JP7207816B2 - Control system, control device and control method - Google Patents

Description

TECHNICAL FIELD Embodiments of the present invention relate to control systems, control devices, and control methods.

Efforts such as MaaS (Mobility as a Service), which allows access to each infrastructure system such as trains, taxis, and shared cycles from a terminal with a single application, and enables the use of each mobility service collectively with a single application. is underway. Elevators are also considered to be one form of mobility, so it is thought that their use by MaaS will increase in the future.
As an elevator control technology, the operator information including the position information and status information is acquired from the operator, and based on the operator information, each operator is given the authority to preferentially remotely operate the elevator, and the priority operator A technology of a control device that controls an elevator according to an elevator control signal transmitted from a is disclosed (for example, Patent Document 1).

A call registration system technology has been disclosed as another elevator control technology. In this technology, the server displays an input screen on the mobile terminal and gives the mobile terminal authority information for the identification information. The mobile terminal to which the authority information is assigned selects one of a plurality of permitted floors, and depending on whether the information of the selected permitted floor is held in the holding means, the call registration for the normally used floor is performed by the group of elevators. A request is made to the management device (for example, Patent Literature 2).

Japanese Patent No. 6552755 WO2019/207715

However, with conventional technology, when an application made by another company uses the infrastructure system of each mobility etc. due to the integration of services, if there is a problem with the application, the infrastructure system may receive unintended input and malfunction. be.

A control system according to an embodiment includes an issuing unit that issues first information that is information obtained by masking a control item to be controlled, a delivery unit that delivers the first information, and a control command when a control command is input. a determination unit for determining whether or not the control command has the authority from the first information distributed to the terminal that performed the control; a control unit that performs the above; an acquisition unit that acquires the first information distributed from the distribution unit; a reception unit that receives an operation of a control command; the control command received by the reception unit; and a transmission unit configured to transmit the first information acquired by the acquisition unit.

Drawing 1 is a figure showing an example of composition of a control system concerning an embodiment. FIG. 2 is a diagram illustrating an example of a hardware configuration of a host device according to the embodiment; FIG. 3 is a diagram illustrating an example of a configuration of functional blocks of a host device according to the embodiment; FIG. 4 is an explanatory diagram of mask information according to the embodiment. FIG. 5 is a sequence diagram illustrating an example of the operation of the control system according to the embodiment; FIG. 6 is a flow chart showing an example of the operation of the host device according to the embodiment. FIG. 7 is a diagram illustrating an example of functions of an application according to the embodiment; 8 is a flowchart illustrating an example of the operation of the application of the mobile terminal according to the embodiment; FIG. FIG. 9 is a diagram illustrating an example of an operation screen of the mobile terminal according to the embodiment; FIG. 10 is a diagram illustrating an example of condition information according to the embodiment; FIG. 11 is a diagram illustrating an example of a configuration of a control system according to a modification of the embodiment;

A control system, a control device, and a control method according to embodiments will be described in detail below with reference to the drawings. Components in this embodiment include those that can be easily replaced by those skilled in the art, or those that are substantially the same, and the present invention is not limited by the following embodiments.

Drawing 1 is a figure showing an example of composition of a control system concerning an embodiment. FIG. 1 shows a configuration in which the mobile terminal 10 accesses the elevator infrastructure system 1 via the cloud 40 as an example. The PC 30 is provided as an information processing terminal for an administrator who has full authority of the elevator infrastructure system 1 .

Cloud 40 is a cloud computer network including one or more server devices 41 that provide mobility services. The mobile terminal 10, the PC 30, etc. access the server device 41 of the cloud 40 via various networks N such as a public network, a LAN (Local Area Network), a VPN (Virtual Private Network), or the Internet to operate the elevator infrastructure system 1. use the services of Note that the cloud 40 may include a configuration for accessing infrastructure systems such as trains, taxis, and share cycles. Also, services other than mobility may be provided. In this embodiment, a detailed description will be given of a form of access to the elevator infrastructure system 1 as one of the mobility services.

