Method, device and computer program for authorizing a communication between a control unit of a passenger transport system and a cloud service, and computer-readable storage medium

Abstract

The invention relates to a method for authorizing a communication between a control unit (34) of a passenger transport system (20) and a cloud service. The method has the steps of: receiving code data from a service device (48) of service personnel; comparing the received code data with specified code data which represents a code that is valid for a specified time period and is output in a region (36) of the passenger transport system (20) during the specified time period, said region (36) being accessible by means of a physical key; and enabling the communication between the control unit (34) and the cloud service if the received code data corresponds to the specified code data.

Description

[0001] Method, device and computer program for authorizing communication between a control unit of a passenger transport system and a cloud service, and computer-readable storage medium

[0002] Description

[0003] The invention relates to a method, a device and a computer program for authorizing communication between a control unit of a passenger transport system and a cloud service, and to a computer-readable storage medium on which the computer program is stored.

[0004] A passenger transport system within the meaning of this description can be, for example, an elevator, an escalator, or a moving walkway. The operation of a passenger transport system requires that it be inspected and / or maintained at regular intervals. For this purpose, service personnel can connect to a control unit of the passenger transport system using a service device to inspect and / or maintain the passenger transport system and retrieve various data from the control unit for diagnostic purposes. Various safety regulations, which may vary from country to country, require the relevant service personnel to be on-site, i.e., at the passenger transport system, during the inspection or maintenance.This can be ensured, for example, by enabling a communicative connection between the service device and the control unit exclusively via a cable connection or via short-range wireless communication, such as Bluetooth. A corresponding connection for the cable connection or a corresponding Bluetooth transmitter can be arranged, for example, in a machine room and / or in a cabinet, in particular a control cabinet, of the passenger transport system. The cabinet has a mechanical lock that can only be opened using a corresponding physical key.

[0005] The introduction of cloud technologies enables advanced elevator diagnostics and real-time elevator data acquisition. This can generally be initiated by connecting the service device to a remote computing unit, such as a computer and / or a server, such as a back-end server. The control unit of the passenger transport system can then communicate with the remote computing unit via suitable internet technologies and, in particular, exchange data. However, this can conflict with security regulations that stipulate that the control unit can only be accessed when service personnel are on-site. It is difficult to prevent illegal or unintentional access to the control unit via the internet if the passenger transport system, and in particular the control unit, is designed to allow access via the internet.In particular, the safety of the passenger transport system and in particular of the persons transported by the passenger transport system may then be compromised.

[0006] There may be a need for a method, apparatus, and / or computer program for authorizing communication between a control unit of a passenger transport system and a cloud service that is secure and, in particular, meets security requirements that require service personnel to be on-site at the passenger transport system during such communication. Furthermore, there may be a need for a computer-readable storage medium on which the computer program is stored.

[0007] Such a need can be met by the subject matter according to one of the independent claims. Advantageous embodiments are defined in the dependent claims and the following description.

[0008] One aspect of the invention relates to a method for authorizing communication between a control unit of a passenger transport system and a cloud service. The method comprises: receiving code data from a service device of a service personnel; comparing the received code data with predetermined code data representative of a code that is valid for a predetermined period of time and that is issued in an area of ​​the passenger transport system during the predetermined period of time, the area being accessible by means of a physical key; enabling communication between the control unit and the cloud service if the received code data corresponds to the predetermined code data.

[0009] To put it simply, the code is changed periodically and issued within the passenger transport system area in such a way that it can only be read by on-site service personnel. This ensures that the service personnel are on-site when they read the code using the service device. In other words, the code can only be read by accessing the area secured by the physical key near the passenger transport system. This fulfills the requirements that require access to the control unit and thus the passenger transport system data only to authorized service personnel, since the physical key is only issued to authorized service personnel, and the presence of the service personnel on-site is guaranteed.

[0010] The method makes it possible to ensure that service personnel are on-site when communication between the control unit and the cloud service is enabled. This helps prevent unauthorized access to the control unit via the internet, especially when no service personnel are on-site. This can contribute to a high level of security for the passenger transport system. Furthermore, it can help ensure that the passenger transport system is inspected and / or maintained using the cloud service without violating relevant safety regulations. The inspection or maintenance can, for example, include a diagnosis of the passenger transport system, in particular the control unit.The cloud service has the ability to directly access the history of the passenger transport system and all possible information related to the passenger transport system stored in the cloud, including safety audit logs, error logs with varying levels of detail, etc. Furthermore, the cloud service enables seamless collection of analysis data in real time without the need to retrieve all information locally via the service device. Furthermore, if the service device is connected to the cloud service independently of the control unit, it can communicate with the control unit via the cloud service and, if necessary, use diagnostic tools that are partially or completely processed by the cloud service. At the same time, however, the service device only needs to store small amounts of data, since larger amounts of data can be stored in the cloud by the cloud service.

