JP2001010772A - Control device for elevator - Google Patents

Abstract

PROBLEM TO BE SOLVED: To rewrite a program for operation control of an elevator without stopping an elevator box. SOLUTION: This control device stores an elevator operating program in an operation control program region 5A of an electrically rewriting possible program storage 5. In rewriting the operation control program, an exterior program transfer device 3 is connected thereto and then the operation control program to be renewed is written in a rewriting preliminary region 5C. The rotation of an elevator motor 1 is detected and when an elevator box is stopped, the program in the operation control program region 5A is rewritten into a program in the preliminary region 5C. During rewriting, the program in the preliminary region 5C is executed.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a control device for rewriting an elevator operation control program from the outside.

[0002]

2. Description of the Related Art FIG.
FIG. 1 is a block diagram showing a conventional control device for an elevator disclosed in Japanese Patent Application Publication No. JP-A-2006-115139. The flash memory 22 in the control device 21 has a program registration area 23 in which an elevator operation control program is stored. A microcomputer (hereinafter referred to as a microcomputer) 24 executes the operation control program to control the operation of the elevator. Then, if the operation control program of the control device 21 needs to be changed, the maintenance staff inserts the portable memory card 25 into the memory card interface unit 28.
Connect to

In the memory card 25, a plurality of latest versions of operation control programs P1 to Pn are stored in a program storage area 26. Further, a compatibility table between various operation control programs stored in the program storage area 26 and various operation programs of the previous version is stored in the compatibility table storage area 27. When the memory card 25 is connected to the interface unit 28, the microcomputer 24 follows a program change procedure based on the compatibility data given from the memory card 25.
The identification code of the latest operation control program that can be replaced with the operation control program stored in the program registration area 23 is determined.

[0004] Then, the operation control program of the corresponding identification code is read from the memory card 25 and rewritten and registered in the program registration area 23, and the updated identification code of the operation control program is rewritten and registered in the label registration area 29. I do. Thereafter, the microcomputer 24 operates the elevator according to the operation control program.

[0005]

In the conventional elevator control apparatus as described above, the operation control program is rewritten from the outside. Therefore, when rewriting the operation control program, the elevator car is stopped. I have to do it. Therefore, the program rewriting operation is performed by notifying the user of the stop of the car to the user and performing procedures such as connection of the rewriting device, rewriting work, resumption of car operation and notification of the operation, which is troublesome, and the car stop time is long. For example, there is a problem that service degradation cannot be avoided.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and has as its object to provide an elevator control device capable of rewriting an operation control program without stopping a car.

[0007]

An elevator control apparatus according to a first aspect of the present invention stores an update program having contents for updating an operation control program stored in an operation control program area of a program storage device. In addition, an external program transfer means for outputting an operation control program update request is provided, and when an update request is output from the external program transfer means, it is determined whether or not the operation control program in the operation control program area can be updated. Is determined, the update program stored in the external program transfer means is transferred and stored.

[0008] In the elevator control apparatus according to the second invention, in the first invention, when it is detected that the elevator car is stopped, it is determined that the operation control program can be updated. Things.

According to a third aspect of the present invention, there is provided the elevator control apparatus according to the first or second aspect, wherein the program storage device is provided with a spare area for rewriting for temporarily storing an operation control program. When it is determined that the update can be performed, the update program stored in the external program transfer means is transferred to the spare area for rewriting and stored.

According to a fourth aspect of the present invention, in the elevator control apparatus according to the second or third aspect, after the update program stored in the external program transfer means is completely transferred to the spare rewriting area, the operation control is performed. The operation control program stored in the program area is rewritten into an update program.During this rewrite, the operation using the operation control program stored in the operation control program area is stopped,
The calculation is performed using the update program stored in the spare area for rewriting.

According to a fifth aspect of the present invention, in the elevator control device according to the second or third aspect, an address indicating the operation control program stored in the operation control program area is replaced with a corresponding address of the rewriting spare area. After the update program stored in the external program transfer means is completely transferred to the spare rewriting area, the operation control program stored in the operation control program area is rewritten with the update program. The calculation using the operation control program stored in the area is stopped, and the calculation is performed using the update program stored in the spare rewriting area indicated by the changed address.

According to a sixth aspect of the present invention, in the elevator control device according to the second or third aspect, after the update program stored in the external program transfer means has been completely transferred to the spare area for rewriting, The operation is performed using the update program stored in the spare area for rewriting, and when it is determined that the operation control program can be updated, the operation control program to be updated in the operation control program area is replaced with the update program. It is.

