home Home / AMR Integration with Automatic Doors, Elevators, and Access Control: Interface States, Interlocks, and Fault Recovery

AMR Integration with Automatic Doors, Elevators, and Access Control: Interface States, Interlocks, and Fault Recovery

Door or Elevator Integration Is a Sequence, Not a Signal

AMR interaction with automatic doors or elevators is not as simple as “send a signal to open the door.” It is a multi-step state sequence — each step has state confirmation, timeout, and exception handling.

A practitioner asked in an online forum: “Is the interaction between AGV and automatic doors/elevators typically done by the AGV itself, or by notifying the dispatching software?” This question received multiple replies — showing it is a common confusion in system integration.

The answer depends on architecture: some systems have the AMR directly control doors/elevators, others use the dispatching system for unified management. But regardless of architecture, the integration core is the state sequence — request, authorize, open, enter, clear — each step needs confirmation and timeout handling.


Request, Authorize, Open, Enter, and Clear States

Standard door/elevator interaction sequence:

StepActionConfirmationTimeout handling
1. RequestAMR or dispatching sends open-door/call-elevator requestDoor/elevator receives request confirmationTimeout → retry or alarm
2. AuthorizeDoor/elevator system checks if allowed (no conflict, safety conditions met)Authorization signalNot authorized → wait or reroute
3. OpenDoor opens / elevator arrives and opensDoor fully open confirmationTimeout → alarm
4. EnterAMR passes through door / enters elevatorAMR passage complete confirmationEnter a defined safe state / alarm / manual recovery according to the approved interface design
5. ClearAMR fully through, notifies door/elevator to closeDoor closed confirmationEnter a defined safe state / alarm / manual recovery according to the approved interface design

Key design questions:

  • Who initiates the request? AMR directly or the dispatching system?
  • Who confirms authorization? Door/elevator system or dispatching system?
  • How does the AMR confirm the door is fully open? Sensor detection or signal confirmation?
  • What happens on timeout? Retry, alarm, reroute, or manual intervention?

Position Confirmation and Occupancy Sensing

Door zone occupancy:

  • Multiple AMRs may be in the door zone — need to ensure only one enters.
  • Pedestrians may be in the door zone — need person-vehicle separation or interlock.
  • Elevator car occupancy — how does the AMR confirm no other vehicles or people inside?

Occupancy sensing methods:

Sensing methodApplicableLimitation
AMR’s own sensorsDoor zone obstacle detectionOnly detects objects in AMR’s field of view
Door/elevator system sensorsDoor zone/car occupancyDepends on whether building system has sensors
Dispatching system lockPrevents multi-vehicle simultaneous requestsSoftware-level, does not detect physical occupancy
Physical interlockHardware interlock between door/elevator and AMRMost reliable but most complex

Define a validated means of confirming safe entry and occupancy; depending on the building and system architecture, this may combine building sensors, robot sensing, interlocks, access-control logic, and traffic-control rules.


Elevator Call, Floor Selection, and Car Reservation

Special complexity of elevator interaction:

  1. Call: AMR or dispatching calls elevator to current floor.
  2. Arrival confirmation: Elevator arrives at current floor and opens.
  3. Enter: AMR enters the car.
  4. Floor selection: AMR or dispatching selects target floor.
  5. Travel: Elevator travels to target floor.
  6. Arrival and open: Elevator arrives at target floor and opens.
  7. Exit: AMR leaves the car.
  8. Release: Notify elevator it can serve other requests.

Key questions:

  • What does the AMR do inside the car during travel? Typically enters standby, resumes task execution after arriving at target floor.
  • What if the elevator stops at another floor mid-travel? Doors open but it is not the target floor.
  • How do multiple AMRs sharing an elevator queue?
  • What happens when the elevator fails?

Interlocks with Personnel and Other Vehicles

Person-vehicle interlock:

  • Doors and elevators are personnel passages — how to ensure personnel safety when AMRs use them?
  • Safety interlock: When the AMR requests door opening, is the door zone clear?
  • Priority: When personnel and AMRs need the door/elevator simultaneously, who goes first?