[0011] The cloud service is a digital service that provides shared computing resources, such as servers, data storage, and / or applications, as needed—usually via the internet and device-independently—in a timely and minimal manner. Communication between the control unit and the cloud service can generally be blocked unless enabled using the procedure explained above and below. Thus, communication between the control unit and the cloud service is generally blocked and is only enabled if the received code data matches the specified code data. Alternatively, communication between the control unit and the cloud service can be blocked if the received code data does not match the specified code data.

[0012] The fact that the code is valid for the specified period of time can, for example, mean that the code is valid exclusively for the specified period of time. The fact that the code is issued in the area of ​​the passenger transport system during the specified period of time can, for example, mean that the code is issued in the area exclusively during the specified period of time. The specified period of time can refer to a start time, an end time and the time in between. It can therefore be the case that the code is valid while the code is issued in the area, i.e. at the same time, or at least essentially at the same time, although in practice a deviation of up to a few seconds is generally uncritical. The length of the specified period of time can, for example, be between one minute and one week, for example between 15 minutes and one day, for example between 30 minutes and one hour.The code can be any code that is perceptible to service personnel within the area and imperceptible outside the area. For example, the code can be a visually or acoustically perceptible code, in other words, an optical code or an acoustic code, respectively.

[0013] The fact that the area is accessible using the physical key can, for example, mean that the area is exclusively accessible using the physical key, at least if illegal access, for example through damage or using a lock pick, is disregarded. The fact that the key is a "physical" key means that the key has a real, tangible key body. The area can, for example, be a machine room of the passenger transport system or, in the case of an elevator system as a passenger transport system, a shaft head or pit of a corresponding elevator shaft. Alternatively, the area can, for example, be a cabinet, in particular a control cabinet, of the passenger transport system, which is located, for example, in the machine room, the shaft head or the pit. The area can be designed such that it is exclusively accessible non-destructively using the physical key.

[0014] The method can be processed by a device, in particular a processing unit, for example, a computer or a server, as explained in more detail below. The processing unit can be operated, for example, by a manufacturer of the passenger transport system or by a service provider of the passenger transport system. The method can also be referred to as an authentication method and / or be embedded in corresponding authentication software that can be processed by the processing unit.

[0015] According to one development, the method comprises, before receiving the predefined code data from the service device: sending the predefined code data to an output device that is arranged in the area and that is designed to output the code for which the predefined code data is representative during the predefined time period. The output device is further designed to no longer output the code after the predefined time period has elapsed. The output device can, for example, be an output device of the control unit. Alternatively, the output device can be a separate output device that is communicatively coupled to the control unit. The output device is designed to output different codes one after the other.

[0016] According to one development, the method comprises, after receiving the predetermined code data, outputting the code representative of the predetermined code data by means of the output device during the predetermined time period. The output device can be designed to automatically output the code after receiving the predetermined code data. In this context, the output device can process part of the method, in particular displaying the code. Alternatively, after or simultaneously with sending the predetermined code data to the output device, an output signal can be sent to the output device, wherein the output device is designed to display the code in response to receiving the output signal. The output device is further designed to no longer output the code after the predetermined time period has elapsed.

[0017] According to one development, after enabling communication, the method comprises: sending other predefined code data to the output device, which is configured to output another code, representative of the other predefined code data, for a further predefined period of time in response to receiving the other predefined code data. The output device is further configured to no longer output the further code after the further predefined period of time has elapsed. This can prevent the code from being detected in the area and used at a later time when the service personnel are no longer on-site. The code data and the other code data can be generated and specified, for example, by the cloud service.

[0018] According to a further development, after enabling communication, the method comprises: receiving communication data from the control unit; and / or sending the communication data to the control unit. The communication data can generally comprise any data required for the operation of the passenger transport system and / or stored in a memory unit of the control unit. The communication data can comprise, for example, operating data, diagnostic data, and / or control data.

