EP3418482B1 - Electric door drive, security door and method of operating a security door - Google Patents

Description

The present invention relates to a door drive for a safety door such as a fire or smoke protection door, comprising an electric drive unit for electrically driving a movable door leaf of the safety door, a control unit that can be connected to the electric drive unit for outputting control signals to the electric drive unit for opening and / or or closing the safety door, at least one incident reporting device which is designed to emit a disruptive signal to the control unit if a disruption criterion is present, the control unit being designed to prevent electrical driving of the door leaf when such a disruptive signal is received and, however, when the door leaf is not closed bring about a single closing of the door leaf. The present invention also relates to a safety door with such an electric door drive and a method for operating a safety door in several operating modes
DE 10 2015 213 711 A1 and EP 2 400 104 A2 disclose door drives for security doors.

Such door drives are used, for example, to automatically close fire doors in the event of a fire in order to counteract the spread of the fire. During the regular operation of the safety door, the door leaf can be opened and closed electrically as with a normal, i.e. not safety-relevant, automatic door. The incident reporting device can in particular be a fire alarm.

The electrical disconnection of the drive unit from the control unit is initiated in the event of an alarm for safety reasons, in particular to prevent undesired opening of the door leaf and to enable the door leaf to be closed, preferably without current, if the door leaf is not yet closed. After closing as required, the door leaf is held in the closed position under the action of a mechanical energy storage device, regardless of the power supply and any control signals. This is fundamentally desirable with regard to the protective function of the security door, but represents a problem insofar as people fleeing are hindered. In the case of security doors with a high protective function in particular, the door leaves are often relatively heavy, so that the corresponding mechanical energy storage devices must also exert a high closing force.

In particular, weak people or people with physical impairments may no longer be able to open the door leaf if they escape. Therefore, security doors of the type mentioned are generally not suitable for barrier-free construction. An electrical opening of the door leaf in the event of an escape, however, is ruled out in principle with such door drives, since the control unit has no access to the electrical drive unit in the event of a malfunction.

The object of the invention is to provide a door drive that securely closes a door in the event of a fire alarm or smoke alarm in normal network operation and also in the event of a network failure. Furthermore, the door drive should help weak people or

Allow people with physical disabilities to use the door as an escape door in the event of an alarm.

The object is achieved by a door drive with the features of claim 1.

• eine elektrische Antriebseinheit zum elektrischen Antreiben eines beweglichen Türflügels der Sicherheitstür,
• eine mit der elektrischen Antriebseinheit verbindbare Steuerungseinheit zum Ausgeben von Steuersignalen an die elektrische Antriebseinheit zum Öffnen und/oder Schließen der Sicherheitstür,
• zumindest eine Störfallmeldeeinrichtung, welche dazu ausgebildet ist, bei Vorliegen eines Störkriteriums ein Störsignal an die Steuerungseinheit abzugeben, wobei die Steuerungseinheit dazu ausgebildet ist, bei Erhalt eines solchen Störsignals ein elektrisches Antreiben des Türflügels zu unterbinden, vorzugsweise mittels einer elektrischen Trennung der elektrischen Antriebseinheit, bei nicht geschlossenem Türflügel jedoch ein einmaliges Schließen des Türflügels herbeizuführen, wobei die Steuerungseinheit zumindest einen Mikrokontroller, eine Motoransteuerung und ein Motorrelais aufweist, wobei der zumindest eine Mikrokontroller dazu ausgebildet ist, das eine Motorrelais zum Öffnen und Schließen der Sicherheitstür anzusteuern und das Motorrelais zu öffnen, um das elektrische Antreiben des Türflügels bei Vorliegen des Störkriteriums zu unterbinden,
• zumindest eine Notöffnungseingabevorrichtung, die bei Aktivierung ein Notöffnungssignal an die Steuerungseinheit übermittelt, wobei die Steuerungseinheit dazu ausgebildet ist, bei Erhalt eines solchen Notöffnungssignals zumindest einmalig ein unterbundenes elektrisches Antreiben des Türflügels zu erlauben, um eine Öffnungsbewegung des Türflügels zumindest unterstützend sowie ein erneutes Schließen des Türflügels herbeizuführen, und
• einen mechanischen Energiespeicher, vorzugsweise in Form einer Federanordnung, zum Speichern von potentieller Energie, wobei der mechanische Energiespeicher derart mit dem Türflügel koppelbar oder gekoppelt ist, dass bei einer Öffnungsbewegung des Türflügels Energie in den Energiespeicher geladen wird und, ggfs. nach Freigabe des Energiespeichers, eine Schließbewegung des Türflügels unter Abgabe von Energie des Energiespeichers zumindest unterstützt wird, wobei die Steuerungseinheit dazu ausgebildet ist, bei Vorliegen des Störkriteriums, und bei nicht geschlossenem Türflügel ein Schließen des Türflügels mittels des mechanischen Energiespeichers herbeizuführen, falls ein elektrisch angetriebenes Schließen nicht oder nicht in geeigneter Weise möglich ist.

