EP1598506A1 - Method for controlling an automatic escape route door - Google Patents

Abstract

The method involves designing a door (12) as an automatic door with a redundant drive (16) and redundant control. A parameter modification and/or activation of the door take place wirelessly, using a portable control device (1), in a sequential manner. Data transfer is controlled actively by control and/or drive units (2,3). The drive units make wireless communication with the device (1). Independent claims are also included for the following: (A) an automatic door for an escape/emergency route (B) a control program for the execution of a method for controlling an automatic door of an escape/emergency route.

Description

TECHNICAL AREA

The present invention relates to a method for controlling one over at least a door sealable escape and / or rescue, said at least one Door as automatic door with redundant drive and / or redundant control is designed. Furthermore, the present invention relates to a device for Implementation of this procedure and appropriate control programs.

STATE OF THE ART

Escape and emergency exit doors must of course be of very high standards in terms of their reliability, since their task and functionality are just then Significant to bear, if typically prevail conditions which normal operation may not be possible. Such doors can be used in normal operation either as conventional doors, which in Emergency special functionalities show, they can normally also always closed or always open, then at e.g. Automatic adjustment in the Emergency either automatically or manually opened, in one Escape mode can be opened or corresponding to another of the emergency situation Be brought state.

To reliably design such doors, they are typically used in both their control as well as designed in their drive redundant and independent. Specifically, this means that the drive is provided at least twice, i. H. it There are two motors and associated controls, each motor resp. the Controls by themselves are able to move the door. Farther Typically, the drives are powered by one independent from the grid Provide power supply, this being either in an accumulator or in can consist of another energy storage. In addition, the drive is two-channel design, d. H. Switch, which such a door from normal operation in allow a escape and escape route mode to switch, have separate and individual cable connections to the two independent ones Drive units / controllers. This is the only way to ensure that each one Drive unit or their control or other elements guaranteed after a switch in the desired mode and the redundancy actually is guaranteed.

PRESENTATION OF THE INVENTION

The invention is therefore based on the object, a simplified and improved To provide a method for controlling an escape and emergency exit door. Specifically, it is thus about a new method for controlling one over at least one Door sealable escape and / or rescue, said at least one door as automatic door designed with redundant drive and / or redundant control is.

The solution to this problem is achieved by a parameter change and / or driving the door wirelessly using a portable HMI device. The parameter change may be, for example, the Setting the escape and rescue mode act, as he for example in the Setting is set to "Automatic".

The essence of the invention is therefore that it is surprisingly possible also using wireless data transmission, i. e.g. under use a corresponding, in particular preferred portable control unit such a door to control. Normally, wired switches are used for such settings which uses each of the redundant drives via separate cable connections drive. The use of wireless data transfer not only increases the Comfort, for example, allows the use of already for Available devices as operating devices, such as wireless Communication interfaces equipped devices such. Mobile phones, personal electronic assistants (PDA) or similar be used as operator panels, provided they be authorized accordingly. Typically, in such doors the Redundancy of the drive via at least two independent control and / or Drive units guaranteed. In the present case is then preferred According to the invention, the communication with the control and / or Drive units via independent means for wireless communication with the HMI device (especially radio, such as Bluetooth components), and on the part of the HMI device only via a device (corresponding, for example also a Bluetooth components) for wireless communication. Because the redundancy actually only required by the door, and since it only needs to be ensured that each of the redundant elements of the door (for example, engine, lock, etc.) It is sufficient if these have received the correct instructions Elements have independent means of wireless communication. The Providence of also redundant communication means on the part of the HMI device is surprisingly not required. It is possible the redundancy of communication between the control and / or drive units and the HMI device is ensured by the parameter exchange respectively Control between the HMI device and the multiple control and / or Drive units sequentially using a protocol, which ensures that a parameter change only at the door or at Elements of the door is taken when in both of these sequential steps the same consistent information has been transmitted. Preferably takes over according to the HMI device a passive role, d. H. the active query takes place on the part the control and / or drive units, and the control unit is used to some extent only as an input and output device for the serial query of the two control and / or Drive units. Also identification e.g. via PIN and / or with respect to the device e.g. via a device-specific ID (e.g., Bluetooth ID) may be active from the control and / or Drive units made forth. So, so to speak, the two-channel equipment be avoided by the HMI device operates sequentially. This simplifies the design of the operator panel (more cost-effective and at the same time Space-saving design, as only one wireless communication interface must be provided). The wireless operation also reduces the Building interfaces, because instead of a corresponding switch now enters a portable Operating unit.

