Elevators The Basics & Potential Future Vulnerabilities
Who am I? Spent exactly 4000 days as an elevator technician Now a Penetration Tester Cool guy?
Obligatory Safety Warning!!!!!
Agenda Elevator basics More recent technologies IoT & Elevators… WTF?#$!
Basic Types of Elevators Traction
Basic Types of Elevators Traction Hydraulic
Basic Types of Elevators Traction Hydraulic Drum driven
Safety Systems Overspeed Governor Electrical Overspeed Switch Mechanical Overspeed Lock Rope to Elevator Car
Safety Systems Overspeed Governor Safety Circuit 2 Speed AC - Simplified
Safety Systems Overspeed Governor Safety Circuit Door Locks 2 Speed AC - Simplified
Safety Systems Overspeed Governor Safety Circuit Door Locks Rope Brake
Control Systems 1960s – Relay Based
Control Systems 1960s – Relay Based 1970s – Enter Electronics
Control Systems 1960s – Relay Based 1970s – Enter Electronics 1980s - Microprocessors
Control Systems 1960s – Relay Based 1970s – Enter Electronics 1980s - Microprocessors 1990s – Smaller!
Shaft Access - DANGER Trap Door
Shaft Access - DANGER Trap Door Access Device (Landing Doors)
Shaft Access - DANGER Trap Door Access Device (Landing Doors) Access Door
Communication Electrically (Relays) Parallel Communication Serial (CAN bus, rs422/485)
Car Operating Panel Key Switches Open the panel Fire Service overrides security
Basics Are Over! Very brief introduction If you want to talk more come see me
Where to next? So ….. You don’t have an oscilliscope or protocol analyser? Just a laptop?
Elevator Management System Provide real time Elevator monitoring Store information about trips Often built on old software
Display Screens Look Fancy Often Windows XP Embedded IP connected VDSL
Destination Control Better Elevator dispatching Common service codes Commonly IP/Ethernet Network Compass, PORT, DCS
Internet of Things Kone / Microsoft ThyssenKrupp / IBM Adaptive Servicing Where do you want to go? Scared?
It is time to take the stairs!
Questions?