EP3901077A1 - Elevator safety system, elevator, and method for performing a safety shutdown of an elevator - Google Patents
Elevator safety system, elevator, and method for performing a safety shutdown of an elevator Download PDFInfo
- Publication number
- EP3901077A1 EP3901077A1 EP20170826.0A EP20170826A EP3901077A1 EP 3901077 A1 EP3901077 A1 EP 3901077A1 EP 20170826 A EP20170826 A EP 20170826A EP 3901077 A1 EP3901077 A1 EP 3901077A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- elevator
- safety
- relay
- contactor
- brake
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B1/00—Control systems of elevators in general
- B66B1/24—Control systems with regulation, i.e. with retroactive action, for influencing travelling speed, acceleration, or deceleration
- B66B1/28—Control systems with regulation, i.e. with retroactive action, for influencing travelling speed, acceleration, or deceleration electrical
- B66B1/32—Control systems with regulation, i.e. with retroactive action, for influencing travelling speed, acceleration, or deceleration electrical effective on braking devices, e.g. acting on electrically controlled brakes
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B1/00—Control systems of elevators in general
- B66B1/24—Control systems with regulation, i.e. with retroactive action, for influencing travelling speed, acceleration, or deceleration
- B66B1/28—Control systems with regulation, i.e. with retroactive action, for influencing travelling speed, acceleration, or deceleration electrical
- B66B1/30—Control systems with regulation, i.e. with retroactive action, for influencing travelling speed, acceleration, or deceleration electrical effective on driving gear, e.g. acting on power electronics, on inverter or rectifier controlled motor
Definitions
- the present invention relates in general to elevators.
- the present invention concerns elevator safety systems for performing a safety shutdown of the elevator.
- Elevators are equipped with electrical drives. Elevator service is provided, that is, the normal operation of the elevator is conducted by driving elevator car between different landings of the building, for instance, by utilizing the electrical drive.
- Typical electrical drives comprise a frequency converter and hoisting machinery of the elevator. With the frequency converter, electrical power is supplied to elevator motor of the hoisting machinery to generate driving torque.
- the hoisting machinery includes two hoisting machinery brakes.
- the brakes will be engaged against a traction sheave or a rotating axis of the elevator hoisting machinery to stop, keep in place, and decelerate the elevator car.
- a safety shutdown is performed responsive to determining an emergency situation.
- An objective of the present invention is to provide an elevator safety system for an elevator, an elevator, and a method for performing a safety shutdown of an elevator. Another objective of the present invention is that the elevator safety system, the elevator, and the method provide a reliable and simple solution for performing the safety shutdown.
- an elevator safety system comprises an elevator safety chain comprising safety contacts and a safety output, wherein a status of the safety output is arranged to depend on statuses of the safety contacts.
- the elevator safety chain is configured to perform, or at least to initiate, a safety shutdown depending on the status of the safety output.
- the elevator safety system further comprises a converter unit connected to and configured to operate an elevator motor for providing hoisting function of the elevator, wherein the converter unit comprises a safety input, such as for performing a Safe Torque Off (STO) function, and wherein the converter unit is configured to prevent generation of torque in the elevator motor based on operation of the safety input.
- the converter unit may be a frequency converter, for instance.
- the elevator safety system comprises a brake contactor or relay configured to selectively supply or interrupt electrical power to at least one hoisting machinery brake by closing or opening at least one primary contact of the brake contactor or relay.
- the brake contactor or relay comprises an auxiliary contact or contacts configured to operate together with, or in tandem with or along with, or in response to operation of, the at least one primary contact, wherein the brake contactor or relay is in connection with the safety output and configured to operate based on the status of the safety output. Furthermore, the auxiliary contact or contacts of the brake contactor or relay is configured to control the operation of the safety input of the converter unit so that the generation of driving torque is prevented during the safety shutdown.
- the safety input refers herein to means or arrangement for preventing generation of torque in the electrical motor so that the movement of the rotor is at least not continued to be supported. This may be performed by preventing the power semiconductor switches of the converter unit responsible for the torque control, such as switches of the output power stage of the frequency converter or of the inverter, to operate.
- the converter unit may be configured to prevent the generation of driving torque by blocking control pulses from at least some of the power switches of an output power stage of the converter unit.
- the elevator may comprise an input contactor or relay configured to selectively supply or interrupt electrical power to the converter unit by at least one main contact of the input contactor or relay.
- the input contactor or relay may comprise at least one auxiliary contact configured to supply or interrupt electrical power to at least one hoisting machinery brake together with, or in response to the operation of, the at least one main contact.
- the input contactor or relay may be controlled by the converter unit independently of the status of the safety output.
- the input contactor or relay may be arranged to be closed during an idle time between elevator starts when the measured or forecasted idle time is below a given time threshold, and the input contactor or relay may be arranged to be opened when the measured or forecasted idle time meets or exceeds the given time threshold.
- the safety output of the elevator safety chain may be connected to a control coil of the brake contactor or relay.
- the control coil may operate the brake contactor or relay in response to the change of status of the safety output or, in general, based on said status.
- the brake contactor or relay may comprise normally open (NO) contact(s) as the primary contact(s).
- the normally open contact(s) may be arranged to open when the voltage supply to the control coil of the brake contactor or relay is interrupted.
- electrical power may be supplied to the at least one hoisting machinery brake through the normally open contacts).
- the auxiliary contact(s) of the brake contactor or relay may comprise the auxiliary contacts integrated to the brake contactor or relay, thereby operating together with or in response to the operation or synchronized with the primary contact(s).
- a further contactor or relay may be arranged to connect input phases of the elevator motor to each other.
- the further contactor may substantially provide a short-circuit condition between the input phases.
- the further contactor may, preferably, be in connection with the safety output and is configured to operate depending on the status of the safety output.
- an elevator comprises an elevator car arranged to be moved in an elevator shaft of the elevator, an elevator motor arranged to provide hoisting function of the elevator, at least one hoisting machinery brake configured for resisting the movement of the motor, and a converter unit connected to and configured to control the operation of the motor. Furthermore, the elevator comprises the elevator safety system in accordance with the first aspect.
- a method for performing a safety shutdown of an elevator comprises an elevator car arranged to be moved in an elevator shaft of the elevator, an elevator motor arranged to provide hoisting function of the elevator, at least one hoisting machinery brake, a converter unit connected to and configured to control the operation of the motor, and comprising a safety input, such as for performing a Safe Torque Off function. Furthermore, the converter unit is configured to prevent generation of torque in the elevator motor based on operation of the safety input.
- the elevator further comprises an elevator safety chain comprising safety contacts and a safety output, wherein a status of the safety output is arranged to depend on statuses of the safety contacts.
- the elevator safety chain is configured to perform a safety shutdown depending on the status of the safety output.
- the elevator further comprises a brake contactor or relay configured to selectively supply or interrupt electrical power to the at least one hoisting machinery brake by closing or opening at least one primary contact of the brake contactor or relay, wherein the brake contactor or relay comprises at least one auxiliary contact configured to operate together with, or along with or in response to operation of, the at least one primary contact, and wherein the brake contactor or relay is in connection with the safety output and configured to operate based on the status of the safety output.
