EP4267505A1

EP4267505A1 - Elevator, and method for operating an elevator in an emergency

Info

Publication number: EP4267505A1
Application number: EP21844337.2A
Authority: EP
Inventors: Juri ANZINI; Mirko PIFFERINI; Valerio Villa
Original assignee: Inventio AG
Current assignee: Inventio AG
Priority date: 2020-12-24
Filing date: 2021-12-23
Publication date: 2023-11-01
Also published as: WO2022136635A1; US20240051788A1; CN116783132A

Abstract

The invention relates to an elevator (2) comprising a safety control unit (12), the safety control unit (12) having an input (14) for selecting the mode of operation, and the safety control unit (12) being designed to differentiate at least a first input signal and a second input signal at the input (14). The elevator (2) also comprises a main switch device (16) having a switch (18), the main switch device (16) being accessible from outside the shaft (4), the main switch device (16) and the safety control unit (12) being connected, and it being possible to switch the switch (18) from at least a first state (20) into a second state (22). The safety control unit (12) is configured such that it operates in a first mode of operation when the switch (18) is switched into the first state (20), in a second mode of operation when the switch (18) is switched into the second state (22) and the safety control unit (12) detects the first input signal at the input (14), and in a third mode of operation when the switch (18) is switched into the second state (22) and the safety control unit (12) detects the second input signal at the input (14).

Description

Elevator, method of operating an elevator in an emergency

The invention relates to an elevator and a method for emergency operation of the elevator according to the preamble of the independent claims.

In the case of elevators in the context of special operation, i.e. in emergencies during commissioning, acceptance or testing as well as maintenance and other operating modes of the elevator system that deviate from normal operation, it is necessary for specialist personnel to control the elevator. This requires an elevator with appropriate operating elements for controlling the individual functions of the elevator.

A device has become known from utility model DE 29615921 Ul, by means of which elevator passengers can be evacuated in an emergency. The device is intended for elevator systems without a machine room, in which the drive unit is arranged in the shaft. If the elevator car gets stuck in the elevator shaft, the brake is released manually and the elevator car is driven to the next floor. The brake is actuated by means of a Bowden cable from the floor. During evacuation, the movement of the elevator car takes place when the elevator system is de-energized due to the imbalance between the elevator car with load and the counterweight. Only one battery is provided for feeding a signaling device which indicates that the elevator car is on the evacuation floor.

A disadvantage of the known elevators and the methods for emergency operation of these elevators is that the evacuation is rigidly prescribed by the device.

It is the object of the present invention to provide an elevator which avoids the disadvantages of the prior art and in particular an elevator and to provide a method for emergency operation of the elevator in which a plurality of operating modes can be selected.

The object is achieved by an elevator and by a method for emergency operation of the elevator according to the independent claims.

According to the invention, the elevator comprises an elevator shaft, a car that can be moved in an elevator shaft, a drive for moving the car, a brake, which is preferably designed as a car brake, and a safety control unit. The safety control unit has an input for selecting an operating mode. The safety control unit is designed to distinguish at least one first input signal and one second input signal at the input. The elevator further includes a main switch device having a switch. The main switch device is accessible from outside the shaft. The main switch device and the safety control unit are electrically connected. The switch can be switched from at least a first state to a second state. The security controller is configured to operate in a first mode when the switch is in the first state. The security controller is configured to operate in a second mode when the switch is switched to the second state and the security controller detects the first input signal at the input. The security controller is configured to operate in a third mode when the switch is switched to the second state and the security controller detects the second input signal at the input.

It has proven advantageous that by combining a switch with at least a first and a second state and a first and a second input signal, two different operating modes can be executed, for example in the second state of the switch depending on the input signal. Thus, the first state of the switch can be assigned to normal operation, for example, independently of the input signal, in which the switch has an uninterrupted power supply from the building to the elevator connects. The second state of the switch can be assigned to emergency operation of the elevator, different operating modes of the elevator being called up in the second state based on the detection of a first or second input signal. For example, in the second state of the switch when the first input signal is detected, an operating mode of the elevator can be executed which enables simple evacuation. This can be, for example, the normal state of the elevator with the switch in the second operating state. In other words, for example, the first signal can be a zero signal, that is to say it can correspond to a state in which no signal is present at the input. This makes it possible for a person to switch the elevator to an operating mode in which an evacuation is made possible under specified and restricted framework conditions by simply flipping the switch, ie switching the switch from the first state to the second state.

