HK40084426B - Building system with elevator call entry via offline qr code credential - Google Patents

Description

Building systems that use offline QR code credentials for elevator call input

Technical Field

This disclosure, with its various embodiments, generally relates to building systems having elevator systems and their operation. More specifically, the various embodiments described herein relate to building systems that provide improved passenger comfort and confidence when using elevators, and methods for controlling the operation of such building systems.

Background Technology

Multi-story residential and commercial buildings typically have elevator systems for transporting users (e.g., tenants and visitors) from entry floors to destination floors. Elevator systems and the elevator control technologies implemented therein are generally known. Some of these buildings may also have physical building control systems to allow only authorized users access to the building and/or areas within the building. When a user presents some form of credentials (e.g., a key, optical code (e.g., barcode, QR code), RFID badge, or biometrics), the physical building control system releases or unlocks physical barriers (e.g., doors, gates, or revolving doors) to grant access to the authorized user. US 9,077,716 describes a building control system in which a mobile electronic device communicates with an electronic door lock via a Bluetooth or WLAN radio link and with a web server via a WAN (wide area network) radio link to open the electronic lock. For example, one of these building control systems may be configured to automatically enter an authorized user's elevator call based on a default destination stored in a user profile.

In addition to providing transportation and physical access control, building owners and/or building operators (building managers) also provide a safe and clean environment within the building. Of particular concern is the fact that users must touch control panels and buttons to request building services, such as elevator access. Users may worry that these panels and buttons could transmit bacteria and/or viruses to healthy users. To address this issue, building managers can enhance their cleaning and disinfection efforts.

This effort and process can increase user confidence when seeking building services. However, some of the aforementioned credential-based systems are quite complex, and cleaning and disinfection procedures may still not provide sufficient comfort for users. Therefore, a technology is needed that at least overcomes some of these problems.

Summary of the Invention

One aspect of this technology relates to a building system with an elevator system. The building system includes: a controller system configured to control the elevator system to move elevator cars between floors of the building; and a registration computer system communicatively coupled to the controller system. The registration computer system is configured to: generate an activation code for a user requesting elevator service; store data associated with the activation code; and make at least one system component of the registration computer system accessible to the user in a public area of the building. The activation code encodes user information including at least one of a user identifier, an encryption key, and the user's access permissions within the building, and is configured to: activate a software application installed on and executable by a mobile communication device when provided to a user located near at least one system component. The activated software application is configured to generate a graphical user interface on the display of the mobile communication device, wherein the content displayed in the graphical user interface is predetermined solely by the encoded user information of the activation code. Furthermore, the software application is configured to: generate an optical credential when the user specifies elevator service, wherein the optical credential includes user information. The building system also includes a credential acquisition unit communicatively coupled to the controller system and configured to acquire an optical credential from a mobile communication device presented by the user to the credential acquisition unit. The controller system is configured to, upon determining that the optical credential is valid, cause the elevator system to perform the specified elevator service.

On the other hand, a method for operating a building system with an elevator system is involved. The building system includes a controller system configured to control the elevator system, a registration computer system communicatively coupled to the controller system, and a credential acquisition unit communicatively coupled to the controller system. According to this method, the registration computer system generates an activation code based on information contained in a user profile stored for the user. The activation code encodes user information including at least one of a user identifier, an encryption key, and the user's access permissions within the building. The registration computer system issues the activation code to the user's mobile communication device. The obtained activation code activates a software application installed on and executable by the mobile communication device. The activated software application generates a graphical user interface on the display of the mobile communication device, wherein the content displayed in the graphical user interface is predetermined solely by the encoded user information of the activation code. The software application further generates and displays an optical credential when the user specifies an elevator service, wherein the optical credential includes user information. According to this method, the credential acquisition unit obtains the optical credential from the mobile communication device presented by the user, and the controller system controls the elevator system to execute the specified elevator service when the optical credential is determined to be valid.

The technology described herein allows users to request elevator service without touching elevator buttons or control panels. For example, users can enter an elevator call using a mobile communication device they are familiar with. Any touch used to call an elevator is thus limited to touching the "personal" mobile communication device, contributing to the user's confidence when seeking elevator access. Furthermore, the mobile communication device can be operated via a graphical user interface; this facilitates the use of the technology described herein because users are generally accustomed to using such graphical user interfaces.

In some embodiments, optical codes and optical credentials are used. A registration computer system issues an activation code, and a credential acquisition unit retrieves the optical credential from a mobile communication device presented by the user. In one embodiment, the optical code and optical credential are displayed as a Quick Response (QR) code. Users are also accustomed to this type of optical code, so when they see it, they intuitively know what to do—that is, scan it with their mobile communication device or present it to an electronic reader. This facilitates the use of the techniques described herein.