The mobile terminal 10 is an information processing terminal carried by a user. A smart phone, a tablet terminal, or the like can be used as the information processing terminal. The mobile terminal 10 includes an elevator control application (hereinafter simply referred to as an application) AP and a wireless communication function for acquiring authority information. The application AP may be pre-installed, or may be downloaded from a designated site and installed. Also, the elevator control function of this application AP may be provided by being incorporated in an integrated application such as Maas (Mobility as a Service) that integrates each mobility service such as train, taxi, and share cycle. Alternatively, the integrated application may be made by another company.

In the elevator infrastructure system 1, elevators are controlled. The elevator infrastructure system 1 includes a control panel 21 that controls the operation of the elevator, a car 22 that is a transportation section, a host device 20, and the like. Among them, the host device 20 and the control panel 21 correspond to the "control device" of the elevator infrastructure system. In addition to this, the car 22 and their drive units may also be included in the "control device". Also, the control panel 21 corresponds to the "control section".

Although FIG. 1 shows a configuration in which one host device 20 and one control panel 21 communicate to facilitate understanding of the explanation, the configuration is not limited to this. A configuration in which one host device 20 and a plurality of control panels 21 communicate with each other may be employed. Further, the communication between the host device 20 and the control panel 21 may be performed by a wired connection or by a wireless system such as WiFi. Also, the host device 20 is not limited to one. It may be appropriately provided for each control panel. Moreover, although the control board 21 has shown the structure which controls the two cars 22, it is not restricted to this. The configuration may be such that the control panel 21 controls one or three or more cars 22 . For example, when a plurality of cars 22 are arranged at one place in a large-scale facility, one control panel 21 controls each of the plurality of cars 22 .

The host device 20 is a management device that manages input of control commands to the elevator infrastructure system 1 . A host device 20 is communicably connected to an elevator control panel 21 . The host device 20 inspects the input control command and outputs it to the control panel 21 . Specifically, the host device 20 issues the mask information D and distributes the mask information D to the mobile terminal 10 in a predetermined area via a wireless communication device or the like. Then, the host device 20 inspects the control command input from the mobile terminal 10 or the like to the elevator infrastructure system 1 via the cloud 40 using the mask information D input in pairs with the control command, and then sends the control command to the control panel 21. Output.

The control panel 21 distributes the mask information D issued by the host device 20 to the surroundings of the wireless communication device using a predetermined wireless communication device according to an instruction from the host device 20 . A short-range wireless communication device such as Bluetooth (registered trademark) may be used as the wireless communication device. Hereinafter, the short-range wireless communication device will be described as a Bluetooth transmitter that communicates in the Bluetooth system, and the communication function of the mobile terminal 10 will be described as a function that performs Bluetooth communication. For example, assume that the Bluetooth transmitter 23 is installed in an elevator hall. In that case, the control panel 21 transmits the mask information D to the Bluetooth transmitter 23 in the elevator hall, and distributes the mask information D from the Bluetooth transmitter 23 to the vicinity of the elevator hall. The mask information D is information that restricts items (control items) that can be operated from the application AP of the mobile terminal 10 by passengers using the elevator. The mask information D can also include the date and time of issue. The mask information D distributed when the mobile terminal 10 of the application user is within the communication area (elevator hall in this example) with the Bluetooth transmitter 23 is registered in the memory.

Note that different mask information D is issued and distributed according to the target. For example, first mask information is distributed to passengers without conditions, and second mask information that imposes restrictions different from the first mask information is also distributed when the passengers meet predetermined conditions. Objects are detected based on whether a passenger satisfies a predetermined condition.

