing the risk of leakage of the destination floor information of vulnerable passengers. While this solution can reduce the risk of leakage of destination information for vulnerable passengers to some extent, there is still room for further improvement.

[0007] Therefore, how to further reduce the risk of leakage of destination information of vulnerable passengers has become a pressing technical issue. Summary of the Invention

[0008] The technical problem this invention aims to solve is how to further reduce the risk of leakage of destination information for vulnerable passengers.

[0009] To address the aforementioned technical problems, this invention discloses an elevator control method for preventing the leakage of destination floor information for vulnerable passengers, comprising:

[0010] Step 1: Determine if a vulnerable passenger has been detected entering the elevator car. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's riding needs in normal mode and end.

[0011] Step 2: Determine whether there is a first suspicious passenger in the elevator car before the vulnerable passenger enters the elevator car. If so, receive and hide the vulnerable passenger's destination floor registration information, and proceed to the step after and adjacent to Step 4. Otherwise, receive the vulnerable passenger's destination floor registration information and proceed to the next step.

[0012] Step 3: Determine whether there is a second suspicious passenger following the vulnerable passenger into the elevator car. If so, hide the vulnerable passenger's destination floor information before the second suspicious passenger enters the car and proceed to the next step; otherwise, proceed directly to the next step.

[0013] Step 4: Receive destination information for the second suspicious passenger;

[0014] Step 5: Control the elevator to stop at each destination floor of the suspicious passenger until there are no more suspicious passengers in the car;

[0015] Step 6: Control the elevator to stop at the destination floor of the vulnerable passenger;

[0016] Step 7: End.

[0017] Preferably, between step 5 and step 6, the elevator further includes: step A1, canceling the elevator's response to a floor call signal that causes it to stop before reaching the destination floor of a vulnerable passenger.

[0018] Preferably, before and adjacent to step 6 and / or after and adjacent to step 6, the method further includes: step A2, controlling the elevator to stop at at least one floor.

[0019] Preferably, when step A2 is located after and adjacent to step 6, step A2 controls the elevator to finally stop at the elevator's distributed waiting floors.

[0020] Preferably, after step 5 and adjacent to step 5, the method further includes: step A3, canceling the floor station device from providing elevator car location information to waiting passengers; before step 7 and adjacent to step 7, the method further includes: step A4, restoring the floor station device from providing elevator car location information to waiting passengers.

[0021] Preferably, step A3 only cancels the provision of elevator car location information to waiting passengers by the landing station devices located on the destination floor of the suspected passenger and / or the departure floor of the vulnerable passenger; step A4 only restores the provision of elevator car location information to waiting passengers by the landing station devices located on the destination floor of the suspected passenger and / or the departure floor of the vulnerable passenger.

[0022] Preferably, step A3 cancels the provision of elevator car location information to waiting passengers by the landing device located on the departure floor of the vulnerable passenger only if no suspicious passenger enters the elevator car on the departure floor of the vulnerable passenger and rides the elevator with the vulnerable passenger.

[0023] The present invention also provides an elevator control method for preventing the leakage of destination floor information of vulnerable passengers, the control method comprising:

[0024] Step S1: Determine whether a vulnerable passenger has been detected entering the elevator car. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's riding needs in normal mode and end.

[0025] Step S2: Determine whether there is a first suspicious passenger in the elevator car before the vulnerable passenger enters the elevator car. If so, refuse to accept the vulnerable passenger's destination floor registration information and proceed to the next step; otherwise, proceed directly to the next step.

[0026] Step S3: Determine whether there is a second suspicious passenger who followed the vulnerable passenger into the elevator car after the vulnerable passenger entered the elevator car. If so, receive the destination floor information of the second suspicious passenger and proceed to the next step; otherwise, proceed directly to the next step.

[0027] Step S4: Control the elevator to stop at each destination floor of the suspicious passenger until there are no more suspicious passengers in the car;

[0028] Step S5: Recover and receive destination layer information for vulnerable passengers;

[0029] Step S6: Control the elevator to stop at the destination floor of the vulnerable passenger;

[0030] Step S7, End.

[0031] Preferably, between step S5 and step S6, the elevator further includes: step SB1, canceling the elevator's response to a floor call signal that would cause it to stop before reaching the destination floor of a vulnerable passenger.

[0032] Preferably, before and adjacent to step S6 and / or after and adjacent to step S6, the method further includes: step SB2, controlling the elevator to randomly stop at at least one floor.

[0033] Preferably, when step SB2 is located after and adjacent to step S6, step SB2 controls the elevator to finally stop at the elevator's distributed standby floors.

[0034] Preferably, between steps S4 and S6, the method further includes: step SB3, canceling the landing device from providing elevator car location information to waiting passengers; before and adjacent to step S7, the method further includes: step SB4, restoring the landing device from providing elevator car location information to waiting passengers.

[0035] Preferably, step SB3 only cancels the provision of elevator car location information to waiting passengers by the floor station device located on the destination floor of suspicious passengers and / or the departure floor of vulnerable passengers.

