Elevator control device, elevator system, rescue method, and rescue program

Abstract

To provide a technology to rescue the autonomous movable body in which operational abnormality occurs in an elevator car while ensuring security.SOLUTION: An elevator control device detects the operational condition of an autonomous movable body riding in an elevator car and performs door closure standby processing if an operational abnormality is detected in the detected operational condition. In the door closure standby processing, the elevator car is moved to a standby floor and waits on the standby floor with the car door closed. The elevator control device notifies the specified terminal of the persons to be rescued of a set cryptographic key. The elevator control device accepts the input of the cryptographic key by the target person to be rescued, determines the presence / absence of the match comparing the accepted input cryptographic key with the set cryptographic key, and releases the door closure standby processing if it is determined that both match.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present disclosure relates to a technology of an elevator control device for rescuing an autonomous mobile body that has malfunctioned inside an elevator car.

Background Art

[0002] Patent Document 1 discloses a technology for suppressing a decrease in the utilization efficiency of an autonomous mobile body when an abnormality occurs in the autonomous mobile body inside the car. When an abnormality occurs in the autonomous mobile body, the elevator control device of this technology determines a recovery floor suitable for recovering the autonomous mobile body and operates the car to the recovery floor. Then, when the car arrives at the recovery floor, the elevator door is set to the door open pause state.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the technology of Patent Document 1, when the car carrying the autonomous mobile body with an operating abnormality arrives at the recovery floor, the elevator is set to the door open state. In this way, when free entry and exit into the car are possible on the recovery floor, problems regarding security, such as pranks or theft of the autonomous mobile body inside the car, arise.

[0005] The present disclosure has been made to solve the above-described problems, and an object thereof is to provide a technology for rescuing an autonomous mobile body that has malfunctioned inside an elevator car while ensuring security.

Means for Solving the Problems

[0006] The elevator control device of the present disclosure includes a detection unit that detects the operating state of an autonomous mobile body riding in an elevator car, and a control unit that performs a door-closed standby process of waiting in a state where the door of the car is closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection unit.

[0007] Further, the elevator system of the present disclosure is an elevator system including an elevator installed in a building, an autonomous mobile body that autonomously moves using the elevator, and an elevator control device that communicates with the elevator and the autonomous mobile body. The elevator system includes a detection unit that detects the operating state of an autonomous mobile body riding in an elevator car, and a control unit that performs a door-closed standby process of waiting in a state where the door of the car is closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection unit.

[0008] Further, the rescue method of the present disclosure is a rescue method for rescuing an autonomous mobile body in which an operation abnormality has occurred in an elevator car. The rescue method includes a detection step of detecting the operating state of an autonomous mobile body riding in an elevator car, and a control step of performing a door-closed standby process of waiting in a state where the door of the car is closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection step.

[0009] Furthermore, the rescue program of the present disclosure is configured to cause a computer to execute detecting the operating state of an autonomous mobile body riding in an elevator car, and performing a door-closed standby process of waiting in a state where the door of the car is closed when an operation abnormality is detected in the operating state of the autonomous mobile body.

Advantages of the Invention

[0010] According to the technology of the present disclosure, it is possible to rescue an autonomous mobile body in which an operation abnormality has occurred in an elevator car while ensuring security.

Brief Description of the Drawings

[0011]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Mode for Carrying Out the Invention

[0012] Hereinafter, embodiments will be described with reference to the drawings. In the drawings, the same reference numerals are assigned to common elements, and duplicate explanations are omitted.

[0013] 1. Embodiment 1. 1-1. Outline of the Elevator System of Embodiment 1 FIG. 1 is a block diagram for explaining the outline of the elevator system according to Embodiment 1. The elevator system 100 of the present embodiment is a system that rescues an autonomous mobile body while ensuring security when an operation abnormality occurs in the autonomous mobile body riding in the elevator car. Here, the "operation abnormality" is an abnormality that requires rescue activities by the rescue target person, such as an operation abnormality in which the autonomous mobile body cannot autonomously travel.