For example, the second operating mode can allow evacuation without additional drive energy. During such an evacuation, only an imbalance between the car and the counterweight is used to move the car

Via the second input signal, which is, for example, a positive voltage signal that differs from the zero signal, the second operating mode can be brought about simply, that is to say without a further switch state being necessary for this purpose. This enables a service technician to use a mobile device to inform the elevator control, for example, that he is in charge of the evacuation, that is to say he is in the elevator system. After determining the presence of the technician, the elevator control can apply the second signal to the input and thus bring about the third operating mode.

A main switch device can thus be made available in which an untrained person without identification can carry out a simple evacuation solely by flipping the switch, without the risk that this person will be in an accident due to incorrect manipulation of the switch Evacuation mode in which evacuation requires knowledge that that person does not have. In this way, an elevator is provided which enables evacuation by untrained personnel and, at the same time, evacuation by a specialist in a simple and safe manner. This ensures that the waiting time for potentially locked-up persons is kept as short as possible.

In a preferred embodiment, the switch can also be switched to a third state. In the third state, the switch interrupts a power supply to the elevator. The switch is preferably designed as a rotary switch.

The main switch device, as described above and below, makes it possible for the elevator to be switched from outside the shaft from normal operation to evacuation operation and to de-energized operation. This makes it possible for all essential operating modes to be easily selected from a central location.

The design of the switch as a rotary switch has proven to be advantageous since a plurality of switching states can easily be implemented in a rotary switch.

In a preferred embodiment, the switch is implemented such that the second state is an unstable state.

Such a switch allows the second state, which allows the elevator to be evacuated, to be activated only when a person actively selects that state. Inadvertently staying in this state is prevented by flipping the switch back to a state different from the second state. In this way it can be ensured that it is not possible to operate the elevator in evacuation mode, ie in the second operating mode, without a person being in the immediate vicinity of the main switch device. This increases the safety of the elevator. In a preferred embodiment, the main switch device can be opened. The switch can only be switched from one state to another when the main switch device is open. The main switch device is designed in such a way that it can only be opened by an authorized person.

The main switch device, as described above and below, makes it possible to ensure that, in order to change the operating mode, the main switch device must first be opened by an authorized person before the operating mode can then be changed via the switch. The main switch device thus forms a kind of mechanical lock when closed, which makes it impossible to change the operating mode.

In a preferred embodiment, the main switch device can be locked. When the main switch device is locked, the switch can no longer be switched.

In a preferred embodiment, the safety control unit is designed in the first operating mode in such a way that the elevator can be operated in normal operation.

In a preferred embodiment, the safety control unit is configured in a second operating mode in such a way that it can carry out an automatic pulsed emergency brake opening (PEBO)).

PEBO is known from the prior art, for example JP2011195270A.

It is made possible for the brake to be automatically released in a pulsed manner in the second switch position of the switch without the presence of a second input signal. As a result, the elevator car moves at a certain speed to a specific position, depending on the weight ratios in the elevator Direction. The pulsed opening and closing of the brake ensures that the cabin is not accelerated too quickly, even if there is a major imbalance. With the automatic PEBO, the cabin is automatically blocked with a brake after reaching the next floor, so that there is a safe position for evacuating any passengers who may be stuck in the cabin.

In this mode of operation, an automatic stop of the evacuation when certain threshold values are reached in the elevator system can also be permanently specified. For example, the evacuation can be stopped when the car reaches a certain speed. Furthermore, covering a certain distance can also lead to the evacuation being stopped. These abort parameters ensure that the evacuation can be carried out safely and only under clearly defined framework conditions without the presence of a trained technician.

In a preferred embodiment, the safety control unit is configured in a third operating mode in such a way that the cabin can be moved manually. The car is preferably moved using a mobile device belonging to an authorized person.