[0019] According to one development, the area is located in a cabinet in a building in which the passenger transport system is located, wherein the cabinet is designed such that it is only accessible using the physical key. The cabinet can, for example, be a metal cabinet that can only be accessed non-destructively and legally using the physical key. According to one development, the cabinet has a mechanical lock that can be opened or closed using the physical key. In this context, the key can be referred to as a mechanical key. The mechanical key can, for example, comprise metal or be formed from a metal and / or have a bit. Alternatively, the cabinet can, for example, have a magnetic lock that can be opened or closed using the physical key.In this context, the key can be referred to as a magnetic key. Furthermore, in this context, the key can, for example, comprise plastic or be made of plastic. For example, the magnetic key can be designed as a key card.

[0020] According to a further development, the area is located in a room of a building in which the passenger transport system is located, whereby the room is accessible exclusively with the physical key or with another physical key. In this context, the room can be, for example, the engine room, the shaft head, or the pit.

[0021] According to a further development, the code is a visually perceptible code, and the output device has a display device by means of which the code is displayed in the area. The display device can be, for example, an electronic display. The code can be, for example, a QR code, a barcode, or an alphanumeric code.

[0022] According to a further development, the code is an acoustically perceptible code, and the output device has a loudspeaker by means of which the code is output in the area. The code can, for example, comprise one or more sounds or be a sequence of tones of different pitches and / or with a specific rhythm.

[0023] One aspect of the invention relates to a device for authorizing communication between the control unit of the passenger transport system and the cloud service. The device comprises: a storage unit for storing the code data; and a processor communicatively coupled to the storage unit and configured to receive the code data from the service device of the service personnel and, based on the received code data, to execute the method explained above and below.

[0024] One aspect of the invention relates to a computer program for authorizing communication between the control unit of the passenger transport system and the cloud service, the computer program comprising computer-readable instructions that, when executed by the device, cause the device explained above and below to execute the method explained above and below.

[0025] One aspect of the invention relates to a computer-readable storage medium on which the computer program is stored. The computer-readable storage medium can be, for example, a hard disk, a USB storage device, a RAM, a ROM, an EPROM, or a FLASH memory. The computer-readable medium can also be a data communications network, such as the Internet, which enables the download of the computer program.

[0026] It should be noted that some of the possible features and advantages of the invention are described herein with reference to only one of the aspects. However, one skilled in the art will recognize that these features can be readily applied to one or more of the other aspects to achieve further embodiments of the invention and / or to achieve further advantages.

[0027] Embodiments of the invention will now be described with reference to the accompanying drawings, wherein neither the drawings nor the description are to be construed as limiting the invention.

[0028] Fig. 1 shows a side sectional view of an exemplary passenger transport system according to an embodiment of the present invention.

[0029] Fig. 2 shows a flowchart of a method for authorizing communication between a control unit of a passenger transport system and a cloud service, according to one embodiment of the present invention. The figures are merely schematic and not to scale. The same reference numerals denote the same or equivalent features in the various figures.

[0030] Fig. 1 shows a side sectional view of a passenger transport system 20 according to one embodiment of the present invention. The passenger transport system 20 can be, for example, an elevator system, an escalator, or a moving walkway. Figure 1 illustrates an elevator system as an example of the passenger transport system 20. However, in other embodiments of the present invention, the passenger transport system 20 can also be an escalator or a moving walkway.

[0031] The elevator system comprises an elevator car 22, which can be displaced vertically within an elevator shaft 24 by means of a drive machine 30. For this purpose, the elevator car 24 is held by a suspension element 28, which can be designed, for example, as a belt or rope. The suspension element 28 can extend over a traction sheave 32, which is mechanically coupled to the drive machine 30. One end of the suspension element 28 can be mechanically coupled to a counterweight 26 of the elevator system. The drive machine 30 is designed to drive the traction sheave 32 and thereby move the suspension element 28, whereby the elevator car 22 is displaced vertically in the elevator shaft 24. During the vertical displacement of the elevator car 22, the counterweight 26 is also displaced vertically in the elevator shaft 24, but in the opposite direction to the elevator car 22.

