EP1535874B1 - Elevator control system with automatic deactivation of optional functions - Google Patents

Description

The invention relates to a method for operating an elevator installation which has an elevator control with a plurality of functions for controlling the elevator installation, according to the preamble of claim 1 and an elevator control.

The elevator control of an elevator installation usually includes implementations of a plurality of functions. As a rule, more functions are implemented in the elevator control of an elevator installation than must actually be available for the elevator control system for controlling during operation of the elevator installation. Which of the implemented functions are actually available for controlling during operation of the elevator installation or which of the implemented functions should not be available for controlling during the operation of the elevator installation is generally determined by a configuration of the elevator control.

Configuration of an elevator control of an elevator installation can be understood as any measure which defines one or more properties which the elevator control should have with regard to a control of the elevator installation during operation of the elevator installation. This includes the definition of actions and reactions which are controllable by the elevator control and concern the operation of the elevator installation.

The configuration allows for consideration of specific operating parameters of the elevator installation and determines the system behavior that is to show the elevator control during operation of the elevator installation. A configuration takes place at least once before the commissioning of an elevator installation. If appropriate, it can also be repeated at a later time, for example in order to change the system behavior of the elevator control. The latter may be relevant if the configuration of the elevator installation and / or the elevator control is to be changed. This concerns, for example, the installation or removal of components which are or should be subject to the control of the elevator control during operation of the elevator installation, or the installation (implementation) or deinstallation of program modules which are suitable for controlling the elevator installation are and which - when installed - represent a realization of control options of the elevator control. In order for such a change in configuration to take effect during operation of the elevator installation, as a rule, a new configuration of the elevator control system is carried out in order to adapt the elevator control system to the changed situation. In this case, the configuration must at least include such measures that specify the necessary changes in the system behavior of the elevator control.

The system behavior of an installed and already configured elevator control system of an elevator installation can be subsequently changed to a certain extent, even if the implementation of functions in the elevator control system remains unchanged. For this purpose, only a renewed configuration of the elevator control according to a modified specification of the elevator installation has to be carried out. In this way, the elevator control can be suitably adapted to changing requirements on the system behavior, for example, after a modernization of the elevator system, without constructive changes to the elevator control itself are necessary.

EP 0 857 684 A1 discloses a method and apparatus for installing and operating an elevator control. The elevator control of an elevator installation is configured after installation of the elevator installation with the aid of a memory card which contains in a memory element all control data necessary for operating the elevator installation, ie in particular programs and / or data for controlling the elevator installation and for configuring the elevator control. The memory card is inserted in the elevator control. Certain special functions and options, such as a disabled mode, VIP operation, energy saving mode or fire protection system, are selectively activated by the memory card and thus made available for control during operation of the elevator installation. If other control options for the operation of the elevator installation are to be made available after the start-up of the elevator installation, then the memory card must be replaced by another memory card with a memory element which contains the control data suitable for activating the desired control options. With each change desired, one person must visit the elevator installation in order to insert the new memory card into the elevator control. This is cumbersome when changes need to be made frequently or even routinely, eg when certain control options are limited Period should be available for controlling during operation of the plant or when operating elevator controls on the basis of a temporary contract or the maintenance of elevator installations on the basis of a temporary service contract.

The present invention begins with the disadvantages mentioned. The invention has for its object to provide a method for operating an elevator system and an elevator control such that a targeted change of control options after the commissioning of the elevator system with little effort is possible.

This object is achieved by a method for operating an elevator installation having the features of claim 1 and an elevator control having the features of claim 10.

The dependent claims each define embodiments of the method according to the invention or of the elevator control according to the invention.

In the following, it is assumed that the elevator control has an implementation of a plurality of functions.

In the following, a function is understood to be any measure or group of measures that can be executed by the elevator control in order to control the elevator installation. The term "implementation of a function" should include the devices (hardware) and / or program modules (software) that contribute to the realization of the function.

The implemented functions can be divided into two groups with regard to their relevance for the operation of the elevator installation: standard functions and optional functions.

A standard function is understood to be an implemented function which should be available for every possible operating mode of the elevator installation.

An optional function is understood to be an implemented function which need not be available for every possible operating mode of the elevator installation. Depending on The interests of the operator of the elevator installation can be taken into account in a configuration of the elevator control as to whether such a function should be available during operation of the elevator installation or not.

An implemented function is said to be activated if it is available for control during operation of the elevator installation.

An implemented function is called an activatable function if, during a configuration, a determination can be made as to whether or not the function is to be available for controlling during operation of the elevator installation.
Activation of a function is understood to be a measure which specifies that the function is available for controlling during operation of the elevator installation.

The invention assumes that at least one of the optional functions or also a plurality of optional functions is or are activated in a configuration of the elevator control. By activating this optional function or these optional functions are initially available in an operation of the elevator system for controlling.

According to the invention, it is provided that the elevator control has a device for the automatic deactivation of optional functions. Deactivation of an optional function is understood to mean that the function has been activated in a configuration of the elevator control, but after the deactivation is no longer to be available for controlling during operation of the elevator installation. According to the invention, at least one of the optionally activated optional functions is automatically deactivated and is therefore available for control during operation only for a limited period of time. The device for the automatic deactivation of optional functions thus allows a control over the time in which an optional function in the operation of the elevator installation is available and can be claimed by a user of the elevator installation. By deactivating a targeted change of control options after commissioning of the elevator system is achieved. This change is not associated with any additional staffing because it is done automatically.

Apart from the definition of which of the functions implemented in the elevator control of an elevator installation are available for controlling the operation of the elevator installation If necessary, further definitions can be made during the configuration. For example, individual functions may depend on one or more parameters that determine the execution of the particular function. Such parameters can be set during configuration. For example, a function of "opening cabin and / or landing doors" may be specified by defining how fast the doors should be opened or closed and / or how long doors should be open before an automatic door closing operation is started. Furthermore, it may be necessary for a plurality of functions to be operable in conjunction with one another in a control operation to control certain complex operations during operation of the elevator installation, for example, such that multiple functions are executed simultaneously or in a particular temporal order. In the latter case, a number of functions can be implemented in such a way that several variants for the interaction of several functions are possible. By configuring the elevator control can now be determined which of the possible variants should be realized and should be available for controlling the operation of the elevator system. In this case, when configuring the elevator control, it may be determined: (i) which functions should be effective in connection with each other in a control process, and optionally (ii) according to which rules the functions should be used. For example, in an elevator control system, several control modes for the handling of calls (car calls and / or floor calls) may be implemented, among others the push button control, collective down control, collective selective control or group control. These types of controls differ mainly in the way the elevator controller responds to a number of incoming calls, for example with regard to registering incoming calls and / or the order of processing multiple incoming calls. Which of these types of control is to be used during operation of the elevator installation is defined during the configuration of the elevator control system.

