An elevator system includes an elevator car, an elevator controller, a safety controller and a plurality of safety contacts connected to the safety controller, wherein the plurality of safety contacts monitor the elevator system. The safety controller is configured to receive individual status information from each of the plurality of safety contacts and to prevent movement of the elevator car when the individual status information received from one of the plurality of safety contacts indicates an unsafe condition of the elevator system. The safety controller is configured to connect to a remote computing device, to receive first authentication information from the remote computing device, and to authenticate the remote computing device if the first authentication information meets an authentication condition. If the remote computing device is authenticated, to permit the remote computing device to override the safety controller to enable movement of the elevator car.

A control unit, an elevator-monitoring apparatus and a method are used to monitor a maintenance mode of an elevator installation. The control unit has a controller and a memory device, wherein the controller receives a first signal when a locking device of shaft door is locked and receives a second signal when the locking device is unlocked. The controller compares a chronological signal sequence of first signals and second signals with a reference sequence stored in the memory device for actuation of the locking device and, if the signal sequence of the first signals and second signals matches the reference sequence, ends the maintenance mode and releases a car of the elevator installation for a traveling operation.

A mobile control unit and a method remotely control an elevator installation in an inspection mode, wherein the elevator installation includes an elevator car, an elevator controller and a safety circuit. The elevator controller automatically controls the elevator car for movement in a normal mode of the elevator installation when the safety circuit is electrically closed. In order to control the elevator installation, the mobile control unit is connected to the elevator installation such that the mobile control unit can switch the elevator installation between the normal mode and the inspection mode, and the elevator car can be manually controlled for movement via the mobile control unit in the inspection mode of the elevator installation.

An elevator drive apparatus is described which includes a drive unit for driving an elevator car, a brake device for braking a motion of the elevator car, a detector for detecting an electrical operation amount of the drive unit, and a controller. The controller is configured to release the brake device, to compare the detected electrical operation amount with a threshold, and to apply the brake device when the detected electrical operation amount exceeds the threshold. In this way, it is ensured that a speed of the elevator car in case of a rescue situation is within a safety limit.

A pressurized fluid powered cabin-management system for an elevator system with a cabin and drive system is provided. The cabin-management system is configured to direct operation of the elevator system upon arrival of one of the cabins at a floor, and comprises a floor detector configured to detect when the cabin is located at a floor and to activate a timer. The timer is configured, when triggered, to activate a timing arrangement and to pass pressurized fluid to a control valve being in a first position. The timing arrangement is configured to direct the control valve to assume a second position after a predetermined amount of time. The cabin-management system performs, when pressurized fluid is passed to the control valve in its first position, actions for opening a door, and, after the control valve has assumed its second position, actions for travel of the cabin.

A method of operating a computer-controlled first device for establishing a secure data communication with a computer-controlled second device in a passenger transportation arrangement distributed control system includes: generating an encryption key including a public and private key pair; creating credentials (e.g. X.509 certificate) based on the generated encryption key; preparing a certificate signing request CSR and dispatching the CSR via a secured data communication path to a certificate authority CA that is based on a public key infrastructure PKI operated by the passenger transportation arrangement operator; receiving the certificate from the CA with a signature using a private key held secret by the operator; establishing the secure data communication with the second device by transmitting the credentials to the second device, wherein the second device accepts establishing the secure data communication upon verification of the signature of the credentials executed using a public key of the operator.

A method for operating a safety system having a control unit, a bus, a plurality of bus nodes connected to the control unit via the bus, and a plurality of participants connected to the control unit via the bus nodes, wherein at least one participant is designated as a temporary participant. The method includes the step of logging the temporary participant out of the safety system by giving notice of a disconnection of the temporary participant from the safety system by a manipulation and disconnecting the temporary participant from the safety system. The safety system can be used with an elevator system for carrying out the method.

The present disclosure concerns a method for operating an elevator system which comprises a shaft system and at least three cars, which is designed for separately moving the cars in at least a first direction of travel and in a second direction of travel. The at least three cars are moved separately in sequential operation each time and for each car a stop point at which the car can stop if necessary is continuously predicted at least for one direction of travel. The distance of the predicted stop points of neighboring cars from each other is thereby continuously determined. The elevator system is transferred to a safety mode if a negative distance of the stop points is determined.

A method and a system for determining the position of an elevator car of an elevator system, which car is arranged for travel in an elevator hoistway, includes equipping the elevator car with an acceleration sensor that registers acceleration data in a computing unit, calculation by the computing unit of the current position and/or of the velocity of the elevator car, and equipping the elevator system with an image-recording unit, which unit records recorded images of the elevator hoistway. The computing unit compares the recorded images with current mapping images of the elevator hoistway to determine an image-based current position of the elevator car. Finally, the computing unit undertakes a recalibration of the current position using the image-based current position.

The disclosure relates to an elevator system consisting of a plurality of elevator carriages, a shaft system, a drive system for separately moving the elevator carriages within the shaft system, as well as a safety system having a plurality of safety nodes designed to bring the elevator system into a safe operating mode if an operating mode of the elevator system, which deviates from the normal operation mode, is detected. The elevator carriages, the shaft system and the drive system form a functional unit. One of the safety nodes is always assigned to one of the functional units, wherein the safety nodes are each connected to at least another safety node through an interface for transmitting data. Each safety node includes at least one sensor, which detects an operating parameter of the corresponding assigned functional unit. A control unit evaluates the operating parameter detected by one of the sensors of the respective safety node and, taking into account the data transmitted by at least another safety node.