As an example, the control panel 21 uses image processing to determine whether an object is a passenger who satisfies a predetermined condition from an image acquired from a camera 24 installed in an elevator hall. distributes the second mask information to . Specifically, when a passenger in a wheelchair is detected from the image acquired from the camera 24 installed in the elevator hall, the second mask information for the passenger in the wheelchair is distributed. Control items such as "handicap call" are given as authority to the second mask information for wheelchair passengers. In the case of a passenger in a wheelchair, since the first mask information can also be received, the authority of each control item in the first mask information and the second mask information, for example, "call registration" in the first mask information and "call registration" in the second mask information A "handicap call" will be given.

In addition, the mask information D to be distributed may be changed according to the installation position of the Bluetooth transmitter 23 . For example, the Bluetooth transmitter 23 in the elevator hall delivers the first mask information, and the Bluetooth transmitter 23 provided in the car 22 for a specific use among the plurality of cars 22 delivers the second mask information. You can change the design.

Further, when a control command is input, the control panel 21 controls the elevator based on the control command. Control commands include not only inputs from the host device 20 but also control commands input by operating operation buttons installed in the elevator. For example, when a control command for "call registration" is input from the host device 20 or an operation button installed in an elevator, the control panel 21 drives the elevator to move the car 22 to the designated floor for loading people and goods. and control to move. Priority may be given, such as prioritizing the control command from the operation button installed in the elevator.

FIG. 2 is a diagram showing an example of the hardware configuration of the host device 20. As shown in FIG. The host device 20 shown in FIG. 2 includes a CPU (Central Processing Unit) 201, a ROM (Read Only Memory) 202 that stores fixed programs, a RAM (Random Access Memory) 203 that is used as a work area, and programs and data. It has a storage 204 such as an HDD (Hard Disk Drive) or SSD (Solid State Drive), a communication interface 205 and a transmission unit 206 . Each unit is connected via a bus 207 .

The CPU 201 performs various functions by reading programs stored in the storage 204 or the like to the RAM 203 and executing the programs. The storage 204 stores programs as well as a database DB that manages various types of information (data D1 indicating control items, condition information M, etc.) related to issuance of mask information D. FIG. A communication interface 205 is an interface for communicating with the outside via the network N. FIG. The transmission unit 206 is a communication interface that communicates with the control panel 21 and transmits control commands and mask information D to the control panel 21 .

FIG. 3 is a diagram showing an example of the functional block configuration of the host device 20. As shown in FIG. The host device 20 functions as an issuing unit 210 , a determining unit 211 and a control commanding unit 220 . The control command unit 220 corresponds to a "distribution unit" together with the control panel 21 and the like. In addition to these, a conventional authentication unit or the like that gives full authority to the administrator of the PC 30 may be included. When receiving an authority request from the PC 30 , the host device 20 authenticates the administrator and grants all the authority of the elevator infrastructure system 1 . Each of these functional units is implemented, for example, by the CPU executing a corresponding program such as a storage. Some or all of these functional units may be realized by hardware circuits such as ASIC (Application Specific Integrated Circuit) or FPGA (Field-Programmable Gate Array).

The issuing unit 210 issues information (first information) in which control items for restricting operations are masked according to distribution targets. The first information may be issued with an expiration date. The expiration date can be appropriately set, for example, one minute from the time of issuance, or several minutes.

Then, the issuing unit 210 encrypts the mask information D including the issued first information and the information indicating the expiration date, and instructs the distribution target to distribute the mask information D. FIG. For example, the range of control items to be masked differs between the first mask information and the second mask information. Therefore, the issuing unit 210 selectively instructs the control command unit 220 to distribute the first mask information or the second mask information according to the distribution target. The control panel 21 distributes the mask information D instructed to be distributed by the Bluetooth transmitter 23 to be distributed.

