EP2108608A1 - Elektronisches Sicherheitssystem für Aufzüge - Google Patents
Elektronisches Sicherheitssystem für Aufzüge Download PDFInfo
- Publication number
- EP2108608A1 EP2108608A1 EP08154428A EP08154428A EP2108608A1 EP 2108608 A1 EP2108608 A1 EP 2108608A1 EP 08154428 A EP08154428 A EP 08154428A EP 08154428 A EP08154428 A EP 08154428A EP 2108608 A1 EP2108608 A1 EP 2108608A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- safety
- bus
- controller
- elevator
- nodes
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B1/00—Control systems of elevators in general
- B66B1/34—Details, e.g. call counting devices, data transmission from car to control system, devices giving information to the control system
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B1/00—Control systems of elevators in general
- B66B1/34—Details, e.g. call counting devices, data transmission from car to control system, devices giving information to the control system
- B66B1/3415—Control system configuration and the data transmission or communication within the control system
Definitions
- the present invention relates to an elevator safety system and a method for supervising the safety of an elevator which simplify the architecture of the travelling cable concerning the transmission of safety signals.
- safety chain is a serial circuit comprised of switches and contacts.
- the switches and contacts are operated by safety devices of the elevator system such as the overspeed governor and the limit switch of the car and the switches and locks of the landing doors.
- the safety chain operates relays that handle power to the motor and the brake of the elevator. A safety operation of any contact within the serial circuit will disconnect the motor or drive from the main power supply to stop the car.
- a safety chain formed by a serial circuit of contacts and switches has been replaced by a safety chain comprising a safety bus connecting a plurality of bus nodes to an electronic safety controller.
- Each of the bus nodes receives data from a sensor detecting a safety condition of the elevator system.
- the controller controls the drive and brake system of the elevator.
- Such an electronic safety system for an elevator is disclosed e.g. in US 6,173,814 B1 .
- the safety chain of an elevator comprises a safety bus spanning the car and the shaft over the travelling cable connected to the car.
- the elevator safety system of the invention comprises a controller for controlling a safety mechanism of an elevator, a safety bus connected to the controller, and a plurality of strings of safety contacts in communication with the safety bus via a bus node.
- the bus nodes each transmit a signal determining a condition of the respective string to the controller via the safety bus in a digitized form and further comprise transmission means for transmitting the digitized condition signals in a time division multiplexed manner.
- the controller comprises demultiplexing means for demultiplexing the digitized condition signals received via the safety bus.
- the bus nodes each transmit the condition signals of the respective strings to the controller via the safety bus in a digitized form and in a time division multiplexed manner. Therefore, the architecture of the safety bus and thus the transmitting components comprising the safety bus may be simplified while retaining the required safety, reliability and compatibility with current norms and standards.
- the present invention offers a solution that can be implemented using cost effective electronics so that the cost increase in the electronics is more than compensated by the cost decrease in the safety bus and the transmitting means, respectively.
- the bus nodes further comprise encoding means for encoding the digitized condition signals.
- a communication time on the safety bus is divided into slots and each of the transmission means of the bus nodes transmits in one of these slots. More preferably, the number of the slots is greater than the number of the transmission means of the bus nodes.
- the safety bus may be further adapted to carry out voice communication.
- the present invention is advantageously implemented for the bus nodes provided at a car of the elevator system, wherein the safety bus connecting the bus nodes to the controller is arranged in a travelling cable of the elevator system connected to the car.
- the safety bus arranged in the travelling cable is formed by a twisted pair.
- the so-called safety chain of an elevator is a combination of strings of contacts, connected together at nodes.
- a voltage is defined at one end of the chain, and the resulting current at the other end of the chain is being used to control the brake.
- Two main zones have to be considered in an elevator system: the car and the shaft.
- Some of the single strings are located in the shaft only, some in the car only, and some span both, going over the above-mentioned travelling cable.
- a node is anyone of the following three items: a point where three or more strings are connected together, a point which is being measured by the controller, a point in the travelling cable.
- a string is therefore defined as a series of contacts not interrupted by such a node.
- Figure 2 shows a possible safety chain for the EN81 standard.
- reference numbers 2 represent chain strings including one or more contacts 3
- reference number 4 represents the starting node
- reference numbers 6 represent chain nodes
- reference number 8 represents the final node.
- the input voltage is given at the starting node 4, and the output current of the final node 8 is used for safety control.
- Each string will have a state ("0" or "1") depending on the position of the various contacts 3 determining the condition of a safety device of the elevator.
- the safety devices of the elevator system are e.g. an overspeed sensor detecting the actual velocity of the car, landing door sensors each located near a landing door, an elevator car door sensor, an emergency stop switch sensor, an inspection switch sensor, etc..