For example, the invention allows a lift control provider to provide certain control options to a customer as a "temporary service," such as under a lease contract. Thus, certain optional functions may be activated in a configuration of the elevator control, for example optional functions which serve to improve ride comfort. The device for the automatic deactivation of optional functions can be set up so that a deactivation takes place, if one predetermined criterion is met, for example, when a certain period of time has elapsed or when a certain event has occurred a predetermined number of times. Thus, the provider can make agreements with the customer on the duration and conditions of use of the optional functions and set up the device for automatic deactivation according to the agreements already in a configuration of the elevator system. The provider can set up the automatic deactivation device so that the optional functions are activated only as long as they have to be available for controlling the elevator installation according to the agreements with the customer. Subsequently, as programmed, automatic deactivation of the optional functions takes place. If the customer decides to use the optional functions for a longer period of time, an activation of the desired optional for a further period of use can be made in good time. If the customer does not abide by the agreements - for example, he does not pay the agreed fees for using the services of the provider - then the provider does not have to do anything else: The use of the optional features ends automatically at a time and under conditions that the provider in connection with the activation of the functions themselves.

The invention enables, for example, a service provider in the field of elevator maintenance to make arrangements with a customer for maintenance of an elevator installation during a time-limited maintenance period. In this case, for example, the provider can activate certain optional functions when configuring the elevator control, which enable the acquisition and / or diagnosis of operating data and / or an analysis of elevator control error messages. In this case, the vendor may set up the optional feature disabling device to disable the enabled optional features at a vendor-specified time, with the deactivation automatically occurring without further intervention by the vendor. If it is not reactivated, the optional functions are no longer available after deactivation. This application is of particular interest to the provider when the optional functions provide results that exceed a common level, such as a measure or measure determined by law. After deactivation, the optional functions can no longer be used for maintenance purposes. The automatic deactivation offers the supplier a protection against a misuse by other offerers, who are not able to find a comparable one To provide service. After deactivation, only standard functions are available for acquiring and / or diagnosing operating data and / or analyzing error messages, which only deliver results in the framework determined by a law or a standard.

An embodiment of the elevator control according to the invention comprises an interface via which an activation information can be transmitted, and a processor for evaluating the activation information. The activation information contains the essential information needed to control the activation and / or deactivation of optional functions. The activation information may comprise, for example, a code or data and may for example be entered manually (eg via a keyboard), transmitted by electronic means or stored on a data carrier and read from this data carrier.

The activation can be done under the control of the elevator control. After transmission of an activation information via the interface of the elevator control, the activation information is evaluated by the processor of the elevator control according to a predetermined criterion - referred to below as the evaluation criterion. Depending on whether the activation information meets the evaluation criterion, the processor may accept the activation information as valid or reject it as invalid. If a valid activation information is present, the activation of one or more optional functions may be initiated as a function of a result of the evaluation. The evaluation can comprise several steps. The activation information may, for example, contain the information as to which optional functions should be activated and / or when the activation of an optional function and / or when or according to which criterion the deactivation of an optional function should take place. The activation information may further include security features that may protect against potential misuse. For example, the activation information may contain data that uniquely identifies the elevator control or the elevator installation. In this way it can be ensured that a certain activation information is valid only for one elevator control or an elevator installation and is rejected as invalid by another elevator control. Furthermore, the activation information may contain information that is only disclosed to the persons who are to be authorized to transmit activation information via the interface. This information may include an identification of the persons concerned. The activation information can For example, also contained information that identifies each individual transmission of activation information as such. For example, this information - called transmission identification in the following - may only be valid for a single transmission or for a limited number of transmissions. On the basis of the transmission identification successive transmissions of an activation information can be distinguished from the processor. For example, the processor may accept validation information as valid only if the delivery identifier meets a processor-determined criteria. The processor can change this criterion after each transmission or after a finite number of transmissions according to predetermined rules. In this case, the same activation information is accepted as valid only once or a finite number of times. In addition, the activation information or a part of the activation information may be encrypted.

Fig. 1

eine Aufzugsanlage, welche zwei Aufzüge mit je einer Aufzugssteuerung gemäss der Erfindung umfasst;

Fig. 2

die Aufzugssteuerung gemäss Fig. 1 im Detail;

Fig. 3

implementierte Standardfunktionen und optionale Funktionen und ein Beispiel für eine Kontrolle der Verfügbarkeit von optionalen Funktionen zum Steuern während eines Betriebs der Aufzugsanlage und

Fig. 4

ein Beispiel für eine Aktivierungsinformation.

In the following, embodiments of the invention will be explained with reference to the accompanying drawings. Show it:

Fig. 1

an elevator installation which comprises two elevators each with an elevator control according to the invention;

Fig. 2

the elevator control according to FIG. 1 in detail;

Fig. 3

implemented standard functions and optional functions and an example of a control of the availability of optional functions for controlling during operation of the elevator installation and

Fig. 4

an example of an activation information.

Fig. 1 shows an elevator installation 1 with two elevators 1.1 and 1.2 in a building with two shafts 2.1 and 2.2 and six floors 3.1 - 3.6. The elevators 1.1 and 1.2 each have a cabin 5.1 or 5.2. The shafts 2.1 and 2.2 are accessible from the floors 3.1 to 3.6 each via a landing door 4.

In the shaft 2.1, the car 5.1 and a counterweight 6.1, which is connected to the car 5.1 via a support means 6.1, by means of a drive 10.1, which is designed as acting on the support means 6.1 traction drive, movable.