Furthermore, the activation code generated by the registration computer system essentially includes all the information that allows the user to enter an elevator call to reach their desired destination within the building, particularly access permissions. Around the time the activation code is generated based on the user profile, the registration computer system generates an encryption key specifically for the user. The activation code transmits the encryption key to a mobile communication device, which then uses it to encode the optical credential. After the optical credential has been read by a credential acquisition device, the encryption key is used by the building system's controller system to verify the optical credential. This restricts the copying of the optical credential and its sharing with other users.

In the event of unauthorized decoding or decryption efforts (hacking) of activation codes and/or optical credentials, the techniques described herein provide further enhanced security for the entire building system. Because the encryption key is unique and specific to each user, obtaining the encryption key only affects the compromised activation code or optical credential, not other codes or credentials. The registration computer system generates a new and independent encryption key for each elevator service request.

Furthermore, the technology described in this paper provides an additional level of security for the building system. Approximately when the activation code is generated, its validity or expiration (i.e., the start and end dates/times of its validity) and access permissions are stored in a data storage device. When a user presents an optical credential including information about validity and access permissions, the controller system checks whether the information from the read optical credential matches the information stored in the data storage device. Elevator service is only performed in this case.

Furthermore, since the activation code essentially transmits all information to the mobile communication device, the device does not require a radio communication link to request elevator service. In response to receiving the activation code, the mobile communication device's graphical user interface displays predetermined content, including an optical credential, without requiring additional information from outside the device. In other words, the technology described herein provides offline use of a mobile communication device to request elevator service.

The techniques described herein are not limited to specific elevator control technologies. In one embodiment, a controller system is configured to control an elevator system according to a lift/descent control technique, wherein a first credential acquisition unit is arranged on a building floor to provide input for a floor call indicating a specified direction of travel and calling the elevator car to a building floor, and wherein a second credential acquisition unit is arranged in the elevator car to provide input for a car call indicating a specified destination floor. In another embodiment using a lift/descent control technique, direction buttons are arranged on a building floor to provide input for a floor call indicating a specified direction of travel and calling the elevator car to a building floor, and a credential acquisition unit is arranged in the elevator car to provide input for a car call indicating a specified destination floor. Alternatively, the controller system is configured to control an elevator system according to a destination call control technique, wherein a credential acquisition unit is arranged on a building floor to provide input for a floor call indicating a specified destination floor and calling the elevator car to a building floor.

Attached Figure Description

The various aspects of the improved technology are described in more detail below with reference to the accompanying drawings and exemplary embodiments. In the drawings, the same elements have the same reference numerals. In the drawings:

Figure 1 shows a schematic illustration of an exemplary scenario in a building with a building system;

Figure 2 is a schematic illustration of an exemplary embodiment of the input mask displayed by the registration computer system of the building system shown in Figure 1;

Figure 3 shows a flowchart of an exemplary embodiment of the method for operating the building system;

Figures 4A to 4D show a first embodiment of a graphical user interface for use with elevator control technology on a user's mobile communication device;

Figures 5A and 5B show a second embodiment of a graphical user interface for use with elevator control technology on a user's mobile communication device; and

Figures 6A and 6B show a third embodiment of a graphical user interface on a user's mobile communication device for use with destination call control technology.

Detailed Implementation

Figure 1 is a schematic illustration of an exemplary scenario in a building having a building system 1, which can be configured to operate according to at least one of several system implementation and control technologies. For illustrative purposes, these system implementation and control technologies are all shown in Figure 1. Those skilled in the art will understand that fewer than the system implementation and control technologies shown may be provided in the building, or only one of the shown system implementation and control technologies may be provided.

Building system 1 can be configured for a variety of different applications. For example, building system 1 may include an elevator system for performing elevator services (e.g., transporting user 2 from the boarding floor to the destination floor within a building). The elevator controller (ECS) controls the operation of the elevator system according to control technologies implemented in the elevator system. These control technologies are known to those skilled in the art; they are described herein only to the extent that they are considered helpful in understanding the technologies described herein.

