EP3230189B1 - Aufzugsystem mit sicherheitsüberwachungssystem mit einer master-slave-hierarchie - Google Patents

Aufzugsystem mit sicherheitsüberwachungssystem mit einer master-slave-hierarchie Download PDF

Info

Publication number
EP3230189B1
EP3230189B1 EP15804827.2A EP15804827A EP3230189B1 EP 3230189 B1 EP3230189 B1 EP 3230189B1 EP 15804827 A EP15804827 A EP 15804827A EP 3230189 B1 EP3230189 B1 EP 3230189B1
Authority
EP
European Patent Office
Prior art keywords
data
unit
elevator system
safety
signals
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP15804827.2A
Other languages
German (de)
English (en)
French (fr)
Other versions
EP3230189A1 (de
Inventor
Astrid Sonnenmoser
David Michel
Reto Tschuppert
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Inventio AG
Original Assignee
Inventio AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Inventio AG filed Critical Inventio AG
Priority to PL15804827T priority Critical patent/PL3230189T3/pl
Publication of EP3230189A1 publication Critical patent/EP3230189A1/de
Application granted granted Critical
Publication of EP3230189B1 publication Critical patent/EP3230189B1/de
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • BPERFORMING OPERATIONS; TRANSPORTING
    • B66HOISTING; LIFTING; HAULING
    • B66BELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B5/00Applications of checking, fault-correcting, or safety devices in elevators
    • B66B5/0006Monitoring devices or performance analysers
    • B66B5/0018Devices monitoring the operating condition of the elevator system
    • B66B5/0031Devices monitoring the operating condition of the elevator system for safety reasons
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B66HOISTING; LIFTING; HAULING
    • B66BELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B1/00Control systems of elevators in general
    • B66B1/34Details, e.g. call counting devices, data transmission from car to control system, devices giving information to the control system
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B66HOISTING; LIFTING; HAULING
    • B66BELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B1/00Control systems of elevators in general
    • B66B1/34Details, e.g. call counting devices, data transmission from car to control system, devices giving information to the control system
    • B66B1/3415Control system configuration and the data transmission or communication within the control system
    • B66B1/3423Control system configuration, i.e. lay-out
    • B66B1/3438Master-slave control system configuration
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B66HOISTING; LIFTING; HAULING
    • B66BELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B1/00Control systems of elevators in general
    • B66B1/34Details, e.g. call counting devices, data transmission from car to control system, devices giving information to the control system
    • B66B1/3415Control system configuration and the data transmission or communication within the control system
    • B66B1/3446Data transmission or communication within the control system
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B66HOISTING; LIFTING; HAULING
    • B66BELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B5/00Applications of checking, fault-correcting, or safety devices in elevators
    • BPERFORMING OPERATIONS; TRANSPORTING
    • B66HOISTING; LIFTING; HAULING
    • B66BELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B9/00Kinds or types of lifts in, or associated with, buildings or other structures

