Patent Publication Number: US-9850093-B2

Title: System and method for controlling elevator system access

Description:
BACKGROUND 
     Elevator systems are in widespread use for carrying passengers among various levels within buildings. Elevator systems traditionally have included hall call buttons that allow an elevator passenger to provide an indication of a desired direction of travel when placing an elevator call. Once an elevator car is available at the location where the call was placed, the passenger enters the elevator car and uses a car operating panel to provide an indication of the passenger&#39;s desired destination. Such systems have proven useful and reliable for many years. 
     More recently, different elevator system configurations have been introduced that allow passengers to indicate a desired destination from outside of an elevator car. Some such systems include a kiosk or passenger interface in a lobby. Passengers can enter desired destinations using the kiosk. The elevator system determines which car to assign to each passenger request and provides an indication to the passenger of the assigned elevator car. A variety of configurations of such systems have been proposed for communicating the passenger&#39;s intended destination and for communicating information to the passenger so that they board the correct elevator car. 
     One limitation of such systems is that the passenger typically has to remember which elevator car to board and there may be some time between the passenger learning that information and actually boarding the elevator car. Another drawback associated with such systems is that they provide limited security over who can board an elevator car. There are situations, for example, where elevator system access should be limited for security reasons. 
     SUMMARY 
     An exemplary method of controlling elevator system access includes receiving a request from a portable wireless communication device indicating a desire for at least access to an elevator car. An indication of an access credential is provided to the portable wireless communication device if the request satisfies a selected criterion. The access credential at least temporarily indicates that the desired access should be granted. The desired access is granted responsive to receiving the provided access credential from the portable wireless communication device. 
     An exemplary method of obtaining access to an elevator system includes transmitting a request from a portable wireless communication device indicating a desire for at least access to an elevator car. An indication of an access credential is received at the portable wireless communication device. The access credential at least temporarily indicates that the desired access should be granted. The received access credential is provided from the portable wireless communication device to a credential receiver to obtain the desired access. 
     An exemplary elevator system includes at least one elevator car. An access controller is configured to provide an access credential to a portable wireless communication device responsive to a request from that device indicating a desire for at least access to the elevator car. The access credential at least temporarily indicates that the desired access should be granted. A credential receiver is configured to obtain the provided access credential from the portable wireless communication device. An entry device allows the desired access responsive to the credential receiver obtaining the access credential. 
     The various features and advantages of disclosed example embodiments will become apparent to those skilled in the art from the following detailed description. The drawings that accompany the detailed description can be briefly described as follows. 
    
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         FIG. 1  schematically illustrates selected portions of an elevator system designed according to an embodiment of this invention. 
         FIG. 2  is a flowchart diagram summarizing an example approach for obtaining access to an elevator system. 
         FIG. 3  is a flowchart diagram summarizing an example approach to controlling access to an elevator system. 
         FIG. 4  schematically illustrates a procedure for obtaining and granting access to an elevator system. 
     
    
    