Accordingly, in the shaft 2.2, the cabin 5.2 and a counterweight 6.2, which is connected to the car 5.2 via a support means 6.2, by means of a drive 10.2, which is designed as acting on the support means 6.2 traction drive, movable. The elevators 1.1 and 1.2 are designed so that with the cabins 5.1 and 5.2 respectively the floors 3.1 - 3.6 are operable.

For controlling the elevator installation two elevator controls 20.1 and 20.2 are provided. The elevator control 20.1 serves to control the elevator 1.1, the elevator control 20.2 serves to control the elevator 1.2.

The elevator 1.1 comprises a control connection 36.1, which establishes a connection between the elevator control 20.1 and all components of the elevator 1.1 which are checked in operation, i.a. the drive 10.1, a door of the car 5.1 (not shown), the landing doors 4 on the shaft 2.1, input and display devices for cabin and / or floor calls (not shown), a device for lighting the cab 5.1, a device for lighting the Levels 3.1-3.6 (not shown), an apparatus for acoustically and / or visually reproducing information (not shown) and sensors for monitoring the components and operation of the elevator 1.1 (not shown).

Accordingly, the elevator 1.2 comprises a control connection 36.1 which establishes a connection between the elevator control 20.2 and all components of the elevator 1.2 which are controlled in operation, i.a. the drive 10.2, a door of the cabin 5.2 (not shown), the floor doors 4 at the shaft 2.2, input and display devices for cabin and / or floor calls (not shown), a device for lighting the cabin 5.2, a device for lighting the Levels 3.1-3.6 (not shown), an apparatus for acoustically and / or visually reproducing information (not shown) and sensors for monitoring the components and operation of the elevator 1.2 (not shown).

The elevators 1.1 and 1.2 are - each controlled by the elevator control 20.1 and the elevator control 20.2 - independently operable. However, the elevator installation 1 has - as an optional function - a group control which - when activated - can coordinate the operation of the elevators 1.1 and 1.2 in order to optimize the call requests for the various floors 3.1-3.6 to the two elevators 1.1 and 1.2 distribute and thus a faster processing of different calls to enable. In order to enable this group control, the elevator controls 20.1 and 20.2 are connected to each other via a communication link 38.1: Through a data exchange via the communication link 38.1, the elevator controls 20.1 and 20.2 can coordinate the operation of the elevators 1.1 and 1.2 accordingly.

• ein Arbeitsspeicher 26,
• ein Speicher 27 für Daten und ein Programm bzw. Programme zum Steuern eines Aufzugs während eines Betriebs des Aufzugs,
• eine Steuerelektronik 30, welche Funktionselemente zum Steuern des Aufzugs in Form von Hardware umfasst,
• ein Speicher 31, welcher eine Bibliothek mit Programmmodulen umfasst, die Programmcode zum Steuern des Aufzugs enthalten und bei einer Konfigurierung optional zur Verfügung stehen, und
• Speicher 35 und 45, die zur Kontrolle optionaler Funktionen dienen (wie unten erläutert wird).

As shown in FIG. 2, the elevator controls 20.1 and 20.2 are constructed identically. The elevator controllers 20.1 and 20.2 each include a processor 21 to which a plurality of components are connected via a connection 23:

• a main memory 26,
• a memory 27 for data and a program for controlling an elevator during operation of the elevator,
• an electronic control unit 30, which comprises functional elements for controlling the elevator in the form of hardware,
• a memory 31 comprising a library of program modules containing program code for controlling the elevator and optionally available upon configuration, and
• Memory 35 and 45, which serve to control optional functions (as explained below).

• eine Schnittstelle 36 für einen Austausch von Steuerungssignalen über die Steuerungsverbindung 36.1,
• eine Schnittstelle 38 für eine Kommunikation über die Kommunikationsverbindung 38.1,
• eine Schnittstelle 40 für eine Kommunikation über eine Kommunikationsverbindung 40.1 und
• eine Schnittstelle 49 für eine Kommunikation mit einer Service- und/oder Wartungszentrale 50 über eine Kommunikationsverbindung 49.1.

The processor 21 is in each case connected to a number of interfaces:

• an interface 36 for an exchange of control signals via the control connection 36.1,
• an interface 38 for communication via the communication link 38.1,
• an interface 40 for communication via a communication link 40.1 and
• an interface 49 for communication with a service and / or maintenance center 50 via a communication link 49.1.

The control electronics 30 and the memory 31 form (in the form of hardware and software) an implementation of the functions that can be available for the elevator control 20.1 or 20.2 for controlling the elevators 1.1 and 1.2 during operation. Which Functions in operation for controlling the elevators 1.1 or 1.2 are actually available, is determined by a configuration of the elevator controls 20.1 and 20.2.

The course of a configuration will be explained with reference to FIG. For this purpose, it is assumed that 2 n + m functions are implemented in the elevator control 20.1 or 20, these functions being symbolically represented in FIG. 3 by F ₁ , F ₂ ,..., F _n , F _{n + 1} , ...., F _{n + m are} denoted (with 1≤n and 1≤m). Each of these functions comprises one or more control commands, which can be transmitted via the respective control connection 36.1 in order to control the elevators 1.1 or 1.2. It is permitted that some of these functions fall back on other functions in terms of subfunctions.

It is assumed that the functions F ₁ to F _{n are} standard functions and the functions F _{n + 1} to F _{n + m are} optional functions. Consequently, in a configuration of the elevator control 20.1 or 20.2 with respect to the functions F ₁ to F _n no choice: After each configuration, these functions are available to control the elevators 1.1 and 1.2 in operation and are therefore activated. With regard to the functions F _{n + 1} to F _{n + m} , in a configuration of the elevator control 20.1 or 20.2, there are options: These functions can be activated as required. During the configuration, it is determined which of the optional functions F _{n + 1} to F _{n + m} are to be available for operation of the elevators 1.1 or 1.2 during operation, ie, to be activated.

1. a) eine Information darüber, ob eine der optionalen Funktionen F_i aktiviert ist;
2. b) falls die Funktion F_i aktiviert ist: eine Information darüber, ob diese Funktion deaktiviert werden soll und wenn ja, unter welchen Bedingungen bzw. an welchem Zeitpunkt;
3. c) gegebenenfalls weitere Parameter, die einer Spezifikation der Funktionen F_i dienen.