- the method comprises monitoring the status of the safety output, initiating the safety shutdown based on the status of the safety output, interrupting supply of electrical power to the at least one hoisting machinery brake by opening the at least one primary contact of the brake contactor or relay, and operating the safety input of the converter unit by the auxiliary contact(s) to prevent the generation of driving torque in the elevator motor, wherein the auxiliary contact(s) of the brake contactor or relay is/are configured to control the operation of the safety input of the converter unit.
- the present invention provides an elevator safety system for an elevator, an elevator, and a method for performing a safety shutdown of an elevator.
- the present invention provides advantages over known solutions in that the brake contactor or relay is substantially the only mechanical switch, or set of switches, needed for the safety shutdown function of the elevator. This means that a reliable and simply solution for elevator safety shutdown is provided. As brake current is normally also much smaller than motor current of an elevator hoisting machinery, only a very small contactor or relay is needed for elevator safety shutdown.
- FIG. 1 illustrates schematically an elevator 100 according to an embodiment of the present invention.
- the elevator 100 may comprise an elevator car 10 arranged to be moved in an elevator shaft 12.
- the moving of the elevator car 10 may be implemented, preferably, by a hoisting rope or belt 13 in connection with a traction sheave 14 or the like.
- the elevator 100 comprises an elevator motor 20 arranged to operate, such as rotate by the rotor thereof, the traction sheave 14 for moving the elevator car 10, if not essentially directly coupled to the hoisting rope 13.
- the traction sheave 14 may be connected, via a mechanical connection 22, directly or indirectly via a gear to a shaft of the motor 20.
- the elevator 100 may comprise a machine room or be machine roomless, such as have the motor 20 in the elevator shaft 12.
- the elevator 100 may preferably comprise at least one, or at least two, hoisting machinery brake(s) 16 configured for resisting or, preferably, preventing the movement of the motor 20, that is the rotor thereof, directly or via the traction sheave 14 or components thereof and/or therebetween. Furthermore, the elevator 100 may comprise a brake controller 25 configured to operate at least one of the at least one hoisting machinery brake 16. The brake controller 25 may further be in connection with other elements of the elevator 100, such as an elevator control unit and/or a safety control system 1000. The brake controller 25 may comprise an actuator (not shown) for operating the brake 16 or at least be in connection with such an actuating device.
- the elevator 100 may additionally comprise a guide rail 17 or rails 17 arranged into the elevator shaft 12 for guiding the movement of the elevator car 10.
- the elevator 100 of Fig. 1 further comprises a converter unit 30.
- the converter unit 30 may comprise, or substantially be, an inverter or a frequency converter, for connecting to, and controlling the operation of, the motor 20, and a controller in connection with the converter unit 30, wherein the controller is configured to operate the converter unit 30 to provide electrical power (signals), such as having variable voltage and variable frequency, to the windings of the motor 20.
- the controller may be a separate controller device or be comprised in the converter unit 30, for instance.
- the converter unit 30 may be arranged to be fed by an electrical power source 150, such as of the elevator 100, for example from an external electrical power grid or mains power supply, or another power source, for example, a battery system. Additionally, the electrical power source 150 may intake electrical power from the converter unit 50.
- an electrical power source 150 such as of the elevator 100, for example from an external electrical power grid or mains power supply, or another power source, for example, a battery system. Additionally, the electrical power source 150 may intake electrical power from the converter unit 50.
- the elevator 100 preferably comprises landings 19 or landing floors 19 and, for example, landing floor doors and/or openings, between which the elevator car 10 is arranged to be moved during the normal operation of the elevator 100, such as to move persons and/or items between said floors 19.
- the elevator 100 may comprise the safety control system 1000 for performing safety functions of the elevator 100.
- the safety control system 1000 may, for example, comprise at least part of a safety chain of the elevator 1000.
- the elevator safety chain may comprise plurality safety contacts, such as landing door safety contacts, car door safety contacts, overspeed governor safety contact, pit buffer safety contacts, etc. They may be connected in series and/or in parallel.
- the statuses of the safety contacts are configured to be monitored.
- the safety chain has, such as in a safety logic unit thereof, at least one safety output which provides a safety signal following the combined status of the safety contacts.
- Safety signal may be, for example, a digital one-bit signal or an output of a safety relay. In an embodiment, the status of the safety output changes from "1" to "0" when one or several of the safety contacts open(s).
- the elevator 100 preferably comprises an elevator safety system 50, preferably at least in connection with the safety control system 1000.
- FIG. 2 illustrates schematically an elevator safety system 50 according to an embodiment of the present invention.
- the elevator safety system 50 may comprise an elevator safety chain comprising safety contacts and a safety output 1001, wherein a status of the safety output 1001 is, preferably, arranged to depend on statuses, such as on a combination thereof, of the safety contacts as is known to a skilled person in the art of elevators.
- the elevator safety chain may be configured to perform or at least initiate a safety shutdown depending on the status of the safety output 1001.
- the statuses of the safety contacts may be received, and preferably monitored, by a safety chain logic unit 1100.
- the safety chain logic unit 1100 may then determine the status of the safety output 1001 based on the combined status of the safety contacts.
- the information about the status of the safety output 1001 may then be provided to an elevator control unit and/or safety control system 1000, and/or utilized directly in determining the operating condition, such as an emergency condition, of the elevator 100.
- the safety chain as well as monitoring thereof, and the logic of determining of the status of the safety output 1001 may be implemented in various ways as is known to a skilled person, such as including utilization of analog electrical circuits and switches, and/or digital devices and communication channels, computing units, such as microprocessors, microcontrollers, distributed processing elements, and/or different kinds of sensors, etc.
- the elevator safety system 50 may further comprise the converter unit 30 connected to and configured to operate an elevator motor 20 for providing hoisting function of the elevator 100, such as moving the elevator car 10 in the elevator shaft 12.
- the converter unit 30 may comprise a safety input 31, such as for performing a Safe Torque Off (STO) function.
- the converter unit 30 may be configured to prevent generation of torque in the elevator motor 20 based on operation of the safety input 31, such as when the status of the safety input 31 changes from inactive state to an active state.
- STO Safe Torque Off
- the STO is an electronic signal used in motor controllers for safety reasons.
- the STO once in operation, ensures that no torque-generating energy can continue to act upon the motor.
- the STO can be used where power removal is required to prevent an unexpected start.
- the function disables the signals that control the power semiconductors, that is switching thereof, of the output power stage of the converter unit, thus preventing the frequency converter or the inverter from generating the voltage and/or required to rotate, or at least support the rotation of, of the rotor of the motor.
- control pulses may be blocked from power switches, such as transistors, of the output power stage. In accordance with various embodiments of the present invention, this means that power supply from frequency converter to the elevator motor is interrupted in a safe way, however, not requiring separation of the elevator motor from the mains power supply.
- the elevator safety system 50 may also comprise a brake contactor or relay 40, such as comprising one or contacts C2, C3, configured to selectively supply or interrupt electrical power to at least one hoisting machinery brake 16, or at least to or via the brake controller 25 thereof, by closing or opening at least one primary contact C2, C3 of the brake contactor or relay 40.
- the one hoisting machinery brake 16 preferably comprises an actuating device 16B.
- the brake contactor or relay 40 may comprise, as shown at 42, at least one auxiliary contact C2_AUX, C3_AUX, such as normally open (NO) contacts, configured to operate together with, in tandem with, or in response to operation of the at least one primary contact C2, C3.