[0036] Preferably, step SB3 cancels the provision of elevator car location information to waiting passengers by the landing device located on the departure floor of the vulnerable passenger only if no suspicious passenger enters the elevator car on the departure floor of the vulnerable passenger and rides the elevator with the vulnerable passenger.

[0037] The present invention also provides an elevator control method for preventing the leakage of departure floor information of vulnerable passengers, the control method comprising:

[0038] Step T1: Receive passenger call signal;

[0039] Step T2: Determine if the elevator call signal comes from a vulnerable passenger. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's elevator call signal in normal mode and end.

[0040] Step T3: Determine if there are any suspicious passengers in the elevator car before the elevator arrives at the departure floor of the vulnerable passenger. If so, proceed to the next step; otherwise, control the elevator to respond to the passenger's call signal in normal mode and end.

[0041] Step T4: Ignore the elevator call signal of the vulnerable passenger and transport the suspicious passenger, then return to step T3.

[0042] Preferably, between step T2 and step T3, the method further includes: step C1, determining whether the current direction of the elevator is consistent with the desired direction of the vulnerable passenger; if so, proceeding to the next step; otherwise, waiting until the elevator reverses direction.

[0043] Preferably, when there is a suspicious passenger in the car who will not get off the elevator before the departure floor of the vulnerable passenger in response to the vulnerable passenger's call signal, step T3 determines that there is a suspicious passenger in the car.

[0044] Preferably, when the destination floor of the suspicious passenger is located in front of the departure floor of the vulnerable passenger relative to the direction of elevator operation, step T3 determines that the suspicious passenger will not get off the elevator in front of the departure floor of the vulnerable passenger.

[0045] Preferably, step T3 determines that there are no suspicious passengers in the elevator car when the elevator arrives at and stops at the floor where the vulnerable passenger departs, provided that at least one of the following conditions is met:

[0046] Condition 1: The destination floors of all suspicious passengers in the elevator car are located between the current floor of the elevator car and the departure floor of the vulnerable passenger, and there is no call signal from the suspicious passenger whose departure floor is located between the current floor of the elevator car and the departure floor of the vulnerable passenger.

[0047] Condition 2: There are no suspicious passengers in the current elevator car and there is no call signal from a suspicious passenger whose departure floor is located between the elevator's current floor and the vulnerable passenger's departure floor.

[0048] Beneficial technical effects

[0049] The elevator control method of the present invention for preventing the leakage of destination or departure floor information of vulnerable passengers can comprehensively and to the greatest extent reduce the risk of leakage of destination or departure floor information of vulnerable passengers. Attached Figure Description

[0050] Figure 1 This is a flowchart of an elevator control method for preventing the leakage of destination floor information of vulnerable passengers, as described in Example 1.

[0051] Figure 2 This is a flowchart of the elevator control method for preventing the leakage of destination floor information of vulnerable passengers, as described in Embodiment 2.

[0052] Figure 3 This is a flowchart of the elevator control method for preventing the leakage of destination floor information of vulnerable passengers, as described in Example 3.

[0053] Figure 4 This is a flowchart of the elevator control method for preventing the leakage of destination floor information of vulnerable passengers, as described in Example 5.

[0054] Figure 5 This is a flowchart of the elevator control method for preventing the leakage of destination floor information of vulnerable passengers, as described in Example 8.

[0055] Figure 6 This is a flowchart of the elevator control method for preventing the leakage of destination floor information of vulnerable passengers, as described in Example 9.

[0056] Figure 7 This is a flowchart of the elevator control method for preventing the leakage of destination floor information of vulnerable passengers after adding steps SB3 and SB4 in Embodiment 9;

[0057] Figure 8 This is a flowchart of an elevator control method for preventing the leakage of departure floor information of vulnerable passengers, as described in Example 10. Detailed Implementation

[0058] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are merely some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention. It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of the present invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0059] Example 1

[0060] like Figure 1 As shown, the elevator control method for preventing the leakage of destination floor information of vulnerable passengers in this embodiment includes the following steps:

[0061] Step 1: Determine if a vulnerable passenger has been detected entering the elevator car. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's riding needs in normal mode and end.

[0062] Step 2: Determine whether there is a first suspicious passenger in the elevator car before the vulnerable passenger enters the elevator car. If so, receive and hide the destination floor registration information of the vulnerable passenger, and proceed to the step located after and adjacent to step 4 (step 5 in this embodiment). Otherwise, receive the destination floor registration information of the vulnerable passenger and proceed to the next step.

[0063] Step 3: Determine whether there is a second suspicious passenger following the vulnerable passenger into the elevator car. If so, hide the vulnerable passenger's destination floor information before the second suspicious passenger enters the car and proceed to the next step; otherwise, proceed directly to the next step.

[0064] Step 4: Receive destination information for the second suspicious passenger;

[0065] Step 5: Control the elevator to stop at each destination floor of the suspicious passenger until there are no more suspicious passengers in the car;

[0066] Step 6: Control the elevator to stop at the destination floor of the vulnerable passenger;

[0067] Step 7: End.