[0013]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiment 1 1 to 4 show one embodiment of the first and second inventions of the present invention. FIG. 1 is a block diagram, FIG. 2 is a memory content diagram, (A) is a flash ROM, (B) ) Is a RAM, FIG. 3 is a flowchart of a rewrite program input operation, and FIG. 4 is a flowchart of an external program transfer operation. (The same applies to the following embodiments.)

1 and 2, 1 is a motor for driving an elevator, 2 is a pulse generator for generating a pulse corresponding to the rotation of the motor 1, 3 is an external program transfer device for outputting an operation control program to be changed, A control device 4 is connected to the pulse generator 2 and the external program transfer device 3 and has the following devices.

5 is an electrically rewritable flash RO
An operation control program area 5A for storing an operation control program, a rewriting program storage area 5B for storing a program for rewriting the operation control program, and a temporary operation control program (hereinafter referred to as an update program) to be changed. It consists of an operation control program rewriting spare area 5C which is temporarily stored.
Reference numeral 6 denotes an operation control program area stored in the operation control program rewriting spare area.
Is a program identification number storage device comprising a RAM for storing a program identification number indicating which program corresponds to which program.

Reference numeral 7 denotes a microcomputer (hereinafter referred to as a microcomputer) for executing a program stored in each of the areas 5A to 5C.
And an address changing device for selecting which one of the operation control program stored in the spare area for rewriting the operation control program 5C is to be executed, 9 is a Pascal counting device for counting pulses generated by the pulse generator 2, and 10 is an external device. An interface device for inputting an update program output from the program transfer device 3.

In the operation control program area 5A of the program storage device 5, the operation control programs are stored separately for each area. Further, a program for rewriting the operation control program is stored in the rewrite program storage area 5B. Also, the RAM 11
Constitutes the program identification number storage device 6,
The program rewrite permission flag “WEN” is stored.

Next, the operation of the first embodiment will be described with reference to FIGS.
This will be described with reference to FIG. A Rewriting Program Input Operation (FIG. 3) First, it is determined whether it is time to rewrite the operation control program. In this embodiment, in order to use the timing of stopping the elevator car, the pulse counting device is used in step S1. It is determined whether there is a change in the pulses counted in step 9, and if there is no change, it is determined that the car is stopped, and the process proceeds to step S2. In step S2, it is determined whether there is a rewrite request from the external program transfer device 3 via the interface device 10.

If there is a request for rewriting, step S3
Then, the program rewriting permission flag "WEN" is set to "operation permitted" and transmitted to the external program transfer device 3 for transmission. Then, in step S4, the external program transfer device 3
The update program is transmitted and input into the operation control program area 5A of the program storage device 5.

If it is determined in step S1 that the pulse has changed and the car is running, or if it is determined in step S2 that there is no rewrite request from the external program transfer device 3, the process proceeds to step S5. In step S5, the program rewriting permission flag “WE
"N" is set to "operation not permitted" and the transmission output is performed, and writing to the operation control program area 5A is prohibited.

B. External Program Transfer Operation (FIG. 4) In step S11, a rewrite request is
Is output, and it is determined in step S12 whether the program rewrite permission flag “WEN” is “operation permitted”. If "operation not permitted", the process returns to step S11,
If "operation permitted", the process proceeds to step S13 to transmit and output the update program. Here, steps S1 to S3
Represents an update permission determining unit, step S4 constitutes a program input unit, and steps S11 to S13 constitute a program transfer unit.

As described above, when an operation control program update request is issued, the control unit 4 checks the operation state of the car, determines whether it is possible to interrupt the rewrite operation, and, when possible, executes the operation control. Execute program rewriting. Therefore, there is no need to stop the operation of the car,
No significant service degradation occurs.

Although the rewriting time of the operation control program depends on the size of the program, it can be normally executed in a short time of about several seconds, but it is necessary to continue the calculation continuously as in the case of running a car. Was implemented at the time
For example, smooth running may be impaired. If the operation is stopped for a short period of time, the passenger will not feel uncomfortable even if the operation is stopped for a short time.