- the state of the final node 8 can in fact be represented by a logical equation of the states of the individual strings.
- the idea of this invention is to implement this equation in hardware in the electronics of the shaft, while retaining the same safety and reliability of the current safety circuit.
- Each string 2 instead of being connected in a serial safety circuit, is operating independently and the state of the final chain node 8 is being computed from the states of the individual strings using a logical equation. This is illustratively shown in Figure 3 .
- the elevator safety system can be represented as shown in Figure 1 .
- a controller 10 including a safety circuit logical state computation unit controls a safety mechanism 12 of the elevator system.
- the safety mechanism 12 is, for example, the drive and brake system of the elevator.
- the controller 10 is in communication with a plurality of strings 22a ... 22n located in the shaft 20 as well as with a plurality of strings 32a ... 32n located at the elevator car 30, via bus nodes 24a ... 24n and bus nodes 34a ... 34n, respectively.
- the safety circuit logical state computation unit of the controller 10 can be reprogrammable, therefore allowing the same hardware to serve different elevator norms. Indeed, most of contacts on the strings 22, 32 are the same worldwide, but the way the strings are connected together is different for each norm or regional requirement. For example, the number of strings and nodes for the A17 and EN81 norm are: A17 EN81 Strings in car 13 8 Strings in Shaft 9 11 Total Nodes 22 19
- the output of the controller 10, as the output of the safety chain, is normally used to drive relays that will open the brake and motor phases of the elevator (safety mechanism 12). Because the system has to ensure that the brake is closed in case of a single failure, the controller 10 has to be duplicated in order to make a redundant implementation, as shown in Figure 4 .
- the controller 10 may be duplicated or multiplied to reach the desired level of failure rate.
- the relays to the brake might need to have an additional forcibly guided contact 11 that allows an external supervision device 9 to check their status and stop the elevator if an error is detected.
- Each chain node state must be transmitted over the travelling cable using a safe system. Furthermore, to reduce the number of wires, the chain node state should be transmitted by means of a unique medium, such as a twisted pair, already existing in the current travelling cables.
- this is achieved using a combination of a type of Time Division Multiplexing and Redundancy (e.g. Simple Redundancy or Triple Voting), specifically tailored for the application and compatible with the normative requirements.
- a type of Time Division Multiplexing and Redundancy e.g. Simple Redundancy or Triple Voting
- the main system characteristics considered here are as follows.
- the system must operate safely in case of a single component failure, and should avoid passenger entrapment.
- the system must be able to detect a single component failure and stop operation, if possible after releasing the passengers.
- the system must transmit the information over a single transmission medium.
- the signal conditioning units 35 are controlled failure mode resistors and resistive divisor bridge that ensure that there is no uncontrolled failure propagation from one side to the other. Indeed, the only failure mode of this resistor is open-circuit, guaranteeing safe operation in case of failure: the pull down resistor pulls the signal low, thereby transmitting a "0" which is the safe state. The pull down itself must have short-circuit as its unique failure mode.
- the state capture units 36 forming the encoding means of the invention encode the state of the chain node 32i. If the overall reliability of the system is good enough, this can be a simple one-to-one translation, but safety can be enhanced by encoding the state to make sure that an error in the transmission medium over the travelling cable results in the receiving end misinterpreting the state. A possible mechanism to do this is to transmit only "0" in case the node read "0", and to transmit continuously some node identifier if the state of the node reads "1". Then on the receiving end, a decoder would only grant the "1" state to the node 32i if it received the correct sequence for the correct node. Any error would result in a "0" state being granted by the receiving end, which is the safe state. This can only be implemented if it does not impact negatively on the reaction time of the system.
- Another mechanism that can be implemented in the state capture units 36 is an independent watchdog to ensure that a failure of the state capture units 36 does not permanently bring the communication bus down. In case of a bus 14 with recessive / dominant states for example, this would mean to check that the unit does not remain stuck in the dominant state. As above, this is optional and only necessary in case of a low reliability of the components used to build the unit.
- the bus node 34i On the side of the elevator car, the bus node 34i further comprises transmission units 37 and bus drivers 38 connected to the safety bus 14. With the construction shown in Figure 14, the bus node 34i is able to transmit a signal determining the condition of the respective string 32i in a digitized form and in a time division multiplexed manner.
- a bus driver 16 connected to the safety bus 14 and receptions units 17 for demultiplexing the condition signals transmitted via the safety bus 14.
- the reception units 17 are each connected to the controller 10, via a triple voting unit 18 informing the controller 10 in case of mismatch between the reception units 17.
