Elevator Control System
The elevator control system addresses the vulnerability of unauthorized elevator use by suspicious individuals by implementing a delivery schedule verification and authentication mechanism with expiration dates, ensuring secure elevator access.
Patent Information
- Application Number
- JP2022000338
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2022-01-05
- Publication Date
- 2025-08-13
- Estimated Expiration
- 2042-01-05
AI Technical Summary
Existing elevator systems are vulnerable to unauthorized use by suspicious individuals posing as delivery personnel due to the potential misjudgment of forged delivery slips, posing a security risk.
An elevator control system that includes a trigger receiving unit, delivery schedule inquiry unit, authentication information management unit, and elevator control unit to generate and verify delivery authentication information with an expiration date, ensuring only authorized individuals can use the elevator.
The system effectively restricts elevator use by suspicious individuals by verifying delivery schedules and authentication information, enhancing security and preventing unauthorized access.
Smart Images

Figure 0007722198000001 
Figure 0007722198000002 
Figure 0007722198000003
Abstract
Description
[Technical Field]
[0001] The present disclosure relates to an elevator control system that can restrict the use of elevators by suspicious individuals disguised as delivery personnel. [Background technology]
[0002] As an example of a conventional elevator system, Patent Document 1 discloses that when a delivery person comes to deliver a package, a reading device installed inside the elevator car reads the slip pattern on the delivery slip, compares the read slip pattern with a pre-stored pattern to determine whether it is a genuine delivery slip, and if it is determined to be a genuine delivery slip, registers an elevator call. [Prior art documents] [Patent documents]
[0003] [Patent Document 1] International Publication No. 2018 / 179348 Summary of the Invention [Problem to be solved by the invention]
[0004] However, with the elevator system disclosed in Patent Document 1, if a suspicious person posing as a delivery person brings in a forged delivery slip, there is a risk that the delivery slip will be judged to be a genuine delivery slip and an elevator call will be registered, which poses a security problem.
[0005] Therefore, an object of the present disclosure is to provide an elevator control system that can more reliably restrict the use of elevators by suspicious individuals disguised as delivery personnel. [Means for solving the problem]
[0006] The elevator control system according to the present disclosure includes a trigger receiving means for receiving a trigger signal for inquiring about a schedule for delivering a package to a delivery destination within a building; a delivery schedule inquiry means for, when the trigger receiving means receives the trigger signal, sending an inquiry signal to a delivery management system that manages delivery of packages, inquiring whether or not a package is scheduled to be delivered to the delivery destination on that date during that time period; an authentication information management means for generating delivery authentication information with an expiration date set when the delivery schedule inquiry means receives a response signal from the delivery management system indicating that a package is scheduled; and an elevator control means for lifting restrictions on elevator use when the delivery authentication information is entered within the expiration date into an authentication information input means provided at the elevator landing or inside the car. [Effects of the Invention]
[0007] According to the elevator control system of the present disclosure, it is possible to more reliably restrict the use of elevators by suspicious individuals disguised as delivery personnel. [Brief explanation of the drawings]
[0008] [Figure 1] 1 is a diagram showing a schematic configuration of an elevator control system according to an embodiment. [Figure 2] 3 is a flowchart showing a flow of processing performed by the elevator control system according to the embodiment. [Figure 3] 1 is a hardware configuration diagram of an elevator control system according to an embodiment. DETAILED DESCRIPTION OF THE INVENTION
[0009] An elevator system 1 according to an embodiment will be described below. Fig. 1 is a diagram showing a schematic configuration of the elevator system 1 according to the embodiment. As shown in Fig. 1, the elevator system 1 includes an elevator 20 installed in a building and an elevator control system 30 that controls the movement of the elevator 20. The elevator control system 30 is communicatively connected to an intercom system 40 installed in the building, and is also communicatively connected to a delivery management system 50 of each delivery company that delivers packages to the building.
