JP2012246074A - Elevator safety system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an elevator safety system which can further improve safety of a maintenance engineer even when the invalidation processing work of a safety device is performed in association with a maintenance recovery work.SOLUTION: The elevator safety system includes an invalidation specification means 15 that designates invalidation of any of a plurality of safety devices 14A to 14N, an operation mode setting means 16 that sets an operation mode, a safety state determination processing part 29 which is provided inside a safety controller 13 and which provides invalidation permission with reference to a safety state parameter 35 defined in a safety state definition table based on a signal from the invalidation specification means 15, and a safety device determination processing part 30 that brakes an elevator car, and the safety device determination processing part 30 has invalidation processing parts 33A to 33N that invalidate the safety device designated by the invalidation specification means 15 using an invalidation permission signal from the safety state determination processing part 29 and a cancellation signal of the invalidation permission signal.

Description

  The present invention relates to an elevator safety system configured to be independent of an elevator system and ensuring safety using a safety device installed in a hoistway as an input.

  A conventional elevator safety system is configured by combining a mechanical safety switch and a relay circuit. The mechanical safety switch includes a switch for detecting opening / closing of a car door, a switch for detecting opening / closing of a landing door, and a car. Limit switches that detect overshoots, top clearance switches for securing maintenance space, pit switches for confirming that maintenance workers have entered the pit, inspection port switches for confirming the opening and closing of the entrance door for inspection, etc. It has been. An elevator safety system that receives the output of such a mechanical safety switch by a relay circuit is configured to ensure safety by shutting off the power supply and operating the brake by shutting off the relay circuit. When this safety switch is activated and the elevator car stops urgently, maintenance work is performed by a maintenance worker, and a rescue operation is also performed when passengers are confined in the car. These operations cannot be performed without a maintenance worker having specialized knowledge.

  The maintenance / recovery work described above has a different method of response depending on which safety switch is activated to make an emergency stop. For example, if the switch that detects the opening / closing of the car door cannot detect the door closed state due to a transient failure and it is determined that the elevator has run in the door open state, an emergency stop will occur. If a maintenance worker in a remote location determines that there is no abnormality in the elevator, a recovery operation is performed by remote operation (see, for example, Patent Documents 1 and 2). In this way, when the safety switch is not activated due to the position of the elevator car, or when the safety switch and the safety circuit are in a normal state without continuously detecting an abnormality, the maintenance worker Thus, the recovery operation is performed by reconfirming that the safety switch and the safety circuit are in a normal state.

  In case of an emergency stop with the danger of collision of the car to the end floor or an emergency stop due to overspeed, the safety switch that detects the speed and position error of the car continues to maintain the detected state. The maintenance worker confirms the safety of the elevator directly and then performs maintenance and recovery work. In such maintenance and restoration work, the work is performed after the safety switch continuously held is short-circuited to disable the function of the safety switch. For example, if an elevator system malfunctions and the car is urgently stopped by turning off the limit switch on the last floor, the maintenance worker disables the function by short-circuiting the limit switch wiring, It is raised and restored.

JP 57-13073 A JP 2001-220075 A

  However, in the conventional elevator described above, since the safety system is composed of mechanical parts, when trying to short-circuit the safety switch required for the restoration work, the other safety switch is accidentally short-circuited. There is a possibility. As a result, the safety switch that should operate normally becomes invalid, and there is a possibility that a maintenance worker may be caught in the car. The safety of such work depends on the technical ability of the maintenance worker who performs the work. In Patent Document 1 and Patent Document 2, the safety switch is short-circuited remotely at the time of restoration work. This is a case where the operation of the safety switch of the car door is an operation due to a temporary condition, This is a recovery method when the type of safety switch does not significantly affect the operation. In the case of an emergency stop with the danger of a collision of the car to the end floor or an emergency stop due to overspeed, visual confirmation by maintenance personnel Is clearly required.

  An object of the present invention is to provide an elevator safety system that can further improve the safety of maintenance workers even when a safety device invalidation process is performed in accordance with a maintenance recovery operation.

