EP3212554B1 - System and method for protecting the privacy of people in a lift system - Google Patents

Description

The technology described here relates generally to elevator systems in which individual interests may be taken into account, for example, passengers residing in elevator cars or operators of elevator systems (building owners and / or building managers) or both.

JP 2000-169054 describes an elevator system with a video system intended to prevent crime. For this purpose, the video system has a video camera inside each elevator car and a video monitor on each floor of the building which displays pictures taken by the video camera. A passenger waiting on the floor can thus detect in advance whether a suspicious person is in the elevator car, which operates this floor next.

The end JP 2000-169054 known elevator system allows a waiting passenger to recognize a suspicious person inside the cabin. The waiting passenger may then not be able to enter the cabin and / or notify security personnel. In addition to the legitimate interest in preventing crime, other interests should also be considered in an elevator system. There is therefore a need for a technology that allows for the consideration of such interests.

One aspect of such an improved technology relates to an elevator system with an elevator car that can be moved between floors of a building, a video system with a video camera arranged in the elevator car and a video monitor, by means of which information relating to an interior of the elevator car can be displayed. The elevator system also has a video control device communicatively coupled to the video system and selectively controlling the video system according to one of a plurality of operating modes. The video controller, in one embodiment, controls the video system according to a first mode of operation when a passenger requests deactivation of the video system. In the first operating mode this is Video system is disabled or activation is blocked, leaving the video system in an inactive state. The video system remains in the inactive state as long as the passenger is in the elevator car.

Another aspect of the technology relates to a method of operating such an elevator system. A control parameter is received by the video controller, which selects one of a plurality of modes of operation in response to the received control parameter. A first mode of operation is selected in an embodiment when the control parameter corresponds to a disable command when a passenger requests deactivation of the video system. In the first operating mode, the video system is deactivated or its activation is blocked so that the video system remains in an inactive state. The video system is controlled according to the selected operating mode, wherein in the first operating mode the deactivation of the video system is maintained while the passenger is in the elevator car.

This technology allows the consideration of different interests. On the one hand, it fulfills a security need of persons who wish to use the elevator system, since a waiting person receives information about the interior of a car even before the arrival of the elevator car on the floor. She can then decide if she wants to use this cabin or not. The technology also meets the interest of a building owner and / or property manager who wants to provide their users and residents with a safe means of transport. On the other hand, the technology also fulfills the interest of a passenger who is in an elevator car, after a certain privacy. The technology described here preserves these interests, in which different operating modes can be selected

The in this technology on a video monitor representable, the interior of the elevator car information can be flexibly chosen. In the exemplary embodiments described here, the information is contained in a video recording which, for example, comprises images from the elevator car in real time. It can also be text, individual (still) pictures and / or symbols.

In one embodiment, the elevator system has an elevator control and a device for detecting an authorization parameter assigned to a passenger. The elevator controller is communicatively connected to the video system and the device for recognizing the authorization parameter in order to control the video system according to the operating mode. The permission parameter allows a person to be given specific rights that allow the person to influence the video system to provide the desired privacy.

In one embodiment of the elevator system, a first input unit is arranged on a floor on which a video monitor is present. The first input unit is provided for inputting a control parameter for the video system, wherein the control parameter is for selecting an operation mode. A person waiting on a floor can thereby request a display of a video recording from the floor, ie before departure, and judge the situation in the cabin intended for the journey.

In one embodiment of the elevator system, a second input unit is provided in the elevator car, the second input unit being provided for inputting a control parameter for the video system, and wherein the control parameter is for selecting an operation mode. With the input unit in the cabin, a passenger in the cabin can prevent a video recording to preserve privacy.

To ensure privacy, an indicator that is present in one embodiment of the elevator system within the elevator car also contributes. This indicator indicates an operating state of the video camera. The passenger in the cabin learns whether and when a video recording takes place.

With regard to the operation of the video system, the technology advantageously offers several operating modes and thus flexibility in order to safeguard the stated interests. Said first mode of operation may be selected in one embodiment if the control parameter corresponds to a deactivation command. In this mode of operation, a passenger can prevent video recording for privacy to protect. So that not every passenger can request this mode of operation, it can be determined in one embodiment whether a passenger requesting the deactivation of the video system is authorized to do so. Deactivation of the video system takes place only if the passenger is authorized to deactivate.

In one embodiment, a second mode of operation is selected when the control parameter corresponds to an activation command, wherein in the second mode of operation the video system is activated by the video controller and the activation in the elevator car is indicated by an indicator. In this mode of operation, a person waiting on a floor may request a video recording display.