[0032] The passenger transport system 20 is used to transport one or more people and / or one or more loads from one floor (not shown) of a building (not shown) in which the passenger transport system 20 is arranged, to another floor of the building. The elevator car 22 can have a car door (not shown) through which the elevator car 22 can be entered or exited. The building can have a shaft door (not shown) on each floor, which can allow or prevent access (not shown) to the elevator shaft 24. When the elevator car 22 stops on one of the floors, the elevator car 22 can be entered or exited through the open car door and the open shaft door. The passenger transport system 20 has a control unit 34 designed to control the drive machine 30. For this purpose, the control unit 34 can be communicatively coupled to the drive machine 30.The control unit 34 can be located in a room 37 of the passenger transport system 20. The room 37 can, for example, be a machine room of the passenger transport system 20. In the embodiment shown in Figure 1, the room 37 is located above a shaft head of the elevator shaft 24. Alternatively, the room 37 can be located in a pit at the lower end of the elevator shaft 24 or next to the elevator shaft 24.

[0033] The passenger transport system 20 has a cabinet 38. The cabinet 38 can, for example, be arranged in the room 37. The cabinet 38 has a lock 40 by means of which the cabinet 38 can be locked. The lock 40 can be a mechanical lock that can be opened and locked with a physical key (not shown), in particular a mechanical key. In this case, the physical key can, for example, be a metal key and / or have a bit. Alternatively, the lock 40 can be a magnetic lock that can be opened and locked with the physical key, in particular a magnetic key (not shown). In this case, the physical key can, for example, be made largely of plastic and / or be designed as a key card, for example with a magnetic strip.The cabinet 38 can be designed in such a way that it can be opened non-destructively exclusively by means of the physical key, whereby an illegal opening of the cabinet 38, for example by means of a lock pick, is not taken into account here.

[0034] The physical key is accessible exclusively to service personnel for checking and / or maintaining the passenger transport system 20. Thus, the cabinet 38 comprises an area 36 that is exclusively accessible to service personnel. Alternatively, the room 37 can have a lockable door (not shown) that can be opened non-destructively using only the physical key. In this case, the room 37 comprises the area 36 that is exclusively accessible to service personnel. Optionally, both the room 37 and the cabinet 38 can be secured such that they can only be opened using the physical key or, optionally, using two corresponding physical keys. A dispensing device 42 of the passenger transport system 20 is located in the area 36.The output device 42 is designed and arranged such that information output by the output device 42 can only be perceived by the service personnel when the service personnel are located in the area 36. For this purpose, the area 36, ​​in particular the cabinet 38 and / or the room 37, must first be opened by the service personnel using the physical key so that it is accessible to the service personnel.

[0035] The output device 42 is designed to display a code. The output device 42 can, for example, have or be an optical display device, for example an electronic display. In this case, the code can be a visually perceptible code, in particular an optical code, for example a QR code, a barcode, or an alphanumeric code. Alternatively, the output device 42 can have a loudspeaker or be a loudspeaker. In this case, the code can be an acoustically perceptible code, in particular an acoustic code, for example a predetermined sequence of tones and / or noises. Furthermore, the output device 42 can have the display device and the loudspeaker. In this case, the code can be a combination of acoustic and optical code.

[0036] The output device 42 can be communicatively coupled to the control unit 34. The output device 42 can be a separate output device 42 from the control unit 34. Alternatively, the output device 42 can be a component of the control unit 34. The output device 42 can be communicatively coupled to a cloud 44, for example, directly or indirectly via the control unit 34. In the latter case, the control unit 34 can be communicatively coupled to the cloud 44. The communicative coupling with the cloud 44 can be implemented, for example, via the Internet.

[0037] The cloud 44 may include a device 46 or be communicatively coupled thereto. The device 46 may, for example, be a computing unit, in particular a computer and / or a server. The device 46 may include a processor 50 and a memory unit 52 communicatively coupled to the processor 50. The processor may be configured to receive code data from a service device 48 of a service personnel and to store it in the memory unit 52. The device 46 may, for example, be provided and / or operated by a manufacturer of the passenger transport system 20 or by a service provider of the passenger transport system 20.

[0038] The service personnel may have a service device 48. The service device 48 may be configured to capture the code representative of the code data that is output on the output device 42. If the code is an optical code, the code may be captured by photographing, filming, and / or scanning the code. Alternatively, the optical code may be entered into the service device 48 by the service personnel, for example, using a keyboard or a touch-sensitive display (not shown) of the service device 48. If the code is an acoustic code, the code may be captured by recording the code using a microphone of the service device 48. The service device 48 may further be configured to communicate with the cloud 44, in particular with the device 46, for example via the Internet. The service device 48 may be, for example, a smartphone, a tablet computer, or a laptop.

