EP3647246A1 - Modular elevator control and method for controlling an operation of actuator components of a lift assembly - Google Patents

Abstract

An elevator control (1) for controlling an operation of actuator components (7) of an elevator installation is described. The elevator control (1) comprises a programmable travel control module (3) and a programmable application control module (5). The travel control module (3) is configured to control the operation of the actuator components (7) of the elevator system in accordance with targets by processing low-level commands and taking into account safety requirements specified for normal operation of the elevator system. The application control module (5) is configured to detect operating signals from sensory components (37) and to generate the targets by processing these operating signals. The application control module (5) is connected to the travel control module (3) for data communication via a high-level interface (43) and configured to send the targets via the high-level interface (43) as high-level commands to the Transfer control module (3) to be transmitted. Due to the modular structure of the elevator control (1), development of software in particular for programming the elevator control (1) or adaptation to different applications can be simplified.

Description

The present invention relates to an elevator control and a method for controlling the operation of actuator components of an elevator system. Furthermore, the invention relates to a computer program product, by means of the embodiments of which the described method can be implemented, and a computer-readable medium with such a computer program product stored thereon.

Elevator systems are used to transport people and / or goods within a building in a vertical direction between different floors. For this purpose, an elevator installation has at least one elevator car, which can be displaced vertically with the aid of a drive device. The elevator car should be moved in such a way that the requirements or wishes of passengers and / or users or system operators are met.

For this purpose, an elevator system comprises both actuator components and sensory components.

Actuator components can be understood here as active components with the aid of which states in the elevator system can be actively influenced. For example, actuator components can cause or inhibit displacement movements of the elevator car. For example, an actuator component can be a motor of the drive device, so that by appropriately controlling the motor, the drive device can be used to shift the elevator car in a desired direction and at a desired speed. As a further example, an actuator component can be a brake on the drive device or directly on the elevator car, so that a suitable movement of the brake can slow down or stop a displacement movement of the elevator car.

Sensory components can be understood to mean components by means of which states in the elevator system can be detected. The term “sensory component” is intended to be interpreted broadly and encompass a wide variety of types of sensors, by means of which physical states, in particular mechanical, optical, electrical, magnetic, electromagnetic or other detectable physical states, can be detected. In particular, such devices can be regarded as sensory components, by means of which the desire of a passenger or user to call the elevator car to a specific floor or to have it driven to a specific floor can be detected. In a simple case, a sensory component can therefore be, for example, a simple button or switch that can be actuated mechanically or in some other way. For example, a sensory component can be provided in a landing operation panel (LOP) in order to enable a passenger to move the elevator car to his waiting floor by actuating the sensory component. Alternatively, a sensory component can be provided in a cabin operating panel (COP) in order to enable a passenger in the elevator car to move the elevator car to a target floor by actuating the sensory component.

In an elevator installation, the actuator components thereof are typically controlled by an elevator control, signals from the sensor components being taken into account in order to shift the elevator car according to the passenger's wishes and / or user wishes.

In order to be able to adapt the elevator system as flexibly as possible to different operating conditions, it can be advantageous to carry out the elevator control programmably. In other words, a programmability of the elevator control system can be used in order to be able to adapt the operation of the elevator system to different specifications and / or wishes depending on the application.

For example, it may be desirable to use one type of elevator control for different elevator systems in buildings of different heights, that is to say with travel paths of different lengths. It may also be desirable to have a type of elevator control in different types of buildings, ie for example To be able to use office buildings, hotels, hospitals or buildings with private apartments. As a further possibility, it may be desirable to use a type of elevator control in buildings in different countries, different national regulations, customs and / or application requirements prevailing in the different countries. In addition, it may be desirable in certain applications to meet the individual wishes of users in a building, that is to say, for example, to prefer individual floors within the building or to use the elevator car only after prior authorization.

Previously programmable elevator controls are usually designed as units, an elevator control unit being enabled by software specific for this unit to control the operation of the actuator components of the elevator system and to take into account signals from the sensor components of the elevator system.

Due to the fact that people are transported by the elevator system, the function of an elevator control usually has to meet very high safety requirements in order to be able to ensure safe operation of the elevator system. For example, it must be ensured that the elevator car may only be moved when all elevator doors to the elevator car or to the floors are reliably closed. Furthermore, it must be ensured that the elevator car is not shifted at an impermissibly high speed or is accelerated to an impermissibly high degree, is only shifted within an admissible travel path and / or can be stopped precisely at stopping points.