[0014] The elevator system 100 of Embodiment 1 includes an autonomous mobile body 2, an elevator 4, a designated terminal 6, and an elevator control device 10.

[0015] The elevator 4 is installed in a building such as a building having a plurality of floors. In the building, a hoistway for the elevator 4 is provided. The hoistway is a vertically long space extending over a plurality of floors. On each floor, a landing adjacent to the hoistway is provided. On the wall surface of each landing, a landing button 40 for calling the elevator 4 is provided.

[0016] As a main configuration not shown in the figure, the elevator 4 includes a hoisting machine, a main rope, a car, and a counterweight. The main rope is wound around the sheave of the hoisting machine. The main rope supports the load of the car on one side of the sheave of the hoisting machine. The main rope supports the load of the counterweight on the other side of the sheave of the hoisting machine. The car is a device that transports users or autonomous mobile bodies of the elevator 4 between a plurality of floors by traveling up and down in the hoistway. The car travels up and down in the hoistway in conjunction with the movement of the main rope due to the rotation of the sheave of the hoisting machine.

[0017] The autonomous mobile body 2 is a robot capable of autonomous driving using the elevator 4 while grasping its own position. The autonomous mobile body 2 is also hereinafter referred to as "robot 2". The robot 2 can autonomously call the elevator 4 in cooperation with the elevator 4 and board the car corresponding to the call. The robot 2 operates based on the control by a movement control device (not shown). There is no limitation on the attributes and operation control of the robot 2. For example, examples of the attributes of the robot 2 include a transport robot for transporting luggage, a cleaning robot for cleaning the floor, a security robot for performing security in the building, and the like. The robot 2 communicates with the movement control device via a communication network 8 such as wireless. Alternatively, the movement control device is mounted on the robot 2.

[0018] The elevator control device 10 is a device that performs various controls related to the rescue of the robot 2 when an abnormal operation occurs to the robot 2 riding in the car of the elevator 4. The elevator control device 10 communicates with the robot 2 and the elevator 4 via a communication network 8 such as the Internet, for example. Also, the elevator control device 10 communicates with the designated terminal 6 via the communication network 8.

[0019] The elevator control device 10 is a microcomputer including at least one processor 50 and at least one memory 60. The elevator control device 10 is also called an information processing device.

[0020] The memory 60 stores a rescue program 62 and various data 64 for operating the rescue program 62. The processor 50 includes a CPU (Central Processing Unit). By the processor 50 reading out and executing the rescue program 62, various functions of the elevator control device 10 are realized. Details of the various functions to be realized will be described later. Note that the rescue program 62 may be recorded on a computer-readable recording medium or stored in a server communicable with the elevator control device 10 such as a cloud server.

[0021] The designated terminal 6 is a terminal designated by the elevator control device 10 among the terminal devices managed by an administrator related to the robot 2. The designated terminal 6 is a portable terminal device equipped with a wireless communication function such as a smartphone or a tablet, for example. The designated terminal 6 is connected to a communication network 8 such as the Internet, for example. In this example, the designated terminal 6 includes an output device (not shown) that outputs information to the administrator. Examples of the output device include a display device, a speaker, and the like.

[0022] Consider a case where an abnormal operation of the robot 2 occurs inside the car of the elevator 4 to which such an elevator system 100 is applied. The elevator control device 10 acquires operation state information from the robot 2. This process is hereinafter referred to as the "operation state information acquisition process". The operation state information here is information for determining whether the operation state of the robot 2 is normal or abnormal, and includes, for example, the traveling speed and traveling position of the robot 2. Alternatively, when the robot 2 is equipped with a function for determining the operation state, the operation state information may include whether there is an abnormal operation determined by the robot 2. The elevator control device 10 determines whether there is an abnormal operation of the robot 2 based on the operation state information. This process is hereinafter referred to as the "abnormal operation determination process".