Definitions

  • the present invention relates to an elevator system, in particular an elevator system with a security monitoring system.
  • Elevator systems are generally used to transport people or objects in a vertical direction.
  • safety monitoring systems are used regularly. These monitor, for example, with the help of detecting safety function components, i.e. for example, using data or signals from sensors or from control units, current operating states of the elevator system. For example, a speed of an elevator car or a closed state of doors of the elevator system are monitored. When a critical operating state is detected, the safety monitoring system activates suitable activatable safety function components, such as a braking device or a safety device for braking or stopping the elevator car.
  • suitable activatable safety function components such as a braking device or a safety device for braking or stopping the elevator car.
  • a detecting safety function component can be understood to mean, for example, a sensor or an output interface of a control device, which determine and output signals or data that indicate information about a current operating state within the elevator system.
  • An activatable safety function component can be understood to mean, for example, an actuator, motor or the like, which can actively influence a current operating state within the elevator system. Signals or data, for example from sensors, were each transmitted to the central safety monitoring unit and processed there.
  • the central safety monitoring unit appropriately activated one or more of the activatable safety function components to ensure the safety of the elevator system and in particular to ensure the persons carried. For example, when an excessive speed in the elevator car was detected, a braking or safety device was activated. Signals or data generated by sensors were transmitted unprocessed to the central safety monitoring unit, processed exclusively there, and then, based on the processing results, control signals were generated which were sent to the activatable safety function components in order to appropriately activate them.
  • EP 2 022 742 A1 an elevator system with a decentralized control system is therefore proposed.
  • the decentralized control system has several evaluation units, wherein signals can be transmitted between the evaluation units via bus connections. Compared to centralized systems, wiring can be reduced and response times can be reduced.
  • the US 2011302466 A1 describes an elevator system with a safety monitoring system for checking safety function components.
  • the security monitoring system has a master unit and many slave units.
  • the slave units are each assigned to sensors and switches and receive signals which they transmit to the master unit in a particularly secure process.
  • the master unit processes this data and, if necessary, activates suitable safety function components, for example to stop the elevator car.
  • an elevator system which has a drive, a car, a plurality of safety function components for providing safety functions at different positions within the elevator system and a safety monitoring system for checking all safety function components.
  • the security monitoring system has several security monitoring units.
  • the cabin is operatively connected to the drive and can be moved along a travel path by means of the drive.
  • the elevator system is characterized in that at least some, preferably each, of the security monitoring units has an input interface for reading in data or signals. At least some of the security monitoring units of the security monitoring system are connected to one another via data exchange channels.
  • the security monitoring units of the security monitoring system are organized in the form of a master-slave hierarchy, one of the security monitoring units being designed as a master unit and at least one of the security monitoring units being designed as a slave unit.
  • at least one slave unit has a data processing unit for processing the data or signals into control signals and an output interface for outputting the control signals to at least one security function component assigned to the respective security monitoring unit.
  • a safety monitoring system of an elevator system can be designed to be particularly safe and efficient if several safety monitoring units are arranged in a decentralized manner, at least some of which signals, e.g. B. are provided by sensors or other control devices, not only be able to forward them to a central unit, but also process these signals themselves and control the resulting safety function components.
  • These decentralized security monitoring units are thus able to locally store data such. B. read in from sensors or control units, process and then control associated safety function components.
  • these are connected to one another via data exchange channels via which data or signals can be transmitted.
  • the security monitoring units can thus communicate with one another. In this way, several safety monitoring units can be combined to form an entire safety monitoring system, by means of which an entire elevator system can be monitored.
  • One of the security monitoring units is designed as a master unit, whereas at least one further security monitoring unit is designed as a slave unit.
  • the master unit is superior to the slave unit or units, i.e. she has z. B. priority rights with regard to the request, forwarding and / or further processing of signals and data and with regard to the control of safety function components.
  • the master unit can cause a slave unit to adopt a specific operating mode in which the slave unit only forwards signals or data from sensors or devices assigned to it to the master unit.
  • the master unit can process these signals and then instruct the slave unit to control the safety function components assigned to it in a manner determined by the master unit.
  • the master unit can authorize the slave unit to process such signals or data itself and to control the safety function components independently based on this.
  • a slave unit it is also possible for a slave unit to have only one input interface and to transmit signals or data from sensors or devices assigned to it only to the master unit or to other slave units.
  • Such slave units can be of simpler and therefore less expensive design.
