EP3704048B1 - Dispositif de surveillance de sécurité destiné à surveiller des conditions relatives à la sécurité dans une installation de transport de personnes ainsi que procédé de fonctionnement d'un tel dispositif - Google Patents

Dispositif de surveillance de sécurité destiné à surveiller des conditions relatives à la sécurité dans une installation de transport de personnes ainsi que procédé de fonctionnement d'un tel dispositif Download PDF

Info

Publication number
EP3704048B1
EP3704048B1 EP18779406.0A EP18779406A EP3704048B1 EP 3704048 B1 EP3704048 B1 EP 3704048B1 EP 18779406 A EP18779406 A EP 18779406A EP 3704048 B1 EP3704048 B1 EP 3704048B1
Authority
EP
European Patent Office
Prior art keywords
safety
safety monitoring
relay
state
double contact
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP18779406.0A
Other languages
German (de)
English (en)
Other versions
EP3704048A1 (fr
Inventor
Eric Birrer
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Inventio AG
Original Assignee
Inventio AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Inventio AG filed Critical Inventio AG
Publication of EP3704048A1 publication Critical patent/EP3704048A1/fr
Application granted granted Critical
Publication of EP3704048B1 publication Critical patent/EP3704048B1/fr
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
    • B66B5/0006—Monitoring devices or performance analysers
    • B66B5/0018—Devices monitoring the operating condition of the elevator system
    • B66B5/0031—Devices monitoring the operating condition of the elevator system for safety reasons
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B1/00—Control systems of elevators in general
    • B66B1/34—Details, e.g. call counting devices, data transmission from car to control system, devices giving information to the control system
    • B66B1/46—Adaptations of switches or switchgear
    • B66B1/50—Adaptations of switches or switchgear with operating or control mechanisms mounted in the car or cage or in the lift well or hoistway
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B13/00—Doors, gates, or other apparatus controlling access to, or exit from, cages or lift well landings
    • B66B13/22—Operation of door or gate contacts
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B29/00—Safety devices of escalators or moving walkways
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B9/00—Kinds or types of lifts in, or associated with, buildings or other structures
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
    • H01H1/00—Contacts
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
    • H01H2231/00—Applications
    • H01H2231/03—Elevator