As a result of a configuration, for the optional functions F _{n + 1} to F _{n + m,} corresponding status information S _{n + 1} to S _{n + m is} generated and stored in the memory 35 of the elevator control 20.1 or 20.2 (see FIGS. 2 and 3). The status information S _i (i> n) is assigned to the optional function F _i , as indicated in FIG. 3 by double arrows. The status information S _i - available to the processor 21 during operation - holds the following information regarding the optional functions F _i :

1. a) information about whether one of the optional functions F _{i is} activated;
2. b) if the function F _{i is} activated: information about whether this function should be deactivated and if so, under what conditions or at what time;
3. c) optionally further parameters that serve a specification of the functions F _i .

The above points a) -c) are explained by way of example with reference to an optional function "individual disabled mode". If this disabled mode is activated, then in the operation of the elevator installation 1 it is provided that a disabled person can get acquainted with the elevator control 20.1 or 20.2 (according to any method implemented in the elevator control), with the result that all Doors which the disabled person has to pass through when using the elevator installation shall remain open for a period of time longer than a predetermined standard value and appropriate for the disabled person. In the present case, the status information S _i , which is assigned to this optional function "individual disabled mode" and is stored in the memory 35 when the elevator control 20.1 or 20.2 is configured, could, for example, have the following content: With regard to point a), that the optional function "individual disabled mode" is activated, that is, after the configuration is to be available during operation of the elevator installation 1; With regard to point b), for example, it is stipulated that this optional function is deactivated after a certain period of time following the configuration of the elevator control 20.1 or 20.2 and thus should no longer be available during operation of the elevator installation 1; With regard to point c), for example, a list of disabled persons who are to be identifiable by the elevator control and, for each identifiable person, a value for the respective duration of a door opening is stored.

1. (i) eine Funktion "Erfassung und/oder Diagnose von Betriebsdaten"
   (diese Funktion kann eine Erfassung und Diagnose von Betriebsdaten umfassen, die einen Zusatznutzen bringen gegenüber Betriebsdaten, die aufgrund gesetzlicher Bestimmungen bzw. Normen ohnehin von jeder Aufzugssteuerung aufbereitet werden müssen; beispielsweise kann diese Funktion als eine Option eine Erfassung aller Schaltvorgänge elektrischer Komponenten, eine statistische Diagnose dieser Schaltvorgänge und eine Speicherung von Ergebnissen dieser Diagnose o. ä. umfassen),
2. (ii) eine Funktion "Erfassung und/oder Verarbeitung von Wartungsdaten"
   (diese Funktion kann beispielsweise Daten über die Betriebsdauer einzelner Komponenten ermitteln, den Zeitpunkt der letzten Wartung für ausgewählte Komponenten ermitteln und Warnhinweise im Hinblick auf eine fällige Wartung liefern),
3. (iii) eine Funktion "Erstellung eines Fehlerprotokolls"
   (diese Funktion kann beispielsweise auftretende Fehler im Betrieb der Aufzugsanlage feststellen und für jeden Fehler einen Fehlercode ermitteln, der eine detaillierte Analyse der Ursachen für das Auftreten des Fehlers ermöglicht; zusätzlich können Fehlercode über einen bestimmten Zeitraum gespeichert werden und verschiedene Fehler in eine Korrelation miteinander gebracht werden),
4. (iv) eine Funktion "Freigabe einer Kommunikationsschnittstelle für eine Datenkommunikation mit der Aufzugssteuerung",
5. (v) eine Funktion "automatische An-/Abschaltung einer Beleuchtung einer Aufzugskabine"
   (diese Funktion erlaubt eine Steuerung einer Beleuchtung in einer Kabine in Abhängigkeit von der Anwesenheit von Personen),
6. (vi) eine Funktion "automatische An-/Abschaltung einer Beleuchtung auf einem Stockwerk"
   (diese Funktion erlaubt eine Steuerung einer Beleuchtung auf einem Stockwerk in Abhängigkeit von der Anwesenheit von Personen),
7. (vii) eine Funktion "Steuerung einer Vorrichtung zur akustischen und/oder visuellen Wiedergabe von Informationen",
8. (viii) eine Funktion "Steuerung einer Vorrichtung zur Darbietung von Multimedia-Inhalten",
9. (ix) eine Funktion "Überwachung eines Innenraums einer Kabine",
10. (x) eine Funktion "Überwachung eines Vorraums an einer Stockwerkstür",
11. (xi) eine Funktion "Anzeige einer Position einer Kabine auf vorbestimmten Stockwerken",
12. (xii) eine Funktion "automatische Rückkehr einer Kabine auf ein vorbestimmtes Stockwerk",
13. (xiii) eine Funktion vorzeitiges Öffnen von Kabinen- und/oder Stockwerkstüren vor einem Anhalten einer Kabine auf einem Stockwerk,"
14. (xiv) eine Funktion "Erkennen von missbräuchlichen Kabinenrufen",
15. (xv) eine Funktion "Gruppensteuerung für eine Gruppe von Aufzügen".

As further optional functions which can be activated during a configuration and can be deactivated at a later time, for example:

1. (i) a function "acquisition and / or diagnosis of operating data"
   (This function may include acquisition and diagnosis of operating data that adds value to operating data that is required to be processed by each elevator control anyway, for example this function may include, as an option, detection of all electrical component switching, a statistical one Diagnosis of these switching operations and storage of results of this diagnosis o. Ä. Include),
2. (ii) a function "collection and / or processing of maintenance data"
   (This function can, for example, determine data on the operating time of individual components, the time of the last maintenance for selected ones Identify components and provide warnings for due maintenance),
3. (iii) an "error log generation" function
   (This feature can detect, for example, faults occurring in the operation of the elevator installation and determine for each fault an error code that allows a detailed analysis of the causes of the fault, in addition to storing fault codes over a period of time and correlating various faults become),
4. (iv) a function "enabling a communication interface for data communication with the elevator control",
5. (v) a function "automatic activation / deactivation of a lighting of an elevator car"
   (this function allows control of lighting in a cabin depending on the presence of people),
6. (vi) an "automatic on / off lighting function on a floor" function
   (this function allows control of lighting on a floor depending on the presence of people),
7. (vii) a function "controlling an apparatus for acoustically and / or visually reproducing information",
8. (viii) a function "controlling a multimedia content presentation device",
9. (ix) a function "monitoring an interior of a car",
10. (x) a function "monitoring an anteroom on a landing door",
11. (xi) a function of "displaying a position of a car on predetermined floors",
12. (xii) a function "automatic return of a cabin to a predetermined floor",
13. (xiii) a function of premature opening of cabin and / or landing doors prior to stopping a car on a floor, "
14. (xiv) a function "detection of abusive car calls",
15. (xv) a function "group control for a group of elevators".

