EP2319791A1 - Lift assembly - Google Patents

Abstract

The system has a lift cab arranged in a lifting shaft, and holding zones arranged in the lifting shaft. A safety device (16) enables opening of one of doors in the lift cab in the holding zones. An acceleration detection device (38) i.e. acceleration sensor, is connected with the safety device and detects momentary acceleration of the lift cabin by the opened door. The safety device detects an error function based on the momentary acceleration detected by the acceleration detection device by the opened door. The safety device determines an emergency stop during detection of the error function.

Description

The invention relates to an elevator installation with at least one elevator car. Specifically, the invention relates to an elevator installation with an elevator car which can be driven by a drive unit by means of a traction means, the drive unit being designed as a gearless drive unit.

From the WO 2008/020111 A1 For example, an elevator system with a safety arrangement and a controller for the safety arrangement is known. The controller for the safety arrangement in this case has a limit, which specifies the speed, the delay or an allowable vertical distance from a door area of the elevator car. The controller also includes a time measurement wherein said threshold is given as a function of time. In this way, a mechanical stop of the elevator car can be ensured to ensure safe operation of the elevator system.

That from the WO 2008/020111 A1 known elevator system has the disadvantage that, although a secure braking is achieved, for example, to prevent the elevator car brakes unrestrained against a limit damper, a deceleration of the elevator car in certain operating situations but can be initiated too late, so that it still leads to personal injury or other Accidents can occur.

The object of the invention is to provide an elevator system in which the safety is improved. Specifically, it is an object of the invention to provide an elevator system in which, during a stop of the elevator car in a holding zone in Optimized way a malfunction is detected.

Such a problem is solved by an elevator installation according to the invention with the features of claim 1.

The measures listed in the dependent claims advantageous developments of the elevator system specified in claim 1 are possible.

The elevator car of the elevator system is arranged in an elevator shaft, wherein the elevator car can be moved in the elevator shaft, for example by means of a gearless drive unit. During operation, the elevator car is accelerated. In general, under an acceleration, both a positive acceleration at which the speed of the elevator car increases, a negative acceleration at which the speed of the elevator car decreases, and a vanishing acceleration at which the speed of the elevator car is constant, which is the case a standing elevator car at vanishing speed, to understand. This general concept of acceleration is expedient, for example, in a formal use of the acceleration and in detecting an acceleration of the elevator car by the acceleration detection device. With regard to the respective context, however, an acceleration may also relate to positive and negative acceleration, in which a change in the speed of the elevator car takes place. In addition, it may be understood from the context that the term acceleration refers to a positive acceleration, while the negative acceleration in such a case is also referred to as a deceleration. Under a delay of The elevator car is to be understood as braking the elevator car, wherein the delay does not necessarily take place uniformly and does not necessarily lead to the complete stoppage of the elevator car.

It is advantageous that the safety device detects the malfunction with respect to an acceleration limit value predetermined for the acceleration detected by the acceleration detection device. When the acceleration limit value is exceeded, the safety device can trigger, for example, the initiation of an emergency stop. In this case, a relatively large adjustment range of the elevator car for repositioning when the door is open can also be predetermined. As a result, a false triggering of the emergency stop can be avoided.

In an advantageous manner, the safety device initiates an emergency stop when the malfunction is detected. As a result, the elevator car is delayed until it stops. As a result, personal injury and other accidents can be avoided. Specifically, a personal accident that occurs in a situation where the elevator car accelerates upward with the door open and the person in the door area can be avoided.

It is advantageous that a speed detection device connected to the safety device is provided, which serves to detect a speed of the elevator car at least when the door is open, and that the safety device with the door open as a function of at least the detected by the acceleration detection means instantaneous acceleration and the current speed detected by the speed detecting means detects the malfunction. Depending on the configuration of the elevator installation and in particular of the safety installation, a relatively large area for repositioning the elevator car with the door open can be predetermined here. If, for example, vertical movements of the elevator car in the elevator shaft occur during unloading and loading and / or when passengers get off or get into the elevator car, an alignment of the elevator car with respect to the holding zone can be achieved by repositioning. However, there is a risk here that due to a malfunction the elevator car moves too far out of the holding zone with the door open so that persons can fall into the shaft, persons who are in the door area are injured or other accidents occur. Even if the acceleration limit is not exceeded, the speed limit can provide additional safety. For example, the unfavorable case may occur that a malfunction occurs with large vertical adjustments of the elevator car. For example, the elevator car can be adjusted significantly upwards with respect to a floor. If a person now leaves the elevator car and at this moment due to a malfunction occurs a movement of the elevator car upwards, then there is a risk of considerable head injuries. By considering both the acceleration limit and the speed limit, the safety device can timely initiate an emergency stop or the like.

Advantageously, the speed detection device comprises a computing unit, wherein the computing unit determines the speed of the elevator car from that detected by the acceleration detection device Calculated acceleration. As a result, additional mechanical components for the speed detection device can be saved or it can also be achieved additional redundancy. It is advantageous that a distance detection device connected to the safety device is provided, which serves for detecting a distance covered in relation to a starting point of the holding zone of the elevator car in the elevator shaft and that the safety device with the door open also depending on the of the Weg- Detection device detected route detects the malfunction. In this case, it is further advantageous that the safety device recognizes the malfunction in relation to a distance limit value predetermined for the distance covered by the distance detection device. If, for example, a position of the elevator car with the door open in the holding zone exceeds the distance limit, since this is set correspondingly far upwards, then an emergency stop can be triggered. When determining the distance limit value, it is preferably taken into account that the endangerment of persons or the occurrence of other accidents is generally favored by relatively large adjustments of the elevator car. For example, if the elevator car is displaced relatively far upwards while a person on the elevator car is getting off, then the risk of a head injury if the elevator car is suddenly accelerated upwards is markedly increased since the headroom due to the adjustment of the elevator car is already reduced.