Referring to the right side of Figure 1, the elevator system can be configured to operate using (conventional) lift/drop control technology. In that case, the elevator system has floor terminals 6a, 6b installed on building floors near elevator doors 7 and an elevator car 14a equipped with a car operation panel 10. The floor terminals 6a, 6b and the car operation panel 10 are communicatively coupled to the controller system 18. At the floor terminals 6a, 6b on the boarding floor, user 2 can input the direction of travel (lift/drop) to call elevator car 14a to the boarding floor; the lift/drop direction is depicted as a triangle in Figure 1, which can be set on a button or displayed on a touchscreen. At the car operation panel 10, user 2—after boarding elevator car 14a—can input the destination floor. The car operation panel 10 may have multiple individually numbered buttons or numbered fields on the touchscreen panel; as shown in Figure 1, floor labels on or next to these buttons or fields can specify the name (individual, legal entity) or service (reception, dentist, restaurant, gym) of the building floor.

Referring to the left side of Figure 1, the elevator system can be configured to operate based on destination call control technology. In that case, the elevator system has a floor terminal 8, which is installed on a building floor near the elevator door 7 or at the entrance 12 controlled by door 17 to the restricted access area 5. At the floor terminal 8 on the boarding floor, user 2 can enter the destination floor to call the elevator car 14b to the boarding floor. Similar to the car control panel 10, the floor terminal 8 may have multiple individually numbered buttons or numbered fields on a touch panel, which may also be equipped with floor labels. After such a destination call is entered, the elevator controller registers the information specifying the boarding floor and the destination floor. Inside the elevator car 14b, user 2 has not yet entered the destination floor, and such input of the destination floor is not typically provided on any in-car control panel.

In addition to the elevator system, building system 1 may also include a physical access control system configured to control whether user 2 is authorized to access restricted access area 5 and/or use elevator services. An access controller (ACS) controls the operation of the access control system. The elevator system and the physical access control system, or their respective functions, may be integrated into a single system. In Figure 1, and for illustrative purposes, the elevator controller and the access controller are shown as included in controller system 18 controlling building system 1, as indicated by arrow 26. However, depending on the building, the access controller is expected to be optional. If provided in the building, the access controller grants user 2 access to restricted access area 5 and/or elevator services, for example, upon the validity of credentials presented by user 2.

The restricted access area 5 may be an elevator lobby, where user 2 can travel to and from one or more elevator cars 14. In Figure 1, entrance 12 separates the unrestricted public area 3 from the restricted access area 5, where a door 17 (with or without physical barriers such as a door, revolving door, or cross revolving door) controls access to the restricted access area 5 at entrance 12. In one embodiment, door 17 and floor terminals 8 may be arranged close to each other or within a common structure or shell, as shown in Figure 1. In another embodiment, if the elevator lobby is unrestricted, door 17 may be omitted; the elevator lobby can then be considered the public area 3, where the interior of elevator cars 14 can be considered the restricted access area 5. It is contemplated that a building may have one or more public areas 3 and/or one or more restricted access areas 5, and any arrangement of these areas 3, 5 is building-specific. Hereinafter, embodiments of the present technology are described with emphasis on user 2 requesting elevator service in the building environment shown in Figure 1. However, those skilled in the art will recognize that the technology described herein is independent of a particular building environment.

In the embodiments described herein, user 2 presents credentials using a mobile communication device 20 carried by user 2, wherein the credentials are represented using optical codes (specifically, quick response (QR) codes). The mobile communication device 20 may be configured as a smartphone typically used for, for example, making phone calls, accessing the internet, taking photos, scanning barcodes or QR codes, and executing various other dedicated software applications (also referred to as "apps"). The software application may be a mobile application installed by user 2, for example, after downloading it from an app store (i.e., a digital distribution platform for computer software); the software application may also be an offline web application accessed via browser software. The mobile communication device 20 (smartphone) has a camera 19 and a display 21, which may be configured as a touchscreen allowing user 2 to interact with the mobile communication device 20. Once the application is executed by the mobile communication device 20, it controls the communication device 20 to generate a graphical user interface (also referred to as a "GUI") displayed on the display 21. The credentials and applications used in conjunction with the techniques described herein will be described in more detail below.

As described above, building system 1 can be configured to operate according to at least one of the mentioned system implementation and control technologies. Depending on the configuration of the building system, at least one credential acquisition device 9 can be installed on a building floor and/or in an elevator car 14a. For example, credential acquisition devices 9 can be provided in place of floor terminals 6a, 6b, 8 during the installation of building system 1, or credential acquisition devices 9 can be provided in addition to floor terminals 6a, 6b, 8, for example, during the installation of building system 1 or later in conjunction with the modernization of building system 1. For illustrative purposes, Figure 1 shows several credential acquisition devices 9 and floor terminals 6a, 6b, 8 that can be used independently of credential acquisition devices 9.