[0023] In the abnormal operation determination process, when it is determined that the robot 2 has an abnormal operation, the elevator control device 10 executes a process of waiting at the standby floor with the door of the car in which the robot 2 is riding closed. This process is hereinafter referred to as the "door closed waiting process". The standby floor here is a floor suitable for the rescue activities of the rescue target person of the robot 2. For example, the standby floor is a predetermined management floor such as the floor where the building manager of the building as the rescue target person is stationed. Alternatively, when the rescue target person is a staff member of the manufacturer of the robot 2, the standby floor is a floor where the staff member can enter.

[0024] In addition, the elevator control device 10 acquires moving body information including various information of the robot 2 from the robot 2. This process is hereinafter referred to as the "information acquisition process". The moving body information acquired here includes the classification of robots such as a transport robot, a cleaning robot, or a security robot. Further, when the robot 2 is a transport robot, the moving body information includes information on whether there is a load being transported and the destination of the transport.

[0025] Furthermore, the elevator control device 10 generates a setting encryption key for releasing the door-closed standby process and performing a door-opening operation. This process is hereinafter referred to as the "encryption key generation process". In the encryption key generation process, the elevator control device 10 generates a setting encryption key according to a character string pattern that determines the order of pressing each button included in the landing button 40.

[0026] The elevator control device 10 identifies the rescue target person of the robot 2 based on the moving body information, and designates the terminal device of the identified rescue target person as the designated terminal 6. This process is hereinafter referred to as the "terminal designation process". The rescue target person identified here is exemplified by, for example, the building manager of the building, the manufacturer staff of the robot 2, the recipient at the destination when the attribute of the robot 2 is a transport robot, and the like. The elevator control device 10 notifies the designated terminal 6 of the generated setting encryption key and the standby floor via the communication network 8. This process is hereinafter referred to as the "notification process".

[0027] The rescue target person who has received the notification of the setting encryption key and the standby floor at the designated terminal 6 operates the landing button 40 that functions as an input device at the landing of the standby floor to input the encryption key. The elevator control device 10 receives the encryption key input by the rescue target person as the input encryption key. This process is called the "encryption key reception process".

[0028] The elevator control device 10 collates the input encryption key received in the encryption reception process with the setting encryption key generated in the encryption key generation process to determine whether the two match. This process is hereinafter referred to as the "collation process". When it is determined in the collation process that the input encryption key matches the setting encryption key, the elevator control device 10 releases the door-closed standby process and opens the car door. This process is hereinafter referred to as the "release process".

[0029] According to the series of processes of the elevator system 100 as described above, when an abnormal operation occurs in the robot 2 in the car, the door closing standby process is performed, so that the security of the robot 2 can be reliably ensured until the rescue target person performs rescue activities on the standby floor. In addition, since the door closing standby process is canceled when the rescue target person notified of the set encryption key inputs the encryption key from the landing button 40, it is possible to prevent the cancellation of the door closing standby process by a third party who has not received the notification of the set encryption key.

[0030] 1-2. Functional Configuration of Elevator Control Device of Embodiment 1 Next, the functional configuration of the elevator control device 10 included in the elevator system 100 will be described in more detail. FIG. 2 is a block diagram showing the functions of the elevator control device according to Embodiment 1. The elevator control device 10 includes a detection unit 12, an information acquisition unit 18, a control unit 20, an encryption key acquisition unit 32, and an encryption key verification unit 34 as functions realized by the processor 50 reading and executing the rescue program 62.

[0031] The detection unit 12 is a functional block for detecting an abnormal operation of the robot in the car. Specifically, the detection unit 12 includes a state acquisition unit 14 and an abnormality determination unit 16. The state acquisition unit 14 is a functional block for executing the operation state information acquisition process. The operation information acquired in the operation state information acquisition process is sent to the abnormality determination unit 16. The abnormality determination unit 16 is a functional block for executing the abnormal operation determination process. The determination result in the abnormal operation determination process is sent to the control unit 20.