Embodiment 2 FIG. 5 to 9 show an embodiment of the third and fourth inventions of the present invention. FIG. 5 is a diagram showing the contents of the memory, wherein (A) is a flash ROM and (B) is an RA.
M, FIG. 6 is a flowchart of the overall operation, FIG. 7 is a flowchart of a main process at the time of rewriting, FIG. 8 is a flowchart of an operation of inputting a rewriting program, and FIG. 1 and 4 are also used in the second embodiment.

In this embodiment, as shown in FIG. 5, one block of an area in the program storage device 5 is provided as a rewriting spare area 5C for temporarily storing a new operation control program. The RAM 11 has a rewrite completion flag “FLG” and a program number “SWN”.
O "and a spare area execution flag" SPRUN "are stored.

Next, the overall operation of this embodiment will be described with reference to FIG.
This will be described with reference to FIG. In the external program transfer device 3,
In step P1, the update program of the operation control program is transferred and output. The control device 4 executes the operation control program to the operation control program area 5A when the car is running in Step P2, and executes the update program for the rewrite spare area 5C when the car is stopped. When executing the update program of the rewriting spare area 5C, the address change processing of Step P3 is referred to.

In step P4, the update program transferred in step P1 is input. In Step P5, the update program of the spare rewriting area 5C is copied and transferred to the operation control program area 5A. In step P6, the program data stored in the operation control program area 5A is rewritten to the program data in the spare rewriting area 5C. Steps P4 to P6 are desirably executed during one operation cycle, but if the processing cannot be completed during that operation cycle, the processing is temporarily interrupted and is continuously executed in the next operation cycle.

Next, the operation of each section in FIG. 6 will be described with reference to FIGS. A. Main processing operation during rewriting (FIG. 7) In step S21, it is determined whether the car is stopped. If not, the process proceeds to step S22, where the operation control program in the operation control program area 5A is executed, and the program is executed in step S23. The identification number N is incremented by 1, and the process proceeds to the next operation control program, and is repeated. If it is determined in step S21 that the car is stopped, it is determined in step S24 whether or not the rewrite completion flag "FLG" is "operation permitted".

If the rewrite completion flag "FLG" is "operation permitted", the process proceeds to step S25, where the next program number to be executed is the same as the program number "SWNO" written in the spare rewrite area 5C. Is determined. If they are the same, the spare area execution flag "SPRUN" is set to "operation permitted" in step S26, and the update program identification number NX of the rewriting spare area 5C is executed in step S27. Then, in step S23, the program identification number N is incremented by 1, and the process proceeds to the next operation control program. If the determinations in steps S24 and S25 are opposite to the above, the process proceeds to steps S22 and S23, and shifts to the next operation control program.

B Rewrite Program Input Operation (FIG. 8) Steps S1 to S3 and S5 are the same as those in FIG. In step S6, the update program is transmitted and input from the external program transfer device 3 and written into the spare rewrite area 5C. Then, in step S7, the rewriting flag "FLG" is set to "operation permitted". This process is basically the same as that of the first embodiment, except that the write destination is not the regular program storage location but the rewrite spare area 5C.

Next, as an example, a case where the program "A" in the operation control program area 5A is rewritten to the program "B" will be described. Here, “A” represents the old version and “B” represents the new version. (NX in step S27 means "B".) However, the program identification numbers for both programs "A" and "B" are assumed to be. The execution order of the program is →→→…
→ The rewriting program 5B is set. Program "B"
Is completed in the spare area for rewriting 5C,
The rewriting completion flag "FLG" is set to "operation permitted", and the identification number of the program written in the spare rewriting area 5C is stored in the variable "SWNO" of the RAM 11.

As described above, the programs are executed in order from the identification number, but up to the program, since the program number to be executed next and the program number "SWNO" do not match, it is determined as "mismatch" in step S25. To step S22 to shift to the next program.
In the program, since the identification number of the program to be executed next is the program number “SWNO”, step S25 is determined to be “match” and step S25 is determined.
Proceed to 26.

Here, for the first time, the spare area execution flag “SP
RUN "is set to" operation permitted ", the execution location of the program is changed to the rewriting spare area 5C, and the program" B "in the rewriting spare area 5C is executed.

C Copy / Transfer Operation of Rewrite Program (FIG. 9) In step S31, it is determined whether the rewrite completion flag "FLG" is "operation permitted".
32, the program execution location is changed to the spare area 5 for rewriting.
C, the spare area execution flag “SPRU
N ".