In the following, a method for configuring the elevator control 20.1 or 20.2 will be explained.

A configuration of the elevator control 20.1 or 20.2 can be made by transmitting an activation information Al to the elevator control 20.1 or 20.2 (see FIG. 2). The activation information A1 consists of a sequence of signals which can be transmitted via the communication connection 40.1 and the interface 40 or via the communication connection 49.1 and the interface 49 to the processor 21 and evaluated by the processor 21.

For the transmission of the activation information A1, the communication connection 40.1 or 49.1 and the interface 40 or 49, there are a multiplicity of suitable implementation possibilities on the basis of known technologies. The invention is not limited to a specific realization possibility.

The activation information Al may for example consist of digital data or analog signals. As communication link 40.1 or 49.1, each means for transmitting the data or signals is suitable. Accordingly, any means which makes the data or signals accessible to the processor 21 in a form suitable for further processing is suitable as the interface 40 or 49. The communication connection 40.1 or 49.1 can be based, for example, on the transmission of electrical or optical signals, wherein the transmission of the signals via lines or not tied to lines (wireless) can be done. For the Generating the activation information A1 is suitable for a variety of technical means. The activation information Al can be generated by means of a keyboard which is connected to the interface 40, for example by means of a keyboard which forms an integral part of the controller 20.1 or 20.2. Alternatively, the activation information could also be generated with a mobile computer and transmitted to the interface 40. As a further alternative, it would be conceivable to generate the activation information A1 at a remote location, for example in a service center or the service and / or maintenance center 50, and to transmit it to the processor 21 for further processing. It is also possible that the activation information is presented in the form of data stored on a data carrier and the data must be read from the data carrier (for example a memory card with a memory chip). In this case, the interface 40 may also be designed as a device for reading the data.

• falls die Aktivierungsinformation Al verschlüsselt ist: eine entsprechende Entschlüsselung,
• eine Überprüfung der Aktivierungsinformation Al auf Gültigkeit nach einem vorgegebenen Kriterium und
• falls der Schritt "Überprüfung der Aktivierungsinformation Al auf Gültigkeit" ergibt, dass die Aktivierungsinformation dem vorgegebenen Kriterium genügt: eine Umsetzung der Aktivierungsinformation Al in Daten, die zur Konfigurierung der Aufzugssteuerung 20.1 bzw. 20.2 benötigt werden.

An activation information A1 transmitted to the processor 21 is evaluated by the processor 21 according to an evaluation criterion with an evaluation program which is stored in the memory 45. The evaluation includes:

• if the activation information Al is encrypted: a corresponding decryption,
• a check of the activation information Al validity according to a predetermined criterion and
• if the step "checking the activation information Al for validity" shows that the activation information meets the predetermined criterion: a conversion of the activation information Al into data that are required for the configuration of the elevator control 20.1 or 20.2.

The step "checking the activation information Al for validity" allows the processor 21 to check whether a configuration of the elevator control 20.1 or 20.2 and an activation of the optional functions F _{n + 1} to F _{n + m should be} made or prevented. Details of such a check will be explained below.

It is assumed that an activation information A1 evaluated as valid by the processor 21 is composed of three components Al ₁ , Al ₂ and Al ₃ , as indicated in FIG. 4.

If the activation information Al consists, for example, of a sequence of digital data, then Al could consist of three consecutive data sets, one of which each represents Al ₁ , Al ₂ or Al ₃ . It is an object of the processor 21 to suitably evaluate the activation information Al and to separate the components Al ₁ , Al ₂ and Al ₃ .

• Der Bestandteil Al₁ enthält Daten bzw. einen Code zur Identifikation der Aufzugssteuerung, die konfiguriert werden soll. Die Aktivierungsinformation wird als ungültig erkannt, wenn diese Daten bzw. dieser Code nicht übereinstimmen bzw. nicht übereinstimmt mit entsprechenden Daten bzw. einem entsprechenden Code für die vorliegende Aufzugssteuerung 20.1 bzw. 20.2;
• Der Bestandteil Al₂ enthält Daten bzw. einen Code für eine Überprüfung, ob die Übermittlung der Aktivierungsinformation Al von Unbefugten veranlasst wurde, d.h. einen offensichtlichen Missbrauch darstellt. Al wird vom Auswerteprogramm nur dann als gültig klassifiziert, wenn Al₂ mindestens eine oder mehrere der folgenden Bedingungen (i)-(ii) erfüllt: (i) Al₂ enthält eine dem Auswerteprogramm bekannte Kennzeichnung einer Person, die zur Übermittlung einer Aktivierungsinformation befugt sein soll und/oder (ii) Al₂ enthält eine dem Auswerteprogramm bekannte Kennzeichnung eines Vertrages, der das Recht zubilligt, eine Konfigurierung der Aufzugssteuerung 20.1 bzw. 20.2 vorzunehmen und/oder (iii) Al₂ enthält eine gültige Übermittlungsidentifikation, d.h. eine Kennzeichnung, die nur für eine einzige Übermittlung oder endlich viele Übermittlungen einer Aktivierungsinformation Al an den Prozessor 21 identisch ist. Die jeweils gültige Übermittlungsidentifikation gemäss Punkt (iii) kann nach einem vorgegebenen Verfahren unter Kontrolle des Prozessors 21 bzw. des Auswerteprogramms verändert werden, beispielsweise in Anschluss an eine erfolgreich abgeschlossene Konfigurierung. Die Übermittlungsidentifikation kann beispielsweise eine Folge von mehreren Zeichen sein. Das Auswerteprogramm überprüft die übermittelte Aktivierungsinformation Al anhand der Punkte (i)-(iii) und klassifiziert Al - abhängig von einem Ergebnis der Überprüfung - als gültig bzw. ungültig.
• Der Bestandteil Al₃ enthält Daten, die eine Aktivierung und/oder Deaktivierung der optionalen Funktionen F_n+1 bis F_n+m festlegen. Al₃ umfasst die Information, welche der optionalen Funktionen F_n+1 bis F_n+m bei der Konfigurierung aktiviert werden sollen, und die Information, unter welchen Bedingungen eine der aktivierten optionalen Funktionen zu einem späteren Zeitpunkt deaktiviert werden soll. Die Aktivierungsinformation Al wird als gültig angesehen, wenn Al₃ die zu aktivierenden optionalen Funktionen eindeutig spezifiziert.