In one embodiment, deactivation is canceled after a specified condition has been met. The stipulated condition may be a lapse of a predefined period of time or a termination of a journey from a boarding stall to a destination floor. This ensures that the deactivation is active only for a limited time and then the video system again assumes a defined initial state (active).

If the passenger is a person of particular importance (VIP), in one embodiment the deactivation of the video system can be maintained until the passenger has left the elevator car. This ensures that no video is taken of this person.

In one embodiment, a third mode of operation is selected when the control parameter corresponds to an anonymization command. In the third operating mode, an anonymized video recording from inside the elevator car is displayed on the video monitor. In this case, it is of advantage that both the information interest of a person waiting on a floor and the interest in the privacy of a passenger are taken into account. The waiting person, for example, learns whether the car is occupied, and the passenger can trust that person details on the video recording are unrecognizable, for example due to pixelation.

In an embodiment of the elevator system, the video control device controls the display of the video recording on the video monitor so that a video recording in the video Original is displayed if there is a corresponding request command, and in which the request for a video recording is displayed in the original in the elevator car. Again, it is advantageous that both the information interest of the waiting person and the interest of privacy of a passenger are taken into account. The passenger is in fact informed that his personal details are again recognizable or will be recognizable again within a short time.

The technology described here also takes into account the security interests of people living in apartments or working in rooms that have direct access to an elevator car. These persons can use the information from the elevator car to decide whether they want to unlock an elevator door (eg for a known passenger) or keep them locked (eg in the case of an unknown passenger). If a person wishes to unlock the elevator door, she presses a corresponding button and an elevator control then receives a command to unlock the elevator door. The elevator control unlocks the elevator door so that the passenger can leave the elevator car on this floor.

If unlocking the elevator door (for the time being or for the time being) is not desired, the technology offers several options. In one embodiment, an intercom can be activated so that the person can clarify by conversation whether the elevator door is yet to be unlocked. In another embodiment, the person - either with or without talking to the passenger - may initiate a control command (eg, by pressing a button), whereupon the elevator controller activates the drive unit to move the elevator car to the floor (starting floor or boarding floor) the passenger has boarded. Alternatively, if no elevator door unlock command is received, the elevator controller may activate the drive unit after a predetermined period of time to move the elevator car to the boarding stall.

The technology also advantageously offers several possibilities for presenting the information relating to the interior of the elevator car. In one embodiment, the information is displayed on a video monitor located on a floor. Depending on the configuration, the information can be displayed only on the floor on a video monitor, from which floor of the Representation was requested. In one embodiment, a video monitor (or its functionality) may be integrated with a mobile electronic device so that the information is displayed on the display of the mobile device.

Fig. 1

eine schematische Darstellung eines Ausführungsbeispiels eines Aufzugssystems mit einem Videosystem;

Fig. 2

eine schematische Darstellung eines Ausführungsbeispiels eines Bedienpanels in einer Aufzugskabine des Aufzugssystems aus Fig. 1;

Fig. 3

eine beispielhafte Darstellung eines Verfahrens zum Betreiben des Aufzugssystems aus Fig. 1;

Fig. 4

eine beispielhafte Darstellung eines Verfahrensablaufs zum Betreiben des Aufzugssystems gemäss einem Betriebsmodus;

Fig. 5

eine beispielhafte Darstellung eines Verfahrensablaufs zum Betreiben des Aufzugssystems gemäss einem weiteren Betriebsmodus; und

Fig. 6

eine beispielhafte Darstellung eines Verfahrensablaufs zum Betreiben des Aufzugssystems gemäss einem dritten Betriebsmodus.

In the following, various aspects of the technology are explained in more detail by means of exemplary embodiments in conjunction with the figures. In the figures, like elements have the same reference numerals. Show it:

Fig. 1

a schematic representation of an embodiment of an elevator system with a video system;

Fig. 2

a schematic representation of an embodiment of an operating panel in an elevator car of the elevator system from Fig. 1 ;

Fig. 3

an exemplary representation of a method for operating the elevator system Fig. 1 ;

Fig. 4

an exemplary representation of a procedure for operating the elevator system according to an operating mode;

Fig. 5

an exemplary representation of a procedure for operating the elevator system according to another operating mode; and

Fig. 6

an exemplary representation of a procedure for operating the elevator system according to a third mode of operation.