A door drive according to the invention comprises:

• an electric drive unit for electrically driving a movable door leaf of the security door,
• a control unit that can be connected to the electric drive unit for outputting control signals to the electric drive unit for opening and / or closing the safety door,
• at least one incident reporting device, which is designed to emit an interference signal to the control unit when an interference criterion is present, the control unit being designed to prevent electrical driving of the door leaf when such an interference signal is received, preferably by means of electrical isolation of the electrical drive unit however, to bring about a single closing of the door leaf when the door is not closed, the control unit having at least one microcontroller, a motor control and a motor relay, the at least one microcontroller being designed to control the one motor relay for opening and closing the safety door and to open the motor relay, in order to prevent the door leaf from being driven electrically if the disturbance criterion is present,
• At least one emergency opening input device which, when activated, transmits an emergency opening signal to the control unit, the control unit being designed to allow at least one electrical drive of the door leaf to be suppressed when such an emergency opening signal is received, in order to at least support an opening movement of the door leaf and to close the door leaf again bring about, and
• a mechanical energy store, preferably in the form of a spring arrangement, for storing potential energy, wherein the mechanical energy store can be coupled or coupled to the door leaf in such a way that energy is charged into the energy store when the door leaf is opened and, if necessary, after the energy store has been released, a closing movement of the door leaf is at least supported by releasing energy from the energy storage device, the control unit being designed to close the door leaf by means of the mechanical energy storage device if the disturbance criterion is present and the door leaf is not closed, if electrically driven closing is not or not in is possible in a suitable manner.

The electric door drive according to the invention can safely close a safety door by means of the control unit in the event of a fire alarm or smoke alarm both in normal network operation and in the event of a network failure. By means of the emergency opening input device, weak persons or persons with physical impairments can use the door as an escape door in the event of an alarm despite the door being securely closed. For this purpose, the control unit is designed to allow a door that has been closed in an emergency to be opened again.

Furthermore, the invention has the advantage that through the use of at least a microcontroller signals from the incident avoidance device and from the emergency opening input device can be processed more quickly, so that electrical functions of the safety door can be carried out more quickly.

A redundant energy supply is provided, the redundant energy supply being designed to replace a power supply for the door drive from a power network in the event of a fault criterion and / or a power failure. By providing a redundant energy supply, the electric door drive according to the invention can be opened electrically in the event of a fire alarm or smoke alarm, even in the event of a power failure, by generating an emergency opening signal. This means that even in the event of a power failure, weak people or people with physical disabilities can use the security door as an escape door.

The redundant energy supply is formed by an accumulator. Such rechargeable batteries can be provided in a particularly simple and inexpensive manner. The size or capacity of the accumulators used can be adapted relatively easily to the desired operating mode.

A charging and monitoring device is also provided, by means of which a state of the accumulator is monitored. In the event of a power failure, the charging and monitoring device can be used to ensure that the accumulator is always sufficiently charged. Furthermore, the charging and monitoring device can be designed to detect a defect in the accumulator so that it can be replaced in good time before an emergency occurs.

According to the invention, the control unit is designed to cause an electrical separation of the electric drive unit from the redundant energy supply when a low state of charge of the redundant energy supply is detected, preferably by means of the charging and monitoring device, and to maintain this until the power supply from the mains is guaranteed again becomes. This prevents the safety door from being kept open in the event of danger.

The at least one microcontroller is particularly preferably designed to close the motor relay for a predefined period of time when the emergency opening input device is activated. By closing the motor relay, an electrical connection between the motor control and the drive unit can be temporarily re-established in order to enable the door to be opened without barriers.

Two microcontrollers are advantageously provided, each of which is connected to the fault reporting device, the emergency opening input device and the motor relay. This allows a redundant evaluation of the signals from the incident reporting device and / or the emergency opening input device in the control unit. Accordingly, the control unit can only switch the electric door drive from normal operation to alarm operation or execute control commands in alarm operation only with independent and proper detection of signals from the fault reporting device and / or the emergency opening input device.

The second microcontroller is preferably designed to carry out a redundant evaluation of the signals of the at least one fault reporting device. The two microcontrollers are connected to the motor relay by means of an AND gate and the motor relay is only opened when a disturbance criterion of at least one microcontroller is detected. Thus, the control device can only with independent detection of correct signals from the emergency opening input device let the security door open at least as a support.

In addition, a redundant motor, a redundant motor relay and a redundant motor control can also be available in order to further increase operational reliability.

The at least one microcontroller is preferably designed to bring about a closing movement of the door leaf after a predefined time, for example in the range of 5 to 120 seconds, by the electric drive unit after the opening movement of the door leaf has been brought about after activation of the emergency opening input device.

The at least one microcontroller is advantageously designed to evaluate signals from the emergency opening input device in an edge-triggered manner. For this purpose, the control system evaluates, for example, the rising edge of the signal, so that continuous activation of the microcontroller, e.g. caused by the emergency button jamming, cannot lead to the door being permanently opened, so that the safety door is not kept open in the event of a fire, for example.