[0032] The information acquisition unit 18 is a functional block for executing the information acquisition process. The acquired moving body information is sent to the control unit 20.

[0033] The control unit 20 is a functional block for executing the door closing standby process and various processes associated therewith. Specifically, the control unit 20 includes an encryption key generation unit 22, an information notification unit 24, a door opening / closing control unit 26, and a car allocation control unit 28.

[0034] When the encryption key generation unit 22 receives the determination result of "operation abnormality exists" in the operation abnormality determination process from the detection unit 12, it is a functional block for executing the encryption key generation process. In the encryption key generation process, the encryption key generation unit 22 generates a setting encryption key to be notified to the person to be rescued. For example, when the landing button 40 includes an "up" button and a "down" button, the encryption key generation unit 22 sets a random character string pattern combining "up" and "down", such as "up, down, down, up, down, up", as the setting encryption key. Alternatively, when the landing button 40 includes, for example, destination floor input buttons from the 1st floor to the 10th floor, the encryption key generation unit 22 sets a random character string pattern combining the numbers of the destination floors, such as "1, 10, 2, 4, 7", as the setting encryption key. Further, when the landing button 40 includes other buttons such as a "pet driving button", a "wheelchair driving button", and a "VIP driving button", the encryption key generation unit 22 may set a character string pattern including these buttons as the setting encryption key. The generated setting encryption key is sent to the information notification unit 24.

[0035] The information notification unit 24 is a functional block for executing terminal designation processing and notification processing in response to the determination result of "operation abnormality exists" of the robot 2 in the operation abnormality determination process.

[0036] The door opening / closing control unit 26 is a functional block for controlling the door opening / closing operation of the car of the elevator 4. The car allocation control unit 28 is a functional block for controlling the movement operation between the floors of the elevator 4. The door opening / closing control unit 26 and the car allocation control unit 28 execute door closing standby processing in response to the determination result of "operation abnormality exists" of the robot 2 in the operation abnormality determination process. Specifically, in the door closing standby processing, the door opening / closing control unit 26 executes a process of closing and maintaining the door of the car of the elevator 4. Also, in the door closing standby processing, the car allocation control unit 28 executes a process of moving the car to the standby floor and waiting. Further, during the execution of the door closing standby processing, when it is determined in the verification process that the input encryption key matches the setting encryption key, the door opening / closing control unit 26 executes a release process.

[0037] The encryption key acquisition unit 32 is a functional block for executing an encryption key reception process that receives an input encryption key input from the landing button 40. The encryption key verification unit 34 is a functional block for executing a verification process. The verification result from the verification process is sent to the door opening / closing control unit 26 of the control unit 20.

[0038] 1-3. Specific Processes Executed by the Elevator Control Device According to Embodiment 1 Hereinafter, with reference to the flowchart, the specific processes executed in the elevator control device 10 will be described. FIG. 3 is a flowchart of the processes executed in the elevator control device according to Embodiment 1. The routine shown in FIG. 3 is executed by the processor 50 of the elevator control device 10 executing a rescue program 62 stored in the memory 60. Note that this routine also represents a part of a rescue method for rescuing the robot 2 in which an operation abnormality has occurred inside the car of the elevator 4 in the elevator system 100.

[0039] In step S100 of the routine shown in FIG. 3, the state acquisition unit 14 executes an operation state information acquisition process to acquire the operation state information of the robot 2 inside the car. The acquired operation state information is sent to the abnormality determination unit 16. When the process of step S100 is performed, the process proceeds to step S102.

[0040] In step S102, the abnormality determination unit 16 executes an operation abnormality determination process to determine whether there is an operation abnormality in the robot 2. As a result, if it is determined that there is an operation abnormality, the process proceeds to step S104, and if it is determined that there is no operation abnormality, the process of this routine ends.