[0010] As shown in Fig. 1, the intercom system 40 comprises a visitor's communication device 41 installed on the entrance floor of the building and a resident's communication device 42 installed in each dwelling room. The visitor's communication device 41 and the resident's communication device 42 are connected so that they can communicate with each other. A package delivery person H1 operates the visitor's communication device 41 to talk to a resident H2 who is operating the resident's communication device 42 in the dwelling room where the package is to be delivered, and informs the resident that he has come to deliver the package.
[0011] The resident's side communication device 42 is provided with an inquiry button 43 for inquiring about the package delivery schedule. When this inquiry button 43 is pressed, the intercom system 40 transmits a trigger signal S1 to the elevator control system 30, which serves as a trigger for starting an inquiry about the package delivery schedule. The trigger signal S1 includes, as delivery destination information, information that identifies the dwelling room of the resident's side communication device 42 whose inquiry button 43 was pressed. When the intercom system 40 receives information about whether or not a package delivery is scheduled from the elevator control system 30, it has a function of notifying resident H2 of the information by displaying it on the resident's side communication device 42, for example.
[0012] The elevator 20 includes a car 21 that moves up and down the elevator shaft to transport passengers. An authentication information input unit 25 for inputting authentication information is provided inside the car 21. The authentication information may be a password, a two-dimensional code containing authentication information, or the like. The authentication information input unit 25 may be a keypad for inputting a password, or a scanner for reading the two-dimensional code. Also provided inside the car 21 is a car operation unit 27 that allows passengers to register destination floors and input commands to open and close the doors. A hall operation unit 28 that allows passengers to call the car 21 is provided at the hall at each floor where the car 21 arrives.
[0013] As shown in Figure 1, the elevator control system 30 includes a trigger receiving unit 31, a delivery schedule inquiry unit 32, an authentication information management unit 33, an elevator control unit 34, a suspicious person notification unit 35, and a memory unit 39 in which various data are stored.
[0014] The trigger receiving unit 31 receives a trigger signal S1 from an external device such as the intercom system 40. The trigger signal S1 is a signal that triggers an inquiry as to whether or not a package is scheduled to be delivered to a specific delivery destination, and includes information about the delivery destination. The trigger receiving unit 31 also has a function of receiving the result of the inquiry about the delivery schedule by the delivery schedule inquiry unit 32 and returning information about whether or not a package is scheduled to be delivered to the intercom system 40.
[0015] When the trigger receiving unit 31 receives a trigger signal S1, the delivery schedule inquiry unit 32 sends an inquiry signal S2 to the delivery management system 50 to inquire whether there is a delivery schedule for that delivery destination on that date during that time period. At this time, if there are multiple delivery companies that deliver packages to that building, the inquiry signal S2 is sent to the delivery management system 50 of each of the multiple delivery companies. The inquiry signal S2 includes information on the date and time period, and information on the delivery destination. Note that if the trigger signal S1 includes information that can identify one delivery management system 50 to be inquired about (for example, information identifying the delivery company, the delivery case number, etc.), the inquiry signal S2 may be sent only to one delivery management system 50 identified by that information.
[0016] The delivery schedule inquiry unit 32 also receives a response signal S3 in response to the inquiry signal S2 from each delivery management system 50. The response signal S3 includes information indicating whether or not there is a delivery schedule that matches the information related to the inquiry, and if there is a matching delivery schedule, it further includes information such as a case number that identifies the delivery case.
[0017] When the delivery schedule inquiry unit 32 receives a response signal S3 from the delivery management system 50 indicating that there is a delivery schedule that matches the inquiry information, the authentication information management unit 33 generates delivery authentication information P1 with an expiration date set and transmits it to the delivery management system 50. At this time, the expiration date can be set arbitrarily, approximately 5 to 15 minutes from the time of generation of the delivery authentication information P1. The authentication information management unit 33 then registers and manages the generated delivery authentication information P1 and its expiration date in an authentication information list stored in the storage unit 39. After the expiration date has passed, the authentication information management unit 33 deletes the invalid delivery authentication information P1 from the authentication information list.
[0018] Furthermore, when transmitting the delivery authentication information P1 to the delivery management system 50, the authentication information management unit 33 can also transmit information such as the case number that was included in the response signal S3. This allows the delivery management system 50 to easily identify the delivery case that is the subject of the delivery authentication information P1 based on that information.