It is advantageous that a bridging device is provided, which in a bridging state for opening the door of the elevator car at least one for the door provided door contact bridged that in a non-bridging state of the lock-up device in which the lock-up device is not in the lock-up state, with the door open, an emergency stop occurs and that the safety device switches the lock-up device in the non-lock state upon detection of the malfunction. This can reduce the number of components required to initiate the emergency stop. Specifically, the maintenance and inspection of the safety device and the other facilities required for the safety function is simplified.

Advantageously, the safety device allows an opening of at least one door of the elevator car and an opening of at least one provided on the holding zone door at least substantially stationary elevator car. As a result, the doors can already be opened during the last adjustments of the elevator car for the exact positioning of the elevator car in the holding zone. Furthermore, certain permitted repositioning runs can be made in the holding zone.

• Fig. 1 eine Aufzuganlage mit einer Aufzugkabine in einer schematischen Darstellung entsprechend einem Ausführungsbeispiel der Erfindung;
• Fig. 2 ein Diagramm zur Erläuterung der Funktionsweise einer Sicherheitseinrichtung der Aufzuganlage des Ausführungsbeispiels der Erfindung;
• Fig. 3 ein Sicherheitssystem der Aufzuganlage entsprechend dem Ausführungsbeispiel der Erfindung und
• Fig. 4 ein weiteres Diagramm zur Erläuterung der Funktionsweise der Sicherheitseinrichtung der Aufzuganlage des Ausführungsbeispiels der Erfindung.

Preferred embodiments of the invention are explained in more detail in the following description with reference to the accompanying drawings, in which corresponding elements are provided with corresponding reference numerals. It shows:

• Fig. 1 an elevator system with an elevator car in a schematic representation according to an embodiment of the invention;
• Fig. 2 a diagram for explaining the operation of a Safety device of the elevator installation of the embodiment of the invention;
• Fig. 3 a security system of the elevator system according to the embodiment of the invention and
• Fig. 4 a further diagram for explaining the operation of the safety device of the elevator system of the embodiment of the invention.

Preferred embodiments of the invention

Fig. 1 shows an elevator system 1 with an elevator car 2 in a partial, schematic representation according to an embodiment of the invention. The elevator car 2 is in this case arranged in an elevator shaft 3, which is bounded by lateral walls 4, 5. In this case, the elevator installation 1 can also have a plurality of elevator cars arranged in the elevator shaft 3, which are designed in accordance with the elevator car 2. The elevator car 2 is suspended on a suspension element 6, which also assumes the function of a traction means for moving the elevator car 2 in the elevator shaft 3.

A building or the like, in which the elevator installation 1 is provided, has several floors 7, of which in the Fig. 1 the floor 7 is shown.

The floor 7 is assigned a holding zone 8 in the elevator shaft. For the other floors further retaining zones are provided in the elevator shaft 3 in a corresponding manner. Here is in the Fig. 1 illustrated a situation in which the elevator car 2 optimally in the Holding zone 8 is arranged so that when stepping out of the elevator car 2 in the floor 7 or when entering the elevator car 2 no level is overcome. In practice, however, certain tolerances for the arrangement of the elevator car 2 in the holding zone 8 are required and predetermined by safety standards, technical requirements or the like. Starting from the basic position, the elevator car 2 can be offset by a distance s, which can be positive or negative. If the distance s is positive, then a user for boarding the elevator car 2 from the floor 7 has to climb up a small step. If the elevator car 2 enters the holding zone 8 of the elevator shaft 3 to stop, then also slightly before reaching the holding position on the floor 7, an opening of the door 9 of the elevator car 2 and / or the door 10, which is provided on the floor 7, respectively. In addition, during the boarding and boarding of persons or in another unloading and loading of the elevator car 2, a change in the distance s occur. Thus, the distance s may vary slightly even with the doors 9, 10 open. However, this Repositionsfahrten the elevator car 2 are performed to position the elevator car 2 as accurately as possible in the holding zone 8 to allow a step-free entry and exit between the elevator car 2 and the floor 7. Depending on the configuration of the elevator installation 1, it is possible, for example for the distance s, to specify a range of -75 mm to +75 mm, which is regarded as uncritical with regard to required repositioning runs of the elevator car 2.

However, undesired movement of the elevator car 2 due to a malfunction may also occur. Such a malfunction can be caused, for example, in one have electrical errors. If the electrical safety chain is opened in the event of a malfunction, then an emergency brake or other brake, which includes the function of an emergency brake, activated to delay the elevator car 2 by braking and stop. For example, the emergency brake can be configured as a rope brake.

The achievable delay can differ from an ideal delay with respect to the currently achievable braking effect. For example, the braking effect depends on the state of the emergency brake. If the emergency brake is already badly worn, then the delay effect can be comparatively low. Electrical faults can also cause excessive wear of a brake with two pistons or the like, for example if an engine is running while the brake is applied. Therefore, servicing the emergency brake and other brakes as well as checking the brake points is important. However, a redundancy related risk can be reduced, for example by using two brakes that can serve as emergency brakes, namely a piston brake in combination with a rope brake.

In addition to these mechanical aspects, electrical aspects must also be considered. If the elevator car 2 leaves the holding zone 8 with the doors 9, 10 open further than permitted, then the safety chain is opened and the emergency brake stops the elevator car 2. Thus, in a case where the door 9 and / or the door 10 are opened, that the safety chain is open, except in the particular situation that an error detection for repositioning or for slowly approaching the end position of the elevator car 2 at the floor 7, for example by bridging the safety chain in the area of the doors 9, 10, has not been activated.

The device for bridging the safety chain in the area of the doors 9, 10 or the like is designed as a safety-relevant component, so that it can be assumed that no malfunction occurs in such a device. However, the detection of a malfunction by this device may be limited to certain situations, for example, the standard EN81 limits the operation of such a bridging device to the detection of whether the elevator car 2 is within the holding zone 8 taking into account the predetermined tolerance. A speed of the elevator car 2 is not monitored here.

An extremely unfavorable situation in the event of a malfunction therefore arises when the elevator car 2 is accelerated when the doors 9, 10 are opened due to the malfunction, leaving the holding zone 8, and then a device for bridging the safety chain in the area of the doors 9, 10 opens the safety chain and thereby an emergency stop the elevator car 2 is triggered. Because in this situation, the elevator car 2 when leaving the holding zone 8 to the initiation of emergency braking already has a relatively large kinetic energy that must be removed during the emergency stop.