Activation information A1 is checked for validity by means of the evaluation program as follows:

• The component Al ₁ contains data or a code for identifying the elevator control to be configured. The activation information is recognized as invalid if this data or this code does not match or does not agree with corresponding data or a corresponding code for the present elevator control 20.1 or 20.2;
• The component Al ₂ contains data or a code for a check as to whether the transmission of the activation information Al was initiated by unauthorized persons, ie represents obvious abuse. Al is classified by the evaluation program as valid only if Al ₂ fulfills at least one or more of the following conditions (i) - (ii): (i) Al ₂ contains an identification of a person known to the evaluation program who is authorized to transmit activation information should and / or (ii) Al ₂ contains a program known to the evaluation of a contract that grants the right to make a configuration of the elevator controls 20.1 and 20.2 and / or (iii) Al ₂ contains a valid transmission identification, ie a label that only for a single transmission or finally many transmissions of an activation information Al to the processor 21 is identical. The respectively valid transmission identification according to item (iii) can be changed according to a predetermined method under the control of the processor 21 or of the evaluation program, for example following a successfully completed configuration. For example, the delivery identification may be a sequence of multiple characters. The evaluation program checks the transmitted activation information A1 based on the items (i) - (iii) and classifies Al as valid or invalid depending on a result of the check.
• The component Al ₃ contains data that specify an activation and / or deactivation of the optional functions F _{n + 1} to F _{n + m} . Al ₃ includes the information as to which of the optional functions F _{n + 1} to F _{n + m} should be activated during configuration and the information under which conditions one of the activated optional functions should be deactivated at a later time. The activation information Al is considered valid if Al ₃ uniquely specifies the optional functions to be activated.

• Eine gültige Aktivierungsinformation Al wird an den Prozessor 21 übermittelt.
• Nach einer Verifikation der Gültigkeit der Aktivierungsinformation Al nach dem oben beschriebenen Verfahren werden aus der Gruppe der optionalen Funktionen F_n+1 bis F_n+m diejenigen Funktionen ermittelt, die gemäss dem Bestandteil Al₃ aktiviert werden sollen. Die entsprechenden Statusinformationen S_n+1 bis S_n+m werden vom Prozessor 21 bestimmt und im Speicher 35 abgelegt.

A configuration of the elevator control 1.1 or 1.2 can be made according to the following steps:

• A valid activation information Al is transmitted to the processor 21.
• After a verification of the validity of the activation information A1 according to the method described above, those functions are determined from the group of optional functions F _{n + 1} to F _{n + m} that are to be activated according to the component Al ₃ . The corresponding status information S _{n + 1} to S _{n + m} are determined by the processor 21 and stored in memory 35.

After a configuration of the elevator controls 20.1 or 20.2, an operation of the elevator installation 1 can be recorded.

During operation of the elevator installation 1, the elevator 1.1 is controlled according to a program P1, which is stored in the memory 27 of the elevator control 20.1. Accordingly, the elevator 1.2 is controlled according to a program P2, which is stored in the memory 27 of the elevator control 20.2. The programs P1 and P2 have access to the memory 35 of the respective elevator control 20.1 or 20.2 and in particular to the status information S _{n + 1} to S _{n + m} . The status information S _{n + 1} to S _{n + m} provide the program P1 or P2 with the information as to which of the optional functions F _{n + 1} to F _{n + m} - in addition to the standard functions F ₁ to F _n in operation for controlling the elevators 1.1 or 1.2 are available. The status information S _{n + 1} to S _{n + m} provide the program P1 or P2 - if necessary - in addition to each activated optional function F _i (i> n) further parameters that are specific to the operation of the elevator 1.1 or 1.2 and to a determination of all control steps that includes the function F _i needed. On the basis of the status information S _{n + 1} to S _{n + m} , the program has P1 or P2 Access to the optional functions F _{n + 1} to F _{n + m} and can use these - as long as they are activated - in operation to control the elevator 1.1 or 1.2.

If the optional function "group control function for a group of elevators" (above function under (xv)) is activated, then this optional function in operation ensures a coordinated sequence of programs P1 and P2 for controlling elevators 1.1 and 1.2.

The processor 21 of the elevator control 20.1 controls in operation the status information S _{n + 1} to S _{n + m} , which are stored in the memory 35 of the elevator control 20.1, and determines from the status information whether one of the status information S _{n + 1} to S _{n + m} conditions for deactivating one of the activated optional functions is met. If the time for a deactivation of F _{i has} come for an activated optional function F _i (i> n) according to the corresponding status information S _i , then the optional function F _{i is} deactivated. For this purpose, the status information S _{i is} suitably changed, for example, deleted in the memory 35 of the elevator control 20.1. From now on, the deactivation of the optional function F _{i is} effective for the program P1: F _i is no longer available for the elevator control 20.1 in operation for controlling the elevator 1.1. Accordingly, the processor 21 and the memory 35 together form a device which initiates automatic deactivation of the optional function F _i .

Accordingly, the processor 21 controls the elevator controller 20.2 in operation the status information S _{n + 1} to S _{n + m} , which are stored in the memory 35 of the elevator control 20.2, and determines whether one of the in the status information S _{n + 1} to S _{n + m} specified conditions for deactivating one of the activated optional functions. If the time for a deactivation of F _{i has} come for an activated optional function F _i (i> n) according to the corresponding status information S _i , then the optional function F _{i is} deactivated. For this purpose, the status information S _{i is} suitably changed, for example, deleted in the memory 35 of the elevator control 20.2. From now on, the deactivation of the optional function F _{i is} effective for the program P2: F _i is no longer available for the elevator control 20. 2 in operation for controlling the elevator 1.2. Accordingly, the processor 21 and the memory 35 together form a device which initiates automatic deactivation of the optional function F _i .