Definitions

  • the present invention relates to a safety monitoring device for monitoring safety-relevant conditions in a passenger conveyor system.
  • the invention also relates to a passenger conveyor system with such a safety monitoring device.
  • the invention also relates to a method for monitoring the functionality of such a safety monitoring device.
  • Passenger conveyor systems in the form of elevators, escalators or moving walks are used to move people within buildings.
  • the passenger conveyor system is permanently installed in the structure.
  • an elevator car can be shifted vertically between different floors.
  • passengers can be transported standing on step units along inclined or horizontal driveways.
  • Components are monitored in order, for example, to then operate or control other components of the passenger conveyor system in a suitable and safe manner.
  • sensors and / or switches are usually provided on the corresponding components or at different points of the passenger conveyor system. Signals from such sensors or switches can be made available to a control of the passenger conveyor system so that it can take the signals into account when controlling functions of the passenger conveyor system and thus can bring about safe operation of the passenger conveyor system.
  • a so-called safety monitoring chain is conventionally used in an elevator in order to ensure safe operation of the elevator.
  • the safety monitoring chain comprises a large number of sensors and / or switches, with the aid of which information about current safety-relevant states of components of the elevator can be determined.
  • a door switch which is closed as long as the respective door is closed, is typically provided on a car door and on each of a plurality of shaft doors.
  • the multiple door switches are connected in series within the security monitoring chain, so that the security monitoring chain as a whole is only closed when each of the door switches is closed.
  • An elevator control connected to the safety monitoring chain may or can, in this case, only move an elevator car within an elevator shaft if the safety monitoring chain is closed as a whole and it can therefore be assumed that all car and shaft doors are currently closed.
  • the safety monitoring chain can additionally comprise further switches and / or sensors.
  • a so-called car emergency limit switch can be provided in the elevator, which is normally closed and which is actuated to open as soon as the elevator car is moved beyond a permissible travel path, for example in the direction of an elevator shaft ceiling or in the direction of an elevator shaft floor.
  • a sensor system can be provided which enables the functionality of the KNE switch by using the sensor system to determine a current position of the elevator car within the elevator shaft and to recognize when the elevator car is moved beyond the permissible travel path and then causes it that the security surveillance chain is interrupted. This can be used to ensure that the security surveillance chain is interrupted as soon as the elevator car leaves its permissible travel path.
  • provisions can be provided in an elevator that make it possible to open such doors in predefined exceptional situations, while the elevator car is not standing still or moving the elevator car although at least one door is open. For example, it may be desired that doors begin to open shortly before the elevator car reaches a target position and stop there, in order to be able to accelerate door opening processes and to be able to reduce the length of stay at the target position.
  • a switchable connection can be provided in parallel to the door switches connected in series, which can be temporarily closed for temporarily bridging the doors (UET switch) in order to be able to open doors without interrupting the security monitoring chain.
  • the UET switch can be closed, for example, and thus the area of the security monitoring chain comprising the door switch can be bridged as soon as a sensor system detects, for example, that the elevator car is sufficiently close to a desired target position, i.e. less than 20 cm or less than 10 cm from this is removed.
  • a safety-relevant state can be detected directly with the aid of a switch and this switch can be integrated into the safety monitoring chain.
  • the safety-relevant state can be monitored with a sensor system, for example.
  • the sensor system can evaluate signals which reflect the safety-relevant state with the aid of a controller arrangement in order to then be able to operate a switch integrated in the safety monitoring chain in a suitable manner.
  • relays can be used as switches integrated in the safety monitoring chain, which can be switched in the desired manner by means of control voltages suitably generated by the controller arrangement.
  • both the controller arrangement and a relay arrangement are usually designed redundantly.
  • the relay arrangement comprises two relays connected in series, both of which have to be brought into closed states by the controller arrangement in order to complete an associated switching state within the safety monitoring chain.
  • the effort involved in implementing a safety monitoring device can be considerable, in particular due to the large number of components to be kept available and their interconnection.
  • a safety monitoring device in which such an expense is reduced. Furthermore, there may be a need for a passenger conveyor system equipped with such a safety monitoring device. In addition, there may be a need for a method by means of which the functionality of such a safety monitoring device can be monitored.
  • a safety monitoring device for monitoring safety-relevant conditions in a passenger conveyor system.
  • the safety monitoring device has a first and a second double contact relay and a first and a second controller.
  • Both double contact relays are designed to switch a first normally open contact and a second normally open contact, as well as a feedback contact, synchronously with one another between an open and a closed relay state, controlled by a control voltage.
  • the two controllers are designed to determine properties of the passenger conveyor system that correlate with a safety-relevant state and to generate the control voltages for the first and the second double contact relay depending on the properties determined.
  • a first and a second safety monitoring switch arrangement is formed.
  • the first safety monitoring switch arrangement is designed for monitoring a first safety-relevant state and for correspondingly switching a first switching state within a safety monitoring chain of the passenger conveyor system.
  • the second safety monitoring switch arrangement is designed for monitoring a second safety-relevant state and for correspondingly switching a second switching state within the safety monitoring chain of the passenger conveyor system.
  • the first safety monitoring switch arrangement comprises the first working contact of the first double contact relay and, connected in series with this, the first working contact of the second double contact relay.
  • the second safety monitoring switch arrangement comprises the second working contact of the first double contact relay and, connected in parallel to this, the second working contact of the second double contact relay.
  • a passenger conveyor system which has a safety monitoring device according to an embodiment of the first aspect of the invention.
  • security monitoring switch arrangements are used to monitor a safety-relevant state within the passenger conveyor system, with a safety monitoring device being a controller for determining properties within the passenger conveyor system that correlate with the condition to be monitored, as well as relays for opening or closing a contact has within a security surveillance chain.