• im Normalbetrieb eine Stromversorgung aus dem Stromnetz vorhanden ist und die Steuerungseinheit dazu ausgebildet ist, bei Erkennen von Türöffnungssignalen, bspw. von einem Bewegungsmelder, Steuersignale an die elektrische Antriebseinheit auszugeben, um die Sicherheitstür zu öffnen und/oder zu schließen;
• im Alarmbetrieb Störsignale von der Störfallmeldeeinrichtung durch die Steuerungseinheit empfangen werden und die Steuerungseinheit dazu ausgebildet ist, die Sicherheitstür mittels der Antriebseinheit und/oder dem mechanischen Energiespeicher zu schließen, wobei im Alarmbetrieb die Steuerungseinheit insbesondere dazu ausgebildet ist, die Türöffnungssignale nicht mehr auszuwerten;
• im Netzausfallbetrieb kein Strom aus dem Stromnetz vorhanden ist und die Steuerungseinheit dazu ausgebildet ist, die redundante Energieversorgung hinzu zu schalten, um die Funktion des Stromnetzes zu übernehmen und den elektrischen Türantrieb mit Strom zu versorgen; und
• im Türschließerbetrieb kein Strom aus dem Stromnetz vorhanden ist und ein Mindestladezustand der redundanten Energieversorgung unterschritten ist, und die Steuerungseinheit dazu ausgebildet ist, ein Schließen des Türflügels mittels des mechanischen Energiespeichers herbeizuführen;

wobei die Steuerungseinheit dazu ausgebildet ist, im Normalbetrieb, im Alarmbetrieb und im Netzausfallbetrieb bei Vorliegen eines Notöffnungssignals zumindest einmalig ein elektrisches Antreiben des Türflügels in Öffnungsrichtung herbeizuführen.The electric door drive is preferably designed to be operated in several operating modes, the several operating modes consisting in particular of the following operating modes: normal operation, alarm operation, power failure operation and door closer operation, with

• in normal operation there is a power supply from the mains and the control unit is designed to output control signals to the electric drive unit when door opening signals are detected, for example from a motion detector, in order to open and / or close the safety door;
• In alarm mode, interference signals are received from the incident reporting device by the control unit and the control unit is designed to open the safety door by means of the drive unit and / or the mechanical energy store to close, the control unit being designed in particular to no longer evaluate the door opening signals in alarm mode;
• In the event of a power failure, there is no power from the power grid and the control unit is designed to switch on the redundant power supply in order to take over the function of the power grid and to supply the electric door drive with power; and
• In door closer operation there is no power from the power supply and the charge level of the redundant energy supply has fallen below a minimum, and the control unit is designed to cause the door leaf to close by means of the mechanical energy store;

wherein the control unit is designed to bring about an electrical drive of the door leaf in the opening direction at least once in normal operation, in alarm operation and in power failure operation in the presence of an emergency opening signal.

When the electric door drive is operated in several operating modes, the safety door can be operated in an incident-specific manner, so that the operation of the safety door can be preset for various incidents.

Advantageously, the control unit can be set to control the drive in normal operation, in alarm operation or initially in normal operation in the event of a power failure and after an adjustable time has elapsed or when a lower limit for the charge state of the redundant energy supply is reached in alarm operation. Thus, the power failure mode can be configured to be parameterizable.

There are preferably sensors that monitor the opening and / or closing of the door leaf and output an obstacle signal to the control unit if there is an obstacle in the movement area of the door leaf. Such sensors can be used to prevent, for example, people who are in the area of movement of the door leaf from being injured by an automatically closing door.

According to a further aspect, the above object is achieved by a security door. Such a security door comprises a door leaf, which can be moved between an open position and a closed position relative to a door frame, and an electric door drive of the type mentioned at the beginning, the door drive being coupled to the door leaf via a coupling element in order to enable the door leaf to move automatically. The advantages that were explained in connection with the electric door drive according to the invention apply accordingly here.

The at least one emergency opening input device is preferably provided in or on the security door. As a result, the emergency opening can be initiated in the area of the relevant safety door, so that weak people or people with physical impairments can find an emergency button in the area of the safety door.

The safety door is preferably a stop safety door and preferably a fire protection door. Hinged safety doors can be opened and closed relatively easily by means of an electric door drive and kept closed by means of a mechanical energy store.

• Normalbetrieb, wenn die Stromversorgung aus dem Stromnetz vorhanden ist und wenn keine Störsignale von der Störfallmeldeeinrichtung empfangen werden;
• im Alarmbetrieb, wenn Störsignale von der Störfallmeldeeinrichtung empfangen werden;
• im Netzausfallbetrieb, wenn die Stromversorgung aus dem Stromnetz nicht vorhanden ist; und
• im Türschließerbetrieb, wenn die Sicherheitstür im Netzausfallbetrieb betrieben wird und wenn ein Mindestladezustand der redundanten Energieversorgung nicht mehr gewährleistet ist;
  wobei
• im Normalbetrieb bei Erkennen von Türöffnungssignalen, bspw. von einem Bewegungsmelder, Steuersignale von der Steuerungseinheit an die elektrische Antriebseinheit ausgegeben werden, um die Sicherheitstür zu öffnen und/oder zu schließen,
• im Alarmbetrieb bei Erkennen einer geöffneten Sicherheitstür Steuersignale von der Steuerungseinheit ausgegeben werden, um die Sicherheitstür zumindest einmalig mittels der Antriebseinheit und/oder dem mechanischen Energiespeicher zu schließen,
• im Netzausfallbetrieb die Steuerungseinheit die redundante Energieversorgung hinzuschaltet, um die Funktion des Stromnetzes zu übernehmen und den elektrischen Türantrieb mit Strom zu versorgen; und

im Türschließerbetrieb die Steuerungseinheit automatisch ein Schließen des geöffneten Türflügels mittels des mechanischen Energiespeichers bewirkt.According to a further aspect, the present invention relates to a method for operating a security door in several operating modes, the several operating modes consisting of the following operating modes:

