JP2009215001A - Remote updating system of elevator control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To automatically restore an old elevator control program when updating the elevator control program is unsuccessful. <P>SOLUTION: When a detection part 11b detects failing in the update of the elevator control program, an updating part 11a of an exterior monitoring terminal 11 controls a restoring part 12b of an elevator control panel 12 to restore the old elevator control program. Under control of the updating part 11a of the exterior monitoring terminal 11, the restoring part 12b of the elevator control panel 12 restores the old elevator control program from updated new elevator control program stored in a storage part 12a and differential data between the updated new elevator control program and the old elevator control program before the update. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a remote update system for an elevator control program, and more particularly to a remote update system for an elevator control program that updates an elevator control program by remote operation and automatically restores an old elevator control program when the update fails.

  Update of the program that controls the elevator is performed by the maintenance staff on the site with the storage medium storing the update program, and the elevator control panel is directly installed in the machine room or hoistway where the elevator control panel is installed. It is done by operating.

  FIG. 10 is a diagram illustrating a configuration example of a conventional elevator control panel.

  An elevator control board 101 is installed in the elevator control panel 100. The elevator control board 101 is provided with a CPU (Central Processing Unit) 102 that controls the elevator, an F-ROM (Flash Read Only Memory) 103 that stores a program executed by the CPU 102, and the like. The program executed by the CPU 102 is different for each elevator model and each elevator. In addition, the program is updated as needed by upgrading the program due to a defect in the program or by adding a function requested by the elevator manager.

  When the program is updated, the program transfer switch 104 is operated to transfer the update program stored in the program storage medium 105 to the F-ROM 103. At this time, the program of the elevator control board 101 stored in the F-ROM 103 is backed up to the backup storage medium 106 in conjunction with the operation of the program transfer switch 104. The program backed up in the storage medium 106 is used to return the program of the elevator control board 101 to the original program when the elevator cannot be normally operated by the new program transferred to the F-ROM 103. .

Various techniques for an elevator control system have been proposed, and Patent Document 1 proposes a technique for restoring maintenance data such as failure history and abnormality history when the maintenance data is lost or destroyed.
JP 2006-248625 A

  However, in the invention disclosed in Patent Document 1, it is possible to restore more accurate maintenance data when data corruption is detected, but the following points are sufficiently considered. I can't say.

  That is, in the case of the conventional elevator control panel 100 shown in FIG. 10, when a program has to be updated due to a malfunction of the program or a function added by the elevator manager's request, it is necessary for the maintenance staff to go to the site each time. There was a problem that there was a big burden. Further, if the program is updated during the periodic inspection, there is a problem that the work time required for the inspection increases.

  In recent years, with the spread of the Internet, in information devices such as personal computers, user operations are triggered to update programs via the Internet. However, since elevators are infrastructure facilities, Even if the update is performed, there is a problem that a secondary problem occurs that the operation of the elevator is stopped when the update of the program fails.

  The present invention has been made in view of such a situation, and an object of the present invention is to automatically restore an old elevator control program when the update of the elevator control program fails, and minimize the elevator stop time. The present invention is to provide a remote update system for an elevator control program capable of continuing an elevator operation service.

  According to the first aspect of the present invention, there is provided a remote update system for an elevator control program having an elevator control panel and an external monitoring terminal for remotely monitoring the elevator control panel. An update means for updating the program, a detection means for detecting a failure in updating the elevator control program, and a restoration means for restoring the old elevator control program before the update when the detection means detects an update failure.

  According to the present invention, the elevator control program is updated remotely, but when the update failure is detected, the old elevator control program is automatically restored, so that the elevator stop time is minimized. This makes it possible to continue the elevator operation service.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

(First embodiment)
FIG. 1 is a diagram illustrating a configuration example of a remote update system for an elevator control program according to the first embodiment. The remote control system for an elevator control program includes a machine room 10 that is an elevator machine room, a monitoring center 20, and machine rooms 30a to 30d that are machine rooms of other elevators. The external monitoring terminal 11 installed in the machine room 10, the device installed in the monitoring center 20, and the external monitoring terminals 31 a to 31 d installed in the machine rooms 30 a to 30 d are connected to each other via the public network 40. Has been.