- the brake contactor or relay 40 may preferably be in connection with the safety output 1001 and configured to operate based on the status of the safety output 1001. Still further, the auxiliary contacts C2_AUX, C3_AUX of the brake contactor or relay 40 may be configured to control the operation of the safety input 31 of the converter unit 30 so that the generation of torque is prevented during the safety shutdown.
- at least the primary contact or contacts C2 and C3 may be NO type of contacts, thereby closing only if control signal, such as in a suitable form and having sufficient amount of electrical power, is applied to the control device, such as the control coil, of the brake contactor or relay 40.
- the auxiliary contacts may also be NO type of contacts.
- the auxiliary contact(s) may be arranged integrated, optionally removable, to the brake contactor or relay 40.
- the auxiliary contacts may be arranged to close based on the control signal to the control coil of the brake contactor or relay 40.
- the electrical power source 150 is shown to be directly connected to the converter unit 30, it is to be noted that there may be one or several devices arranged therebetween, such as input filter(s), circuit breaker(s), and/or contactor(s) or relay(s), and/or a device for charging the energy storage element(s) of the converter unit 30.
- FIG. 3 illustrates schematically a converter unit 30 according to an embodiment of the present invention.
- the converter unit 30 may be a frequency converter or an inverter.
- the controllable switches, such as power semiconductor switches, of the output power stage 38 of the converter unit 30 are shown.
- the switches may be controlled by the controller 32, such as having drivers for the switches and a modulation unit, for instance, among other components, such as processing units and memory devices.
- the converter unit 30 may comprise, preferably being integrated into the converter unit 30, the safety input 31.
- the safety input 31 may also comprise a circuitry for monitoring the status of the safety input 31.
- the safety input 31 may be in connection with the controller 32 for preventing the generation of torque in the elevator motor 20 based on operation of the safety input 31, or the operation of the safety input 31 may be utilized in more direct manner to block the control signal to the switches.
- the safety input 31 may comprise one or several inputs.
- the converter unit 30 may also comprise an input power stage 36, such as a rectifier.
- the output power stage 38 may comprise, such as also shown in Fig. 3 , high-side switches connected to the first potential of the intermediate circuit, such as to the positive potential of the direct current (DC) link, and low-side switches connected to the second potential of the intermediate circuit, such as to the negative potential of the DC link.
- the prevention of driving torque may be performed by blocking only the control pulses of the high-side switches or, alternatively, the low-side switches. Naturally, it is possible to block control pulses of all of the switches.
- the operation and structure of the converter unit 30, such as with respect to number of phases, phase legs, levels, and/or number and types of switches, control units, methods of control, filters in connection thereto, topology of the converter/rectifier/inverter, etc., may substantially be of any suitable type known for the skilled person.
- FIG 4 illustrates schematically an elevator safety system 50 according to an embodiment of the present invention.
- the elevator safety system 50 may comprise an elevator safety chain comprising safety contacts and a safety output 1001, wherein a status of the safety output 1001 is, preferably, arranged to depend on statuses, such as on a combination thereof, of the safety contacts as is known to a skilled person in the art of elevators.
- the elevator safety chain may be configured to perform or at least initiate a safety shutdown depending on the status of the safety output 1001.
- the statuses of the safety contacts may be received, and preferably monitored, by a safety chain logic unit 1100.
- the safety chain logic unit 1100 may then determine the status of the safety output 1001 based on the combined status of the safety contacts.
- the information about the status of the safety output 1001 may then be provided to an elevator control unit and/or safety control system 1000, and/or utilized directly in determining the operating condition, such as an emergency condition, of the elevator 100.
- the elevator safety system 50 may further comprise the converter unit 30 connected to and configured to operate an elevator motor 20 for providing hoisting function of the elevator 100, such as moving the elevator car 10 in the elevator shaft 12.
- the converter unit 30 may comprise a safety input 31, such as for performing a Safe Torque Off (STO) function.
- the converter unit 30 may be configured to prevent generation of torque in the elevator motor 20 based on operation of the safety input 31, such as when the status of the safety input 31 changes from inactive state to an active state.
- STO Safe Torque Off
- the elevator safety system 50 may also comprise a brake contactor or relay 40, such as comprising one or contacts C2, C3, configured to selectively supply or interrupt electrical power to at least one hoisting machinery brake 16, or at least to or via the brake controller 25 thereof, by closing or opening at least one primary contact C2, C3 of the brake contactor or relay 40.
- the one hoisting machinery brake 16 preferably comprises an actuating device 16B.
- the brake contactor or relay 40 may comprise, as shown at 42, auxiliary contacts C2_AUX, C3_AUX, such as normally open (NO) contacts, configured to operate together with or in response to operation of the at least one primary contact C2, C3.
- the brake contactor or relay 40 may preferably be in connection with the safety output 1001 and configured to operate based on the status of the safety output 1001. Still further, the auxiliary contact(s) C2_AUX, C3_AUX of the brake contactor or relay 40 may be configured to control the operation of the safety input 31 of the converter unit 30 so that the generation of torque is prevented during the safety shutdown.
- at least the primary contact or contacts C2 and C3 may be NO type of contacts, thereby closing only if control signal, such as in a suitable form and having sufficient amount of electrical power, is applied to the control device, such as the control coil, of the brake contactor or relay 40.
- the auxiliary contact(s) may also be NO type of contacts.
- the auxiliary contact(s) may be arranged integrated, optionally removable, to the brake contactor or relay 40.
- the auxiliary contacts may be arranged to close based on the control signal to the control coil of the brake contactor or relay 40.
- the electrical power source 150 is shown to be directly connected to the converter unit 30, it is to be noted that there may be one or several devices arranged therebetween, such as input filter(s), circuit breaker(s), and/or contactors) or relay(s), and/or a device for charging the energy storage element(s) of the converter unit 30.
- the elevator safety system 50 may comprise an input contactor or relay 44 configured to selectively supply or interrupt electrical power to the converter unit 30 by at least one main contact C1 of the input contactor or relay 44.
- the input contactor or relay 44 may, optionally, comprise at least one auxiliary contact C1_AUX, such as integrated thereto, configured to supply or interrupt electrical power to at least one hoisting machinery brake 16, or at least to or via the brake controller 25, together with or in response to the operation of the at least one main contact C1.
- the input contactor or relay 44 may be configured to be opened.
- the input contactor or relay 44 may be opened.
- the input contactor or relay 44 may be opened provided that a longer than usual idle time is measured or expected (such as forecasted) to save energy (for example, when low traffic conditions are being detected).
- a longer than usual idle time is measured or expected (such as forecasted) to save energy (for example, when low traffic conditions are being detected).
- electrical power is required to drive the motor 20, it may be kept closed.
- the input contactor or relay 44 may be controlled by the converter unit 30 independently of the status of the safety output 1001.
- the input contactor or relay may be provided between the electrical power supply 150, such as mains power supply, and the motor 20 but this contactor is not needed for the safety shutdown. Therefore, it does not have to be controlled by the safety output 1001 but may instead be controlled by any microcontroller or corresponding associated with normal elevator operations. Consequently, opening frequency of the input contactor or relay 44 may be lowered which will improve elevator noise characteristics and lifetime of the input contactor or relay 44.