In order to ensure that the elevator system and its elevator control system meet the specified safety requirements under all conditions, the elevator control system, including the software used to program it, must be elaborately developed prior to commissioning and then extensively tested. This can involve a lot of effort and thus cause considerable costs.

Among other things, there may be a need for an elevator control system and for a method by means of which actuator components of an elevator system are operated can be reliably controlled under various operating conditions and in which an effort for developing and testing functionalities of the elevator control and / or a software used here can be reduced in comparison to conventional approaches. In particular, there may be a need to design elevator controls in such a way that they can be adapted to different application requirements, and development and testing efforts remain relatively low. Furthermore, there may be a need for software in the form of a computer program product, by means of which a programmable elevator control can be configured to carry out or to control the aforementioned method. Finally, there may be a need for a computer readable medium with such a computer program product stored thereon.

Such a need can be met by the subject matter according to one of the independent claims. Advantageous embodiments are defined in the dependent claims and the description below.

According to a first aspect of the invention, an elevator control for controlling an operation of actuator components of an elevator system is proposed. The elevator control system includes a programmable travel control module and a programmable application control module. In this case, the travel control module is configured to control the operation of the actuator components of the elevator system in accordance with targets by processing low-level commands and taking into account the safety requirements specified for normal operation of the elevator system. The application control module is configured to detect control signals from sensory components and to generate the target specifications by processing these control signals. The application control module is connected to the drive control module for data communication via a high-level interface and configured to transmit the targets via the high-level interface to the drive control module as high-level commands.

According to a second aspect of the invention, a method for controlling an operation of actuator components of an elevator system is described. The method comprises at least the following steps, preferably, but not necessarily, in the order specified: there are operating signals from sensory Components are recorded and targets are generated by processing the operating signals using an application control module. The operation of the actuator components of the elevator system is controlled by a programmable travel control module in accordance with the objectives by processing low-level commands and taking into account the safety requirements specified for normal operation of the elevator system. The application control module is connected to the travel control module for data communication via a high-level interface and the targets are transmitted to the travel control module as high-level commands via the high-level interface.

According to a third aspect of the invention, a computer program product is described which has computer-readable instructions, by the execution of which programmable components of an elevator control are configured to execute or control a method according to an embodiment of the second aspect of the invention.

According to a fourth aspect of the invention, a computer-readable medium with a computer program product stored thereon according to an embodiment of the third aspect of the invention is described.

Possible features and advantages of embodiments of the invention can, inter alia and without restricting the invention, be viewed as based on the ideas and knowledge described below.

As already indicated in the introduction, the development of an elevator control and in particular software for programming it can be very complex, since various components of the elevator installation have to be controlled reliably and safety requirements have to be taken into account.

If, for example, new or alternative functionalities are to be implemented in the elevator controller, the entire elevator controller or its software usually has to be revised and then extensively tested in order to be able to guarantee the safety of the elevator system equipped with the elevator controller even after such changes.

In order to simplify the effort for the development and testing of elevator controls, which are to be used in different variants for different application purposes, it is therefore proposed to construct the elevator control modularly. Different control modules work together and implement control functions of the elevator control together.

The elevator control comprises at least two control modules, namely a programmable travel control module and a programmable application control module. The control modules can be designed as separate devices or units and can communicate via a common interface. Alternatively, the control modules can also be implemented together in a single device and communicate with one another via an internal interface. For example, each control module can be implemented or programmed with independent software, with different software parts being able to communicate via an interface using a predetermined protocol.

In this case, the travel control module is designed to control the operation of the actuator components of the elevator system. The actuator components are to be controlled in such a way that previously determined targets are achieved. The targets can, for example, indicate where the elevator car is to be moved, whether an elevator door should be opened or closed, etc.

In order to control the actuator components, the travel control module can process so-called low-level commands. Such low-level commands can be viewed as commands for programming or as signals that can be generated with such programming, by means of which one of the actuator components can be controlled directly.

The travel control module is also designed to take into account safety requirements that are specified for normal operation of the elevator system when controlling the operation of the actuator components and to always control the actuator components in such a way that these safety requirements are met is done. The security requirements can be regulated, for example, in regulations such as laws or standards. The safety requirements can vary depending on the application, location where the elevator system is operated and / or other boundary conditions.

For example, such safety requirements can stipulate that the elevator car may only be moved if all elevator doors are reliably closed. The travel control module must therefore be able to monitor the closing status of the elevator doors, for example by providing suitable communication with sensors provided on the elevator doors.

