Method and device for monitoring the drive operation of a passenger conveyor system

Abstract

The invention relates to a monitoring system (1) and to a method for monitoring passenger conveyor systems (51). The monitoring system (1) has at least one hazard analysis module (11), an interaction module (21), a control module (31) and at least one movement detection module (41, 42), which are connected to one another via a data network (3). As soon as the hazard analysis module (11) detects a critical situation (101) in a movement sequence image (441, 442) of the movement detection module (41, 42), the hazard analysis module sends a warning signal (13) to the interaction module (21) and the control module (31), wherein, directly after the warning signal (13) is received, the movement sequence image (441,..., 446+2n) correlating to the warning signal (13) is reproduced on a screen (22) of the interaction module (21) and the control module (31) initialises a change in the drive operation (F) for the passenger conveyor system (51) associated with the warning signal (13). Monitoring staff can suppress or cancel the initialised change in the drive operation (F) by manually actuating an input device E (30).

Description

[0001] METHOD AND DEVICE FOR MONITORING THE FERRY OPERATION OF A PASSENGER TRANSPORTATION SYSTEM

[0002] The invention relates to a method for monitoring the ferry operation of one or more passenger conveying systems and to a device for carrying out this method.

[0003] Passenger conveyor systems such as escalators and moving walkways are used in department stores and large shopping centers, as well as in train stations, subway stations, and airports. In the latter three areas, there can be an increased risk of accidents during rush hour if users in a hurry crowd other users on the passenger conveyor systems. This can cause people in a hurry to fall on the conveyor belt or step belt of the escalator or the pallet belt of the moving walkway and sustain serious injuries if the step belt or pallet belt is not stopped, for example, by an emergency stop. Others, in turn, carelessly misuse passenger conveyor systems as sports and play equipment, thereby endangering themselves and other users.

[0004] Video cameras are used to monitor these passenger conveyor systems, whose video sequences are transmitted in real time to a monitoring room and displayed on screens. From the monitoring room, monitoring personnel usually monitor several passenger conveyor systems, with each group of passenger conveyor systems being supervised by a single monitor. In addition, the monitor often also monitors and operates the lighting, fire alarms, ventilation, and possibly other equipment such as security gates and the like within their assigned group of passenger conveyor systems.

[0005] This high density of monitoring activities can lead to rapid fatigue of the monitoring personnel and a reduced level of attention. If a critical situation occurs on one of the passenger conveyor systems, the reduced level of attention can worsen the critical situation and, in severe cases, lead to serious injuries or, in the worst case, death of the affected user. To solve this problem, monitoring rooms are designed so that critical situations involving users on the passenger conveyor system can be automatically detected by processing motion sequence recordings using image recognition. As soon as a critical situation is detected, the corresponding motion sequence recording is displayed on the monitoring room screen.The movement sequence recording is provided with an identification number so that the monitoring person can immediately identify on which of their group's personnel conveyor systems a critical situation has occurred.

[0006] Below the screen, a number of physical emergency stop switches are arranged in a manner corresponding to the number of monitored passenger conveyors, with each emergency stop switch connected to the safety circuit of the corresponding passenger conveyor. A corresponding monitoring system for a passenger conveyor is disclosed, for example, in JP 5917327 B2.

[0007] As soon as a critical situation occurs, the monitoring personnel must find the assigned emergency stop switch of the passenger conveyor system displayed in the movement sequence recording with the identification number and activate it.

[0008] This searching can significantly reduce the emergency response speed, resulting in the intervention of the monitoring room's surveillance personnel being too late. Furthermore, during dramatic scenes on the motion sequence recording, the monitoring personnel may panic and press the wrong emergency stop button, causing an emergency stop of another passenger conveyor that shouldn't have stopped. This does not defuse the critical situation, and users of the mistakenly stopped passenger conveyor are inconvenienced, as the stopped system cannot be restarted immediately.

[0009] In the case of an abrupt stop, such as the emergency stop defined in standards (e.g., EN-115), users not affected by the critical situation may even fall and injure themselves. However, it is entirely possible for a falling user to catch themselves. This resolves the critical situation automatically, and no emergency stop is necessary. In other words, situations may arise in which initiating an emergency stop would cause more harm than good to the users. Such potential scenarios lead operators to believe that the expertise of monitoring personnel is indispensable when assessing critical situations.

[0010] In order to solve the problems described above, the object of the present invention is to provide a monitoring system for a passenger conveyor system which reduces the emergency response speed of the monitoring system to a minimum, minimizes human error and takes into account the beliefs of operators.

[0011] This problem is solved by a method for monitoring the ferry operation of a passenger conveyor system using a monitoring system. The monitoring system comprises a hazard analysis module, an interaction module, a control module, and at least one motion detection module. The motion detection module is directed at an associated passenger conveyor system and can capture electronically processable motion sequence recordings of situations occurring on the associated passenger conveyor system.

[0012] In other words, one or more motion detection modules are directed at an assigned passenger conveyor system and continuously record the processes or situations currently occurring on the escalator or moving walkway. Video cameras, thermal imaging cameras, laser scanners, TOF cameras, a set of multiple sensors, and the like can be used as motion detection modules, whose motion sequence recordings are accordingly captured as a video sequence, image sequence, thermal image sequence, etc. in an electronically processable form. When using multiple motion detection modules per passenger conveyor system, each motion detection module is preferably assigned a specific section or area, so that not the entire escalator or moving walkway is visible in one of the motion sequence recordings.

[0013] According to the invention, the motion sequence recordings are transmitted to the hazard analysis module in real time. In the hazard analysis module, the motion sequence recordings are examined for critical situations using analysis algorithms. In other words, automated detection processes or analysis methods known from the technical field of surveillance electronics, such as image analysis methods and corresponding algorithms, motion analysis methods and corresponding algorithms, statistical and heuristic evaluation methods, and the like, are used to detect user movements that deviate from normal or are atypical. Depending on the movement sequence of a deviating movement, the hazard analysis module can assume a critical situation. A possible implementation of this automated assessment process is described in more detail below.

[0014] As soon as a critical situation occurs in the movement sequence recordings and this is detected by the hazard analysis module, the hazard analysis module generates a warning signal. The warning signal is sent to the interaction module and the control module. Immediately after receipt of the warning signal, the movement sequence recording correlating with the warning signal is displayed on a screen of the interaction module. At the same time, based on the warning signal, the control module initiates a change in ferry operation on the passenger conveyor system assigned to the warning signal. The correlation between the warning signal and the correct movement sequence recording can be achieved, for example, by the movement sequence recording containing an identification number assigned by the motion detection module, and the hazard analysis module also adding this identification number to the warning signal.

