1-26. (canceled)
27. A method of at least partially securing communications, via a Host Identity Protocol, HIP, proxy, between a first host which is not HIP enabled and a second host which is HIP enabled, the method comprising:
sending a query from the first host to resolve the Internet Protocol, IP, address of the second host;
in response to said query, retrieving an IP address and Host Identity Tag, HIT, associated with the second host;
in response to said retrieval, returning from the proxy a substitute IP address associated with the second host;
maintaining at the proxy a mapping between the substitute IP address, the retrieved IP address and the retrieved HIT; and
upon receipt of a session initiation message at the proxy from the first host including as its destination address the substitute IP address, using the mapping to negotiate a HIP connection between the proxy and the second host.
28. A method as claimed in claim 27, comprising looking up the retrieved IP address and the retrieved HIT from the mapping based on the substitute IP address in the session initiation message, and performing the HIP negotiation using the retrieved IP address and the retrieved HIT to locate and identify the Responder in the HIP negotiation together with an IP address and HIT of the proxy to locate and identify the Initiator in the HIP negotiation.
29. A method as claimed in claim 27, wherein the retrieved IP address is the IP address of a Forwarding Agent used by the second host, and further comprising initiating the HIP negotiation between the proxy and the second host by sending the initial HIP negotiation packet to the Forwarding Agent.
30. A method as claimed in claim 29, further comprising, following receipt of the actual IP address of the second host at the proxy during the HIP negotiation, including the actual IP address in the mapping maintained at the proxy.
31. A method as claimed in claim 30, wherein the retrieved IP address is replaced in the mapping by the actual IP address following its receipt at the proxy.
32. A method as claimed in claim 27, wherein the retrieved IP address is the actual IP address of the second host.
33. A method as claimed in claim 27, comprising generating the substitute IP address at the proxy.
34. A method as claimed in claim 27, further comprising, for an outgoing message received at the proxy after the HIP connection has been established including as its destination address the substitute IP address, using the mapping to route the message over the HIP connection to the second host.
35. A method as claimed in claim 34, wherein the retrieved IP address is the IP address of a Forwarding Agent used by the second host, and further comprising: initiating the HIP negotiation between the proxy and the second host by sending the initial HIP negotiation packet to the Forwarding Agent; following receipt of the actual IP address of the second host at the proxy during the HIP negotiation, including the actual IP address in the mapping maintained at the proxy; looking up the actual IP address and the retrieved HIT from the mapping based on the substitute IP address in the outgoing message; routing the outgoing message to the second host using the actual IP address and the retrieved HIT to locate and identify the destination of the message; and using an IP address and HIT of the proxy to locate and identify the source of the message.
36. A method as claimed in claim 27, further comprising completing the establishment of communications between the first and second hosts by forwarding the session initiation message from the proxy to the second host over the HIP connection, replying with a session acknowledgment message from the second host to the proxy over the HIP connection, and routing the session acknowledgment message to the first host.
37. A method as claimed in claim 36, wherein the session acknowledgment message is a TCP ACK message.
38. A method as claimed in claim 27, wherein the session initiation message is a TCP SYN message.
39. A method as claimed claim 27, further comprising, for an incoming message received at the proxy from the second host over the established HIP connection, using a NAT function of the proxy to route the message to the appropriate destination host.
40. A method as claimed in claim 27, wherein the query is a DNS query.
41. A method as claimed in claim 27, wherein the proxy performs the step of retrieving the IP address and HIT associated with the second host.
42. A method as claimed in claim 41, wherein the proxy retrieves the IP address and HIT associated with the second host from an external DNS server.
43. A method as claimed in claim 41, wherein the proxy retrieves the IP address and HIT associated with the second host from an internal DNS server.
44. A method as claimed in claim 27, wherein the proxy intercepts the query from the first host.
45. A communications system comprising a first host which is not Host Identity Protocol, HIP, enabled, a second host which is HIP enabled, and a HIP proxy, wherein:
the first host comprises means for sending a query to resolve the Internet Protocol, IP, address of the second host;
the proxy comprises means for retrieving, in response to said query, an IP address and Host Identity Tag, HIT, associated with the second host, for returning, in response to said retrieval, a substitute IP address associated with the second host, for maintaining a mapping between the substitute IP address, the retrieved IP address and the retrieved HIT, and for using the mapping, upon receipt of a session initiation message from the first host including as its destination address the substitute IP address, to negotiate a HIP connection between the proxy and the second host.