The determination unit 211 determines whether or not the control command input from the mobile terminal 10 or the like to the elevator infrastructure system 1 via the cloud 40 is a control command input due to a defect or the like, based on the mask information D input in pairs with the control command. decision based on For example, if an erroneous control command is input due to a malfunction of another company's application AP, this determination is made so that the control command can be invalidated. The determination unit 211 decodes the mask information (encrypted information) D into the original information to determine whether the item of the input control command corresponds to the item that is not masked in the first information of the mask information D. do. Then, if the item of the input control command corresponds to the item that is not masked, the determination unit 211 further determines whether the mask information D is within the expiration date. Whether or not the mask information D is within the expiration date is determined from information indicating the date and time of issue or the expiration date obtained by combining the mask information D with the original information. If the item of the input control command corresponds to an item that is not masked and is within the expiration date, the determination unit 211 determines that the control command is valid, and instructs the control command unit 220 to perform control according to the control command. do. In other cases, the input control command is invalidated.

FIG. 4 is an explanatory diagram of the mask information D. FIG. Here, the first information corresponds to masking data for masking a control item that restricts operation among the plurality of elevator control items. Masking data may be generated using information indicating the date and time of issuance or expiration date. The masking data is encrypted by the issuing unit 210, distributed to the mobile terminal 10, and input from the mobile terminal 10 to the elevator infrastructure system 1 together with the control command. After input, the masking data is decrypted with the private key for determination by determination unit 211 .

FIG. 4 shows the correspondence between data D1 indicating control items, masking data D2, and input control command D3. When the control command D3 operated by the mobile terminal 10 is normally input to the elevator infrastructure system 1, the masking data D2 is decoded, as schematically shown in FIG. The input control command D3 is compared with the compounded masking data D2, and the input control command is the control command corresponding to the controllable item D21 of the masking data D2 (that is, the control command of data D1). is a valid control command. On the other hand, if there is an unintended input to the elevator infrastructure system 1 due to a malfunction of the application AP, etc., the masking data D2 may not be decoded normally, or even if it is decoded normally, the control command will correspond to the controllable item D21. I don't. In that case, the input control command is invalidated. Note that if the masking data is not valid data, even if it is a valid control command, it is invalidated.

FIG. 5 is a sequence diagram showing an example of the operation of the control system according to this embodiment. First, the issuing unit 210 of the host device 20 issues the mask information D (S1), and instructs the control panel 21 to distribute the mask information D through the control command unit 220 (S2). The timing at which the issuing unit 210 issues the mask information D may be set as appropriate. For example, it is issued when the validity period of the already issued mask information D expires or when an instruction to change the mask information D is given. It may also be issued periodically, or issued when an issuance request is received from an external input.

The control board 21 instructs the specified Bluetooth transmitter 23 to distribute the mask information D according to the instruction from the control command unit 220 (S3).

When the mask information D is delivered from the Bluetooth transmitter 23 (S4), the mask information D is sent to the application AP of the mobile terminal 10 of the user in the surrounding area at that time via the Bluetooth communication function of the mobile terminal 10. It is notified (S5). The distribution of the mask information D from the Bluetooth transmitter 23 may be performed at an appropriately set timing. For example, after the mask information D is issued, it may be distributed at any time, or may be distributed at regular time intervals. It may be delivered when a person is detected by a human sensor or the like.

The application AP of the mobile terminal 10 registers the distributed mask information D in the memory (S6). Note that the mask information D registered by the application AP is not limited to one type. For example, the same mobile terminal 10 may receive different mask information D from another Bluetooth transmitter 23 and the application AP may acquire different mask information D. FIG. In that case, the application AP of the mobile terminal 10 can register the obtained mask information D in the memory at any time and have a plurality of pieces of mask information D. FIG. Further, when the application AP detects that the mobile terminal 10 is away from the acquisition position of the mask information D by a certain distance by using the GPS (Global Positioning System) function of the mobile terminal 10, the mask information D may be deleted from memory. Further, when the application AP detects that the mask information D distributed from the same Bluetooth transmitter 23 is already registered in the memory, the application AP may update the mask information D to the latest acquired information. For example, the mask information D acquired in the past may have expired. Also, it is conceivable that the control items of the mask information D have been updated. In such a case, the old mask information D can be discarded by updating to the latest information. The mask information D can be registered at any time or updated to the latest information, and the application AP can issue a control command to the elevator infrastructure system 1 with the latest settings.