Referring again to the right side of Figure 1, each of the elevator cars 14a includes such a credential acquisition device 9. The acquisition device 9 may be integrated into the car control panel 10, or it may be a separate component, for example, located near the car control panel 10. In one embodiment, such an acquisition device 9 is also located on a floor, integrated into or located near a floor terminal 6a. Referring to the left side of Figure 1, the acquisition device 9 is integrated into or located near each of the floor terminals 8. Each acquisition device 9 is intended to be communicatively coupled to the controller system 18.

Each acquisition device 9 is configured to acquire an optical code displayed on a user's mobile communication device 20. The acquisition device 9 includes an optical sensor (e.g., a sensor array) and a processor for decoding the information contained in the optical code. In one embodiment, the optical code is a QR code, and the acquisition device 9 is configured to read the QR code; accordingly, the acquisition device 9 includes a QR code reader, such as a commercially available type MX86 or QT660 (Beijing Vguang Technology Co., Ltd.). In some embodiments, the acquisition device 9 includes a logic controller (e.g., UNO-2271G (Advantech Ltd.)) and an I/O controller (e.g., ADAM-6060 (Advantech Ltd.)), wherein the QR code reader is connected to the logic controller via a digital interface (e.g., a USB interface), and wherein the logic controller is connected to the I/O controller via an Ethernet connection. In one embodiment, if the acquisition device 9 is arranged in the elevator car 14a of a lift/lower control elevator system, the I/O controller may be connected to the car operation panel 10 or a bus connected to the controller system 18; the I/O controller outputs a signal indicating the destination floor selected by the user. Accordingly, if the I/O controller of the acquisition device 9 is used for the destination call control elevator system, it outputs signals indicating the boarding floor and the destination floor. It is anticipated that other implementations with or without I/O controllers or logic controllers, as well as components from other manufacturers, can be used. Furthermore, it is anticipated that QR code decoding can be performed by the acquisition device 9 and/or by the controller system 18.

In the embodiment of Figure 1, building system 1 includes a registration computer system 4. Registration computer system 4 includes a processing unit 28 (CPU), a user interface 32 (UI) (e.g., a computer monitor connected to a keyboard or touchscreen, which generates a GUI), and a communication interface 30 (COM). Communication interface 30 couples registration computer system 4 to a communication network 22 (NW), which communicatively couples registration computer system 4 to controller system 18 and data storage device 24 (data). Data storage device 24 can be any device configured to store digital data, such as a hard disk drive (HDD) or CD/DVD drive, a semiconductor drive/solid-state drive (SSD) or a combination thereof, or other digital data storage devices for digital data storage. In one embodiment, communication network 22 may include a wired communication bus (e.g., Ethernet); alternatively, wireless (radio frequency) technology, or a combination of wired and wireless technologies, may be used. Communication via a wired communication bus may follow LON, BACnet, or another serial bus protocol. Any other known technology for communication via a wired network may be used. Communication between connected entities (e.g., registering computer system 4, controller system 18, and data storage device 24) can use bus addresses. In one embodiment, a unique identifier (e.g., device code, MAC address, IP address) is assigned to each of these entities.

At least one system component of the registration computer system 4 (e.g., user interface 32) is located in the public area 3 so that it can be accessed by user 2. In one embodiment, at least the user interface 32 may be included in a housing to form a lobby terminal, which is configured to be mounted on the lobby floor or to the lobby wall. The lobby terminal may be configured as a self-service terminal allowing user 2 to register independently. In another embodiment, at least the user interface 32 may be located at the front desk where building personnel (receptionists, security personnel) register user 2.

User interface 32 includes, for example, a display device and is configured to display an input mask 34 having various fields 35 to 41. Figure 2 illustrates one embodiment of the input mask 34. During the registration process, these fields 35 to 41 are filled in based on the requested information provided by user 2 and/or the corresponding information generated by registration computer system 4. User 2's registration includes, for example, recording a user profile, which may include at least one of the following: user identifier (e.g., name and/or affiliation) (fields 35, 36), the floor that user 2 is authorized to access (access rights), the name or identifier of the floor (e.g., lobby, parking lot, restaurant, etc.) (fields 39, 40), the expiration time or date of the access rights (fields 37, 38), an encryption key, and a site or building identifier. In a particular embodiment, the user profile may store the user's travel or call history within the building. The user profile may be stored in registration computer system 4 and/or data storage device 24.

As described in more detail below, once user 2 is registered, registration computer system 4 generates an activation code and outputs it, for example, via user interface 32. In an embodiment described in more detail herein, the activation code is displayed on user interface 32 as an optical code (e.g., as a QR code) so that user 2 can scan it using mobile communication device 20, for example, using the camera 19 of mobile communication device 20 to scan the optical code. In another embodiment, the activation code can be sent to the user's mobile communication device 20 (e.g., user interface 32 using NFC or Bluetooth technology).

