Elevator Control Device Secure Local Access via Transmitted Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern elevator control devices lack reliable methods to distinguish between local and remote access, posing security risks as certain functions, like opening landing doors, should only be accessible when qualified personnel are present on site.
Innovation Solution
The elevator control device sends an identifier to a programming device, which must be entered on a control panel within a predetermined time period to ensure that only authorized personnel can access the system, allowing for secure local access while preventing unauthorized remote access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote access to elevator control device is enabled, then maintenance and programming can be performed from distant locations, but security risks increase as unauthorized personnel could access sensitive functions
Solution Approach 1:
The system performs preliminary verification of the identifier before granting access. The control device sends an identifier to the programming device, which must then be entered back on a control panel within a predetermined time period. This preliminary action ensures that only authorized personnel with physical access to the control panel can initiate and complete the access sequence, preventing unauthorized remote access while allowing legitimate remote programming operations.
2Reliability
If local access with identifier verification is implemented, then access security is improved, but device complexity increases due to additional verification steps
Solution Approach 1:
The system uses existing components (programming device, control panel, display elements) to perform the verification function. The identifier is displayed on the programming device's existing display elements and entered through the control panel's existing input interface. This self-service approach leverages existing infrastructure rather than introducing dedicated verification hardware, thereby improving security while minimizing increases in device complexity.
3Reliability
If identifier entry time period is set to a short duration, then security against accidental access is improved, but ease of operation decreases as personnel must act quickly
Solution Approach 1:
The time period is made dynamic and configurable rather than fixed. The predetermined time period can be adjusted based on operational requirements, allowing optimization between security and ease of operation. This dynamic parameter enables the system to adapt to different scenarios, such as extending the time period for trained personnel who need to enter identifiers efficiently while maintaining shorter periods for higher security requirements.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for operating an elevator control device (16), wherein the elevator control device (16) automatically sends a code (44) to a programming device (34) when the elevator control device (16) is accessed by the programming device (34), wherein the elevator control device (16) expects the previously sent code (44) to be entered at a control panel (20, 22) comprised by the elevator control device (16) or associated with the elevator control device (16) within a specified or specifiable entry time period and wherein the elevator control device (16) enables the access to the elevator control device (16) if the previously sent code (44) has been correctly entered within the entry time period.