The distance s can thus be limited to a certain range, within this range repositioning journeys and other trips of the elevator car 2 with the doors 9, 10 are open and admissible Exceeding this range an emergency stop occurs. Depending on the design of the elevator installation 1 and the respective requirements, in particular nationally valid safety requirements, this area can be determined. To simplify the consideration, a predetermined distance may be determined for the amount of the distance s, which limits the range of permissible journeys with the doors 9, 10 open. Thus, the emergency braking is initiated when exceeding this certain distance. By such an area or such a distance, the holding zone 8 can be determined.

Due to the emergency braking as quickly as possible stop the elevator car 2 is achieved, although still an additional distance is covered, whereby the amount of the distance s further increases.

From the point of view of safety, the maximum amount of the distance s that occurs after emergency braking has taken place plays a special role. For example, the elevator car 2 can come to a stop relatively far above the floor 7 after emergency braking. As a result, there is a risk that persons or other objects fall into the elevator shaft 3 or reach the elevator car 2 partially, for example with one leg. For this reason, it makes sense to prescribe a maximum value or a corresponding range within which the elevator car 2 must come to a standstill even in unfavorable starting situations when an emergency stop is carried out with the doors 9, 10 open. Such maximum values are for example 1 m according to the proposal CEN TC10, 1.22 m (48 inches) according to the specification A17 and 1.4 m as proposed by members of ISO / TC178.

The reason for the above-mentioned values of 1 m and 1.22 m is the length of an aperture 15, which prevents persons or objects from falling into the elevator shaft 3 when the doors 9, 10 are open. The maximum value of 1.4 m has resulted from practical tests.

Based on this maximum value, a determination of the certain distance is now possible, which serves as a limit value for initiating the emergency stop. However, even with gearless elevator systems 1, which are designed as high-speed elevator systems, the problem that the elevator car 2 already after a short time and thus a relatively short distance has a high kinetic energy. In order to maintain one of the abovementioned maximum values even in unfavorable situations, therefore, the certain distance from which the emergency braking is initiated must be relatively small.

For example, when a certain distance of 75 mm is exceeded, the emergency braking can be initiated. If the elevator car 2 is now accelerated when the doors 9, 10 are open due to a malfunction, then after a short time, for example after about 0.3 seconds, the certain distance of 75 mm is exceeded. Here, the elevator car 2 already has a speed of, for example, 0.5 m / s. Here, in this example, it is assumed that the acceleration due to the malfunction is 1.8 m / s ² . When the emergency braking is initiated, however, the maximum braking power is not yet available, so that initially the acceleration is reduced somewhat, but the speed still increases. In the further construction of the braking force may be followed by a short period in which the speed of the elevator car 2 is constant. When the braking effect is at least substantially completely constructed, then there is a delay of the elevator car 2, wherein the speed of the elevator car 2 decreases to a standstill. At maximum braking effect, for example, a delay of 0.25 m / s ^{2 of} the elevator car 2 can be achieved. To a standstill, the elevator car can cover a distance of 1.06 m. The distance to standstill is then greater than 1 m.

If, however, a shorter maximum value, for example 1 m, is set to a standstill, then this can be achieved by reducing the certain distance to 65 mm. When exceeding the certain distance of 65 mm then the emergency braking is initiated. In the above example, due to the acceleration of 1.8 m / s ² during the malfunction until the initiation of the emergency braking, the speed of the elevator car is 0.48 m / s. Thus, the elevator car has a speed of 0.48 m / s when the certain distance of 65 mm is reached. Now, if the emergency braking initiated, then the elevator car does not exceed the maximum value of 1 m to a standstill.

Thus, by setting a relatively short distance for the distance s intended for initiating the emergency braking, the maximum value for a range within which the elevator car 2 stops at an emergency stop can be reduced.

However, not every adjustment of the elevator car 2 is caused by a malfunction. If the certain distance, beyond which an emergency braking is initiated, specified shorter, then an emergency braking is increasingly initiated even in non-critical operating situations.

Thus, at shorter distances, for example, at 65 mm, there is the problem that the frequency of unnecessary tripping increases and accordingly often the service personnel (maintenance service) must be called to check and release and the elevator system 1 until then stands still. Therefore, the specification of a small holding zone 8 is problematic.

Fig. 2 1 is a diagram for explaining the operation of a safety device 16 (FIG. Fig. 3 ) of the elevator installation 1 of the embodiment. In this case, the distance s or the amount of the distance s is plotted on the abscissa. At the ordinate, the speed v of the elevator car 2 or the amount of the speed v is plotted. In this case, values are entered in the diagram which serve to illustrate the elevator installation 1 of the exemplary embodiment, but the elevator installation 1 is not restricted to these values.

The requirements of EN81 are as follows. In § 7.7.1 it is determined that the holding zone 8 may be a maximum of + -0.2 m or + -0.35 m. From § 14.2.1.2 (b) it follows that the maximum speed for approaching the respective floor 7 is 0.8 m / s. Furthermore, it is clear from § 14.2.1.2 (c) that repositioning journeys may be carried out at a maximum speed of 0.3 m / s. For practical reasons, a maximum value for the acceleration of the elevator car 2 is given. This maximum value for the acceleration does not only concern the case of an increasing speed but also the case of a decreasing speed, that is, a deceleration. The maximum value for such accelerations is approximately 0.1 g. Here g is the gravitational acceleration. The maximum value for the acceleration is therefore about 1 m / s ² . It should be noted that this acceleration of 0.1 g is comparable to a deceleration which acts on the elevator car 2 during the approach of a landing 7 at a speed of 0.8 m / s with a holding zone 8 of + -350 mm.