[0019] The elevator control unit 34 controls the operation of each part of the elevator 20, such as raising and lowering the car 21 in the elevator shaft, stopping it at a predetermined floor, and opening and closing the doors. In particular, in order to restrict the use of the elevator 20 by unauthorized persons, the elevator control unit 34 has a function of determining whether or not the user has the authority to use the elevator 20 based on the authentication information input to the authentication information input unit 25, and if it is determined that the user has the authority, lifting the usage restriction on the elevator 20 and enabling the registration of a destination floor.
[0020] When delivery authentication information is input to the authentication information input unit 25, the elevator control unit 34 determines whether the input delivery authentication information matches delivery authentication information P1 registered in the authentication information list and within its expiration date. If a match is determined, the elevator control unit 34 determines that the user is an authorized user, lifts the restrictions on elevator 20 use, and enables destination floor registration. Specifically, the elevator control unit 34 enables operation of the car operation unit 27 so that the user can directly operate the car operation unit 27 to register the destination floor, or alternatively, automatically registers the destination floor based on the delivery authentication information. In this case, automatic registration can extract destination floor information from the delivery authentication information if the delivery authentication information itself contains destination floor information, and use the extracted information to register the destination floor. Furthermore, when the authentication information management unit 33 registers delivery authentication information P1 in the authentication information list, if the delivery floor is also registered, the authentication information management unit 33 can also reference that information to register the destination floor.
[0021] If the elevator control unit 34 determines in the above judgment that the delivery authentication information input to the authentication information input unit 25 does not match the delivery authentication information P1 registered in the authentication information list and that is within the expiration date, it determines that the user is an unauthorized user (such as a suspicious person posing as a delivery person) and maintains the usage restriction of the elevator 20.
[0022] Furthermore, the elevator control unit 34 has a function of invalidating the user's operation of the car operating unit 27 provided in the car 21 when incorrect authentication information is input into the authentication information input unit 25 a predetermined number of times or more consecutively, i.e., when authentication information that is not registered in the authentication information list is input a predetermined number of times or more consecutively. This allows a person who inputs incorrect authentication information a predetermined number of times or more consecutively to be confined in the car 21 as a suspicious person. In this case, the predetermined number of times can be set arbitrarily, approximately between three and five times as a guideline.
[0023] The elevator control unit 34 has a function of lifting the usage restriction when it receives a lifting signal instructing the lifting of the usage restriction from the management device 63 that manages the elevator 20. As a result, for example, if it is determined that the person trapped in the car 21 is not a suspicious person, the management device 63 can issue a command to lift the usage restriction, making the elevator 20 available for use. Here, the management device 63 is a mobile terminal or the like of a manager H3 who manages the usage and security of the building or elevator.
[0024] When incorrect authentication information is input into the authentication information input unit 25 a predetermined number of times or more consecutively, the elevator control unit 34 may be configured to invalidate the user's operation on the car operating unit 27, further invalidate the user's operation on the hall operating unit 28 provided at the hall of each floor, and cause the hall display unit provided at the hall of each floor to display that the elevator 20 is unavailable. In this case, it is possible to prevent the car 21, which has locked a suspicious person, from being released by an operation by another user at the hall.
[0025] The suspicious person notification unit 35 has a function of, when incorrect authentication information is input into the authentication information input unit 25 a predetermined number of times or more consecutively, recognizing the input as being made by a suspicious person and outputting a notification signal notifying the presence of the suspicious person to a pre-designated notification destination. In this case, the notification destination can be, for example, the management device 63, which is a mobile terminal or the like of the administrator H3. This notification enables the administrator H3 to quickly recognize the presence of the suspicious person and take necessary measures.
[0026] Instead of or in addition to the case where incorrect authentication information is input consecutively a specified number of times or more, the suspicious person notification unit 35 may be configured to output a notification signal notifying the presence of a suspicious person to a pre-designated notification destination in one or more of the following cases: when the expiration date has passed without delivery authentication information being input into the authentication information input unit 25; or when the trigger receiving unit 31 has sent a query signal S2 to one or more delivery management systems 50 and received response signals S3 from all of the delivery management systems 50 indicating that no deliveries matching the query information are scheduled. In either case, the administrator H3 can quickly recognize the presence of a suspicious person upon receiving the notification and can take the necessary action.