[0015] In other words, the monitoring system automatically initiates a change in the ferry operation of the passenger conveyor system on which a critical situation has been detected. This results in an extremely safe and short response time, which cannot be achieved with the manual triggering described above. Human error is also eliminated.

[0016] However, a critical situation may resolve itself, for example, if a falling passenger is able to catch themselves. In such a scenario, an immediate stop of ferry operations would be unnecessary and could even affect other users. To respond appropriately to such situations, the interaction module features an input device that is also activated by the warning signal. Manually operating the input device instructs the control module to immediately prevent or reverse the change in ferry operations initiated by the warning signal.

[0017] In other words, the input device allows the on-duty supervisor to intervene in the automatic changes to ferry operations on the passenger conveyor system and to prevent or reverse them. The input device can be a push button, a buzzer button, a virtually generated button on the screen (touch-sensitive screen surface), and the like.

[0018] As mentioned above, the hazard analysis module performs an automated process of detecting and assessing critical situations. Deviating movement sequences identified using known extraction and analysis methods are extracted from the motion sequence recordings and subsequently assessed. To carry out the assessment process, a set of possible critical situations is stored in the hazard analysis module. This set includes various atypical movement scenarios, with which the movement sequences extracted from the motion sequence recordings are compared.

[0019] This set of atypical movement scenarios can be generated, for example, through a machine learning process. Typical critical situations such as falls or careless actions on the passenger conveyor system are recreated using a dummy or stuntman, recorded, and the extracted movement sequences are incorporated into the set as atypical movement scenarios. It is also possible, of course, to create such movement scenarios purely virtually with suitable software and sufficient computing power. Of course, the set can also be supplemented with other atypical movement scenarios that led to an accident during operation of the passenger conveyor system and that were not detected by the hazard analysis module.If there is sufficient agreement between an extracted movement sequence and an atypical movement scenario, the hazard analysis module assumes the existence of a critical situation and sends a warning signal to the interaction module and the control module.

[0020] In one embodiment of the invention, the various atypical movement scenarios of the set have different weightings in the sense of a hierarchy. Depending on these weightings, different actions can be defined to change the ferry operation. For example, the control module can open a switch of a safety circuit of the passenger conveyor system, which immediately triggers an emergency stop of the ferry operation if a detected user fall has a very high weighting and an emergency stop is defined as the action for this high weighting.

[0021] It is also possible for a user to resolve the critical situation themselves, for example by catching their fall by holding onto the handrail and then standing up again. However, the user must still be in a semi-upright position. In the hazard analysis module, an atypical movement scenario corresponding to this posture can be assigned a medium weighting. To give the user sufficient time to "rescue" themselves, with a medium weighting, the control module only opens a switch in a safety circuit of the passenger conveyor system after a predefined delay, resulting in an emergency stop of the ferry operation after the delay has elapsed. This also gives the supervisor more time to decide whether or not to activate the input device.

[0022] For example, if a user steps onto the conveyor system in the opposite direction of travel, this critical situation can be assigned a low priority. For this low priority, the control module can send a brake signal to a control system of the conveyor system. This brake signal initiates a braking action of the conveyor system via its frequency converter and its service brake. This braking action can be very gentle, preventing users on the conveyor system from falling.

[0023] In a further embodiment of the invention, upon receiving a warning signal, the control module issues warning messages and / or instructions to the users of the passenger conveyor system associated with the warning signal. Acoustic and / or visual warnings can be issued to the users of the passenger conveyor system via an output module as warning messages. The output module is arranged in the area of ​​the passenger conveyor system to which the warning signal is associated. In other words, each passenger conveyor system is assigned at least one output module, which is operated, for example, depending on an identification number of the warning signal. This output module is preferably directed at the passenger conveyor system in such a way that the acoustic warning only addresses the users of this passenger conveyor system or individual users, and not the entire surrounding area.The output module can be a loudspeaker, a public address system, a screen display, a projector for two-dimensional images or holograms, and the like. A combination of acoustic and visual warnings or alerts is most effective. The warnings issued can be tailored to the critical situation in question and its resolution, so that if an emergency stop is initiated, the other users are warned before the emergency stop is initiated. Preferably, a set of different warnings is available, from which a warning appropriate for the critical situation is automatically selected, for example, based on the weighting described above, and issued via the output module.

[0024] In a further embodiment of the invention, the monitoring system comprises multiple motion detection modules that record the motion sequence recordings from at least two different passenger conveyor systems. Each of the motion detection modules has an identification number and assigns this identification number to its motion sequence recordings, or codes its motion sequence recordings accordingly. As soon as the hazard analysis module detects a critical situation in a motion sequence recording, it assigns the warning signal to be issued the same identification number that the corresponding motion sequence recording with the critical situation has.

[0025] The hazard analysis module can also assign a personnel conveyor identification number to the issued warning signal, which is uniquely assigned to the corresponding identification number of the motion detection module. This assignment is made, for example, via an assignment table stored in the hazard analysis module. It is also possible for the assignment to be made in the control module if the assignment table is stored there. In this case, the warning signal does not need to contain a personnel conveyor identification number.

[0026] In a further embodiment of the invention and with implemented weighting, the hazard analysis module can send warning signals with the corresponding weighting to the interaction module immediately following one another when multiple critical situations are detected simultaneously. The motion sequence recordings are displayed sequentially on the screen of the interaction module based on their weighting. In other words, the motion sequence recording with the most critical situation is highlighted first. Once a predetermined time has elapsed, the motion sequence recording with the second most critical situation is highlighted, and so on. A transition to the next motion sequence recording also occurs if the monitoring personnel have manually operated the input device.

[0027] As already indicated above, the input device can have a manually operated switch, which is preferably only activated following a warning signal to prevent accidental operation. However, it is much clearer for the monitoring personnel if the interaction module, in response to the warning signal, generates a deletion input field on the screen to activate and manually operate the input device. Manually tapping the deletion input field causes the interaction module to delete the warning signal and cancel the associated display of the corresponding movement sequence recording. As explained in detail above, when the input device is activated, the change in ferry operation automatically initiated by the warning signal is immediately prevented or reversed.