- the input contactor or relay 44 may be arranged to be closed and the safety input 31 may be operated to prevent supply of electrical power from the converter unit 30 to the elevator motor 20 or at least to prevent the generation of torque in the elevator motor 20.
- the elevator safety system 50 may comprise a further contactor 48 arranged to connect input phases of the elevator motor 20 to each other, thereby providing a short-circuit condition thereto or at least a low resistance path for the current in the circuit thereof, thereby providing dynamic braking of the motor 20.
- the further contactor 48 may optionally be in connection with the safety output 1001 and may be configured to operate depending on the status of the safety output 1001.
- Step 500 refers to a start-up phase of the method. Suitable equipment and components are obtained and systems assembled and configured for operation.
- Step 510 refers to monitoring the status of the safety output 1001. This may be performed by the safety control unit 1000, for instance.
- Step 520 refers to determining and initiating the safety shutdown based on the status of the safety output 1001.
- Step 530 refers to interrupting supply of electrical power to the at least one hoisting machinery brake 16 by opening the at least one primary contact C2, C3 of the brake contactor or relay 40.
- Step 540 refers to operating the safety input 31 of the converter unit 30 by the at least one auxiliary contact C2_AUX, C3_AUX, to prevent the generation of driving torque in the elevator motor 20, wherein the auxiliary contact(s) C2_AUX, C3_AUX of the brake contactor or relay 40 may be configured to control the operation of the safety input 31 of the converter unit 30.
- Method execution may be stopped at step 599.
- the safety shutdown has been performed and the hoisting machine brake 16 is controlled to be resisting the movement of the rotor of the elevator motor 20 and/or the traction sheave 14.
- the input contactor or relay 44 regardless of the safety shutdown, may be configured to supply electrical power to the converter unit 30.
- the input contactor or relay 44 may be configured to be controlled by the converter unit 30.
Landscapes
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Elevator Control (AREA)
Abstract
An elevator safety system (50) comprising an elevator safety chain comprising safety contacts and a safety output (1001), a converter unit (30) connected to and configured to operate an elevator motor (20), wherein the converter unit (30) comprises a safety input (31) to prevent generation of torque in the motor (20). The safety system (50) also comprises a brake contactor or relay (40) comprising at least one auxiliary contact (C2_AUX, C3_AUX) configured to operate together with a primary contact (C2, C3) of the brake contactor or relay (40) which is in connection with the safety output (1001) and configured to operate based on the status thereof. Furthermore, the auxiliary contact (C2 AUX, C3_AUX) of the brake contactor or relay (40) is configured to control the operation of the safety input (31) of the converter unit (30) so that the generation of torque is prevented during a safety shutdown.
Description
- The present invention relates in general to elevators. In particular, however not exclusively, the present invention concerns elevator safety systems for performing a safety shutdown of the elevator.
- Elevators are equipped with electrical drives. Elevator service is provided, that is, the normal operation of the elevator is conducted by driving elevator car between different landings of the building, for instance, by utilizing the electrical drive.
- Typical electrical drives comprise a frequency converter and hoisting machinery of the elevator. With the frequency converter, electrical power is supplied to elevator motor of the hoisting machinery to generate driving torque.
- Normally, the hoisting machinery includes two hoisting machinery brakes. During standstill and in emergency situations, the brakes will be engaged against a traction sheave or a rotating axis of the elevator hoisting machinery to stop, keep in place, and decelerate the elevator car. A safety shutdown is performed responsive to determining an emergency situation.
- In known solutions, the safety shutdown has been carried out by separating both the elevator motor and the hoisting machinery brakes from mains power supply by means of safety contactors.
- An objective of the present invention is to provide an elevator safety system for an elevator, an elevator, and a method for performing a safety shutdown of an elevator. Another objective of the present invention is that the elevator safety system, the elevator, and the method provide a reliable and simple solution for performing the safety shutdown.
- The objectives of the invention are reached by an elevator safety system, an elevator, and a method as defined by the respective independent claims. According to a first aspect, an elevator safety system is provided. The elevator safety system comprises an elevator safety chain comprising safety contacts and a safety output, wherein a status of the safety output is arranged to depend on statuses of the safety contacts. The elevator safety chain is configured to perform, or at least to initiate, a safety shutdown depending on the status of the safety output. The elevator safety system further comprises a converter unit connected to and configured to operate an elevator motor for providing hoisting function of the elevator, wherein the converter unit comprises a safety input, such as for performing a Safe Torque Off (STO) function, and wherein the converter unit is configured to prevent generation of torque in the elevator motor based on operation of the safety input. The converter unit may be a frequency converter, for instance. Still further, the elevator safety system comprises a brake contactor or relay configured to selectively supply or interrupt electrical power to at least one hoisting machinery brake by closing or opening at least one primary contact of the brake contactor or relay. Furthermore, the brake contactor or relay comprises an auxiliary contact or contacts configured to operate together with, or in tandem with or along with, or in response to operation of, the at least one primary contact, wherein the brake contactor or relay is in connection with the safety output and configured to operate based on the status of the safety output. Furthermore, the auxiliary contact or contacts of the brake contactor or relay is configured to control the operation of the safety input of the converter unit so that the generation of driving torque is prevented during the safety shutdown.
- The safety input refers herein to means or arrangement for preventing generation of torque in the electrical motor so that the movement of the rotor is at least not continued to be supported. This may be performed by preventing the power semiconductor switches of the converter unit responsible for the torque control, such as switches of the output power stage of the frequency converter or of the inverter, to operate.
- The converter unit may be configured to prevent the generation of driving torque by blocking control pulses from at least some of the power switches of an output power stage of the converter unit.
- In various embodiments, the elevator, and optionally the elevator safety system, may comprise an input contactor or relay configured to selectively supply or interrupt electrical power to the converter unit by at least one main contact of the input contactor or relay. Furthermore, the input contactor or relay may comprise at least one auxiliary contact configured to supply or interrupt electrical power to at least one hoisting machinery brake together with, or in response to the operation of, the at least one main contact. The input contactor or relay may be controlled by the converter unit independently of the status of the safety output.
- In some embodiments, the input contactor or relay may be arranged to be closed during an idle time between elevator starts when the measured or forecasted idle time is below a given time threshold, and the input contactor or relay may be arranged to be opened when the measured or forecasted idle time meets or exceeds the given time threshold.
- In various embodiments, the safety output of the elevator safety chain may be connected to a control coil of the brake contactor or relay. Thus, the control coil may operate the brake contactor or relay in response to the change of status of the safety output or, in general, based on said status.
- Furthermore, the brake contactor or relay may comprise normally open (NO) contact(s) as the primary contact(s). The normally open contact(s) may be arranged to open when the voltage supply to the control coil of the brake contactor or relay is interrupted. In various embodiments, electrical power may be supplied to the at least one hoisting machinery brake through the normally open contacts).
- In various embodiments, the auxiliary contact(s) of the brake contactor or relay may comprise the auxiliary contacts integrated to the brake contactor or relay, thereby operating together with or in response to the operation or synchronized with the primary contact(s).