46. A method for use by a Host Identity Protocol, HIP, proxy of at least partially securing communications, via the proxy, between a first host which is not HIP enabled and a second host which is HIP enabled, the method comprising:
receiving a query from the first host to resolve the Internet Protocol, IP, address of the second host;
in response to said query, retrieving an IP address and Host Identity Tag, HIT, associated with the second host;
in response to said retrieval, returning a substitute IP address associated with the second host, and maintaining a mapping between the substitute IP address, the retrieved IP address and the retrieved HIT; and
upon receipt of a session initiation message from the first host including as its destination address the substitute IP address, using the mapping to negotiate a HIP connection between the proxy and the second host.
47. A Host Identity Protocol, HIP, proxy for use in at least partially securing communications, via the proxy, between a first host which is not HIP enabled and a second host which is HIP enabled, comprising:
means for receiving a query from the first host to resolve the Internet Protocol, IP, address of the second host;
means for retrieving, in response to said query, an IP address and Host Identity Tag, HIT, associated with the second host, for returning, in response to said retrieval, a substitute IP address associated with the second host, and maintaining a mapping between the substitute IP address, the retrieved IP address and the retrieved HIT; and
means for using the mapping, upon receipt of a session initiation message from the first host including as its destination address the substitute IP address, to negotiate a HIP connection between the proxy and the second host.
48. A computer program which, when run on a HIP proxy, causes the proxy to carry out a method as claimed in claim 46.
49. A computer program which, when loaded into a HIP proxy, causes the proxy to become one as claimed in claim 47.
50. A computer program as claimed in claim 48, carried on a carrier medium.
51. A computer program as claimed in claim 50, wherein the carrier medium is a transmission medium.
52. A computer program as claimed in claim 50, wherein the carrier medium is a storage medium.
53. A computer program as claimed in claim 49, carried on a carrier medium.
54. A computer program as claimed in claim 53, wherein the carrier medium is a transmission medium.
55. A computer program as claimed in claim 53, wherein the carrier medium is a storage medium.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A safety arrangement of an elevator, which comprises a mechanical safety device that ensures the safety of the elevator hoistway and can be moved into a use position, and which safety arrangement of an elevator comprises a detector of intrusion into the elevator hoistway, which detector is fitted to receive measuring data from the sensors that measure the status of the entrances of the elevator hoistway, and also to determine intrusion into the elevator hoistway from the measuring data received, and after determining an intrusion to switch the safety arrangement of the elevator into an operating mode in which driving with the elevator is prevented,
wherein the aforementioned detector of intrusion into the elevator hoistway is fitted to determine on the basis of the measuring data received the area of intrusion from where intrusion into the elevator hoistway has occurred,
and in that the detector of intrusion into the elevator hoistway is fitted to delimit a safe area of the elevator hoistway corresponding to the determined area of intrusion,
and in that the safety arrangement of the elevator is fitted to permit service drive after the mechanical safety device that is disposed in the safe area delimited by the detector of intrusion into the elevator hoistway and that ensures the safety of the elevator hoistway is moved into the use position.
2. The safety arrangement according to claim 1, wherein the safety arrangement of the elevator comprises two or more mechanical safety devices that ensure the safety of the elevator hoistway and are movable into a use position, and in that the safety arrangement of the elevator is fitted to permit service drive after the one or more mechanical safety devices that are disposed in the safe area delimited by the detector of intrusion into the elevator hoistway and that ensure the safety of the elevator hoistway are moved into the use position.
3. The safety arrangement according to claim 1, wherein the safety arrangement comprises a service drive unit, which is fitted into the elevator hoistway, and which service drive unit comprises a service drive switch, as well as control devices for moving the elevator car, and in that the aforementioned delimited safe area of the elevator hoistway comprises the environment of the service drive unit.