Fig. 1 shows a schematic representation of an embodiment of an elevator system 1 in a building 2. The building 2 has several floors L1, L2, L3, which are served by the elevator system 1, ie, a passenger can be transported from the elevator system 1 from a boarding floor to a destination floor become. Depending on the building 2, the elevator system 1 can be designed differently, for example as a traction elevator with ropes or belts, as a hydraulic elevator, as a lift with multiple cabins, or as a group of several elevators (eg a group of six elevators, each one an elevator car In the exemplary embodiment shown, the elevator system 1 has an elevator car 10 which can be moved in an elevator shaft 18, hereinafter also referred to as a car 10, which is connected to a drive unit 14 via a suspension element 16 (cables or straps) and to this drive unit 14 may be a traction elevator, with other details such as a counterweight and Guide rails in Fig. 1 not shown. An elevator controller 12 is connected to the drive unit 14 and drives the drive unit 14. The function of a traction elevator and the tasks of a lift control 12 are well known to those skilled in the art.

This in Fig. 1 The elevator system 1 shown has a video system comprising a video camera 6 and at least one video monitor 4. In the illustrated embodiment, the building 2 has three floors L1, L2, L3 and on each floor a video monitor 4 is present. But there may also be only two or more than three floors; It is also possible that not all floors are equipped with a video monitor 4. A video controller 8 is communicatively connected to the video camera 6 and the video monitor 4 to control the video camera 6 and the video monitor 4. In addition, the video controller 8 is communicatively connected to the elevator controller 12.

By communicative connection is meant in this specification a direct or indirect connection that allows unidirectional or bidirectional communication between two entities. In this case, data signals and / or control signals are transmitted in a manner known per se. Such a connection can be made by an electrical line system (either as a point-to-point connection system or as a bus system with units connected to the bus system being addressable), a radio system or a combination of a radio system and a line system. In Fig. 1 For example, the communicative link is represented by lines 20, 22, with the line 20 between the video controller 8 and the cab 10, and the line 22 connecting the video monitors 4 to the video controller 8. In one embodiment, the line 22 may be a bus system to which the video monitors 4 are connected.

In another embodiment, at least one video monitor 4 may be communicatively connected to the video controller 8 via a radio system. It is also possible that the functionality of the video monitor 4 (and possibly the functionality of an input unit 4a) is implemented in a mobile electrical device (eg mobile phone, smartphone). A user of this device can thus also watch a video recording away from the elevator system 1 or the building 2 and possibly also request from there. An exemplary application for this is described below in connection with a "home mode".

The person skilled in the art recognizes that the video control device 8 or its functionality can be part of a video monitor 4, the video camera 6, the elevator control 12 or another component of the elevator system 1 or of the building 2. In such a case, for example, the separate representation of the video control device 8 in Fig. 1 omitted. Depending on the configuration, therefore, the implementation of the communicative connection also changes. Fig. 1 is thus to be understood as a basic representation of an embodiment. Regardless of a particular embodiment of the video controller 8, it controls the video monitors 4 and the video camera 6 according to one of several modes of operation. Details of the functionality of the video controller 8 and the modes of operation are in connection with Fig. 3 - Fig. 6 described.

The video controller 8 controls the video camera 6 and the individual video monitors 4 by sending control signals to the video camera 6 and the video monitors 4, and possibly receiving signals from them. In order to generate the control signals, the video control device 8 evaluates control parameters and other signals received from, for example, the elevator controller 12, a first input unit 4a and a second input unit 6a. Those skilled in the art will recognize that the video controller 8 may receive and evaluate signals from less than said components or signals from additional components of the elevator system 1 to generate the control signals. The first input unit 4a is located on a floor L1, L2, L3 at or in the vicinity of a video monitor 4, and the second input unit 6a is located in the booth 10. The video control apparatus 8 has for this purpose a programmable processor which is located on a storage medium can access. In one embodiment, the processor and the storage medium are integrated in the video controller 8.

As stated above, the elevator system 1 may consist of a group of elevators. In such an elevator system 1, it may occur that several persons on the same floor L1, L2, L3 are allocated different lifts for their desired rides, for example when the elevator system 1 equipped with a destination call control. Under certain circumstances, therefore, several elevator cars 10 drive this floor L1, L2, L3 substantially simultaneously. Even with a conventional up / down control with destination input in the elevator car 10 u. U. several elevator cars 10 the floor L1, L2, L3 approach substantially simultaneously.