und $$\mathrm{v}\mathrm{=}\mathrm{ds}\mathrm{/}\mathrm{dt}\mathrm{.}$$

An acceleration a of the elevator car 2 results from the time derivative of the speed v. The speed v of the elevator car 2 results from the time derivative of the distance s. Thus, that holds true $$\mathrm{a}\mathrm{=}\mathrm{dv}\mathrm{/}\mathrm{dt}$$

and $$\mathrm{v}\mathrm{=}\mathrm{ds}\mathrm{/}\mathrm{dt}\mathrm{,}$$

By integrating the equation (1), it follows that the velocity v is equal to the product of the acceleration a and the time t: $$\mathrm{v}\mathrm{=}\mathrm{a}\mathrm{\cdot }\mathrm{t}\mathrm{,}$$

Here, the initial velocity, which occurs as a constant during integration, is set equal to zero. It also follows from Equations (2) and (3) that the derivative of the distance s after the time t is equal to the product of the acceleration a and the time t: $$\mathrm{ds}\mathrm{/}\mathrm{dt}\mathrm{=}\mathrm{a}\mathrm{\cdot }\mathrm{t}\mathrm{,}$$

From the equation 4 it follows by integration that the distance s is equal to the product of the factors 0.5 of the acceleration a and the square of the time t: $$\mathrm{s}\mathrm{=}\left(\mathrm{1}\mathrm{/}\mathrm{2}\right)\mathrm{\cdot }\mathrm{a}\mathrm{<figure-callout\; id="2"\; label="\cdot \; t"\; filenames="imgf0001.png"\; state="\{\{state\}\}">\cdot \; </figure-callout>}{\mathrm{t}}^{}{\mathrm{}}^{\mathrm{2}}\mathrm{,}$$

Here, the constant occurring in the integration, namely the distance s at time 0, set to 0 for simplicity.

By solving equation (3) for time t and substituting it into equation (5), after simple transformation, the velocity v is related to the acceleration a and the distance s, namely that the velocity v is equal to the root the product with the factors 2, the acceleration a and the distance s is: $$\mathrm{v}\mathrm{=}{\left(\mathrm{2}\mathrm{\cdot }\mathrm{a}\mathrm{<figure-callout\; id="1"\; label="\cdot \; s"\; filenames="imgf0001.png"\; state="\{\{state\}\}">\cdot \; </figure-callout>}\mathrm{s}\mathrm{}\right)}^{\mathrm{1}\mathrm{/}\mathrm{2}}\mathrm{,}$$

The equation (6) can be interpreted as follows. First, the elevator car 2 in the in the Fig. 1 illustrated starting position. In this case, both the distance s, that is to say s = 0, and the speed v, that is to say v = 0, vanish. In addition, the elevator car 2 is subject to an acceleration a, which is 0.1 g for illustration purposes. This condition lies in the Fig. 2 at the origin of the represented coordinate system.

It is now assumed that the acceleration a constant has the value 0.1 g. In this case, the elevator car 2 is accelerated upwards, for example. After a short time the elevator car 2 has traveled a distance s of 46 mm. Since it is assumed that there is a constant acceleration a, with this distance of travel of 46 mm with respect to the time t just required there is a certain speed v which the elevator car 2 has at this time t and thus at the distance s of 46 mm , These Speed v is 0.3 m / s. The situation just described is summarized by equation (6).

From the equation (6), at constant acceleration a for arbitrary, but meaningful values for the distance s of the elevator car 2, a certain speed v is thus obtained, which the elevator car 2 just reaches at the respective location in the elevator shaft 3 determined by the distance s , For example, the elevator car 2 already has a speed of 0.83 m / s when traveling the distance s of 350 mm.

In the Fig. 2 the relationship between the velocity v and the distance s at constant acceleration a for an acceleration a of 0.1 g is illustrated by the curve 17. For another acceleration a results in a curve 17 corresponding course. A curve with an acceleration a deviating from 0.1 g also starts at the origin, but lies for accelerations a, which are greater than 0.1 g, otherwise above the curve 17 and for accelerations a, which are smaller than 0.1 g , otherwise below the curve 17.

The Fig. 2 illustrates that at accelerations a of the elevator car 2, which are greater than 0.1 g, already after a relatively short, traveled distance s high speeds occur. If emergency braking is initiated only at a distance of 65 mm or 75 mm, then the speed v already reached is so great that the elevator car stops only after more than 1 m or slightly before 1 m, if the example described at the beginning with FIG Acceleration a of 1.8 m / s ^{2 is} considered.

The safety device 16 advantageously takes into account the acceleration a of the elevator car 2. If the acceleration a exceeds, for example, the predetermined limit acceleration of 0.1 g with the doors 9, 10 open, the safety device 16 can advantageously malfunction due to the detected acceleration a detect. This can be prevented in particular that the elevator car 2 enters a state in which in the Fig. 2 shown diagram is above the curve 17. For example, in the Fig. 2 a state 18 is shown in which the distance s is equal to 46 mm and in which the speed v is between 0.3 m / s and 0.83 m / s. Since the states of the elevator car do not change abruptly in the diagram, but develop uniformly from the origin along a curve, the elevator car 2 would have had to be in an earlier state, and thus at a shorter distance s than 46 mm, in a state above the curve 17 is, for example, in the in the Fig. 2 illustrated state 19. This also applies to time-varying accelerations a. The state 19 is also above the curve 17, so that the acceleration a of the elevator car 2, when the state 19 is to be achieved, also had to be greater than 0.1 g. Thus, already at the time when the elevator car is in the state 19, there was a malfunction recognizable by the safety device 16 due to the excessive acceleration. In this case, the safety device 16 can already detect a malfunction at the time when the elevator car 2 is in the state 19 and possibly also earlier and thus initiate an emergency stop. This precludes the elevator car 2 from ever entering the state 18. Therefore, already at an early stage and thus at a relatively short, covered distance s emergency braking be initiated. The initiation of the emergency braking here refers to the case that the elevator car 2 is accelerated with the doors 9, 10 open. However, even for closed doors 9, 10, a limit value for the acceleration a of the elevator car 2 can be predetermined, which, however, is preferably greater than 0.1 g.