[0028] In a further embodiment of the invention, upon receiving a warning signal, the interaction module can issue a visual and / or acoustic alarm to the monitoring personnel in order to draw their attention to the motion sequence recording displayed on the screen. In a further embodiment of the invention, the interaction module has several small screens and one large screen. The number of screens corresponds to the number of motion detection modules, whereby, upon a warning signal, the motion sequence recording corresponding to the warning signal is displayed on the large screen. This visually highlights the motion sequence recording associated with a warning signal, allowing the responsible monitoring personnel to pay full attention to it and better recognize and assess details.

[0029] It is also possible that the hazard analysis module cannot detect a critical situation because, for example, the recorded movement pattern does not correspond to any of the atypical movement scenarios. To solve this problem, the monitoring system can be designed so that each screen is touch-sensitive, and when a small screen is tapped, its movement sequence recording is displayed on the large screen. After a specified time, the interaction module also sends a warning signal with the corresponding identification number of the movement sequence recording and the assigned passenger conveyor system identification number to the control module, which, based on the received warning signal, initiates a change in ferry operation on the passenger conveyor system assigned to the warning signal.

[0030] Furthermore, the interaction module also activates the input device of the monitoring system, so that manual operation of the input device instructs the control module to immediately prevent or reverse the change in ferry operation initiated by the warning signal.

[0031] In other words, a supervisor may notice a situation that appears critical while scanning the various screens. Tapping the screen visually highlights the corresponding movement sequence recording, making it easier to see. Furthermore, simply tapping the screen prepares for a change in ferry operation for the corresponding passenger conveyor system. This change can, for example, always be defined as an emergency stop. To give the supervisor some time for a more precise overview, a preset time is set. After this time, a warning signal is sent to the control module, and the change in ferry operation or the emergency stop is initiated immediately.If, upon closer inspection, the situation turns out not to be critical, the supervisor can operate the input device and delete the warning signal before it is sent to the control module or immediately prevent or reverse the change in ferry operation initiated by the warning signal.

[0032] In an alternative embodiment of the invention, the interaction module can have only a single, very large screen, which is divided into several small screen areas and one large screen area. The number of screen areas corresponds to the number of motion detection modules, whereby, following a warning signal, the motion sequence recording corresponding to the warning signal is displayed on the large screen area. Otherwise, the functionality of this embodiment is identical to the previously described embodiment with multiple screens.

[0033] Embodiments of the invention are described below with reference to the accompanying drawings, whereby neither the drawings nor the description are to be interpreted as limiting the invention. Identical or equivalent features have the same reference numerals. They show:

[0034] Figure 1: a three-dimensional view of a passenger conveyor system whose ferry operation is to be monitored and a monitoring system for monitoring this passenger conveyor system;

[0035] Figure 2: a three-dimensional view of several passenger conveyor systems whose ferry operations are to be monitored and the monitoring system of Figure 1 adapted to monitor several passenger conveyor systems.

[0036] Figure 1 shows a monitoring system 1 for a passenger conveyor system 51. The monitoring system 1 comprises a hazard analysis module 11, an interaction module 21, a control module 31, and two motion detection modules 41, 42. The aforementioned modules 11, 21, 31, 41, 42 are connected to one another via a data network 3. The design of the data network 3 is not shown in detail, as it can be set up in a variety of ways, such as via a local wired and / or wireless data network 3, via internet connections to a data cloud 5, via CAN bus systems, Bluetooth connections, and the like. What is relevant is that the individual modules 11, 21, 31, 41, 42 can exchange data with each other, whereby this data exchange between the individual modules 11, 21, 31, 41, 42 can be unidirectional or bidirectional, depending on requirements.Only the most important connections of the data network 3 are symbolically represented by arrows. It should also be noted that at least the hazard analysis module 11, possibly also a computing unit 29 of the interaction module 21 and / or the control module 31 and their data storage and computing units can be implemented in the data cloud 5.

[0037] The two motion detection modules 41, 42 are directed toward the associated passenger conveyor system 51. Of course, only one motion detection module 41, 42 may be present if the conveying area 53 of the passenger conveyor system 51 is not too long and a single motion detection module 41, 42 is sufficient to survey or detect the entire conveying area 53 of the passenger conveyor system 51, its balustrades 54, 55, and its two access areas 56, 57.

[0038] The motion detection module 41, 42 can capture electronically processable motion sequence recordings 441, 442 of situations occurring on the associated passenger conveyor system 51. This can also include the immediate surroundings of the passenger conveyor system 51. This immediate surroundings include, for example, the areas of the structure (not shown) in front of the access areas 56, 57 in which the passenger conveyor system 51 is installed. The areas in front of the structure are also referred to as vestibules and are monitored, if necessary, by proximity sensors of the passenger conveyor system 51, which transmit their detection data to an automatic start / stop system of the passenger conveyor system 51.

[0039] Video cameras, thermal imaging cameras, easer scanners, TOF cameras, a combination of multiple sensors, and the like can be used as motion detection modules 41, 42, with their motion sequence recordings 441, 442 being recorded accordingly as a video sequence, image sequence, thermal image sequence, etc. in electronically processable form. When using multiple motion detection modules 41, 42 per passenger conveyor system 51, each motion detection module 41, 42 is assigned a specific section or area (see Figure 2). These areas preferably overlap so that there are no monitoring gaps in which critical situations 101 of users 102 could occur without being observed.

[0040] In order to efficiently and safely monitor the ferry operation of the passenger conveyor system 51, the motion detection modules 41, 42 transmit their motion sequence recordings 441, 442 in real time in parallel to the interaction module 21 and to the hazard analysis module 11. For this purpose, the motion detection modules 41, 42 provide their motion sequence recordings 441, 442 with their identification numbers 44IN, 442N in order to be able to process them correctly in the hazard analysis module 11, the interaction module 21 and the control module.

[0041] In the present example, the motion sequence recordings 441, 442 of the two motion detection modules 41, 42 are also displayed side by side on a screen 22 of the interaction module 21, so that a monitoring person (not shown) of the monitoring personnel can view the entire ferry operation F of the passenger conveyor system 51 in real time. In the present embodiment, the screen 22 is divided into several small screen areas 24, 25, 26 and a large screen area 23. For the motion sequence recordings 441, 442 of each motion detection module 41, 42, an assigned small screen area 24,

[0042] 25. As shown in Figure 1, another small screen area

[0043] 26, in which, for example, operating data of the monitored passenger conveyor system 51, the ventilation, the fire monitoring and the like can be displayed.

