JP2008265948A - Elevator monitoring system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable the renewal and inspection of a program of a main control device of an elevator by commands from a central monitoring device. <P>SOLUTION: The main control device 5 of the elevator applies a reset command a to a single stabilization circuit 31 after the program is renewed to a program storage memory 22 according to a program renewal command from the central monitoring device. The single stabilization circuit applies a reset signal b transferred to a low level state after maintaining a high level for a predetermined time from an input time of the reset command to a reset terminal 35 of the main control device. Accordingly, the main control device 5 of the elevator can be reset and reactivated for an own device. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an elevator monitoring system that remotely monitors the operation of an elevator via a communication line with a central monitoring device installed in a remote place.

  In an elevator system installed in a building or the like, a car that moves up and down in a hoistway that passes from the basement of the building to the top floor is stored, and a hall call registration device or car installed in the elevator hall on each floor is stored. The car is moved to the floor designated by the “call” registered by the user with the car call registration device provided in the car.

  The operation of such an elevator is controlled by a main control device configured by an information processing device such as a computer incorporated in the elevator system. This main controller is generally installed in the machine room above the hoistway. The main control device assigns each call described above to the car according to the control program stored in its own storage unit, and moves the car to the designated floor.

  Such a main control device constantly monitors the operation state of the elevator in addition to the basic operation for controlling the operation of the elevator according to the control program described above. When a malfunction or abnormal operation is detected, the main control device is called. A failure or abnormality is notified to a central monitoring apparatus connected via a communication line such as a network. The supervisor of the central monitoring device that has received the failure or abnormality dispatches maintenance personnel to the elevator in which the failure or abnormality has occurred.

  In this way, by standardizing control operations and monitoring operations for elevators, control programs can be standardized, system design costs can be reduced, and time from receipt of elevator systems to delivery (delivery time) ) Can be shortened.

  On the other hand, in recent years, in elevator systems, there are various specifications for elevator control operations required by customers for building owners and elevator development manufacturers such as users who actually use each elevator. Therefore, even if the control program is standardized as described above, there may be cases where the addition of the specifications for each customer may cause the program to deviate from the standardization of the program. It will be.

  In addition, when new functions are announced by updating the elevator control program, there are many cases in which the existing elevator system goes back several generations and a similar new function is required from the customer. In such a case, the maintenance coordinator of the elevator manufacturer or the elevator management company carries the control program to the place where the elevator system is installed, and updates the control program stored in the storage unit of the elevator main controller. I do.

Specifically, the maintenance coordinator manually stops operation of the elevator, erases (clears) the old control program written in the storage unit of the main controller, and then starts a new control program. Is written using, for example, a personal computer (installation). Thereafter, the reset switch of the main control device is pressed to reset the main control device itself and shift to the initial state. Thereafter, the start switch is turned on to restart (restart) the main control device in a state where the control program has been updated.
JP-A-10-316324 JP 2000-222184 A

  However, for the maintenance coordinator, the above-described control program update work at the location of each elevator is accompanied by a great deal of time and complexity. In recent years, machine roomless elevators with a main controller installed in the hoistway have become the mainstream in recent years, so maintenance coordinators must update the program in the hoistway. Will be used.

  For this reason, it is conceivable to improve work efficiency by updating the control program stored in the storage unit of the main control device online via the communication line from the central monitoring device. However, an information processing apparatus incorporating a general computer does not have a function of shifting itself to a reset state, releasing the reset state, and restarting (restarting). Therefore, at present, the control program for the main control device cannot be easily updated online from the central monitoring device.

  In Patent Document 1, when a failure of an elevator is detected by a central monitoring device that monitors the state of an elevator far away via a communication line, a supervisor of the central monitoring device notifies the main controller of the elevator. It is possible to send a reset command via the communication line, but added a function to control the reset command input on the elevator side so that the main controller does not shift to the reset state during the operation of the elevator Technology is disclosed.

  Further, Patent Document 2 describes that an application program for an elevator monitoring device at a remote location is changed from the center device, but does not disclose a specific procedure for realizing the procedure.

  Further, the control program stored in the program memory in the storage unit inside the main controller is frequently accessed over a long period of time when the elevator is operating normally. As a result, the problem that each program data constituting the stored control program is garbled can be assumed very rarely.