When the elevator is operated, the application AP of the mobile terminal 10 displays controllable items on the display of the mobile terminal 10, and receives control command operations for the controllable items (S7). Controllable items are set and displayed on a predetermined operation screen based on the identification information of the mask information D registered in the memory by the application AP. When a plurality of pieces of mask information D are registered in the memory, controllable items for each of the plurality of pieces of mask information D are displayed, and a control instruction operation for a controllable item is selectively received among them. The user appropriately operates the controllable items displayed on the operation screen to issue a control command to the mobile terminal 10 . For example, when the mobile terminal 10 acquires the first mask information in the elevator hall, when the user activates the operation screen of the mobile terminal 10 in the elevator hall, an operation button for "call registration" is displayed as a controllable item. be. When the user operates the "call registration" operation button, the "call registration" control command is accepted. Note that the application AP of the mobile terminal 10 receives the distribution of the controllable item information (second information) corresponding to the mask information D together with the distribution of the mask information D, and executes the control of the mobile terminal 10 based on the received second information. The controllable items may be displayed on the display.

When the application AP of the mobile terminal 10 instructs the control command by operating the operation screen, it transmits the control command and the mask information D to the elevator infrastructure system 1 via the cloud 40 (S8).

When a control command is input to the elevator infrastructure system 1, the determination unit 211 checks the control command (S9). That is, the determination unit 211 decodes one or a plurality of pieces of mask information D transmitted from the mobile terminal 10, and the input control command is the control item whose control is permitted in the decoded first information. Determine if it is a control command. Furthermore, the determination unit 211 determines whether the mask information D is within the expiration date.

In the case of a permitted control command within the valid period, the determination unit 211 instructs the control command unit 220 to output the control command, thereby outputting the control command to the control panel 21 (S10).

As a result, the control panel 21 drives the car 22 based on the designated control command to move it to an elevator hall or the like (S50).

FIG. 6 is a flowchart showing an example of the operation of host device 20. As shown in FIG. First, the host device 20 issues the mask information D and instructs the control board 21 to distribute the mask information D via the control command unit 220 (S11).

After that, when the control command is input (S12), the host device 20 checks the control command (S13). That is, the host device 20 decodes one or a plurality of pieces of mask information D transmitted from the mobile terminal 10 in correspondence with the control command, and the input control command indicates that control is permitted in the decoded first information. Determines whether the control command is for a control item that is set. Further, it is determined whether the mask information D is within the expiration date.

If the mask information D is within the expiration date and the control command is permitted by the mask information D (S13: Yes), the host device 20 outputs the control command to the control panel 21 (S14). On the other hand, if the host device 20 cannot confirm that the control command is a permitted control command (S13: No), it invalidates the input control command (S15).

FIG. 7 is a diagram illustrating an example of functions of the application AP. The application AP has an acquisition unit 101 , a reception unit 102 and a transmission unit 103 . For example, these functions are realized when the CPU of the mobile terminal 10 executes an application. The acquisition unit 101 acquires the distributed mask information D. FIG. Specifically, the acquisition unit 101 receives the distributed mask information D and registers it in the memory.

The accepting unit 102 accepts an operation of a control command. Specifically, the receiving unit 102 displays an operation screen on the display of the mobile terminal 10 and receives an operation of a control command for controllable items of the mask information D registered in the memory. The transmission unit 103 transmits the control command and the mask information D to the elevator infrastructure system 1 via the cloud 40 .

FIG. 8 is a flow diagram showing an example of the operation of the application AP of the mobile terminal 10. As shown in FIG. First, when the mask information D is distributed, the mobile terminal 10 (application AP) receives the distributed mask information D (S21) and registers the mask information D in the memory (S22). The mobile terminal 10 (application AP) also registers mask information D distributed from other different Bluetooth transmitters 23 in the memory at any time, and has a plurality of pieces of mask information D. FIG. Note that the mobile terminal 10 (application AP) deletes the mask information D from the memory when it detects that the mobile terminal 10 is away from the acquisition position of the mask information D by the GPS function of the mobile terminal 10. You may do so. Moreover, when the mask information D distributed from the same Bluetooth transmitter 23 is already registered in the memory, the mask information D may be updated to the latest information.