In this case, a mobile device belonging to the authorized person can be used in a first step to generate the second input signal. For this purpose, the mobile device can, for example, set up an NFC connection with the elevator control or, via the Internet and a server of the elevator system, instruct the elevator control to generate the second input signal. The mobile device makes it possible for the third operating mode to be selected in the second switching state of the switch. In this third operating mode, the car can then be easily moved by the authorized person via a GUI on the mobile device. It is also possible to display the position of the car in the shaft on the mobile device, so that the authorized person is informed of the position of the elevator car at all times without being able to see it needed the shaft. This allows the authorized person to be in manual evacuation mode only after identification with the safety control unit. At the same time, an efficient, intuitive and comparatively safer evacuation of the elevator car is made possible.

In a preferred embodiment, the second input signal is applied to the input when the security control unit detects a presence of an authorized person in the vicinity of the elevator. Otherwise, the first input signal is applied to the input.

In a preferred embodiment, the presence of an authorized person is detected based at least in part on communication with a mobile device. The mobile device is configured to scan a unique identifier of the elevator. The identification is preferably only accessible to be scanned by the mobile device when the main switch device is opened.

A kind of two-stage security concept is implemented in this way. A person can only identify themselves as authorized if they can first unlock the main switch device (e.g. with a key) and then scan the identification with an appropriate mobile device (with the appropriate software). In this case, both the mechanical opening of the main switch device and the digital reading in of the identification are therefore necessary. In one embodiment, the identification can be in the form of a barcode or QR code, which is attached to the inside of a flap of the main switch device. This further increases the safety of the evacuation operation of the elevator.

In a preferred embodiment, the main switch device further comprises a plug for connecting an emergency power supply to the elevator.

It is possible that in an emergency the power supply of the building, which is connected to the elevator via the main switch device, fails. A main switch device, which, as described above and below, has a plug for connecting an emergency power supply to the elevator, makes it possible in such an emergency to temporarily replace the main energy supply of the building with a mobile energy supply, so that the elevator has the necessary energy to Operation of the emergency functions, that is to say in particular the evacuation functions, can be made available. Attaching this plug to the main switch device has the advantage that the person authorized to evacuate the elevator can connect the emergency power supply to the elevator right there where they have to control the evacuation operation anyway. This eliminates time-consuming running back and forth. An emergency power supply can be a battery, for example.

In a preferred embodiment, the safety control unit is attached to the cab. The connection between the main switch device and the safety control unit is preferably designed as a secure, preferably wired, connection.

A connection which, for example, meets the standardized safety integrity level 1 (Safety Integrity Level, SIL1), preferably SIL2 and particularly preferably SIL3 according to IEC 61508 and/or EN81-20 and/or EN81-50 can be regarded as secure.

A main switch device, as described above and below, contains all components which must be accessible from the outside, ie outside the shaft, during operation of the elevator. A safety control unit, which is electrically connected to this main switch device, therefore does not have to be accessible. The main switch device and the connection of the main switch device to the safety control unit thus make it possible to place the safety control unit in a location at which it can perform the functions otherwise assigned to it particularly efficiently. Since the safety control unit in a preferred embodiment also controls the brake of the Elevator, which are designed for example in the form of car brakes, controls and optionally also monitors and controls the safety functions of the cars and / or shaft doors, it can be advantageous to attach this safety control unit to the car. Transmission-related delays in the signals from safety-relevant sensors to the safety control unit can thus be minimized to a large extent, making the elevator safer.

In a preferred embodiment, the input is configured to detect a third input signal. The security controller is configured to operate in a fourth mode when the switch is in the second state and the security controller detects the third input signal at the input. In the fourth mode of operation, the safety control unit is configured to manually release an elevator brake. In the fourth operating mode, the safety control unit is preferably configured to manually release the elevator brake via a command which it receives from an authorized person's mobile device.