If the activation code is generated taking into account an expiration time or date, the activation code expires at the expiration time or date specified in fields 37 and 38. After expiration, the activation code can no longer be used. In one embodiment, any activation code stored in the user profile can be marked as invalid. Furthermore, the application on mobile communication device 20 is configured to prevent activation codes from being stored on mobile communication device 20 for possible future use after the set expiration time or date.

In the scenario shown in Figure 1, the techniques described herein can be advantageously used to operate building system 1 without requiring user 2 to touch public, potentially bacteria/virus-contaminated buttons or touchscreens, thus giving user 2 greater confidence in using one or more services provided by building system 1. Furthermore, the activation code used according to the techniques described herein essentially provides all the information required to use the service. The user's mobile communication device 20 does not need to be connected to the active radio communication of building system 1; that is, for using the service, the user's mobile communication device 20 is offline. In summary, by example, according to an exemplary embodiment of building system 1, registration computer system 4 generates and stores an activation code for user 2 requesting elevator service. The activation code (specifically, an activation code in the form of a QR code) encodes user information including at least one of a user identifier, an encryption key, and user 2's access permissions within the building (including any expiration date or time). User 2 uses mobile communication device 20 and an installed software application (APP) to scan the activation code. The application generates a graphical user interface 23 on the display 21 of the mobile communication device 20. The content displayed in the graphical user interface 23 is determined by the coded user information of the activation code; for example, only identifiers (e.g., floor names or floor numbers) of the floors that the user 2 is allowed to access are displayed. The displayed content also includes an optical credential (specifically, an optical credential in the form of a QR code). To request elevator service, the user 2 takes the mobile communication device 20 to the credential acquisition device 9 so that the optical credential can be scanned. In response to determining that the presented credential is valid, the building system 1 enables the elevator service to be performed according to one of the aforementioned control techniques.

While some embodiments of the techniques disclosed herein are described with reference to QR codes and devices configured to scan or read QR codes, it is contemplated that other types of optical codes may also be used, such as 2D codes (e.g., stacked 2D codes, DataMatrix codes, Aztec codes, or dot codes) or color codes as described in WO 2015/049186A1. Furthermore, it is contemplated that the software application of mobile communication device 20 can display static or dynamic optical credentials. To display dynamic optical credentials (e.g., dynamic QR codes), the software application generates new optical credentials at a set frequency (e.g., per minute). Such dynamic optical credentials can be used to restrict the copying of optical credentials and to share optical credentials with other users.

As described above, the activation code encodes an encryption key that serves as a unique key generated by the system; that is, the registration computer system 4 generates an encryption key specifically for user 2 and the immediate elevator service request approximately when generating the activation code for user 2. Once generated, this encryption key is stored in the registration computer system 4 or data storage device 24 along with the user profile. Therefore, the activation code provides the encryption key to be transmitted to the mobile communication device 20; thus, the activation code essentially instructs the mobile communication device 20 (or its application) how it must encode the optical credential. According to the techniques described herein, the mobile communication device 20 then encodes the optical credential using the encryption key. After the optical credential has been read by the credential acquisition device, the encryption key is used by the building system's controller system to verify the optical credential. A validly encrypted optical credential can only be generated by that specific mobile communication device 20. This also restricts the copying of the optical credential and its sharing with other users. Furthermore, in the event of a hacking attack on the activation code and/or the optical credential, the techniques described herein provide improved security for the entire building system 1. Since the encryption key is unique and specific to User 2 and the instant service request (specifically, because the registration computer system generates a new and independent encryption key for each elevator service request), obtaining the encryption key only affects the compromised activation code or optical credential, and does not affect other codes or credentials.

Having understood the basic system components and their functions described above with reference to Figures 1 and 2, an exemplary method for operating building system 1 is described below in conjunction with Figure 3. This description is made with reference to user 2 who wants to use an elevator in the building. The exemplary method shown begins at step S1 and ends at step S9.

In step S2, user 2 is detected. User 2 can be detected by the registration computer system 4 when user 2 at the self-service terminal or the receptionist at the front desk begins to interact with the registration computer system 4. The self-service terminal may be in an inactive or standby state, for example, and be activated by user 2. The interaction may include, for example, touching the user interface 32 and/or selecting touch-sensitive fields for new registrations or touch-sensitive fields for frequent users.