While the travel control module is used to implement targets in the elevator installation by appropriately controlling the actuator components, the application control module is configured to generate these targets. In other words, the application control module should specify to the trip control module which destinations are to be currently realized, i.e. for example where the elevator car should be moved to next and / or whether elevator doors should be opened or closed.

To achieve this, the application control module can communicate with and / or receive operating signals from various sensor components such as, for example, buttons or switches on operating panels of the elevator installation. An operating signal can be a signal that is generated by a sensory component when it is actuated by a passenger, for example. When the application control module receives an operating signal, it can process it and thereby define an associated target for the elevator system.

For example, the application control module can recognize when a call button on a floor control panel has been pressed and can then specify as a target that the elevator car, if necessary after performing other tasks, is moved to the relevant floor.

So that the travel control module and the application control module can implement the tasks of the elevator control together, the application control module can communicate with the travel control module via an interface.

This interface is designed as a high-level interface, i.e. the application control module transmits the targets as high-level commands via the high-level interface. Such high-level commands are part of a more complex programming language (or a more complex protocol), which may make programming a programmable control module more intuitive and therefore easier, but which must first be compiled or interpreted by the receiving control module in order to translate level commands into low-level commands, which can then be processed.

The high-level interface can be, for example, a bus system such as a CANopen bus or Ethernet, via which the high-level commands that specify the targets can be transmitted from the application control module to the travel control module.

Tasks and signal processing, which were previously usually carried out in a single unit of an elevator control system, are thus distributed to the various modules of the elevator control system presented here, in accordance with the approach presented here. While the drive control module is responsible for the direct control of the actuator components and must ensure that high safety requirements are always met, the application control module is used to generate the targets for the drive control module.

The travel control module must therefore be able to communicate with the various actuator components in the elevator system and be able to control them, and must ensure that the actuator components are always operated in such a way that safety in the elevator system is guaranteed. However, the travel control module can perform this task independently of a specific configuration in which the elevator control is to be used. In other words, the drive control module can independently control the actuator components, for example control how many floors the elevator system should serve, whether certain floors should be prioritized or only operated after authorization, etc. Accordingly, the travel control module can be used for differently designed and / or differently operated elevator systems without the travel control module or its software would have to be adjusted individually. The trip control module and its software can thus be developed and tested once and then used for different application configurations without any modifications or adjustments to the trip control module or its software being necessary. An effort to develop and test hardware and software can thus be reduced.

An actual adaptation to different application configurations can be implemented in the programmable application control module. The application control module can process operating signals which it receives from various sensory components within the elevator installation and derive from these the targets which are to be transmitted to the travel control module.

The application control module can be adapted, for example, by adapting the software used therein, configuration-specifically, for example, to how many floors should be served by the elevator system, whether or which floors should be approached with priority, and whether or which floors should only be approached when there is one Passenger has previously authorized whether or on which floor the elevator car should be parked if it is not currently being requested, etc.

However, application-specific processing of the control signals initially only leads to the targets being generated in the form of high-level commands. Only when these targets are transmitted to the travel control module via the high-level interface, does the actuation components ultimately trigger the desired control, the travel control module only accepting such high-level commands or receiving high-level commands in a manner interprets that the specified safety requirements for normal operation of the elevator system are always taken into account.

When developing the application control module and its software itself, security criteria generally do not need to be considered. This can greatly simplify the development or testing of the application control module and its software. In particular, software can be developed or modified in a simple manner and possibly without more precise knowledge of the functioning of the specific elevator system in order to adapt it to the specific elevator system or to implement the functionalities desired in the elevator system.

According to one embodiment, the application control module can thus be configured to directly control non-safety-critical functions of the elevator system by processing the operating signals and to control safety-critical functions of the elevator system that are subject to the specified safety requirements by generating the target specifications and transmitting the target specifications to the travel control module to initiate.

In other words, the elevator control can be configured to control various functions within the elevator installation. Functions that are not critical to the safe operation of the elevator system can be controlled directly by the application control module. For example, the application control module can directly control lighting, direction indicators, floor indicators, etc. within the elevator system, since even incorrect control of such functions generally does not directly endanger the security of the elevator system. However, functions that are critical to the safety of the operation of the elevator system must not be controlled directly by the application control module. Instead, the application control module only generates targets and transmits them to the trip control module. The travel control module then decides whether or how these targets can be achieved taking into account the specified safety requirements.

As a result, the application control module and its software can be adapted to different application configurations without risk, for example in order to configure the activation of non-safety-critical functions in an application-specific manner. Even if the application control module is reconfigured Safe operation of the elevator system remains guaranteed, since safety-critical functions are only ever controlled by the travel control module and safety requirements are taken into account.