In order to determine the time for a deactivation of an optional function F _k (k> n), the processor 21 of the elevator control 20.1 or 20.2 can each execute different types of controls. The status information S _k can specify, for example, that a deactivation of F _k should take place after a predetermined period of time. For certain optional functions, however, it may be decisive for a deactivation of how frequently a specific event has occurred during the operation of the elevators 1.1 or 1.2. In this case, the status information S _k includes information about which event must be monitored by the processor 21 and how often the event may occur before the function is automatically deactivated. In this case, the processor determines a frequency of the event so predetermined and causes the deactivation of F _k when the frequency of the event reaches a predetermined level. An example of the latter case is the optional function "premature opening of cabin and / or landing doors before stopping a car on a floor" (above function under (xiii)). This function accelerates the operation as the doors already opened a defined period of time before stopping a car on a floor and thus a prerequisite is created that a waiting time of the cabin is reduced on the floor. Activation of this function, however, involves risks if the doors show signs of wear and tear after frequent use and the optional function "premature opening of cab and / or landing doors before stopping a car on a floor" can no longer be carried out with the necessary precision. In this case, it can be provided that the processor 21 determines the number of door openings executed in operation and deactivates the function "premature opening of cabin and / or landing doors" when the number reaches a predetermined level. The doors are then operated according to a standard function "normal opening of cabin and / or landing doors". Here, the doors are opened only when the cabin has come to a halt on a floor. By this measure, only the operation of the elevator is slowed down.

As an additional service, it is provided that the elevator control 20.1 or 20.2 provides at least an indication of an imminent deactivation of an optional function. An imminence of a deactivation can be displayed in good time on an information display of the elevator control 20.1 or 20.2. Alternatively, such a message is transmitted to a service center 50. In order to enable such a transmission, the interface 49 is provided, which for a Communication with the service and / or maintenance center 50 is prepared via the communication link 49.1.

An activation of an optional function can be repeated at a later time. For this purpose, an activation information Al can again be transmitted via the interface 40 to the processor 21 of the elevator control 20.1 or 20.2. Then a renewed configuration of the elevator control 20.1 or 20.2 takes place in accordance with this activation information A1. It is important to note that the evaluation program may require a modified transmission identification in the component Al _{2 of} the activation information to accept the activation information Al as valid, even if the remaining parts of the activation information match with a corresponding activation information that already at an earlier time was successfully used for a configuration of the elevator control 20.1 or 20.2. In this way, the risk is reduced that certain activation information can be repeatedly used by unauthorized persons to configure the elevator controls 20.1 or 20.2 and thus to reactivate a previously deactivated optional function.

If, after the activation of an optional function F _i, the wish exists to change the criterion for deactivating the function F _i , for example in order to extend or shorten the period in which the function F _{i is} activated, then the criterion for the deactivation of the function F _{i be} suitably adapted by a renewed transmission of an activation information Al. The status information S _i for the function F _i is then changed accordingly in the memory 35. The processor 21 then causes a deactivation of F _i according to the changed status information S _i .

Of course, the methods and devices described may be modified in many ways within the scope of the invention.

For example, the memories 26, 27, 31, 35 and 45 need not necessarily be implemented on separate storage media. The data associated with the mentioned memories can also occupy areas on a single storage medium or several suitable storage media (eg hard disks, EPROM, etc.) and be managed by the processor 21 on the respective storage medium.

The activation and deactivation of the optional functions F _{n + 1} to F _{n + m} can also be carried out by alternative methods. For example, an optional function F _i may be implemented in the form of a program module, which is stored, for example, in the memory 31. For activating the function F _i , for example, a program code could be loaded into another memory area, for example into the memory 27, and linked to the program P1 or P2 stored in the memory 27 in such a way that the program code for the program P1 or P2 for the program P1 or P2 Control of the elevator 1.1 or 1.2 is available. To deactivate the optional function F _i , the link between the program code and the program P 1 or P 2 could be canceled and, if appropriate, the program code in the memory 27 could additionally be deleted again. Subsequently, the program code is no longer available for the program P1 or P2 in operation for controlling.

The elevator control 20.1 or 20.2 in the present case has a processor 21 which controls a plurality of processes. Alternatively, the elevator control 20.1 or 20.2 could be equipped with multiple processors. For example, a first processor could be provided which evaluates incoming activation information and controls the activation or deactivation of the optional functions. This processor would therefore control the configuration of the elevator control 20.1 or 20.2. A second processor could be solely responsible for the control of the elevator 1.1 or 1.2 in operation. It could control the operation of the P1 or P2 program and have access to all standard functions and optional functions currently enabled to operate the elevator to accomplish this task.

In order to realize a group control for several elevators of an elevator installation, a third processor could be optionally provided which is specialized in the control of group control processes. While each elevator of the elevator installation may have its own elevator control, the third processor may distribute the entire traffic volume of the elevator installation to the individual elevators according to a suitable procedure and for this purpose communicate with the elevator controls of the individual elevators, to coordinate the elevator controls of the individual elevators Elevators to achieve controlled processes.

Furthermore, it could be provided that the elevator control 20.1 or 20.2 could be connected to a device which is an implementation of additional optional Functions for controlling an elevator includes. Individual of these additional optional functions could be activated in a further configuration of the elevator control 20.1 or 20.1. In this way, the functional scope of the elevator control 20.1 or 20.2 can be subsequently expanded. Such a device could also be integrated into the elevator control (for example in the form of a plug-in card and / or a memory card) or connected to the elevator control 20.1 or 20.2 via a suitable communication interface such that the additional optional functions for the elevator control 20.1 or 20.2 are accessible.