[0027] As shown in FIG. 1, the delivery management system 50 includes a database 51 that stores various information related to delivery cases, a query processing unit 52, and an authentication information transfer unit 53. The database 51 stores, for each delivery case, information such as the case number, delivery destination, delivery schedule, and delivery person information. When the query processing unit 52 receives a query signal S2 from the delivery schedule query unit 32, it references the database 51 to determine whether there is a delivery schedule (delivery destination, delivery schedule) that matches the information related to the query (delivery destination, date, and time zone), and returns a response signal S3 indicating whether there is a matching delivery schedule. The response signal S3 includes information on whether there is a delivery schedule that matches the information related to the query, and, if there is a matching delivery schedule, further includes information such as a case number that identifies the delivery case.
[0028] When the authentication information transfer unit 53 receives the delivery authentication information P1 and the case number identifying the delivery case from the authentication information management unit 33, it refers to the database 51 to identify the delivery person in charge of the delivery case with that case number and transfers the delivery authentication information P1 to the mobile terminal of the identified delivery person. The delivery person H1, who has received the delivery authentication information P1 on his / her mobile terminal, inputs the delivery authentication information P1 into the authentication information input unit 25 at the delivery destination building, and uses the elevator 20, whose usage restrictions have been lifted, to move to the delivery destination floor and deliver the package.
[0029] An example of the flow of processing performed by the elevator control system 30 will be described below with reference to the flowchart shown in Fig. 2. Here, it is assumed that resident H2, upon learning that delivery person H1 has come to deliver a package, presses an inquiry button 43 provided on the resident-side communication device 42, causing the intercom system 40 to send a trigger signal S1, which serves as a trigger for starting an inquiry about the delivery schedule of the package, to the elevator control system 30. Then, the trigger receiving unit 31 receives the trigger signal S1 from the intercom system 40 (step ST1).
[0030] Next, the delivery schedule inquiry unit 32 transmits an inquiry signal S2 to each delivery management system 50 to inquire whether there is a plan to deliver a package to that delivery destination during that time period on that date (step ST2). At this time, if there are multiple delivery companies that will deliver packages to that building, the inquiry signal S2 is transmitted to the delivery management system 50 of each of the multiple delivery companies. Next, the delivery schedule inquiry unit 32 receives a response signal S3 to the inquiry signal S2 from each delivery management system 50 (step ST3).
[0031] Next, the delivery schedule inquiry unit 32 determines whether the response signal S3 from the delivery management system 50 includes a response signal indicating that there is a delivery schedule that matches the inquiry information (step ST4). If the response signal S3 indicating that there is no delivery schedule that matches the inquiry information is received from all delivery management systems 50 (step ST4, NO), the process proceeds to step ST5. In step ST5, the suspicious person notification unit 35 outputs a notification signal notifying the presence of a suspicious person to a pre-designated notification destination (step ST5).
[0032] On the other hand, if the response signal S3 from the delivery management system 50 includes a response signal indicating that there is a delivery that matches the inquiry information (step ST4, YES), the authentication information management unit 33 generates delivery authentication information P1 with an expiration date set and transmits the generated delivery authentication information P1 to the delivery management system 50 (step ST5). The delivery management system 50 then receives the delivery authentication information P1 and transfers it to the mobile terminal of the delivery person H1 in charge of the delivery. The delivery person H1 then enters the received delivery authentication information P1 into the authentication information input unit 25 provided in the car 21 to release the use restriction on the elevator 20 and move to the delivery destination floor.
[0033] Next, in steps ST7 and ST8, the elevator control unit 34 monitors whether or not authentication information has been input into the authentication information input unit 25 (steps ST7 to ST8), and if delivery authentication information has been input within the set expiration date (step ST7, YES), the process proceeds to step ST9. On the other hand, if the expiration date has passed without delivery authentication information being input into the authentication information input unit 25 (step ST7: NO, step ST8: YES), the process proceeds to step ST5.