According to one embodiment, the travel control module is configured to control the operation of the actuator components of the elevator system in real time.

In other words, due to its hardware and software, the travel control module should be able to control the actuator components of the elevator system so quickly that they can be brought into a desired state without any delays relevant to their operation. Such control in real time allows the specified safety requirements to be taken into account when controlling the actuator components.

According to one embodiment, the travel control module is configured to take into account the safety requirements by monitoring one or more sensors. The sensors include (i) a safety chain consisting of several sensors, each monitoring a safety-related state in the elevator system, (ii) a position transmitter with at least one sensor monitoring a current position of an elevator car, and (iii) door drive monitoring with at least one sensor, which Functional properties of an elevator door drive monitored. Furthermore, the sensor technology can include brake contact monitoring to check whether the brake is activated or working.

In other words, the travel control module should include one or more sensor systems and / or communicate with one or more sensor systems in order to be able to receive information about a current state within the elevator system. These sensors are designed to measure properties within the elevator system from which information can be derived as to whether the elevator system can be operated safely and, in particular, whether the elevator car can be safely moved.

Many different sensors are typically provided for this purpose in elevator systems. Each individual sensor can monitor a safety-relevant state within the elevator system. For example, locking sensors in the form of door switches can monitor whether elevator doors are closed correctly. The plurality of sensors can be connected in series with one another and in this way form a safety chain which is only closed when each of the sensors is in its closed state. Position sensors in the form of position sensors can monitor where the elevator car is currently located and, in particular, whether the elevator car is within a permissible travel path. Door operator monitoring can use sensors to determine whether an elevator door operator is operating in a desired and safe manner.

According to one embodiment, a software of the trip control module can be protected against unauthorized changes, whereas a software of the application control module can preferably be changed without authorization.

In other words, the hardware, and in particular the software, of the travel control module can be designed in such a way that it can only be changed by authorized persons. Authorized persons can be this connection, for example, developer of a manufacturer of the elevator system or the elevator control. For this purpose, for example, the software can be permanently stored in a data memory of the travel control module, so that it cannot be overwritten, or at least not easily. For this purpose, the software can be stored in a ROM memory or the like, for example. Alternatively, the software can in principle be stored in a changeable manner, for example in a flash memory, but be provided with write protection, so that the software can only be changed after the write protection has been removed, for example by entering an authoritative password. This ensures that the trip control module, including its software, cannot be changed without authorization. This can be important since the travel control module is responsible for compliance with the safety requirements when controlling the actuator components and any unauthorized changes to the software could result in the travel control module controlling the elevator system in an unsafe state.

Since there is basically no such risk with regard to the software of the application control module, it can be provided that this software may also be changed by persons who are not specifically authorized. For example, it should be possible for users of the elevator installation to be able to modify the elevator control in an application-specific manner, for example by implementing desired functions by supplementing or reprogramming the software of the application control module.

According to one embodiment of the invention, the high-level commands can include, for example, a destination target and / or an elevator door status target. The destination target specifies the floor to which an elevator car of the elevator system is to be moved. The elevator door status target specifies the opening state in which an elevator door is to be brought.

In other words, the high-level commands that are to be generated by the application control module can comprise a plurality of different commands that define different targets.

One of the possible targets should be the destination target. The application control module can receive requests from passengers, for example, via various sensor components such as, for example, call buttons, which prompt the elevator car to be moved to certain floors. Depending on how the application control module is programmed in the specific application, it can use this to determine which floor the elevator car is to be moved to next and to transmit the corresponding destination target to the travel control module. Here, the application control module can take into account, for example, the order in which the requests have arrived, where the elevator car is currently located, whether there are other identical or similar requirements, whether certain floors should be approached with priority, how the elevator system is currently busy, etc. Elevator system can be part of an elevator group with several elevators, it can also be taken into account how the other elevators of this elevator group are busy, where their elevator cars are currently located, etc.

The application control module can generate the elevator door status target as a further target. This elevator door status target can, for example, indicate whether and / or in what way an elevator door should be opened or closed. By suitable programming of the application control module, it can be specified, for example, that the elevator door opens or closes particularly slowly when it stops at certain floors. It can also be specified whether the elevator door should be opened or closed when the elevator car is waiting on certain floors. Furthermore, in the event that the elevator car has several elevator doors, it can be specified which of the elevator doors is to be opened when a floor is reached.

According to one embodiment, the elevator control can comprise at least one control panel, which has sensor components that can be actuated by an elevator passenger, for generating the control signals.