  • all slave units can have a data processing unit for processing the data or signals into control signals and an output interface for outputting the control signals to at least one security function component assigned to the respective security monitoring unit.
  • At least one slave unit can be designed to read in data or signals, which indicate a safety state within the elevator system, via the input interface and to process them by means of the data processing unit, and to independently control the assigned safety function component based on a processing result.
  • At least this one slave unit is thus able, for. B. independently process signals or data supplied by sensors and independently control a safety function component.
  • the slave unit is connected to an activatable safety function component assigned to it and can thus carry out part of the safety monitoring required in the elevator system actively and independently.
  • the slave unit can be connected to its associated detecting and / or activatable safety function components and can preferably be arranged in local proximity to them. This local proximity means that times for the transmission of data and signals can be kept short.
  • data can be processed locally in the slave unit and do not need to be transmitted over long distances to a centrally arranged data processing device.
  • the same slave unit can be designed in accordance with one embodiment of the invention to read in data or signals which indicate a safety state within the elevator system via the input interface and to transmit them to the master unit via the data exchange channel.
  • the master unit can then be designed to use its data processing unit to process the transmitted data or signals and to transmit processing results to the slave unit via the data exchange channel.
  • the slave unit can be designed to control an assigned safety function component based on the transmitted processing results.
  • the slave unit behaves passively and only forwards signals or data from sensors or other devices to the master unit and forwards control commands from the master unit to its associated safety function components. The actual data processing does not take place in the passive slave unit in this case, but in the master unit.
  • one or more slave units can also be provided in the elevator system, which are designed exclusively for this passive operating mode.
  • at least one of the slave units present in the elevator system should be able to be active, i.e. independently to process signals or data and to generate control signals from them, with the aid of which an assigned safety function component can be used directly, i.e. can be controlled without involving the master unit.
  • this slave unit is still subordinate to the master unit and can therefore, according to one embodiment of the invention, be designed to control the assigned safety function component independently only if it has previously been authorized for this by the master unit.
  • the master unit can control the slave unit accordingly, so that it either adopts an operating mode in which it independently controls safety function components, or it adopts an operating mode in which it does not operate independently, but e.g. B. only passively forwards data.
  • the master unit can therefore decide whether it should carry out certain control functions centrally or whether these functions should be carried out decentrally by subordinate safety monitoring units in the form of slave units. If necessary, the master unit can also instruct the slave unit how to perform a control function.
  • At least one slave unit is designed to read in data or signals, which indicate a safety state within the elevator system, via the input interface and to continuously and independently monitor them by means of the data processing unit, and only then to send data or signals to the master unit via the data exchange channel transmitted when a predeterminable critical security state is recognized on the basis of the data or signals.
  • the slave unit can thus carry out a considerable part of the monitoring effort independently and thus relieve the master unit, for example. Only if the slave unit z. B. recognizes that based on the read in and continuously monitored signals or data thereof it can be assumed that the elevator system is not in a normal state, the slave unit reports this to the master unit.
  • the slave unit can forward the signals or data it has read in directly to the master unit or alternatively preprocess it and then forward the preprocessed result to the master unit.
  • the transmission of a kind of warning signal to the master unit is also conceivable.
  • the master unit can then decide how to proceed and, for example, instruct the slave unit to implement measures by suitable control of safety function components, which bring the elevator system back into the normal state or at least into a safe state.
  • each slave unit can exchange signals or data with the master unit via a data exchange channel.
  • each of the slave units is connected to the master unit in such a way that signals or data can be transmitted between the two units.
  • the data exchange channel can be of any design and can be adapted in particular for a specific type of data transmission or for a specific application.
  • the security monitoring units and the data exchange channels can be designed for secure data transmission via the data exchange channels.
  • a security protocol can be used for data transmission.
  • data transmission can be regarded as "safe” if, for example, it corresponds to DIN ISO 61508 or if it fulfills the standardized safety integrity level 3 (Safety Integrity Level, SIL 3).
  • Safety data transmission can contribute to the reliability of the security monitoring system. In particular, system errors or manipulations of the data transmission can be recognized.
  • suitable bus systems for the targeted assignment of data or Signals to one of the slave units or from one of the slave units may be provided.
  • Serial or parallel bus systems can be used.
  • a CAN bus Controller Area Network
  • Bus systems can enable controllable, fast and / or reliable data transmission without having to wire each unit directly to every other unit. Instead, the bus system can, for example, make a common data connection controllably available to different participants.