It may happen that several people want to learn information about the interior of "your" elevator car 10 and therefore want a representation of a video recording. For cost reasons, the smallest possible number of video monitors 4 on a floor L1, L2, L3 is desired even in a group of elevators. If, for example, only one video monitor 4 is present on a floor L1, L2, L3, the screen area of the video monitor 4 can be divided, which is known to the person skilled in the art by the term "split screen". The division can be made according to the number of video recordings desired. In one embodiment, the individual video recordings may be displayed sequentially, for example at a fixed repetition rate. In each video recording is displayed to which elevator car 10 or which is driving to inform the waiting people.

Fig. 2 shows a schematic representation of an embodiment of an operating panel 24 in an elevator car 10 of the elevator system 1 from Fig. 1 , In this exemplary operating panel 24, the video camera 6, an indicator 6b, the input unit 6a and a keyboard 26 are accommodated. A variety of design options for the control panel 24 are possible; For example, the control panel 24 may have a glass front, behind which the video camera 6, the indicator 6b, individual or all components of the input unit 6a and the keyboard 26 are arranged.

The video camera 6 is arranged at the upper end of the control panel 24, so that the video camera 6 has an optimized field of view over the interior of the cabin 10. For example, if the control panel 24 extends from the floor of the cabin 10 to the ceiling thereof, the video camera 6 is near the ceiling, allowing video shooting from an elevated position. The field of view of the video camera 6 is thereby also least obscured by a preceding passenger. In addition there is the video camera 6 as far as possible outside the range of a passenger, whereby the risk of vandalism is reduced. The risk of damage to the video camera 6 is also reduced by the fact that the video camera 6 is arranged behind a glass front. If the glass front is designed such that the video camera 6 is not easily recognizable (for example, made of tinted glass or with a design / pattern which obscures or obscures an objective of the video camera 6), deliberate concealment or damage to the video camera 6 is made more difficult.

The indicator 6b is used to inform the passengers in the car 10. Depending on the configuration, he can inform the passengers about the presence of the video camera 6, indicate an operating state of the video camera 6 (on / off, activation in x seconds) and / or display additional information (eg, that an anonymized (eg, a blurred, pixelated, distorted, and / or obfuscated) image of the cabin interior is shown on a particular floor L1, L2, L3, or that a sharp image has been requested.

Depending on the desired functionality of the indicator 6b, it can be made more or less complex. For example, in one embodiment, a light source (eg, an LED-based light source) merely displays the operating state of the video camera 6. In another embodiment, the indicator 6b may comprise an LCD display on which, for example, individual words, text, symbols or image information may be displayed. In a further embodiment, the indicator 6b can additionally be equipped or connected to a loudspeaker in order to reproduce acoustic signals and / or messages.

The person skilled in the art recognizes that the indicator 6b can also be integrated in the video camera 6, especially in the form of an LED light source. With regard to the arrangements, the person skilled in the art also recognizes that the video camera 6 can also be arranged separately from the operating panel 24, for example on the ceiling of the cabin 10.

The keyboard 26 allows a passenger to enter a car call, ie, after boarding the car 10, the passenger can enter a desired destination floor by means of the keyboard 26. Alternatively, the elevator system 1 may be equipped with a destination call control in which the passenger has a desired destination floor already enters the cabin 10 before boarding. In this case, the keyboard 26 could be omitted, or the number of keys could be reduced to a minimum (eg, door open, door close, or emergency call keys).

Im in Fig. 2 In the embodiment shown, the input unit 6a is arranged in the vicinity of the keyboard 26, both of which are arranged so that a passenger can comfortably operate them. In one embodiment, the input unit 6a comprises a device for recognizing an authorization parameter associated with a passenger. In one embodiment, this device is a reading device for an information carrier carried by a passenger. If the passenger presents the information carrier to the reading device, the reading device reads information from the information carrier, which serves, for example, to recognize an operating authorization. Only when the passenger is authorized to operate the input unit 6a can the passenger make an input. Depending on the configuration, the input unit 6a can have one or more keys or a touch-sensitive screen (touchscreen).

In one embodiment, the information carrier is designed like a card, for example in the form of a credit card or an employee card. Depending on the embodiment is located in or on the information carrier an externally contactable memory chip, an RFID transponder in conjunction with a memory chip or a visually readable code from outside, z. B. a QR code or a barcode. Alternatively, the functionality of the information carrier can also be realized on a portable electronic device (eg mobile telephone or smartphone). For example, QR codes, bar codes or color pattern codes can be displayed on the displays of such devices. Such devices also allow radio communication with other electronic devices, for example via known radio technologies such as Bluetooth or NFC. The reader of the input unit 6a is of course compatible with the technology of the information carrier used. Those skilled in the art will also recognize that the reader may also be configured for more than one technology.