If the spare area execution flag "SPRUN" is "operation permitted", the flow advances to step S33 to write the program "B" in the rewriting spare area 5C into the area of the operation control program indicated by the program number "SWNO". . In this process, the program “A” in the operation control program storage area 5A is replaced with the program “B”.
When the writing is completed, the rewriting completion flag “FLG” and the spare area execution flag “SPRUN” are set to “operation not permitted” in step S34.

After the execution of the program, the operation proceeds to the operation of the program.
Since "G" is "operation not permitted", the process proceeds to step S22, and the rewritten program "B" in the operation control program area 5A is executed. program~
, Can be implemented by the same procedure. Further, the program storage device 5 is not limited to a flash ROM. Here, step S2
1, S24 to S27 and S31 to S34 constitute a program updating means.

As described above, when the operation control program is rewritten, the data is not written directly to the regular position but is written temporarily to the spare area for rewriting 5C. If the program is not transferred, it does not affect the legitimate program. Therefore, even after the update permission is interrupted, the operation of the elevator can be continued.

When all the rewritten programs are stored in the spare rewriting area 5C, the updated version of the program is calculated.
The operation can be controlled by a new program without interrupting the operation control of the elevator.

Embodiment 3 FIGS. 10 to 12 show one embodiment of the fifth and sixth inventions of the present invention.
Is a memory content diagram, (A) is a flash ROM,
11B is a RAM, FIG. 11 is a flowchart of a program data rewriting operation, and FIG. 12 is a flowchart of an address change operation. 1 and 6 are also used in the third embodiment. In this embodiment, as shown in FIG. 10, one block of an area in the program storage device 5 is used as an operation control program rewriting spare area 5C as in the second embodiment. The RAM 11 also has an address read permission flag “ADRFLG”, a program data start address “SWADR”, and an address deviation “OFFSET”.
Is stored.

Next, the operation of this embodiment will be described with reference to FIGS. Here, the program data (constant data necessary for executing the operation control program) A in the operation control program area 5A is rewritten to the program data B. The address of the area where the program data A is stored is set to the address 9 ×××× (× is 0
000-FFFF), and the address of the spare area for rewriting 5C is Axxx address (x is 0000-FFFF).

Next, the operation of this embodiment will be described with reference to FIGS. A Program Data Rewriting Operation (FIG. 11) In step S41, “program data B” to be rewritten is input from the external program transfer device 3 and written into the spare rewriting area 5C. When the writing is completed, the process waits for the car to stop at step S42, and proceeds to step S43 when the car stops.

In step S43, the start address 90000 of the area in the operation control program storage device 5 where the program data A to be rewritten exists is stored in "SWADR". Also, the start address A of the rewriting spare area 5C
"OFFSET" is the difference between address 0000 and "SWADR"
To memorize. In step S44, the address read permission flag "ADRFLG" is set to "read permission". On the other hand, in the address changing means 8, as shown in FIG. 12, the microcomputer 7 executing the program in step S51 determines whether the address to be accessed is an area starting with "SWADR".

If the area starts with "SWADR", the address rewriting permission flag "ADRFL" is set in step S52.
"G" is "read permission". "ADRFLG"
Is "read-only", the value of "OFFSET" is added to the value of the address accessed by the microcomputer 7 in step S53. In this way, the microcomputer 7 sets the address 9 ×
When accessing address XXX, spare area for rewriting 5C
Is controlled to access the address Axxx.

In the rewriting program, while the address rewriting permission flag "ADRFLG" is "rewriting permitted" in step S45, the "program data B" of the spare rewriting area 5C is represented by the address 9xxx indicated by "SWADR". Write to the area of the × address. By this processing, “program data A” is replaced with “program data B”.
When rewriting is completed, the address rewriting permission flag “ADRFLG” is set to “non-rewriting permitted” in step S46. Thus, in the next operation cycle of the microcomputer 7, since the address rewriting permission flag "ADRFLG" is "non-rewriting permitted", the program data B at the address 9xxx replaced at step S45 is referred to. I do.

Thus, the program data can be rewritten. Further, the spare area for rewriting 5C is a temporary storage area, so that it is not necessary to prepare a program twice with a formal address and a temporary address, and it is possible to smoothly shift to the calculation of the updated version of the program.