In addition, the safety device 16 can additionally take into account a limit value for the speed. Such a limit is in the Fig. 2 by the limiting speed of 0.3 m / s. If the elevator car 2 assumes a speed v of more than 0.3 m / s with the doors 9, 10 open, then the safety device 16 recognizes a malfunction in this embodiment, regardless of the instantaneous acceleration a. In addition, a limit value for the distance s may be predetermined, which is given by 350 mm in this embodiment. Due to the limit value for the speed v of 0.3 m / s and the limit for the distance s of 350 mm, since states above the curve 17 are already excluded due to the acceleration limit, additional states in the regions 20 and 21 are excluded. If the elevator car 2 therefore enters a state which lies in one of the regions 20, 21, emergency braking likewise takes place.

Considering an acceleration limit value, which is 0.1 g in this embodiment, a speed limit value, which is 0.3 m / s in this embodiment, and a travel limit value which is 350 mm in this embodiment, the area 22 remains with the partial areas 22A , 22B for allowed movements of the elevator car 2 with the doors 9, 10 open. Such allowed Movements relate in particular to a repositioning of the elevator car 2 with respect to the floor 7.

Thus, if repositioning runs of the elevator car 2 are performed while a condition in the area 22 results, then no malfunction is detected. However, if a condition of the elevator car 2 outside the area 22, then a malfunction is detected. In this case, the acceleration limit value and / or the speed limit value and / or the travel distance limit are exceeded. In this case, emergency braking is initiated immediately. This may still result in an electronic, electrical and / or mechanical latency until the brake accesses and a delay of the elevator car 2 is achieved.

Subsequently to the basis of the Fig. 2 described embodiment may be considered an extremely unfavorable case. Suppose there is a malfunction. Further, it is assumed that the elevator car 2 is accelerated at a constant acceleration a of about 0.1 g in the presence of the malfunction, so that no malfunction is just detected with respect to the acceleration threshold. In this case, the elevator car 2 accelerates until it has a speed of 0.3 m / s after the distance traveled s of 46 mm. Shortly thereafter, the exceeding of the speed limit value of 0.3 m / s is evaluated by the safety device 16 and the present malfunction is detected. In this case, the safety device 16 reacts at a distance traveled s of about 46 mm. Thus, at this time the elevator car 2 has already moved 46 mm out of its starting position.

This distance s of 46 mm, however, is significantly smaller than the above-mentioned values of 65 mm or 75 mm. Thus, in this case a relatively early release of the emergency stop can take place. This concerns the partial area 22a of the area 22 of the permitted movements of the elevator car 2.

On the other hand, the elevator car 2 can also assume states in the partial area 22B of the area 22 of the permitted movements of the elevator car 2, so that a distance s up to +350 mm is available for repositioning trips or the like. If neither the acceleration limit value nor the speed limit value are exceeded, then a relatively large tolerance results with respect to the distance s. Since the distance limit of 350 mm is significantly greater than the above-mentioned values of 65 mm and 75 mm, thereby unnecessary tripping, in which a supposed malfunction is detected, although no malfunction is present, can be avoided. This can reduce the frequency of unnecessary triggering. As a result, the number of cases in which the service personnel (maintenance service) must be called to check and release due to a supposed error, the elevator is still standing, can be significantly reduced.

Taking into account possible latencies and a braking behavior, the elevator car 2 can stop, for example, within 0.4 m. The main reason for this is that the initiation of the emergency braking already takes place at a speed of 0.3 m / s taking into account the maximum acceleration of 0.1 g. Thus, the elevator car 2 also falls below in unfavorable cases and despite the relatively large distance limit of 350 mm the maximum limit for adjustments of the elevator car 2 to the emergency stop of 1 m not.

An important safety aspect of the elevator installation 1 is to prevent persons or other objects from falling into the elevator shaft 3 or getting under the elevator cage 2. However, the safety of the elevator installation 1 can also be improved with respect to generally less serious aspects. If the elevator car 2 moves vertically with the doors 9, 10 open with respect to the floor 7, then an additional source of danger arises. For example, a person may get off the elevator car 2 while the elevator car 2 is moving up with respect to the floor 7. As a consequence, head injuries may result, inter alia, if the person is, for example, in an area 25 (FIG. Fig. 1 ) with the head strikes. In low-power elevator systems 1, such a head injury can occur relatively rarely. In addition, it may only be minor injuries. However, with increasing performance of the elevator installation 1 and an increasing distribution of such efficient elevator installations 1, this danger source becomes more and more important. Because while relatively low accelerations only lead to minor injuries, it can cause relatively serious injuries at high accelerations, as they occur for example in gearless elevator systems 1. Reasons for this are, for example, that in fast-accelerated elevator cars 2 the person getting in or out can no longer emerge from the door area fast enough, and that due to the already reached high speed of the elevator car 2 the head strikes with great violence.

Therefore, it is of increasing importance that the safety of the elevator installation 1 is also improved with respect to those dangerous situations which may occur when passengers get in and out. The safety device 16 takes into account the acceleration a of the elevator car 2 by the acceleration limit value and the speed v of the elevator car 2 by the speed limit value. This allows early intervention to achieve an emergency stop, thereby reducing the risk of head injury or other personal injury. This results in the advantage that the emergency stop is already triggered at relatively low speeds. As a result, stopping the head or the like from being prevented in the first place by a timely stop, and even in an unfavorable case in which the head abuts on components or the like, the severity of the attack can be significantly reduced. In addition, there is more time available for people getting in or out of the car, for example, to avoid the danger by stepping aside.

By way of illustration, for example, the area 25 which is in the Fig. 1 is 2.1 m above the floor of the floor 7. The height of an entering or leaving person may be 1.8 m. This leaves between the head of the person and the area 25, a space of 0.3 m.

In a conventional security system, there may be a problem that the person already strikes his head on the area 25, while the elevator car still moves another 50 mm until the emergency stop is actually initiated. As a result, for example, an impact velocity of 0.6 m / s can occur.

By the safety device 16, which takes into account the acceleration limit and the speed limit, the impact speed can be significantly reduced, for example from 0.6 m / s to 0.018 m / s.