  An external monitoring terminal 11 and an elevator control panel 12 are installed in the machine room 10, and external monitoring terminals 31a to 31d and elevator control panels 32a to 32d are installed in the machine rooms 30a to 30d, respectively. Hereinafter, when it is not necessary to distinguish the machine rooms 30a to 30d individually, they are simply referred to as a machine room 30. Similarly, when the external monitoring terminals 31a to 31d do not need to be individually distinguished, they are simply referred to as the external monitoring terminal 31, and when the elevator control panels 32a to 32d do not need to be individually distinguished, they are referred to as the elevator control board 32.

  Note that the external monitoring terminal 11 and the elevator control panel 12 may be installed not only in the machine room 10 but also in a hoistway. The number of machine rooms 30 is arbitrary, and is not limited to four as shown in FIG.

  The external monitoring terminal 11 updates the elevator control program stored in the storage unit 12 a in the elevator control panel 12 based on a command from the monitoring center 20. When the external monitoring terminal 11 detects a failure in updating the elevator control program, the external monitoring terminal 11 controls the elevator control panel 12 so as to restore the old elevator control program before the update.

  In addition, the external monitoring terminal 11 transmits a signal representing information that failed to be updated to the monitoring center 20 via the public network 40 and the same elevator control program as the elevator control program that failed to be updated in the elevator control panel 12. Is sent to the external monitoring terminal 31 for stopping the updating process.

  The storage unit 12a provided in the elevator control panel 12 serves as storage means for storing a new elevator control program after the update and difference data representing a difference between the new elevator control program after the update and the old elevator control program before the update. Function.

  If the update fails, the elevator control panel 12 restores the old elevator control program from the new elevator control program and the difference data stored in the storage unit 12a under the control of the external monitoring terminal 11.

  The monitoring center 20 is located away from the place where the elevator is installed, and is stored in the storage unit 12a in the elevator control panel 12 by remotely controlling the external monitoring terminal 11 via the public line network 40. The elevator control program is updated.

  When the external monitoring terminal 31 receives the update stop signal transmitted from the external monitoring terminal 11 via the public line network 40, the external monitoring terminal 31 does not update the elevator control program stored in the elevator control panel 32. . As a result, the external monitoring terminal 31 does not have to perform an update process that is known in advance to fail.

  FIG. 2 is a block diagram illustrating a functional configuration example of the external monitoring terminal 11 and the elevator control panel 12 according to the first embodiment.

  The updating unit 11 a of the external monitoring terminal 11 functions as an updating unit that updates the elevator control program stored in the storage unit 12 a of the elevator control panel 12 based on a command from the monitoring center 20.

  When updating the elevator control program because a new elevator control program has been transmitted from the monitoring center 20, the update unit 11a reads the elevator control program before update stored in the storage unit 12a and uses it for the update. The difference between the updated elevator control program (new elevator control program) and the pre-update elevator control program (old elevator control program) is calculated, and the difference data representing the calculated difference and the updated new elevator control program are stored in the storage unit. 12a is stored.

  For example, when the detection unit 11b detects that the update of the elevator control program has failed, the update unit 11a controls the restoration unit 12b of the elevator control panel 12 to restore the old elevator control program. The detection unit 11b notifies the detection result of the update status of the elevator control program. At this time, the update unit 11a transmits a signal representing information that failed to be updated to the monitoring center 20 via the communication unit 11c, and is updated using the same elevator control program as the elevator control program that failed to be updated. An update stop signal for stopping the processing is transmitted to another external monitoring terminal 31.

  When the detecting unit 11b detects that the restoration of the old elevator control program is successful, the updating unit 11a controls the restoration unit 12b of the elevator control panel 12 to restart the old elevator control program. When the restart is successful, the update unit 11a transmits an automatic adjustment operation signal to the storage unit 12a of the elevator control panel 12, and re-updates the job data by restoring the old elevator control program. In other words, property-specific job data is set in the elevator, and automatic adjustment operation is performed to reset job data that has been changed by applying a new elevator control program to job data for the old elevator control program. Is done.

  In addition, the update unit 11a sends a dispatch request signal, which is a signal requesting that a maintenance engineer is dispatched to the machine room 10, and a data transmission request signal, which is a signal requesting retransmission of an old elevator control program, to the monitoring center 20. The display control unit 12c of the elevator control panel 12 transmits a signal indicating that transmission is being performed, an update or automatic adjustment operation is being performed, and a display end signal during adjustment that is an instruction to end the display indicating that adjustment is being performed. Or output to.