In other words, in addition to the travel control module and the application control module, the elevator control system presented here can also include at least one, usually even several control panels. These can be implemented, for example, as buttons, switches or similar operable components of a floor control panel or an elevator control panel. Such operating panels can generate an operating signal when they are actuated and pass this on to the application control module. The information that an operating panel has been actuated and, if applicable, which of a plurality of operating panels has been actuated, can then be evaluated by the application control module in order to determine which floor the elevator car is to be moved to next and a corresponding high-level command as To send the target to the trip control module.

According to one embodiment, the drive control module is further configured to go into a maintenance mode after checking an authorization, in which the drive control module controls the operation of the actuator components of the elevator installation in accordance with maintenance targets by processing low-level commands and taking into account maintenance operations Predetermined elevator system Controls security requirements.

In other words, the travel control module of the elevator control system can not only be designed to control the actuator components of the elevator system during their normal operation, but it can also be provided to go into a maintenance mode, in which the travel control module also allows special targets, which are typically during a Maintenance process are specified and are therefore referred to herein as maintenance targets.

In order to implement the maintenance targets, the travel control module can control the actuator components in a way that might not be permissible during normal operation of the elevator system, since then typically stricter safety requirements apply. For example, in contrast to normal operation, it may be permissible during maintenance operation to move the elevator car beyond the normally permissible travel path or to open elevator doors, even though the elevator car is not exactly on one floor.

In a special embodiment, the application control module can be configured to detect signals from sensory components and to determine the maintenance targets by processing these signals. For this purpose, the application control module can be connected to the drive control module for data communication during the maintenance mode via an extended interface and can be configured to transmit the maintenance targets during the maintenance mode to the drive control module as low-level commands via the extended interface.

In other words, the application control module can acquire signals from sensory components in a manner similar to that in normal operation, such signals being processed during the maintenance mode in order to determine the specific maintenance targets. Since the maintenance targets can differ from those targets that are permissible during normal operation, the application control module can communicate with the drive control module during the maintenance mode via a special extended interface. This extended interface not only allows targets to be set during normal operation To transmit high-level commands to the drive control module, but also allows the maintenance targets to be transmitted to the drive control module, wherein these maintenance targets can be transmitted as low-level commands.

In a special embodiment, the elevator control system can also include a maintenance control panel which has sensor-operated components that can be activated by a maintenance technician for generating maintenance signals, the maintenance targets being determined by processing the maintenance signals.

In other words, in addition to the control panels, by means of which passengers can enter their requirements for the elevator system during normal operation, a special maintenance control panel can be provided. With this maintenance control panel, a maintenance technician can control the actuator components of the elevator system during a maintenance process. This maintenance control panel can be arranged, for example, in a pit of an elevator shaft or on a roof of the elevator car and can therefore only be accessed by the authorized maintenance technician. This maintenance control panel can then be used by the maintenance technician by actuating his sensory components, such as buttons or switches, to generate the special maintenance signals during the maintenance process and thus to use the elevator control system, for example, the elevator cabin, through the maintenance targets generated thereby to move otherwise not permitted positions or to open their elevator doors at otherwise not permitted positions.

In particular, with the aid of embodiments of the elevator control described herein, embodiments of the method for controlling the operation of actuator components of an elevator installation, also described here, can be implemented according to the second aspect of the invention. In particular, operating signals can be generated by actuating sensory components and these operating signals can then be detected by an application control module. The application control module can then generate targets by processing the operating signals. These targets are then transmitted to the trip control module as high-level commands via a high-level interface. The drive control module can then operate the actuator components of the Control the elevator system by processing low-level commands in accordance with the transmitted targets and taking into account the safety requirements specified for normal operation of the elevator system.

In order to be able to execute embodiments of the described method in modules of a programmable elevator control, the computer program product according to the third aspect of the invention can comprise a sequence of suitable computer-readable instructions, which, when executed, guide the programmable travel control module or the programmable application control module to suit steps of the described method execute or control. The computer program product can be programmed in any computer language.

In particular, the part of the computer program product that programs the application control module can be designed such that the targets generated in the application control module are transmitted as high-level commands via the high-level interface, whereas the operation of the actuator components of the elevator system is controlled by Processing of low-level commands is to be carried out.