Multi-vehicle interlock:

  • Multiple AMRs requesting the same door/elevator — dispatching system needs queue management.
  • When one AMR is in the door/elevator, others cannot enter.
  • Dispatching system needs channel-level and device-level locking.

Timeout, Network Loss, and Door-Stuck Scenarios

Timeout handling:

Timeout scenarioPossible causeSafety response
Request not authorized after sendDoor/elevator system not respondingRetry → alarm → manual
Authorized but door did not openDoor mechanical faultAlarm → manual
Door open but AMR did not enterAMR fault or path blockedEnter a defined safe state / alarm / manual recovery according to the approved interface design
AMR entered but door did not closeDoor sensor faultAlarm → manual
Elevator did not arrive at target floorElevator faultAMR in car standby → alarm

Network loss handling:

  • AMR-to-dispatching communication lost — how to handle door/elevator interaction?
  • If AMR loses network inside the elevator — can it continue?
  • Door/elevator system to dispatching communication lost — what state does the door hold?

Door stuck:

  • Door stuck during opening — AMR detects door not fully open and cannot pass.
  • Door stuck during closing — AMR has passed but door cannot close, affecting other users.

Fire Mode: Define, Do Not Assume

Fire mode is a high-risk scenario: When a fire occurs, the fire system may need to:

  • Release all door locks — personnel evacuation.
  • Recall elevators to designated floors — no elevator use.
  • Shut down ventilation — affects AMR routes.

AMR behavior in fire mode must be defined by the building/fire engineer and applicable fire/life-safety requirements. The article must not prescribe stop, evacuation, elevator recall, or door-release behavior. Confirm the interface between the fire system and the AMR/dispatching system is defined by the building/fire engineer and applicable codes.


Building Interface Test Checklist

Door/Elevator State Table

Interface typeState/scenarioCommand sourceConfirmation methodTimeout handlingTest result
Automatic door     
Request open ☐AMR ☐DispatchSignal confirmationRetry → alarm_____
Door fully open Sensor/signalAlarm_____
AMR passage AMR position confirmationDefined safe state per interface design_____
Door close ☐AMR ☐AutoClose confirmationAlarm_____
Door zone occupancy Sensor/lock_____
Personnel simultaneous use Interlock_____
Door stuck TimeoutAlarm → manual_____
Network loss Safe state_____
Elevator     
Call elevator ☐AMR ☐DispatchArrival confirmationRetry → reroute_____
Enter car Occupancy confirmation_____
Floor selection ☐AMR ☐Dispatch_____
Arrival at target floor Door open confirmationAlarm_____
Exit car AMR position confirmationDefined safe state per interface design_____
Mid-travel stop Detect non-target floorDo not exit_____
Multi-vehicle queue DispatchQueue management_____
Elevator fault TimeoutAMR standby → alarm_____
Fire mode     
Fire trigger Fire systemAMR behavior per building/fire engineer_____
Door release Fire systemPer fire/life-safety requirements_____
Elevator recall Fire systemPer fire/life-safety requirements_____
Recovery ManualSystem reset_____

Need to Integrate AMRs with Doors or Elevators?

Building interfaces are state machines, not single open/close signals. We can help map the request, confirmation, timeout, queue, access-control, and recovery logic before integration starts.

Please share, if available: door and elevator types, interface protocols, access-control rules, AMR traffic, occupancy sensing, timeout requirements, fire/life-safety constraints, and recovery expectations.

Send Building Interface Details

Building Interface Test Inputs

  1. Door/elevator integration is a state sequence, not a single signal — request → authorize → open → enter → clear, each step needs confirmation and timeout.
  2. Confirm who initiates the request — AMR directly or dispatching system unified management.
  3. Occupancy sensing cannot rely only on software locks — physical sensors are needed to confirm door zone and car occupancy.
  4. Timeout and network loss safe states must be defined — do not assume “it won’t happen.”
  5. Fire mode behavior must be explicitly defined — do not assume the fire system will automatically handle AMRs.
  6. Multi-vehicle shared doors/elevators need queue management — dispatching system needs channel-level and device-level locking.
  7. Fire interlock design must be confirmed by a building engineer or fire protection engineer and applicable building/fire codes — not the AMR supplier’s decision.

Contact Us