- the same transmission and reception units 37, 17 can be used.
- the reception part has to be doubled as can be seen in Figure 6 .
- the inventive implementation for the transmission of the information over the safety bus 14 in the travelling cable must be made in a deterministic way to allow for a easier certification process. For this reason, a time division multiplexing synchronous approach is being implemented. This avoids managing collisions and therefore the undeterministic behaviour of the system.
- the communication time on the safety bus 14 is divided into slots, and each of the transmission units 37 transmits in one of the slots. Their may be more than three time slots, where the additional time slots are used for other purposes such as voice communication, for example.
- each slot must be able to transmit at least 13 or 8 node states depending on the safety chain implementation. To account for future expansions, at least 32 node states may be considered.
- the communication medium may not be perfect every time, two failures have to be taken into account. First, the communication between the transceivers and receivers may be lost and the elevator may therefore be unnecessarily stopped. Second, even if the transmission is successful, the content of the transmission may get corrupted and dangerous information may be potentially transmitted. As the controller 10 computes a safe state (safety circuit open) or a potentially dangerous state (safety circuit closed), this state will have to be filtered before acting on the safety mechanism 12.
- two filters are defined. If no communication is present on the safety bus 14, the controller 10 must of course produce the safe state. If the communication is resumed, the controller 10 may immediately produce the state defined by the bus contents. But in case the communication is lost, the controller 10 should not force immediately the safe state, but remain in the potentially dangerous state for a predefined delay, to allow for short bus disruptions.
- the communication unit should not allow the potentially dangerous state immediately, but wait for the state defined by the bus be stable for a predefined number of transmissions. On the other hand, if the bus contents signify a safe state, the controller 10 should switch to the safe state immediately.
- the different state capture and transmission units 36, 37 of the bus nodes 34 may also be implemented in a single component having the required number of inputs.
- the same is also valid for the triple voting units 18 and the controllers 10. That means that the hardware is reduced to three identical hardware units on the car 30 and two identical hardware units in the controller 20 located in the shaft 20.
- the overall cost of the system may be reduced, especially in case of long travelling cables where the additional cost of the units is more than compensated by the reduction in cost of the travelling cable.
- controller has a better view of the safety chain and the safety chain can be easily reconfigured in case of code modifications, avoiding changing the hardware in elevators already installed.
- time division multiplexing bus may also be used to transport voice communication. Having both safety circuit information and voice communication over a single twisted pair yields significant cost reductions for the whole elevator system.
- the inventive signal transmission has been explained taking the bus nodes 32 on the side of the elevator car 30 as an example. In general, however, also the bus nodes 22 on the shaft side 20 may use the inventive system. Although, the advantageous effect of the present invention is especially shown for the safety bus 14 running through the travelling cable of the elevator car.
Landscapes
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Computer Networks & Wireless Communication (AREA)
- Indicating And Signalling Devices For Elevators (AREA)
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP08154428A EP2108608A1 (de) | 2008-04-11 | 2008-04-11 | Elektronisches Sicherheitssystem für Aufzüge |
PCT/EP2009/054104 WO2009124917A1 (en) | 2008-04-11 | 2009-04-06 | Electronic safety system for elevators |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP08154428A EP2108608A1 (de) | 2008-04-11 | 2008-04-11 | Elektronisches Sicherheitssystem für Aufzüge |
Publications (1)
Publication Number | Publication Date |
---|---|
EP2108608A1 true EP2108608A1 (de) | 2009-10-14 |
Family
ID=39666044
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP08154428A Withdrawn EP2108608A1 (de) | 2008-04-11 | 2008-04-11 | Elektronisches Sicherheitssystem für Aufzüge |