The computer program product can be stored on any computer readable medium such as a CD, DVD, flash memory, ROM, PROM, EPROM or the like. Alternatively, the computer program product can be stored on another computer or server from which it can be downloaded, wherein the other computer or server can be part of a data cloud ("cloud"). Since both the travel control module and the application control module are at least partially defined by the software used to implement them, functions of these control modules can be implemented partially or possibly even completely in external computers or servers, in particular in the data cloud, with the computer program product used for this purpose. As a result, these control modules can be designed as part of a network, which can also be referred to as "IoT" (Internet of Things) or in the specific case as "IoEE" (Internet of Elevators and Escalators).

It is pointed out that some of the possible features and advantages of the invention are described herein with reference to different embodiments of an elevator control or a method for controlling an operation of actuator components of an elevator installation. A person skilled in the art recognizes that the features can be combined, transmitted, adapted or exchanged in a suitable manner in order to arrive at further embodiments of the invention.

Embodiments of the invention are described below with reference to the accompanying drawings, wherein neither the drawings nor the description are to be interpreted as limiting the invention.

Fig. 1 shows a schematic structure of an elevator control according to an embodiment of the present invention.

The figure is only schematic and not to scale.

In conventional elevator systems, the elevator control system is typically hardware that controls the system's reactions to a user action as well as to changes in state, which are detected by peripheral devices and contacts. Their logic provides machine states for user requirements, for a status of the elevator door, for a status of a safety circuit, for a status of a drive device and an elevator shaft, etc. In addition, the elevator control implements the algorithms for customer applications. These can depend, among other things, on the construction of a building, national regulations and / or customer requirements.

Monolithic software that is configurable to meet all of these requirements is extremely complex. Changes in this software can require long and intensive testing and can therefore be costly. However, such testing of laws and / or safety standards may be required because the control software must avoid dangerous situations for the elevator passengers. Any change in legal requirements in a market as well as in Customer requirements can therefore have a major impact on the development of this software.

A basic idea on which embodiments of the present invention are based can be seen in providing a simplified elevator control based on a separation of the control software and most likely also the hardware. One part ensures a safe movement of the elevator car from one position to another position. Another part provides the algorithms for handling the travel processes ("trips") of the elevator installation, for example according to national requirements and / or customer needs.

Fig. 1 shows an elevator control 1 according to an embodiment of the present invention. The elevator control 1 comprises a programmable travel control module 3 and a programmable application control module 5.

The travel control module 3 can control an operation of actuator components 7 in accordance with targets.

In the example shown, these actuator components 7 comprise a drive device 9 with an inverter 11 and an electric motor 13 supplied by it, and a brake device 15 with a power supply 17 and a brake 19. With the drive device 9 and the brake device 5, movements of an elevator car 21 can be driven or be braked.

The travel control module 3 takes predetermined safety requirements into account when controlling the actuator components 7, in order to avoid that the elevator installation can get into situations in which, for example, the safety of passengers can be endangered.

For this purpose, the travel control module 3 can monitor various sensors 23. These sensor systems 23 can detect the currently prevailing conditions within the elevator installation and transmit corresponding signals to the travel control module 3. This sensor system 23 can include, for example, a safety chain 25 of the elevator system. This safety chain 25 can comprise several sensors 27, each one be able to monitor the safety-relevant condition in the elevator system. For example, the sensors 27 can be configured as door closing contacts, with the aid of which it can be determined whether an elevator door is closed correctly and thus ensures that there is no passenger in the region of the elevator door. The sensors 23 can also include a position transmitter 29 in which a sensor 31 can monitor a current position of the elevator car 21 within an elevator shaft. Furthermore, the sensor systems 23 can include a door drive monitor 33, which can monitor the functional properties of an elevator door drive with the aid of a sensor 35. In addition, brake contact monitoring can also count among the sensors 23.

The application control module 5 is designed to detect operating signals from sensory components 37 and, by processing these operating signals, to generate the targets that are to be transmitted to the travel control module 3.

For this purpose, a plurality of operating panels 40 can be provided in the elevator control 1, each of which comprises at least one of the sensor components 37. For example, floor control panels (LOP) 39 can each have a sensory component 37 in the form of a call button, upon actuation of which an operating signal signals the application control module 5 that the elevator car 21 is to be sent to a relevant floor. Furthermore, a plurality of sensory components 37 in the form of destination indication buttons can be provided on a cabin operating panel (COP) 41, by the actuation of which a passenger can indicate the destination floor to which he wishes to be transported by elevator car 21. On the basis of the operating signals transmitted by the sensory components 37, the application control module 5 can then determine targets such as destination targets and / or elevator door status targets.

The application control module 5 can communicate with the travel control module 3 via a high-level interface 43. The application control module 5 is designed to transmit the targets it generates as high-level commands to the travel control module 3 via the high-level interface 43 in normal operation.