  The detection unit 11b functions as a detection unit that monitors the update status of the elevator control program in the storage unit 12a and the restoration status of the old elevator control program, and monitors the restart status of the restoration unit 12b. The detection unit 11b supplies detection results representing the update status, the restoration status, and the restart status to the update unit 11a.

  The communication unit 11 c includes a LAN (Local Area Network) card, a modem, and the like, and functions as a communication unit that communicates with the monitoring center 20 and the external monitoring terminal 31 via the public line network 40.

  The restoration unit 12b of the elevator control panel 12 is older than the updated new elevator control program stored in the storage unit 12a and the updated new elevator control program under the control of the update unit 11a of the external monitoring terminal 11. It functions as a restoring means for restoring the old elevator control program from the difference data of the elevator control program. The restoration unit 12b calculates the time required for restoration, and supplies the calculated restoration time to the display control unit 12c.

  The restoration unit 12b also restarts the elevator control program stored in the storage unit 12a under the control of the update unit 11a of the external monitoring terminal 11.

  The display control unit 12c displays a message such as “during automatic maintenance” based on a signal indicating that updating or automatic adjustment operation is being performed from the updating unit 11a, or performs maintenance based on the restoration time from the restoration unit 12b. It functions as a display control means for displaying the remaining time required for the vehicle on a landing indicator (not shown). Further, the display control unit 12c ends the display of the landing indicator when the adjusting display end signal is transmitted from the update unit 11a.

  Next, each process of the external monitoring terminal 11 and the elevator control panel 12 is demonstrated with reference to the flowchart of FIG. This process is started when the update unit 11a of the external monitoring terminal 11 executes an update process of the elevator control program stored in the storage unit 12a of the elevator control panel 12. First, the process of the external monitoring terminal 11 will be described.

  In step S1, the detection unit 11b transmits and receives a program update monitoring signal to and from the storage unit 12a, and monitors the update status of the elevator control program. The program update monitoring signal returned from the storage unit 12a that has received the program update monitoring signal transmitted from the detection unit 11b includes information indicating the update status.

  In step S2, the detection unit 11b determines whether or not the update has failed. When detecting that the update has failed, the detection unit 11b supplies the detection unit 11a with a detection result indicating the update failure of the elevator control program.

  In step S <b> 3, the update unit 11 a transmits a restoration command signal to the restoration unit 12 b of the elevator control panel 12. In the restoration unit 12b that has received the restoration command signal, restoration processing of the old elevator control program is started (S22 described later).

  In step S4, the update unit 11a transmits an update failure signal indicating information that failed to be updated to the monitoring center 20, and performs update processing using the same elevator control program as the elevator control program that failed to be updated in step S5. An update stop signal for stopping this is transmitted to the external monitoring terminal 31.

  In step S6, the detection unit 11b transmits and receives a restoration confirmation signal to and from the restoration unit 12b of the elevator control panel 12, and monitors the restoration status of the elevator control program. The restoration confirmation signal returned from the restoration unit 12b that has received the restoration confirmation signal transmitted from the detection unit 11b includes information indicating the restoration status.

  In step S7, the detection unit 11b determines whether or not the elevator control panel 12 has successfully restored the old elevator control program.

  When it is determined in step S7 that the old elevator control program has not been successfully restored, the detection unit 11b transmits a data transmission request signal for the old elevator control program to the monitoring center 20. The old elevator control program is transmitted to the external monitoring terminal again from the monitoring center 20 that has received this data transmission request signal. The update unit 11a of the external monitoring terminal 11 that has received the old elevator control program starts the update process again. That is, the process after step S1 is repeated again.

  On the other hand, when it is determined in step S7 that the old elevator control program has been successfully restored, the detection unit 11b supplies the update unit 11a with a detection result indicating that the restoration has been successful.

  In step S <b> 8, the update unit 11 a transmits a restart request signal to the restoration unit 12 b of the elevator control panel 12. In the restoration unit 12b that has received this restart request signal, the elevator control program stored in the storage unit 12a is restarted (S23 to be described later).

  In step S9, the detection unit 11b transmits and receives a restart monitoring signal to and from the restoration unit 12b, and monitors the restart status of the elevator control program. The restart monitoring signal returned from the restoration unit 12b that has received the restart monitoring signal transmitted from the detection unit 11b includes information indicating the restart status.

  In step S10, the detection unit 11b determines whether or not the elevator control panel 12 has been successfully restarted.