[0044] Parallel to the display on screen 22 of interaction module 21, the motion sequence recordings 441, 442 are examined in the hazard analysis module 11 using analysis algorithms for critical situations 101 for users 102 of the passenger conveyor system 51. These analysis algorithms are based, for example, on known image processing techniques that are optimized and applied in self-learning processes using artificial intelligence in neural networks. A common image processing technique for generating information from an image is, for example, the calculation of a histogram, which provides information about the statistical brightness distribution in the image. Such a histogram can serve, for example, as a configuration for further image processing steps or as information for a human user of a software. Other calculable information about an image includes, for example, its entropy or average brightness.Based on this information, vector analyses of image sequences can be performed to determine how individual prominent points shift relative to one another, and from this, conclusions can be drawn about the movement scenarios of users 102. Once a movement sequence 199 (symbolically represented as a moving skeleton) of a user 102 has been extracted, for example, as a skeletal movement sequence 199, and its movements have been recognized, it can be compared with a stored set 16 of atypical movement scenarios 15 that represent possible critical situations 101. Of course, instead of the method described above, other analysis techniques and methods known from the technical field of video surveillance can also be used to extract movement sequences 199 of users 102 from the movement sequence recordings 441, 442.

[0045] As the example shows, the motion detection module 42, located further back with respect to the viewing plane of Figure 1, has recorded a motion sequence recording 442 with a critical situation 101 and sent it to the hazard analysis module 11. There, the critical situation 101 is identified through extraction and comparison, and a warning signal 13 is sent from the hazard analysis module 11 to the interaction module 21 and to the control module 31 (dash-dotted arrows). When the interaction module 21 receives this warning signal 13, the motion sequence recording 442 associated with the warning signal 13 is visually displayed on the large screen area 23.

[0046] As mentioned above, in the illustrated embodiment of Figure 1, small screen areas 24, 25 are defined corresponding to the number of motion detection modules 41, 42, so that the motion sequence recording 442 displayed on the large screen area 23 is also shown in parallel on the associated small screen area 25. Of course, the screen layout of the interaction module 21 can also be selected such that the number of small screen areas 24, 25, 26 is one area less than the number of motion detection modules 41, 42, so that the motion sequence recording 441, 442 in which a critical situation 101 was last detected always continues to run on the large screen area 23.As soon as a warning signal 13 is sent to the interaction module 21 again, the corresponding movement sequence recording 441, 442 swaps “places” or screen areas with the movement sequence recording 441, 442 displayed on the large screen area 23.

[0047] Since the interaction module 21, due to the warning signal 13, also displays the motion sequence recording 441, 442 displayed on a small screen area 24, 25, 26 on a larger screen area 23, this is visually highlighted. Of course, this can be additionally highlighted, for example, by a flashing red or yellow border. Furthermore, the attention of the monitoring personnel can also be increased acoustically, for example, by defined signal tones of an alarm 20. Other display layouts are also possible, for example, by zooming in on the corresponding small screen area 24, 25, 26 when a warning signal 13 is triggered, instead of a permanently present large screen area 23.

[0048] Since a critical situation 101 is usually a dynamic process, it is quite possible that it is first recorded in the motion sequence recording 442 of the motion detection module 42 arranged further back with respect to the viewing plane and then in the motion sequence recording 441 of the motion detection module 41 arranged further forward. Since both motion sequence recordings 441, 442 are analyzed simultaneously by the hazard analysis module 11, corresponding warning signals 13 are transmitted successively to the interaction module 21 and control module 31, which have the different identification numbers 44IN, 442N of the motion sequence recordings 441, 442 assigned to them. In a computing unit 29 of the interaction module 21, a logic is implemented which automatically changes the movement sequence recording 441, 442 displayed in the large screen area 23 according to the order of the warning signals 13.Upon receipt of warning signal 13, control module 31 initiates a change in ferry operation F on the passenger conveyor system 51 associated with warning signal 13. This means that control module 31 and interaction module 21 become active in parallel upon an issued warning signal 13, with control module 31 initiating the change in ferry operation F and interaction module 21 displaying or highlighting the movement sequence recording 441, 442 correlating with warning signal 13 on its screen 22.

[0049] In other words, the change in ferry operation F of the passenger conveyor system 51, on which a critical situation 101 has been detected, is automatically initiated by the monitoring system 1. This results in an extremely safe and short response time, which cannot be achieved by pure video surveillance with automated evaluation and manual triggering.

[0050] However, a critical situation 101 may resolve itself, for example, if a falling user 102 is able to catch themselves. In such a scenario, an immediate emergency stop of the ferry operation F would be unnecessary and could even affect other users. In order to be able to react appropriately to such situations, the interaction module has an input device 30, which is also activated by the warning signal 13. By manually operating the input device 30, the control module 31 is instructed, for example by means of a reset command R, to immediately prevent or reverse the change in the ferry operation F initiated by the warning signal 13.In addition, a manual tap on the input device 30 causes the interaction module 21 to delete the warning signal 13 and to withdraw the associated highlighted display of the corresponding movement sequence recording 441, 442.

[0051] In other words, the input device 30 enables the on-duty monitor to intervene in the automatic change in ferry operation F and to prevent or reverse it. The input device 30 can be a buzzer button 27 represented by a dashed line, a virtually generated deletion input field 28 on the screen 22 (touch-sensitive screen surface), and the like. It is also possible that the hazard analysis module 11 cannot recognize a critical situation 101 because, for example, the recorded movement pattern does not correspond to any of the atypical movement scenarios 15 present in the set 16. To solve this problem, the monitoring system 1 can be designed such that the screen 22 is touch-sensitive, and when a small screen area 24, 25 is tapped, its movement sequence recording 441, 442 is displayed on the large screen area 23.After a specified time T, the interaction module 21 sends a warning signal 13 with the corresponding identification number 44 IN, 442N of the movement sequence recording 441, 442 and an associated passenger conveyor system - identification number 5 IN to the control module 31, which, based on the received warning signal 13, initiates a change in the ferry operation F at the passenger conveyor system 51 associated with the warning signal 13.

[0052] Furthermore, the interaction module 21 also enables the input device 30 of the monitoring system 1, so that, by manually operating the input device 30, the control module 31 can be instructed to immediately prevent or reverse the change in ferry operation F initiated by the warning signal 13. If the input device 30 is manually operated or another small screen area 24, 25 is tapped before the specified time T has elapsed, no warning signal 13 is sent to the control module 31. This also effectively prevents the change in ferry operation F initiated by the warning signal 13.