According to a preferred embodiment of the method is used for communication between the control and / or drive units of the door and the HMI device Protocol in which the HMI device is operated sequentially with each control and / or drive unit first establishes a connection from the user then requires at least one input, then possibly the appropriate commands respectively parameters to at least one control element (for example a Lock) the door passes, and finally the connection between the Operator unit and the control and / or drive unit is aborted. there the control takes the parameter only then respectively leads the given one Command only off if it is from all control and / or drive units has received the same consistent data, where appropriate, concluding Confirmation signal is given to the HMI device.

The method can be designed to be particularly reliable if it is used to control and / or Parameter change of the door by the user entering an identification code is queried. Furthermore, it proves to be advantageous, the control and / or Drive units of the door to program so that they only communicate with authorized operator panels.

Furthermore, the present invention relates to an automatic door for an escape and / or emergency route, in particular for carrying out a method as described above has been described. The door or the entire structure has at least two independent control and / or drive units and at least one portable HMI device for wireless parameter change and / or for wireless control of Door. For communication by the control and / or drive units are respectively independent means for wireless communication with the HMI device arranged, and on the part of the HMI device only a device for wireless communication with the control and / or drive units. Preferably, the door is at a sliding door with one or more sliding sashes. There can be two, for example independent control and / or drive units in a door top side be arranged limiting suspension unit, wherein each of the control and / or Drive units via a motor and means for wireless communication using the Bluetooth protocol, and the HMI device can only a wireless communication device using the Bluetooth protocol feature. As already mentioned, this can be so for example for this high Security requirements task a suitably equipped and authorized cellphone or personal electronic assistant (PDA) used, although a mobile phone resp. a personal electronic one Assistant (PDA) normally only has a Bluetooth interface.

Furthermore, the present invention relates to a control program for implementation a method as described above or for use with a door, as described above. In particular, it relates to a on a mobile phone or a personal electronic assistant (PDA) executable control program, which a mobile phone resp. a personal electronic assistant (PDA) assume the function of an operating device in the sense of the preceding claims leaves.

Further preferred embodiments of the present invention are in the dependent claims.

BRIEF EXPLANATION OF THE FIGURES

Fig. 1

eine schematische Darstellung einer Flucht- und Rettungswegtüre; und

Fig. 2

eine schematische Darstellung des Kommunikationsprotokolls zwischen den einzelnen Elementen der Flucht- und Rettungswegtüre.

The invention will be explained in more detail with reference to embodiments in conjunction with the drawings. Show it:

Fig. 1

a schematic representation of an escape and rescue door; and

Fig. 2

a schematic representation of the communication protocol between the individual elements of the escape and rescue door.

WAYS FOR CARRYING OUT THE INVENTION

Fig. 1 shows a schematic representation of an escape and rescue door 10, which is driven according to the invention. By way of example, this is a Sliding door, which on the one hand has fixed side parts 11, and on the other hand two sliding door elements 12. Above the door is a suspension and drive unit 13 arranged. It is a hollow profile in which both control as well as drive and suspension of the door are arranged. The individual door leaves 12 are moved over a toothed belt 17, on which the doors 12 via corresponding couplings 18 are connected. In the unit 13 are two independent control and drive units 2 and 3 arranged. They have from Mains independent power supply, for example via an accumulator. In addition, each of the units 2, 3 has a motor 16, as well as a Bluetooth chip (for example Mitsumi WML-10 BC02) with associated antenna 14. The two units 2 and 3 are connected to each other via a bus 19. It deals this is a CAN bus (Controller Area Network, twisted pair with cyclic redundancy code), which also serves, among other things, via heartbeat functions to control the two units 2 and 3 mutually. The use of a (CAN) Büssystems alone already gives a virtual redundancy in the controller. At the same bus 19 are connected to other units such as sensors, and, as shown in Fig. 1, for example, a lock 4th

On the other hand, a portable control unit 1 is provided, which for Control of the door 10 is provided. The HMI device 1 in turn comprises only about a Bluetooth interface, again with chip 8 and associated antenna 9. In addition, the operating unit 6 has a display panel 6 and input keys 7, via which the user 5 can make corresponding entries.

It is essential that the control of the two units 2 and 3 so to speak two-channel can be done by using a protocol (see. below) in a first step (I) the first unit 2 is instructed, and in one second, thereafter step (II) the second unit 3 is instructed. So can on a redundant design of the operating device can be dispensed with. This is possible because the proposed procedure all safety critical processes on the run redundant elements 2 and 3 separately. The query is actively carried out by the two units 2 and 3 off. The HMI device 1 usually takes over in the essential passive role. The HMI device 1 serves only as input and Output device. Accordingly, an accidental change, for example, from " Automat "on" night "due to a defective control unit are excluded. Moreover, since both units 2 and 3 are substantially independent of each other Make queries, dual channeling is guaranteed at all times. The Safety can be further increased by, if the whole process (cf. below Fig. 2) not within a certain time, for example 2 minutes, correctly is completed, the internal state of the two units 2 and 3 again is reset.