  In order to achieve the above object, the present invention outputs a plurality of safety devices attached to an elevator system and outputs a shut-off signal of a power source and a brake power source by an operation signal of any one of the plurality of safety devices. In an elevator safety system including a safety controller having a safety device determination processing unit for braking a car, invalidation designation means for designating invalidation of any of the plurality of safety devices, and an operation mode of the elevator The operation mode setting means to set, and the disabling permission with reference to the safety state parameter provided in the safety controller and defined in the safety state definition table based on the signals from the invalidation specifying means and the operation mode setting means A safety state determination processing unit for providing an invalidation permission signal from the safety state determination processing unit Only in that it characterized in that the invalidation processing unit to disable the specified the safety device provided in the safety device determination processing unit by the invalidation designation means.

  According to such a configuration, the safety device to be invalidated by the maintenance worker because the invalidation specifying means and the operation mode setting means are used is a maintenance and recovery work involving the movement of the car. Can be detected, and the invalidation is not performed based on the erroneous determination of the maintenance worker, and the safety device to be invalidated more reliably can be determined at an early stage. At this time, since the correct selection can be made regardless of the technical skill of the maintenance worker, the reliability of the maintenance work can be further improved. Further, since the above-described processing is realized using a safety controller, there is no need to newly add mechanical parts or terminal blocks as in the case of a mechanical type, and the configuration can be simplified and the machine can be simplified. There is no increase in the number of periodic inspections performed by maintenance personnel as in the case of using a type switch.

  In addition to the above-described configuration, the present invention further includes car detection means that can calculate the car position, speed, and acceleration of the car, and the car position, speed, and speed calculated by the car detection means within the safety state parameter. A specified acceleration value is added, and when the specified value defined by the safe state parameter is exceeded, the invalidation permission signal from the safe state determination processing unit is canceled.

  According to such a configuration, the safety controller defines the permission condition of the safety device to be invalidated in the safety state definition table, so that the position of the car in the car can be maintained even after the activated safety device is invalidated. It is possible to detect a dangerous event that deviates from the permission condition from the speed and acceleration, and to cancel the invalidation at the time of detection, the monitoring by each safety device can be restored. As a result, the car can be braked to further improve safety.

  In addition to the above-described configuration, the present invention further includes maintenance worker detection means for detecting the presence of maintenance workers located above and below the car, and the maintenance worker detection means is included in the safety state parameter. An item for defining the presence of maintenance workers from is added, and the invalidation permission signal from the safety state determination processing unit is canceled when the item deviates from the item defined by the safety state parameter.

  According to such a configuration, since it can be invalidated on the condition that the maintenance worker is detected in the definition in the safety state definition table, the maintenance is performed even after the activated safety device is invalidated. An event that deviates from the permission condition can be detected from the presence or absence of a worker, and monitoring by each safety device can be restored by canceling invalidation at the time of detection. It is reliably prevented that the car is erroneously moved due to an erroneous invalidation process and other maintenance workers are caught in the car.

  In addition to the above configuration, the present invention is characterized in that the car detection means is a pulse generator that outputs a pulse in accordance with the position of the car.

  According to such a configuration, the car position, speed, and acceleration of the car can be calculated while using a pulse generator that is a general configuration in an elevator, and the invalidation process is performed while comparing with the safety state parameters. It is possible to easily detect a dangerous event in a later car.

  In addition to the above-described configuration, the present invention further includes a storage unit that stores the fact that the safety device has been activated, and the storage device stores the safety device that is specified to be invalidated by the invalidation designation unit and the storage unit. The safety state determination processing unit determines a correspondence relationship with a safety device, and a display device that displays at least when there is no correspondence relationship is provided.

  According to such a configuration, the maintenance worker can easily grasp the relationship between the activated safety device and the invalidation designation from the display device, and prevents invalidation of the wrong safety device, and maintenance. The safety and workability of recovery work can be further improved.

  The present invention also provides a plurality of safety devices attached to an elevator system, and a safety device that brakes a car by outputting a shut-off signal of a power source and a brake power source by an operation signal of any of the plurality of safety devices. In an elevator safety system including a safety controller having a determination processing unit, invalidation designation means for designating invalidation of any of the plurality of safety devices, and the invalidation provided in the safety controller A safety state determination processing unit that gives invalidation permission while referring to the safety state parameter defined in the safety state definition table based on the signal from the specifying means, and the safety device determination processing unit includes any one of the safety devices In order to detect such an operation signal, each contact connected in series with the operation of each safety device in series with the control system power supply, An invalidation processing unit for invalidating the contact corresponding to the safety device designated by the invalidation designation means by the invalidation permission signal from the safety state determination processing unit and the cancellation signal of the invalidation permission signal is provided for each contact. Each is connected in parallel.

