An illustrative example embodiment of an elevator control system includes a drive configured to control power provided to an elevator machine, a machine power switch module configured to selectively disconnect power from the elevator machine, and a brake power switch module configured to selectively disconnect power from a brake associated with the elevator machine. A monitor module includes a first monitor unit and a second monitor unit. Each monitor unit is configured to monitor a condition of the machine power switch module and the brake power switch module. The monitor units each provide an output to the other monitor unit including a current condition of the machine power switch module and a current condition of the brake power switch module as detected by that monitoring unit. Each of the monitor units is configured to determine whether there is correspondence between the outputs.

An elevator communication system includes a first elevator controller, a second elevator controller communicatively connected to the first elevator controller, a first ethernet bus portion connected to the first elevator controller, a second ethernet bus portion connected to the second elevator controller, and at least one elevator system node communicatively connected to the first elevator controller via the first ethernet bus portion and to the second elevator controller via the second ethernet bus portion.

A modular computing system (100) for a people movement management system (200), and a people movement management system (200) are provided herein. The modular computing system (100) comprises one or several computing modules (32A, 32N), each comprising a processing unit in connection with a memory, and an input/output connection interface (33A, 33N) for providing connection with one or several input/output units (34A, 34B, 34N). At least one of the computing modules (32A, 32N) is configured to monitor its performance and/or performance of at least one other of the computing modules (32A, 32N), and allocate computing resources of the computing modules (32A, 32N) based on said performance monitoring for executing control program portions included in one or several software containers, wherein the allocation is implemented based on pre-defined criticality ratings for functions of the people movement management system (200). The computing module(s) (32A, 32N) is/are configured to execute the control program portions based on the allocation of the computing resources.