- In addition, a further contactor or relay may be arranged to connect input phases of the elevator motor to each other. The further contactor may substantially provide a short-circuit condition between the input phases. The further contactor may, preferably, be in connection with the safety output and is configured to operate depending on the status of the safety output.
- According to a second aspect, an elevator is provided. The elevator comprises an elevator car arranged to be moved in an elevator shaft of the elevator, an elevator motor arranged to provide hoisting function of the elevator, at least one hoisting machinery brake configured for resisting the movement of the motor, and a converter unit connected to and configured to control the operation of the motor. Furthermore, the elevator comprises the elevator safety system in accordance with the first aspect.
- According to a third aspect, a method for performing a safety shutdown of an elevator is provided. The elevator comprises an elevator car arranged to be moved in an elevator shaft of the elevator, an elevator motor arranged to provide hoisting function of the elevator, at least one hoisting machinery brake, a converter unit connected to and configured to control the operation of the motor, and comprising a safety input, such as for performing a Safe Torque Off function. Furthermore, the converter unit is configured to prevent generation of torque in the elevator motor based on operation of the safety input. The elevator further comprises an elevator safety chain comprising safety contacts and a safety output, wherein a status of the safety output is arranged to depend on statuses of the safety contacts. The elevator safety chain is configured to perform a safety shutdown depending on the status of the safety output. The elevator further comprises a brake contactor or relay configured to selectively supply or interrupt electrical power to the at least one hoisting machinery brake by closing or opening at least one primary contact of the brake contactor or relay, wherein the brake contactor or relay comprises at least one auxiliary contact configured to operate together with, or along with or in response to operation of, the at least one primary contact, and wherein the brake contactor or relay is in connection with the safety output and configured to operate based on the status of the safety output.
- The method comprises monitoring the status of the safety output, initiating the safety shutdown based on the status of the safety output, interrupting supply of electrical power to the at least one hoisting machinery brake by opening the at least one primary contact of the brake contactor or relay, and operating the safety input of the converter unit by the auxiliary contact(s) to prevent the generation of driving torque in the elevator motor, wherein the auxiliary contact(s) of the brake contactor or relay is/are configured to control the operation of the safety input of the converter unit.
- The present invention provides an elevator safety system for an elevator, an elevator, and a method for performing a safety shutdown of an elevator. The present invention provides advantages over known solutions in that the brake contactor or relay is substantially the only mechanical switch, or set of switches, needed for the safety shutdown function of the elevator. This means that a reliable and simply solution for elevator safety shutdown is provided. As brake current is normally also much smaller than motor current of an elevator hoisting machinery, only a very small contactor or relay is needed for elevator safety shutdown.
- Various other advantages will become clear to a skilled person based on the following detailed description.
- The terms "first", "second" and "third" are herein used to distinguish one element from other element, and not to specially prioritize or order them, if not otherwise explicitly stated.
- The exemplary embodiments of the present invention presented herein are not to be interpreted to pose limitations to the applicability of the appended claims. The verb "to comprise" is used herein as an open limitation that does not exclude the existence of also unrecited features. The features recited in depending claims are mutually freely combinable unless otherwise explicitly stated.
- The novel features which are considered as characteristic of the present invention are set forth in particular in the appended claims. The present invention itself, however, both as to its construction and its method of operation, together with additional objectives and advantages thereof, will be best understood from the following description of specific embodiments when read in connection with the accompanying drawings.
- Some embodiments of the invention are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings.
-
Figure 1 illustrates schematically an elevator according to an embodiment of the present invention. -
Figure 2 illustrates schematically an elevator safety system according to an embodiment of the present invention. -
Figure 3 illustrates schematically a converter unit according to an embodiment of the present invention. -
Figure 4 illustrates schematically an elevator safety system according to an embodiment of the present invention. -
Figure 5 shows a flow diagram of a method according to an embodiment of the present invention. -
Figure 1 illustrates schematically anelevator 100 according to an embodiment of the present invention. Theelevator 100 may comprise anelevator car 10 arranged to be moved in anelevator shaft 12. The moving of theelevator car 10 may be implemented, preferably, by a hoisting rope orbelt 13 in connection with atraction sheave 14 or the like. Furthermore, theelevator 100 comprises anelevator motor 20 arranged to operate, such as rotate by the rotor thereof, thetraction sheave 14 for moving theelevator car 10, if not essentially directly coupled to the hoistingrope 13. Thetraction sheave 14 may be connected, via amechanical connection 22, directly or indirectly via a gear to a shaft of themotor 20. Theelevator 100 may comprise a machine room or be machine roomless, such as have themotor 20 in theelevator shaft 12. - The
elevator 100 may preferably comprise at least one, or at least two, hoisting machinery brake(s) 16 configured for resisting or, preferably, preventing the movement of themotor 20, that is the rotor thereof, directly or via thetraction sheave 14 or components thereof and/or therebetween. Furthermore, theelevator 100 may comprise abrake controller 25 configured to operate at least one of the at least onehoisting machinery brake 16. Thebrake controller 25 may further be in connection with other elements of theelevator 100, such as an elevator control unit and/or asafety control system 1000. Thebrake controller 25 may comprise an actuator (not shown) for operating thebrake 16 or at least be in connection with such an actuating device. - There may additionally be, at least in some embodiments, a
counterweight 18 arranged in connection with theelevator car 10 such as is known to a person skilled in the art of elevators. Still further, theelevator 100 may additionally comprise aguide rail 17 orrails 17 arranged into theelevator shaft 12 for guiding the movement of theelevator car 10. - The
elevator 100 ofFig. 1 further comprises aconverter unit 30. Theconverter unit 30 may comprise, or substantially be, an inverter or a frequency converter, for connecting to, and controlling the operation of, themotor 20, and a controller in connection with theconverter unit 30, wherein the controller is configured to operate theconverter unit 30 to provide electrical power (signals), such as having variable voltage and variable frequency, to the windings of themotor 20. The controller may be a separate controller device or be comprised in theconverter unit 30, for instance. - Still further, the
converter unit 30 may be arranged to be fed by anelectrical power source 150, such as of theelevator 100, for example from an external electrical power grid or mains power supply, or another power source, for example, a battery system. Additionally, theelectrical power source 150 may intake electrical power from theconverter unit 50. - The
elevator 100 preferably compriseslandings 19 orlanding floors 19 and, for example, landing floor doors and/or openings, between which theelevator car 10 is arranged to be moved during the normal operation of theelevator 100, such as to move persons and/or items between saidfloors 19. - Furthermore, the
elevator 100 may comprise thesafety control system 1000 for performing safety functions of theelevator 100. Thesafety control system 1000 may, for example, comprise at least part of a safety chain of theelevator 1000. - The elevator safety chain may comprise plurality safety contacts, such as landing door safety contacts, car door safety contacts, overspeed governor safety contact, pit buffer safety contacts, etc. They may be connected in series and/or in parallel. The statuses of the safety contacts are configured to be monitored. The safety chain has, such as in a safety logic unit thereof, at least one safety output which provides a safety signal following the combined status of the safety contacts. Safety signal may be, for example, a digital one-bit signal or an output of a safety relay. In an embodiment, the status of the safety output changes from "1" to "0" when one or several of the safety contacts open(s).