  According to such a configuration, it becomes possible for the maintenance worker to control the invalidation processing unit that invalidates the safety device through the invalidation designation means by the safety state determination processing unit, and an unexpected dangerous event occurs. Even so, the function of the safety device can be restored by giving an invalidation cancellation signal from the safety state determination processing unit, so that the maintenance and recovery work can be performed more safely. Further, since the above-described processing is realized using a safety controller, there is no need to newly add mechanical parts or terminal blocks as in the case of a mechanical type, and the configuration can be simplified and the machine can be simplified. There is no increase in the number of periodic inspections performed by maintenance personnel as in the case of using a type switch.

  In the elevator safety system according to the present invention, the safety device that is to be invalidated by the maintenance worker because the invalidation specifying means and the operation mode setting means are used is a maintenance recovery work that involves moving the car. Can be detected, and the invalidation is not performed based on the erroneous determination of the maintenance worker, and the safety device to be invalidated more reliably can be determined at an early stage. At this time, since the correct selection can be made regardless of the technical skill of the maintenance worker, the reliability of the maintenance work can be further improved. Further, since the above-described processing is realized using a safety controller, there is no need to newly add mechanical parts or terminal blocks as in the case of a mechanical type, and the configuration can be simplified and the machine can be simplified. There is no increase in the number of periodic inspections performed by maintenance personnel as in the case of using a type switch.

It is a schematic block diagram which shows the elevator safety system by one embodiment of this invention. It is a block block diagram of the safety controller shown in FIG. It is a circuit diagram which shows the principal part of the safety device determination process part shown in FIG. It is a schematic diagram of the safe state definition table shown in FIG. 1 and stored in the safety device database. It is a schematic block diagram which shows the elevator safety system by other embodiment of this invention. It is a block block diagram of the safety controller shown in FIG.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is an overall configuration diagram showing an elevator system according to an embodiment of the present invention. An elevator car 1 is a sheave 5 that is rotationally driven by an electric motor 4 that is supplied with electric power through a power converter 3. The rope 2 is connected to one end of the rope 2 wound around the hoistway 7 and is configured to be movable up and down in a hoistway 7 formed in the building while balancing with a counterweight (not shown). A landing-side door 8 that can be opened and closed is formed at the landing on each floor, and a car-side door 9 that can be opened and closed is provided on the car 1, and when the car 1 stops at the landing on the predetermined floor, The car-side door 9 is engaged with the landing-side door 8 to be opened and closed simultaneously.

  The elevator controller 6 that controls the operation of the car 1 gives a car position control command to the power converter 3 to control the motor 4, and uses a pulse generator such as an encoder (not shown) attached to the motor 4 to drive the motor. The pulses generated by the rotation of 4 are counted, and the speed of the electric motor 4, the hoistway moving direction, position, moving distance, etc. of the car 1 are calculated. When the elevator controller 6 wants to brake the car 1, it outputs a stop command to the brake power source 10 and the power source 11, and the brake power source 10 that has received this stop command operates the brake 12 and receives the stop command. The motive power supply 11 cuts off the power supply to the power converter 3 and brakes the car 1. In general, the brake power supply 10 and the power supply 11 are configured by a circuit using an electromagnetic contactor called a contactor.

  The safety controller 13 that detects a dangerous event and brakes the car 1 to avoid the danger functions independently of the elevator controller 6 and receives signals from the plurality of safety devices 14A to 14N to receive the brake power supply 10 and the power. A safety system for braking the car 1 by shutting off the power source 11 is configured with a central processing unit (CPU) for executing processing and a watchdog timer for detecting an abnormality of the CPU. And a circuit for monitoring a power supply abnormality, an abnormality detection unit for detecting a processing abnormality by comparing the processing results of the duplicated CPUs, and the like.

  The safety controller 13 detects that one of the safety devices 14A to 14N has been activated, and detects that the maintenance worker has designated invalidation of any of the safety devices 14A to 14N. A signal from the control designation means 15, a signal from the operation mode setting means 16 for detecting the operation mode of the elevator selected by the maintenance worker, and a car detection means for detecting the position, speed and acceleration of the car 1. 17 and signals from maintenance worker detection means 18 and 19 for detecting the presence of maintenance workers on and under the car.