• Normal operation when the power supply is available from the mains and when no interference signals are received from the incident reporting device;
• in alarm mode when interference signals are received from the incident reporting device;
• in mains failure mode, if the power supply from the mains is not available; and
• in door closer operation, when the safety door is operated in power failure mode and when a minimum state of charge of the redundant energy supply is no longer guaranteed;
  in which
• In normal operation, when door opening signals are detected, e.g. from a motion detector, control signals are output from the control unit to the electric drive unit in order to open and / or close the safety door,
• in alarm mode when an open security door is detected, control signals are output by the control unit in order to close the security door at least once by means of the drive unit and / or the mechanical energy store,
• In the event of a power failure, the control unit switches on the redundant energy supply in order to take over the function of the power grid and to supply the electric door drive with power; and

In door closer operation, the control unit automatically closes the open door leaf by means of the mechanical energy storage device.

According to such a method, the security door can be operated in at least three operating modes such that weak persons or persons with physical impairments can use the door as an escape door despite the security door being securely closed in the event of an alarm or a power failure.

The advantages that were explained in connection with the electric door drive or the safety door according to the invention apply accordingly here.

In power failure mode, the safety door is advantageously opened and closed as in normal operation or in alarm operation or initially as in normal operation and after a predetermined time in alarm operation. Developments of the invention are also given in the dependent claims, the description and the accompanying drawings.

Fig. 1

ist eine vereinfachte Prinzipdarstellung einer erfindungsgemäßen Sicherheitstür.

Fig. 2

ist eine vereinfachte Prinzipdarstellung einer weiteren erfindungsgemäßen Sicherheitstür.

Fig. 3

ist eine vereinfachte Prinzipdarstellung einer dritten erfindungsgemäßen Sicherheitstür.

The invention is described below by way of example with reference to the drawings.

Fig. 1

is a simplified schematic diagram of a security door according to the invention.

Fig. 2

is a simplified schematic diagram of a further security door according to the invention.

Fig. 3

is a simplified schematic diagram of a third security door according to the invention.

Fig. 1 shows a fire protection door 11 which comprises a movable door leaf 13. The door leaf 13 is rotatable relative to a frame, a guide or the like. The fire protection door 11 could also comprise several door leaves 13, for example two door leaves 13 which can be rotated in opposite directions. An actuating element 15 is provided on the door leaf 13. The actuating element 15 can be provided in the form of a handle or a door handle, by means of which a user can open the door leaf 13 manually.

In principle, the fire door 11 can also be designed for completely automatic operation, for example using door opener signals that are supplied by proximity sensors (not shown), and accordingly can be designed without an actuating element.

For the automatic opening and closing of the fire protection door 11, a door drive 17 is provided which comprises an electric drive unit 19, here in the form of an electric motor. The electric drive unit 19 is not in the individual coupling element shown coupled to the door leaf 13 so that it can be driven electrically. The electric drive unit 19 could also only be designed for servo operation, in which no independent opening of the door leaf 13 is possible by means of the electric drive unit 19, but only a manual opening of the door leaf 13 is supported.

The door drive 17 also includes a mechanical energy store 21, which is also coupled to the door leaf 13. The mechanical energy store 21 can be designed in a manner known in principle as a simple spring arrangement. When the door leaf 13 is opened, the spring arrangement is tensioned, that is, potential energy is stored in the mechanical energy store 21. By means of the spring arrangement, the door leaf 13 can also be held in the open position after it has been opened once. A closing movement of the door leaf 13 is brought about by releasing energy from the mechanical energy store 21. If the power supply from the power supply network 41 fails, the spring arrangement closes an open fire door 11.

To output corresponding control signals to the electric drive unit 19, an electronic control unit 23 is provided, which comprises a microcontroller 25 (μC), a motor control 27 and a motor relay 29. The normally open motor relay 29 is arranged in a supply circuit 31 which connects the electric drive unit 19 to the motor control 27.

The electrical control unit 23 is in the example of Fig. 1 single-channel (only one µC), but can also be two-channel (two µC see Fig. 2 and 3 ) be trained. In both cases, the control unit 23, 23 'meets the requirements with regard to functional safety of the applicable guidelines with regard to a fire alarm.

The motor control 27 and the motor relay 29 are also connected to the microcontroller 25. In order to connect the motor relay 29 to the microcontroller 25, a control current path 33 is provided. Furthermore, an incident reporting device in the form of a fire alarm 35 is also provided. In the absence of a fault, the motor relay 29 is closed.

It should be noted here that the motor control 27 and the drive unit 19 can be either single-channel (see figures) or two-channel (not shown), i.e. two motor controls 27, two motor relays 29, two motors 19. Furthermore, the microcontroller 25 of the control unit 23 is connected to the motor control 27 via a control line 39 and is designed to bring about opening movements and subsequent closing movements of the door leaf 13 by the electric drive unit 19 while the motor relay 29 is closed. The opening movements and closing movements can, for example, be triggered in a known manner with the aid of a movement sensor (not shown) which transmits door opening signals to the control unit 23.

