Control for interactive safety between elevator system and machine passenger

An interaction safety control method between an elevator system and a machine passenger, comprising:

• receiving a command from the machine passenger;
• based on a received command, determining the safety of the command with respect to the elevator system;
• and
• in case that the command is determined to be unsafe with respect to the elevator system, not sending the command to an elevator control device of the elevator system;
• wherein information of the command comprises a command type, an identifier of the machine passenger sending the command, and a receipt time;
• the determining the safety of the command with respect to the elevator system comprise:
• based on the receipt time of commands from a same machine passenger, determining adjacent receipt time intervals of the commands of a same command type from the same machine passenger;
• and
• based on a determined adjacent receipt time interval, determining the safety of the command with respect to the elevator system;
• wherein in response to the command being determined unsafe, preventing the received command from being sent to an elevator control device thereby preventing operation of the elevator system in response to the received command.

An interaction safety control method between an elevator system and a machine passenger, comprising:

• receiving a command from the machine passenger;
• based on a received command, determining the safety of the command with respect to the elevator system;
• and
• in case that the command is determined to be unsafe with respect to the elevator system, not sending the command to an elevator control device of the elevator system;
• wherein information of the command comprises a command type, an identifier of the machine passenger sending the command, and a receipt time;
• the determining the safety of the command with respect to the elevator system comprise:
• if a first command and a second command received in sequence from a same machine passenger have different command types from each other and the first command has been sent to the elevator control device, judging whether command permutations and combinations containing the first command and the second command conform to control logic of the elevator system for the same passenger;
• if the command permutations and combinations do not conform to the control logic, determining that a received second command is unsafe with respect to the elevator system and preventing the received command from being sent to an elevator control device thereby preventing operation of the elevator system in response to the received command.