  As a specific example, when the program memory is formed of a flash memory, the data is garbled due to the charge gain phenomenon of the flash memory. In such a case, the elevator main controller is erroneous from the program memory. There is a concern that the elevator will malfunction because the program data is read.

  The present invention has been made in view of such circumstances, and by adding a function of resetting the self-device and releasing the reset state and restarting the main control device itself that controls the operation of the elevator, To provide an elevator monitoring system capable of updating a control program stored in a main control device of the elevator from a remote central monitoring device and easily renewing an elevator installed in the past to an elevator having a state-of-the-art function. With the goal.

  In order to solve the above-described problems, the present invention provides a main control device that controls the operation of an elevator using a stored program, and is remotely located with respect to the elevator, and monitors the state of the elevator via a communication line. In the elevator monitoring system including the central monitoring device, the main controller shifts to the reset state when the applied reset signal shifts from low level to high level, and the applied reset signal is high. A reset terminal that restarts itself when it changes from level to low level, program update means that updates a stored program in response to a program update command from the central monitoring device, and a reset command after the program is updated by the program update means The reset command output means for outputting the The reset signal shifts to the low level state after maintaining a predetermined time high level from the input time of Tsu bets command and a monostable circuit to be sent to the reset terminal.

  In the elevator monitoring system configured as described above, the main control device that controls the operation of the elevator updates the program stored in its own storage unit in response to a program update command from the central monitoring device. When the program update is complete, a reset command is output. This reset command is converted by the monostable circuit into a reset signal that shifts to the low level state after maintaining the high level for a predetermined time from the input time of the reset command, and is applied to the reset terminal of the main controller itself.

  As a result, after updating the program, the main control device resets itself to a reset state, and after a predetermined time, the reset state is released and restarted. Therefore, the control program stored in the main control device of the elevator can be easily updated from the central monitoring device far away from the elevator, and the elevator installed in the past can be easily renewed to an elevator having the latest functions.

  In another aspect of the elevator monitoring system, the main controller stores the same program in the program execution memory and the program storage memory, and controls the elevator according to the program stored in the program execution memory in the normal state. Means for periodically comparing each data of the program stored in the program execution memory regularly with each data of the program stored in the program storage memory, and this program data comparison Second reset command output means for outputting a reset command when there is mismatched data, and program rewrite means for newly writing a program stored in the program storage memory to the program execution memory after restarting And.

  In the elevator monitoring system configured as described above, each data of the program stored in the program execution memory is compared with each data of the program stored in the program storage memory. Since the program is restarted after being reset once, the program stored in the program storage memory is newly written in the program execution memory in the initial processing after the restart, so that the occurrence of a program error is suppressed.

  In the elevator monitoring system of another invention, the main control device includes a program update prohibition period setting means for setting a program update prohibition period including a movement period of the elevator car, and a program update instruction time from the central monitoring apparatus. Includes a program update prohibition information return means for returning program update prohibition information to the central monitoring apparatus when the program update prohibition period starts.

  In the elevator monitoring system configured as described above, for example, in the execution period of the control operation such as during the movement period of the elevator car, even if a program update command is input from the central monitoring device, the program update is performed. Is not executed.

  In another aspect of the elevator monitoring system, a plurality of lower-level control devices including a car call registration device and a hall call registration device are provided, which are connected to the main control device via signal lines.

  Then, when a program update instruction designating a subordinate control apparatus is input, the main control apparatus returns program update prohibition information to the central monitoring apparatus when the time of the program update instruction enters the program update prohibition period. A program update prohibition information return means, and a transfer means for transferring a program update instruction for transferring the input program update instruction to a designated lower-order control device when the time of the program update instruction does not fall within the program update prohibition period; Have

  In another aspect of the elevator monitoring system, each lower control apparatus, when an applied reset signal shifts from a low level to a high level, the self apparatus shifts to a reset state, and the applied reset signal is A reset terminal that restarts itself when it changes from a high level to a low level, a program update means that unconditionally updates a stored program based on a program update instruction transferred from the main control device, and a program A reset command output means for outputting a reset command after updating the program by the updating means; and a reset signal that is input to the reset command and maintains a high level for a predetermined time from the input time of the reset command and then shifts to a low level state. And a monostable circuit for sending to

  In the elevator monitoring system configured as described above, when a program update instruction designating a lower-level control device is input from the central monitoring device to the main control device, updating to the central monitoring device is prohibited when the elevator is in operation or the like. Is returned, and when the elevator is not operating, a program update instruction is transmitted to the lower-level control device, and the program of the lower-level control device is updated.