  If it is determined in step S10 that the restart has failed, the detection unit 11b transmits a data transmission request signal for the old elevator control program to the monitoring center 20. As described above, the old elevator control program is transmitted from the monitoring center 20 that has received the data transmission request signal of the old elevator control program, and is received by the update unit 11a of the external monitoring terminal 11. When the old elevator control program is received by the update unit 11a of the external monitoring terminal 11, the received old elevator control program update process is started again.

  On the other hand, when the detection unit 11b detects that the restart is successful in step S10, the detection unit 11b supplies a detection result indicating the success of the restart to the update unit 11a.

  In step S <b> 11, the update unit 11 a transmits an automatic adjustment operation signal to the storage unit 12 a of the elevator control panel 12 and re-updates the job data due to the restoration of the old elevator control program.

  As described above, the process of step S11 is performed to reset job data that has been changed by applying a new elevator control program to job data for an old elevator control program. As a method of automatic adjustment operation, it is possible to detect and re-update only the changed part when restoring from the new elevator control program to the old elevator control program through automatic adjustment operation, or to leak all the adjustment operations again. There is a method to update the job data without any problem.

  In step S12, the update unit 11a determines whether or not the automatic adjustment operation of the elevator control panel 12 has been completed, and waits until it is determined that the automatic adjustment operation has been completed.

  If it is determined in step S12 that the automatic adjustment operation has ended, or if it is determined in step S2 that the update has been successful, in step S13, the updating unit 11a sends an adjustment end display signal to the elevator control panel 12. It supplies to the display control part 12c. In the display control unit 12c that has received the display end signal during adjustment, the display during maintenance is ended (step S24 described later).

  In the processing of step S7 and step S10 described above, the data transmission request signal of the old elevator control program is transmitted to the monitoring center 20, but the dispatch request signal of the maintenance staff may be transmitted to the monitoring center 20. Good. The monitoring center 20 which has received the maintenance staff dispatch request signal displays a message indicating that a maintenance staff dispatch request has been made on a display unit (not shown). By confirming this message, the maintenance staff can participate in the maintenance service of the elevator control program.

  Then, the process of the elevator control panel 12 is demonstrated.

  In step S21, the display control unit 12c that has received the signal indicating that the update is being performed from the update unit 11a causes the platform indicator to display that the maintenance is in progress, such as “automatic maintenance in progress”.

  In step S22, the restoration unit 12b that has received the restoration command signal restores the old elevator control program from the updated new elevator control program and difference data stored in the storage unit 12a. The restoration unit 12b can acquire the old elevator control program by rewriting the content of the new elevator control program based on the difference represented by the difference data, and can store the old elevator control program in the program area of the storage unit 12a with the acquired old elevator control program. The old elevator control program is restored by rewriting the stored program.

  The restoration unit 12b that has received the restart request signal restarts the elevator control program stored in the storage unit 12a in step S23 when the operation state of the elevator is at rest. After the restart, the automatic adjustment operation is performed by the external monitoring terminal 11, and the display control unit 12c that has received the display end signal during adjustment ends the display during maintenance in step S24. And the elevator control panel 12 returns an elevator to normal driving | operation in step S25.

  In the process of step S22 described above, the old elevator control program is restored from the updated new elevator control program and the difference data between the new elevator control program and the old elevator control program. What is the new elevator control program? Separately, if an area for storing the old elevator control program is provided in the storage unit 12a, the old elevator control program can be restored by reading the old elevator control program.

  According to the first embodiment, when the elevator control program of the elevator control panel 12 is updated by remote operation from the external monitoring terminal 11 and an update failure is detected, the old elevator control program is automatically restored. Therefore, the elevator stop service can be minimized and the elevator operation service can be continued.

  In addition, since the difference data between the new elevator control program and the old program is stored in the elevator control panel 12, the old elevator control program in the elevator control panel 12 can be stored with a minimum backup area. The program can be restored when the program update fails with the minimum backup area.

  Further, since the automatic adjustment operation is performed not only for the elevator control program but also for the control parameters specific to the elevator, the old control parameters can be adjusted again at the same time as the restoration to the old elevator control program.

  In addition, since the maintenance indicator is displayed on the landing indicator, for example, it is possible to notify the elevator user that the elevator has temporarily stopped the service. By displaying the remaining time required for maintenance in this display during maintenance, the waiting time until the elevator can be used can be presented to the elevator user, which can alleviate dissatisfaction. it can.