A third input signal thus makes it possible to provide a fourth operating mode in addition to the second operating mode and the third operating mode in the second state of the switch. In one switch state, for example, three different states, ie three different operating modes, can be made available on the basis of a digitally generated signal. This makes it possible to divide the evacuation operation of the elevator into three stages, with further safety precautions for identifying the person being able to be taken for the second and third stages, so that it can be ensured that these further stages of evacuation can only be carried out by appropriately authorized and trained persons can be chosen. This ensures that the safety-critical evacuation functions can only be carried out by appropriately trained personnel. The need for a complex mechanical switch with multiple locks and locking options is thus replaced by a combination of a simple mechanical switch and a correspondingly designed safety control unit. It will thereby further preventing a person from inadvertently generating evacuation commands in an incorrect state of a mechanical switch, endangering the safety of passengers potentially stuck in the cabin. Before the required evacuation function is carried out, a message can be displayed on the person's mobile device, which warns the person and shows them the consequences of the forthcoming evacuation function. The safety of the evacuation is thus further improved.

Fig. 1: a schematic representation of an elevator,

2: a schematic representation of a main switch device in an open state in a side view,

3 : the main switch device in an open state in a front view.

Figure 1 shows an elevator 2. A part of the elevator 2 is shown in a front view, this being indicated by the dot-dash line.

The elevator 2 includes a car 6 which can be moved along the shaft 4 . The elevator car 6 is held by a suspension means, the suspension means being a cable or a belt, for example. At the other end, the suspension element is connected to a counterweight. The suspension element is driven by a drive 8 .

The cabin 6 includes a cabin door for opening and closing an access to the cabin 6. A safety control unit 12 is also mounted on the cabin. The safety control unit includes an input 14. The elevator 2 further includes a car brake 10 attached to the car 6.

In this exemplary embodiment, the elevator 2 comprises three floors 42', 42", 42" wherein in Fig. 1 the cabin 6 on the second, ie middle, floor 42" is just before a stopping position. On the third floor 42''' there is a person 28 holding a mobile device 32 in his hand. A main switch device 16 is mounted on this floor 42"' near the door below the call input device.

The position of the car 6 a little above the floor 42'' shown in the figure is a position where the car 6 has been inadvertently stopped in an emergency such as a power failure. The person 28 is a service technician who has come to the elevator 2 in order to move the car to a floor 42 and there to evacuate the passengers who may be trapped in the car 6 .

To do this, the person 28 goes to the third floor 42'' where the main switch device 16 is present. The authorized person 28 can move the elevator car 6 in the shaft 4 by opening the main switch device 16 and flipping the switch 18 , which is mounted in the main switch device 16 , and the mobile device 32 . Through the main switch device and the mobile device 32, the person 28 can do this without having to access the safety control unit 12 on the cabin 6 and also without having to have visual contact with the cabin 6, since all evacuation-related information is displayed on the mobile device 32 information are displayed.

2 shows the main switch device 16, which comprises a switch 18, which is designed as a rotary switch 26 in this embodiment. The main switch device 16 includes a flap 44, which is shown in FIG. 2 in an open state. The main switch device 16 further comprises a plug 36 with which an external emergency power supply can be connected to the elevator 2 (not shown). It can also be seen in FIG. 2 that the rotary switch 26 can assume different states, the states on the rotary wheel of the rotary switch being formed by nubs. The rotating wheel of the rotary switch can be turned in such a way that the state of the rotary switch changes changes. A first state 20 is shown on the rotary wheel. A second state 22 can also be seen. The rotary switch 26 is in the third state 24 in FIG. 2. The rotary switch 26 also has a fourth state 25 in the exemplary embodiment illustrated in FIG.

3 shows the main switch device 16 in a front view. The main switch device 16 is again shown in an open state. The flap 44 can be seen, in which a lock 46 is also attached for securely locking the flap 44 in a closed position. Also recognizable on the flap 44 is the identification 39, which is designed as a QR code in this exemplary embodiment. It is clear from Figure 3 that the QR code can be scanned with the mobile device (not shown) only when the flip is in an open state. To do this, the lock 46 must first be unlocked. The knob 24 of the rotary switch 26 can also be seen in FIG. 3, the rotary switch being in this third state, represented by the knob 24. The locking device 48 is formed on the flap 44 and makes it impossible to change the status of the rotary switch 26 when the flap 44 is closed. The plug 36 can also be seen, which in FIG. 3 is in the same state as in FIG. 2, namely in a retracted state. The switch 26 can be moved out of the main switch device with a screwdriver, for example, so that an emergency power supply, for example a battery, can be easily attached to the plug 36 . 3 also shows the locking device 48, which can be folded out by 90° so that when the flap 44 is closed, the lock protrudes from the flap 44 and by attaching a lock to the lock 48, the flap 44 can also be opened when it is open Lock 46 is no longer possible.