  • a safety monitoring switch arrangement with one or more separate controllers and relays is conventionally provided for each safety-relevant state to be monitored.
  • two relays are connected in series in a redundant manner. Accordingly, at least one controller and one relay, but in many cases two controllers and two relays, must be provided for each safety-relevant state to be monitored.
  • a number of relays to be kept available in the passenger conveyor system can hereby become large, which can be associated with significant preparation and maintenance expenditure and corresponding costs.
  • double contact relays instead of simple relays in a safety monitoring device and to interconnect them in an advantageous manner and to have them controlled by two controllers.
  • a control voltage applied to the relay in a control circuit can be used to open or close the relay in a controlled manner like a switch.
  • the control voltage can for example cause a current through a coil, whereby the coil generates a magnetic field which attracts or repels an armature.
  • the armature moved in this way can then move arms of a normally open contact towards one another or away from one another.
  • a simple relay only a single normally open contact is opened or closed.
  • double contact relay With a double contact relay, on the other hand, two working contacts are opened or closed simultaneously, i.e. synchronously with one another, moved by one and the same armature.
  • the double contact relay can therefore not only open or close one switch in one working circuit but two switches in two different working circuits controlled by the control voltage and synchronized with one another.
  • a so-called feedback contact which is moved synchronously with the two normally open contacts, can also be provided in a double contact relay.
  • the feedback contact can be used, for example, to check whether the working contacts were actually opened following the applied control voltage. Accordingly, it can be recognized, for example by monitoring the feedback contact, when the double contact relay has a defect and no longer switches correctly. In particular, it can be recognized when adjacent arms of a normally open contact are, for example, inadvertently welded to one another or stick to one another and thus no longer open correctly despite a correspondingly applied control voltage.
  • the two double contact relays provided therein can advantageously be interconnected in such a way that they form two safety monitoring switch arrangements with the aid of which two different safety-relevant states can be monitored and associated switching states within the safety monitoring chain of the passenger conveyor system are switched accordingly.
  • a desired redundancy can be achieved when switching the switching states without at least two separate relays having to be provided for each switching state to be switched.
  • the two double contact relays can be integrated into the safety monitoring chain of the passenger conveyor system, ie with other components of the Be connected to the safety monitoring chain so that all the desired switching states within the safety monitoring chain can be switched in response to the two monitored safety-relevant states with just two double contact relays.
  • the first working contact of the first double contact relay is connected in series with the first working contact of the second double contact relay to form the first safety monitoring switch arrangement.
  • the second working contact of the first double contact relay and the second working contact of the second double contact relay are connected in parallel to one another.
  • the first safety monitoring switch arrangement is only completely closed when both of the series-connected first working contacts of the two double contact relays are closed, ie when both controllers control the two double contact relays to close.
  • the second safety monitoring switch arrangement is already closed when only one of the second working contacts connected in parallel is closed, that is, when at least one of the double contact relays is actuated to close by one of the controllers, and only opened when both of the second working contacts of the two Double contact relays are open.
  • the safety monitoring device is set up to take into account that the monitoring of the first safety-relevant state requires a higher safety integrity level than the monitoring of the second safety-relevant state.
  • the special circuit of the two double contact relays proposed here can be used particularly advantageously in a constellation in which two different safety-relevant states are to be monitored with the aid of the safety monitoring device within the passenger conveyor system, which are significantly different in terms of their safety integrity level.
  • the first safety monitoring switch arrangement with the two series-connected first working contacts of the first and second double contact relay can ensure a higher level of safety integrity than the second safety monitoring switch arrangement in which the two second working contacts of both double contact relays are connected in parallel to one another.
  • a safety integrity level which is also sometimes referred to as the safety requirement level or SIL (Safety Integrity Level), is a term from the field of functional safety, as described, for example, in the international standardization IEC 62508 / IEC61511.
  • a safety integrity level is used to assess electrical, electronic or programmable electronic systems with regard to their reliability of safety functions. The desired level results in safety-related construction principles, for example, which must be adhered to in order to be able to minimize the risk of malfunctions.
  • SIL 1 to SIL4 the safety integrity level.
  • the safety monitoring device can be set up to take into account that the monitoring of the second safety-relevant state requires a safety integrity level SIL1 and the monitoring of the first safety-relevant state requires at least one safety integrity level SIL2.
  • the first safety monitoring switch arrangement used to monitor the first safety-relevant state can be designed in such a way that it can perform its monitoring function in accordance with the higher requirements of a safety integrity level SIL2 or even SIL3, whereas the second safety monitoring switch arrangement used to monitor the second safety-relevant state can be designed in such a way that it can only perform its monitoring function in accordance with the lower requirements of a safety integrity level SIL1.
  • the first safety-relevant state can indicate whether parts of the safety monitoring chain which monitor the closed states of doors of the passenger conveyor system may be temporarily short-circuited.
  • the parts of the safety monitoring chain which monitor the closed states of doors of the passenger conveyor system can then be temporarily short-circuited by closing switching of the first switching state.
  • the first safety-relevant state monitored by the first safety monitoring switch arrangement can contain information about whether, for example, there are currently conditions in which the actual closed states of the car door and shaft doors may be temporarily ignored and the elevator car may be moved, for example, despite the car door or shaft door being open .
  • a safety-relevant state can exist when the car is very close (e.g. ⁇ 20 cm) to a target position, i.e. for example at a floor stop, and the respective door may already be opened before the target position is actually reached. This can be recognized, for example, by analyzing the current position of the elevator car within the elevator shaft.