  Furthermore, since the update failure of the elevator control program is notified to the monitoring center 20, the other external monitoring terminal 31 that is going to update the same elevator control program is made to stop updating the elevator control program. In addition to minimizing the number of maintenance personnel that must be dispatched in the event of a restoration failure, it is possible not to cause other devices to perform unnecessary update processing that is known to fail. it can.

(Second Embodiment)
A second embodiment of the present invention will be described with reference to FIGS. Note that, in the second embodiment and the subsequent embodiments, the same components as those described in the first embodiment are denoted by the same reference numerals, and redundant descriptions are omitted.

  The basic configuration of an elevator control program remote update system according to the second embodiment of the present invention is the same as that of the first embodiment. In the elevator control program remote update system of the second embodiment, a storage unit 11d is newly provided in the external monitoring terminal 11, as shown in FIG. The storage unit 11d functions as a storage unit that stores an old elevator control program before update. Only the new elevator control program after the update is stored in the storage unit 12a in the elevator control panel 12.

  When the external monitoring terminal 11 detects a failure in updating the elevator control program, the external monitoring terminal 11 reads the old elevator control program before update stored in the storage unit 11d, transfers it to the elevator control panel 12, and restores the old elevator control program. Let

  FIG. 5 is a block diagram illustrating a functional configuration example of the external monitoring terminal 11 and the elevator control panel 12 according to the second embodiment of the present invention.

  While updating the elevator control program stored in the storage unit 12a of the elevator control panel 12, the update unit 11a of the external monitoring terminal 11 reads the old elevator control program before update from the storage unit 12a and stores it in the storage unit 11d. Let

  For example, when the detection unit 11b detects that the update of the elevator control program has failed, the update unit 11a transfers the old elevator control program backed up in the storage unit 11d to the restoration unit 12b, and performs the old elevator control. Restore the program.

  The restoration unit 12b restores the old elevator control program received from the update unit 11a to the storage unit 12a.

  Next, with reference to the flowchart of FIG. 6, each process of the external monitoring terminal 11 and the elevator control panel 12 in the 2nd Embodiment of this invention is demonstrated.

  In the flowchart of FIG. 6, similarly to the process of the first embodiment shown in the flowchart of FIG. 3, a program update monitoring signal is transmitted and received (step S1), and it is determined whether or not the update has failed (step S1). S2).

  In step S2, if the detection unit 11b detects that the update has failed, the process proceeds to step S31, where the update unit 11a reads the old elevator control program backed up in the storage unit 11d, and transfers the old elevator control program. The signal is transmitted to the restoration unit 12b of the elevator control panel 12 as a signal. In the restoration unit 12b that has received the old elevator control program transfer signal, restoration processing of the old elevator control program is started (step S22).

  Next, the update unit 11a transmits an update failure signal to the monitoring center 20 (step S4), and transmits an update stop signal to another external monitoring terminal 31 (step S5).

  In step S32, the updating unit 11a transmits / receives a transfer completion confirmation signal of the old elevator control program to / from the restoration unit 12b of the elevator control panel 12, and the old elevator control program is transferred to the elevator control panel 12 and stored normally. It is confirmed whether or not the data has been written in the section 12a. The transfer completion confirmation signal returned from the restoration unit 12b that has received the transfer completion confirmation signal transmitted from the update unit 11a includes information indicating the transfer status.

  The subsequent processing is the same as the processing in the first embodiment. It should be noted that the restored elevator control program is a program that has been operating normally before, and it is considered that there are few situations where restoration fails and restart fails. The process of checking the restart status in S10 is omitted.

  According to the second embodiment, when the elevator control program of the elevator control panel 12 is updated by remote operation from the external monitoring terminal 11 and an update failure is detected, the old elevator control program that has been backed up is automatically updated. Thus, the elevator stop service can be minimized and the elevator operation service can be continued.

(Third embodiment)
A third embodiment of the present invention will be described with reference to FIGS. The basic configuration of the remote update system for an elevator control program according to the third embodiment of the present invention is the same as that of the first embodiment. In the elevator control program remote update system according to the third embodiment, a database 20a is newly provided in the monitoring center 20, as shown in FIG. The database 20a manages elevator control programs of various version numbers (Ver3.1, Ver3.2, Ver4.0 in the example of FIG. 7). Only the new elevator control program after the update is stored in the storage unit 12a in the elevator control panel 12.