[0041] In step S104, a door closing standby process is executed. Here, the door opening / closing control unit 26 executes a process of closing and maintaining the door of the car of the elevator 4. Also, the car allocation control unit 28 executes a process of moving the car to the standby floor and waiting. When the process of step S104 is executed, the process proceeds to step S106.

[0042] In step S106, the encryption key generation unit 22 executes an encryption key generation process. The generated set encryption key is sent to the information notification unit 24. When the process of step S106 is performed, the process proceeds to step S108.

[0043] In step S108, the information notification unit 24 notifies the designated terminal 6 of the set encryption key by executing a terminal designation process and a notification process. When the process of step S108 is executed, the process proceeds to step S110.

[0044] The rescue target person who manages the designated terminal 6 inputs the encryption key from the boarding button 40 upon receiving the notification of the set encryption key. In step S110, the encryption key acquisition unit 32 receives the input encryption key input by the rescue target person by executing an encryption key reception process. When the process of step S110 is executed, the process proceeds to step S112.

[0045] In step S112, the encryption key verification unit 34 determines whether the input encryption key and the set encryption key match by executing a verification process. As a result, if the determination is affirmed, the process proceeds to step S114, and if the determination is not affirmed, the process proceeds to step S116.

[0046] In step S114, the door opening / closing control unit 26 opens the door of the elevator 4 by executing a release process. On the other hand, in step S116, the door opening / closing control unit 26 maintains the door of the elevator 4 in a closed state by continuing the door closing standby process. When the process of step S114 or S116 is executed, the process of this routine ends.

[0047] According to the elevator system 100 of the first embodiment described above, when an operation abnormality occurs in the robot 2 in the car, the door of the elevator 4 is maintained in a closed state. Thereby, the security of the robot 2 is ensured until the rescue activity by the rescue target person is performed.

[0048] In addition, in the door-closed standby process, the elevator 4 is moved to a standby floor suitable for the person in need of rescue, enabling the person in need of rescue to receive prompt rescue. Also, the door-closed standby process is released by inputting the set encryption key notified to the designated terminal managed by the person in need of rescue, thus preventing a third party who has not received the notification of the set encryption key from releasing the door-closed standby process. Further, since the set encryption key is constituted by the character string pattern of the landing button, it is possible to input the encryption key at the landing even if the person in need of rescue does not possess an input terminal.

[0049] 1-4. Modification Example The elevator system 100 of the first embodiment may adopt the following modified modes. Note that these modification examples can also be applied to the facility management systems of other embodiments described later.

[0050] 1-4-1. Hardware Resources of the Elevator Control Device 10

[0051] FIG. 4 is a diagram showing a modification example of the hardware resources of the elevator control device. In the example shown in FIG. 4, the elevator control device 10 includes, for example, a processor 50, a memory 60, and a processing circuit 72 including dedicated hardware 70. FIG. 4 shows an example in which a part of the functions of the elevator control device 10 is realized by the dedicated hardware 70. All of the functions of the elevator control device 10 may be realized by the dedicated hardware 70. As the dedicated hardware 70, a single circuit, a composite circuit, a programmed processor, a parallel-programmed processor, an ASIC, an FPGA, or a combination thereof can be adopted.

[0052] The memory 60 may be provided by a cloud or the like independently of the elevator control device 10 to perform its role.

[0053] Note that in the elevator system 100, all or part of the functions of the elevator control device 10 may be mounted on the elevator 4, the robot 2, or the designated terminal 6.

[0054] 1-4-2. Abnormal Operation Determination Process The abnormal operation determination process is not limited to determining the presence or absence of an abnormal operation based on the operation state information acquired by the state acquisition unit 14. That is, in the abnormal operation determination process, the abnormality determination unit 16 may determine the presence or absence of an abnormal operation of the robot 2 based on, for example, a camera image obtained by imaging the interior of the car in which the robot 2 is riding.