[0053] As already mentioned, a set 16 of possible critical situations 101 is stored in the hazard analysis module 11 as atypical movement scenarios 15, with which movement sequences 199 extracted from the movement sequence recordings 441, 442 are compared. If there is a sufficient match between an extracted movement sequence 199 and an atypical movement scenario 15, the presence of a critical situation 101 is assumed, and the warning signal 13 is sent to the interaction module 21 and the control module 31. Depending on the detected movement scenario 15, different actions can be provided for changing the ferry operation F of the passenger conveyor system 51. For this purpose, an instruction set 14 with instructions 17 is stored in the control module 31. The instructions 17 of the action to be executed depend on the recognized critical situation 101 and are retrieved via a weighting 18X, 18Y, 18Z.For this purpose, each atypical movement scenario 15 has its weighting 18X, 18Y, 18Z. Accordingly, the warning signal 13 emitted by the hazard analysis module 11 is also assigned a weighting 18X, 18Y, 18Z.

[0054] Figure 1 shows, by way of example, how a user 102 of the passenger conveyor system 51 stumbles and falls in its conveying area 53. The motion detection module 42 records this critical situation 101 in its motion sequence recording 442 and sends it, along with its identification number 442N, to the interaction module 21, where it is displayed in the small screen area 25 provided for this purpose. In parallel, the same motion sequence recording 442 is also sent to the hazard analysis module 11. Using image processing methods, the movement sequence 199 of the user 102 is extracted from the motion sequence recording 442 and compared with the set 16 of atypical movement scenarios 15 stored in the hazard analysis module 11.Since the extracted movement sequence 199 sufficiently matches one of the atypical movement scenarios 15, which defines a stumbling, the hazard analysis module 11 sends a warning signal 13 together with the average weighting 18Y defined for stumbling to the interaction module 21 and to the control module 31. The transmission of the warning signal 13 is represented by a dot-dash arrow. The term "sufficient" here refers to a similarity assessment within specified limits, which is defined, for example, by a percentage match range stored in the hazard analysis module between the user's movement sequence and the movements stored in the atypical movement sequence.

[0055] With the transmission of the warning signal 13, the movement sequence recording 442 of the motion detection module 42 is also displayed on the large screen area 23 and together with the deletion input field 28 of the input device 30.

[0056] In the control module 31, instruction 17 assigned to the weighting 18X, 18Y, 18Z is retrieved and implemented. In the present example, with a medium weighting 18Y, an emergency stop is to be executed after a delay time of t = 2 seconds. After the delay time t has elapsed, the control module 31 opens a switch 33 of a safety circuit 35 of the passenger conveyor system 51, whereupon an emergency stop is immediately initiated by the controller 59 of the passenger conveyor system 51. If the supervisory personnel taps the input device 30 within the delay time t, the control module 31 aborts the execution of instruction 17 and does not open switch 33. As the dashed arrow shows, the safety circuit 35 reports the successful opening of switch 33 to the control module 31 and from there to the interaction module 21 and displays it, for example, in the small screen area 26.

[0057] The double-dotted arrow 37 shows that the control module 31 can also directly access the control 59 of the passenger conveyor system 51 and transmit instructions 17 to it for changing the ferry operation F. This is the case, for example, if a user 102 enters the passenger conveyor system 51 opposite to the current conveying direction and a reduction in the conveying speed is provided as instruction 17 for this atypical movement scenario 15.

[0058] Figure 2 shows a three-dimensional view of several passenger conveyor systems 61, 71, 81 whose ferry operation F is to be monitored. For this purpose, the monitoring system 1 of Figure 1 was adapted accordingly. This monitoring system 1 also includes a hazard analysis module 11, an interaction module 21, and a control module 31.

[0059] To monitor multiple passenger conveyor systems 61, 71, 81, the monitoring system 1 also has multiple motion detection modules 43, 44, 45, 46, 46+n, 46+2n. In the present exemplary embodiment, two passenger conveyor systems 61, 71 configured as escalators are shown in detail. The balustrade sketched with a dashed line symbolizes a plurality of additional passenger conveyor systems 81.

[0060] Each of these passenger conveyor systems 61, 71, 81 is assigned two motion detection modules 43, 44, 45, 46, 46+n, 46+2n, which record motion sequence recordings 443, 444, 445, 446, ... from the ferry operator F of "their" passenger conveyor systems 61, 71, 81. Each of the motion detection modules 43, 44, 45, 46, 46+n, 46+2n has a coding or identification number 443N, 444N, 445N, 446N, ... and codes its motion sequence recordings 443, 444, 445, 446 accordingly.

[0061] As in the exemplary embodiment of Figure 1, in the exemplary embodiment of Figure 2, the motion sequence recordings 443, 444, 445, 446, ... are sent in parallel to the hazard analysis module 11 and to the interaction module 21. In the event of a detected critical situation 101A, 101B, 101C, the hazard analysis module 11 assigns an output warning signal 13A, 13B, 13C the corresponding identification number 443N, 444N, 445N, 446N, ... of the motion sequence recording 443, 444, 445, 446, ... containing the critical situation and sends this warning signal 13A, 13B, 13C to the interaction module 21 and to the control module 31, as symbolically indicated by the arrows.

[0062] Unlike in Figure 1, the monitoring module 21 of Figure 2 has a central screen 91 and, in its immediate vicinity, further screens 93 to 96+2n, wherein for each motion detection module 43, 44, 45, 46, 46+n, 46+2n there is an associated screen 93 to 96+2n, which shows their respective motion sequence recordings 443, 444, 445, 446, ... in real time. When a warning signal 13A, 13B, 13C is received, the interaction module 21 displays, based on the transmitted identification number 443N, 444N, 445N, 446N, . . . the motion sequence recording 443, 444, 445, 446, ... assigned to the warning signal 13A, 13B, 13C is displayed on the central screen 91. In order to visually highlight the assigned motion sequence recording 443, 444, 445, 446, ..., the central screen 91 has a larger screen area than the other screens 93 to 96+2n.

[0063] As shown by the dashed line, a unique assignment of passenger conveyor identification numbers 6 IN, 7 IN, 8 IN to identification numbers 443N, . . . , 446N of the corresponding motion detection modules 43, ..., 46+2n can be stored in the hazard analysis module 11, so that the control module 31 initiates the change in ferry operation F at the correct passenger conveyor 61, 71, 81. Such an assignment can, for example, be stored as a table in a storage medium 99 of the hazard analysis module 11. In this case, the warning signal 13A, 13B, 13C must also have the corresponding passenger conveyor identification number 6 IN, 7 IN, 8 IN. Alternatively, these assignments can also be stored in a storage medium 99 of the control module 31. In this case, it is not necessary for the warning signal 13A, 13B, 13C to have the corresponding personnel conveyor identification number 6 IN, 7 IN, 8 IN.