  Further, in an elevator monitoring system according to another invention, the elevator monitoring system is disposed in proximity to the main control device, monitors the operation of the main control device, transmits the monitoring result to the central monitoring device via a communication line, and from the central processing unit. A remote monitoring device for transferring the program update instruction to the main control device is provided.

  According to the present invention, the control program stored in the main control device of the elevator can be updated from the central monitoring device far from the elevator, and the elevator installed in the past can be easily renewed to an elevator having the latest functions. it can.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a schematic diagram showing an elevator system to which an elevator monitoring system according to an embodiment of the present invention is applied. In a machine room 2 on the upper side of the hoistway 1 penetrating from the first floor to the top floor of the building, a main controller 5 comprising an hoisting machine 3, a drive unit 4, and an information processing device such as a computer is provided.

  Further, a remote monitoring device 8 for monitoring the control state of the main control device 5 with respect to the elevator via the transmission line 7 is provided in the vicinity of the main control device 5. A central monitoring device 10 is connected to the remote monitoring device 8 via a communication line 9 such as a public telephone network.

  A hoisting machine 3 in the machine room 2 is hung by a main rope 13 having a car 11 attached to one end and a counterweight 12 attached to the other end. Then, the car 11 moves up and down in the hoistway 1 by rotating the hoisting machine 3 with the drive unit 4. The above is the description of the elevator system provided with the machine room 2, but the contents of the present embodiment are similarly applied to an elevator system provided with the main controller 5 and the remote monitoring device 8 in the hoistway 1.

  The car 11 is provided with a door control device 15 and a car call registration device 16 for controlling opening and closing of the car door 14, and the door control device 15 and the car call registration device 16 are connected to the main control device 5 through a transmission line 17. Yes. A door 18 and a hall call registration device 19 are attached to the elevator hall on each floor of the building. The hall call registration device 19 on each floor is connected to the main control device 5 through a transmission line 20.

  The “car call” registered in the car call registration device 16 and the “landing call” registered in the hall call registration device 19 on each floor are input to the main control device 5 via the transmission lines 17 and 20. In a normal state, main controller 5 sends a command to drive unit 4 to move car 11 to the floor designated by the car call and the hall call. The drive unit 4 drives the hoisting machine 3 to move the car 11 to the designated floor.

  For example, the main controller 5 including an information processing device such as a computer is configured as shown in FIG.

  A program storage memory 22 that stores various control programs for controlling the operation of the elevator to the CPU 21 that gives commands such as communication control and input / output control for the entire apparatus, and is used when actually controlling the operation of the elevator. A program execution memory 23 for storing the control program, a data control memory 24 necessary for performing calculations during the execution of the program and temporarily saving calculation data, a communication interface 25, and the like are connected.

  The communication interface 25 exchanges information with the remote monitoring device 8, the car call registration device 16, the door control device 15, and each landing call registration device 19 through the transmission lines 7, 17, and 20.

  As the CPU 21 incorporated in the main controller 5, a 32-bit control CPU is used. As the program storage memory 22, in the main controller 5, a non-volatile memory having a capacity of about 4 MB is generally used externally to the CPU 21. Recently, a flash memory is generally used. The program storage memory 22 stores and holds the various control programs described above as reference control programs, and is not used for actual elevator operation control. Therefore, the access frequency to the program storage memory 22 formed by this flash memory is low.

  On the other hand, the program execution memory 23 is a volatile memory that can be repeatedly read and written. In this embodiment, an SRAM of about 4 Mbits is used, and a program is transferred from the program storage memory 22 when the main controller 5 is started. After the transfer, the CPU 21 reads the control program from the program execution memory 23 and controls the operation of the elevator.