  • the information about the current position of the car can be interpreted as indicating a safety-relevant state, in which the closed states of the doors of the passenger conveyor system can be temporarily ignored and thus parts of the safety monitoring chain that monitor these closed states can be temporarily short-circuited.
  • the first and second controller can control the two double contact relays appropriately so that both double contact relays in their override closed relay state.
  • the first two working contacts of the two double contact relays are then closed, so that a closed state also results overall for their series connection within the framework of the first safety monitoring switch arrangement.
  • the first safety monitoring switch arrangement can close a circuit that runs parallel to the part of the safety monitoring chain that monitors the closed states of the doors of the passenger conveyor system, and can thus temporarily short-circuit the monitoring of the doors in the form of a UET contact as in a bypass.
  • the second safety-relevant state can indicate whether an elevator car has been moved beyond a permissible movement range.
  • the safety monitoring chain can be interrupted by opening the second switching state.
  • the second safety-relevant state monitored by the second safety monitoring switch arrangement can include information about the current position of the elevator car, so that it can be determined whether the elevator car is currently within its permissible travel range, that is, for example, between an uppermost permissible end position and a lowermost permissible end position inside the elevator shaft, or whether the elevator car has left its permissible travel range, for example due to a malfunction, and has been moved beyond the upper permissible end position or below the lower permissible end position, for example.
  • the first and second controller can control the two double contact relays appropriately so that both double contact relays switch to their open relay state.
  • the two second working contacts of the two double contact relays are then both open, so that an open state also results overall for the parallel connection within the scope of the second safety monitoring switch arrangement.
  • the second safety monitoring switch arrangement for example if it is connected in series with a remainder of the safety monitoring chain of the passenger conveyor system, can act like an open switch and thus the safety monitoring chain temporarily interrupt. As a result, operation of the elevator or, in particular, further movement of the elevator car beyond a respective end position is prevented.
  • the safety monitoring device furthermore has a plurality of third safety monitoring switch arrangements connected in series for monitoring third safety-relevant states.
  • the safety monitoring device can have further safety monitoring switch arrangements with the aid of which other tasks or functionalities can be implemented.
  • third safety monitoring switch arrangements can be door switches, for example, with the aid of which the closed states of elevator doors, in particular the car door or one of the shaft doors, can be monitored.
  • the several third safety monitoring switch arrangements can be connected in series so that they can form part of the safety monitoring chain of the passenger conveyor systems.
  • a series connection ensures that all doors, and thus all door switches, must be closed so that the cited part of the security monitoring chain is closed as a whole.
  • the first safety monitoring switch arrangement can be connected in parallel to the series of third safety monitoring switch arrangements and the second safety monitoring switch arrangement can be connected in series with the series of third safety monitoring switch arrangements.
  • the first safety monitoring switch arrangement with its two series-connected first working contacts of the two double contact relays can be connected in parallel to the series circuit of third safety monitoring switch arrangements.
  • the first safety monitoring switch arrangement thus forms a bypass running parallel to the series circuit comprising third safety monitoring switch arrangements and can thus bridge this series circuit in a controlled manner like a UET switch.
  • the second safety monitoring switch arrangement with its two second working contacts of the two double contact relays connected in parallel can be connected in series with the series connection of third safety monitoring switch arrangements. As long as at least one of the double contact relays is closed, the second switching state also remains closed, so that overall that part of the safety chain formed by the third safety monitoring switch arrangements and the second safety switch monitoring arrangement remains closed. This part of the safety chain is only opened when both double contact relays are open at the same time and the second switching state is therefore also open.
  • the second safety monitoring switch arrangement can thus temporarily interrupt a safety chain in a controlled manner like a KNE switch.
  • the first and the second controller can each be designed as safety-related, programmable logic controllers.
  • a programmable logic controller is a device that can usually be used to control or regulate a system or a machine.
  • Programmable logic controllers are increasingly replacing conventional hard-wired, connection-programmed controllers.
  • the fact that a PLC can be programmed on a digital basis and thus adapted to various tasks can be used to advantage.
  • a PLC has inputs, outputs, an operating system and, if necessary, an interface via which a user program can be loaded.
  • the user program can program how the outputs are to be switched depending on the inputs, so that the system or machine functions in the desired manner.
  • the operating system can be kept up-to-date in the form of firmware, for example.
  • a PLC can also perform other tasks such as the visualization of data, a design as Interface, for example in the form of a man-machine interface, take over an alarm and / or a recording of operational messages (data logging).
  • a safety-related PLC is a special implementation of a PLC.
  • a safety-related PLC has a largely redundant design of its components and is usually designed in such a way that the safety-related PLC in the event of a failure of a component or a Conflict between redundant components is transferred to a predetermined safe state.
  • safety-related PLCs differ significantly from conventional PLCs.
  • a conventional PLC typically has a microprocessor that executes a program, non-volatile memory for storing the program, volatile memory (RAM) for performing calculations, ports for data communication and I / O connections for to detect and control a system or machine.
  • a safety-related PLC generally has at least two of the respective components which continuously monitor each other or are monitored by what is known as a watch dog circuit.
  • the inputs of a conventional PLC typically do not have any means for testing the functionality of an input circuit.
  • safety-related PLCs usually have an internal output circuit that is assigned to each input and with which the respective input can be tested.
  • safety-related PLCs generally have a test point after each of two safety switches located after an output driver and a third test point downstream of the output driver.
  • Each of two safety switches are generally controlled by a single microprocessor. If a fault in one of the two safety switches is due, for example, to a fault in the switch or the Microprocessor or at the test point downstream of the output driver is detected, the operating system of the safety-related PLC will automatically detect a system error and the safety-related PLC is transferred to a predefined state in which a system can be shut down properly, for example.