This reduction of the impact velocity to 0.018 m / s can be achieved, for example, as follows. At a speed v of the elevator car 2 of 0.368 m / s, the full braking power is achieved. At this time, the already traveled distance s of the elevator car is equal to 0.055 m. Until the impact of the head so still remain 0.245 m, while due to the emergency braking, the speed v of the elevator car 2 is significantly reduced. When the head is hit in area 25, the speed is still 0.018 m / s. Until the final stop of the elevator car 2, this still covers a short distance of 0.026 m. In this example, it is thus indeed come to a striking the head of the person in the area 25, the impact speed and the further movement of the elevator car 2, however, are low, so that only a slight injury is to be expected.

Thus, the safety of the elevator installation 1 can be further improved.

Fig. 3 shows a security system 26 of the elevator system 1 of the embodiment in an excerpt, schematic representation according to a possible embodiment. The safety system 26 has the safety device 16. In this case, the security system 26 may be designed partly electronically and partly electrically.

Among other things, the security system 26 provides the security function for monitoring unforeseen movement of the elevator car 2 with the doors 9, 10 open. Accordingly, the security system 26 is configured with respect to national and international regulations. In particular, a given security level can be achieved by redundant design of components. The security system 26 may be partially integrated into an elevator controller 27. In this exemplary embodiment, however, the safety device 16 is arranged separately from the elevator control 27.

The elevator controller 27 serves to control the elevator installation 1 in the normal operation. When the elevator car 2 approaches, for example, the floor 7, then sends the elevator control 27 via a signal line 28, a request for bridging door contacts 29, 30 to the safety device 16. The door contacts 29, 30 are the door 9 of the elevator car 2 and the door 10 of Floor 7 assigned. If at least one of the doors 9, 10 is opened, the door contact 29 and / or the door contact 30 is also opened so that a safety chain 31, shown schematically, is opened. This leads directly to the detection of a malfunction, so that according to a predetermined emergency program, inter alia, the elevator car 2 is stopped by an emergency stop and an alarm signal is sent to a gatekeeper or the like.

If, however, an opening of the doors 9, 10 is carried out during start-up or at the final stop on the floor 7 by the elevator control 27, the starting of the emergency program must be prevented. In this embodiment, by the elevator control 27 to the safety device 16 sent request for bridging the safety chain 31, the safety chain 31 bridged. For this purpose, the safety device 16 on safety relays 32, 33, which actuate in relation to the request for bridging in series bridging buttons 34, 35. In this case, the bridging buttons 34, 35 are closed by the safety relays 32, 33 only when a functionality of both safety relays 32, 33 is given. As a result, a redundant design is given. The closed bridging buttons 34, 35, the door contacts 29, 30 are bridged. If the elevator control 27 now opens the doors 9, 10, then the safety chain 31 remains closed by the bridging.

The safety system 26 has a first holding zone sensor 36 and a second holding zone sensor 37. The holding zone sensors 36, 37 are used to detect whether the elevator car 2 is in the holding zone 8 or not. In this case, preferably differently configured holding zone sensors 36, 37 are used. Thus, the use of two holding zone sensors 36, 37 provides a redundant design. In addition, the security is further improved by diversification due to two differently designed holding zone sensors 36, 37.

The holding zone sensors 36, 37 are connected to separate inputs of the safety device 16. The safety device 16 receives the signals of the holding zone sensors 36, 37. If the holding zones 36, 37 provide different signals, then the safety device 16 can detect an error. Only in the event that both the first holding zone sensor and the second holding zone sensor 37 detects that the elevator car 2 reaches the holding zone 8, an actuation of the bridging button 34, 35 by means of the safety relay 32, 33 allows.

Thus, as a further prerequisite for bridging the safety chain 31, it is apparent that the two holding zone sensors 36, 37 detect that the elevator car 2 is in the holding zone 8.

In addition, the security system 26 has an acceleration detection device 38. The acceleration detection device 38 serves to detect an acceleration of the elevator car 2 while it is traveling in the elevator shaft 3. Specifically, the acceleration detection device 38 detects an acceleration a of the elevator car 2 with the doors 9, 10 open. The acceleration detection device 38 may have an acceleration sensor. which is integrated in a microchip or the like. Such a sensor can detect, for example, accelerations in the range of + -1.5 g. In this case, the acceleration detecting means 38 detects accelerations in the range of -1.5 g to +1.5 g. In the case of larger amounts of acceleration, for example, the end value of -1.5 g or +1.5 g and / or an error signal can be output.

Between the safety device 16 and the acceleration detection device 38 is a signal connection in both directions. Here, the safety device 16 may, for example, send a request for testing the acceleration sensor or other elements of the acceleration detection device 38 to the acceleration detection device 38. Furthermore The acceleration detecting means 38 outputs the instantaneous acceleration to the safety device 16.

The security system 26 also includes a speed detector 39. The speed detecting means is for detecting a speed v of the elevator car 2. Specifically, the speed detecting means 39 is for detecting the speed v with the doors 9, 10 opened. The speed detecting means 39 is connected to the safety device 16. At this time, the speed detecting means 39 outputs the detected instantaneous speed v to the safety device 16.

The safety system 26 further includes a distance detection device 40 which is connected to the safety device 16. The distance detecting device 40 is for detecting the current position of the elevator car 2 in the elevator shaft 3. Specifically, the route detection device 40 is for detecting the distance s of the elevator car 2 with respect to the floor 7 with the doors 9, 10 open Here, a starting point of the holding zone 8 for the distance covered s of the elevator car 2 in the elevator shaft 3 is.

It should be noted that the floor 7 is an example of a floor of the elevator installation 1. Here, the operation of the elevator system 1 is also realized in relation to other, the floor 7 corresponding floors in a comparable manner. In particular, the detection means 38, 39, 40 also serve to detect a Acceleration a, a speed v and a distance s with respect to a respective starting point of the respective holding zone at other floors of the elevator system. 1

The safety device 16 recognizes when the doors 9, 10 are opened in dependence on the instantaneous acceleration a, which is detected by the acceleration detection device, the instantaneous speed v, which is detected by the speed detector 39, and the current distance s, that of If the safety device 16 detects a malfunction, then an emergency stop of the elevator car 2 is caused.