- In various embodiments, such as in the one shown in
Fig. 1 , theelevator 100 preferably comprises anelevator safety system 50, preferably at least in connection with thesafety control system 1000. -
Figure 2 illustrates schematically anelevator safety system 50 according to an embodiment of the present invention. Theelevator safety system 50 may comprise an elevator safety chain comprising safety contacts and asafety output 1001, wherein a status of thesafety output 1001 is, preferably, arranged to depend on statuses, such as on a combination thereof, of the safety contacts as is known to a skilled person in the art of elevators. The elevator safety chain may be configured to perform or at least initiate a safety shutdown depending on the status of thesafety output 1001. - The statuses of the safety contacts may be received, and preferably monitored, by a safety
chain logic unit 1100. The safetychain logic unit 1100 may then determine the status of thesafety output 1001 based on the combined status of the safety contacts. The information about the status of thesafety output 1001 may then be provided to an elevator control unit and/orsafety control system 1000, and/or utilized directly in determining the operating condition, such as an emergency condition, of theelevator 100. - It should be noted that the safety chain, as well as monitoring thereof, and the logic of determining of the status of the
safety output 1001 may be implemented in various ways as is known to a skilled person, such as including utilization of analog electrical circuits and switches, and/or digital devices and communication channels, computing units, such as microprocessors, microcontrollers, distributed processing elements, and/or different kinds of sensors, etc. - The
elevator safety system 50 may further comprise theconverter unit 30 connected to and configured to operate anelevator motor 20 for providing hoisting function of theelevator 100, such as moving theelevator car 10 in theelevator shaft 12. - Still further, the
converter unit 30 may comprise asafety input 31, such as for performing a Safe Torque Off (STO) function. Theconverter unit 30 may be configured to prevent generation of torque in theelevator motor 20 based on operation of thesafety input 31, such as when the status of thesafety input 31 changes from inactive state to an active state. - In general, the STO is an electronic signal used in motor controllers for safety reasons. The STO, once in operation, ensures that no torque-generating energy can continue to act upon the motor. The STO can be used where power removal is required to prevent an unexpected start. The function disables the signals that control the power semiconductors, that is switching thereof, of the output power stage of the converter unit, thus preventing the frequency converter or the inverter from generating the voltage and/or required to rotate, or at least support the rotation of, of the rotor of the motor. In an active state of the STO, control pulses may be blocked from power switches, such as transistors, of the output power stage. In accordance with various embodiments of the present invention, this means that power supply from frequency converter to the elevator motor is interrupted in a safe way, however, not requiring separation of the elevator motor from the mains power supply.
- The
elevator safety system 50 may also comprise a brake contactor orrelay 40, such as comprising one or contacts C2, C3, configured to selectively supply or interrupt electrical power to at least onehoisting machinery brake 16, or at least to or via thebrake controller 25 thereof, by closing or opening at least one primary contact C2, C3 of the brake contactor orrelay 40. As can be seen, the onehoisting machinery brake 16 preferably comprises anactuating device 16B. Furthermore, the brake contactor or relay 40 may comprise, as shown at 42, at least one auxiliary contact C2_AUX, C3_AUX, such as normally open (NO) contacts, configured to operate together with, in tandem with, or in response to operation of the at least one primary contact C2, C3. - The brake contactor or relay 40 may preferably be in connection with the
safety output 1001 and configured to operate based on the status of thesafety output 1001. Still further, the auxiliary contacts C2_AUX, C3_AUX of the brake contactor or relay 40 may be configured to control the operation of thesafety input 31 of theconverter unit 30 so that the generation of torque is prevented during the safety shutdown. In various embodiments, at least the primary contact or contacts C2 and C3 may be NO type of contacts, thereby closing only if control signal, such as in a suitable form and having sufficient amount of electrical power, is applied to the control device, such as the control coil, of the brake contactor orrelay 40. The auxiliary contacts may also be NO type of contacts. - In various embodiments, the auxiliary contact(s) may be arranged integrated, optionally removable, to the brake contactor or
relay 40. Thus, the auxiliary contacts) may be arranged to close based on the control signal to the control coil of the brake contactor orrelay 40. - Even though the
electrical power source 150 is shown to be directly connected to theconverter unit 30, it is to be noted that there may be one or several devices arranged therebetween, such as input filter(s), circuit breaker(s), and/or contactor(s) or relay(s), and/or a device for charging the energy storage element(s) of theconverter unit 30. -
Figure 3 illustrates schematically aconverter unit 30 according to an embodiment of the present invention. Theconverter unit 30 may be a frequency converter or an inverter. The controllable switches, such as power semiconductor switches, of theoutput power stage 38 of theconverter unit 30 are shown. The switches may be controlled by thecontroller 32, such as having drivers for the switches and a modulation unit, for instance, among other components, such as processing units and memory devices. Furthermore, theconverter unit 30 may comprise, preferably being integrated into theconverter unit 30, thesafety input 31. Thesafety input 31 may also comprise a circuitry for monitoring the status of thesafety input 31. Further, thesafety input 31 may be in connection with thecontroller 32 for preventing the generation of torque in theelevator motor 20 based on operation of thesafety input 31, or the operation of thesafety input 31 may be utilized in more direct manner to block the control signal to the switches. As can be seen inFig. 3 , thesafety input 31 may comprise one or several inputs. Theconverter unit 30 may also comprise aninput power stage 36, such as a rectifier. - In various embodiments, the
output power stage 38 may comprise, such as also shown inFig. 3 , high-side switches connected to the first potential of the intermediate circuit, such as to the positive potential of the direct current (DC) link, and low-side switches connected to the second potential of the intermediate circuit, such as to the negative potential of the DC link. Thus, the prevention of driving torque may be performed by blocking only the control pulses of the high-side switches or, alternatively, the low-side switches. Naturally, it is possible to block control pulses of all of the switches. - In various embodiments, the operation and structure of the
converter unit 30, such as with respect to number of phases, phase legs, levels, and/or number and types of switches, control units, methods of control, filters in connection thereto, topology of the converter/rectifier/inverter, etc., may substantially be of any suitable type known for the skilled person. -
Figure 4 illustrates schematically anelevator safety system 50 according to an embodiment of the present invention. Theelevator safety system 50 may comprise an elevator safety chain comprising safety contacts and asafety output 1001, wherein a status of thesafety output 1001 is, preferably, arranged to depend on statuses, such as on a combination thereof, of the safety contacts as is known to a skilled person in the art of elevators. The elevator safety chain may be configured to perform or at least initiate a safety shutdown depending on the status of thesafety output 1001. - The statuses of the safety contacts may be received, and preferably monitored, by a safety
chain logic unit 1100. The safetychain logic unit 1100 may then determine the status of thesafety output 1001 based on the combined status of the safety contacts. The information about the status of thesafety output 1001 may then be provided to an elevator control unit and/orsafety control system 1000, and/or utilized directly in determining the operating condition, such as an emergency condition, of theelevator 100. - The
elevator safety system 50 may further comprise theconverter unit 30 connected to and configured to operate anelevator motor 20 for providing hoisting function of theelevator 100, such as moving theelevator car 10 in theelevator shaft 12. - Still further, the