  • the two controllers are designed as safety-related PLCs, they are suitable, on the one hand, for being able to be adapted to different elevator types as retrofit devices, for example.
  • the controllers or the safety monitoring device equipped with them can guarantee a high level of safety for the passenger conveyor systems equipped with them.
  • the security monitoring device can be set up to execute or control a method according to an embodiment of the third aspect of the invention.
  • the first and second controllers of the safety monitoring device which are designed as PLCs or safety-related PLCs, can be programmed in such a way that the control voltages generated by them are varied in such a way that at least one of the two double contact relays is always in its closed relay state, but one of the two double contact relays is briefly put into its open relay state and back into its closed relay state. It is always monitored whether the associated feedback contact of a double contact relay follows the generated control voltage, i.e. whether the feedback contact indicates the relay state that was actually controlled by the associated controller, or whether, for example, due to a malfunction within the double contact relay, an actual relay state does not correspond to the desired controlled relay state is equivalent to.
  • the two controllers in the event that the feedback contacts of the two double contact relays do not indicate a relay state indicating the currently activated relay state, the two controllers can generate control voltages in such a way that both the first and the second Double contact relays are switched to their open relay state.
  • each of the two controllers monitors the feedback contacts of each of the two double contact relays.
  • the first and the second controller should not only monitor the feedback contacts of the double contact relay assigned to them, i.e. controlled by you. Instead, each controller should monitor the feedback contact of its assigned double contact relay as well as the feedback contact of the other double contact relay. In this way, redundancy can be created which further increases the safety of the safety monitoring device and, in particular, drastically increases the probability that malfunctions will be correctly recognized in its double contact relay.
  • the proposed method is carried out before, during or after each individual journey of the passenger transport system.
  • the method with which the functionality of the safety monitoring device is checked can in principle be carried out at any time or triggered by any events. However, it is considered advantageous to carry out the method at least when the passenger transport system is driving. It can thus be ensured that the functionality of the safety monitoring device is checked sufficiently frequently.
  • Fig. 1 shows a passenger conveyor system 1 in the form of an elevator.
  • the elevator comprises an elevator car 5 and a counterweight 7, which can be displaced vertically within an elevator shaft 3 by means of belts 9 driven by a drive machine 11.
  • the elevator control 13 can, for example, supply the drive machine 11 with electrical power from an electrical power source 15 in a controlled manner.
  • the elevator car 5 can be moved between different floors 17.
  • a shaft door 19 is provided on each floor 17 and a car door 21 is provided on the elevator car 15.
  • a plurality of safety monitoring switch arrangements 23 is provided in the passenger conveyor system 1, with the aid of which safety-relevant states within the passenger conveyor system 1 can be monitored.
  • door switches 25 are provided on each of the shaft doors 19 and on the car door 21, with the aid of which it can be monitored whether the respective shaft or car door 19, 21 is currently correctly closed or at least partially open.
  • a ladder presence switch 27 is provided in a pit area of the elevator shaft 3, with the aid of which the presence and correct arrangement of a ladder 29 can be monitored.
  • safety monitoring switch arrangements 23 can be provided, for example, as simple, mechanically operated switches.
  • the passenger conveyor system 1 can also have more complex safety monitoring switch arrangements 23.
  • an absolute position sensor 35 can be formed, with the aid of which information about a current position of the elevator car 5 within the elevator shaft 3 can be obtained. Based on this information, safety-relevant states can then be monitored.
  • the elevator car 5 can be recognized whether the elevator car 5 is currently located opposite or at least close to one of the shaft doors 19 and thus the car door 21 and / or the opposite shaft door 19 may be opened. Furthermore, based on this information, it can be recognized whether the elevator car 5 is located within a permissible travel range 37 within the elevator shaft 3 or whether it was unintentionally moved out of this permissible travel range 37.
  • Data or signals can be transmitted from the various safety monitoring switch arrangements 23 to a safety monitoring device 39, for example in a wired or wireless manner.
  • the safety monitoring switch arrangements 23 can be connected to one another, in particular connected to one another in series, in order to form parts of a safety monitoring chain 41.
  • the door switches 25 and the conductor presence switch 27 can be connected in series so that the part of the security monitoring chain 41 formed thereby is only closed as a whole when all the door switches 25 and the conductor presence switch 27 are closed.
  • the safety monitoring device 39 can communicate with the elevator control 13 or be part of the same and influence functions of the elevator control 13.
  • the safety monitoring device 39 can actuate one or more main relay arrangements 43, for example to be able to interrupt a power supply between the elevator control 13 and the drive machine 11 and / or to activate or release the brake 12 for braking the elevator car 5.
  • Fig. 2 illustrates details of a safety monitoring chain 41.
  • Several safety monitoring switch arrangements 23 (which are also referred to below as “third safety monitoring switch arrangements”) in the form of door switches 25 and further safety monitoring switch arrangements 23, for example in the form of a conductor presence switch 27 or the like, are connected in series.
  • One of these further safety monitoring switch arrangements 23 acts as a cabin emergency limit switch 28 (KNE switch). This cabin emergency limit switch 28 is opened when the elevator car 5 is moved beyond its permissible travel range 37.
  • KNE switch cabin emergency limit switch 28
  • the part of the safety monitoring chain 41 formed by the safety monitoring switch arrangements 23 connected in series is connected in series with the main relay arrangement 43.
  • the main relay arrangement 43 comprises a first main double contact relay 45 with a coil 49, a first normally open contact 53, a second normally open contact 57 and a feedback contact 61 and a second main double contact relay 47 with a coil 51, a first make contact 55, a second make contact 59 and a feedback contact 63.
  • the main relay arrangement 43 is normally open, ie when the coils 49, 51 are not energized.
  • the main relay arrangement 43 closes an electrical connection running in series through the first working contacts 53, 55 of the first and second main double contact relays 45, 47 between the power-supplying elevator control 13 and the drive machine 11 only when its two coils 49, 51 are completely closed Safety monitoring chain 41 are energized.
  • the brake 12 is only energized and thus released when a connection between a power source and the brake 12 is closed with the aid of the main relay arrangement 43 as a result of a completely closed safety monitoring chain 41.