Country Status (2)
Country | Link |
---|---|
EP (1) | EP2108608A1 (de) |
WO (1) | WO2009124917A1 (de) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113460818A (zh) * | 2020-03-31 | 2021-10-01 | 苏州汇川技术有限公司 | 电梯电子板通信系统、方法、设备及计算机可读存储介质 |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3782504A (en) * | 1972-12-14 | 1974-01-01 | Reliance Electric Co | Multiplex system for elevator control |
GB2066517A (en) * | 1979-12-27 | 1981-07-08 | Otis Elevator Co | Empty lift car determination |
US4497391A (en) * | 1983-10-27 | 1985-02-05 | Otis Elevator Company | Modular operational elevator control system |
EP1067714A1 (de) * | 1999-05-17 | 2001-01-10 | Lucent Technologies Inc. | Kontrolkanal für Systemen mit Mehrfachzugriff durch Zeitverschachtelung |
US6173814B1 (en) | 1999-03-04 | 2001-01-16 | Otis Elevator Company | Electronic safety system for elevators having a dual redundant safety bus |
WO2003020625A1 (en) * | 2001-09-05 | 2003-03-13 | Otis Elevator Company | Two-part wireless communications system for elevator hallway fixtures |
WO2008013515A2 (en) * | 2005-05-13 | 2008-01-31 | Thyssen Elevator Capital Corp. | Elevator system including an ultra wideband device |
-
2008
- 2008-04-11 EP EP08154428A patent/EP2108608A1/de not_active Withdrawn
-
2009
- 2009-04-06 WO PCT/EP2009/054104 patent/WO2009124917A1/en active Application Filing
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3782504A (en) * | 1972-12-14 | 1974-01-01 | Reliance Electric Co | Multiplex system for elevator control |
GB2066517A (en) * | 1979-12-27 | 1981-07-08 | Otis Elevator Co | Empty lift car determination |
US4497391A (en) * | 1983-10-27 | 1985-02-05 | Otis Elevator Company | Modular operational elevator control system |
US6173814B1 (en) | 1999-03-04 | 2001-01-16 | Otis Elevator Company | Electronic safety system for elevators having a dual redundant safety bus |
EP1067714A1 (de) * | 1999-05-17 | 2001-01-10 | Lucent Technologies Inc. | Kontrolkanal für Systemen mit Mehrfachzugriff durch Zeitverschachtelung |
WO2003020625A1 (en) * | 2001-09-05 | 2003-03-13 | Otis Elevator Company | Two-part wireless communications system for elevator hallway fixtures |
WO2008013515A2 (en) * | 2005-05-13 | 2008-01-31 | Thyssen Elevator Capital Corp. | Elevator system including an ultra wideband device |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113460818A (zh) * | 2020-03-31 | 2021-10-01 | 苏州汇川技术有限公司 | 电梯电子板通信系统、方法、设备及计算机可读存储介质 |
CN113460818B (zh) * | 2020-03-31 | 2023-04-07 | 苏州汇川技术有限公司 | 电梯电子板通信系统、方法、设备及计算机可读存储介质 |
Also Published As
Publication number | Publication date |
---|---|
WO2009124917A1 (en) | 2009-10-15 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
KR101453195B1 (ko) | 엘리베이터 시스템 | |
EP1159218B1 (de) | Elektronische sicherheitsschaltung für aufzüge | |
EP2616376B1 (de) | Sicherheitssystem und -verfahren für einen aufzug | |
DE10230380B4 (de) | Drahtlose Sicherheitskette für ein Aufzugsystem | |
EP2229331B1 (de) | Steuerstrategie für den betrieb von zwei aufzugskabinen in einem einzigen schacht | |
CA2526984C (en) | Safety system for an elevator structure | |
KR102048420B1 (ko) | 엘리베이터 안전 시스템 | |
EP2218608B1 (de) | Zuginformationsverwaltungsvorrichtung | |
CN103879853B (zh) | 电子安全电梯 | |
US9367416B2 (en) | Safety circuit of an elevator, and method for identifying a functional nonconformance of a safety circuit of an elevator | |
JPH0939691A (ja) | 車両用負荷制御システム | |
US20170217457A1 (en) | Rail vehicle | |
US8405937B2 (en) | Controller for platform doors | |
US7562261B2 (en) | Single-signal transmission of safe process information | |
JP5517432B2 (ja) | エレベータ安全システム | |
US20180170412A1 (en) | Control arrangement for a vehicle | |
KR101406685B1 (ko) | 분산형 배터리 관리 시스템 및 분산형 배터리 관리 방법 | |
EP2108608A1 (de) | Elektronisches Sicherheitssystem für Aufzüge | |
CN102452596B (zh) | 电子安全电梯 | |
EP2774884A1 (de) | Aufzugkomponentenkommunikation | |
JP2006206245A (ja) | エレベータ装置の信号伝送方法及びその方法を用いたエレベータ装置 | |
KR100694511B1 (ko) | 무선열차제어시스템 차상자의 다수결방식 결함억제장치 | |
EP3257799B1 (de) | Redundante sicherheitsschaltung | |
CN117735358A (zh) | 电梯控制方法、装置、电梯控制器、电梯安全系统及电梯 | |
CN113942904A (zh) | 电梯安全控制方法、系统、设备及计算机可读存储介质 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MT NL NO PL PT RO SE SI SK TR |
|
AX | Request for extension of the european patent |
Extension state: AL BA MK RS |
|
AKX | Designation fees paid | ||
REG | Reference to a national code |
Ref country code: DE Ref legal event code: 8566 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN |
|
18D | Application deemed to be withdrawn |
Effective date: 20100415 |