[0068] In this embodiment, the identification of vulnerable passengers can be achieved by obtaining passenger identity information (such as through card swiping or collecting passenger biometric data) and determining the passenger as a vulnerable passenger based on this information, or by using images captured by cameras installed in the waiting hall or elevator car and identifying the passenger as a vulnerable passenger through image recognition. This embodiment does not impose any restrictions on how vulnerable passengers are identified, nor on what kind of passengers can be considered vulnerable passengers; a vulnerable passenger can be any passenger who does not wish their target information to be disclosed.

[0069] Similarly, this embodiment does not impose any limitations on the identification and definition of suspicious passengers (including first suspicious passengers and second suspicious passengers). Any passenger who may have any ill intentions towards a vulnerable passenger or engage in any behavior detrimental to a vulnerable passenger can be considered a suspicious passenger.

[0070] This embodiment employs method 1, namely, receiving and hiding the destination floor registration information of the vulnerable passenger when a first suspicious passenger is present in the elevator car before the vulnerable passenger enters the elevator car, thereby eliminating the possibility that the destination floor information of the vulnerable passenger may be obtained by the first suspicious passenger and thus reducing the risk of leakage of the destination floor information of the vulnerable passenger.

[0071] In this embodiment, when a vulnerable passenger enters the elevator car and a second suspicious passenger follows him into the elevator car, method 2 is adopted, which is to hide the vulnerable passenger's destination floor information before the second suspicious passenger enters the car. This eliminates the possibility that the vulnerable passenger's destination floor information may be obtained by the second suspicious passenger, thus reducing the risk of leakage of the vulnerable passenger's destination floor information.

[0072] Clearly, this embodiment eliminates the risk that the destination floor information of a vulnerable passenger may be leaked to a suspicious passenger who shares the same elevator with the vulnerable passenger while the passenger is inside the elevator car, by employing the two technical means described above.

[0073] Example 2

[0074] This embodiment provides further clarification based on Embodiment 1.

[0075] like Figure 2 As shown, the elevator control method for preventing the leakage of destination floor information of vulnerable passengers in this embodiment further includes the following step between step 5 and step 6:

[0076] Step A1: Cancel the elevator's response to call signals at floors that would cause it to stop before reaching the destination floor of a vulnerable passenger.

[0077] The purpose of adding step A1 is:

[0078] 1) Eliminate the possibility that passengers waiting at the elevator station who enter the car from the elevator station will know the destination floor information of vulnerable passengers when the elevator stops before reaching the destination floor in response to the elevator station's call signal. This can reduce the risk of leakage of the destination floor information of vulnerable passengers.

[0079] 2) Reducing the number of stops before the elevator completes the transport of vulnerable passengers and shortening the service duration for vulnerable passengers helps to reduce the adverse effects of elevators serving vulnerable passengers on other passengers and helps to reduce the energy consumption of elevators (because the elevator transports suspicious passengers first and then vulnerable passengers, vulnerable passengers cannot get off the elevator in time and move with the car for a long time, which leads to increased elevator energy consumption).

[0080] Of course, step A1 can also cancel the elevator's response to all floor call signals. However, compared with this method, the processing method of step A1 in this embodiment can avoid negatively impacting the elevator experience (mainly the waiting stage) of passengers corresponding to other call signals (except for the floor call signals that cause the elevator to stop before reaching the destination floor of the vulnerable passenger) while achieving the same reduction in the risk of leakage of the destination floor information of vulnerable passengers.

[0081] Furthermore, if it can be determined whether the passengers waiting in the elevator lobby are suspicious passengers, step A1 can be modified as follows:

[0082] Step A1: Cancel the elevator's response to a floor call signal from a suspicious passenger in the waiting hall that causes it to stop before reaching the floor intended for a vulnerable passenger.

[0083] Clearly, the modified step A1 can further reduce the number of waiting passengers corresponding to other call signals, except for the floor call signal that causes the elevator to stop before reaching the destination floor of the vulnerable passenger.

[0084] Example 3

[0085] This embodiment provides further limitations based on Embodiment 1 or Embodiment 2.

[0086] like Figure 3 As shown, the elevator control method for preventing the leakage of destination floor information of vulnerable passengers in this embodiment further includes, before and adjacent to step 6 and / or after and adjacent to step 6:

[0087] Step A2: Control the elevator to stop at at least one floor.

[0088] The purpose of adding step A2 is to avoid the risk of the vulnerable passenger's destination floor information being leaked to suspicious passengers sharing the same elevator with the vulnerable passenger (hereinafter referred to as suspicious passengers). Specifically, if a suspicious passenger exits the elevator before the vulnerable passenger and remains stationary in the elevator lobby of their destination floor, they can observe the next elevator stop at that floor and mistakenly identify it as the vulnerable passenger's destination floor. To avoid this risk of leakage, step A2 stops at at least one floor before and adjacent to step 6, and / or after and adjacent to step 6. This gives the vulnerable passenger multiple possible destination floors based on the suspicious passenger's observations, making it difficult for them to correctly determine the vulnerable passenger's true destination floor.

[0089] Clearly, the addition of step A2 solves the problem of how to prevent the destination floor information of vulnerable passengers from being leaked to suspicious passengers who have already disembarked.

[0090] Example 4

[0091] This embodiment provides further clarification based on Embodiment 3.