converter unit 30 may comprise asafety input 31, such as for performing a Safe Torque Off (STO) function. Theconverter unit 30 may be configured to prevent generation of torque in theelevator motor 20 based on operation of thesafety input 31, such as when the status of thesafety input 31 changes from inactive state to an active state. - The
elevator safety system 50 may also comprise a brake contactor orrelay 40, such as comprising one or contacts C2, C3, configured to selectively supply or interrupt electrical power to at least onehoisting machinery brake 16, or at least to or via thebrake controller 25 thereof, by closing or opening at least one primary contact C2, C3 of the brake contactor orrelay 40. As can be seen, the onehoisting machinery brake 16 preferably comprises anactuating device 16B. Furthermore, the brake contactor or relay 40 may comprise, as shown at 42, auxiliary contacts C2_AUX, C3_AUX, such as normally open (NO) contacts, configured to operate together with or in response to operation of the at least one primary contact C2, C3. - The brake contactor or relay 40 may preferably be in connection with the
safety output 1001 and configured to operate based on the status of thesafety output 1001. Still further, the auxiliary contact(s) C2_AUX, C3_AUX of the brake contactor or relay 40 may be configured to control the operation of thesafety input 31 of theconverter unit 30 so that the generation of torque is prevented during the safety shutdown. In various embodiments, at least the primary contact or contacts C2 and C3 may be NO type of contacts, thereby closing only if control signal, such as in a suitable form and having sufficient amount of electrical power, is applied to the control device, such as the control coil, of the brake contactor orrelay 40. The auxiliary contact(s) may also be NO type of contacts. - In various embodiments, the auxiliary contact(s) may be arranged integrated, optionally removable, to the brake contactor or
relay 40. Thus, the auxiliary contacts may be arranged to close based on the control signal to the control coil of the brake contactor orrelay 40. - Even though the
electrical power source 150 is shown to be directly connected to theconverter unit 30, it is to be noted that there may be one or several devices arranged therebetween, such as input filter(s), circuit breaker(s), and/or contactors) or relay(s), and/or a device for charging the energy storage element(s) of theconverter unit 30. - Furthermore, the
elevator safety system 50 may comprise an input contactor or relay 44 configured to selectively supply or interrupt electrical power to theconverter unit 30 by at least one main contact C1 of the input contactor orrelay 44. The input contactor or relay 44 may, optionally, comprise at least one auxiliary contact C1_AUX, such as integrated thereto, configured to supply or interrupt electrical power to at least onehoisting machinery brake 16, or at least to or via thebrake controller 25, together with or in response to the operation of the at least one main contact C1. - Furthermore, there may also be several other situations in which the input contactor or relay 44 may be configured to be opened. For example, when the elevator operation is interrupted because of an error, such as opening of a safety contact comprised or not in the safety chain, the input contactor or relay 44 may be opened. In the normal operation of the
elevator 100, when elevator has stopped at alanding floor 19, the input contactor or relay 44 may be opened provided that a longer than usual idle time is measured or expected (such as forecasted) to save energy (for example, when low traffic conditions are being detected). In various other conditions, however, such as when electrical power is required to drive themotor 20, it may be kept closed. - In various embodiment, the input contactor or relay 44 may be controlled by the
converter unit 30 independently of the status of thesafety output 1001. Thus, the input contactor or relay may be provided between theelectrical power supply 150, such as mains power supply, and themotor 20 but this contactor is not needed for the safety shutdown. Therefore, it does not have to be controlled by thesafety output 1001 but may instead be controlled by any microcontroller or corresponding associated with normal elevator operations. Consequently, opening frequency of the input contactor or relay 44 may be lowered which will improve elevator noise characteristics and lifetime of the input contactor orrelay 44. - Therefore, during the safety shutdown, the input contactor or relay 44 may be arranged to be closed and the
safety input 31 may be operated to prevent supply of electrical power from theconverter unit 30 to theelevator motor 20 or at least to prevent the generation of torque in theelevator motor 20. - Alternatively or in addition, the
elevator safety system 50 may comprise afurther contactor 48 arranged to connect input phases of theelevator motor 20 to each other, thereby providing a short-circuit condition thereto or at least a low resistance path for the current in the circuit thereof, thereby providing dynamic braking of themotor 20. Furthermore, thefurther contactor 48 may optionally be in connection with thesafety output 1001 and may be configured to operate depending on the status of thesafety output 1001. -
Figure 5 shows a flow diagram of a method according to an embodiment of the present invention. Step 500 refers to a start-up phase of the method. Suitable equipment and components are obtained and systems assembled and configured for operation. - Step 510 refers to monitoring the status of the
safety output 1001. This may be performed by thesafety control unit 1000, for instance. - Step 520 refers to determining and initiating the safety shutdown based on the status of the
safety output 1001. - Step 530 refers to interrupting supply of electrical power to the at least one
hoisting machinery brake 16 by opening the at least one primary contact C2, C3 of the brake contactor orrelay 40. - Step 540 refers to operating the
safety input 31 of theconverter unit 30 by the at least one auxiliary contact C2_AUX, C3_AUX, to prevent the generation of driving torque in theelevator motor 20, wherein the auxiliary contact(s) C2_AUX, C3_AUX of the brake contactor or relay 40 may be configured to control the operation of thesafety input 31 of theconverter unit 30. - Method execution may be stopped at
step 599. The safety shutdown has been performed and the hoistingmachine brake 16 is controlled to be resisting the movement of the rotor of theelevator motor 20 and/or thetraction sheave 14. In preferable embodiments, the input contactor orrelay 44, regardless of the safety shutdown, may be configured to supply electrical power to theconverter unit 30. The input contactor or relay 44 may be configured to be controlled by theconverter unit 30. - With respect to various embodiments of the method, the similar features may be utilized as described hereinabove with respect to and in
Figs. 1-4 .
Claims (15)
- An elevator safety system (50) for an elevator (100), comprising:an elevator safety chain comprising safety contacts and a safety output (1001), wherein a status of the safety output (1001) is arranged to depend on statuses of the safety contacts, and wherein the elevator safety chain is configured to perform a safety shutdown depending on the status of the safety output (1001);a converter unit (30) connected to and configured to operate an elevator motor (20) for providing hoisting function of the elevator (100), characterized in thatthe converter unit (30) comprises a safety input (31), such as for performing a Safe Torque Off function, wherein the converter unit (30) is configured to prevent generation of driving torque in the elevator motor (20) based on operation of the safety input (31);a brake contactor or relay (40) configured to selectively supply or interrupt electrical power to at least one hoisting machinery brake (16) by closing or opening at least one primary contact (C2, C3) of the brake contactor or relay (40), wherein the brake contactor or relay (40) comprises at least one auxiliary contact (C2_AUX, C3_AUX) configured to operate together or in tandem with the at least one primary contact (C2, C3), and wherein the brake contactor or relay (40) is in connection with the safety output (1001) and configured to operate based on the status of the safety output (1001); andthe auxiliary contact (C2_AUX, C3_AUX) of the brake contactor or relay (40) is configured to control the operation of the safety input (31) of the converter unit (30) so that the generation of torque is prevented during the safety shutdown.
- The elevator safety system (50) of claim 1, wherein the converter unit (30) is configured to prevent the generation of torque by blocking control pulses from at least some of the power switches of an output power stage (38) of the converter unit (30).
- The elevator safety system (50) of claim 1 or 2, comprising an input contactor or relay (44) configured to selectively supply or interrupt electrical power to the converter unit (30) by at least one main contact (C1) of the input contactor or relay (44).