  • bus systems can be provided for the data transmission between master and slave units, which allow a particularly fast data transmission in order to be able to ensure short transmission times and thus fast reaction options within the security monitoring system.
  • the data exchange channels can be designed for wireless data or signal transmission.
  • data and / or signal transmission can take place using technologies such as WLAN (wireless local area network), RF data transmission (radio frequency) or optical data transmission, for example by means of modulated laser radiation.
  • WLAN wireless local area network
  • RF data transmission radio frequency
  • optical data transmission for example by means of modulated laser radiation.
  • a wireless data transmission for example between an elevator car and an elevator shaft, could e.g. B. enable an elevator system without a hanging cable.
  • signals or data can also be transmitted by cable, for example using technologies such as Ethernet, UART (Universal Asynchronous Receiver Transmitter) or the like.
  • the data processing unit of the master unit has a faster data processing rate than the data processing unit of the slave unit.
  • the master unit and a slave unit differ in their data processing capabilities.
  • a slave unit only needs to be designed to receive and process data or signals from specific sensors assigned to it and then to control actuators assigned to it.
  • the master unit should be able to receive and process data and signals from various sources and from them forward the resulting control signals to actuators. The amount of data to be processed can therefore be significantly higher for the master unit than for a slave unit.
  • the master unit should preferably be able to control or coordinate rights and tasks of the slave units.
  • the master unit is arranged on a central component such as, for example, a machine room, an elevator shaft, an elevator car, a counterweight or an elevator pit, and at least one slave unit is arranged on another, peripheral component of the group mentioned.
  • the master unit can thus be arranged at a distance from one or each of the slave units.
  • a distance between master and slave unit can be several meters, for example more than 2m or 10m, up to a few hundred meters, for example up to 200m, 500m or even 2000m.
  • the master or slave unit can be arranged directly on or close to one of the components mentioned in order to, for. B. to be able to monitor their functions.
  • a distance between the master and slave unit can be significantly larger than a distance between the slave unit and its assigned safety function components, i.e. Sensors and actuators. In this way, data transmission times can be kept short, in particular in operating situations in which safety function components are checked and controlled locally by an independently operating slave unit.
  • Embodiments of the invention allow a variety of advantages.
  • the decentralized safety monitoring system proposed here for an elevator system which is subdivided into a number of different sub-safety components (sometimes also referred to as SSUs, safety supervision units), can allow secure monitoring of distributed systems.
  • SSUs safety supervision units
  • the master unit and at least one slave unit are connected to one another via a communication channel and can exchange information with one another, each of these master and slave units having its own sensor system which is monitored by it.
  • monitoring units By using different, preferably spatially separated monitoring units, it can be made possible to build a larger system, i.e. e.g. B. a higher elevator shaft, monitor and / or group monitoring tasks locally or logically.
  • a larger system i.e. e.g. B. a higher elevator shaft, monitor and / or group monitoring tasks locally or logically.
  • the decentralized, distributed arrangement of the system can result in smaller sections or sensor systems which can be operated at a higher data transmission rate or higher data processing rate.
  • a number of participants i.e. e.g. B.
  • a number of safety function components monitored in total in the elevator system can be increased. This can increase the safety of the elevator system.
  • interdependent safety monitoring units with a master unit and one or more slave units can be provided.
  • the master unit can actively intervene, i.e. For example, influence a safety circuit in the elevator system.
  • All slave units communicate their status to the master unit, which then z. B. can decide whether there is currently a security risk and can trigger appropriate reactions.
  • the master unit is allowed to combine information from different units and to react accordingly "more intelligently”. Overall, composite advantages can be realized.
  • each or some of these units may have the ability to intervene and respond to a security risk.
  • Information is exchanged between the units, e.g. B. for diagnostic purposes. In such an arrangement, however, there are generally no composite advantages, for example by combining superordinate information.
  • various monitoring functions can be performed at distributed locations. B. like a "safety net" over the entire elevator.
  • results from different units can together form new results or monitoring functions, e.g. B. due to combinations of information.
  • Fig. 1 shows a functional diagram of an elevator system according to an embodiment of the invention.
  • FIG. 12 shows a schematic sketch of an elevator system 1 according to an exemplary embodiment of the present invention.
  • the elevator system 1 has a drive 3 and a car 5.
  • the car 5 can be moved by the drive 3 along a travel path within an elevator shaft 7.
  • a cable 21 guided over deflection rollers 23 connects the cabin 5 to a counterweight 17.
  • the elevator system 1 has a multiplicity of detectable and / or activatable security monitoring components 9a-9p, which are distributed over the entire elevator system and at different positions e.g. B. within the Elevator shaft 7, on the drive 3 or on the doors of the elevator shaft 7 or the car 5 are arranged.
  • a security monitoring system 11 is used to monitor the elevator system in order, for. B. to recognize safety-critical conditions and, if necessary, to take suitable measures.
  • the safety monitoring system 11 serves to control or coordinate the various safety function components 9a-9p.