A maintenance control panel 45 is also provided for the elevator control 1. Due to its design or the position at which it is provided in the elevator system, this maintenance control panel 45 can be designed such that its sensory components 47, such as buttons or switches, can only be operated by a maintenance technician authorized for this purpose. By processing maintenance signals which are output by the sensor components 47 of the maintenance control panel 45, maintenance targets can be determined which specify how the elevator system should behave during a maintenance process.

The travel control module 3 can be configured to go into a maintenance mode after it has checked an authorization for this. In this maintenance mode, the travel control module 3 can control the actuator components 23 of the elevator installation in accordance with the maintenance targets. In this maintenance mode, the travel control module 3 may not need to take into account the stricter safety requirements for the normal operation of the elevator system, but only the safety requirements as specified for the maintenance operation of the elevator system.

In this case, the interface 43, via which the targets are transmitted as high-level commands in normal operation, can be put into an expanded state and the maintenance targets can be transmitted to the travel control module 3 as low-level commands as low-level commands during the maintenance mode .

The travel control module 3 is preferably a system which is capable of real-time processing of data and signals in order to be able to handle driving functions of the elevator system directly with the drive device 9 or its inverter 11. It ensures compliance with basic safety rules, which must not be overcome or overridden by the application control module 5. For example, it does not open an elevator door while elevator car 21 is moving. The travel control module 3 provides a high-level communication interface 43 for the commanding application control module 5 for requirements in the form of targets, according to which the elevator car 21 is to be moved to a specific floor and / or an elevator door is opened or should be closed. Other targets are generally not accepted during normal operation.

A maintenance technician must be able to obtain authorized access and be able to switch the drive control module 3 into a maintenance mode in order to make the extended communication interface 49 accessible. As soon as the extended interface 49 is active, the travel control module 3 is able to carry out test algorithms with the aid of low-level commands and status messages. In this maintenance mode, at least some of the basic safety rules for the normal operation of the travel control module 3 can no longer be used.

The programming or software of the travel control module 3 is typically provided by the R&D department of a manufacturer of the elevator system. In general, it must be tested under all conditions and certified for the safe operation of the elevator system.

The application control module 5 can run on a programmable computer with an operating system. It operates a user application 55, which starts script modules 53 in order to provide modular functions in independent scripts. The script modules 53 can, for example, be formulated on a basis 51 in Python language. This module container must therefore have a common interface for the commands from these modules and for a status image of the elevator system. The elevator manufacturer's R&D department can, for example, pre-develop functional modules for various customer functions and elevator operating modes. These modules can then be modified by local agents to meet regional and / or customer specific needs. Since the targets determined in this way are communicated to the travel control module 3 via the high-level interface 43, no further certification is required for the application control module 5.

In summary, different functions or properties can be assigned to the trip control module 3 on the one hand and the application control module 5 on the other hand.

• Echtzeit-Software
• Gefahren vermeiden
• die Sicherheitsschaltung/Sicherheitskette überwachen
• alle Sensoren überwachen
• Berechnen eines Fahrtverlaufs
• Steuern des Wechselrichters bzw. der Antriebseinrichtung
• Bereitstellen einer Evakuierungsfunktion
• Handhaben außergewöhnlicher Zustände
• Steuern der Bremseinrichtung

The travel control module 3 implements, among other things, at least some of the functions or properties mentioned below:

• Real-time software
• Avoid dangers
• monitor the safety circuit / safety chain
• monitor all sensors
• Calculate a route
• Control of the inverter or the drive device
• Providing an evacuation function
• Handle exceptional conditions
• Control the braking device

• Betriebssystem
• Handhaben der Steuerungsalgorithmen
• bevorzugte Stockwerke
• Lichtsteuerung
• VIP-Schalter
• Testalgorithmen (für Wartungsbetrieb)
• Handhabung von LOP-Aktionen
• Handhabung von COP-Aktionen
• Richtungsangaben
• Stockwerksangaben
• Vorgaben für einen Türzustand
• Vorgaben für die nächste Fahrt

The application control module 5 implements, inter alia, at least some of the functions or properties mentioned below:

• operating system
• Manage the control algorithms
• preferred floors
• Light control
• VIP counter
• Test algorithms (for maintenance operations)
• Handling LOP actions
• Handling COP actions
• Directions
• Floor information
• Requirements for a door state
• Requirements for the next trip

In conclusion, it should be pointed out that terms such as "having", "comprehensive", etc. do not exclude other elements or steps, and terms such as "a" or "an" do not exclude a large number. Furthermore, it should be pointed out that features or steps which have been described with reference to one of the above exemplary embodiments also in combination with other features or steps of others described above Embodiments can be used. Reference signs in the claims are not to be viewed as a restriction.