[0064] On the passenger conveyor systems 61, 71 shown in Figure 2 and in their immediate vicinity, various critical situations 101A to 101C are also illustrated as examples. A set of 16 possible critical situations corresponding to these critical situations 101A, 101B, 101C is stored in the hazard analysis module 11. Specifically, the set comprises 16 different atypical movement scenarios 15, with which movement sequences 199 (see Figure 1) extracted from the movement sequence recordings 443, 444, 445, 446, ... are compared. The possible location at which such a critical situation 101A, 101B, 101C could occur can also play a role. An atypical movement scenario 15, which represents a fall in the inclined middle section of an escalator, cannot occur in the same way in the vestibule of the passenger conveyor system 61, 71, 81 or in one of the access areas 56, 57 (see Figure 1).The set 16 of atypical movement scenarios 15 can be generated, for example, through a machine learning process by using a dummy or stuntman to recreate typical critical situations 101A, 101B, 101C, such as falls or careless actions on the passenger conveyor system 61, 71, 81. The movement sequences 199 recorded and extracted in this way can be included in the set 16 as atypical movement scenarios 15. Of course, the set 16 can also be supplemented with further atypical movement scenarios 15 that led to an accident during the operation of the passenger conveyor system 61, 71, 81 and that were not detected by the hazard analysis module 11.If there is sufficient agreement between an extracted movement sequence 199 and an atypical movement scenario 15, the hazard analysis module 11 can assume or determine the existence of a critical situation 101A, 101B, 101C and send a warning signal 13A, 13B, 13C to the interaction module 21 and the control module 31.

[0065] As symbolically represented by differently sized weights, the various atypical movement scenarios 15 of set 16 have different weightings 18X, 18Y, 18Z in the sense of a hierarchy. The critical situation 101A recorded by the motion detection module 43 is recognized in the hazard analysis module 11 as a "falling down," and the associated warning signal 13A is assigned the highest weighting 18Z, since continuing ferry operation F could result in severe injuries to the fallen user 102A.

[0066] The critical situation 101B recorded by the motion detection module 44 is recognized in the hazard analysis module 11 as "entering in the wrong direction," and the associated warning signal 13B is assigned the lowest weighting 18X. By entering incorrectly, the user 102B does not directly endanger himself, but rather disturbs oncoming users exiting the passenger conveyor system 71.

[0067] The critical situation 10 IC recorded by the motion detection module 46 is recognized in the hazard analysis module 11 as "entering with a shopping cart," and the associated warning signal 13C is assigned a medium weighting 18Y. In this case, the user 102C is only in danger when she reaches the rising central section of the passenger conveyor system 61 with her shopping cart.

[0068] As in the embodiment of Figure 1, in Figure 2, an instruction set 14 with instructions 17 is stored in a storage medium (not shown) of the control module 31. The instructions 17 are retrieved according to the weighting 18X, 18Y, 18Z of the warning signal 13A, 13B, 13C and implemented by the control module 31. Tapping the deletion input field 28 of the input device 30 instructs the control module 31 to prevent or reverse the change to the ferry operation F or the implementation of the retrieved instruction 17.

[0069] It should be noted at this point that the inhibition or reversal of the retrieved instruction 17 for changing ferry operation F depends on the type of instruction 17 and its implementation progress at the time of manual actuation of the input device 30. For example, instruction 17 "Emergency Stop" cannot be inhibited or reversed once a switch 33 of a safety circuit 35 has been opened by the control module 31. As long as the switch 33 is closed, aborting (inhibiting) is still possible; otherwise, the emergency stop is executed until the ferry operation F comes to a complete standstill.Instruction 17, "Slow down using frequency converter 87 and brake 88," can - TI - also be prevented or reversed after its implementation has started using input device 30, for example, by maintaining the travel speed of the affected passenger conveyor system 61, 71, 81 from the time of manual actuation of input device 30 (prevent) or increasing it back to nominal speed after a specified acceleration profile (reverse). The abort criteria for preventing or reversing listed above as examples, as well as the associated control processes, are preferably also part of instructions 17.

[0070] In other words, when the deletion input field 28 is tapped, the control module 31 is always instructed to immediately stop or reverse the change in ferry operation F. Whether this "deletion command" is implemented, partially implemented, or not implemented depends on the logic stored in the control module 31, which takes into account the current operating parameters of the passenger conveyor system 61, 71, 81 as well as the termination criteria of the instructions 17.

[0071] In the critical situation 101 A detected by the motion detection module 43, an instruction 17 is called due to the high weighting 18Z, in which the control module 31 immediately controls a safety switch 33 of the affected passenger conveyor system 71 and initiates an emergency stop.

[0072] In the critical situation 10 IC detected by the motion detection module 46, an instruction 17 is called based on the average weighting 18Y, during which the control module 31 activates a safety switch 33 of the affected passenger conveyor system 61 with a predefined delay time t. This provides sufficient time to warn the user 102C (see below) so that she leaves the anteroom of the passenger conveyor system 61 before reaching its conveying area 63 and a stop is initiated.

[0073] In the critical situation 101B detected by the motion detection module 44, an instruction 17 is retrieved, which, symbolically represented by a dash-and-three-dotted arrow, is sent from the control module 31 to a controller 73 of the affected passenger conveyor system 71. This instruction 17 causes the controller 73 to reduce the travel speed of a conveyor belt 75 of the affected passenger conveyor system 71 according to a predetermined deceleration profile.

[0074] It goes without saying that if two critical situations 101A, 101B occur simultaneously on the same passenger conveyor system 71 and warning signals 13A, 13B are therefore forwarded to the control module 31 in quick succession, the instruction 17 with the higher weighting 18Z is preferentially implemented by the control module 31.

[0075] Since the monitoring system 1 of Figure 2 monitors several passenger conveyor systems 61, 71, 81, it is quite possible that several critical situations 101A, 101B, 101C occur simultaneously, as shown. In this situation, the hazard analysis module 11 sends warning signals 13A, 13B, 13C with the associated weighting 18X, 18Y, 18Z to the interaction module 21 and the control module 31 in immediate succession. The movement sequence recordings 443, 444, 445, 446, ... are then visually and / or acoustically highlighted one after the other on the central screen 91 in the interaction module 21 based on their weighting 18X, 18Y, 18Z, so that the monitoring personnel can always assess the most critical situations 101A, 101B, 101C first.