Proceed to step S3 to determine if a new registration has been requested. If a new registration has been requested, the process proceeds along the "Yes" branch to step S5. If user 2 is considered a regular user or a known user (i.e., user 2 who requested elevator service before the immediate request), then a new registration is not required, for example, because user 2 lives or works in the building or is a regular visitor. In this case, the process proceeds along the "No" branch to step S4.

In step S5, a new user profile is created for user 2. As illustrated above with reference to input mask 34 in Figure 2, during the registration process, fields 35 to 41 are filled in based on the requested information provided by user 2 and/or the corresponding information generated by the registration computer system 4. The user profile may include at least one of the following: user identification (e.g., name and/or affiliation, user ID) (fields 35, 36), the floor that user 2 is authorized to access (access rights), the name or identifier of the floor (e.g., lobby, parking lot, restaurant, etc.) (fields 39, 40), the expiration time or date of the access rights (fields 37, 38), the encryption key, and the site or building identifier.

For this frequent user 2, the user profile may already be stored in building system 1.

If user 2 is a frequent user, then in step S4, the user's existing (stored) user profile is retrieved. To retrieve a stored user profile, the user's name or user ID needs to be entered. Using this information, the registration computer system 4 can search for user profiles.

Proceed to step S6, reset any previously generated activation codes stored in the user profile; these activation codes are invalid and can be deleted from the user profile.

In step S7, following steps S5 and S6, an activation code is generated. The generation of the activation code is user-specific and based on information contained in the user profile. The content of the activation code is stored in the registration computer system 4 and/or data storage device 24. When the building system 1 and/or registration computer system 4 are configured, or at any other time, it can be specified which information from the user profile will be encoded in the activation code. Exemplary information to be encoded is shown in Figure 2. In one embodiment, processing unit 28 executes a software program that reads information from the user profile, uses that information to create a data string to be encoded, and encodes that information into a QR code. This software program is also referred to as a QR code generator.

Proceeding to step S8, an activation code is issued. Issuing the activation code makes it available to user 2. As described above, in one embodiment, the activation code is displayed as a QR code on user interface 32 (field 41 in FIG. 2) so that user 2 can scan the activation code using mobile communication device 20. Once the activation code is issued, the method shown in FIG. 3, which relates to one aspect of operating building system 1, ends at step S9.

The use of the activation code obtained by the user's mobile communication device 20 will be described below with reference to Figures 4A to 6B. Referring to these figures, it is assumed that the registration computer system 4 generates and issues an activation code for user 2, and user 2 activates the software application on mobile communication device 20. During the registration process, the user's access permissions and the validity (expiration) of the activation code are set. In Figures 4A to 6B, the display 21 of mobile communication device 20 shows various embodiments of the graphical user interface 23 (GUI 23) for different stages of user 2's use of mobile communication device 20. The application control GUI 23 is intended to execute on mobile communication device 20.

Figures 4A to 4D illustrate the use of the mobile communication device 20 in conjunction with a building system 1 operating according to conventional lift/lower control technology. As shown on the right side of Figure 1, the building system 1 is equipped with floor terminals 6a, car operation panels 10, and credential acquisition devices 9 on each floor and in the elevator car 10.

In Figure 4A, GUI 23 displays field 44 (activation code), which user 2 can touch to scan an activation code issued by the registration computer system 4. At this time, user 2 may be standing at a self-service terminal or front desk. In response to the activation code being scanned, GUI 23 displays field 45, which indicates upward and downward directional symbols, as shown in Figure 4B. The symbols can be triangles, arrows, or any other directional symbols. In some embodiments, the symbols can be supplemented with or replaced by letters or text. For example, when approaching or in front of an elevator (elevator car 14a), user 2 can touch one of these symbols shown in Figure 4B to select the direction of travel.

In the embodiment shown in Figure 4C, GUI 23 displays a field 45 indicating the user's selected direction of travel (here, upward) and a field 47 containing a QR code. The QR code encodes the selected direction of travel and at least one of the aforementioned access permission and validity information. To call the elevator to the boarding floor, user 2 takes mobile communication device 20 to credential acquisition device 9 near floor terminal 6a so that the QR code can be read. In response to the elevator call, controller system 18 causes elevator car 14a to move, for example, to the boarding floor so that user 2 can board elevator car 14a there.

Referring to Figure 4D, once user 2 is in elevator car 14a, user 2 can touch display 21, and in response, GUI 23 displays field 49 containing a list of floors from which user 2 can select the desired destination floor. GUI 23 generates the floor list based on the access permissions assigned to user 2 and encoded in an activation code. Therefore, the list only contains floors that user 2 is allowed to access.