     DETAILED DESCRIPTION 
       FIG. 1  schematically shows selected portions of an elevator system  20 . A plurality of elevator cars  22 ,  24  and  26  are situated in a known manner for carrying passengers to various levels within a building. Although three elevator cars are illustrated, any number of elevator cars may be included in an elevator system designed according to an embodiment of this invention. 
     An elevator controller  28  controls operation of the elevator cars  22 ,  24  and  26 . The elevator controller  28  uses known dispatching algorithms for assigning one of the elevator cars to a passenger request for elevator service. The elevator controller  28  in this example also controls whether an elevator car will be accessible by an individual using techniques such as controlling whether one of the elevator cars is assigned to carry that individual to a desired destination or controlling whether the elevator car doors will be opened for an individual. 
     An access controller  30  controls whether an individual will be granted access to the elevator system. The access controller  30  in this example is configured to also control whether an individual will be granted access to a building or a restricted area within a building. The access controller is configured to communicate with a portable wireless communication device  32 . In the illustrated example, the access controller  30  has an associated transceiver  34  that wirelessly communicates with the portable wireless communication device  32 . 
     In one example, the portable wireless communication device  32  is a mobile station configured for telecommunication. In one example, the mobile station comprises a smart phone. In another example the device  32  is a tablet or another mobile device. In this example, the portable wireless communication device  32  comprises a smart phone that includes a software application enabling it to communicate with the access controller  30 . 
     An elevator passenger uses the wireless communication device  32  to provide a request indicating a desire for access to the elevator system. In one example, the request includes an indication of a desired destination of the elevator passenger. The access controller  30  receives the request from the wireless communication device  32 . If the request satisfies a selected criterion, such as originating from a recognized wireless communication device  32  or including an identifier of an authorized elevator passenger with the request, the access controller  30  provides an indication of an access credential to the wireless communication device  32 . That access credential is then provided by the wireless communication device  32  to a credential receiver  36 . For example, the wireless communication device  32  displays the access credential as a bar code or a scan code and the credential receiver  36  comprises a scanner or reader. When a valid access credential is received, the desired access indicated in the request is granted. 
     In the example of  FIG. 1 , an entry device  38  controls whether an elevator passenger is provided with the desired access. The entry device  38  may be a turnstile, for example, to control whether an individual is allowed to enter a building, elevator lobby or a restricted area within a building. In such an example, the request indicates a desire to enter a building or lobby. The illustrated example allows for integrating multiple security or access functions with elevator system features. 
     In some examples, the access credential has a limited time within which it is valid. Providing a temporary access credential to the wireless communication device  32  provides enhanced security over access to the elevator system or other portions of a building. A security pass card, for example, may be misplaced by an individual or stolen, leaving it vulnerable to use by an unauthorized individual. Printed barcodes may be copied, misplaced or stolen. Requiring that the wireless communication device  32  receive an access credential for purposes of granting access, therefore, provides enhanced security features compared to previous arrangements. 
       FIG. 2  includes a flowchart diagram  40  that summarizes an example approach for obtaining access to the elevator system  20 . In this example, the wireless communication device  32  is within communication range of the transceiver  34 . A user opens an application to attempt to gain access to the elevator system. At  42 , the wireless communication device  32  transmits a request indicating a desire for at least access to an elevator car. The request may be manually initiated by user input or automatically initiated once the associated application is open. The request in some examples includes an indication of the desired destination of the elevator passenger. At  44 , the wireless communication device  32  receives an indication of the access credential. At  46 , the wireless communication device  32  provides the received access credential to the credential receiver  36  for obtaining the desired access. 
       FIG. 3  includes a flowchart diagram  50  summarizing an example approach for controlling access to an elevator system. At  52 , the access controller  30  receives a request from the portable wireless communication device  32 . The request indicates a desire at least for accessing the elevator system. The request in some examples includes an indication of the desired destination of the elevator passenger. At  54 , the access controller  30  provides an indication of an access credential to the wireless communication device  32  if the received request satisfies a selected criterion. For example, the access controller  30  verifies that the request originates from an authorized device or includes an ID of an authorized user. At  56 , the desired access is granted responsive to receiving the provided access credential at the credential receiver  36  from the wireless communication device  32 . 
       FIG. 4  schematically illustrates an example communication session for providing access and elevator service. On the left hand side of  FIG. 4 , the wireless communication device  32 , which comprises a smart phone in this example, displays an image  60  corresponding to the access credential received from the access controller  30 . The elevator passenger holds the displayed image  60  where it can be detected by the credential receiver  36 . In this example, the credential receiver  36  is mounted as part of a building entry turnstile  38 . When a valid access credential is received, the entry device or turnstile  38  allows the individual to enter the building or area. 
     As shown on the right side of  FIG. 4 , the wireless communication device  32  displays an image  62  that indicates an elevator car assigned to carry the passenger to the desired destination. In some examples the indication of the assigned elevator car may include an audible indication. 
     As mentioned above, the passenger&#39;s intended destination may be communicated to the elevator system along with the request for desired access. In some examples, the passenger destination is communicated to the elevator system in a separate transmission from the wireless communication device  32 . In still other examples the intended destination of the passenger is communicated to the elevator system as part of the communication of the access credential from the wireless communication device  32 . 
     Some example implementations include a wireless communication device  32  that is configured for near field communications. For example, a smart phone may include a near field communication module that allows for using known near field communication protocol for securely communicating information between the device  32  and the access controller  30 . The near field communication may be used for communicating the request for desired access, the passenger&#39;s intended destination, the provided access credential, or a combination of two or more of those. 
     One feature of using near field communications is that identification information regarding an elevator passenger may be prestored on the wireless communication device  32  so that it can be securely communicated to the access controller  30  when needed. In some examples, the identification information regarding the elevator passenger may be dynamically generated responsive to signals from the access controller. One feature of using a near field communication module is that it allows an individual to control the information that the module retains in memory for purposes of communicating with an access controller  30  in one or more buildings. 
     Another feature of near field communication techniques is that they allow for an active mode of communication in which the wireless communication device  32  uses its own power supply. This does not require an electro-magnetic coupling with the access controller or credential receiver. Near field communication techniques, therefore, are considered superior to RFID-based communication of the type of information exchanged between the wireless communication device  32  and the access controller  30 . 
     In one example, a personal identification code entry functionality provides additional security. Upon entering a building the user opens the elevator access application on the portable wireless communication device  32 . When opened or initialized, the application in one example automatically submits a request for a default destination floor. In another example, the first action of the application is to present a list of primary floors to the user for selection or presents a key pad or other selectors for allowing the user to enter a desired destination. In the event that the intended destination is a secure floor some identification of the user is required before the request will be serviced. 
     In one example an identification of the device  32  serves as the personal identification code. In another example, the user is prompted by the application on the device  32  to enter a secure personal identification code. Once the identification code is verified, the desired elevator service will be provided. 
     One feature of some example implementations is that each building has a unique system for communicating with mobile communication devices  32 . Building or system identification information allows the elevator access application on the communication device  32  to customize the information provided to the user or to customize how the application performs upon establishing a communication with that particular system in a particular building. For example, the default floor for a user in one building (e.g., a workplace) will be different than the default floor for the same user in another building (e.g., another workplace building or a residential building). Additionally, the application will perform differently depending on the configuration of the system with which the device  32  is communicating to accommodate any special security features or to require more or less manual input from the user. 
     The preceding description is exemplary rather than limiting in nature. Variations and modifications to the disclosed examples may become apparent to those skilled in the art that do not necessarily depart from the essence of this invention. The scope of legal protection given to this invention can only be determined by studying the following claims.