  • the security monitoring system 11 comprises a plurality of security monitoring units 13a to 13e.
  • the safety monitoring units 13a to 13e are arranged at different positions within the elevator system 1.
  • a first safety monitoring unit 13a is arranged on the cabin 5 and is connected to a plurality of safety function components 9c, 9d, 9e, 91, 9k, 9j, which are also arranged there.
  • the connection can be wired or wireless and enable an exchange of data or signals.
  • the safety function components can be detecting and z. B. can be designed as sensors, detectors, actuated contacts or the like to determine operating states within the elevator system 1, d. H. in this case on the cabin 5 to be able to determine.
  • the safety function components can also be activated and z. B. be designed as actuators, motors or the like to effect certain functions within the elevator system 1.
  • the safety function components 9c, 9d, 9e, 91, 9k, 9j can be designed as a detecting component in the form of a catch contact, emergency end contact, emergency brake switch, car door contact or the like, or as an activatable component in the form of an actuator that activates a braking device or a catching device.
  • a second security monitoring unit 13b can be arranged on the counterweight 17, for example.
  • a third safety monitoring unit 13c can be arranged in an elevator shaft pit 19, for example.
  • a fourth security monitoring unit 13d can be used, for example, to monitor doors of the elevator shaft 7.
  • Each of these security monitoring units 13b, 13c, 13d can be provided with one or more locally provided and assigned security function components 9f, 9g, 9h, 9i, 9m, for example in the form of a Slack rope contact, an emergency brake switch of the pit, a slack rope contact of a speed limiter or the like can be connected.
  • a fifth safety monitoring unit 13e is arranged on the drive 3 provided, for example, in a machine room.
  • This safety monitoring unit 13e is connected to nearby safety function components 9a, 9b, 9n, 9o, 9p, for example in the form of a contact of a safety device for the counterweight, a contact of a speed limiter, an emergency brake switch in the machine room or the like.
  • Each or at least some of the security monitoring units 13a-13e has its own data processing unit 20 (only shown for security monitoring unit 13a).
  • the data processing unit can include, for example, a processor, a CPU or the like, and possibly a storage medium for data storage.
  • the security monitoring units 13a-13e furthermore have an input interface 21 and an output interface 22 (only shown for the security monitoring unit 13a), via which data are read in by one of the detecting security function components 9a-9p or output to one of the activatable security function components 9a-9p.
  • At least some of the security monitoring units 13a-13e are thus able to carry out security monitoring tasks independently, at least locally, by reading data or signals, for example from sensors, processing them in the data processing unit and then actuating them appropriately.
  • the data exchange channels 15 can be wired or wireless. Distances over which the security monitoring units 13a-13e are connected to one another via the data exchange channels are typically significantly larger than distances between one of the security monitoring units 13a-13e and the security function components 9a-9p assigned to it.
  • the data exchange channels 15 can have bus systems by means of which a data transmission or a data flow can be controlled.
  • the fifth security monitoring unit 13e is designed as a master unit, whereas the first to fourth security monitoring units 13a-13d are each designed as slave units.
  • the master unit is to be regarded as the parent of the slave units. All slave units are connected directly or indirectly to the master unit via data exchange channels 15. The master unit can thus both receive data or signals from the slave units and send data or signals to them.
  • the master unit can also specify, among other things, whether or in what way data or signals should be transmitted from one of the slave units to the master unit or whether the slave unit should operate independently.
  • the master unit can specify each of the slave units whether it should only forward the data or signals that it receives from the associated safety function components assigned to it to the master unit or whether it should process these data or signals partially or completely independently.
  • Mixed modes of operation can also be used, in which e.g. B. some data may be evaluated by the slave unit itself, but other data should be forwarded unprocessed to the master unit.
  • a partial preprocessing of the data received by the slave unit within the slave unit and subsequent forwarding of the preprocessed data to the master unit is also conceivable.
  • the master unit can also be connected to bus systems provided in the data exchange channels 15 and be authorized to use them to control, among other things, a data flow through the data exchange channels 15.
  • the proposed elevator system 1 with a decentralized security monitoring system 11 with many security monitoring units 13a-13e distributed over the elevator system 1, which are organized in a master-slave hierarchy, can enable an extremely flexible operating mode adapted to different environmental conditions.
  • monitoring tasks can be carried out distributed over several security monitoring units, although the master unit can, in principle, at all times keep control over the type and extent of the tasks performed by the slave units. This can ensure a high level of security of the system can be guaranteed.
  • the master unit does not necessarily have to have a very high data processing capacity, since it can leave part of the security monitoring tasks to the slave units. Among other things, this can help reduce costs.
  • the monitoring tasks performed directly by the slave units can be carried out very quickly, since data transmission distances can be kept short. This in turn can contribute to quick response times and thus, for example, to increased safety of the elevator system, for example if a critical operating state is quickly identified and measures are then taken quickly, such as, for example, B. the activation of a braking device or a safety gear should be initiated.