[0092] In this embodiment, when step A2 is located after and adjacent to step 6, step A2 controls the elevator to finally stop at the elevator's distributed waiting floors.

[0093] The purpose of this technical feature is to avoid the risk of vulnerable passengers' destination floor information being leaked to suspicious passengers who ride with them after they get off the elevator, while simultaneously displaying the elevator's distributed standby status. This prevents the elevator from entering a standby state after a vulnerable passenger gets off the elevator due to a certain period of waiting without a passenger calling the elevator, and then restarting and stopping at a pre-set distributed standby floor to implement distributed standby. Therefore, it helps to reduce the elevator's energy consumption and reduce the wear and tear on elevator-related components.

[0094] Example 5

[0095] This embodiment provides further limitations based on embodiments 1 to 4.

[0096] In this embodiment, after step 5 and adjacent to step 5, the following steps are also included: step A3, canceling the floor station device from providing elevator car position information to waiting passengers; before step 7 and adjacent to step 7, the following steps are also included: step A4, restoring the floor station device from providing elevator car position information to waiting passengers.

[0097] Figure 4 The figure shows the result after adding step A4 to Example 3 or Example 4. The result after adding step A4 to Example 1 or Example 2 can be... Figure 4 The result can be obtained by deleting the steps missing in Example 1 or Example 2 compared to Example 3. These steps will not be illustrated here, and will be discussed further below. Figure 4 This explanation is based on the existing information; for other cases, please refer to the explanation provided. Figure 4 This was obtained from its explanation.

[0098] The purpose of adding steps A3 and A4 is to conceal the destination floor information of vulnerable passengers, preventing passengers in the elevator lobby (including both suspicious and non-suspicious passengers) from guessing the destination floor information of vulnerable passengers. Of course, from a practical point of view (i.e., the effect of the risk of passengers in the elevator lobby guessing the destination floor information of vulnerable passengers), it is preferable that there is step A2 between step A4 and step 6, so as to avoid passengers in the elevator lobby simply guessing that the floor where the elevator is stationary is the destination floor of vulnerable passengers, because some passengers cannot know whether the elevator has stopped at the destination floor of other passengers who are not vulnerable passengers before and / or after stopping at the destination floor of vulnerable passengers, or whether it has stopped at non-passenger destination floors for the purpose of deception.

[0099] Example 6

[0100] This embodiment provides further clarification based on Embodiment 5.

[0101] In Example 5, steps A3 and A4 involve canceling and resuming the provision of elevator car location information to waiting passengers at each floor. The result is that during the elevator's transport of vulnerable passengers, no elevator car location information is displayed at any floor. This approach prevents all waiting passengers at the destination floor (including both suspicious and non-suspicious passengers) from obtaining the elevator car's destination floor information, which is clearly unreasonable. For example, waiting passengers on floors other than the departure floor of vulnerable passengers and the destination floor of suspicious passengers are unaware that the passengers currently in the elevator are vulnerable. Therefore, even if these passengers obtain the elevator's current floor information, they will not associate that floor with vulnerable passengers. Thus, the floor stations on floors other than the departure floor of vulnerable passengers and the destination floor of suspicious passengers not providing elevator car location information to waiting passengers offers no benefit in reducing the risk of vulnerable passengers' destination floor information being leaked.

[0102] Analysis has determined that, except in two specific situations, providing destination floor information to vulnerable passengers by the floor station equipment may result in the leakage of this information to suspicious passengers:

[0103] Scenario 1: If a suspicious passenger disembarks before a vulnerable passenger and remains stationary in the elevator lobby of their destination floor, they can observe the next elevator stop at that floor and assume it to be the vulnerable passenger's destination floor. If step A2 in the embodiment is not followed, the suspicious passenger remaining at the vulnerable passenger's departure floor and observing the elevator's stops may, based on their observations, assume the elevator's current floor on the floor display is the vulnerable passenger's destination floor. This is because some passengers cannot know whether the elevator has stopped at other passengers' destination floors before and / or after stopping at the vulnerable passenger's destination floor, or whether it stopped at non-passenger destination floors for deceptive purposes. Therefore, it is necessary to control the floor display on the vulnerable passenger's departure floor to prevent the vulnerable passenger's destination floor information from being leaked to the suspicious passenger after disembarking.

[0104] Scenario 2: At the departure floor of the vulnerable passenger (e.g., the lobby on the first floor of the building entrance), after the vulnerable passenger enters the elevator car, if a suspicious passenger does not enter the car and rides with the vulnerable passenger, but instead stays at the departure floor of the vulnerable passenger and observes the elevator's stops, if step A2 in the embodiment is not taken, the suspicious passenger who stays at the departure floor of the vulnerable passenger and observes the elevator's stops can determine the floor where the elevator is located when the floor station device is restored as the destination floor of the vulnerable passenger based on their observations. This is because some passengers cannot know whether the elevator has stopped at the destination floor of other passengers who are not vulnerable passengers before and / or after stopping at the destination floor of the vulnerable passenger, or whether it has stopped at a non-passenger's destination floor for the purpose of deception. This is the same situation as when riding with a suspicious passenger. Therefore, it is necessary to control the display of the elevator's floor information during the elevator's transport of the vulnerable passenger by the floor station device at the departure floor of the vulnerable passenger, so as to prevent the destination floor information of the vulnerable passenger from being leaked to the suspicious passenger located at the departure floor of the vulnerable passenger.