[0055] 1-4-3. Door Closing Standby Process In the door closing standby process, the process of moving the car to the standby floor by the vehicle allocation control unit 28 is not essential. That is, in the door closing standby process, at least if the door opening / closing control unit 26 performs the process of closing the door of the elevator 4, it is possible to wait for rescue while ensuring the security of the robot 2.

[0056] 1-4-4. Encryption Key Generation Process The encryption key generation process performed by the encryption key generation unit 22 is not an essential process. That is, a preset encryption key may be used as the set encryption key. Also, if the preset set encryption key is known to the rescue target person, it is not essential to notify the set encryption key in the notification process executed by the information notification unit 24.

[0057] 2. Embodiment 2. In Embodiment 2, the points different from the examples disclosed in Embodiment 1 will be described in particular detail. For features not described in Embodiment 2, any features of the examples disclosed in Embodiment 1 may be adopted.

[0058] 2-1. Functional Configuration of the Elevator System in Embodiment 2 The elevator system 100 of Embodiment 2 is characterized by a process of setting a standby floor based on the moving body information of the robot 2. FIG. 5 is a block diagram showing the functions of the elevator control device according to Embodiment 2. The elevator control device 10 further includes a standby floor setting unit 30 in the control unit 20 as a function realized by the processor 50 reading and executing the rescue program 62. The standby floor setting unit 30 is a functional block for executing a process of setting a standby floor based on the moving body information. This process is hereinafter referred to as the "standby floor setting process". In the standby floor setting process, when the attribute of the robot 2 included in the moving body information is a transport robot, the standby floor setting unit 30 sets the standby floor according to whether or not luggage is being transported. Typically, when the robot 2 as a transport robot is transporting luggage, the standby floor setting unit 30 sets the floor to which the luggage is being transported included in the moving body information as the standby floor. Further, when the robot 2 as a transport robot is not transporting luggage, or when the attribute of the robot 2 is not a transport robot, the standby floor setting unit 30 sets the management floor as the standby floor.

[0059] 2-2. Specific Processing Executed by the Elevator Control Device According to Embodiment 2 FIG. 6 is a flowchart of the processing executed in the elevator control device according to Embodiment 2. The routine shown in FIG. 6 is executed by the processor 50 of the elevator control device 10 executing the rescue program 62 stored in the memory 60. Note that this routine also represents a part of a rescue method for rescuing the robot 2 that has an operation abnormality in the car of the elevator 4 in the elevator system 100.

[0060] In steps S200 to S206 of the routine shown in FIG. 6, the same processing as steps S100 to S106 of the routine shown in FIG. 3 is executed. When the processing of step S206 is executed, the processing proceeds to step S208.

[0061] In step S208, the standby floor setting unit 30 executes standby floor setting processing. Specifically here, when the attribute of the robot 2 included in the moving body information is a transport robot and the robot 2 is transporting a load, the standby floor setting unit 30 sets the transport destination floor of the load as the standby floor. On the other hand, when the attribute of the robot 2 included in the moving body information is a transport robot and the robot 2 is not transporting a load, or when the attribute of the robot 2 is not a transport robot, the standby floor setting unit 30 sets the management floor as the standby floor. When the processing of step S208 is executed, the processing proceeds to step S210. From step S210 to step S218, the same processing as steps S108 to S116 of the routine shown in FIG. 3 is executed.

[0062] According to the elevator system 100 of the second embodiment described above, when the robot 2 is a transport robot carrying a load, the elevator 4 waits at the transport destination floor of the load with the door closed. As a result, the recipient of the transport destination of the load can efficiently rescue the robot 2 and collect the load.

[0063] 4. Others Although the preferred embodiments and the like have been described in detail above, the present disclosure is not limited to the above-described embodiments and the like, and various modifications and substitutions can be made to the above-described embodiments and the like without departing from the scope described in the claims.

[0064] Hereinafter, aspects of the present disclosure will be collectively described as appendices.