Fig. 2 now shows the protocol of the communication between the two units 2 and 3 and the HMI device 1. It is shown as a door of the setting "Automaton", d. H. normal sliding door operation, switched to the "night" setting shall be.

In a first step S1, the connection between the HMI device 1 and the first unit 2 constructed. It is a standard procedure acc. Bluetooth protocol, and the connection is only allowed if the unit 2 the device 1 has recognized as authorized (for example via the Bluetooth ID). In one next step S2, the first unit 2 transfers the door type (A) to the HMI device 1, and in a third step S3, the corresponding menu is transferred. The ones from User 5 default setting change to "night" is called command in step Pass S4 to unit 2. In addition to the authorization over the To ensure Bluetooth ID security, the next step is to enter S5 a PIN (code no. 1) requested by the unit 2.

At this moment appears on the display 6 of the HMI device 1, a display D1 of Type "" night mode, code no. 1: ____; Door A ". The user must now enter the code no. 1 (PIN, which may be person-specific and / or door-specific) (S6), and this is transferred to the unit 2 in the subsequent step S7. The Verification of the PIN does not take place on the HMI device 1, which further enhances security elevated.

Thus, there is a double security or authorization, both at the level Device as well as at user level, namely on the one hand, so that a device 1 can ever get in communication with units 2 or 3, respectively be registered (for example, the Bluetooth ID of the HMI device 1 must already be logged in), but it must also additionally the correct code no. (for example PIN).

Only now is in step S8 via the bus 19 to the lock 4 of the command " Interlock "but interlock 4 does not execute this command, but wait until it also from the second unit 3 a matching command within a given time. In the next step (S9) the confirms Unit 2 transmits the command "Lock" and usually hands over at the same time the address of the second unit 3, so that the subsequent Connection setup controlled and can be done quickly. Subsequently, the Connection to unit 2 aborted in step S10.

In an analogous manner, the second channel will then be used to some extent processed by the connection to the unit 3 is established in step S11. The Address of the unit 3 is already available, that is the connection establishment including authorization does not need so much time. In the following step S12 is then, as had already happened in the first unit 2 in step S4, the Change settings to "night" as command to unit 3. The unit 3 then requests a confirmation of this input in step S 13.

The two-channel respectively the guarantee of an explicit input of the Users for each channel (to 2 and to 3) is guaranteed so without the user recognizes this as such and has to transmit twice the same information. The first Channel is to some extent controlled by the user via step S6 (Enter PIN, authorization), and the second channel over the now requested Confirmation of the parameter change. For this purpose, the display of the operating device 1 the display D2 is displayed, which for example reads: "night mode for sure? ; Door A ". The user then gives his ok in step S 14 this parameter change, and the confirmation of the command "night" in step Pass S 15 to the unit 3. The unit 3 in turn transmits the step S16 the "Night" setting corresponding command "lock" to the lock 4 further. Only now, after the lock 4 of both units 2 and 3 this Command received, this lock is performed in step S 17.

As a safeguard, the action "locking" is now sent to the unit 3 in step S18 confirmed (equally to the unit 2, so that they are also on the effective completed status change is informed and the value after expiry of a predetermined Time not reset), and this gives this confirmation in step S19 to the HMI device 1 on.

Accordingly, a display D3 is visible, which for example reads: " Night mode activated! Door A ", then the connection to unit 3 in Step S20 aborted. In order to be ready for new tasks, will be in the Subsequent steps S21 to S23 turn the connection with the unit. 2 built up.

The described scheme shows that even if one of the elements 1, 2 or 3 is not works correctly, no unintentional conversion can be made, and that at the same time a complete redundancy respectively dual channeling through the sequential instruction of units 2 and 3 is ensured. For example, at the simultaneous use of the Bluetooth protocol and therefore security debilitating communication with both elements 2 and 3 as a result of the missing Broadcast capability of this protocol is not possible, the reliability of this Guaranteed at the lowest level.

LIST OF REFERENCE NUMBERS

1

control unit

2

first control and drive unit

3

second control and drive unit

4

locking unit

5

user

6

display

7

Input fields, input keys

8th

Bluetooth chip of 1

9

Antenna of 1

10

Sliding door, escape and rescue route

11

solid side parts

12

sliding elements

13

Suspension and drive unit

14

antenna

15

Bluetooth chip

16

engine

17

toothed belt

18

Coupling from 12 to 17

19

CAN bus between 2, 3, and 4

commands:

S1

Connection to 2

S2

Transfer door type A

S3

Handover menu

S4

Command: "night"

S5

Command Prompt: "Code # 1"

S6

Input: "Code No. 1"

S7

Handover: "Code No. 1"

S8

Command: "Lock"