- The elevator safety system (50) of claim 3, wherein the input contactor or relay (44) comprises at least one auxiliary contact (C1_AUX) configured to supply or interrupt electrical power to at least one hoisting machinery brake (16) together with or in response to the operation of the at least one main contact (C1).
- The elevator safety system (50) of claim 3 or 4, wherein the input contactor or relay (44) is controlled by the converter unit (30) independently of the status of the safety output (1001).
- The elevator safety system (50) of any one of claims 3-5, wherein the input contactor or relay (44) is arranged to be closed during an idle time between elevator starts, when a measured or forecasted idle time is below a given time threshold and the input contactor or relay (44) is arranged to be opened when the measured or forecasted idle time meets or exceeds the given time threshold.
- The elevator safety system (50) of any one of claims 1-6, wherein the safety output (1001) is connected to a control coil of the brake contactor or relay (40).
- The elevator safety system (50) of any one of claims 1-7, wherein the brake contactor or relay (40) comprises normally open contacts.
- The elevator safety system (50) of claim 8, wherein the normally open contacts are arranged to open when voltage supply to a control coil of the brake contactor or relay (30) is interrupted.
- The elevator safety system (50) of claim 9, wherein electrical power is supplied to the at least one hoisting machinery brake (16) through the normally open contacts.
- The elevator safety system (50) of any one of claims 1-10, wherein the auxiliary contacts (C2_AUX, C3_AUX) are integrated to the brake contactor or relay (40).
- The elevator safety system of any one of claims 1-11, comprising a further contactor (48) arranged to connect input phases of the elevator motor (20) to each other.
- The elevator safety system (50) of claim 12, wherein the further contactor (48) is in connection with the safety output (1001) and is configured to operate depending on the status of the safety output (1001).
- An elevator (100) comprising:an elevator car (10) arranged to be moved in an elevator shaft (12) of the elevator (100);an elevator motor (20) arranged to provide hoisting function of the elevator (100);at least one hoisting machinery brake (16) configured for resisting the movement of the motor (20), such as rotation of a rotor of the motor (20),a converter unit (30) connected to and configured to control the operation of the motor (20); characterized in thatthe elevator (100) comprises the elevator safety system (50) of any one of claims 1-13.
- A method for performing a safety shutdown of an elevator (100), wherein the elevator (100) comprises:- an elevator car (10) arranged to be moved in an elevator shaft (12) of the elevator (100),- an elevator motor (20) arranged to provide hoisting function of the elevator (100),- at least one hoisting machinery brake (16),- a converter unit (30) connected to and configured to control the operation of the motor (20), and comprising a safety input (31), such as for performing a Safe Torque Off function, wherein the converter unit (30) is configured to prevent generation of torque in the elevator motor (20) based on operation of the safety input (31),- an elevator safety chain comprising safety contacts and a safety output (1001), wherein a status of the safety output (1001) is arranged to depend on statuses of the safety contacts, and wherein the elevator safety chain is configured to perform a safety shutdown depending on the status of the safety output (1001), and- a brake contactor or relay (40) configured to selectively supply or interrupt electrical power to the at least one hoisting machinery brake (16) by closing or opening at least one primary contact (C2, C3) of the brake contactor or relay (40), wherein the brake contactor or relay (40) comprises at least one auxiliary contact (C2_AUX, C3_AUX) configured to operate together or in tandem with the at least one primary contact (C2, C3), and wherein the brake contactor or relay (40) is in connection with the safety output (1001) and configured to operate based on the status of the safety output (1001);
characterized in that the method comprises:monitoring (510) the status of the safety output;initiating (520) the safety shutdown based on the status of the safety output (1001);interrupting (530) supply of electrical power to the at least one hoisting machinery brake (16) by opening the at least one primary contact (C2, C3) of the brake contactor or relay (40), andoperating (540) the safety input (31) of the converter unit (30) by the auxiliary contact (C2_AUX, C3_AUX) to prevent the generation of driving torque in the elevator motor (20), wherein the auxiliary contact ( C2_AUX, C3_AUX) of the brake contactor or relay (40) is configured to control the operation of the safety input (31) of the converter unit (30).
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP20170826.0A EP3901077A1 (en) | 2020-04-22 | 2020-04-22 | Elevator safety system, elevator, and method for performing a safety shutdown of an elevator |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP20170826.0A EP3901077A1 (en) | 2020-04-22 | 2020-04-22 | Elevator safety system, elevator, and method for performing a safety shutdown of an elevator |
Publications (1)
Publication Number | Publication Date |
---|---|
EP3901077A1 true EP3901077A1 (en) | 2021-10-27 |
Family
ID=70391000
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP20170826.0A Withdrawn EP3901077A1 (en) | 2020-04-22 | 2020-04-22 | Elevator safety system, elevator, and method for performing a safety shutdown of an elevator |
Country Status (1)
Country | Link |
---|---|
EP (1) | EP3901077A1 (en) |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2014126562A1 (en) * | 2013-02-14 | 2014-08-21 | Otis Elevator Company | Elevator safety circuit |
WO2015093217A1 (en) * | 2013-12-17 | 2015-06-25 | 株式会社日立製作所 | Elevator controller and method for controlling same |
EP3403967A1 (en) * | 2017-05-15 | 2018-11-21 | KONE Corporation | A current cut-off arrangement of an elevator |
-
2020
- 2020-04-22 EP EP20170826.0A patent/EP3901077A1/en not_active Withdrawn
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2014126562A1 (en) * | 2013-02-14 | 2014-08-21 | Otis Elevator Company | Elevator safety circuit |
WO2015093217A1 (en) * | 2013-12-17 | 2015-06-25 | 株式会社日立製作所 | Elevator controller and method for controlling same |
EP3403967A1 (en) * | 2017-05-15 | 2018-11-21 | KONE Corporation | A current cut-off arrangement of an elevator |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP6446512B2 (en) | Brake controller and elevator system | |
EP3403971B1 (en) | Method for performing a manual drive in an elevator after mains power-off | |
KR100913337B1 (en) | Elevator control apparatus | |
EP3287404B1 (en) | Elevator system comprising braking apparatus and electric drive | |
CN108483149B (en) | Star sealing control method for elevator traction machine | |
EP2090540B1 (en) | Elevator system | |
TW201636292A (en) | A rescue apparatus and an elevator | |
EP3901077A1 (en) | Elevator safety system, elevator, and method for performing a safety shutdown of an elevator | |
KR101219230B1 (en) | Elevator safety circuit device | |
CN102471020B (en) | Control device for elevator | |
CN102378731B (en) | Elevator device | |
JP4558352B2 (en) | Elevator failure rescue operation device | |
JP4391613B2 (en) | Hoisting machine control device | |
KR20050028219A (en) | Control circuit for elevator | |
KR100901229B1 (en) | Elevator device | |
CN118104119A (en) | Elevator and method for performing manual emergency drive during power failure in an elevator | |
JPS59153769A (en) | Controller for elevator |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION HAS BEEN PUBLISHED |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
B565 | Issuance of search results under rule 164(2) epc |
Effective date: 20201014 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN |
|
18D | Application deemed to be withdrawn |
Effective date: 20220429 |