In the above cases, the device containing the additional optional functions and the elevator control 20.1. or 20.2 be designed such that the device only has to be connected to the elevator control 20.1 or 20.2 via a suitable interface and the elevator control then automatically detects the connection with the device, for example during operation of the elevator system or after switching on the elevator control. The elevator control 20.1 or 20.2 can be designed so that it automatically recognizes the change made in this way the configuration of the elevator control - for example, according to the "plug-in-and-play" principle known from computer technology - and automatically a new configuration of the Elevator control in which the additional optional functions are activated, ie be made available for the control of the elevator system during operation. The above-mentioned device can - for example in a memory - hold activation information that can be evaluated by the elevator control and includes all the necessary information needed to activate the additional optional functions (for example, with regard to an identification of the optional ones to be activated Functions and the respective time of activation or deactivation of the optional functions). Alternatively it can be provided that the above-mentioned device itself contains a control device which can provide for a deactivation of the optional functions implemented in the device according to a predetermined criterion (for the purposes of the present invention).

Fig. 3 specifies an activation information Al with three components Al ₁ , Al ₂ and Al ₃ . It should be noted that such specified activation information is merely a specific example of activation information. The components Al ₁ and Al ₂ contain no information about the optional functions that are to be activated or deactivated, and only form special security features, the one improper use of the activation information Al. The invention can also be carried out without such security features.

Claims (14)

1. Method of operating a lift installation (1), which has a lift control (20.1, 20.2) with a plurality of functions (F₁,.., F_n, F_n+1...., F_n+m) for controlling the lift installation, wherein the plurality of functions (F₁,..., F_n+m) comprises:

   at least one optional function (F_n+1,..., F_n+m), which is activatable at the time of configuring the lift control (20.1, 20.2) and can be made available by an activation for control during the operation of the lift installation, which method comprises activation of the optional function (F_n+1,..., F_n+m), characterised in that after activation a deactivation of the optional function (F_n+1,..., F_n+m) takes place automatically, wherein the optional function after deactivation is no longer available for control of the lift installation (1) in operation.
2. Method according to claim 1, characterised in that an activation information is communicated by way of an interface (40, 41) of the lift control (20.1, 20.2) and the activation of the optional function (F_n+1,..., F_n+m) is arranged to be carried out if the activation information fulfils a first criterion.
3. Method according to claim 2, characterised in that the activation information comprises a code and the code is checked with respect to validity.
4. Method according to claim 2, characterised in that the activation information comprises data stored on a data carrier and the data are read and investigated with respect to validity.
5. Method according to one of claims 1 to 4, characterised in that the instant in time of deactivation by the lift control (20.1, 20.2) is instigated in accordance with a second criterion.
6. Method according to claim 5, characterised in that the deactivation of the optional function (F_n+1,..., F_n+m) is instigated after expiry of a predetermined time period and/or a frequency of a predetermined event is ascertained and deactivation of the optional function (F_n+1,..., F_n+m) is instigated when the frequency of the event reaches a predetermined degree and/or the second criterion s variable during operation of the lift installation (1).
7. Method according to one of claims 1 to 6, characterised in that the lift control (20.1, 20.2) delivers at least one reference to imminent deactivation and/or a reference to imminent deactivation is communicated to a service and/or maintenance centre (50).
8. Method according to claim 2, characterised in that activation of the optional function (F_n+1,.., F_n+m) is undertaken a first time and subsequently the first criterion is modified in such a manner that the activation is not undertaken a further time if the same activation information is communicated by way of the interface (40) of the lift control (20.1, 20.2).
9. Method according to one of claims 1 to 8, characterised in that the optional function (F_n+1,..., F_n+m) comprises:

   - detection and/or diagnosis of operational data

   - and/or detection and/or processing of maintenance data

   - and/or creation of a fault log

   - and/or freeing of a communications interface (38, 49) for a data communication with the lift control (20.1, 20.2)

   - and/or automatic switching-on/switching-off lighting of a lift cage (5.1, 5.2)

   - and/or automatic switching-on/switching-off lighting at a storey (3.1, .., 3.6)

   - and/or control of a device for acoustic and/or visual reproduction of information

   - and/or control of a device for presenting multimedia material

   - and/or monitoring an interior space of a cage (5.1, 5.2)

   - and/or monitoring a lobby at a storey door (4)

   - and/or indication of a position of a cage (5.1, 5.2) at predetermined storeys (3.1, .., 3.6)

   - and/or automatic return of a cage (5.1, 5.2) to a predetermined storey (3.1,.., 3.6)

   - and/or early opening of cage and/or storey doors ahead of stopping of a cage (5.1, 5.2) at a storey (3.1, .., 3.6)

   - and/or recognition of improper cage calls

   - and/or a group control for a group of lifts (1.2, 1.2).
10. Lift control (20.1, 20.2), with a plurality of functions (F₁,.., F_n, F_n+1...., F_n+m) for controlling a lift installation, wherein the plurality of functions (F₁.., F_n, F_n+1,...., F_n+m) comprises:

    at least one optional function (F_n+1,...., F_n+m), which is activatable at the time of configuring the lift control (20.1, 20.2) and can be made available by an activation for control during operation of the lift installation (1), characterised in that the lift control (20.1, 20.2) comprises a device (21, 45) for automatic deactivation of the optional function (F_n+1,...., F-_n+m), wherein the deactivation is provided after the activation and the optional function (F_n+1,...., F_n+m) after the deactivation is no longer available for control during the operation of the lift installation (1).
11. Lift control according to claim 10, characterised in that the lift control (20.1, 20.2) comprises an interface (40, 49) by way of which activation information for control of the activation and/or the deactivation of the optional function (F_n+1,...., F_n+m) is communicable.
12. Lift control according to claim 11, characterised in that an evaluation of the activation information is provided and the activation and/or deactivation of the optional function (F_n+1,...., F_n+m) can be executed in dependence on a result of the evaluation and/or the activation information comprises a code, wherein a checking of the code with respect to validity in accordance with a predetermined criterion is provided.
13. Lift control according to one of claims 10 to 12, characterised in that a memory (35) for a status information (S_n+1,..., S_n+m) with respect to the activation or deactivation of the optional function (F_n+1,...., F_n+m) is provided.
14. Lift control according to one of claims 10 to 13, characterised in that for activation of the optional function (F_n+1,...., F_n+m) a program code can be loaded into a memory (27) and for deactivation of the optional function (F_n+1,...., F_n+m) the program code can be deleted in the memory.

Images