As soon as the fire alarm 35 detects a fire, the motor relay 29 or a normally open contact located therein (not shown) is opened by means of the microcontroller 25 via the control current path 33. For this purpose, the fire alarm 35 transmits an interfering signal to the control unit 23. The control unit 23 is designed to prevent electrical driving of the door leaf 13 when such an interfering signal is received. The motor control 27 is then separated from the electric drive unit 19. Accordingly, there is no electrical drive of the door leaf 13. If the door leaf 13 is not yet closed, the control unit 23 ensures that the door leaf is closed at least once. For this purpose, either the electric drive 19 or the mechanical energy store 21 can be used to move the door leaf 13 into the closed position. Fire alarms 35 or smoke alarms, which can be used for this purpose, are sufficiently known from the prior art.

If a person wants to pass the fire protection door 11 in the event of a fire, they must open the door leaf 13 against the force of the mechanical energy store 21. In particular, weak people or people with physical disabilities may not be able to muster this force. In order not to prevent these people from leaving the building, for example on fire, an emergency opening input device in the form of an emergency button 37 is arranged in the area of the security door 11.

When the emergency button 37 is actuated, an emergency opening signal is transmitted to the microcontroller 25. To this end, the microcontroller 25 analyzes the rising edge of the incoming emergency opening signal of the emergency button 37. The control unit 23 evaluates the rising edge of the interference signal so that a permanent activation of the microcontroller 25, e.g. caused by jamming of the emergency button 37, cannot lead to a permanent opening of the door .

When such an emergency opening signal is received, the control unit 23 is designed to allow the door leaf 13 to be electrically prevented from being driven at least once. The control unit 23 is thereby able, by means of the microcontroller 25, to temporarily bridge a separation of the electric drive unit 19 from the motor control 27 triggered by the fire alarm 35. As a result, the fire protection door 11 is opened at least as a support and then the door leaf 13 is caused to close again.

Furthermore, escape route safety sensors (not shown) can be coupled to the control unit 23, which provide the function of the emergency opening input device. So if a person touches or actuates the emergency button 37 in the event of a fire or if an escape route safety sensor reports the approach of a fleeing person, the microcontroller 25 is activated in such a way that the motor relay 29 is closed and a signal from the fire alarm 35 is temporarily deactivated .

In this context, short-term means that the security door is opened for a specified period of e.g. 5 to 120 seconds, preferably 10 to 60 seconds, in order to give people fleeing the opportunity to leave the building. After the specified period of time has elapsed, the motor relay 29 opens.

In this context, it should be noted that, in the event of an emergency opening, the control unit 23 can be designed to have full access to the electric drive unit 19 during the predetermined period of time, as in normal operation.

The safety state of the fire door 11, in which the motor control 27 is separated from the electric drive unit 19 and the door leaf 13 is acted upon exclusively by the mechanical energy store 21, is then restored. A renewed bridging can, however, be triggered again at any time by a further edge at the signal input of the microcontroller 25.

In principle, the microcontroller 25 could also be designed to bridge the separation of the drive unit 19 from the control unit 23 triggered by the fire alarm 35 for a predetermined period of time.

Due to the emergency button 37 or one or more escape route safety sensors, it is ensured that the control unit 23 still has limited access to the electric drive unit 19 after a fire alarm has been triggered, so that people fleeing through the electric door drive 17 when leaving a building in an emergency can be supported.

If, in the event of a fire or another incident, the power supply from the mains 41 fails and a person wants to pass the fire door 11, they have to open the door leaf 13 manually against the force of the mechanical energy storage device 21, since the spring is designed to withstand any failure Power supply to close the fire door 11. As already mentioned, weak people in particular or people with physical impairments may not be able to muster the force required to open the door.

In order to ensure the barrier-free operation of the fire door 11 even in the event of a power failure or a power cut in the event of a fire, an additional redundant power supply 43 is provided. According to the invention, the redundant energy supply 43 is an accumulator. In the event of a power failure, the accumulator 43 supplies the door drive 17 with electrical energy, so that the fire protection door 11 can also be opened in the event of a power failure, e.g. via the emergency button 37. This switching of the electrical power supply from the mains 41 to the accumulator 43 and back takes place automatically by means of the control unit 23, 23 '. By means of the accumulator 43, a barrier-free passage through the door 11 can be guaranteed at least for a certain period of time.

According to the invention, a charge state of the accumulator 43 is monitored by means of a charging and monitoring device 45 in normal network operation and, advantageously, when it is detected that the charge state of the accumulator 43 has fallen below or when it is determined that the accumulator 43 is no longer working properly, the microcontroller 25 displays, that the accumulator 43 needs to be serviced. According to the invention, the motor relay 29 is opened so that the door leaf 13 is closed by the mechanical energy store 21 for safety reasons.

The accumulator 43 has a predefined capacity, depending on which a service life of the accumulator 43, ie a predefined time span in which the redundant energy supply is possible, can be determined. The control unit 23 monitors the state of charge or the capacity of the accumulator 43 in the event of a power failure.

The capacity of the accumulator 43 is preferably selected such that a service life of at least 30 minutes up to 180 minutes is guaranteed, so that the fire door can be used as a T30, T60, T90, T120 and T180 door and can also be passed barrier-free during this period . If the accumulator 43 is discharged, the control switches to a door closer mode (see below).

