Abstract: An elevator system 2 is provided which comprises: a hoistway 6 accessible by at least one hoistway door 10a, 10b, 10c; at least one elevator car 4 located in the hoistway 6; a hoistway door switch 12a, 12b, 12c associated with the at least one hoistway door 10a, 10b, 10c; at least one inspection switch 16; at least one emergency stop switch 18; and an elevator controller 24. The elevator controller 24 is configured to monitor the hoistway door switch 12a, 12b, 12c, the inspection switch 16 and the emergency stop switch 18 and to prevent inspection mode operation of the elevator car 4 until at least one change of state is detected of each of the hoistway door switch 12a, 12b, 12c, the inspection switch 16 and the emergency stop switch 18.

Abstract: An elevator safety device (120) is configured for restricting the movement of an elevator car (106) of an elevator system (102) along its pathway in order to prevent the elevator car (106) from moving beyond at least one limit position. The elevator safety device (120) is configured for performing at least one learning run (220a, 220b) for setting the at least one limit position.

Abstract: A method of updating at least one security certificate of a safety circuit of an elevator system includes: connecting the safety circuit with a communicator which is capable to communicate with a certification server; sending from the communicator to the safety circuit a security certificate update request for updating at least one security certificate stored within the safety circuit; the safety circuit sending a public key of a safety circuit security certificate associated with the safety circuit via the communicator to the certification server; the certification server checking whether the safety circuit security certificate associated with the received public key is included in a data base of known security certificates and not marked as compromised.

Abstract: An elevator system 2 is provided which comprises: a hoistway 6 accessible by at least one hoistway door 10a, 10b, 10c; at least one elevator car 4 located in the hoistway 6; a hoistway door switch 12a, 12b, 12c associated with the at least one hoistway door 10a, 10b, 10c; at least one inspection switch 16; at least one emergency stop switch 18; and an elevator controller 24. The elevator controller 24 is configured to monitor the hoistway door switch 12a, 12b, 12c, the inspection switch 16 and the emergency stop switch 18 and to prevent inspection mode operation of the elevator car 4 until at least one change of state is detected of each of the hoistway door switch 12a, 12b, 12c, the inspection switch 16 and the emergency stop switch 18.

Abstract: A method of updating at least one security certificate of a safety circuit of an elevator system includes: connecting the safety circuit with a communicator which is capable to communicate with a certification server; sending from the communicator to the safety circuit a security certificate update request for updating at least one security certificate stored within the safety circuit; the safety circuit sending a public key of a safety circuit security certificate associated with the safety circuit via the communicator to the certification server; the certification server checking whether the safety circuit security certificate associated with the received public key is included in a data base of known security certificates and not marked as compromised.

Abstract: An elevator safety device (120) is configured for restricting the movement of an elevator car (106) of an elevator system (102) along its pathway in order to prevent the elevator car (106) from moving beyond at least one limit position. The elevator safety device (120) is configured for performing at least one learning run (220a, 220b) for setting the at least one limit position.