[0039] The device 46 can be configured to enable communication between the control unit 34 of the passenger transport system 20 and a cloud service provided by the cloud 44. For this purpose, the device 46 can execute a method that is explained in more detail with reference to Figure 2.

[0040] Fig. 2 shows a flowchart of a method for authorizing communication between the control unit 34 of the passenger transport system 20 and the cloud service, according to one embodiment of the present invention. The steps S2 and S6 to S14 of the method explained below can be processed by the device 46. Step S4 can be processed by the output device 42 and / or by the control unit 34. The method can also be referred to as an authentication method and / or be embedded in corresponding authentication software that can be processed by the device 46. In an optional step S2, predetermined code data can be sent to the output device 42. The output device 42 is arranged in the area 36. The output device 42 is designed to output the code, for which the predetermined code data is representative, for a predetermined period of time.The code is only valid for the specified period of time. For example, the code is valid exclusively for the specified period of time. Alternatively or additionally, the code may only be issued during the specified period of time. The specified period of time can refer to a start time, an end time, and the time in between. Thus, the code may be valid as long as the code is issued in the range, i.e. simultaneously, or at least essentially simultaneously. In practice, a deviation of up to a few seconds or a few minutes is uncritical and can be understood as simultaneous in the course of this description. The length of the specified period of time can be, for example, between one minute and one week, for example between 15 minutes and one day, for example between 30 minutes and one hour.

[0041] In an optional step S4, the code representative of the predetermined code data is output by means of the output device 42 for a predetermined period of time. The output device 42 can be configured to automatically output the code for the predetermined period of time after receiving the predetermined code data and then no longer output it. Alternatively, after or simultaneously with the transmission of the predetermined code data in step S2, an output signal can be sent from the device 46 to the output device 42, wherein the output device 42 can be configured to output the code in response to receiving the output signal and then no longer output it. Optionally, an activation element (not shown) can be arranged in the area 36, ​​which is coupled to the output device 42 and which must be activated by the service personnel so that the output device 42 outputs the code.The activation element may be, for example, a switch, a button or, if the output device 42 has a touchscreen, an area on the touchscreen.

[0042] The service personnel can gain access to the area 36 using the physical key and capture the code currently being output by the output device 42 using the service device 48. For this purpose, the service device 48 can generate code data representative of the captured code. This "captured" code data can then be transmitted from the service device 48 to the device 46, for example, via the Internet, in particular via the cloud 44.

[0043] Optionally, a diagnostic application can be installed on the service device 48, which, once launched, can prompt service personnel to capture the code displayed in the hidden area 36. The diagnostic application can be configured to capture the code, for example, by scanning, photographing, or recording it. The diagnostic application can then send the code to the cloud service, which is provided, for example, in whole or in part, via the device 46.

[0044] In a step S6, the code data can be received, in particular by means of the device 46. The code data can then be stored on the memory unit 52, for example by means of the processor 50.

[0045] In a step S8, the received code data can be compared with the predefined code data representative of the code, which was optionally sent to the output device 42 in step S2. In particular, the cloud service can validate the code and, after successful validation, establish a communication connection with the control unit 34. This allows the cloud-based communication connection between the diagnostic application and the control unit 34 to be authenticated and / or authorized.

[0046] In a step S10, the communication between the control unit 34 and the cloud service can be enabled if the comparison in step S8 shows that the received code data corresponds to the predetermined code data.

[0047] In an optional step S12, other predefined code data can be sent to the output device 42, for example, by means of the device 46. In this context, the device 46 can be configured, in response to receiving the other predefined code data, to output another code, for which the other predefined code data is representative, for a further predefined period of time. The further predefined period of time can correspond in terms of its length to the previously mentioned predefined period of time, but deviates from the previously mentioned predefined period of time with regard to its start time and end time. The predefined code data and the other predefined code data can be generated and predefined, for example, by the cloud service.For example, a new code can be generated in the background by the cloud service at the latest after the expiration of the specified period of time, for example every two hours, and sent to the output device 42 in the room 37, in particular the cabinet 36.