  As the safety devices 14A to 14N, when a maintenance worker works at a final limit switch or a pit provided to prevent the car 1 from colliding with the end of the uppermost floor or the lowermost floor of the hoistway. Maintenance limit switch provided to secure the workable distance from under the pit to the bottom of the car, a switch for detecting the opening / closing of the car door, a switch for detecting the opening / closing of the landing door, and opening / closing of the doorway for inspection There are inspection port switches to check.

  Here, the maintenance worker detection means 18 and 19 for detecting the presence or absence of maintenance workers above and below the car indicate the presence of maintenance workers at the upper and lower parts of the car 1 separately from the safety devices 14A to 14N. It uses an infrared human sensor, photoelectric sensor, ultrasonic sensor, etc. to detect it, but a maintenance worker actively uses a switch that informs the presence of the pit. A means for confirming that a maintenance worker has entered may be configured and incorporated into the safety devices 14A to 14N.

  The invalidation designation means 15 is operated so that a maintenance worker can assume the activated state of the safety devices 14A to 14N and invalidate it so that maintenance recovery work can be performed. Any one of the safety devices 14A to 14N can be designated.

  The operation mode setting means 16 designates, for example, maintenance operation, rescue operation, test operation, etc. in relation to maintenance recovery work performed by invalidating the safety devices 14A to 14N.

  The car detection means 17 is, for example, a pulse generator that outputs a pulse in accordance with the position of the car 1, and here, an example in which an encoder is attached to a governor is illustrated. Means that can detect the absolute or relative position of the car 1, such as a type that detects the movement of the car 1 by pressing a roller or a type that magnetizes and detects the rail, can be used. Any device that can be used to calculate the position, speed, and acceleration of the car 1 can be used.

  In addition to the elevator controller 6, the safety controller 13 described above stops the car 1 by shutting off the brake power supply 10 and the power supply 11 and operating the brake 12 when any of the safety devices 14A to 14N is activated. In addition to giving a shut-off signal to the contactor to be performed, as will be described in detail later, in the maintenance recovery work, the safety devices 14A to 14N that are in operation are designated without any mistakes, and simultaneously invalidated Instead of the safety device, it has a function of supplementing the safety state of the car 1. In other words, if the wrong safety devices 14A to 14N are invalidated in connection with the maintenance and recovery work, there is a risk that another dangerous event may occur due to an unexpected operation of the car 1, but the safety controller 13 does this. The function to prevent is added.

  FIG. 2 shows a block configuration diagram of the safety controller 13. The safety controller 13 invalidates the safety device detection processing unit 20 that captures the operation signals of the plurality of safety devices 14A to 14N, and the one in which the maintenance operator operates among the safety devices 14A to 14N in relation to the maintenance recovery work. Therefore, the invalidation designation detection processing unit 21 for detecting the signal given from the invalidation designation means 15 and the signal given from the operation mode setting means 16 for the maintenance worker to set the operation mode in relation to the maintenance recovery work An operation mode setting detection processing unit 22 for detecting the pulse and a pulse input processing unit 23 that takes in a detection pulse from the car detection means 17 such as a pulse generator and counts the number of pulses based on the CPU clock of the safety controller 13. And the pulses detected by the pulse input processing unit 23 are counted, and the movement amount of the car 1 per pulse is counted as the counted number of pulses. The car position detection processing unit 24 that calculates the current position of the car 1 from the number of trains and the speed of the car 1 is detected from the number of pulses detected per unit time based on the pulses detected by the pulse input processing unit 23. Car speed detection processing unit 25, car acceleration detection processing unit 26 that calculates the acceleration of the car 1 from the change per unit time in the speed of the car 1 calculated by the car speed detection processing unit 25, and maintenance work A maintenance worker detection processing unit 27 for detecting maintenance workers around the car by the worker detection means 18 and 19 is provided.

  Further, the safety controller 13 includes a safety device database unit 28 that stores a safety state definition table, which will be described in detail later, and a safety device database unit while determining the state of the car 1 based on information from the processing units 21 to 27. The safety state determination processing unit 29 that gives an invalidation enhancement signal with reference to the safety state definition table stored in 29 and detects the occurrence of a dangerous event, and the safety devices 14A to 14N detected by the safety device detection processing unit 20 1 and the safety device determination processing unit 31 that controls the brake power supply 10 and the shutoff signal to the motive power supply 11 shown in FIG. 1 in response to the operation signal and the determination result signal from the safety state determination processing unit 29. Yes.