[0105] Based on the above analysis, this embodiment proposes the following modifications to steps A3 and A4 in embodiment 5:

[0106] Step A3 cancels the provision of elevator car location information to waiting passengers only by the landing devices located on the destination floor of the suspected passenger and / or the departure floor of the vulnerable passenger; correspondingly, step A4 restores the provision of elevator car location information to waiting passengers only by the landing devices located on the destination floor of the suspected passenger and / or the departure floor of the vulnerable passenger.

[0107] Example 7

[0108] This embodiment provides further clarification based on embodiment 5 or 6.

[0109] This embodiment further analyzes suspicious passengers located on the departure floor of vulnerable passengers.

[0110] We make the following reasonable assumption: there will not be multiple suspicious individuals in the same elevator lobby at the same time. This is because, in terms of the efficiency of suspicious individuals obtaining information about the destination floors of vulnerable passengers, multiple people monitoring one elevator simultaneously will obtain the same number of information about the destination floors of vulnerable passengers as a single person monitoring one elevator.

[0111] If only one suspicious person is monitoring the departure floor of a vulnerable passenger (such as the ground floor lobby at the building entrance), and that vulnerable passenger leaves the ground floor lobby in the same elevator, the suspicious person is likely to miss other vulnerable passengers. Therefore, the suspicious person may remain in the ground floor lobby and observe whether any vulnerable passengers enter the elevator and go to their destination floor. In this case, it is sufficient to ensure that the landing device at the departure floor of the vulnerable passenger does not provide elevator floor stop information (only) while the elevator is transporting the vulnerable passenger.

[0112] Based on the above analysis, the conditions for implementing steps A3 and A4 are as follows: only when no suspicious passenger enters the elevator car on the departure floor of the vulnerable passenger and rides the elevator with the vulnerable passenger, will step A3 cancel the provision of elevator car location information to waiting passengers by the landing device located on the departure floor of the vulnerable passenger.

[0113] Example 8

[0114] like Figure 5 As shown in this embodiment, the elevator control method for preventing the leakage of destination floor information of vulnerable passengers is characterized in that the control method includes:

[0115] Step S1: Determine whether a vulnerable passenger has been detected entering the elevator car. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's riding needs in normal mode and end.

[0116] Step S2: Determine whether there is a first suspicious passenger in the elevator car before the vulnerable passenger enters the elevator car. If so, refuse to accept the vulnerable passenger's destination floor registration information and proceed to the next step; otherwise, proceed directly to the next step.

[0117] Step S3: Determine whether there is a second suspicious passenger who followed the vulnerable passenger into the elevator car after the vulnerable passenger entered the elevator car. If so, receive the destination floor information of the second suspicious passenger and proceed to the next step; otherwise, proceed directly to the next step.

[0118] Step S4: Control the elevator to stop at each destination floor of the suspicious passenger until there are no more suspicious passengers in the car;

[0119] Step S5: Recover and receive destination layer information for vulnerable passengers;

[0120] Step S6: Control the elevator to stop at the destination floor of the vulnerable passenger;

[0121] Step S7, End.

[0122] Unlike Embodiment 1, this embodiment handles the first and second suspicious passengers as follows: when there are first and / or second suspicious passengers in the elevator car, the elevator refuses to accept the destination floor information registration of the vulnerable passenger. Instead, the elevator accepts the destination floor information registration of the vulnerable passenger only after all non-suspicious passengers have been transported, and then transports the vulnerable passenger. Since there are no suspicious passengers in the car when the vulnerable passenger registers their destination floor information, the possibility of the vulnerable passenger's destination floor being leaked to the first and second suspicious passengers can be eliminated. Therefore, this solution can reduce the risk of leakage of the vulnerable passenger's destination floor information.

[0123] Example 9

[0124] This embodiment provides further clarification based on Embodiment 1.

[0125] like Figure 6 As shown, between step S5 and step S6, the following is also included:

[0126] Step SB1: Cancel the elevator's response to the call signal of the floor that will stop before reaching the destination floor of the vulnerable passenger.

[0127] The purpose of adding step SB1 is to reduce the number of stops the elevator makes before completing the transport of vulnerable passengers, shorten the service duration for vulnerable passengers, reduce the adverse effects of the elevator serving vulnerable passengers on other passengers, and help the elevator reduce its operating energy consumption.

[0128] The following steps are included before and adjacent to step S6 and / or after and adjacent to step S6: step SB2, controlling the elevator to randomly stop at at least one floor.

[0129] The purpose of adding step SB2 is to avoid the risk of vulnerable passengers' destination floor information being leaked to suspicious passengers sharing the same elevator. Specifically, if a suspicious passenger exits the elevator before the vulnerable passenger and remains stationary in the elevator lobby at their destination floor, they can observe the next elevator stop at that floor and mistakenly identify it as the vulnerable passenger's destination floor. To avoid this risk, step SB2 stops at at least one floor before and adjacent to step S6, and / or after and adjacent to step S6. This gives the vulnerable passenger multiple possible destination floors from the perspective of the suspicious passenger, making it difficult for them to correctly determine the vulnerable passenger's true destination floor.

