Control for interactive safety between elevator system and machine passenger

Patent metadata

Field	Value
Publication number	US-2021284489-A1
Application number	US-202017095463-A
Country	US
Kind code	A1
Filing date	Nov 11, 2020
Priority date	Mar 16, 2020
Publication date	Sep 16, 2021
Grant date	—

Abstract

An interaction safety control between an elevator system and a machine passenger. An interaction safety control method between an elevator system and a machine passenger, which includes: receiving a command from the machine passenger; based on a received command, determining the safety of the command with respect to the elevator system; and in case that the command is determined to be unsafe with respect to the elevator system, not sending the command to an elevator control device of the elevator system.

First claim

What is claimed is:

1 . An interaction safety control method between an elevator system and a machine passenger, comprising:
receiving a command from the machine passenger; based on a received command, determining the safety of the command with respect to the elevator system; and in case that the command is determined to be unsafe with respect to the elevator system, not sending the command to an elevator control device of the elevator system.

2 . The interaction safety control method of claim 1 , wherein information of the command comprises a command type; the determining the safety of the command with respect to the elevator system comprise:
based on the command type of the command, judging whether a currently received command belongs to the command type corresponding to a safe sub-interface which is pre-opened to the machine passenger; and determining that the currently received command is unsafe with respect to the elevator system in case that the currently received command does not belong to the command type corresponding to any of the safe sub-interfaces.

3 . The interaction safety control method of claim 1 , wherein the safe sub-interface that is pre-opened to the machine passenger is selected from one or more of the following:
a first safe sub-interface that corresponds to the command type of requesting to register a destination floor; a second safe sub-interface that corresponds to the command type of requesting an elevator state.

4 . The interaction safety control method of claim 3 , wherein the safe sub-interface that is pre-opened to the machine passenger is further selected from one or more of the following:
a third safe sub-interface that corresponds to the command type of requesting a call; a fourth safe sub-interface that corresponds to the command type of requesting to keep a car door open; a fifth safe sub-interface that corresponds to the command type of requesting to release the car door; a sixth safe sub-interface that corresponds to the command type of state polling.

5 . The interaction safety control method of claim 1 , wherein information of the command comprises an identifier of the machine passenger sending the command, and a command type;
the determining the safety of the command with respect to the elevator system comprise: based on the received command, judging whether it is a command that is valid with respect to the elevator system but invalid with respect to the machine passenger; if the received command is a command that is valid with respect to the elevator system but invalid with respect to the machine passenger, determining that the received command is unsafe with respect to the elevator system.

6 . The interaction safety control method of claim 5 , wherein the command that is invalid with respect to the machine passenger is predefined.

7 . The interaction safety control method of claim 1 , wherein information of the command comprises a command type, an identifier of the machine passenger sending the command, and a receipt time;
the determining the safety of the command with respect to the elevator system comprise: based on the receipt time of commands from a same machine passenger, determining adjacent receipt time intervals of the commands of a same command type from the same machine passenger; and based on a determined adjacent receipt time interval, determining the safety of the command with respect to the elevator system.

8 . The interaction safety control method of claim 7 , wherein in the process of determining the safety of the command with respect to the elevator system,
if the adjacent receipt time interval of the currently received commands is smaller than a safe time interval corresponding to the command type of the command, determining that the currently received command is unsafe with respect to the elevator system.

9 . The interaction safety control method of claim 8 , wherein the safe time interval is preset respectively according to a minimum time required by the commands of a respective command type to be normally executed once by the elevator system.

10 . The interaction safety control method of claim 1 , wherein information of the command comprises a command type;
the determining the safety of the command with respect to the elevator system comprise: based on the received command and the command type thereof and current running state information of the elevator system, determining the safety of the received command with respect to the elevator system.

11 . The interaction safety control method of claim 10 , wherein in the process of determining the safety of the received command with respect to the elevator system,
if switching from the current running state of the elevator system to the running state to be entered required by the command is not allowed by the elevator system, determining that the currently received command is unsafe with respect to the elevator system.

12 . The interaction safety control method of claim 1 , wherein information of the command comprises a command type, an identifier of the machine passenger sending the command, and a receipt time;
the determining the safety of the command with respect to the elevator system comprise: if a first command and a second command received in sequence from a same machine passenger have different command types from each other and the first command has been sent to the elevator control device, judging whether command permutations and combinations containing the first command and the second command conform to control logic of the elevator system for the same passenger; if the command permutations and combinations do not conform to the control logic, determining that a received second command is unsafe with respect to the elevator system.

13 . The interaction safety control method of claim 12 , wherein in the process of determining the safety of the command with respect to the elevator system:
according to the receipt time of a currently received second command, determining a predetermined time period by subtracting a respective predetermined time period from the receipt time, wherein the predetermined time period is related to the command type of the second command; determining the first command from the same machine passenger contained within the predetermined time period which has been received and sent to the elevator control device, and forming the command permutations and combinations that contain the first command and the second command formed in a sequential order of the receipt time.

14 . The interaction safety control method of claim 1 , wherein information of the command comprises a command type;
the determining the safety of the command with respect to the elevator comprise: based on the received command and the command type thereof, judging whether a wrong parameter value of a respective command type is contained in the command; and if the received command contains the wrong parameter value, determining that the currently received command is unsafe with respect to the elevator system.

15 . The interaction safety control method of claim 1 , further comprising:
acquiring a respective elevator run result corresponding to one or more commands that have been sent to the elevator control device; if the elevator run result includes a run exception and the run exception is not caused by the elevator system itself, determining that the one command is unsafe with respect to the elevator system, or command permutations and combinations of a plurality of commands do not conform to a control logic of the elevator system.

Assignees

• Otis Elevator Co

Inventors

• Zhang Yu
• Wang Shenhong

Classifications

• B66B1/3446

  Data transmission or communication within the control system · CPC title

• B66B1/3423

  Control system configuration, i.e. lay-out · CPC title

• B66B5/0012 Primary

  Devices monitoring the users of the elevator system · CPC title

• B66B5/0031

  for safety reasons · CPC title

• B66B1/3461

  between the elevator control system and remote or mobile stations · CPC title