Landscapes

  • Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Structural Engineering (AREA)
  • Indicating And Signalling Devices For Elevators (AREA)
  • Maintenance And Inspection Apparatuses For Elevators (AREA)
  • Elevator Control (AREA)
EP15804827.2A 2014-12-10 2015-12-07 Aufzugsystem mit sicherheitsüberwachungssystem mit einer master-slave-hierarchie Active EP3230189B1 (de)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PL15804827T PL3230189T3 (pl) 2014-12-10 2015-12-07 Układ windy z systemem monitorowania bezpieczeństwa z hierarchią master-slave

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP14197111 2014-12-10
PCT/EP2015/078771 WO2016091779A1 (de) 2014-12-10 2015-12-07 Aufzugsystem mit sicherheitsüberwachungssystem mit einer master-slave-hierarchie

Publications (2)

Publication Number Publication Date
EP3230189A1 EP3230189A1 (de) 2017-10-18
EP3230189B1 true EP3230189B1 (de) 2020-06-24

Family

ID=52021066

Family Applications (1)

Application Number Title Priority Date Filing Date
EP15804827.2A Active EP3230189B1 (de) 2014-12-10 2015-12-07 Aufzugsystem mit sicherheitsüberwachungssystem mit einer master-slave-hierarchie

Country Status (12)

Country Link
US (1) US10562738B2 (pl)
EP (1) EP3230189B1 (pl)
KR (1) KR102518003B1 (pl)
CN (1) CN107000965B (pl)
AU (1) AU2015359629B2 (pl)
BR (1) BR112017010771B1 (pl)
CA (1) CA2967545C (pl)
MX (1) MX371433B (pl)
MY (1) MY185020A (pl)
PL (1) PL3230189T3 (pl)
RU (1) RU2700236C2 (pl)
WO (1) WO2016091779A1 (pl)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102022111441A1 (de) 2022-05-09 2023-11-09 Tk Elevator Innovation And Operations Gmbh Aufzugsanlage mit Aufzugsschacht und Schott zum Unterteilen des Aufzugsschacht

Families Citing this family (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102014017486A1 (de) * 2014-11-27 2016-06-02 Thyssenkrupp Ag Aufzuganlage mit einer Mehrzahl von Fahrkörben sowie einem dezentralen Sicherheitssystem
WO2016096763A1 (de) * 2014-12-17 2016-06-23 Inventio Ag Dämpfereinheit für einen aufzug
WO2017191186A1 (de) * 2016-05-04 2017-11-09 Inventio Ag Personentransportanlage mit zentraler steuereinheit und mehreren feldgeräten mit optimiertem fehlfunktionserkennungsverfahren
WO2018050470A1 (de) * 2016-09-13 2018-03-22 Inventio Ag Verfahren zur überwachung einer aufzuganlage
CN109789993B (zh) * 2016-09-29 2020-10-09 因温特奥股份公司 带有具有例如乘客自主撤离的选择的两个单元的电梯安全监督实体
DE102016220197A1 (de) * 2016-10-17 2018-04-19 Robert Bosch Gmbh Verfahren zum Verarbeiten von Daten für ein automatisiertes Fahrzeug
EP3336032B1 (en) * 2016-12-14 2020-10-14 Otis Elevator Company Elevator safety system and method of operating an elevator system
AT520189B1 (de) * 2018-04-17 2019-02-15 Weigl Liftsysteme Gmbh Aufzugssicherheitseinrichtung
CN108910637A (zh) * 2018-07-18 2018-11-30 迅达(中国)电梯有限公司 安全系统
PL3997580T3 (pl) * 2019-07-11 2023-09-04 Inventio Ag Sposób i sieć danych do przesyłania treści danych, w szczególności w instalacji dźwigowej
EP3905606A1 (en) * 2020-04-30 2021-11-03 KONE Corporation Safety communication in an elevator communication system
DE102020127515A1 (de) * 2020-10-19 2022-04-21 Pilz Gmbh & Co. Kg Vorrichtung zum Steuern eines sicherheitskritischen Prozesses
US20240034593A1 (en) * 2020-12-22 2024-02-01 Inventio Ag Elevator, method for controlling an elevator
EP4289775A1 (en) * 2022-06-08 2023-12-13 Otis Elevator Company Stimulation system and method for monitoring an elevator system