  The data control memory 24 incorporated in the main control device 5 is generally externally attached to the CPU 21, is a volatile memory having a capacity of about 4 MB, and SRAM is generally employed.

  Further, in the main control device 5, a runaway monitoring circuit 26, a reset switch 27, a power supply monitoring circuit 28, a reset circuit 29, and a restart circuit 30 are provided independently of the CPU 21. Further, in the restart circuit 30, a monostable circuit 31 composed of a one-shot multivibrator and a reset prohibition signal generation circuit 32 are provided.

The runaway monitoring circuit 26 monitors whether or not the control program read from the program execution memory 23 by the CPU 21 of the main controller 5 is operating normally. As shown in FIG. A level reset signal r ₁ is output.

The reset switch 27 is a switch for the operator to manually reset and restart the main control device 5, and when the switch is pressed by the operator, the pulse waveform has a high level only for the pressed time. The reset signal r ₂ is output to the reset circuit 29. That is, at the rise of the pulse waveform reset signal r _{2 from} the low level to the high level, the main controller 5 is shifted to the reset state, and the pulse waveform reset signal r ₂ falls from the high level to the low level. This is a switch for restarting the main control device 5.

Further, the power supply monitoring circuit 28 outputs a reset signal r ₃ to the reset circuit 29 when the power supply voltage of the main control device 5 decreases the operation guarantee voltage. In order to cancel the reset state by the reset signal r ₁ , the operator needs to operate the reset switch 27.

As shown in FIG. 3, the monostable circuit 31 in the restart circuit 30 detects the edge of the signal of the reset command a output from the CPU 21, and the main controller 5 shifts from the idling state to the completely reset state. A reset b that maintains the minimum required predetermined reset time _Tr high level and then shifts to the low level is sent to the restart permission determination circuit 33.

  The reset prohibition signal generation circuit 32 detects the load signal of the elevator car 11 and detects a passenger in the car, or when the car 11 is moving, that is, the elevator car position data changes. In other cases, such as when a motor start command is output to the elevator drive unit 4, a state in which the elevator is substantially operating is detected, and a high-level reset prohibition signal c is supplied to the restart permission determination circuit 33 and This is sent to the reset prohibition terminal 34 of the CPU 21.

  As a result, the CPU 21 does not output the reset command a to the monostable circuit 31 while the high level reset prohibition signal c is applied to the reset prohibition terminal 34. A more specific method of detecting a reset prohibition state in the reset prohibition signal generation circuit 32 is described in Patent Document 1 described above.

  As shown in FIG. 3, the restart permission determination circuit 33 is configured such that the high level period of the reset signal b output from the monostable circuit 31 is the high level period of the reset prohibition signal c output from the reset prohibition signal generation circuit 32. After confirming that there is no overlap, the reset signal b is sent to the reset circuit 29 as a new reset signal d. If there is an overlapping portion, the overlapping period in the high level period of the reset signal d is deleted.

As shown in FIG. 3, the reset circuit 29 sets the reset signal r ₁ to a high level from the rising time of the reset signal r _{1 to} the falling time of the reset signal r ₂ and sets the output period of the reset signal d to a high level. A signal e is generated and sent to the reset terminal 35 of the CPU 21.

The CPU 21 shifts to the reset state at the rising edge (time t ₁ , t ₅ ) of the reset signal e applied to the reset terminal 35 and releases the reset state at the falling edge (time t ₂ , t ₆ ). As a result, the CPU 21 is restarted.

  When the CPU 21 is restarted, the CPU 21 executes initial processing such as rewriting the control program stored in the program storage memory 22 which is a nonvolatile memory in the program execution memory 23 which is a volatile memory.

In the main controller 5 having such a configuration, the CPU 21 responds to the control program stored in the program storage memory 22 during the period from time t ₃ to time t ₄ in response to the program update command from the central monitoring device 10. The update process is performed, and thereafter, the reset command a is sent to the monostable circuit 31 at time t ₅ excluding the output period of the reset prohibition signal c.