Embodiment 4 FIG. This shows another embodiment of the fifth and sixth inventions of the present invention, and shares FIGS. 10 to 12. FIG. 1 is also used in the fourth embodiment. This embodiment rewrites the operation control program. Here, it is assumed that the program “A” in the program area of the operation control program area 5A is rewritten to the program “B”. Program "A"
Is stored in the address of 1 × XXX × (×
Is 0000-FFFF), and the address of the spare area 5C is A
XXXXXX addresses (X is 0000 to FFFF).

Next, the operation of this embodiment will be described with reference to FIGS. As in the rewriting of the program data of the third embodiment, the program “B” to be rewritten is written from the external program transfer device 3 to the spare rewriting area 5C in step S41. When the writing is completed, the process waits for the car to stop in step S42. When the car stops, the process proceeds to step S43.

In step S43, the start address 10000 of the area in the operation control program storage device 5 where the program "A" to be rewritten exists is stored in "SWADR". Also, the start address A of the rewriting spare area 5C
"OFFSET" is the difference between address 0000 and "SWADR"
To memorize. In step S44, the address rewriting flag “ADRFLG” is set to “rewriting permitted”. On the other hand, as shown in FIG.
When accessing the program at the address 1 ×××××, control is performed so as to access the address A ×××× in the rewrite spare area 5C.

In the rewriting program, while the address rewriting permission flag “ADRFLG” is set to “rewriting permitted” in step S 45, the program “rewriting spare area 5 C”
B ”is written in the area of the address 1 × XXX indicated by“ SWADR ”. By this processing, the program “A” is replaced with the program “B”. When rewriting is completed, the address rewriting permission flag “ADRFLG” is set to “non-rewriting permitted” in step S46.

Thus, in the next operation cycle of the microcomputer 7, the address rewriting permission flag "ADRFLG" is "non-rewriting permitted". B "
See In the second embodiment, each time each of the operation control programs is executed, it is necessary to determine whether the next program to be executed is the same as the program written in the spare area for rewriting 5C. In the third embodiment, the processing is performed by simply adding the address deviation to the spare area for rewriting 5C. Therefore, the program can be executed without being aware of the spare area for rewriting 5C.

In this way, when the update permission is issued to the regular storage area, the program in the spare rewrite area 5C is copied to the operation control program area 5A. During the copying, the arithmetic operation can be continued by the program in the spare rewriting area 5C, so that the interruption of the operation control of the elevator can be prevented.

[0052]

As described above, according to the first invention of the present invention, an operation control program stored in the operation control program area of the program storage device is stored with an update program having contents to be updated. An external program transfer unit that outputs an update request is provided.When an update request is output from the external program transfer unit, it is determined whether or not the operation program in the operation control program area can be updated. Since the update program stored in the external program transfer means is transferred and stored, it is possible to avoid a service degradation such as stopping the operation of the car.

Further, in the second invention, when it is detected that the car is stopped, it is determined that the operation control program can be updated. Even if the calculation is temporarily stopped, the uncomfortable feeling given to the passengers can be eliminated.

Further, in the third invention, a spare area for rewriting for temporarily storing the operation control program is provided in the program storage device, and when it is determined that the operation control program can be updated, it is stored in the external program transfer means. The updated program is transferred to the spare area for rewriting and stored, so that even if all programs are not transferred while one update permission is issued, the normal program is not affected, Even after the update permission is interrupted, the operation of the elevator can be continued.

In the fourth invention, after the update program stored in the external program transfer device is all transferred to the spare rewrite area, the operation control program stored in the operation control program area is rewritten into the update program. During the rewriting, the operation using the operation control program stored in the operation control program area is stopped, and the operation is performed using the update program stored in the spare rewriting area, so that the operation control of the elevator is interrupted. Operation control can be performed without using a new program.

In the fifth invention, the address indicating the operation control program stored in the operation control program area is changed to a corresponding address in the spare rewriting area, and the update program stored in the external program transfer means is rewritten. After all of the data is transferred to the spare area, the operation control program stored in the operation control program area is rewritten into an update program.During this rewriting, the operation using the operation control program stored in the operation control program area is stopped. Since the calculation is performed using the update program stored in the spare area for rewriting indicated by the changed address, it is not necessary to prepare the program twice with the formal address and the temporary address. Smoothly.

Further, in the sixth invention, after all the update programs stored in the external program transfer means have been transferred to the spare rewrite area, calculation is performed using the update programs stored in the spare rewrite area. At the same time, when it is determined that the operation control program can be updated, the operation control program to be updated in the operation control program area is replaced with the update program. Interruption of elevator operation control can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a first embodiment of the present invention.