Fig. 2 Figure 3 shows a further embodiment of the invention. Compared to the embodiment of Fig. 1 comprises the control unit 23 'of the Fig. 2 in addition a second microcontroller 47 and a logical AND 49 in the form of an AND gate. The second microcontroller 47, together with the logical AND 49, forms a redundant monitoring option. The redundant monitoring option offers the system a checking option by means of which it can be evaluated whether an interference signal, for example from fire alarm 35, has actually been emitted or not. If the second microcontroller 47 comes to the same result as the first microcontroller 25, the signals from the first and second microcontrollers 25, 47 are forwarded to the logical AND 49 and the motor relay 29 is only activated automatically when a malfunction is detected by both microcontrollers 25, 47 open.

Fig. 3 Figure 3 shows a further embodiment of the invention. Compared to the embodiment of Fig. 2 the control unit 23 ″ does not include a logical AND, but the two microcontrollers 25, 47 are each directly connected to the motor control 27 in order to control them redundantly when an interference signal is received to close the fire door 11.

Instead of the connection between the two microcontrollers 25, 47 and the motor control 27, the logical AND 49 of the embodiment according to Fig. 2 can also be designed as a logical OR.

By means of the embodiment according to Fig. 3 or by means of a logical OR, it can also be ensured in the event of failure of one of the microcontrollers 25, 47 that the motor control 27 or the motor relay 29 actually closes the door in the event of an interference signal from, for example, a fire alarm 35.

Another possibility to achieve redundant closing of the fire door 11 on the basis of the two microcontrollers 25, 47 is to provide a respective motor, motor control and motor relay for each microcontroller 25, 47 instead of connecting both microcontrollers 25, 47 to the one motor control 27 .

In the in the Figures 1 to 3 In the embodiments shown, additional sensors can be present (not shown) that monitor the opening and / or closing of the door leaf 13 and output an obstacle signal, similar to a light barrier in an elevator, to the control unit 23, 23 ′, 23 ″ when there is a Movement of the door leaf 13 is an obstacle.

• ein Normalbetrieb, wenn die Stromversorgung aus dem Stromnetz 41 vorhanden ist und wenn keine Störsignale von der Störfallmeldeeinrichtung 35 empfangen werden,;
• ein Alarmbetrieb, wenn Störsignale von der Störfallmeldeeinrichtung 35 empfangen werden;
• ein Netzausfallbetrieb, wenn die Stromversorgung aus dem Stromnetz 41 nicht vorhanden ist; und
• ein Türschließerbetrieb, wenn die Sicherheitstür 11 im Netzausfallbetrieb betrieben und wenn ein Mindestladezustand der redundanten Energieversorgung 43 nicht mehr gewährleistet wird.

The fire door 11 is operated by means of a method for operating the security door 11 in several operating modes. These are:

• normal operation when the power supply from the mains 41 is available and when no interference signals are received from the incident reporting device 35;
• an alarm operation when interference signals are received from the incident reporting device 35;
• a power failure mode when the power supply from the power grid 41 is not available; and
• a door closer operation when the safety door 11 is operated in power failure mode and when a minimum state of charge of the redundant energy supply 43 is no longer guaranteed.

In normal operation, when door opening signals are detected, for example from a motion detector, control signals from the control unit 23, 23 ′, 23 ″ are activated the electric drive unit 19 output to open and / or close the security door 11.

In alarm mode, when an open safety door 11 is detected, control signals are output by the control unit 23, 23 ′, 23 ″ in order to close the safety door 11 at least once by means of the drive unit 19 and / or the mechanical energy store 21.

In the event of a power failure, the control unit 23, 23 ′, 23 ″ switches on the redundant power supply 43 in order to take over the function of the power network 41 and to supply the electric door drive 17 with power Alarm operation or initially as in normal operation and after a specified time in alarm operation.

In the door closer operation, the control unit 23, 23 ′, 23 ″ automatically closes the opened door leaf 13 by means of the mechanical energy store 21.

The door drive 17 thus works in normal operation like any known door drive. A power supply from the power grid 41 is available. The fire door 11 opens automatically after activation by the known sensors, such as motion detectors, which can be formed from a radar, infrared sensor, button or the like. The fire protection door 11 can also be opened by activation by the emergency opening signal of the emergency button 37. In normal operation, both opening and closing of the door can be safeguarded by sensors (not shown).

In the event of an alarm, the fire detector 35 switches the safe control 23, 23 ′, 23 ″ to alarm mode. The control unit 23, 23 ′, 23 ″ causes the fire door 11 to close by means of the motor control 27 and the drive unit 19 or via the mechanical energy store 21. In alarm mode, the control unit 23, 23 ', 23 "no longer evaluates the normal activation sensors, such as motion detectors, which can consist of a radar, infrared sensor, button or the like Persons or persons with physical impairments automatically open and pass through the fire protection door 11. The fire protection door 11 opens after each activation (edge) and closes again automatically after an adjustable time. The closing force of the motor (drive unit 19) corresponds to the minimum closing force required in the guidelines (EN -Equipment).

In the event of a power failure, the fire door 11 can be operated as in normal operation. For this purpose, only the redundant energy supply is then switched on, so that the accumulator 43 takes over the function of the power network 41 and supplies the door drive 17 with power.

The power failure mode can also be parameterized by either switching to normal operation to alarm operation or first to normal operation and, after an adjustable time, the fire door 11 from normal operation mode, in which the accumulator 43 supplies the door drive 17 with power, to alarm operation ( see above).

The opening of the fire door 11 and also the closing of the fire door 11 can also be monitored by sensors in power failure mode and in alarm mode. Suitable sensors (not shown) are used to monitor the closing. These are preferably designed in such a way that smoke cannot prevent the closing, i.e. does not cause the sensors to respond.