Finally, it should be noted that terms such as "comprising,""comprising," etc. do not exclude other elements or steps, and terms such as "a" or "an" do not exclude a plurality. It should also be noted that features or steps taken with reference to any of the above Embodiments have been described can also be used in combination with other features or steps of other embodiments described above. Reference signs in the claims are not to be considered as limiting.

Claims

patent claims

1st elevator (2) with

- an elevator shaft (4),

- a car (6) that can be moved in an elevator shaft (4),

- a drive (8) for moving the cabin (6),

- a brake (10), which is preferably designed as a cabin brake,

- a safety control unit (12), the safety control unit (12) having an input (14) for selecting an operating mode, the safety control unit (12) being designed to distinguish at least a first input signal and a second input signal at the input (14),

- a main switch device (16) with a switch (18), the main switch device (16) being accessible from outside the shaft (4), the main switch device (16) and the safety control unit (12) being electrically connected,

- wherein the switch (18) can be switched from at least a first state (20) to a second state (22), wherein the safety control unit (12) is configured to operate in a first operating mode when the switch (18) is in is switched to the first state (20), in a second operating mode when the switch (18) is switched to the second state (22) and the safety control unit (12) detects the first input signal at the input (14), and in a third operating mode , when the switch (18) is switched to the second state (22) and the safety control unit (12) detects the second input signal at the input (14).

2. Elevator (2) according to claim 1, wherein the switch (18) can also be switched to a third state (24), wherein in the third state (24) the main switch device (16) supplies a power supply (28) to the elevator (2). interrupts, the switch (18) preferably being a rotary switch (26).

3. Elevator (2) according to claim 2, wherein the switch (18) is designed such that the second state (22) is an unstable state.

4. Elevator (2) according to one of the preceding claims, wherein the main switch device (16) can be opened, the main switch device (16) being designed such that the switch (18) can only be switched from one state to another if the main switch device (16) is open, the main switch device (16) being designed in such a way that only an authorized person (28) can open it.

5. Elevator (2) according to claim 4, the main switch device (16) can be locked, with the main switch device (16) being locked, the switch (18) can no longer be switched.

6. Elevator (2) according to one of the preceding claims, wherein in the first operating mode the safety control unit (12) is designed in such a way that it can operate the elevator (2) in normal operation.

7. Elevator (2) according to any one of the preceding claims, wherein the safety control unit (12) is configured in a second operating mode to perform an automatic pulsed emergency opening of the brake.

8. Elevator (2) according to one of the preceding claims, wherein the safety control unit (12) is configured in a third operating mode such that the car (6) can be moved manually, preferably via a mobile device (32) of an authorized person (28).

9. Elevator (2) according to any one of the preceding claims, wherein the second input signal is applied to the input (14) when the security control unit (12) detects a presence of an authorized person (28) in the vicinity of the elevator (2), wherein otherwise the first input signal is applied to input (14). - 16 -

10. Elevator (2) according to claim 9, wherein the presence of an authorized person (28) is detected based at least in part on communication with a mobile device (32) configured to provide a unique identification (34) on the elevator (2 ), the identification preferably only being accessible to be scanned by the mobile device (32) when the main switching device (16) is opened.

11. Elevator (2) according to any one of the preceding claims, wherein the main switching device (16) further comprises a plug (36) for connecting an emergency power supply (38) to the elevator (2).

12. Elevator (2) according to any one of the preceding claims, wherein the safety control unit (12) is attached to the car (6) and wherein the connection between the main switch device (16) and the safety control unit (12) is preferably a secure, preferably wired, connection (40) is executed.

13. Elevator (2) according to any one of the preceding claims, wherein the input (14) is configured to detect a third input signal, wherein the safety control unit (12) is configured to operate in a fourth operating mode when the switch (18 ) is in the second state (22) and the safety control unit (12) detects the third input signal at the input (14), wherein the safety control unit (12) is configured in the fourth operating mode to release an elevator brake (10) manually, preferably via a mobile device (32) of an authorized person (28).