[0130] When step SB2 occurs after and adjacent to step S6, step SB2 controls the elevator to finally stop at a designated waiting floor. The purpose of this feature is to simultaneously display the elevator's designated waiting area while avoiding the risk of vulnerable passengers' destination floor information being leaked to suspicious passengers who have already disembarked. This prevents the elevator from restarting and stopping at a pre-designated waiting floor after a vulnerable passenger has disembarked and entered a waiting state due to a lack of passenger calls, thus reducing energy consumption and wear and tear on elevator components.

[0131] like Figure 7 As shown, between steps S4 and S6, step SB3 is added: canceling the floor station device from providing elevator car location information to waiting passengers; before and adjacent to step S7, step SB4 is added: restoring the floor station device from providing elevator car location information to waiting passengers. The purpose of adding steps SB3 and SB4 is to hide the destination floor information of vulnerable passengers, so that passengers in the waiting hall (including suspicious and non-suspicious passengers) cannot guess the destination floor information of vulnerable passengers.

[0132] In order to reduce the needless cancellation of floor stations from providing elevator car location information to waiting passengers, step SB3 only cancels the provision of elevator car location information to waiting passengers by floor stations located on the destination floor of suspected passengers and / or the departure floor of vulnerable passengers.

[0133] Preferably, step SB3 cancels the provision of elevator car location information to waiting passengers by the landing device located on the departure floor of the vulnerable passenger only if no suspicious passenger enters the elevator car on the departure floor of the vulnerable passenger and rides the elevator with the vulnerable passenger.

[0134] Example 10

[0135] This embodiment addresses a situation where the departure floor information of a vulnerable passenger may be leaked to suspicious individuals (i.e., suspicious passengers). Specifically, if a vulnerable passenger is located on a non-terminal floor and a suspicious passenger is already present in the elevator car, when the elevator car responds to the vulnerable passenger's call signal and stops at the vulnerable passenger's waiting floor, even if the vulnerable passenger does not enter the car, the suspicious individual inside the car will obtain the vulnerable passenger's boarding floor (i.e., departure floor). The leakage of the vulnerable passenger's departure floor information to suspicious individuals is also dangerous and should be avoided.

[0136] To solve this problem, such as Figure 8 As shown, this embodiment proposes the following elevator control method to prevent the leakage of departure floor information of vulnerable passengers, including:

[0137] Step T1: Receive passenger call signal;

[0138] Step T2: Determine if the elevator call signal comes from a vulnerable passenger. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's elevator call signal in normal mode and end.

[0139] Step T3: Determine if there are any suspicious passengers in the elevator car before the elevator arrives at the departure floor of the vulnerable passenger. If so, proceed to the next step; otherwise, control the elevator to respond to the passenger's call signal in normal mode and end.

[0140] Step T4: Ignore the elevator call signal of the vulnerable passenger and transport the suspicious passenger, then return to step T3.

[0141] Here, the methods used in step T2 to determine whether the elevator call signal comes from a vulnerable passenger include, but are not limited to:

[0142] Method 1: Utilize passenger identification information. Based on the pre-registered identification information and the correspondence between the passenger and whether they are a vulnerable passenger, determine whether the elevator call signal originates from a vulnerable passenger. There are no restrictions on how passenger identification information is determined. For example: if a vulnerable passenger registers their elevator call signal using a mobile phone, the passenger's mobile phone ID can be used; when a passenger swipes a card, the card information can be used to determine the passenger's identity; if the floor is equipped with a biometric identification device, the biometric identification device can be used to determine the passenger's identity; if the floor is equipped with a camera device for acquiring passenger images, the passenger's identity can be determined based on the image recognition results, etc.

[0143] Method 2: In addition to receiving ordinary elevator call signals from vulnerable passengers, the elevator call signal registration device on the floor may also receive special requests from vulnerable passengers that require protection of their privacy information (such as the departure floor). In this case, the elevator call signal received in step T1 should contain the information of such special requests.

[0144] This embodiment does not limit the determination of whether passengers in the elevator car are suspicious persons (i.e., suspicious passengers) when the elevator stops at the waiting floor of vulnerable passengers (i.e., its departure floor). For example, a camera inside the elevator car (currently, the installation rate of cameras inside elevator cars is very high) can be used to determine whether the existing passengers in the elevator car are suspicious persons.

[0145] It is easy to understand that in step T4, when step T3 determines that there is a suspicious passenger in the car when the elevator arrives and stops at the departure floor of the vulnerable passenger, the elevator call signal of the vulnerable passenger is ignored and the suspicious passenger is transported. Such a handling measure can obviously eliminate the possibility that the departure floor information of the vulnerable passenger will be obtained by the suspicious person in the car when the elevator stops at the departure floor of the vulnerable passenger in response to the elevator call signal. Therefore, it can avoid the risk of the departure floor information of the vulnerable passenger being leaked to the suspicious person.

[0146] Example 11

[0147] This embodiment provides further limitations based on Embodiment 10.