In the alarm mode, the control unit 23, 23 ', 23 "could also be designed to allow a maximum number of opening movements, for example 5 to 10 such opening movements. This prevents, for example, a defect in the emergency button 37 that too many undesired opening movements impair the function of the emergency opening device 37, for example. Discharge the accumulator 43 prematurely.

In alarm mode, the control unit uses the charging and monitoring device 45 to monitor the charge status of the accumulator 43 in the event of a power failure. When it detects that the accumulator 43 is almost completely discharged, the control switches to door closer operation and opens the motor relay 29 Detection of a spring of the mechanical energy store 21 by means of a valve or a brake (both not shown) released, so that the spring or the mechanical energy store 21 acts on the door and closes the open door safely. Automatic opening is no longer possible in this operating mode, the fire door 11 is no longer barrier-free, but closes reliably after each manual opening.

The emergency button 37 is used for an emergency opening. For this purpose, a special signal is transmitted to the control unit 23, 23 ′, 23 ″ via which weak persons and persons with physical impairments can automatically open the door, as long as energy is available from the mains 41 or accumulator 43. The emergency button 3 can also be designed as an escape route button, cam switch in the door handle 15, radio transmitter, etc.

The first and the second microcontroller 25, 47 can each have test inputs by means of which a functional test of the control unit 23, 23 ′, 23 ″ can be carried out by means of test signals.

Furthermore, the control unit 23, 23 ′, 23 ″ can also have a memory in which the various operating modes are stored. The memory can also be designed to store operating data of the security door 11 or of the accumulator 43 Safety door was opened or closed, the duration of an opening movement or a Closing movement, if a disturbance criterion is present, the duration and the point in time of the disturbance criterion or the time profile of the capacity of the accumulator 43, which can be an indication of the state of the accumulator 43.

The data and / or programs stored in the memory can be output by means of an interface (not shown) of the control unit 23, 23 ′, 23 ″ and evaluated in a further device (not shown) Firmware linked to, 23 ', 23 "can be brought up to date by means of an update initiated by the interface. Such an interface can be, for example, an Ethernet interface, a USB interface, a Bluetooth interface, a WLAN interface, etc.

List of reference symbols

11

Fire door

13th

Door leaf

15th

Actuator

17th

Door drive

19th

Drive unit

21

Energy storage

23

Control unit

23 '

Control unit

23 "

Control unit

25th

Microcontroller

27

Motor control

29

Motor relay

31

Supply circuit

33

Control current path

35

Fire alarm

37

Emergency button

39

Control line

41

network

43

accumulator

45

Loading and monitoring device

47

Microcontroller

49

logical AND

Claims (12)

1. Electric door drive (17) for a safety door (11), in particular a fire door, comprising:

   - an electric drive unit (19) for electrically driving a movable door wing (13) of the safety door (11),

   - a control unit (23; 23'; 23") which can be connected to the electric drive unit (19) and has the purpose of outputting control signals to the electric drive unit (19) in order to open and/or close the safety door (11),

   - at least one fault signalling device (35) which is designed to output a fault signal to the control unit (23; 23'; 23") when a fault criterion is met, wherein the control unit (23; 23'; 23") is designed to prohibit electric driving of the door wing (13) when such a fault signal is received, but when the door wing (13) is not closed to bring about one-off closing of the door wing (13), wherein the control unit (23; 23'; 23") has at least one microcontroller (25, 47), one motor actuation system (27) and one motor relay (29), wherein at least one microcontroller (25, 47) is designed to actuate the one motor relay (29) to open and close the safety door (11) and to open the motor relay (29), in order to prohibit the electrical driving of the door wing (13) when the fault criterion is met,

   - at least one emergency opening input device (37) which, when activated, transfers an emergency opening signal to the control unit (23; 23'; 23"), wherein the control unit (23; 23'; 23") is designed to permit, when such an emergency opening signal is received, prohibited electrical driving of the door wing (13) at least once, in order to bring about, at least in an assisting fashion, an opening movement of the door wing (13), and renewed closing of the door wing (13),

   - at least one mechanical energy store (21) for storing potential energy, wherein the mechanical energy store (21) can be coupled or is coupled to the door wing (13) in such a way that when there is an opening movement of the door wing (13) energy is loaded into the energy store (21) and, under certain circumstances after enabling of the energy store, a closing movement of the door wing (13), accompanied by the outputting of energy by the energy store (21), is at least assisted, wherein the control unit (23; 23'; 23") is designed, when the fault criterion is met and when the door wing (13) is not closed, to bring about closing of the door wing (13) by means of the mechanical energy store (21) if electrically driven closing is not possible or is not possible in a suitable way, and a redundant energy supply (43) is provided, wherein the redundant energy supply (43) is designed to replace, when a fault criterion is met and/or a power failure occurs, a power supply of the door drive (17) from a power grid (41), preferably for a predefined time period,