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1850554A3 (en) * 2006-04-21 2010-03-17 LONMARK Deutschland e.V. Safe communications in a network
FI125141B (fi) * 2007-01-03 2015-06-15 Kone Corp Hissin turvalaite
FI120088B (fi) * 2007-03-01 2009-06-30 Kone Corp Järjestely ja menetelmä turvapiirin valvomiseksi
CN201077702Y (zh) * 2007-06-16 2008-06-25 重庆永旺科技发展有限公司 电梯安全运行动态监测管理系统终端
MX2010000566A (es) * 2007-07-17 2010-03-08 Inventio Ag Metodo de monitoreo de sistema de elevadores.
ES2499340T3 (es) * 2007-08-07 2014-09-29 Thyssenkrupp Elevator Ag Sistema de elevador
US8151943B2 (en) * 2007-08-21 2012-04-10 De Groot Pieter J Method of controlling intelligent destination elevators with selected operation modes
BRPI0923522B1 (pt) * 2008-12-23 2019-08-06 Inventio Aktiengesellschaft Instalação de elevador
BRPI0923698B1 (pt) * 2008-12-26 2020-01-14 Inventio Ag instalação de elevador com pelo menos duas cabines de elevador, método de monitoramento de uma instalação de elevador e dispositivo de segurança
JP5523443B2 (ja) * 2009-03-25 2014-06-18 三菱電機株式会社 エレベータの信号伝送装置
US9371210B2 (en) * 2010-09-13 2016-06-21 Otis Elevator Company Elevator safety system having multiple buses
EP2594519A1 (de) * 2011-11-15 2013-05-22 Inventio AG Aufzug mit Sicherheitseinrichtung
KR101781279B1 (ko) * 2013-01-23 2017-09-22 미쓰비시덴키 가부시키가이샤 엘리베이터 장치
EP2886500B1 (en) * 2013-12-17 2021-06-16 KONE Corporation An elevator
CN107207185B (zh) * 2015-02-05 2020-09-15 奥的斯电梯公司 用于多轿厢井道系统的操作模式

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102022111441A1 (de) 2022-05-09 2023-11-09 Tk Elevator Innovation And Operations Gmbh Aufzugsanlage mit Aufzugsschacht und Schott zum Unterteilen des Aufzugsschacht

Also Published As

Publication number Publication date
US10562738B2 (en) 2020-02-18
US20170334678A1 (en) 2017-11-23
CN107000965B (zh) 2019-04-12
AU2015359629B2 (en) 2018-12-06
KR20170095220A (ko) 2017-08-22
RU2017123769A3 (pl) 2019-07-17
MX2017007512A (es) 2017-08-22
CA2967545A1 (en) 2016-06-16
CA2967545C (en) 2023-09-05
BR112017010771B1 (pt) 2022-02-22
PL3230189T3 (pl) 2020-10-19
AU2015359629A1 (en) 2017-06-29
MY185020A (en) 2021-04-30
BR112017010771A2 (pt) 2018-01-09
WO2016091779A1 (de) 2016-06-16
RU2700236C2 (ru) 2019-09-13
CN107000965A (zh) 2017-08-01
RU2017123769A (ru) 2019-01-11
EP3230189A1 (de) 2017-10-18
KR102518003B1 (ko) 2023-04-04
MX371433B (es) 2020-01-30