  FIG. 4 is a block diagram showing a schematic configuration of a car call registration device 16 and a hall call registration device 19 as lower control devices connected to the main control device 5 via transmission lines 17 and 20. The same parts as those of the main controller 5 in FIG. 2 are denoted by the same reference numerals, and detailed description of the overlapping parts is omitted.

  In the car call registration device 16 and the hall call registration device 19, in addition to the memories 22, 23, and 24 described above, the display unit 36 that displays the current position (floor) of the car 11 and the elevator A button 37 and the like operated by the user are connected.

Further, in the car call registration device 16 and the hall call registration device 19, the reset prohibition signal generation circuit 32 is removed. Therefore, the monostable circuit 31 in the restart circuit 30 detects the edge of the signal of the reset command a output from the CPU 21 and is the minimum necessary for the main controller 5 to completely shift from the idling state to the reset state. The reset signal b that maintains the high level for the predetermined reset time _Tr and then returns to the low level is sent directly to the reset circuit 29.

  That is, in the car call registration device 16 and the hall call registration device 19, the CPU 21 performs an update process on the control program stored in the program storage memory 22 without determining whether or not the elevator is operating. Thereafter, a reset instruction signal a is sent to the monostable circuit 31.

  Note that the door control device 15 as the lower control device also conforms to the configuration of the car call registration device 16 and the hall call registration device 19. Further, the configuration of the remote monitoring device 8 conforms to the configuration of the main control device 5. However, the reset prohibition signal generation circuit 32 is not provided.

  FIG. 5 shows a communication line 9 and transmission lines 7, 17, 20 between the central monitoring device 10, the remote monitoring device 8, the main control device 5, the car call registration device 15, the hall call registration device 19, and the door control device 15. It is a frame block diagram of the transmission frame 38 transmitted / received via it. The transmission frame 38 includes a header 39a, an instruction code 39b, a target device ID 39c, transfer data 39d, and an end code 39e from the top.

  A destination address (DA) and a source address (SA) are set in the header 39a at the head, and an instruction code 39b is a 1-byte instruction that instructs the target device such as a program update instruction, a reset instruction, and a program check instruction. It is coded with a degree of data.

  The target device ID 39c identifies the device that is the target of the instruction code 39b. The transfer data 39d corresponds to a program to be updated in the case of a program update command. If there is no transfer data with only an instruction, dummy data of about 1 to 4 bytes determined in advance such as “00” is output. The end code 39e is a code indicating that the transmission frame 38 has ended.

  In the elevator monitoring system having such a configuration, the remote monitoring device 8 and the main control when the transmission frame 38 shown in FIG. 5 is output from the central monitoring device 10 onto the communication line 9 and the transmission lines 7, 17 and 19. The operations of the device 5, the car call registration device 15, the hall call registration device 19, and the door control device 15 will be described.

  The central monitoring apparatus 10 outputs a program update command in accordance with an instruction operation by the supervisor, and also outputs a program inspection command at a predetermined fixed period.

  The remote monitoring 8 received from the central monitoring device 10 via the new line 9 determines whether or not the transmission frame 38 is addressed to itself from the header 39 of the transmission frame 38. In the case of the transmission frame 38 addressed to itself, a command indicated by the transmission frame 38 is executed. If the transmission frame 38 is not addressed to itself, this transmission frame 38 is output to the transmission line 7.

  FIG. 6 is a flowchart showing the operation of the main controller 5 that has received the transmission frame 38 via the transmission line 7.

  When the communication frame 25 receives the transmission frame 38 via the transmission line 7 (step S1), when the destination (destination address DA) of the header 39a is addressed to its own device (S2), the instruction code 39b of the transmission frame 38 is set. Read (S3). If the read instruction code 39b is an update of the control program (S4), it is confirmed that the target device ID 39c is the own device, and then whether or not the high level reset prohibition signal c is applied to the reset prohibition terminal 34 of the CPU 21. (S5).

  When the reset prohibition signal c is not applied to the reset prohibition terminal 34 (S6), the update control program of the transmission data 39d of the transmission frame 38 is read (S7) and overwritten and saved in the program storage memory 22. That is, the control program stored in the program storage memory 22 is updated (S8). When the update of the control program is completed, a reset command a is sent to the monostable circuit 31 of the restart circuit 30 (S9).