[0034] In step ST9, the elevator control unit 34 determines whether the delivery authentication information input to the authentication information input unit 25 matches the delivery authentication information P1 registered in the authentication information list and within the expiration date (step ST9). If the input delivery authentication information does not match the delivery authentication information P1 registered in the authentication information list, that is, if incorrect authentication information has been input, the elevator control unit 34 accepts re-input as necessary, and if the correct authentication information has still not been input (step ST9, NO), the elevator control unit 34 proceeds to step ST5.
[0035] On the other hand, if the input delivery authentication information matches the delivery authentication information P1 registered in the authentication information list (step ST8, YES), the elevator control unit 34 lifts the usage restriction on the elevator 20 and enables the destination floor to be registered (step ST9). Specifically, the elevator control unit 34 enables operation of the car operating unit 27, allowing the user to directly operate the car operating unit 27 to register the destination floor, or alternatively, the destination floor is automatically registered based on the delivery authentication information. This allows the delivery person H1 to use the elevator 20, whose usage restriction has been lifted, to travel to the delivery floor and deliver the package.
[0036] Each component of the elevator control system 30 described above is configured by a computer including a processor 91, a memory 92, and a signal input / output unit 93, as shown in FIG. 3. The functions of the trigger receiving unit 31, the delivery schedule inquiry unit 32, the authentication information management unit 33, the elevator control unit 34, and the suspicious person notification unit 35 are realized by this computer. That is, the computer's memory 92 stores a program (elevator control program) for realizing the functions of the trigger receiving unit 31, the delivery schedule inquiry unit 32, the authentication information management unit 33, the elevator control unit 34, and the suspicious person notification unit 35. In addition, various information stored in the storage unit 39 is stored in the memory 92. The processor 91 executes arithmetic processing for controlling the operation of the elevator control system 30 based on the program stored in the memory 92.
[0037] As described above, in the elevator control system 30 according to the embodiment, the trigger receiving unit 31 receives a trigger signal S1 for inquiring about a package delivery schedule for a delivery destination within a building. When the trigger signal S1 is received, the delivery schedule inquiry unit 32 transmits an inquiry signal S2 to the delivery management system 50, which manages package deliveries, inquiring about whether a package is scheduled to be delivered to the delivery destination on that date during that time slot. When the authentication information management unit 33 receives a response signal S3 from the delivery management system 50 indicating that a delivery schedule matching the inquiry information exists, the authentication information management unit 33 generates delivery authentication information P1 with an expiration date and transmits it to the delivery management system 50. When delivery authentication information is input into the authentication information input unit 25 provided in the car 21 of the elevator 20 within the expiration date and matches the delivery authentication information P1, i.e., when the delivery authentication information P1 is input, the elevator control unit 34 releases the usage restriction on the elevator 20. As a result, when a delivery person comes to deliver a package, an inquiry is made to the delivery management system 50, and if it is confirmed that the delivery is as scheduled, delivery authentication information P1 required to use the elevator 20 for that delivery is provided to the delivery management system 50, and the delivery authentication information P1 can be sent to the delivery person H1 via the delivery management system 50. This reliably restricts the use of the elevator 20 by suspicious persons disguised as delivery people, ensuring crime prevention.
[0038] In the above embodiment, the intercom system 40 is configured to transmit the trigger signal S1 to the elevator control system 30 based on a user's button operation on the resident-side communication device 42. However, instead of or in addition to this, the intercom system 40 may be configured to transmit the trigger signal S1 to the elevator control system 30 based on a user's button operation on the visitor-side communication device 41. Also, instead of or in addition to the configuration in which the intercom system 40 transmits the trigger signal S1 to the elevator control system 30, the trigger signal S1 may be transmitted from the mobile terminal of resident H2 to the elevator control system 30 based on, for example, the operation of the mobile terminal of the resident H2.
[0039] In addition, in the above embodiment, the case where the authentication information input unit 25 is provided inside the car 21 has been described, but instead of or in addition to this, the authentication information input unit 25 may be provided at the elevator hall of the elevator 20.