[0065] (Appendix 1) A detection unit that detects the operating state of an autonomous mobile body riding in an elevator car; A control unit that performs door-closed standby processing for waiting in a state where the door of the car is closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection unit; An elevator control device comprising: (Appendix 2) The control unit: A dispatching control unit that controls the operation of the elevator; including a door opening / closing control unit that controls the door opening / closing operation of the car; In the door closing standby process, the vehicle allocation control unit moves the car of the elevator to the standby floor, and the door opening / closing control unit waits in a state where the door of the car is closed at the standby floor The elevator control device according to Supplementary Note 1 configured as described above. (Supplementary Note 3) The autonomous mobile body is configured to transport luggage to the destination floor, including an information acquisition unit that acquires mobile body information including whether or not the autonomous mobile body is transporting luggage, The control unit further includes a standby floor setting unit that sets the standby floor based on the mobile body information. The elevator control device according to Supplementary Note 2. (Supplementary Note 4) The standby floor setting unit is configured to set the destination floor as the standby floor when the autonomous mobile body is transporting the luggage. The elevator control device according to Supplementary Note 3. (Supplementary Note 5) The standby floor setting unit is configured to set a predetermined management floor as the standby floor when the autonomous mobile body is not transporting the luggage. The elevator control device according to Supplementary Note 3 or Supplementary Note 4. (Supplementary Note 6) including a cryptographic key acquisition unit that receives an input of a cryptographic key, and a cryptographic key verification unit that verifies whether the input cryptographic key received by the cryptographic key acquisition unit matches the set cryptographic key, and further includes: When it is determined by the cryptographic key verification unit that the input cryptographic key matches the set cryptographic key, the control unit cancels the door closing standby process The elevator control device according to any one of Supplementary Notes 1 to 5 configured as described above. (Supplementary Note 7) The control unit includes a cryptographic key generation unit that generates the set cryptographic key, and an information notification unit that notifies the set cryptographic key generated by the cryptographic key generation unit to a designated terminal. The elevator control device according to supplementary note 6 which further includes (Supplementary note 8) The elevator control device according to supplementary note 7, wherein the encryption key generation unit is configured to generate the set encryption key based on the character string pattern of the landing button installed at the landing of the elevator. (Supplementary note 9) An elevator system including an elevator installed in a building, an autonomous mobile body that autonomously moves using the elevator, and an elevator control device that communicates with the elevator and the autonomous mobile body, A detection unit that detects the operating state of the autonomous mobile body riding in the car of the elevator, A control unit that performs a door-closed standby process of waiting with the car door closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection unit, An elevator system comprising (Supplementary note 10) An encryption key generation unit that generates a set encryption key, An information notification unit that notifies a designated terminal managed by an administrator of the set encryption key generated by the encryption key generation unit, An encryption key acquisition unit that receives an input of an encryption key from the administrator, Further comprising an encryption key verification unit that verifies whether the input encryption key received by the encryption key acquisition unit matches the set encryption key, When it is determined by the encryption key verification unit that the input encryption key matches the set encryption key, the control unit releases the door-closed standby process The elevator system according to supplementary note 9, configured as such. (Supplementary note 11) A rescue method for rescuing an autonomous mobile body that has malfunctioned inside the car of an elevator, A detection step of detecting the operating state of the autonomous mobile body riding in the car of the elevator, A control step of performing a door-closed standby process of waiting with the car door closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection step, A rescue method comprising (Appendix 12) Detect the operating state of the autonomous mobile device while in the elevator car, When an abnormal operation is detected in the operating state of the autonomous mobile device, perform a door-closed standby process of waiting with the door of the car closed An ambulance program configured to cause a computer to execute the above.