The safety device 16 has a non-volatile and possibly programmable memory 41 in which an acceleration limit value, a speed limit value and a travel limit value are stored. With regard to the limit values stored in the memory 41, the safety device 16 determines whether the detected instantaneous acceleration a, the detected instantaneous speed v and / or the detected instantaneous distance s are outside the permissible range.

In this exemplary embodiment, a bridging device 45 is formed by the safety relays 32, 33 of the safety device 16 and the bridging buttons 34, 35. The lock-up device 45 is switched to a lock-up state based on the request of the elevator controller 27 when, in addition, the holding zone sensors 36, 37 indicate that the elevator car 2 is in the holding zone 8. As a result, the safety chain 31 is closed by bridging the door contacts 29, 30 even when opening the doors 9, 10. If the safety device 16 detects a malfunction, then the bridging device 45 is switched to a non-bridged state. In this case, the safety relays 32, 33 release the bridging buttons 34, 35. Since the bypass buttons 34, 35 are connected in series, the design is redundant in this respect. The result is that the open door contacts 29, 30 are no longer bridged and thus the safety chain 31 is open. This immediately triggers the execution of an emergency program with the initiation of an emergency stop of the elevator car 2.

Thus, in the non-lock-up state of the lock-up device 45, in which the lock-up device 45 is not in the lock-up state, an emergency stop is triggered in at least one open door 9, 10. This emergency stop is triggered by the safety device 16 switching the bypass device 45 to the non-bypass state upon detection of the malfunction. As a result, the security system 26 can be designed in a simple manner, whereby additional components are saved and a review of the security system 26 is simplified.

In the normal operation of the elevator installation 1, in which the elevator car 2 stops at the floor 7, the safety device 16 makes it possible to open the door 9 of the elevator car 2 and the door 10, which is provided on the holding zone 8, in the case of at least substantially stationary elevator car 2 In this case, the safety device 16 also allows certain Repositioningierungsfahrten with the doors open 9, 10.

The safety device 16 is in the Fig. 3 shown schematically. Here, individual functions can also be taken over from separate components or it can also be an integrated processing of several functions of a component. By way of example, the safety device 16 can have a computing unit 46 which is used to calculate variables which are relevant for the detection of a malfunction by the safety device 16. As a result, components can be saved. For example, the computing unit 46 may calculate the speed v of the elevator car 2 from the acceleration a detected by the acceleration detector 38. In this case, if appropriate, the speed detection device 39 can be simplified, can no longer be used in relation to the safety function or can be dispensed with. It is also possible that, by balancing the value calculated by the arithmetic unit 46 and the value for the speed v of the elevator car 2 detected by the speed detector 39, a higher level of safety is achieved inter alia because of the redundancy. The calculation of the velocity v can be done by integration, in particular discrete integration. In general, when a malfunction occurs, a rapid change in speed occurs. Therefore, since the safety device 16 determines the malfunction with respect to a rapidly changing speed, slow shifts, in particular some slow drift, of the calculated value for the speed with respect to the safety function may be tolerated if necessary.

The safety device 16 and the bridging device 45 can be designed in different ways. For example, instead of the safety relays 32, 33, an embodiment with safety switches or the like for bridging the door contacts 29, 30 may be realized.

The safety device 16 may be connected to the elevator control 27 via a safety bus 47, which ensures a bidirectional connection. On the safety bus 47 further components of the security system 26 may be connected. Furthermore, the individual components, in particular the holding zone sensors 36, 37, the detection devices 38, 39, 40, the elevator control 27 and the safety device 16, can be connected to one another via the safety bus 47.

Fig. 4 shows a further diagram for explaining the operation of the elevator installation 1 of the embodiment. In this case, the sequence of signals and the speed v of the elevator car 2 are shown in the further diagram. Here, time axes 50, 51, 52 are shown. Above the time axis 50, the speed v is shown. Above the time axis 51, the signal for bridging the door contacts 29, 30 is shown, which is sent from the elevator controller 27 to the safety device 16. Above the time axis 52, the signal for actuating the safety relays 32, 33 for the actual bridging of the door contacts 29, 30 is shown.

To illustrate the mode of operation, a decrease in the speed v is initially shown, as is the case in FIG ordinary operation for starting the holding zone 8 takes place. After a certain period of time, a malfunction occurs. Accordingly, the speed v increases again. The increase in the speed v is shown in the area 53 as if the safety device 16 is not engaged.

The elevator car 2 slows down according to the elevator control 27 its speed v. At time t0, the elevator car 2 enters the holding zone 8. The elevator car 2 then slows its speed v below 0.8 m / s. At the time t1, the request for bridging the door contacts 29, 30 by the elevator controller 27, as shown on the time axis 51 takes place. With regard to the reduced speed and the request for bridging, the safety device 16 actuates the bridging buttons 34, 35 by means of the safety relays 32, 33. At the instant t2, the bridging device 45 is in the bridging state. The doors 9, 10 can now be opened. This allows people to get in and out. After a certain time, the elevator controller 27 can close the doors 9, 10 while the elevator car 2 stops in the floor 7. For example, all persons may have exited the elevator car 2 and there may be no request for further use of the elevator car 2 for a certain period of time. After a certain waiting time, for example, a request to the elevator control 7 can be made by a user who wants to get into the elevator car 2. At the time t3, the elevator control 27 in turn sends a request to the safety device 16 for bridging the door contacts 29, 30. This is illustrated above the time axis 51 by the re-activated signal. Since the elevator car is 2 and the request is done, the safety device 16 switches the lock-up device 45 again in the lock-up state. At the time t4, the bridging of the door contacts 29, 30 has occurred. However, an error has also occurred. Therefore, the speed of the elevator car 2 increases. In Fig. 8, the increase of the speed v of the elevator car 2 starts approximately at time t4. In addition, a speed limit of 0.3 m / s is stored in the memory 41 of the safety device 16. At point 54, the safety device 16 detects an exceeding of this speed limit.

Without the function of the safety device 16, the speed v of the elevator car 2 would increase further, so that the elevator car 2 leaves the holding zone at time t8. This could lead to serious accidents, especially personal injury.