[0076] This "sequence" can be implemented in different ways. For example, the corresponding motion sequence recording 443, 444, 445, 446, ... can be highlighted for a predetermined period of time before the next motion sequence recording 443, 444, 445, 446, ... is displayed. Switching to the next motion sequence recording 443, 444, 445, 446, ... can also be done by tapping the deletion input field 28.

[0077] In the present embodiment of Figure 2, the interaction module 21 generates a deletion input field 28 of the input device 30 on the screen 91 based on the warning signal 13A, 13B, 13C. Manually tapping the deletion input field 28 causes the interaction module 21 to delete the warning signal 13A, 13B, 13C and to withdraw the associated optical and / or acoustic highlighting of the corresponding movement sequence recording 443, 444, 445, 446, . . . or to no longer display it on the central screen 91. At the same time, the control module 31 is instructed to immediately prevent or reverse the change in ferry operation F associated with the deleted warning signal 13A, 13B, 13C and already initialized.

[0078] In order to warn users 102A, 102B, 102C of an impending change in ferry operation F and / or to draw attention to their incorrect behavior, the control module 31, in the presence of a warning signal 13A, 13B, 13C, issues an acoustic and / or visual warning to users 102A, 102B, 102C of the passenger conveyor system 61, 71, 81 via an output module 121, 122, 123. The output module 121, 122, 123 is arranged in the area of ​​the passenger conveyor systems 61, 71, 81. Preferably, the control module 31 controls those output modules 121, 122, 123 that belong to the passenger conveyor system 61, 71, 81 to which the warning signal 13A, 13B, 13C is assigned. The visual and / or acoustic warning contains a message correlating with the critical situation 101A, 101B, 101C. This will be described in more detail below with reference to the critical situations 101A, 101B, 101C shown in Figure 2.

[0079] In the case of the critical situation 101A, a "fall" was detected by the hazard analysis module 11 and a corresponding warning signal 13A was generated. Its identification number 443N causes the control module 31 to select the output module 123 closest to the motion detection module 43. For example, the acoustic warning "Caution: Escalator Emergency Stop," selected based on the weighting 18Z, is sent to this output module 123, which is configured as a loudspeaker, via a wireless connection 97.

[0080] In the case of the critical situation 101B, "access in the wrong direction" was detected by the hazard analysis module 11 and a corresponding warning signal 13B was generated. Its identification number 444N causes the control module 31 to select the output module 121 closest to the motion detection module 44. For example, the acoustic warning "Caution: Wrong access area," selected based on the weighting 18X, is sent to this output module 123, configured as a loudspeaker, via the wireless connection 97.

[0081] In the case of the critical situation 10 IC, a «forbidden entry with

[0082] Shopping cart" is detected by the hazard analysis module 11 and a corresponding warning signal 13C is generated. Its identification number 446N causes the control module 31 to select the output module 122 closest to the movement detection module 46. For example, an image of a crossed-out shopping cart is sent to this output module 122, which is designed as a screen, as a visual warning via a wireless connection 97 and displayed on the screen. Of course, a warning tone can also be emitted to increase the attention of the output module 122. In principle, any devices capable of emitting an acoustic and / or visual warning can be used as output modules 121, 122, 123. So-called hologram projectors are particularly effective in this regard; for example, virtual people can emit acoustic warnings and hand gestures to users 102A, 102B, 102C of the passenger conveyor systems 61, 71, 81.

[0083] Although different embodiments of the monitoring system 1 are illustrated in Figures 1 and 2, it is obvious that they can be combined with one another. For example, the arrangement of multiple screens 91, 93, 94, 95, 96 illustrated in Figure 2 can also be implemented in a monitoring system 1 of Figure 1, and vice versa. Furthermore, the "automatic change" described in connection with Figure 1 of the motion sequence recording 441, 442 illustrated in the large screen area 23 can also be implemented in a monitoring system 1 according to Figure 2 if the same critical situation 101, 101A, 101B, 101C is recorded by multiple motion detection modules 41, ..., 46+2n during its temporal progression. Of course, the described weightings 18X, 18Y, 18Z are not limited to three; each atypical movement scenario 15 can have its own fixed weighting 18X, 18Y, 18Z.The same applies to the instruction set 14 with instructions 17, whereby for each atypical movement scenario 15 or each known critical situation 101A, 101B, 101C there can be an instruction 17 specifically tailored to it.

[0084] Finally, it should be noted that terms such as "comprising," "having," etc., do not exclude other elements or steps, and terms such as "a" or "an" do not exclude a plurality. Reference signs in the claims are not to be considered limiting.

Claims

Patent claims 1. Method for monitoring the ferry operation (F) of a passenger transport system (51, 61, 71, 81) by means of a monitoring system (1), wherein the monitoring system (1) comprises a hazard analysis module (11), an interaction module (21), a control module (31) and at least one motion detection module (41, ..., 46+2n), which motion detection module (41, ..., 46+2n) is directed towards an associated passenger transport system (51, 61, 71, 81) and can capture electronically processable motion sequence recordings (441, ... , 446+2n) of situations occurring on the associated passenger transport system (51, 61, 71, 81), • wherein the motion sequence recordings (441, . . . , 446+2n) are transmitted in real time to the hazard analysis module (11) and analyzed in this module to determine whether a critical situation (101, 101A, 101B, 101C) for users (102, 102A, 102B, 102C) of the passenger transport system (51, 61, 71, 81) exists in the motion sequence recordings (441, ... , 446+2n); • wherein the hazard analysis module (11) generates a warning signal (13, 13A, 13B, 13C) as soon as a critical situation (101, 101A, 101B, 101C) is present in the motion sequence recordings (441, . . . , 446+2n); • wherein the warning signal (13, . . . , 13C) is sent to the interaction module (21) and the control module (31) and immediately after receiving the warning signal (13, ... , 13C) the motion sequence recording (441, . . . , 446+2n) corresponding to the warning signal (13, ... , 13C) is displayed on a screen (22, 91, 93, 94, 95, 96, 96+n) of the interaction module (21) and the control module (31) initiates a change in the ferry operation (F) at the passenger transport system (51, 61, 71, 81) associated with the warning signal (13, ... , 13C); and • wherein the interaction module (21) unlocks an input device (30) of the monitoring system (1) and, in the case of manual operation of the input device (30), the control module (31) is instructed to immediately prevent or reverse the change in ferry operation (F) initiated by the warning signal (13, ... , 13C).