  If the external monitoring terminal 11 detects a failure in updating the elevator control program, the external monitoring terminal 11 requests the monitoring center 20 to transmit an elevator control program having an older version number than the elevator control program that failed to be updated via the public line network 40. By doing so, the elevator control program of the corresponding old version number can be downloaded from the monitoring center 20. The external monitoring terminal 11 transfers the downloaded elevator control program of the old version number to the elevator control panel 12 and restores the old elevator control program.

  In response to a request from the external monitoring terminal 11, the monitoring center 20 searches for the corresponding elevator control program from among the elevator control programs of various version numbers managed in the database 20 a and passes through the public line network 40. Transmit to the external monitoring terminal 11.

  For example, when the elevator control program having the version number 4.0 is updated in the storage unit 12a in the elevator control panel 12, but the update fails, the external monitoring terminal 11 determines that the version number is older than the version number 4.0. The monitoring center 20 is requested to transmit the elevator control program. The monitoring center 20 that has received this transmission request reads out the elevator control program with the version number 3.2 from the elevator control programs managed by the database 20 a and transmits it to the external monitoring terminal 11.

  FIG. 8 is a block diagram illustrating a functional configuration example of the external monitoring terminal 11, the elevator control panel 12, and the monitoring center 20 according to the third embodiment of the present invention.

  When the detection unit 11b detects that the update of the elevator control program has failed, the update unit 11a of the external monitoring terminal 11 downloads an elevator control program having an older version number than the elevator control program that has failed to be updated. The information is transmitted to the monitoring center 20 via the communication unit 11c and the public line network 40. Here, the information for downloading the elevator control program with the old version number is the property information including information such as the model name and identification code for identifying the elevator, and the version number of the elevator control program that failed to be updated. This includes version information.

  The update unit 11a transfers the elevator control program with the old version number downloaded from the monitoring center 20 via the communication unit 11c to the restoration unit 12b, and restores the elevator control program with the old version number.

  In response to a request from the external monitoring terminal 11, the search unit 20b of the monitoring center 20 searches for the corresponding elevator control program from among the elevator control programs of various version numbers managed in the database 20a. The search unit 20b transmits the searched elevator control program to the external monitoring terminal 11 via the communication unit 20c and the public line network 40.

  Similar to the communication unit 11c, the communication unit 20c includes a LAN card, a modem, and the like, and communicates with the external monitoring terminal 11 via the public network 40.

  Next, with reference to the flowchart of FIG. 9, each process of the external monitoring terminal 11, the elevator control panel 12, and the monitoring center 20 in the 3rd Embodiment of this invention is demonstrated.

  In the flowchart of FIG. 9, similarly to the process of the first embodiment shown in the flowchart of FIG. 3, a program update monitoring signal is transmitted and received (step S1), and it is determined whether or not the update has failed (step S1). S2).

  In step S2, if the detection unit 11b detects that the update has failed, the detection unit 11b proceeds to step S41, and the update unit 11a includes the property information for identifying the elevator and the version information of the elevator control program that has failed to be updated. The inquiry signal is transmitted to the monitoring center 20 via the communication unit 11c and the public line network 40.

  In step S51, the search unit 20b of the monitoring center 20 that has received the inquiry signal stores the information in the database 20a based on the property information for identifying the elevator included in the inquiry signal and the version information of the elevator control program that failed to be updated. Search for the corresponding elevator control program.

  For example, as shown in FIG. 7, since the elevator control panel 12 has failed to update the elevator control program with the version number 4.0, the search unit 20b uses an older version number (version in the example of FIG. 7). Search the elevator control program of number 3.2).

  Then, the search unit 20b determines from the property information included in the inquiry signal whether or not the elevator control program of the searched version number can be installed in the elevator control panel 12 as the inquiry source, and then in step S52, the communication unit It transmits to the external monitoring terminal 11 via 20c and the public network 40.

  In step S42, the updating unit 11a transmits the old version number of the elevator control program downloaded from the monitoring center 20 to the restoring unit 12b of the elevator control panel 12 as an old elevator control program transfer signal. In the restoration unit 12b that has received the old elevator control program transfer signal, restoration processing of the elevator control program having the old version number is started (step S22).