4. The safety arrangement according to claim 1, wherein at least one mechanical safety device that ensures the safety of the elevator hoistway and that can be moved into the use position is fitted in the proximity of the service drive unit.
5. The safety arrangement according to claim 1, wherein the safety arrangement comprises a mechanical safety device that ensures the safety of the area above the elevator car in the elevator hoistway and that can be moved into the use position, and in that if intrusion into the elevator hoistway has occurred via some other entrance of the elevator hoistway than via the entrance of the pit of the elevator hoistway,
the safety arrangement of the elevator is fitted to permit service drive after the aforementioned mechanical safety device that ensures the safety in the elevator hoistway of the area above the elevator car is moved into the use position.
6. The safety arrangement according to claim 5, wherein the aforementioned mechanical safety device that ensures the safety in the elevator hoistway of the area above the elevator car and that can be moved into the use position is fitted in the elevator hoistway to the roof of the elevator car andor to the bottom of the counterweight.
7. The safety arrangement according to claim 1, wherein the safety arrangement comprises a mechanical safety device that ensures the safety of the bottom end zone of the elevator hoistway and that can be moved into a use position,
and in that if it is determined that intrusion into the elevator hoistway has occurred via the entrance of the pit of the elevator hoistway,
the safety arrangement of the elevator is fitted to permit service drive after the aforementioned mechanical safety device that ensures the safety in the elevator hoistway of the bottom end zone of the elevator hoistway is moved into the use position.
8. The safety arrangement according to claim 7, wherein the arrangement comprises a service drive unit, which is fitted on the roof of the elevator car,
and in that if it is determined that intrusion into the elevator hoistway has occurred via the entrance of the pit of the elevator hoistway,
the safety arrangement of the elevator is fitted to permit service drive after both the aforementioned mechanical safety device that ensures the safety in the elevator hoistway of the bottom end zone of the elevator hoistway as well as also the aforementioned mechanical safety device that ensures the safety in the elevator hoistway of the area above the elevator car are moved into the use position.
9. The safety arrangement according to claim 7, wherein the aforementioned mechanical safety device that ensures the safety of the bottom end zone of the elevator hoistway and that can be moved into the use position is fitted below the elevator car in the elevator hoistway.
10. The safety arrangement according to claim 1, wherein the detector of intrusion into the elevator hoistway is fitted in connection with the safety circuit of the elevator, and in that the detector is fitted to receive measuring data from the sensors that measure the locking of the entrances of the elevator hoistway, and in that the detector is fitted to form a prevention of drive if an intrusion into the elevator hoistway is determined from the measuring data received from the sensors that measure the locking of the entrances of the elevator hoistway, and in that the detector of intrusion into the elevator hoistway is fitted to form an activation signal of service drive using the determined intrusion area data,
in which case after detecting an intrusion into the elevator hoistway via some other entrance of the elevator hoistway than via the entrance of the pit of the elevator hoistway, the detector is fitted to generate an activation signal of service drive, in response to which the safety circuit of the elevator is switched to a mode in which service drive is permitted after the safety switch fitted in connection with the mechanical safety device that ensures the safety of the aforementioned area above the elevator car in the elevator hoistway indicates that the safety device that ensures the safety in the elevator hoistway of the area above the elevator car is moved into the use position,
and in which case after detecting an intrusion into the elevator hoistway via the entrance of the pit of the elevator hoistway, the detector is fitted to generate an activation signal of service drive to the safety circuit of the elevator, in response to which the safety circuit of the elevator is switched to a mode in which service drive is permitted after the safety switch fitted in connection with the mechanical safety device that ensures the safety of the aforementioned bottom end zone of the elevator hoistway indicates that the mechanical safety device that ensures the safety of the bottom end zone of the elevator hoistway is moved into the use position.
11. The safety arrangement according to claim 1, wherein if intrusion into the elevator hoistway has occurred via some other entrance of the elevator hoistway than via the entrance of the pit of the elevator hoistway,
the safety arrangement of the elevator is fitted to permit service drive after the mechanical safety device fitted in the elevator hoistway under the counterweight as well as also the mechanical safety device fitted in the elevator hoistway under the elevator car are moved into the use position.