  • a so-called UET switch 65 is provided in parallel to the series connection of door switches 25.
  • This UET switch 65 also forms a safety monitoring switch arrangement 23 and may only be closed when the predetermined requirements are met, ie for example when the elevator car 5 has already approached a target floor position within a few centimeters and has already begun is to open the doors 19, 21 before the elevator car 5 has finally stopped at the destination floor position. By closing the UET switch 65, the part of the security monitoring chain 41 formed by the door switches 25 is temporarily bridged.
  • both the KNE switch 28 and the UET switch 65 have so far been implemented in a redundant manner, each with two simple relays.
  • the two simple relays were connected in series, so that a switching state of the UET switch 65 was only closed when both relays were closed at the same time, i.e. both relays were in their closed relay state.
  • Fig. 3 illustrates a safety monitoring device 67 according to the invention, which can be implemented as part of a safety monitoring chain 41 of a passenger conveyor system 1 in order to monitor safety-relevant states in the passenger conveyor system 1.
  • the safety monitoring device 67 can in particular implement the functions of a KNE switch 28 and a UET switch 65.
  • the safety monitoring device 67 comprises a first double contact relay 69 and a second double contact relay 71.
  • Both double contact relays 69, 71 are designed as normally opened relays and each have coils 73, 75 which, when a control voltage is applied to them, first work contacts 77, 79 and second work contacts 81, 83 close.
  • Each of the double contact relays 69, 71 also has a feedback contact 85, 87.
  • the respective coil 73, 75 shifts, ie opens and closes, its first and second working contacts 77, 79, 81, 83 and their feedback contact 85, 87 synchronously with one another and can thus be controlled by the control voltage in an open or closed relay state can be switched.
  • the safety monitoring device 67 further comprises a first and a second controller 89, 91.
  • the two controllers 89, 91 are designed to determine properties of the passenger conveyor system 1 that correlate with a safety-relevant state, and then suitable control voltages for to generate the first or the second double contact relay 69, 71 as a function of the properties determined.
  • the two controllers 89, 91 can communicate with one another or control one another.
  • the controllers 89, 91 can be designed as safety-related programmable logic controllers (SSPS).
  • the two controllers 89, 91 receive information about the current position of the elevator car 5 within the elevator shaft 3 from the absolute position sensor 35 is located or whether it has left it. Depending on which of these two cases applies, the controllers 89, 91 can generate different control voltages for the two double contact relays 69, 71 in order to emulate the function of a KNE switch 28 with the safety monitoring device 67. On the other hand, the controllers 89, 91 can infer from the information whether the elevator car 5 is currently sufficiently close to a destination floor position so that it appears permissible to temporarily bypass the part of the safety monitoring chain 41 formed by the door switches 25 in order to be able to use of the security monitoring device 67 to emulate the function of a UET switch.
  • the safety monitoring device 67 with its double contact relays 69, 71 and their controllers 89, 91, forms safety monitoring switch arrangements 23 in the form of a first and a second safety monitoring switch arrangement 93, 95.
  • the first safety monitoring switch arrangement 93 comprises the first working contact 77 of the first double contact relay 69 and the first working contact 79 of the second double contact relay 71, which are connected to one another in series. With this first safety monitoring switch arrangement 93, the safety monitoring device 67 emulates the function of the UET switch at a first output 97.
  • the second safety monitoring switch arrangement 95 comprises the second normally open contact 81 of the first double contact relay 69 and the second normally open contact 83 of the second double contact relay 71, which are connected in parallel to one another. With this second safety monitoring switch arrangement 95, the safety monitoring device 67 emulates the function of the KNE switch at a second output 99.
  • An actually assumed relay state of each of the double contact relays 69, 71 can be determined by the controllers 89, 91 via the respective feedback contact 85, 87 of the associated double contact relay 69, 71. This makes it possible to monitor whether a relay state activated by a controller 89, 91 in the associated double contact relay 69, 71 has led to the desired relay state being assumed or whether a defect has prevented this.
  • Each of the two feedback contacts 85, 87 can transmit a feedback signal to each of the two controllers 89, 91.
  • the first output 97 is designed to implement the function of the UET switch 65 and the second output 99 is designed to implement the function of the KNE switch 28.
  • the UET switching state emulated by the first safety monitoring switch arrangement 93 is only “closed” when both double contact relays 69, 71 have been activated by the two controllers 89, 91 in their closed relay state ("1") .
  • the KNE switching state emulated by the second safety monitoring switch arrangement 95 is only opened (“open") when both double contact relays 69, 71 have been activated by the two controllers 89, 91 in their open relay state ("0").
  • the function of the UET switch 65 can be controlled via the first safety monitoring switch arrangement 93 with a very high safety integrity level of SIL2 or even required for this Implement SIL3.
  • the function of the KNE switch 28 can be implemented via the second safety monitoring switch arrangement 95 at least with the sufficient safety integrity level of SIL1.
  • the normal operation of the safety monitoring devices 67 during which the safety-relevant states in the passenger conveyor system 1 are monitored, is briefly interrupted at predetermined time intervals, i.e., for example periodically, or triggered by certain events such as the beginning or the end of a journey.
  • each of the two double contact relays 69, 71 is activated at least once for opening and subsequent closing.
  • the first safety monitoring switch arrangement 93 effecting the UET function is briefly opened and closed again, but the second safety monitoring switch arrangement 95 effecting the KNE function always remains closed.
  • the entire safety monitoring chain 41 thus always remains closed during this variation of the control voltages.
  • the control voltages be varied with the aid of, for example, the controllers 89, 91, but also the actual relay status indicated by the feedback contacts 85, 87 of both double contact relays 69, 71.
  • the relay status reported by the feedback contacts 85, 87 should match that of the controllers 89, 91 controlled relay status match. If this no longer applies at a point in time to, a defect in one of the double contact relays 69, 71 can be assumed. This can be brought about, for example, by the fact that arms of one of the working contacts 77, 79, 81, 83 have been glued or welded to one another.
  • both controllers 89, 91 generate control voltages in such a way that both the first and the second double contact relay 69, 71 are switched to their open relay state. It can thus be ensured that at least the extremely safety-critical UET function of the first safety monitoring switch arrangement 93 is reliably switched to its open state, so that a dangerous movement of the elevator car 5 when the doors 19, 21 are open is definitely avoided.