[0148] In this embodiment, the elevator control method for preventing the leakage of destination floor information of vulnerable passengers further includes the following step between steps T2 and T3:

[0149] Step C1: Determine whether the current direction of the elevator is consistent with the direction the vulnerable passenger expects to ride. If so, proceed to the next step; otherwise, wait until the elevator reverses direction.

[0150] Since the elevator car will only respond to call signals when the desired direction of travel (i.e., the direction the passenger expects the elevator car to be in after entering the car) is consistent with the current direction of elevator travel (i.e., the destination floor of the car is located in front of its departure floor relative to the current direction of travel) when it is running in a certain direction (unless the elevator does not need to stop in front of the departure floor of the call signal relative to the direction of travel and reverses the direction of travel), the addition of step C1 can significantly simplify the judgment of the subsequent step T3.

[0151] Example 12

[0152] This embodiment provides further clarification based on Embodiment 11.

[0153] Step T3 determines whether there are suspicious passengers in the elevator car according to the following rules:

[0154] When there is a suspicious passenger in the elevator car who will not get off the elevator before the departure floor of the vulnerable passenger in response to the vulnerable passenger's call signal, step T3 determines that there is a suspicious passenger in the elevator car.

[0155] Furthermore, when the destination floor of the suspicious passenger is located ahead of the departure floor of the vulnerable passenger relative to the direction of elevator operation, step T3 determines that the suspicious passenger will not get off the elevator in front of the departure floor of the vulnerable passenger.

[0156] Example 13

[0157] This embodiment provides further clarification based on Embodiment 11.

[0158] Another rule for determining whether there are suspicious passengers in the elevator car in step T3 is:

[0159] When at least one of the following conditions is met, step T3 determines that there are no suspicious passengers in the elevator car when the elevator arrives at and stops at the floor where the vulnerable passenger departed:

[0160] Condition 1: All suspicious passengers in the elevator car are destined for floors between the current floor of the elevator car and the departure floor of the vulnerable passenger, and there is no call signal from the suspicious passenger whose departure floor is between the current floor of the elevator car and the departure floor of the vulnerable passenger.

[0161] Condition 2: There are no suspicious passengers in the current elevator car and there is no call signal from a suspicious passenger whose departure floor is located between the elevator's current floor and the vulnerable passenger's departure floor.

Claims

1. An elevator control method for preventing leakage of a landing information of a weak passenger, characterized by, The control method includes: Step 1: Determine if a vulnerable passenger has been detected entering the elevator car. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's riding needs in normal mode and end. Step 2: Determine whether there is a first suspicious passenger in the elevator car before the vulnerable passenger enters the elevator car. If so, receive and hide the vulnerable passenger's destination floor registration information, and proceed to the step after and adjacent to Step 4. Otherwise, receive the vulnerable passenger's destination floor registration information and proceed to the next step. Step 3: Determine whether there is a second suspicious passenger following the vulnerable passenger into the elevator car. If so, hide the vulnerable passenger's destination floor information before the second suspicious passenger enters the car and proceed to the next step; otherwise, proceed directly to the next step. Step 4: Receive destination information for the second suspicious passenger; Step 5: Control the elevator to stop at each destination floor of the suspicious passenger until there are no more suspicious passengers in the car; Step 6: Control the elevator to stop at the destination floor of the vulnerable passenger; Step 7: End.

2. The elevator control method for preventing leakage of a vulnerable passenger destination floor information according to claim 1, characterized by, Between step 5 and step 6, the following is also included: Step A1: Cancel the elevator's response to call signals at floors that would cause it to stop before reaching the destination floor of a vulnerable passenger.

3. The elevator control method for preventing leakage of a weak passenger destination floor information according to claim 1 or 2, characterized by, The method further includes the following at a location before and adjacent to step 6 and / or after and adjacent to step 6: Step A2: Control the elevator to stop at at least one floor.

4. The elevator control method for preventing leakage of a weak passenger destination floor information according to claim 3, characterized by, When step A2 is located after and adjacent to step 6, step A2 controls the elevator to finally stop at the elevator's distributed waiting floors.

5. The elevator control method for preventing leakage of destination floor information of vulnerable passengers according to claim 1, characterized in that, Following and adjacent to step 5, the following step is also included: Step A3, canceling the floor station device from providing elevator car location information to waiting passengers; Before and adjacent to step 7, the following step is also included: step A4, whereby the floor station restoration device provides elevator car location information to waiting passengers.

6. The elevator control method for preventing leakage of a weak passenger destination floor information according to claim 5, characterized by, Step A3 only cancels the provision of elevator car location information to waiting passengers by the landing station device located on the destination floor of suspicious passengers and / or the departure floor of vulnerable passengers. Step A4 only restores the floor station device located at the destination floor of the suspected passenger and / or the departure floor of the vulnerable passenger to provide elevator car location information to waiting passengers.

7. The elevator control method for preventing leakage of a vulnerable passenger destination floor information according to claim 6, characterized by, Step A3 only cancels the provision of elevator car location information to waiting passengers by the landing device located on the departure floor of the vulnerable passenger if no suspicious passenger enters the elevator car on the departure floor of the vulnerable passenger and rides the elevator with the vulnerable passenger.