Each floor can be represented by a number (as shown in Figure 4D) or any other identifier suitable for distinguishing floors. Instead of a list, other representations of the floors could be implemented, such as a matrix or ring/wheel. The application and/or GUI 23 is configured to allow user 2 to scroll through the list until the desired destination floor is displayed. User 2 can then touch the number of the desired destination floor. In the example shown in Figure 4D, the selected floor number "3" is shaded. In response, GUI 23 displays a field 48 containing a QR code. The QR code encodes the selected destination floor and at least one of the aforementioned access and validity information. To enter the destination floor, user 2 takes mobile communication device 20 to credential acquisition device 9 in elevator car 14a so that the QR code can be read. In response, controller system 18 moves elevator car 14a from the boarding floor to the destination floor.

Figures 5A and 5B illustrate the use of the mobile communication device 20 in conjunction with a building system 1 that also operates according to conventional lift/drop control technology. As shown on the right side of Figure 1, in this embodiment, the building system 1 is equipped (only) with a floor terminal 6b, a car operation panel 10, and a credential acquisition device 9 in the elevator car 14a. In this embodiment, the user 2 calls the elevator to the boarding floor without using the mobile communication device 20. Alternatively, the user 2 needs to select and activate one of the directional symbols on the floor terminal 6b. For this purpose, the floor terminal 6b can be equipped with proximity sensors (e.g., one for each direction) that allow the user 2 to select a direction without actually touching the floor terminal 6b. As is known in the art, the proximity sensors can be configured as, for example, capacitive proximity sensors or photoelectric sensors. Alternatively, the floor terminal 6b can have conventional directional buttons; however, to reduce the risk of spreading bacteria and/or viruses, the user 2 may need to wear gloves to touch the buttons or use their elbow to press them.

In Figure 5A, GUI 23 displays field 44 (activation code), as described above with reference to Figure 4A. Subsequently, GUI 23 displays fields 50 and 51, as shown in Figure 5B. These fields 50 and 51 correspond to fields 48 and 49 described above with reference to Figure 4D. After selecting the desired destination floor, user 2 can present the displayed QR code (field 50) to the credential acquisition device 9 in elevator car 14a so that the QR code can be read. In response, controller system 18 moves elevator car 14a from the entry floor to the destination floor.

Figures 6A and 6B illustrate the use of mobile communication device 20 in conjunction with building system 1 operating according to destination call control technology. As shown on the left side of Figure 1, in this embodiment, building system 1 is equipped with floor terminals 6 (or floor terminals 8) and credential acquisition devices 9 on each floor. In Figure 6A, GUI 23 displays field 44 (activation code), as described above with reference to Figure 4A. Subsequently, GUI 23 displays fields 52 and 53, as shown in Figure 6B.

When user 2 is on the login floor, user 2 selects the desired destination floor from the floors displayed in field 53. In response, GUI 23 generates a QR code displayed in field 52. After selecting the desired destination floor and while still on the login floor, user 2 can present the displayed QR code (field 52) to the credential acquisition device 9 located on the login floor (outside elevator car 14) so that the QR code can be read. In response, controller system 18, for example, moves elevator car 14 to the login floor to allow user 2 to log in to elevator car 14, and then moves from the login floor to the destination floor.

Claims (15)