  When the high level reset prohibition signal c is applied to the reset prohibition terminal 34 (S6), a transmission frame 38 including a message “program update prohibition” is created and transmitted to the central monitoring apparatus 10 (S10).

  It is also possible to update the control program after waiting for the reset prohibition signal c to be released.

  In S11, when the instruction code 38b of the received transmission frame 38 is a program check, each program data of the control program stored in the program execution memory 23 matches each program data of the control program stored in the program storage memory 22. Whether or not to do so is sequentially compared (S12). Then, if there is inconsistent program data (S13), if the reset prohibition signal c is applied to the reset prohibition terminal 34 (S14), it waits for the reset prohibition signal c to be released (S15).

  If the reset prohibition signal c is not applied to the reset prohibition terminal 34 (S14), a reset command a is sent to the monostable circuit 31 of the restart circuit 30 (S16).

  If the destination of the transmission frame 38 is not addressed to itself (main control device 5) in S2, but is directed to the lower level control device in S17 of FIG. 7, the instruction code 39b of the transmission frame 38 is read (S19). If the read instruction code 39b is a control program update (S20) or a control program check (S21), it is checked whether the reset prohibition signal c is applied to the reset prohibition terminal 34 (S22). .

  When the reset prohibition signal c is applied to the reset prohibition terminal 34, the transmission frame 38 including the message “program update or inspection cannot be executed” is created and transmitted to the central monitoring apparatus 10 (S23).

  When the reset prohibition signal c is not applied to the reset prohibition terminal 34 (S22), the transmission frame 38 is transferred to the lower level control device designated by the destination (S24).

  Also, when the read instruction code 39b is other than the control program update or the control program inspection, the transmission frame 38 is transferred to the lower-level control device designated by the destination (S24).

  Furthermore, in S18, when the destination of the transmission frame 38 is the central monitoring apparatus 10, it is the transmission frame 38 from the lower control apparatus to the central monitoring apparatus 10, so that it is output to the transmission line 7.

  The main control device 5 can reset the self-device to a reset state by sending a reset command a to the monostable circuit 31 of the restart circuit 30 in the device, and the reset state is released after a predetermined time and restarted. The As described above, main controller 5 writes the updated control program in program storage memory 22, which is a nonvolatile memory, into program execution memory 23, which is a volatile memory, at the time of restart.

  FIG. 8 is a flowchart showing the operation of the lower level control devices such as the car call registration device 15, the hall call registration device 19, and the door control device 15.

  When the transmission frame 38 is received from the main controller 5 via the transmission lines 17 and 20 to the communication interface 25 (step Q1), the instruction code 39b of the transmission frame 38 is read (Q2). When the read instruction code 39b is an update of the control program (Q3), the update control program of the transmission data 39d of the transmission frame 38 is read and overwritten and saved in the program storage memory 22 (Q4). Then, the reset command a is sent to the monostable circuit 31 of the restart circuit 30 (Q5).

  When the instruction code 38b of the received transmission frame 38 is a program check (Q6), each program data of the control program stored in the program execution memory 23 matches each program data of the control program stored in the program storage memory 22. Are sequentially compared (Q7). If inconsistent program data exists (Q8), a reset command aa is sent to the monostable circuit 31 of the restart circuit 30 (Q9).

  In this way, in the lower level control device, since the main control device 5 receives the transmission frame 38 under the condition that it has been confirmed that the elevator is not in operation, the CPU 21 determines whether the elevator is in operation. Since the program update process and the program inspection process are performed without determining whether or not, the program update process and the program inspection process can be efficiently performed. In addition, the configuration of lower level control devices such as the car call registration device 15, the hall call registration device 19, and the door control device 15 can be simplified.

  In addition, this invention is not limited to embodiment mentioned above. For example, it is possible to perform program verification sequentially during program execution.