   wherein the redundant energy supply is formed by an accumulator (43), and a loading and monitoring device (45) is provided by means of which a state of the accumulator (43) is monitored,
   and the control unit (23; 23'; 23") is designed to bring about, when a low state of charge of the redundant energy supply (43) is detected, electrical isolation of the electric drive unit (19) from the redundant energy supply (43), preferably by means of the charging and monitoring device (45), and to maintain said isolation until the power supply from the power grid (41) is ensured again.
2. Electric door drive (17) according to one of the preceding claims,
   characterized in that
   the at least one microcontroller (25, 47) is designed to close the motor relay (29) for a predefined time period when the emergency opening input device (37) is activated.
3. Electric door drive (17) according to Claim 2, characterized in that
   two microcontrollers (25, 47) are provided, which are each connected to the fault signalling device (35), the emergency opening input device (37) and the motor relay (29) .
4. Electric door drive (17) according to Claim 3, characterized in that
   the second microcontroller (47) is designed to carry out redundant evaluation of the signals of the at least one fault signalling device (35) and
   in that the two microcontrollers (25, 47) are connected to the motor relay (29) by means of an AND gate (49), and the motor relay (29) is opened only when a fault criterion of at least one microcontroller (25, 47) is detected.
5. Electric door drive (17) according to Claim 3 or 4, characterized in that
   only one motor actuation means (27) in the control unit (23; 23') is arranged, and the second microcontroller (47) is not connected to the one motor actuation means (27) .
6. Electric door drive (17) according to one of the preceding Claims 2 to 5,
   characterized in that
   the at least one microcontroller (25, 47) is designed to evaluate signals of the emergency opening input device (37) in a signal edge-triggered fashion.
7. Electric door drive (17) according to one of the preceding claims,
   characterized in that
   the electric door drive (17) is designed to be operated in a plurality of operating modes, wherein the plurality of operating modes are composed, in particular, of the following operating modes: normal mode, alarm mode, power grid failure mode and door closing mode, wherein

   - in the normal mode a power supply from the power grid (41) is present and the control unit (23; 23'; 23") is designed to output, when door opening signals are detected, for example from a movement detector, control signals to the electric drive unit (19), in order to open and/or close the safety door (11);

   - in the alarm mode fault signals are received from the fault signalling device (35) by the control unit (23; 23'; 23"), and the control unit (23; 23'; 23") is designed to close the safety door (11) by means of the drive unit (19) and/or the mechanical energy store (21), wherein in the alarm mode the control unit (23; 23'; 23") is designed, in particular, no longer to evaluate the door opening signals;

   - in the power grid failure mode there is no power present from the power grid (41) and the control unit (23; 23'; 23") is designed to connect the redundant energy supply (43) in order to take over the function of the power grid (41) and to supply the electric door drive (17) with power; and

   - in the door closing mode there is no power present from the power grid (41) and a minimum loading state of the redundant energy supply (43) is undershot, and the control unit (23; 23'; 23") is designed to bring about closing of the door wing (13) by means of the mechanical energy store (21);

   wherein the control unit (23; 23'; 23") is designed to bring about at least once electrical driving of the door wing (13) in the opening direction, in the normal mode, in the alarm mode and in the power grid failure mode when an emergency opening signal is present.
8. Electric door drive (17) according to Claim 7, characterized in that
   the control unit (23; 23'; 23") can be set, in the event of a power grid failure, to optionally actuate the door drive (17) in the normal mode, in the alarm mode or initially in the normal mode and in the alarm mode after the expiry of a time which can be set or when a lower limit for the state of charge of the redundant energy supply (43) is reached.
9. Electric door drive (17) according to one of the preceding claims,
   characterized in that
   sensors are present which monitor the opening and/or closing of the door wing (13) and output an obstacle signal to the control unit (23; 23'; 23") if there is an obstacle in the range of movement of the door wing (13).
10. Safety door (11), in particular fire door, having a door wing (13) which can be moved, with respect to a door frame, between an open position and a closed position, and an electric door drive (17) according to at least one of the preceding claims, wherein the door drive (17) is coupled to the door wing (13) via a coupling element, in order to permit automatic movement of the door wing (13), and wherein the at least one door opening input device is preferably provided in or on the safety door (11).
11. Method for operating a safety door (11) according to Claim 10, in a plurality of operating modes, wherein the plurality of operating modes are composed of the following operating modes:

    - the normal mode when the power supply from the power grid (41) is present and when no fault signals are received from the fault signalling device (35);

    - in the alarm mode when fault signals are received from the fault signalling device (35);

    - in the power grid failure mode when the power supply from the power grid (41) is not present; and

    - in the door closing mode when the safety door is operated in the power grid failure mode and when a minimum state of charge of the redundant energy supply (43) is no longer ensured;

    where

    - when door opening signals are detected, for example from a movement detector, in the normal mode, control signals are output from the control unit (23; 23') to the electric drive unit (19), in order to open and/or close the safety door (11),

    - when an open safety door (11) is detected in the alarm mode, control signals are output by the control unit (23; 23'; 23"), in order to close the safety door (11) at least once by means of the drive unit (19) and/or the mechanical energy store (21),

    - in the power grid failure mode the control unit (23; 23'; 23") connects the redundant energy supply (43) in order to take over the function of the power grid (41) and to supply the electric door drive (17) with power; and

    - in the door closing mode the control unit (23; 23'; 23") automatically brings about closing of the opened door wing (13) by means of the mechanical energy store (21) .
12. Method according to Claim 11,
    characterized in that
    in the power grid failure mode the opening and closing of the safety door (11) are carried out as in the normal mode or in the alarm mode or initially as in the normal mode and in the alarm mode after a predefined time.

Images