Landscapes

  • Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Structural Engineering (AREA)
  • Escalators And Moving Walkways (AREA)
  • Maintenance And Inspection Apparatuses For Elevators (AREA)

Claims (14)

  1. Dispositif de surveillance de sécurité (67) permettant de surveiller des états relatifs à la sécurité dans une installation de transport de personnes (1), comprenant :
    - un premier et un second relais de contact double (69, 71) qui commutent, en étant respectivement commandés par une tension de commande, un premier contact de travail (77, 79) et un second contact de travail (81, 83) ainsi qu'un contact de rétroaction (85, 87) de manière synchrone entre eux, entre un état de relais ouvert et un état de relais fermé ;
    - un premier et un second contrôleur (89, 91) permettant respectivement de déterminer des propriétés de l'installation de transport de personnes (1) qui sont en corrélation avec un état relatif à la sécurité, et permettant de générer les tensions de commande pour le premier ou pour le second relais de contact double (69, 71) en fonction des propriétés déterminées ;
    caractérisé en ce que,
    au moyen des deux relais de contact double (69, 71) et des deux contrôleurs (89, 91), sont formés un premier agencement de commutateur de surveillance de sécurité (93) permettant de surveiller un premier état relatif à la sécurité et permettant la commutation correspondante d'un premier état de commutation dans une chaîne de surveillance de sécurité (41) de l'installation de transport de personnes (1) et un deuxième agencement de commutateur de surveillance de sécurité (95) permettant de surveiller un deuxième état relatif à la sécurité et permettant la commutation correspondante d'un second état de commutation dans la chaîne de surveillance de sécurité (41) de l'installation de transport de personnes (1) ;
    le premier agencement de commutateur de surveillance de sécurité (93) comprenant le premier contact de travail (77) du premier relais de contact double (69) et, monté en série avec celui-ci, le premier contact de travail (79) du second relais de contact double (71) ; et le deuxième agencement de commutateur de surveillance de sécurité (95) comprenant le second contact de travail (81) du premier relais de contact double (69) et, monté en parallèle avec celui-ci, le second contact de travail (83) du second relais de contact double (71).
  2. Dispositif de surveillance de sécurité selon la revendication 1, dans lequel la surveillance du premier état relatif à la sécurité nécessite un niveau d'intégrité de sécurité plus élevé que celui de la surveillance du deuxième état relatif à la sécurité.
  3. Dispositif de surveillance de sécurité selon l'une des revendications précédentes, dans lequel la surveillance du deuxième état relatif à la sécurité nécessite un niveau d'intégrité de sécurité SIL1 et la surveillance du premier état relatif à la sécurité nécessite au moins un niveau d'intégrité de sécurité SIL2.
  4. Dispositif de surveillance de sécurité selon l'une des revendications précédentes, dans lequel le premier état relatif à la sécurité indique si des parties de la chaîne de surveillance de sécurité (41), lesquelles surveillent des états fermés de portes (19, 21) de l'installation de transport de personnes (1), peuvent être temporairement court-circuitées, et dans lequel les parties de la chaîne de surveillance de sécurité (41) qui surveillent des états fermés de portes (19, 21) de l'installation de transport de personnes (1) sont temporairement court-circuitées par commutation de fermeture du premier état de commutation.
  5. Dispositif de surveillance de sécurité selon l'une des revendications précédentes, dans lequel le deuxième état relatif à la sécurité indique si une cabine d'ascenseur (5) a été déplacée au-delà d'une plage de déplacement admissible (37), et dans lequel la chaîne de surveillance de sécurité (41) est interrompue par commutation d'ouverture du second état de commutation.
  6. Dispositif de surveillance de sécurité selon l'une des revendications précédentes, présentant en outre une pluralité de troisièmes agencements de commutateur de surveillance de sécurité (23) montés en série et permettant de surveiller des troisièmes états relatifs à la sécurité.
  7. Dispositif de surveillance de sécurité selon la revendication 6, dans lequel le premier agencement de commutateur de surveillance de sécurité (93) est monté en parallèle avec la série de troisièmes agencements de commutateur de surveillance de sécurité (23), et dans lequel le deuxième agencement de commutateur de surveillance de sécurité (95) est monté en série avec la série de troisièmes agencements de commutateur de surveillance de sécurité (23).
  8. Dispositif de surveillance de sécurité selon l'une des revendications précédentes, dans lequel le premier et le second contrôleur (89, 91) sont respectivement configurés comme un automate à mémoire programmable se rapportant à la sécurité.
  9. Dispositif de surveillance de sécurité selon l'une des revendications précédentes, dans lequel le dispositif de surveillance de sécurité (67) est agencé pour exécuter ou commander un procédé selon l'une des revendications 11 à 14.
  10. Installation de transport de personnes (1) comportant un dispositif de surveillance de sécurité (67) selon l'une des revendications 1 à 9.
  11. Procédé permettant de surveiller le fonctionnement d'un dispositif de surveillance de sécurité (67) selon l'une des revendications 1 à 9, le procédé présentant :
    la variation des tensions de commande générées par le premier et le second contrôleur (89, 91) de telle sorte qu'alternativement, le premier ou le second relais de contact double (69, 71) est brièvement commuté dans son état de relais ouvert et de nouveau dans son état de relais fermé, et que le premier et/ou le second relais de contact double (69, 71) est toujours dans son état de relais fermé, et
    la surveillance du fait de savoir si les contacts de rétroaction (85, 87) des deux relais de contact double (69, 71) indiquent toujours un état de relais indiquant l'état de relais actuellement commandé.
  12. Procédé selon la revendication 11, dans lequel, dans le cas où les contacts de rétroaction (85, 87) des deux relais de contact double (69, 71) n'indiquent pas un état de relais indiquant l'état de relais actuellement commandé, les deux contrôleurs (89, 91) génèrent des tensions de commande de telle sorte que le premier ainsi que le second relais de contact double (69, 71) sont commutés dans leur état de relais ouvert.
  13. Procédé selon l'une des revendications précédentes 11 à 12, dans lequel chacun des deux contrôleurs (89, 91) surveille les contacts de rétroaction (85, 87) de chacun des deux relais de contact double (69, 71).
  14. Procédé selon l'une des revendications précédentes 11 à 13, le procédé étant réalisé avant, pendant ou après chaque trajet de l'installation de transport de personnes (1).
EP18779406.0A 2017-10-31 2018-10-05 Dispositif de surveillance de sécurité destiné à surveiller des conditions relatives à la sécurité dans une installation de transport de personnes ainsi que procédé de fonctionnement d'un tel dispositif Active EP3704048B1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP17199318 2017-10-31
PCT/EP2018/077190 WO2019086205A1 (fr) 2017-10-31 2018-10-05 Dispositif de surveillance de sécurité destiné à surveiller des états relatifs à la sécurité dans une installation de transport de personnes ainsi que procédé destiné à faire fonctionner ce dernier

Publications (2)

Publication Number Publication Date
EP3704048A1 EP3704048A1 (fr) 2020-09-09
EP3704048B1 true EP3704048B1 (fr) 2021-12-01

Family

ID=60201420

Family Applications (1)

Application Number Title Priority Date Filing Date
EP18779406.0A Active EP3704048B1 (fr) 2017-10-31 2018-10-05 Dispositif de surveillance de sécurité destiné à surveiller des conditions relatives à la sécurité dans une installation de transport de personnes ainsi que procédé de fonctionnement d'un tel dispositif

Country Status (4)

Country Link
US (1) US11618648B2 (fr)
EP (1) EP3704048B1 (fr)
CN (1) CN111295350B (fr)
WO (1) WO2019086205A1 (fr)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2021197811A1 (fr) * 2020-03-31 2021-10-07 Inventio Ag Dispositif de surveillance de sécurité, et procédé de surveillance de sécurité d'un système d'ascenseur
US20220242692A1 (en) * 2021-02-01 2022-08-04 Otis Elevator Company Elevator switch monitoring device