Similar Documents

Publication Publication Date Title
EP3230189B1 (de) Aufzugsystem mit sicherheitsüberwachungssystem mit einer master-slave-hierarchie
EP3224174B1 (de) Aufzuganlage mit einer mehrzahl von fahrkörben sowie einem dezentralen sicherheitssystem
EP2022742B1 (de) Aufzugsystem
EP2284110B1 (de) Elektronisches Sicherheitsystem für einen Aufzug
EP3452397B1 (de) Personentransportanlage mit zentraler steuereinheit und mehreren feldgeräten mit optimiertem fehlfunktionserkennungsverfahren
EP3145787B1 (de) Schienenfahrzeug
DE19939567A1 (de) Vorrichtung zum Steuern von sicherheitskritischen Prozessen
DE102017205354A1 (de) Mehrkabinenaufzuganlage sowie Verfahren zum Betreiben einer Mehrkabinenaufzuganlage
DE102007024877A1 (de) Verfahren zur Bildung und Steuerung eines Fahrzeugverbandes
DE102016100175A1 (de) Robotersystem und Verdrahtungsverfahren für Robotersystem
EP3468905B1 (de) Personentransportanlage mit zentraler steuereinheit und mehreren feldgeräten, welche mit durch karenzzeiten priorisierte datentelegramme kommunizieren
EP2946256A2 (de) Anlage, insbesondere fertigungsanlage
DE102015211587A1 (de) Steueranordnung für ein Fahrzeug
DE112014006106B4 (de) Sicherheitssteuersystem und Sicherheitssteuergerät
WO2013124050A1 (de) Verfahren zur steuerung eines systems
EP3730440A1 (de) Steuereinrichtung zum steuern eines betriebs einer personentransportanlage
DE102022214445A1 (de) Managementsystem und Verfahren zu dessen Steuerung für ein Batteriemanagementsystem
EP3049289A1 (de) Integriertes und kombiniertes türbetriebssystem für nutzfahrzeuge
EP4267503A1 (de) Aufzug, verfahren zur steuerung eines aufzuges
DE102014202984A1 (de) Verteiltes System, Überwachungsschaltung für ein verteiltes System
WO2022058276A1 (de) Sicherheitsvorrichtung zum steuern sicherheitsrelevanter ucm- und udm-funktionen in einer aufzuganlage
EP3693821A1 (de) Drahtlose informationsübermittlung zwischen einer robotergruppe und einer stationären kommunikationseinheit
DE102015011272A1 (de) Verfahren und System zum Betreiben von Türen einer Fahrzeugkolonne
WO2022248178A1 (de) Aufzugsystem und verfahren zum betreiben eines solchen aufzugsystems
DE102019109753A1 (de) Industrieanlage

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20170524

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

RIN1 Information on inventor provided before grant (corrected)

Inventor name: SONNENMOSER, ASTRID

Inventor name: MICHEL, DAVID

Inventor name: TSCHUPPERT, RETO

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: EXAMINATION IS IN PROGRESS

17Q First examination report despatched

Effective date: 20190410

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20200226

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502015012880

Country of ref document: DE

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1283710

Country of ref document: AT

Kind code of ref document: T

Effective date: 20200715

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: FI

Ref legal event code: FGE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200924

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200925

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200924

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20200624

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20201026

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FI

Payment date: 20201218

Year of fee payment: 6

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20201024

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502015012880

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20210325

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20201231

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20201207

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20201207

REG Reference to a national code

Ref country code: AT

Ref legal event code: MM01

Ref document number: 1283710

Country of ref document: AT

Kind code of ref document: T

Effective date: 20201207

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: PL

Payment date: 20211124

Year of fee payment: 7

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20201207

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20200624

REG Reference to a national code

Ref country code: FI

Ref legal event code: MAE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20201231

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20211207

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20231219

Year of fee payment: 9

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20231221

Year of fee payment: 9

Ref country code: FR

Payment date: 20231226

Year of fee payment: 9

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20231227

Year of fee payment: 9

Ref country code: CH

Payment date: 20240101

Year of fee payment: 9

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PL

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20221207