8. An elevator control method for preventing leakage of a landing information of a weak passenger, characterized by, The control method includes: Step S1: Determine whether a vulnerable passenger has been detected entering the elevator car. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's riding needs in normal mode and end. Step S2: Determine whether there is a first suspicious passenger in the elevator car before the vulnerable passenger enters the elevator car. If so, refuse to accept the vulnerable passenger's destination floor registration information and proceed to the next step; otherwise, proceed directly to the next step. Step S3: Determine whether there is a second suspicious passenger who followed the vulnerable passenger into the elevator car after the vulnerable passenger entered the elevator car. If so, receive the destination floor information of the second suspicious passenger and proceed to the next step; otherwise, proceed directly to the next step. Step S4: Control the elevator to stop at each destination floor of the suspicious passenger until there are no more suspicious passengers in the car; Step S5: Recover and receive destination layer information for vulnerable passengers; Step S6: Control the elevator to stop at the destination floor of the vulnerable passenger; Step S7, End.

9. The elevator control method for preventing leakage of a weak passenger destination floor information according to claim 8, characterized by, Between step S5 and step S6, the following is also included: Step SB1: Cancel the elevator's response to the call signal of the floor that will stop before reaching the destination floor of the vulnerable passenger.

10. The elevator control method for preventing leakage of information of a landing floor of a weak passenger according to claim 8, characterized by, The method further includes the following at the location before and adjacent to step S6 and / or after and adjacent to step S6: Step SB2: Control the elevator to randomly stop at at least one floor.

11. The elevator control method for preventing leakage of information of a landing floor of a weak passenger according to claim 10, characterized by, When step SB2 is located after and adjacent to step S6, step SB2 controls the elevator to finally stop at the elevator's distributed standby floors.

12. The elevator control method for preventing leakage of destination floor information of vulnerable passengers according to any one of claims 8 to 11, characterized in that, Between steps S4 and S6, the following step is also included: step SB3, where the cancellation device provides elevator car location information to waiting passengers; Before and adjacent to step S7, the following step is also included: step SB4, where the floor station restoration device provides elevator car location information to waiting passengers.

13. The elevator control method for preventing leakage of information of a landing floor of a weak passenger according to claim 12, characterized by, Step SB3 only cancels the provision of elevator car location information to waiting passengers by the landing device located on the destination floor of suspicious passengers and / or the departure floor of vulnerable passengers.

14. The elevator control method for preventing leakage of information of a landing for a weak passenger according to claim 13, characterized by, Step SB3 only cancels the provision of elevator car location information to waiting passengers by the landing device located on the departure floor of the vulnerable passenger if no suspicious passenger enters the elevator car on the same floor as the vulnerable passenger.

15. An elevator control method for preventing leakage of a departure floor information of a vulnerable passenger, characterized by, The control method includes: Step T1: Receive passenger call signal; Step T2: Determine if the elevator call signal comes from a vulnerable passenger. If yes, proceed to the next step; otherwise, control the elevator to respond to the passenger's elevator call signal in normal mode and end. Step T3: Determine if there are any suspicious passengers in the elevator car before the elevator arrives at the departure floor of the vulnerable passenger. If so, proceed to the next step; otherwise, control the elevator to respond to the passenger's call signal in normal mode and end. Step T4: Ignore the elevator call signal of the vulnerable passenger and transport the suspicious passenger, then return to step T3.

16. The elevator control method for preventing departure floor information of a vulnerable passenger from being leaked according to claim 15, characterized by, Between step T2 and step T3, the following is also included: Step C1: Determine whether the current direction of the elevator is consistent with the direction the vulnerable passenger expects to ride. If so, proceed to the next step; otherwise, wait until the elevator reverses direction.

17. The elevator control method for preventing departure floor information of a vulnerable passenger from being leaked according to claim 16, characterized by, When there is a suspicious passenger in the elevator car who will not get off the elevator before the departure floor of the vulnerable passenger in response to the vulnerable passenger's call signal, step T3 determines that there is a suspicious passenger in the elevator car.

18. The elevator control method for preventing departure floor information of a vulnerable passenger from being leaked according to claim 17, characterized by, When the destination floor of a suspicious passenger is located ahead of the departure floor of a vulnerable passenger relative to the direction of elevator travel, step T3 determines that the suspicious passenger will not get off the elevator before the departure floor of the vulnerable passenger.

19. The elevator control method for preventing departure floor information of a vulnerable passenger from being leaked according to claim 16, characterized by, When at least one of the following conditions is met, step T3 determines that there are no suspicious passengers in the elevator car when the elevator arrives at and stops at the floor where the vulnerable passenger departed: Condition 1: The destination floors of all suspicious passengers in the elevator car are located between the current floor of the elevator car and the departure floor of the vulnerable passenger, and there is no call signal from the suspicious passenger whose departure floor is located between the current floor of the elevator car and the departure floor of the vulnerable passenger. Condition 2: There are no suspicious passengers in the current elevator car and there is no call signal from a suspicious passenger whose departure floor is located between the elevator's current floor and the vulnerable passenger's departure floor.

Images