In another embodiment, the authorization for the input can also be effected by the passenger with a key inputting the input unit 6a unlocks. It is also possible that with such a key a cover can be opened, behind which the input unit 6a is accessible.

Each video monitor 4 is in Fig. 1 connected to the video control device 8, which selectively controls the display of video information on the individual video monitors 14. The video information may include individual words, symbols, text, a still image and / or a video recording, with or without audio signal. In the embodiment described herein, the video information is a video record from the booth 10 that indicates a current situation in the cabin 10 in real time on the video monitor 4. In addition, each video monitor 4 may display general information such as building information (for example, notification of facility management, business directory, restaurants, etc.) or current information (e.g., weather, news or business information) as video information. Such information may be displayed, for example, when the car 10 is stopped (all video monitors 4 then display this general information) or when no video recording from the car 10 has been requested or desired on one or more particular floors. According to one exemplary embodiment, a video recording from the cabin 10 is displayed on a floor L1, L2, L3 only if this is requested on this floor L1, L2, L3. As a quasi-basic setting, if there is no such requirement, said general information is displayed on the video monitors 4.

In the exemplary embodiment shown, the input unit 4a is arranged on or in the vicinity of the video monitor 4 or integrated in it. The input unit 4a is configured in an embodiment similar to the input unit 6a, that is, it may have a reader for an information carrier and keys or a touch screen for command input. The input unit 4a can be combined with a floor terminal to input a destination call. In one embodiment, the video monitor 4 may also be integrated in the floor terminal.

With the understanding of the structure of the elevator system 1 and the functionalities of its components, the description of embodiments of a method for operating the elevator system 1 in conjunction with Fig. 3 - Fig. 6 , These figures show exemplary flowcharts of a method for operating the elevator system 1 according to different operating modes.

The method according to Fig. 3 starts in a step S1 and ends in a step S5. In a step S2, a control parameter is received by the video controller 8. This control parameter represents one of several operating modes available for selection in the elevator system 1. In a subsequent step S3, the video control device 8 selects one of a plurality of operating modes in dependence on the control parameter. In a step S4, the video control device 8 controls the elevator system 1 or the video system according to the selected operating mode.

Fig. 4 shows an exemplary flowchart of a method for operating the elevator system 1 according to an operating mode in which the display of a video recording from the cabin 10 on a particular floor L1, L2, L3 can be requested. The method starts in a step S1 and ends in a step S7.

In a step S2, the method waits for an input at one of the input units 4a, 6a. If, for example, a person waiting on a floor L1, L2, L3 requests the display of a video recording from the car 10, for example by pressing a button on the input unit 4a, a control parameter corresponding to an activation command is generated. If such an activation command is present in a step S3, the method proceeds along a yes branch to a step S4. On the other hand, if there is no control parameter, the process returns along the no branch to step S2 and waits for an input.

In step S4, the first operating mode is selected, according to which a video recording is displayed on the video monitor 4. The video controller 8 then performs various actions to facilitate this. This includes activating the indicator 6b in the cabin 10 in a step S5 and activating the video system in a step S6. Depending on the design of the indicator 6 b lights up after activation, a light source and / or informs an electronic display (for example, text, image and / or icon) on the presence of the video system and its status (active / inactive), where these possibilities can be combined with an acoustic signal. Activation of the video system includes, for example, turning on the video camera 6, turning on the video monitor 4 whose floor L1, L2, L3 has been requested for activation and / or transmitting the video record to the video monitor 4. The sequence of steps S5 and S6 may be described in an embodiment be reversed. In another embodiment, steps S5 and S6 may also be performed substantially simultaneously.

In the illustrated embodiment, the indicator 6b (step S5) is activated in front of the video system (step S6) to alert a passenger in the cabin 10 of the imminent activation of the video system. In one exemplary embodiment, the activation of the video system in step S6 takes place only after a defined period of time has elapsed (for example a few seconds) after activation of the indicator 6b in step S5. By activating the indicator 6, it is ensured that the passenger in the cabin 10 is informed that he is being observed or will be observed. Optionally, the passenger may turn away from the video camera 6 and / or hide his face to preserve his identity as much as possible. Even in this case, the display of the video recording on the video monitor 4 provides the information that the car 10 is not empty. If the visibility of the face is not required or desired, this "cabin not empty" information may be sufficient.