[0040] Furthermore, in the above embodiment, the elevator control unit 34 has been described as lifting the usage restrictions on the elevator 20 by enabling the registration of a destination floor based on the user's operation on the car operation unit 27, or by automatically registering a destination floor based on delivery authentication information. However, instead of or in addition to this, the elevator control unit 34 may also enable the registration of a destination floor based on the user's operation on the hall operation unit 28. [Explanation of symbols]
[0041] 1. Elevator System 20 Elevator 21 Basket 25 Authentication information input section 27 Cage operation unit 28 Platform control unit 30 Elevator Control System 31 Trigger reception unit 32 Delivery Schedule Inquiry Section 33 Authentication Information Management Department 34 Elevator control unit 35 Suspicious Person Notification Department 39 Memory section 40 Intercom System 41 Visitor's communication device 42 Resident side communication device 43 Inquiry button 50 Delivery Management System 51 databases 52 Inquiry processing unit 53 Authentication Information Transfer Section 63 Management device 91 processors 92 memory 93 Signal input / output section H1 Delivery Person H2 Residents H3 Administrator S1 trigger signal S2 note signal S3 answer signal
Claims
1. a trigger receiving means for receiving a trigger signal for inquiring about a delivery schedule for a package to a delivery destination within the building; a delivery schedule inquiry means for, when the trigger acceptance means accepts the trigger signal, transmitting an inquiry signal to a delivery management system that manages delivery of packages, the inquiry signal inquiring whether or not there is a delivery schedule for the package to the delivery destination during that time period on that date; an authentication information management means for generating delivery authentication information with a set expiration date when the delivery schedule inquiry means receives a response signal from the delivery management system indicating that the delivery schedule exists; an elevator control means for releasing the restriction on use of the elevator when the delivery authentication information is input within the expiration date to an authentication information input means provided at the elevator hall or in the elevator car; An elevator control system comprising:
2. 2. The elevator control system according to claim 1, wherein the trigger receiving means receives and accepts the trigger signal from an intercom system installed in the building.
3. 2. The elevator control system according to claim 1, wherein the trigger receiving means receives and accepts the trigger signal from a mobile terminal of a user.
4. The elevator control system according to any one of claims 1 to 3, wherein the elevator control means automatically registers a destination floor based on the delivery authentication information to release the usage restriction.
5. 4. The elevator control system according to claim 1, wherein the elevator control means releases the usage restriction by validating registration of a destination floor based on a user's operation on a hall operating unit provided at a hall or a car operating unit provided in the car.
6. 6. The elevator control system according to claim 1, further comprising a suspicious person notification means for outputting a notification signal notifying the presence of a suspicious person to a pre-designated notification destination in one or more of the following cases: when incorrect authentication information is input into the authentication information input means a predetermined number of times or more consecutively; when the expiration date has passed without the delivery authentication information being input into the authentication information input means; and when the trigger receiving means transmits the inquiry signal to one or more of the delivery management systems and receives response signals indicating that there is no schedule from all of the delivery management systems to which the inquiry signal was sent.
7. The authentication information input means is provided in the car, 7. The elevator control system according to claim 1, wherein the elevator control means invalidates a user's operation on a car operating unit provided in the car when incorrect authentication information is input to the authentication information input means a predetermined number of times or more consecutively.
8. 8. The elevator control system according to claim 7, wherein, when incorrect authentication information is input consecutively to the authentication information input means a predetermined number of times or more, the elevator control means invalidates the operation by the user at the car operation unit, invalidates the operation by the user at a hall operation unit provided at a hall on each floor, and causes a hall display means provided at a hall on each floor to display that the elevator is unavailable.
9. 9. The elevator control system according to claim 1, wherein the elevator control means releases the usage restriction when it receives a release signal instructing the release of the usage restriction from a management device that manages the elevator.
Citation Information
Patent Citations
JP1973092386A
Fire time rescue operating device for elevator
JP2003341955A
Package delivery-man confirmation system and its method
JP2005292921A
Elevator management system
JP2009155063A
Elevator
JP2012193006A