However, at point 54, the safety device 16 detects the malfunction so that the lock-up device 45 is switched to the non-lock-up state, as illustrated above the time axis 52. Since the doors 9, 10 are still open, this emergency braking is triggered. The increase in speed v shown in region 53 is therefore prevented.

The safety device 16 may also differentiate several cases with respect to the speed limit. For example, a distinction can be made between a case in which the elevator car with closed doors 9, 10 enters the holding zone 8 and a case in which the elevator car 2 is repositioned with the doors 9, 10 open. This also allows for the case that the elevator car 2 with closed doors 9, 10 enters the holding zone 8 and in this case an error occurs, a release of the emergency stop. Information required for this purpose can be exchanged, for example, via the security bus 47.

Even without a safety bus 47, however, a distinction can be made by the request from the elevator control 27 for bridging the door contacts 29, 30.

The elevator installation 1 can also be designed in other ways. For example, the safety device 16 may be completely or partially integrated in the elevator control 27. Furthermore, a plurality of door contacts 29, 30 may be provided for each door 9, 10. This creates redundancy. In addition, such door contacts 29, 30 may also be designed differently. As a result, the security can be increased by diversification. Another possibility is that the elevator control 27 performs the approach of the floor 7 and / or Repositioningierungsfahrten with a limited acceleration. Such a limit acceleration can serve as the basis for an acceleration limit, from which the safety device 16 detects a malfunction. The acceleration limit value for detecting the malfunction may here be selected to be slightly larger than the limit acceleration for starting and repositioning.

In addition, an acceleration threshold, a speed limit, and a travel limit taken into account by the safety device 16 may vary depending on certain operating conditions. Such changes can be made via a security bus 47 between the Safety device 16 and the elevator control 27 are tuned. Specifically, a distinction can be made between starting the floor 7 and repositioning the elevator car 2 when the doors 9, 10 are open.

An emergency program triggered by the safety device 16 can likewise be selected via the safety bus 47.

Furthermore, the speed limit and the acceleration limit, which are taken into account by the safety device 16 for error detection, depending on the detected speed v of the elevator car 2, a time t and a request for bridging the door contacts 29, 30, between a start of the floor 7th and a repositioning on the floor 7 to be changed.

In addition, the safety device 16 can also respond to a request from the elevator control 27 for bridging the door contacts 29, 30. In this case, the response may depend on the instantaneous acceleration a and / or the instantaneous speed v and / or the currently traveled distance s or the position of the elevator car 2 in the elevator shaft 3 and / or the acceleration limit value and / or the speed limit value and / or the travel limit value. This response may then be taken into account by the elevator controller 27 for controlling the prime mover unit for the elevator car 2 or the like. Furthermore, the speed detected by the speed detection device 39 and / or the acceleration detected by the acceleration detection device 38 can also be used to draw conclusions about the state of one or more brakes for stopping the elevator car 2 getting closed. As a result, a wear of the brake is detected and excessive wear of the brake can be prevented by a timely request for the maintenance of the elevator system 1.

The invention is not limited to the described embodiments.

Claims (11)

Elevator installation (1) having at least one elevator car (2) arranged in an elevator shaft (3) and a safety device (16), wherein a plurality of holding zones (8) are provided in the elevator shaft (3), wherein the safety device (16) an opening of at least one door (9, 10) in at least substantially standing elevator car (2) in the holding zone (8), wherein an acceleration detection means (38) connected to the safety device (16) is provided, which for detecting a Acceleration of the elevator car (2) at least when the door is open (9, 10) is used, and wherein the safety device (16) at least when the door (9, 10) in response to at least one detected by the acceleration detection means (38) instantaneous acceleration Malfunction detects. Elevator installation according to claim 1,
characterized,
in that the safety device (16) detects the malfunction in relation to an acceleration limit value specified for the acceleration detected by the acceleration detection device (38). Elevator installation according to claim 1 or 2,
characterized,
that the safety means (16) upon detection of the malfunction causes an emergency stop. Elevator installation according to one of claims 1 to 3,
characterized,
that one connected to the safety device (16) Speed detection device (39) is provided which is used for detecting a speed of the elevator car (2) at least when the door (9, 10), and that the safety device (16) with the door open (9, 10) depending on at least the detected by the acceleration detecting means (38) detected instantaneous acceleration and detected by the speed detecting means (39) current speed detects the malfunction. Elevator installation according to claim 4,
characterized,
in that the safety device (16) detects the malfunction with respect to a speed limit value specified for the speed detected by the speed detection device (39). Elevator installation according to claim 4 or 5,
characterized,
in that the speed detection device (39) has a computing unit (46) and that the arithmetic unit (46) calculates the speed of the elevator car (2) from the acceleration detected by the acceleration detection device (38). Elevator installation according to one of claims 1 to 6,
characterized,
in that a distance detection device (40) connected to the safety device (16) is provided, which serves for detecting a distance covered in relation to a starting point of the holding zone (8) of the elevator car (2) in the elevator shaft (3), and in that the safety device (16) with the door open (9, 10) too detects the malfunction as a function of the distance covered by the distance detection device (40). Elevator installation according to claim 7,
characterized,
in that the safety device (16) detects the malfunction in relation to a distance limit preset for the distance covered by the distance detection device (40). Elevator installation according to one of claims 1 to 8,
characterized,
in that in a bridging state for opening the door (9) of the elevator car (2) at least one door contact (29) provided for the door (9) bridges, that in a non-bridging state the bridging device (45 ) in which the lock-up device (45) is not in the lock-up state with the door open (9), an emergency stop occurs and the safety device (16) switches the lock-up device (45) to the non-lock-up state upon detection of the malfunction. Elevator installation according to one of claims 1 to 9,
characterized,
in that the safety device (16) permits an opening of at least one door (9, 10) of the elevator car (2) and an opening of at least one door (10) provided on the holding zone (8) in the case of an at least substantially stationary elevator car (2). Elevator installation according to claim 10,
characterized,
in that the safety device (16) permits an opening of at least one door (9) of the elevator car (2) and an opening of at least one door (10) provided on the holding zone (8) during possible repositioning runs of the elevator car (2).

Images