In one embodiment, the video system is deactivated as soon as the car 10 is ready to board the floor L1, L2, L3, from which the display of the video recording has been requested. If, for example, a waiting person has requested the video recording, there is no longer any need for information for this person if the cabin 10 is ready for boarding on the floor L1, L2, L3 with the door open. Alternatively, the video system may be disabled after a specified amount of time (eg, a few seconds). This time period can be chosen to be sufficient to inform the person waiting about the current situation in the car 10 (eg not empty). In such an embodiment, video recording may not be required or desired throughout the journey.

In one embodiment, a display is only possible on a video monitor 4, if the video monitor 4 is located on the floor L1, L2, L3, which is actually operated by the car 10 while driving. Video monitors 4 on floors L1, L2, L3, which are not operated by the cabin 10 on this trip, thus can not be used, for example, to observe other passengers.

Fig. 5 shows an exemplary flowchart of a method for operating the elevator system 1 according to another mode of operation, in which the video system remains disabled or disabled, for example, to maintain the privacy of a passenger sufficiently. The process starts in a step S1 and ends in a step S9.

In a step S2, the method waits for an input on one of the input units 4a, 6a. For example, if a person entering the cabin 10 on a floor L1, L2, L3 requests privacy, for example, by pressing a button on the input unit 6a in the car 10, a control parameter corresponding to a deactivation command is generated. If such a deactivation command is present in a step S3, the method proceeds along a yes branch to a step S4. On the other hand, if there is no control parameter, the process goes back along the no branch to step S2.

As an alternative to pressing a button in the cabin, the person can already express the desire for "privacy" on the floor L1, L2, L3 on the input unit 4a, before entering the cabin 10. This may, for example, be reserved for authorized persons (see following step S4).

In step S4 it is checked whether there is authorization to request the privacy. This can happen, for example, in that the passenger first has to present an information carrier at the input unit 6a, as described above, has to enter a PIN or has to activate the input unit 6a with a key. If there is no authorization, an entry is not possible or an entry already made is ignored. Such authorization may exist, for example, with registered passengers residing or working in the building, or with passengers with high standards and / or high profile (VIP). The person skilled in the art recognizes in one exemplary embodiment, the passenger can already be requested outside the cabin 10 to present the information carrier, to enter the PIN or to unlock the input unit 6a with a key.

In a step S5, the further operating mode is selected according to which the video system is deactivated if it was in an active state, or an activation is inhibited / blocked if it is in an inactive state. The video control device 8 can then perform various actions, for example, indicate the deactivation in the cabin 10 and / or turn off the video camera 6. In one embodiment, the video system remains deactivated until it is reactivated by a corresponding control parameter.

In an embodiment according to the Fig. 5 remains the video system disabled until a predetermined condition is met in a step S7. The specified condition may be expiration of a predefined amount of time in one embodiment. In another embodiment, the stipulated condition may be a termination of a journey from a boarding floor L1, L2, L3 to a destination floor L1, L2, L3. If the condition is satisfied, the method advances along the yes branch to a step S8 in which the video system is activated.

Other criteria may be defined in other embodiments. If the video system has been deactivated by a VIP, for example, it can not be reactivated (for example, by a corresponding input on an input unit 4a) as long as the VIP is in the cabin 10. This means that the desired privacy while driving can not be offset by an external event.

If the video system is active again after step S8, it may remain active depending on the design or be deactivated after a specified period of time. For example, if there is no desire to drive, the video system may be inactive.

Fig. 6 shows an exemplary flowchart of a method for operating the elevator system 1 according to a third mode of operation, in which the video recording is selectively modified, for example, the privacy of a passenger to maintain sufficient. The process starts in a step S1 and ends in a step S9.

In a step S2, the method waits for an input on one of the input units 4a, 6a. If, for example, a person waiting on a floor L1, L2, L3 requests the display of a video recording from the cabin 10 according to the second operating mode, whereupon the indicator 6b is activated, the passenger in the cabin 10 has the option of requesting anonymization of the video recording, so that, for example, by pixelation faces can not be detected. For example, when the passenger presses a key on the input unit 6a, a control parameter corresponding to an anonymization command is generated.

If such an anonymization command is present in a step S3, the method proceeds along a yes branch to a step S4. On the other hand, if there is no control parameter, the process goes back along the no branch to step S2.

Alternatively, the passenger can already request an anonymization of the video recording on the floor L1, L2, L3 on the input unit 4a, before entering the cabin 10. This may, for example, be an option for passengers who are familiar with the elevator system 1 and appreciate the security offered by the video system, but still want some privacy.

In step S4, it is checked whether there is authorization to request anonymization. This can, for example, be similar to that described above Fig. 5 described happen.