Subsequently, the mobile terminal 10 (application AP) displays an operation screen on the display of the mobile terminal 10 based on the user's screen activation operation (S23). The mobile terminal 10 (application AP) sets the controllable items of the mask information D registered in the memory so as to be operable on the operation screen, and receives the operation of the control command for the controllable items.

Then, when the portable terminal 10 (application AP) receives an instruction to control a controllable item by the user's operation of the controllable item on the operation screen (S24), the received control instruction and the received instruction are registered in the memory. and the mask information D stored therein are transmitted to the elevator infrastructure system 1 via the cloud 40 (S25).

FIG. 9 is a diagram showing an example of an operation screen of the mobile terminal 10. As shown in FIG. FIG. 9 shows an example in which the operation screen 11 is provided with operation buttons 12a and 12b for controllable items. By touching the screen or pressing the operation buttons 12a and 12b, a control command is accepted for the controllable items set to the operation buttons 12a and 12b. For example, when the controllable item is "call registration" like the operation button 12a, the control command is a control command for instructing execution of "call registration". The screen is closed with the close button 13 .

Here, the operation buttons 12a and 12b for two items are shown as an example, but the operation buttons for the controllable items may be appropriately set according to the type of the mask information D or the like.

FIG. 10 is a diagram showing an example of condition information M. As shown in FIG. FIG. 10 shows a list of condition information M indicating distribution timings (or conditions) of the mask information D and controllable items, which differ depending on the target. For example, the mask information (equivalent to the first mask information) targeting passengers is distributed in the elevator hall upon arrival, and the permitted authority (controllable item) is conditional information for "call registration". stipulated.

In addition, the mask information (equivalent to the second mask information) targeting the wheelchair is distributed in the elevator hall when the wheelchair is detected by the installed camera 24 in the elevator hall. It stipulates the condition information as "handicap call". Based on these lists, the host device 20 or the control panel 21 controls the Bluetooth transmitter 23 that distributes the mask information D and the distribution timing.

As described above, in the present embodiment, the mask information D is distributed to the application AP of the mobile terminal 10 in advance, and when the user operates the elevator with the application AP, the control command according to the operation is the mask distributed in advance. It is input to the elevator infrastructure system 1 via the cloud 40 together with the information D. The input control command is inspected by the host device 20 according to the mask information D, and then instructed to the control panel of the elevator. For this reason, for example, when an elevator infrastructure system is used from another company's application AP, even if there is a problem with the application AP and the elevator infrastructure system receives an unintended input, the host device 20 checks that Since the control command is rejected as invalid, malfunction of the elevator can be suppressed. In addition, by including the expiration date in the mask information D, it is possible to prevent tampering by illegally extending the expiration date.

(Modification)
In the embodiment, a configuration example in which the mask information D is distributed from a short-range wireless communication device (a Bluetooth transmitter as an example) provided in the elevator infrastructure system 1 is shown, but the mask information D may be distributed by other infrastructure systems. . For example, it may be delivered in cooperation with a security system that guards the inside of a building or the like. In a security system, for example, an automatic ticket gate is provided at the entrance of a building, and security robots are made to patrol the building to remotely monitor the entry of outsiders into the building. Therefore, the mask information D can be obtained from the automatic ticket gate of the security system, or the mask information D can be obtained from the robot controller of the security robot.

FIG. 11 is a diagram illustrating an example of a configuration of a control system according to a modification; 11 further includes a robot control device 60 and an automatic ticket gate 70 in addition to the configuration shown in FIG. The robot controller 60 and automatic ticket gate 70 are part of the security system.