FIGS. 2A and 2B are diagrams showing the contents of a memory according to the first embodiment of the present invention, wherein FIG. 2A is a flash ROM and FIG.

FIG. 3 is a flowchart of a rewrite program input operation according to the first embodiment of the present invention.

FIG. 4 is an external program transfer operation flowchart according to the first embodiment of the present invention.

FIG. 5 is a diagram showing the contents of a memory according to a second embodiment of the present invention, wherein (A) is a flash ROM and (B) is a RAM.

FIG. 6 is an overall operation flowchart showing a second embodiment and a third embodiment of the present invention.

FIG. 7 is a main processing flowchart at the time of rewriting showing the second embodiment of the present invention.

FIG. 8 is a rewrite program input operation flowchart according to the second embodiment of the present invention.

FIG. 9 is a flowchart of a rewrite program copy / transfer operation according to the second embodiment of the present invention.

FIG. 10 is a view showing a third embodiment and a fourth embodiment of the present invention;
(A) is a flash ROM,
(B) RAM.

FIG. 11 is a view showing a third embodiment and a fourth embodiment of the present invention;
Is a flowchart showing a program data rewriting operation.

FIG. 12 is a view showing a third embodiment and a fourth embodiment of the present invention;
5 is an address change operation flowchart showing the operation shown in FIG.

FIG. 13 is a block diagram showing a conventional elevator control device.

[Explanation of symbols]

1 motor for elevator, 2 pulse generator, 3
External program transfer device, 4 control device, 5 program storage device, 5A operation control program storage region, 5B rewrite program storage region, 5C operation control program rewrite spare region, 6 program identification number storage device, 7
Microcomputer, 8 address changing means, 9
Pulse counting device, 11 RAM, S1 to S3 update permission determining means, S4, S6 program input means, S1
1 to S13 Program transfer means, S21, S24 to S
27, S31 to S34 program updating means, S41 to S34
S46 Update program use calculation means, S51 to S53
Address change means

 ──────────────────────────────────────────────────続 き Continued on the front page F-term (reference) 3F002 GA09 GB02 3F303 BA01 FA02 FA03

Claims (6)

[Claims] 1. An apparatus for storing an operation control program in an operation control program area of an electrically rewritable program storage device, wherein a computer controls an elevator using the stored operation control program. An external program transfer unit that is connected and stores an update program having contents to be updated with respect to the operation control program stored in the operation control program area, and that outputs an update request for the operation control program. Update permission determining means for determining whether or not the operation control program in the operation control program area can be updated when the update request is output from the means; and when the operation control program is determined to be updateable, the external program Download the update program stored in the transfer A control device for an elevator, comprising: a program input means for transferring the program to a program storage device for storage. 2. The elevator control device according to claim 1, wherein the update permission determining means determines that the update is possible when detecting that the elevator car is stopped. 3. A rewriting spare area for temporarily storing an operation control program is provided in the program storage device, and a program input means is provided to the external program transfer means when it is determined that the operation control program can be updated. 3. The elevator control device according to claim 1, wherein the stored update program is transferred to and stored in the spare area for rewriting. 4. The operation control program stored in the operation control program area is rewritten with the update program after all the update programs stored in the external program transfer device are transferred to the spare rewrite area. 3. A program updating means for stopping an operation using the operation control program stored in the operation control program area and performing an operation using the update program stored in the spare area for rewriting. Or the control device of the elevator according to claim 3. 5. An address change means for changing an address indicating an operation control program stored in an operation control program area to a corresponding address in a spare rewrite area, and an update program stored in an external program transfer means is used for rewriting. After all the data is transferred to the spare area, the operation control program stored in the operation control program area is rewritten to the update program.During this rewriting, the operation using the operation control program stored in the operation control program area is stopped. 4. An elevator according to claim 2, further comprising an update program use operation means for performing an operation using an update program stored in said spare area for rewriting indicated by said changed address. Control device. 6. After the update program stored in the external program transfer device is completely transferred to the spare rewrite area, the update program is operated using the update program stored in the spare rewrite area, and the update permission is determined. 4. The elevator according to claim 2, further comprising an update program use calculating means for replacing the operation control program to be updated in the operation control program area with the update program when the means determines that the operation can be updated. Control device.