If the authorization is present, the third operating mode is selected in a step S5. In a step S6, in one embodiment, the video controller 8 then controls the video camera 6 to produce a modified video image. For example, a fuzzy video recording can be generated. Alternatively, the video controller 8 may post-process video capture by image processing software known to those skilled in the art to defuse, pixelate or distort the entire image, or to obfuscate only a person's face using facial recognition techniques. This also becomes a modified Produces video image that is anonymous.

The generation of a modified video image can be canceled in one embodiment. In a step S7, the method checks whether a corresponding control parameter (cancellation command) is present. If it exists, the process advances along the yes branch to a step S8, and the video image or the video recording is displayed in the original (for example, without pixelation). If there is no cancellation command, the modification of the video image is retained.

In an exemplary embodiment, it may be indicated in the cabin 10 by means of the indicator 6b that a video recording was requested in the original. This can also be set to a period of time after which the transmission of the video recording starts in the original. This allows a passenger to prepare for it, as mentioned above.

A cancellation command can be carried out, for example, at an input unit 4a. There may be a number of situations in a building that require the original video to be displayed. For example, if there is a security breach (an unauthorized person is in the building) or a person has committed an offense in the building, the interest in finding the person concerned outweighs the interest in privacy. Security personnel can enter a cancellation order in such a case. Depending on the configuration of the system, another person (eg VIP) may also be authorized to enter a cancellation order.

In addition to the exemplary embodiments and operating modes described above, the elevator system 1 can also be designed so that the elevator car 10 moves on at least one floor L1, L2, L3 directly into an apartment or a room of a shop or office. The apartment or the room can be entered through a door (eg a landing door or a combination of a shaft door and cabin door) of the elevator car 10. In the apartment or the room a video monitor 4 is arranged in each case. Depending on requirements, an input unit 4a can also be arranged there.

In such an elevator system 1, a kind of "home mode" may be implemented. The video monitor 4 in the apartment or room allows it in one Embodiment of a person located there to look at a display of the video recording from the elevator car 10 when the elevator car 10 moves to the floor L1, L2, L3 of the apartment or room. The person unlocks the door of the elevator car 10 only when the passenger, for example, known, logged in, identifies and / or trusted. For example, the person may press a button on the video monitor 4 or the input unit 4a to unlock, thereby sending a command to unlock the door to the elevator controller 12. After receiving the command, the elevator system 12 controls the unlocking of the door to allow a passenger on a floor L1, L2, L3 to leave the elevator car 10 on the floor L1, L2, L3.

In the other case, the door remains locked (for now) for safety reasons and an intercom can be activated. In one embodiment, it may be provided that, when the door remains locked, the elevator car 10 will retract to the boarding stall after a predetermined period of time or in the event of a control command from the person in the home / room.

The display of the video recording on the video monitor 4 can be made automatically as soon as the elevator car 10 starts the journey to the floor L1, L2, L3 of the apartment or room. The display can also be made only on request by the person.

In one embodiment, the video system may forward the video recording, for example to a mobile electronic device having a screen, e.g. As a mobile phone, a smartphone or a smartwatch. For this purpose, the video monitor 4 can be equipped with a (programmable) interface device for an Internet connection and / or a radio connection. By means of this interface device, the video monitor 4, after appropriate programming (eg destination specification (IP address), time specification (beginning / end)) forwards the video recording, for example as streaming media, to the mobile device.

If the person is not in the apartment or room, the person can still monitor and control access to the apartment or room remotely. As a result, the person may, for example, visitors, suppliers and / or employees grant access despite their absence. Also by the security interests of the person are respected.

In one embodiment, the elevator system 1 may also provide for the video system to store a video recording on a storage medium (eg in digital form on a hard disk). The storage can be made flexible in terms of time, so that, for example, only a record of the last trip takes place or records of the trips within a specified period of time, eg. For example, the last 2 hours or the last day. If necessary, z. As in the investigation of crimes, a stored record can be viewed. As a result, z. For example, it can be ascertained who was last driven to a certain floor L1, L2, L3.