[0048] In an optional step S14, communication data from the control unit 34 can be received by the device 46. Alternatively or additionally, the communication data can be sent from the device 46 to the control unit 34. The communication data can generally include any data required for the operation and / or diagnosis of the passenger transport system 20 and / or stored in a memory unit of the control unit 34. The communication data can include, for example, operating data, diagnostic data, and / or control data of the passenger transport system 20.

[0049] Illustratively speaking, the code is changed periodically and issued in a hidden manner in the area of ​​the passenger transport system 20, in particular in the room 37 and / or in the cabinet 38. As a result, the service personnel can only capture the code using the service device 48 when the service personnel are on site, i.e., in the vicinity of the passenger transport system 20, and the area 36 is accessible due to the previous use of the physical key.

[0050] A computer program for authorizing communication between the control unit 34 of the passenger transport system 20 and the cloud service may include computer-readable instructions. The computer-readable instructions, when executed by the device 46, may cause the device 46 described above to execute the method described above.

[0051] The computer program can be stored on a computer-readable storage medium. The computer-readable storage medium can be, for example, a hard disk, a USB storage device, a RAM, a ROM, an EPROM, or a FLASH memory. The computer-readable medium can also be a data communications network, such as the Internet, that enables downloading of the computer program. The computer-readable storage medium can be the storage unit 52. Alternatively or additionally, the computer-readable storage medium can be communicatively coupled to the device 46 and read by the processor 50.

[0052] Finally, it should be noted that terms such as "having," "comprising," etc., do not exclude other elements or steps, and terms such as "a" or "an" do not exclude a plurality. Furthermore, it should be noted that features or steps described with reference to one of the above embodiments may also be used in combination with other features or steps of other embodiments described above. Reference signs in the claims are not to be considered as limitations.

Claims

Patent claims 1. A method for authorizing communication between a control unit (34) of a passenger transport system (20) and a cloud service, comprising: Receiving code data from a service device (48) of a service personnel; Comparing the received code data with predetermined code data representative of a code that is valid for a predetermined period of time and that is issued in an area (36) of the passenger transport system (20) during the predetermined period of time, the area (36) being accessible by means of a physical key; Enabling communication between the control unit (34) and the cloud service if the received code data corresponds to the specified code data.

2. The method according to claim 1, prior to receiving the code data from the service device (48), comprising: Sending the predetermined code data to an output device (42) which is arranged in the area (36) and which is designed to output the code for which the predetermined code data is representative during the predetermined period of time.

3. The method according to claim 2, after receiving the predetermined code data comprising: Outputting the code representative of the predetermined code data by means of the output device (42) during the predetermined period of time.

4. Method according to one of the preceding claims, after enabling the communication comprising: Sending other predetermined code data to the output device (42), which is configured to output another code, representative of the other predetermined code data, for a further predetermined period of time in response to receiving the other predetermined code data.

5. Method according to one of the preceding claims, after enabling the communication comprising: Receiving communication data from the control unit (34); and / or sending the communication data to the control unit (34).

6. Method according to one of the preceding claims, wherein the area (36) is located in a cabinet (38) which is located in a building in which the passenger transport system (20) is located, the cabinet (38) being designed such that it is accessible exclusively by means of the physical key.

7. The method of claim 6, wherein the cabinet (38) has a mechanical lock (40) that can be opened or closed by means of the physical key.

8. Method according to one of the preceding claims, wherein the area (36) is located in a room of a building in which the passenger transport system (20) is located, the room being accessible exclusively by means of the physical key or by means of another physical key.

9. Method according to one of the preceding claims, wherein the code is an optically perceptible code, and the output device (42) has a display device by means of which the code is displayed in the area (36).

10. The method according to any one of claims 1 to 8, wherein the code is an acoustically perceptible code, and the output device (42) comprises a loudspeaker by means of which the code is output in the area (36).

11. A device (46) for authorizing communication between a control unit (34) of a passenger transport system (20) and a cloud service, comprising: a storage unit (52) for storing code data; and a processor (50) which is communicatively coupled to the memory unit (52) and which is designed to receive the code data from a service device (48) of a service personnel and, based on the received code data, to serve the service personnel for carrying out the method according to one of the preceding claims.

12. A computer program for authorizing communication between a control unit (34) of a passenger transport system (20) and a cloud service, the computer program comprising computer-readable instructions that cause a device (46) according to claim 11 to execute a method according to any one of claims 1 to 10 when executed by a processor (50) of the device (46).

13. A computer-readable storage medium on which a computer program according to claim 12 is stored.

Images