S9

Confirmation: "Code ok"; Handover address from 3

S 10

Disconnect to 2

S11

Connection to 3

S 12

Command: "night"

S 13

Confirmation prompt: "night"

S 14

Input: "ok"

S 15

Confirmation: "Night setting"

S 16

Command: "Lock"

S 17

Action in 4: "Lock"

S 18

Confirmation: "Locked"

S 19

Confirmation: "locked" (option)

S20

Disconnect to 3

S21

Connection to 2

S22

Handover door type

S23

Handover menu

displays

D1

"Night Mode, Code # 1: __
Door A ""

D2

"Night mode, are you sure?
Door A "

D3

"Night mode activated!
Door A "

Claims (17)

Method for controlling an escape and / or escape route (10) which can be closed by at least one door (12), wherein the at least one door (12) is configured as an automatic door with redundant drive (16) and / or redundant control,
characterized in that
a parameter change and / or an activation of the door (12) takes place wirelessly using a portable control device (1). A method according to claim 1, characterized in that the redundancy of the drive via at least two independent control and / or drive units (2, 3, 14-16) is ensured. A method according to claim 2, characterized in that the communication with the control and / or drive units (2,3) via independent means (14,15) for wireless communication with the operating device (1), and on the part of the operating device (1) only via a device for wireless communication. A method according to claim 3, characterized in that redundancy of the communication between the control and / or drive units (2,3) and the operating device (1) is ensured by the parameter exchange respectively the control between the operating device (1) and the plurality of control - And / or drive units (2,3) is made sequentially. A method according to claim 3 or 4, characterized in that a parameter change and / or a control of the at least one door (12) or controls (4) of the door (12) is only made when a sequential and substantially independent data transfer between the control unit (1) and each of the control and / or drive units (2,3) is carried out, wherein the data transfer is actively controlled by at least one of the two control and / or drive units (2,3). Method according to Claim 5, characterized in that the control elements (4) of the door (12) only accept or execute a parameter change and / or an action if they are consistent commands from all redundant control and / or drive units (2, 3) have received. Method according to one of the preceding claims, characterized in that the wireless communication between the operating device (1) and the drive and / or the control of the door (12) via radio, wherein preferably the Bluetooth standard is used. Method according to one of the preceding claims, characterized in that for communication between the control and / or drive units (2,3) of the door (12) and the operating device (1) a protocol is used, in which the operating device (1) sequentially each with each control and / or drive unit (2,3) initially establishes a connection, then the user (5) then requires at least one input, then possibly the corresponding commands or parameters to at least one control element (4) of the door (12) transfers, and finally the connection between the operating unit (1) and the control and / or drive unit (2,3) is aborted, and the control (4) takes over the parameter only respectively the executed command executes only if it from all control and / or drive units (2, 3) have received the same consistent data, wherein finally an acknowledgment signal is given to the operating device (1). Method according to one of the preceding claims, characterized in that the activation and / or parameter change of the door (12) by the user, the input of an identification code is queried. Method according to one of the preceding claims, characterized in that the communication between control and / or drive units (2,3) respectively control elements (4) of the door (12) via data bus systems, in particular via CAN bus systems. Method according to one of the preceding claims, characterized in that the control and / or drive units (2,3) of the door (12) only allow communication with authorized operating devices (1). Method according to one of the preceding claims, characterized in that the operating device (1) is a portable interactive operating device with a device for wireless communication, in particular with a Bluetooth interface, wherein the operating device is preferably a suitably equipped mobile phone or a suitably equipped personal electronic assistant (PDA). Automatic door (12) for an escape and / or rescue route (10), in particular for carrying out a method according to one of previous claims, with at least two independent control and / or Drive units (2, 3, 14-16) and with at least one portable operating device (1) for wireless parameter change and / or wireless control of Door (12), wherein for communication by control and / or drive units (2,3) each independent means (14,15) for wireless communication with the control unit (1) are arranged, and on the part of the HMI device (1) only one Device for wireless communication with the control and / or Drive units (2,3). Door (12) according to claim 13, characterized in that it is a sliding door. Door (12) according to any one of claims 13 or 14, characterized in that two independent control and / or drive units (2,3) in a door (12) top limiting suspension unit (13) are arranged, each via a motor (16) and means (14, 15) for wireless communication using the Bluetooth protocol, and that the operating device (1) has only one device for wireless communication using the Bluetooth protocol. Door (12) according to any one of claims 13-15, characterized in that the operating device (1) has both means for input (7) and means for output (6). Control program for carrying out a method according to one of the claims 1-12, on a device, such as a mobile phone or a mobile phone personal electronic assistant (PDA), executable control program, which the device, e.g. a mobile phone or a personal electronic Assistant (PDA), the function of an HMI device (1) in the sense of previous claims assume.

Images