Claims (16)

1. A lift system (1) comprising of:

   a lift car (10) that can be moved between floors (L1, L2, L3) of a building (2);

   a video system (4, 6) with a video camera (6) arranged in the lift car (10) and a video monitor (4) by means of which information relating to an interior of the lift car (10) can be displayed; and

   a video control device (8) which is communicatively connected to the video system (4, 6) and which controls the video system (4, 6) in a selective manner according to one of several operating modes,

   characterized in that the video control device (8) controls the video system (4, 6) according to a first operating mode if a passenger asks for the video system (4, 6) to be deactivated, wherein in the first operating mode, the video system (4, 6) is deactivated or activation is blocked, so that the video system (4, 6) remains in an inactive state, and wherein the video system (4, 6) remains in the inactive state for as long as the passenger is in the lift car (10).
2. The lift system (1) according to claim 1, further comprising a lift control system (12) and a device (4, 4a; 6, 6a) for identifying an authorization parameter assigned to the passenger, wherein the lift control system (12) is communicatively connected to the video system (4, 6) and the device (4, 4a; 6, 6a) for identifying the authorization parameter, in order to control the video system (4, 6) according to one of several operating modes,
3. The lift system (1) according to claim 1 or 2, further comprising a first input unit (4a) on a floor (L1, L2, L3) on which a video monitor (4) is present, wherein the first input unit (4a) for entering a control parameter for the video system (4, 6) is provided and wherein the control parameter is used to select an operating mode.
4. The lift system (1) according to one of the preceding claims, further comprising a second input unit (6a) in the lift car (10), wherein the second input unit (6a) is provided for the input of a control parameter for the video system (4, 6) and wherein the control parameter is used for selecting an operating mode.
5. The lift system (1) according to claim 3 or 4, in which a control parameter comprises an activation command, a deactivation command and/or an anonymization command, wherein an operating mode is assigned to the activation command, the deactivation command and the anonymization command.
6. The lift system (1) according to one of the preceding claims, further comprising an indicator (6b) within the lift car (10), by means of which an operating state of the video camera (6) can be displayed.
7. A method of operating a lift system (1) comprising of a lift car (10) that can be moved between floors (L1, L2, L3) of a building (2), a video system (4, 6) with a video camera (6) arranged in the lift car (10) and a video monitor (4) by means of which information relating to the interior of the lift car (10) can be displayed and a video control device (8) which is communicatively connected to the video system (4, 6), comprising:

   reception of a control parameter by the video control device (8);

   selection of one of several operating modes by the video control device (8) depending on the control parameter received, wherein a first operating mode is selected when the control parameter corresponds to a deactivation command when a passenger requests deactivation of the video system (4, 6), wherein in the first operating mode, the video system (4, 6) is deactivated or activation is blocked, so that the video system (4, 6) remains in an inactive state; and

   controlling of the video system (4, 6) according to the selected operating mode, wherein the deactivation of the video system (4, 6) is maintained in the first operating mode for as long as the passenger is in the lift car (10).
8. The method according to claim 7, further comprising the selection of a second operating mode when the control parameter corresponds to an activation command, wherein in the second operating mode the video system (4, 6) is activated by the video control device (8) and the activation is displayed in the lift car (10) by means of an indicator (6b) and wherein information relating to the interior of the lift car (10) is displayed on the video monitor (4).
9. The method according to one of claims 7 or 8, also comprising cancellation of the deactivation after a specified condition has been met.
10. The method according to claim 9, wherein the preset condition is the lapse of a predefined time period or end of a journey from a boarding floor (L1, L2, L3) to a destination floor (L1, L2, L3).
11. The method according to one of claims 7 - 10, further comprising the determination of whether the passenger requesting deactivation of the video system (4, 6) is authorized to do so and deactivation of the video system (4, 6) only when the passenger is authorized to deactivate.
12. The method according to one of claims 7 - 11, further comprising the selection of a third operating mode when the control parameter corresponds to an anonymization command, wherein in the third operating mode an anonymized video recording from the interior of the lift car (10) is displayed on the video monitor (6).
13. The method according to claim 12, wherein the video control device (8) controls the display of the video recording on the video monitor (4), so that a video recording is displayed in the original when a corresponding request command is present and wherein the request for a video recording is displayed in the original in the lift car (10).
14. The method according to one of claims 7 - 13, also comprising the receiving of a command for the unlocking of a lift door of the lift car (10) by a lift control system (12) and the unlocking of the lift door by the lift control system (12), in order to allow a passenger on a floor (L1, L2, L3) to leave the lift car (10) on the floor (L1, L2, L3).
15. The method according to claim 14, also comprising the activation of a drive unit (14) by the lift control system (12) if no command to unlock the lift door is received, in order to move the lift car (10) to a departure floor, wherein activation takes place after a specified period of time or upon receipt of a control command.
16. The method according to one of claims 7 - 15, further comprising the displaying of information relating to the interior of the lift car (10) on the video monitor (4), wherein the video monitor (4) is arranged on a floor (L1, L2, L3) or is integrated in a mobile electronic device.

Images