The automatic ticket gate 70 is provided at the entrance of a building or the like. When a user passes through the mobile terminal 10 while carrying it, the automatic ticket gate 70 notifies the application AP of the mobile terminal 10 of the mask information D, and the mobile terminal 10 receives the mask information D. The mask information D can be obtained with 10 applications AP.

The mask information D acquired from the automatic ticket gate 70 is transmitted by the host device 20 via the cloud 40, so that the automatic ticket gate 70 receives the mask information D and stores it in the memory. When the host device 20 issues the mask information D for the automatic ticket gate 70, it transmits the mask information D via the cloud 40 each time it is issued, and updates the mask information D stored in the memory of the automatic ticket gate 70. do.

When the user passes through the automatic ticket gate 70, the user ID of the mobile terminal 10 is read by the non-contact reader. device) notifies the application AP of the mobile terminal 10 of the mask information D. In this case, the user waits for the elevator (car) when the user arrives at the elevator hall by operating the application AP of the mobile terminal 10 to perform elevator call registration after passing through the automatic ticket gate 70, for example. You can get in without

The robot control device 60 is a control device that remotely controls an autonomous security robot 65 . The security robot 65 is equipped with an information processing device, and patrols the building on wheels while detecting the surroundings with various sensors such as a camera. The information processing device includes, for example, a network communication unit, a wireless communication unit, a display unit, an input/output unit for sensors, and the like.

The security robot 65 uses an elevator to move to each floor like a person. For example, when the security robot 65 finishes patrolling the elevator hall, it calls the elevator to the elevator floor, gets into the elevator car when it arrives, and gets off the car at the designated floor.

The security robot 65 has an application AP installed in the information processing device, and operations such as "call registration", "non-stop cancellation", and "floor designation" are performed by the security robot 65 via the cloud 40 using the application AP. This is done by transmitting a control command to the elevator infrastructure system 1 through the

The app AP of the security robot 65 has substantially the same main functions as the app AP of the mobile terminal 10 . That is, the application AP of the security robot 65 also acquires the mask information D, registers it in its own memory, and transmits a control command to the elevator infrastructure system 1 based on the mask information D registered in the memory.

The display of the operation screen may be transmitted from the security robot 65 to the robot control device 60 and displayed on the monitor of the robot control device. In this case, the security robot 65 receives a control command from the security guard from the robot control device 60 and transmits it to the elevator infrastructure system 1 . Further, when the security robot 65 autonomously operates the controllable items, the display of the operation screen may be omitted. The operation of the controllable items by the security robot 65 is appropriately determined by the security robot 65 based on, for example, preset movement conditions.

The robot control device 60 is, for example, an information processing device, and includes a network communication section, a wireless communication section, a display section, an input section, and the like. The robot control device 60 requests the host device 20 to issue the mask information D via the cloud 40 using the network communication unit. When receiving an issue request, the host device 20 transmits the issued mask information D to the robot control device 60 that is the source of the request.

Further, the robot control device 60 transmits the mask information D to the security robot 65 through the wireless communication unit, and the application AP of the security robot 65 registers the mask information D in the memory.

The distribution of the third mask information that gives the control authority specific to the security robot 65, such as "non-stop release" and "floor designation", is based on the condition information M (see FIG. 10). In other words, when the security robot 65 gets on the car 22 and the camera 24 inside the car 22 confirms that no other passengers are riding together, the message is delivered from the Bluetooth transmitter 23 inside the car 22 . As a result, the security robot 65 transmits a control command to the elevator infrastructure system 1 via the cloud 40 in accordance with the controllable items of the third mask information acquired in the car 22 to cancel the non-stop floor. The host device 20 receives this control command and instructs the control panel 21 to cancel the non-stop floor. Therefore, the security robot 65 can get off at non-stop floors and patrol.