Explanation of symbols

[0066] 2 Autonomous mobile device (robot), 4 Elevator, 6 Designated terminal, 8 Communication network, 10 Elevator control device, 12 Detection unit, 14 State acquisition unit, 16 Abnormality determination unit, 18 Information acquisition unit, 20 Control unit, 22 Encryption key generation unit, 24 Information notification unit, 26 Door opening / closing control unit, 28 Vehicle allocation control unit, 30 Standby floor setting unit, 32 Encryption key acquisition unit, 34 Encryption key verification unit, 40 Landing button, 50 Processor, 60 Memory, 62 Ambulance program, 64 Data, 70 Dedicated hardware, 72 Processing circuit, 100 Elevator system

Claims

1. A detection unit that detects the operating state of an autonomous mobile body riding in an elevator car; A control unit that performs a door-closed standby process of waiting with the door of the car closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection unit; An elevator control device comprising the above.

2. The control unit: A dispatch control unit that controls the operation of the elevator; A door opening / closing control unit that controls the door opening / closing operation of the car, and includes: In the door-closed standby process, The dispatch control unit moves the car of the elevator to the standby floor, The door opening / closing control unit waits with the door of the car closed on the standby floor. The elevator control device according to claim 1, configured as described above.

3. The autonomous mobile body is configured to transport luggage to the destination floor, Including an information acquisition unit that acquires mobile body information including whether or not the autonomous mobile body is transporting luggage, The control unit: The elevator control device according to claim 2, further comprising a standby floor setting unit that sets the standby floor based on the mobile body information.

4. The standby floor setting unit is configured to set the destination floor as the standby floor when the autonomous mobile body is transporting the luggage. The elevator control device according to claim 3.

5. The standby floor setting unit is configured to set a predetermined management floor as the standby floor when the autonomous mobile body is not transporting the luggage. The elevator control device according to claim 3.

6. An encryption key acquisition unit that receives the input of an encryption key; An encryption key verification unit that verifies whether the input encryption key received by the encryption key acquisition unit matches the set encryption key, and further includes: When it is determined by the encryption key verification unit that the input encryption key and the set encryption key match, the control unit cancels the door-closed standby process. The elevator control device according to any one of claims 1 to 5, configured as described above.

7. The control unit: An encryption key generation unit that generates the set encryption key; An information notification unit that notifies the set encryption key generated by the encryption key generation unit to a designated terminal. The elevator control device according to claim 6, further comprising the above.

8. The encryption key generation unit is configured to generate the set encryption key based on the character string pattern of the landing button installed at the landing of the elevator. The elevator control device according to claim 7.

9. An elevator system comprising an elevator installed in a building, an autonomous mobile body that autonomously moves using the elevator, and an elevator control device that communicates with the elevator and the autonomous mobile body, wherein: a detection unit that detects the operating state of the autonomous mobile body riding in the car of the elevator; a control unit that performs a door-closed standby process of waiting in a state where the door of the car is closed when an operation abnormality is detected in the operating state of the autonomous mobile body by the detection unit; An elevator system comprising:

10. a cryptographic key generation unit that generates a set cryptographic key; an information notification unit that notifies a designated terminal managed by an administrator of the set cryptographic key generated by the cryptographic key generation unit; a cryptographic key acquisition unit that receives an input of a cryptographic key from the administrator; further comprising a cryptographic key verification unit that verifies whether the input cryptographic key received by the cryptographic key acquisition unit matches the set cryptographic key, and when it is determined by the cryptographic key verification unit that the input cryptographic key matches the set cryptographic key, the control unit releases the door-closed standby process The elevator system according to claim 9, configured as described above.

11. A rescue method for rescuing an autonomous mobile body in which an operation abnormality has occurred in the car of an elevator, comprising: a detection step of detecting the operating state of the autonomous mobile body riding in the car of the elevator; a control step of performing a door-closed standby process of waiting in a state where the door of the car is closed when an operation abnormality is detected in the operating state of the autonomous mobile body in the detection step; A rescue method comprising:

12. Detect the operating state of the autonomous mobile body riding in the car of the elevator, and when an operation abnormality is detected in the operating state of the autonomous mobile body, perform a door-closed standby process of waiting in a state where the door of the car is closed A rescue program configured to cause a computer to execute the above.

Images