  Next, the update unit 11a transmits an update failure signal to the monitoring center 20 (step S4), and transmits an update stop signal to another external monitoring terminal 31 (step S5).

  In step S43, the update unit 11a transmits / receives a transfer completion confirmation signal of the old elevator control program to / from the restoration unit 12b of the elevator control panel 12, and the elevator control program of the old version number is transferred to the elevator control panel 12. It is confirmed whether or not the data has been normally written in the storage unit 12a.

  The subsequent processing is the same as the processing in the first embodiment.

  In the process of step S51 described above, the corresponding elevator control program is searched by transmitting the inquiry information including the property information for identifying the elevator and the version information of the elevator control program that has failed to be updated. You may make it request | require transmission of the elevator control program of this version information by memorize | storing the version information of the old elevator control program before an update in the external monitoring terminal 11 or the elevator control panel 12. FIG.

  According to the third embodiment, even if the external monitoring terminal 11 or the elevator control panel 12 does not have a storage medium for backing up the old elevator control program, it can be remotely operated from the external monitoring terminal 11. When the elevator control program of the elevator control panel 12 is updated and an update failure is detected, the old elevator control program is downloaded from the monitoring center 20 and automatically restored so that the elevator stop time is minimized. It is possible to continue the elevator operation service.

  Note that the present invention is not limited to the above-described embodiment as it is, and in the implementation stage, the constituent elements may be modified and embodied without departing from the scope of the invention, or a plurality of configurations disclosed in the above-described embodiment may be used. Various inventions can be formed by appropriately combining elements. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine the component covering different embodiment suitably.

It is a figure which shows the structural example of the remote update system of the elevator control program which concerns on 1st Embodiment. It is a block diagram which shows the function structural example which concerns on 1st Embodiment. It is a flowchart explaining the process which concerns on 1st Embodiment. It is a figure which shows the structural example of the remote update system of the elevator control program which concerns on 2nd Embodiment. It is a block diagram which shows the function structural example which concerns on 2nd Embodiment. It is a flowchart explaining the process which concerns on 2nd Embodiment. It is a figure which shows the structural example of the remote update system of the elevator control program which concerns on 3rd Embodiment. It is a block diagram which shows the function structural example which concerns on 3rd Embodiment. It is a flowchart explaining the process which concerns on 3rd Embodiment. It is a figure which shows the structural example of the conventional elevator control panel.

Explanation of symbols

11 External monitoring terminal 11a Update unit 11b Detection unit 11c Communication unit 12 Elevator control panel 12a Storage unit 12b Restoration unit 12c Display control unit 20 Monitoring center 20a Database 20b Search unit

Claims (7)

In an elevator control program remote update system having an elevator control panel and an external monitoring terminal for remotely monitoring the elevator control panel,
Updating means for updating an elevator control program in the elevator control panel;
Detecting means for detecting failure in updating the elevator control program;
A remote updating system for an elevator control program, comprising: a restoring means for restoring an old elevator control program before updating when an update failure is detected by the detecting means. The elevator control panel further includes a new elevator control program, and storage means for storing difference data between the new elevator control program and the old elevator control program,
The remote update system for an elevator control program according to claim 1, wherein the restoration means restores the old elevator control program from the new elevator control program and the difference data stored in the storage means. The elevator according to claim 1 or 2, wherein after the restoration of the elevator control program, the restoration means changes job data of the elevator control program to job data for the old elevator control program. Remote update system for control programs. The elevator according to any one of claims 1 to 3, further comprising a display control means for displaying a message indicating that the elevator control program is being updated and a time required for restoration by the restoration means. Remote update system for control programs. A communication means for communicating with the monitoring center and other devices via the public network;
The update means transmits a signal representing information that failed to be updated to the monitoring center via the communication means, and updates to stop updating using the elevator control program that has failed to update. The remote update system for an elevator control program according to any one of claims 1 to 4, wherein a stop signal is transmitted to another device. A storage means for storing the old elevator control program in the external monitoring terminal;
The remote update system for an elevator control program according to any one of claims 1 to 5, wherein the restoration means restores the old elevator control program stored in the storage means. When an update failure is detected by the detection means, the update means has a version older than the elevator control program that failed to update from among a plurality of elevator control programs of different versions managed in the monitoring center. Download the elevator control program
The remote update system for an elevator control program according to any one of claims 1 to 5, wherein the restoration unit restores the downloaded old version of the elevator control program.

Images