Elevator Safety Software Updating via a Separate Security Unit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing safety systems for building-based passenger transport systems, such as elevators and escalators, face complexity and increased costs due to the need for software updates and security measures, which can compromise safety and certification processes.
Innovation Solution
A safety system with a separate updating unit and safety unit, each with its own hardware, allows for secure external software updates via an internal interface, minimizing complexity and ensuring safety functions are maintained while protecting against unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If an external interface is added to the safety unit for software updates, then software can be updated externally, but the complexity of the safety unit increases
Solution Approach 1:
The system is divided into two separate units: a safety unit with simple safety monitoring functions and an updating unit with external interface and software update capabilities. This segmentation allows the safety unit to remain simple while still enabling external software updates through the updating unit.
Solution Approach 2:
The updating unit acts as an intermediary between the external environment and the safety unit. It handles all external communications and software update operations, protecting the safety unit from direct exposure to external interfaces while still enabling update functionality.
2Reliability
If security measures are implemented in the safety unit, then unauthorized access is protected, but the complexity and certification costs increase
Solution Approach 1:
Security-related functions including external interface handling, authentication, and software verification are extracted from the safety unit and placed in the updating unit. This allows the safety unit to maintain high reliability through simple, certifiable logic while security measures are implemented in the updating unit.
Solution Approach 2:
The updating unit serves as a security intermediary that handles all external communications and implements security measures. It verifies the authenticity of update packages and manages the update process, protecting the safety unit from direct security risks while enabling secure updates.
3Adaptability or versatility
If the safety unit handles both safety functions and software updates, then integration is improved, but safety function reliability may be compromised
Solution Approach 1:
The system is segmented into a safety unit dedicated to safety monitoring functions and an updating unit dedicated to software management. This clear separation ensures that safety functions remain isolated from potential software update risks, maintaining reliability while enabling integrated functionality through controlled communication between units.
Data Source
AI summary
A safety system for a building-related passenger transport system includes a safety unit for receiving safety-relevant signals from components of the passenger transport system and for triggering a safety measure, and an updating unit for receiving updated software via an external interface and for transmitting the updated software to the safety unit via an internal interface.