Reference list

1

Elevator control

3rd

Trip control module

5

Application control module

7

actuator components

9

Drive device

11

Inverter

13

Electric motor

15

Braking device

17th

Power supply

19th

brake

21

Elevator cabin

23

Sensors

25th

Safety chain

27

sensor

29

Position transmitter

31

sensor

33

Door operator monitoring

35

sensor

37

sensory components

39

Floor control panel

40

Control panels

41

Cabin control panel

43

high-level interface

45

Maintenance control panel

47

sensory components of the maintenance control panel

49

extended interface

51

Base in Python language

53

Script modules

55

User application

Claims (13)

Elevator control (1) for controlling the operation of actuator components (7) of an elevator system, the elevator control (1) comprising: a programmable trip control module (3), a programmable application control module (5), wherein the travel control module (3) is configured to control the operation of the actuator components (7) of the elevator system in accordance with targets by processing low-level commands and taking into account safety requirements specified for normal operation of the elevator system, wherein the application control module (5) is configured to detect operating signals from sensory components (37) and to generate the target specifications by processing these operating signals, wherein the application control module (5) is connected to the travel control module (3) for data communication via a high-level interface (43) and is configured to use the high-level interface (43) as high-level commands to be transmitted to the cruise control module (3). Elevator control according to claim 1, wherein the application control module (5) is configured to directly control non-critical functions of the elevator system by processing the operating signals and to control safety-critical functions of the elevator system which are subject to the specified safety requirements by generating the target specifications and transmitting the Initiate targets to the trip control module (3). Elevator control according to one of the preceding claims, wherein the travel control module (3) is configured to control the operation of the actuator components (7) of the elevator system in real time. Elevator control according to one of the preceding claims, wherein the travel control module (3) is configured to take into account the safety requirements by monitoring at least one of the following sensors (23): a safety chain (25) comprising a plurality of sensors (27) each monitoring a safety-relevant state in the elevator installation; a position transmitter (29) with at least one sensor (31) monitoring a current position of an elevator car (21); and a door drive monitor (33) with at least one sensor (35), which monitors the functional properties of an elevator door drive. Elevator control according to one of the preceding claims, wherein software of the travel control module (3) is protected against unauthorized changes, whereas software of the application control module (5) can be changed without authorization. Elevator control according to one of the preceding claims, wherein the high-level commands comprise: a destination target, which specifies the floor to which an elevator car (21) of the elevator system is to be moved, and an elevator door status target, which specifies the opening state in which an elevator door is to be brought. Elevator control according to one of the preceding claims, further comprising at least one control panel (40) which has sensor components (37) which can be actuated by an elevator passenger for generating the control signals. Elevator control according to one of the preceding claims, wherein the travel control module (3) is further configured to go into a maintenance mode after checking an authorization, in which the travel control module (3) processes the operation of the actuator components (7) of the elevator installation according to maintenance targets controls by low-level commands and taking into account safety requirements specified for a maintenance operation of the elevator system. Elevator control according to claim 8, wherein the application control module (5) is configured to detect signals from sensory components and to determine the maintenance targets by processing these signals,
wherein the application control module (5) is connected to the travel control module (3) for data communication during the maintenance mode via an extended interface (49) and is configured to meet the maintenance targets during the Maintenance mode to be transmitted as low-level commands to the drive control module via the extended interface (49). Elevator control according to one of Claims 8 and 9, further comprising a maintenance control panel (45) which has sensor-operated components (47) which can be actuated by a maintenance technician for generating maintenance signals, the maintenance targets being determined by processing the maintenance signals. Method for controlling the operation of actuator components (7) of an elevator system, the method comprising: Detection of control signals from sensory components (37) and generation of targets by processing the control signals by an application control module (5), Controlling the operation of the actuator components (7) of the elevator system by means of a programmable travel control module (3) in accordance with the targets by processing low-level commands and taking into account the safety requirements specified for normal operation of the elevator system, wherein the application control module (5) is connected to the travel control module (3) for data communication via a high-level interface (43) and the targets via the high-level interface (43) as high-level commands to the travel control module ( 3) be transmitted. Computer program product, comprising computer-readable instructions, through the execution of which programmable components of an elevator control (1) are configured to execute or control a method according to claim 11. Computer-readable medium with a computer program product stored thereon according to claim 12.

Images