2. The method of claim 1, wherein a set (16) of possible critical situations (101, 101A, 101B, 101C) is stored in the hazard analysis module (11), wherein the set (16) comprises various atypical motion scenarios (15) with which motion sequences (199) extracted from the motion sequence recordings (441, ... , 446+2n) are compared and, if there is sufficient similarity between an extracted motion sequence (199) and an atypical motion scenario (15), the presence of a critical situation (101, ..., 10 IC) is assumed and the warning signal (13, ... , 13C) is sent to the interaction module (21) and the control module (31).

3. Method according to claim 2, wherein the different atypical motion scenarios (15) of the set (16) have different weightings (18X, 18Y, 18Z) in the sense of a ranking.

4. Method according to claim 3, wherein the change in ferry operation (F) is made according to the weighting (18X, 18Y, 18Z), such that according to the weighting (18X, 18Y, 18Z) • the control module (31) opens a switch (33) of a safety circuit (35) of the passenger transport system (51, 61, 71, 81), thereby immediately causing an emergency stop of the ferry operation (F); or • the control module (31) opens a switch (33) of a safety circuit (35) of the passenger transport system (51, 61, 71, 81) after a predetermined delay time (t), thereby causing an emergency stop of the ferry operation (F) after the delay time (t) has elapsed; or • the control module (31) sends a brake signal to a control unit (73) of the passenger transport system (51, 61, 71, 81), by means of which brake signal a braking of the ferry operation (F) of the passenger transport system (51, 61, 71, 81) is carried out by means of its frequency converter (87) and its service brake (88).

5. Method according to any one of claims 1 to 4, wherein the control module (31) after receiving a warning signal (13, . . . , 13C) issues warnings and / or instructions to users (102, ..., 102C) of the passenger transport system (51, 61, 71, 81) associated with the warning signal (13, ... , 13C).

6. Method according to claim 5, wherein as a warning signal the control module (31) issues an acoustic and / or optical warning via an output module (121, 122, 123) to the users (102, ..., 102C) of the passenger transport system (51, 61, 71, 81), and wherein the output module (121, 122, 123) is located in the area of ​​the passenger transport system (51, 61, 71, 81) which is assigned to the warning signal (13, ... , 13C).

7. Method according to any one of claims 3 to 6, wherein the monitoring system (I) comprising several motion detection modules (41, ... , 46+2n) which record motion sequences (441, ... , 446+2n) from at least two different passenger transport systems (51, 61, 71, 81), wherein each of the motion detection modules (41, ..., 46+2n) has an identification number (443N, ... , 446N) and assigns this number to its motion sequence recordings (441, ... , 446+2n), and the hazard analysis module (11) assigns the corresponding identification number (443N, ... , 446N) to the issued warning signal (13, ... , 13C), wherein the hazard analysis module (11) or control module (31) provides a unique assignment of passenger transport system identification numbers (6 IN, 7 IN, 8 IN) to the identification numbers (443N, . . . , 446N) of the corresponding Motion detection modules (41, ..., 46+2n) are stored, so that the control module (31) initiates the change of the ferry operation (F) at the correct passenger transport system (51, 61, 71, 81).

8. Method according to any one of claims 3 to 7, wherein the hazard analysis module (II) in the event of several simultaneously detected critical situations (101, ... , 101 C) immediately following one another, sends warning signals (13, . . . , 13C) with associated weighting (18X, 18Y, 18Z) to the interaction module (21), whereby the motion sequence recordings (441, . . . , 446+2n) are weighted (18X, 18Y, 18Z) will be highlighted one after the other on the screen (22, 91).

9. Method according to any one of claims 1 to 8, wherein the interaction module (21) generates a deletion input field (28) on the screen (22, 91) due to the warning signal (13, ..., 13C) for unlocking and manually operating the input device (30), and by manually tapping the deletion input field (28) the interaction module (21) is caused to delete the warning signal (13, ..., 13C) and to withdraw the associated display of the corresponding motion sequence recording (441, ..., 446+2n).

10. Method according to any one of claims 1 to 9, wherein the interaction module (21) upon receiving the warning signal (13, 13C) provides an optical and / or acoustic Issues an alarm to the monitoring personnel who are responsible for the manual operation of the input device (30).

11. Method according to any one of claims 1 to 10, wherein the interaction module (21) has several small screens (93, 94, 95, 96, 96+n) and one large screen (91) and the number of screens (91, 93, 94, 95, 96, 96+n) corresponds to the number of motion detection modules (41, ..., 46+2n), wherein as a result of a warning signal (13, ... , 13C) the motion sequence recording (441, ... , 446+2n) corresponding to the warning signal (13, ... , 13C) is displayed on the large screen (91).

12. Method according to claim 11, wherein each screen (91, 93, 94, 95, 96, 96+n ) is touch-sensitive and when a small screen (93, 94, 95, 96, 96+n) is tapped, its displayed motion sequence recording (441, ... , 446+2n) is displayed on the large screen (93), and wherein after a defined preset time (T) the interaction module (21) sends the warning signal (13, ... , 13C) with the corresponding identification number (443N, . . . , 446N) and the associated passenger transport system identification number (443N, . . . , 446N) to the control module (31), and the input device (30) of the monitoring system (1) is activated.

13. Method according to any one of claims 1 to 10, wherein the screen (22) of the interaction module (21) is divided into several small screen areas (24, 25, 26) and one large screen area (23) and the number of screen areas (23, 24, 25, 26) corresponds to the number of motion detection modules (41, ... , 46+2n), wherein as a result of a warning signal (13, ... , 13C) the motion sequence recording (441, ... , 446+2n) corresponding to the warning signal (13, ... , 13C) is displayed on the large screen area (23).

14. Method according to claim 13, wherein the screen (22) is touch-sensitive and, when a small screen area (24, 25, 26) is tapped, its reproduced motion sequence recording (441, ..., 446+2n) is displayed on the large screen. screen area (23) is displayed, and after a specified preset time (T) the interaction module (21) sends a warning signal (13, ..., 13C) with the corresponding identification number (443N, . . . , 446N) and the associated passenger transport system identification number (443N, . . . , 446N) to the control module (31), and the input device (30) of the monitoring system (1) is activated.

15. Monitoring system (1) for carrying out the method according to one of claims 1 to 14, which monitoring system (1) comprises at least one hazard analysis module (11), one interaction module (21), one control module (31) and at least one motion detection module (41, ..., 46+2n) which are interconnected via a data network (3), wherein the interaction module (21) comprises an input device (30) which is designed to immediately prevent or reverse a change in the ferry operation (F) initiated by the monitoring system (1) after manual operation.

Images