In addition, in the modified example, the configuration in the case of cooperating with the security system has been described. As an example of this configuration, the configuration in which the mask information D is distributed from the automatic ticket gate 70 is exemplified. However, the cooperation with the security system is an example, and it may be configured to cooperate with other systems. For example, it is configured to cooperate with a railway system. In this case, the function provided in the automatic ticket gate 70 is applied to the automatic ticket gate of the station, and when the user passes through the automatic ticket gate, the mask information D is distributed from the short-range wireless communication device provided in the automatic ticket gate. and may be used by the application AP of the mobile terminal 10 .

Although the embodiment of the present invention has been described above, this embodiment is presented as an example and is not intended to limit the scope of the invention. This embodiment can be implemented in various other forms, and various omissions, replacements, and modifications can be made without departing from the scope of the invention. This embodiment and its modifications are included in the scope and gist of the invention, as well as the scope of the invention described in the claims and its equivalents.

DESCRIPTION OF SYMBOLS 1... Elevator infrastructure system, 10... Portable terminal, 20... Upper device, 21... Control panel, 22... Car, 23... Bluetooth transmitter, 24... Camera, 30... PC, 40... Cloud, 41... Server device, 101... Acquisition unit 102 Reception unit 103 Transmission unit 210 Issuance unit 211 Judgment unit 220 Control command unit AP Application D Mask information N Network.

Claims (11)

an issuing unit that issues first information that is information obtained by masking a control item to be controlled ;
a distribution unit that distributes the first information;
a determination unit that determines, when a control command is input, whether the control command is authorized from the first information distributed to the terminal that issued the control command;
a control unit that performs control corresponding to the control command on the controlled object when the control command is authorized;
a controller having
an acquisition unit that acquires the first information distributed from the distribution unit;
a receiving unit that receives an operation of a control command;
a transmitting unit configured to transmit the control command received by the receiving unit and the first information obtained by the obtaining unit;
the terminal having
control system including. The distribution unit distributes the encrypted first information,
When the control command is input, the determination unit decrypts the encrypted first information distributed to the terminal with a private key and determines whether the control command is authorized.
A control system according to claim 1 . the first information includes masking data that masks a control item that restricts an operation from the terminal from among the plurality of control items to be controlled;
The distribution unit distributes at least the encrypted masking data as the first information.
3. Control system according to claim 1 or 2. The terminal is a user's mobile terminal,
The control device distributes the first information to the mobile terminal via a wireless transmitter in a predetermined area.
Control system according to any one of claims 1-3. the terminal acquires a plurality of types of the first information having different ranges of control items for restricting operations from the terminal;
When the control command is input, the determination unit determines whether the control command is authorized from the plurality of types of first information distributed to the terminal that issued the control command.
Control system according to any one of claims 1-4. The plurality of types of first information is issued for each target that controls the controlled target,
The delivery unit delivers the first information according to the target by detecting the target.
A control system according to claim 5 . The issuing unit issues the first information of the controlled object when there is an issue request, and transmits the first information to the requesting terminal.
Control system according to any one of claims 1-6. The first information has an expiration date.
Control system according to any one of claims 1-7. the terminal transmits the control command and the first information to a cloud system different from the infrastructure system to be controlled;
The infrastructure system to be controlled receives an input of the control command from the cloud system,
Control system according to any one of claims 1-8. an issuing unit that issues first information that is information obtained by masking a control item to be controlled ;
a distribution unit that distributes the first information;
a determination unit that determines, when a control command is input, whether the control command is authorized from the first information distributed to the terminal that issued the control command;
a control unit that performs control corresponding to the control command on the controlled object when the control command is authorized;
A control device having A control method for controlling a control device from a terminal,
The control device issues first information that is information obtained by masking a control item to be controlled,
The control device delivers the first information,
The terminal obtains the distributed first information,
The terminal accepts the operation of the control command,
the terminal transmits the received control command and the acquired first information;
When the control command is input, the control device determines whether the control command is authorized from the first information distributed to the terminal that issued the control command,
When the control command is authorized, the control device performs control corresponding to the control command on the controlled object;
control method.

Images