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
ES2050185T3 (es) 1988-08-23 1994-05-16 Inventio Ag Procedimiento y dispositivo para la creacion de una informacion de caja de ascensores.
ES2077759T3 (es) * 1990-10-31 1995-12-01 Inventio Ag Barrera de luz de horquilla de doble canal con una construccion "failsafe".
DE19849238C1 (de) 1998-10-26 2000-03-09 O & K Rolltreppen Gmbh Verfahren zur Abschaltung von Personenförderanlagen sowie Sicherheitskreis für Personenförderanlagen
US6173814B1 (en) 1999-03-04 2001-01-16 Otis Elevator Company Electronic safety system for elevators having a dual redundant safety bus
SG85215A1 (en) 1999-10-08 2001-12-19 Inventio Ag Safety circuit for an elevator installation
FI125141B (fi) * 2007-01-03 2015-06-15 Kone Corp Hissin turvalaite
EP2367746B1 (fr) * 2008-12-23 2013-05-08 Inventio AG Installation d'ascenseur
CA2775635C (fr) * 2009-10-26 2017-09-12 Inventio Ag Circuit de securite dans un systeme d'ascenseur
JP2011195205A (ja) 2010-03-17 2011-10-06 Toshiba Elevator Co Ltd エレベータの安全回路
TWI622548B (zh) * 2012-12-13 2018-05-01 伊文修股份有限公司 用於人員輸送設備的監視裝置、人員輸送設備、以及用於監視人員輸送設備之方法
EP2956366B1 (fr) * 2013-02-12 2017-03-29 Inventio AG Surveillance de circuit de sécurité avec tension alternative
EP2886501A1 (fr) * 2013-12-18 2015-06-24 Inventio AG Ascenseur doté d'un système de positionnement absolu pour une cabine à double étage
CN105829232B (zh) * 2013-12-18 2017-12-08 因温特奥股份公司 用于电梯设备的安全系统
CN107428498B (zh) * 2015-04-01 2022-01-14 通力股份公司 制动控制设备和控制电梯制动器的方法
CN107848743B (zh) 2015-07-15 2019-07-09 奥的斯电梯公司 电梯控制系统
CN105384018A (zh) * 2015-11-25 2016-03-09 苏州汾湖电梯科技有限公司 一种家用电梯门双触点检测系统

Also Published As

Publication number Publication date
CN111295350B (zh) 2021-10-08
CN111295350A (zh) 2020-06-16
EP3704048A1 (fr) 2020-09-09
US11618648B2 (en) 2023-04-04
US20200346893A1 (en) 2020-11-05
WO2019086205A1 (fr) 2019-05-09

Similar Documents

Publication Publication Date Title
EP1423326B1 (fr) Reaction, en fonction de la situation, en cas de derangement au niveau d'une porte d'un systeme d'ascenseur
DE69018448T2 (de) Eine getrennte Aufzugstürkette.
DE3614979C2 (de) Sicherheitssystem für eine Druckmaschine
EP3233694B1 (fr) Dispositif de commutation de sécurité pour une installation d'ascenseur
EP2493802B1 (fr) Circuit de sécurité dans une installation d'ascenseur
EP0875810B1 (fr) Méthode et dispositif de surveillance d'une installation comprenant plusieurs unités fonctionnelles
EP2845072B1 (fr) Appareil de commutation
EP2956396B1 (fr) Installation de surveillance de circuit de sécurité fonctionnant sur batterie
EP3793925B1 (fr) Système de commande d'inspection d'une installation d'ascenseur ainsi que procédé de commutation d'une installation d'ascenseur entre un fonctionnement normal et un fonctionnement d'inspection
WO2005101440A1 (fr) Dispositif de commutation de securite pour circuit de securite
WO2005101439A1 (fr) Appareil de signalisation pour circuit de protection
DE102011002481A1 (de) Steuerungssystem
DE102005014804A1 (de) Bordnetzsystem für ein Kraftfahrzeug sowie Steuergerät und intelligentes Energieversorgungsgerät für ein Bordnetzsystem eines Kraftfahrzeugs
EP2160349B1 (fr) Agencement, module et procédé pour le fonctionnement sûr d'une installation
EP3704048B1 (fr) Dispositif de surveillance de sécurité destiné à surveiller des conditions relatives à la sécurité dans une installation de transport de personnes ainsi que procédé de fonctionnement d'un tel dispositif
EP3814267A1 (fr) Système de commutation de sécurité et procédé destiné à la commutation d'une installation d'ascenseur entre un mode de fonctionnement normal et un mode de fonctionnement d'inspection
EP2587512B1 (fr) Commutateur orienté vers la sécurité
EP3191357B1 (fr) Convoyeur avec fonction de sécurité
DE102016214419A1 (de) Sanftstarter, Betriebsverfahren und Schaltsystem
DE102004050647A1 (de) Überwachungsverfahren für eine Antriebseinrichtung auf Stillstand, hiermit korrespondierende Überwachungseinrichtung und hiermit korrespondierendes Antriebssystem
EP3798176B1 (fr) Procédé et dispositif de surveillance d'un frein électromagnétique
EP3112966B1 (fr) Commutateur de securite pour une installation electrique, en particulier pour une chaine de securite d'une installation d'ascenseur
DE102012012047A1 (de) Antriebsregler und Verfahren zur Stillsetzung einer Achse
WO2021197811A1 (fr) Dispositif de surveillance de sécurité, et procédé de surveillance de sécurité d'un système d'ascenseur
EP1323661A1 (fr) Procédé pour stopper un dispositif de transport pour personnes

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20200312

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20210719

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1451596

Country of ref document: AT

Kind code of ref document: T

Effective date: 20211215

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 502018008051

Country of ref document: DE

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG9D

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20211201

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220301

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220301

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220302

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220401

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 502018008051

Country of ref document: DE

RAP4 Party data changed (patent owner data changed or rights of a patent transferred)

Owner name: INVENTIO AG

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20220401

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

26N No opposition filed

Effective date: 20220902

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: IT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

REG Reference to a national code

Ref country code: BE

Ref legal event code: MM

Effective date: 20221031

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20221005

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20221031

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20221031

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20221031

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20221005

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20231024

Year of fee payment: 6

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: FR

Payment date: 20231026

Year of fee payment: 6

Ref country code: DE

Payment date: 20231027

Year of fee payment: 6

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20211201

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20181005