1 is a schematic configuration diagram of an elevator system to which an elevator monitoring system according to an embodiment of the present invention is applied. Block configuration diagram of the main control device incorporated in the elevator monitoring system of the same embodiment Time chart showing the operation of the main controller incorporated in the elevator monitoring system of the same embodiment The block block diagram of the low-order control apparatus integrated in the elevator monitoring system of the embodiment Frame configuration diagram of a transmission frame used in the elevator monitoring system of the embodiment Flow chart showing the operation of the main controller incorporated in the elevator monitoring system of the same embodiment Flowchart showing the operation of the main controller incorporated in the elevator monitoring system of the same embodiment The flowchart which shows operation | movement of the low-order control apparatus integrated in the elevator monitoring system of the embodiment

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Hoistway, 2 ... Machine room, 3 ... Hoisting machine, 4 ... Drive part, 5 ... Main controller, 7, 17, 20 ... Transmission line, 8 ... Remote monitoring device, 9 ... Communication line, 10 ... Center Monitoring device, 11 ... car, 15 ... door control device, 16 ... car call registration device, 19 ... landing call registration device, 21 ... CPU, 22 ... program storage memory, 23 ... program execution memory, 25 ... communication interface, 26 ... Runaway monitoring circuit, 27 ... reset switch, 28 ... power supply monitoring circuit, 29 ... reset circuit, 30 ... restart circuit, 31 ... monostable circuit, 32 ... reset prohibition signal generation circuit, 33 ... restart permission judgment circuit, 34 ... Reset prohibition signal 35 ... Reset terminal 36 ... Display unit 37 ... Button 38 ... Transmission frame

Claims (6)

Elevator monitoring comprising a main control device that controls the operation of the elevator using a stored program, and a central monitoring device that is remotely located with respect to the elevator and monitors the state of the elevator via a communication line In the system,
The main controller is
When the applied reset signal transitions from a low level to a high level, the self apparatus transitions to a reset state, and when the applied reset signal transitions from a high level to a low level, the reset terminal that the self apparatus restarts,
Program update means for updating the stored program in response to a program update command from the central monitoring device;
Reset command output means for outputting a reset command after the program update by the program update means;
An elevator comprising: a monostable circuit that receives the reset command and sends a reset signal that shifts to a low level state after maintaining the high level for a predetermined time from the input time of the reset command to the reset terminal. Monitoring system. The main controller is
Means for storing the same program in a program execution memory and a program storage memory, and, in a normal state, controlling the elevator according to the program stored in the program execution memory;
Program data comparison means for periodically comparing each data of the program stored in the program execution memory regularly with each data of the program stored in the program storage memory;
A second reset command output means for outputting the reset command when there is mismatched data in the program data comparison means;
2. The elevator monitoring system according to claim 1, further comprising a program rewriting means for newly writing a program stored in the program storage memory into the program execution memory after restarting. The main controller is
Program update prohibition period setting means for setting a program update prohibition period including a movement period of the elevator car;
Program update prohibition information return means for returning program update prohibition information to the central monitoring apparatus when the time of the program update instruction from the central monitoring apparatus enters the program update prohibition period. The elevator monitoring system according to claim 1 or 2. A plurality of subordinate control devices including a car call registration device and a hall call registration device are connected to the main control device through signal lines, respectively.
The main controller is
When a program update instruction designating the subordinate control device is input, program update prohibition information for returning program update prohibition information to the central monitoring device when the time of the program update instruction enters the program update prohibition period Reply means,
Transfer means for transferring a program update instruction for transferring the input program update instruction to a designated lower-order control device when the time of the program update instruction does not fall within the program update prohibition period. The elevator monitoring system according to claim 3. Each of the subordinate control devices is
When the applied reset signal transitions from a low level to a high level, the self apparatus transitions to a reset state, and when the applied reset signal transitions from a high level to a low level, the reset terminal that the self apparatus restarts,
Program update means for unconditionally executing the update of the stored program based on the program update instruction transferred from the main control device;
Reset command output means for outputting a reset command after the program update by the program update means;
And a monostable circuit that sends a reset signal that shifts to a low level state after maintaining the high level for a predetermined time from the input time of the reset command to the reset terminal. Item 5. The elevator monitoring system according to Item 4.   The main control device is arranged close to the main control device, monitors the operation of the main control device, transmits a monitoring result to the central monitoring device via the communication line, and sends a program update instruction from the central processing device to the main control device. 6. The elevator monitoring system according to any one of claims 1 to 5, further comprising a remote monitoring device that transfers the device.

Images