1. A building system (1) having an elevator system (1), comprising: The controller system (18) is configured to control the elevator system (1) to move the elevator car (14) between floors of the building. A registration computer system (4) is communicatively coupled to the controller system (18), wherein the registration computer system (4) is configured to generate an activation code for a user (2) requesting elevator service, store data associated with the activation code, and enable at least one system component (32) of the registration computer system (4) to be accessible to the user in a public area (3) of the building, wherein the activation code encodes user information including at least one of a user identifier, an encryption key, and the user's (2's) access rights in the building, and is configured to be accessible to the user (2) who is located near the at least one system component (32) during movement. When the communication device (20) is activated, a software application APP installed on the mobile communication device (20) and executable by the mobile communication device (20) is activated, wherein the activated software application APP is configured to generate a graphical user interface (23) on the display (21) of the mobile communication device (20), wherein the display content of the graphical user interface (23) is predetermined only by the coded user information of the activation code, wherein the software application APP is configured to generate optical credentials (47, 48, 50, 52) when the user (2) specifies the elevator service, wherein the optical credentials (47, 48, 50, 52) include the user information; and The credential acquisition unit (9) is communicatively coupled to the controller system (18) and configured to acquire the optical credentials (47, 48, 50, 52) from the mobile communication device (20) presented by the user (2) to the credential acquisition unit (9), wherein the controller system (18) is configured to cause the elevator system (1) to perform the specified elevator service when the optical credentials (47, 48, 50, 52) are determined to be valid. 2. The building system (1) according to claim 1, wherein the controller system (18) is configured to control the elevator system (1) according to the lift/drop control technology, wherein a first credential acquisition unit (9) is arranged on the building floor to provide input for a floor call to a specified direction of travel and to call the elevator car (14a) to the building floor, and wherein a second credential acquisition unit (9) is arranged in the elevator car (14a) to provide input for a car call to a specified destination floor. 3. The building system (1) according to claim 1, wherein the controller system (18) is configured to control the elevator system (1) according to the lift/drop control technology, wherein a first floor terminal (6b) having a direction button is arranged on the building floor to provide input for a floor call to a specified direction of travel and to call the elevator car (14a) to the building floor, and wherein the credential acquisition unit (9) is arranged in the elevator car (14a) to provide input for a car call to a specified destination floor. 4. The building system (1) according to claim 1, wherein the controller system (18) is configured to control the elevator system (1) according to destination call control technology, and wherein the credential acquisition unit (9) is arranged on the building floor to provide input for a floor call to a specified destination floor and to call the elevator car (14) to the building floor. 5. The building system (1) according to any one of the preceding claims further includes a physical access control system configured to control access from the public area (3) to the restricted access area (5, 14) and determine whether the optical credentials (47, 48, 50, 52) are valid. 6. The building system (1) according to claim 1, wherein at least one system component of the registration computer system (4) located in the public area (3) of the building and accessible to users is a user interface (32), wherein the user interface (32) is integrated into a self-service terminal located in the lobby of the building or is arranged at a front desk operated by building personnel. 7. The building system (1) according to claim 6, wherein the user interface (32) is configured to display the activation code as a QR code (41). 8. The building system (1) according to claim 1, wherein the optical credentials (47, 48, 50, 52) are displayed as QR codes. 9. The building system (1) according to claim 1 further includes a communication network (22), wherein the registration computer system (4) and the controller system (18) are communicatively coupled to the communication network (22). 10. The building system (1) according to claim 9 further includes a data storage device (24) communicatively coupled to the controller system (18) to read data from the data storage device (24), wherein the data storage device (24) stores the activation code and the user information. 11. A method of operating a building system (1) having an elevator system, the building system (1) comprising a controller system (18) configured to control the elevator system (1), a registration computer system (4) communicatively coupled to the controller system (18), and a credential acquisition unit (9) communicatively coupled to the controller system (18), the method comprising: The registration computer system (4) generates an activation code based on information contained in the user profile stored for the user (2) requesting elevator service, wherein data associated with the activation code is stored in the registration computer system, wherein the activation code encodes user information including at least one of user identifier, encryption key and the user (2)’s access rights in the building; The activation code is issued by the registration computer system (4) on a system component (32) located in the public area (3) of the building accessible to the user of the registration computer system (4) for the user (2) to obtain by the mobile communication device (20), wherein the obtained activation code activates a software application APP installed on the mobile communication device (20) and executable by the mobile communication device (20), wherein the activated software application APP generates a graphical user interface (23) on the display (21) of the mobile communication device (20), wherein the display content of the graphical user interface (23) is predetermined only by the coded user information of the activation code, wherein the software application APP further generates and displays optical credentials (47, 48, 50, 52) when the user (2) specifies elevator service, wherein the optical credentials (47, 48, 50, 52) include the user information; The credential acquisition unit (9) acquires the optical credentials (47, 48, 50, 52) from the mobile communication device (20) presented by the user (2); and When the controller system (18) determines that the optical credentials (47, 48, 50, 52) are valid, it controls the elevator system (1) to perform the specified elevator service. 12. The method according to claim 11, wherein issuing the activation code comprises: displaying a QR code (41) using the user interface (32) of the registration computer system (4). 13. The method according to claim 12, wherein obtaining the optical credentials (47, 48, 50, 52) comprises: reading a QR code displayed on the display (21) of the mobile communication device (20), the QR code being generated by the software application APP based on user information contained in the QR code. 14. The method according to any one of claims 11 to 13, wherein the controller system (18) is configured to control the elevator system (1) according to a lift/drop control technique, wherein the elevator service specifies a direction of travel or a destination floor, or wherein the controller system (18) is configured to control the elevator system (1) according to a destination call control technique, wherein the elevator service specifies a destination floor. 15. The method of claim 11, wherein, in response to the activation code, the graphical user interface (23) displays predetermined content without needing to obtain additional information from outside the mobile communication device (20).