12. The safety arrangement according to claim 1, wherein service drive is permitted after the aforementioned mechanical safety device that ensures the safety of the elevator hoistway is moved into the use position, and when the service drive switch is moved into the service drive position.
13. The safety arrangement according to claim 1, wherein the safety arrangement comprises a manually controllable return apparatus of normal drive of the elevator, the request for a return to normal drive formed with which is taken to the detector of intrusion into the elevator hoistway,
and in that the detector of intrusion into the elevator hoistway is fitted to switch the safety arrangement of the elevator into a mode that permits normal drive as a response to the aforementioned request for a return to normal drive, to the position data of the entrances of the elevator hoistway, and also to the position data of the mechanical safety devices of the elevator hoistway.
14. The safety arrangement according to claim 13, wherein the detector of intrusion into the elevator hoistway comprises an interface to a primary electricity supply, and also an interface to a backup system of the electricity supply,
and in that the detector of intrusion into the elevator hoistway comprises a selection circuit of electricity supply for connecting the aforementioned electricity supply of the backup system to supply electricity to the detector of intrusion into the elevator hoistway in connection with an operational nonconformance of the primary electricity supply,
and in that the detector of intrusion into the elevator hoistway is arranged during an operational nonconformance of the primary electricity supply into an operating mode in which a request for a return to normal drive formed with the return apparatus of normal drive is left unregistered.
15. The safety arrangement according to claim 1, wherein the safety arrangement comprises, in connection with each entrance of the elevator hoistway, a switch fitted in connection with the emergency opening apparatus of at least one door of an entrance on the path of movement of the turnable part of the emergency opening apparatus, the contact of which switch is fitted to open with an emergency key when using the emergency opening apparatus;
and in that the aforementioned switches fitted in connection with the doors of the different entrances are connected to each other in series such that the switches of the doors of the entrances of the pit of the elevator hoistway form a first serial circuit;
and in that the switches of the doors of other entrances than that of the pit of the elevator hoistway form a second serial circuit;
and in that the detector of intrusion into the elevator hoistway is fitted to read the electrical magnitude supplied to the input of the serial circuit from the output of the aforementioned serial circuit of the switches, and to deduce intrusion into the elevator hoistway on the basis of the electrical magnitude read,
in which case intrusion into the pit of the elevator hoistway is deduced on the basis of the electrical magnitude read from the first serial circuit;
and in which case intrusion onto the roof of the elevator car is deduced on the basis of the electrical magnitude read from the second serial circuit;
and in that the detector of intrusion into the elevator hoistway comprises a memory, in which the intrusion into the elevator hoistway deduced on the basis of the aforementioned read electrical magnitude is recorded.
16. A method for monitoring safety in an elevator system, the method comprising:
fitting a mechanical safety device that ensures the safety of the elevator hoistway and that can be moved into a use position into the elevator hoistway;
measuring the status of the entrances of the elevator hoistway;
determining intrusion into the elevator hoistway from the measured the status of the entrances of the elevator hoistway;
preventing driving with the elevator if intrusion into the elevator hoistway is determined;
determining an area of intrusion, from where intrusion into the elevator hoistway has occurred, from the measured status of the entrances of the elevator hoistway;
delimiting the safe area of the elevator hoistway corresponding to the determined area of intrusion; and
permitting service drive after the mechanical safety device that is disposed in the delimited safe area and that ensures the safety of the elevator hoistway is moved into the use position.
17. The method according to claim 16, wherein:
two or more mechanical safety devices that ensure the safety of the elevator hoistway and that can be moved into the use position are fitted into the elevator hoistway; and
service drive is permitted after the one or more mechanical safety devices that are disposed in the delimited safe area and that ensure the safety of the elevator hoistway are moved into the use position.
18. The method according to claim 16, further comprising:
fitting a service drive unit into the elevator hoistway; and
setting the aforementioned delimited safe area of the elevator hoistway to include the environment of the service drive unit.