  FIG. 3 is a circuit diagram showing a main part of the safety device determination processing unit 30 described above, and between the power sources of the control system, the contacts 31A to 31N that are opened when the safety devices 14A to 14N are activated. And a cut-off signal determination unit 32 such as a relay coil are electrically connected in series. The contact points 31A to 31N of the safety devices 14A to 14N are closed in a steady state, and the cutoff signal determination unit 32 is energized and does not give a cutoff signal to the brake power source 10 and the power source 11. However, when at least one of the safety devices 14A to 14N, for example, the safety device 14A is operated and the contact 31A is opened, the power supply to the cutoff signal determination unit 32 is cut off, and the brake power supply 10 and the power supply 11 A cut-off signal is given.

  In addition to the above-described configuration, invalidation processing units 33A to 33N are electrically connected in parallel to the contacts 31A to 31N, respectively. The invalidation processing units 33A to 33N, when attempting to invalidate the safety devices 14A to 14N operated in connection with the maintenance recovery work, are designated by the invalidation designation means 15 by the maintenance worker, and then the safety state determination process. When the unit 29 permits the invalidation, the invalidation process is performed. Here, the invalidation processing units 33A to 33N are illustrated as contacts that are open in a steady state and are closed in response to an invalidation permission signal. Therefore, for example, when the invalidation processing unit 33A performs the invalidation processing, the contact 31A is short-circuited by the bypass circuit of the invalidation processing unit 33A, and thus the safety device 14A is invalidated.

  Next, the safe state determination processing unit 29 that controls the invalidation processing units 33A to 33N described above will be described. The safety state determination processing unit 29 takes in the signals from the above-described processing units 21 to 27 and performs a determination process as to whether or not the invalidation condition is satisfied while referring to the safety state definition table in the safety device database 28. Yes. When this invalidation condition is satisfied, the safety state determination processing unit 29 short-circuits the invalidation processing units 33A to 33N of FIG. 3 corresponding to the safety devices 14A to 14N fetched from the invalidation designation unit 15.

  The safety state definition table stored in the safety device database 28 includes 5 of the target safety device 34, the operation mode 36 as the safety state parameter 35, the position 37, the speed 38, the acceleration 39, and the maintenance worker 40. It consists of one item. Each item condition of the safety state parameter 35 prevents erroneous specification of each safety device desired to be invalidated by using the invalidation designation means 15 and avoids a dangerous event of the car 1 generated by invalidating the safety device. It is set to do.

  The safety state determination processing unit 29 shown in FIG. 2 includes various information input from the processing units 21 to 27 for each of the safety devices 14A to 14N defined by the safety state definition table stored in the safety device database unit 28. Determine whether the logical product of the conditions is satisfied. Further, when the logical product is satisfied as a result of the determination process, an invalidation permission signal of the safety device to be invalidated is given to the invalidation processing units 33A to 33N of the safety device determination processing unit 30. By this invalidation processing, the interruption signal to the brake power supply 10 and the power supply 11 shown in FIG. 1 is cut off, and the car 1 can be moved in the maintenance operation mode, for example.

  Here, the safety device 14A shown in FIG. 4 is a final limit switch provided to prevent the car 1 from colliding with the terminal portion of the uppermost floor or the lowermost floor of the hoistway. The power source 10 and the power source 11 are cut off, and the car 1 is braked. The final limit switch is invalidated when the car 1 stops at the terminal end, and the maintenance return operation is normally performed in the maintenance operation mode. Accordingly, the safety state parameter 35 of the safety state definition table that permits the invalidation of the final limit switch is that the operation mode 36 is “maintenance”, the position 37 is “all sections”, the speed 38 is “40 m / min or less”, The acceleration 39 is set to “0.8 G or less”, and the maintenance worker 40 is set to “none”.

  When attempting to invalidate the safety device 14A, if a signal corresponding to the safety device 14A is given from the invalidation specifying means 15, the car 1 is in a braking state, so that the operation mode 33 is "maintenance" and maintenance is performed. If the worker 40 is “none”, it is within the definition of the safety state parameter 35 and the invalidation condition is satisfied, and the invalidation processing unit 33A of the safety device determination processing unit 30 shorts the contact 31A.

  On the other hand, when the maintenance worker tries to invalidate the activated safety device 14A, if the maintenance operator mistakenly designates the safety device 14B by the invalidation designation means 15, the invalidation processing unit 33B is closed as can be seen from FIG. Even so, the contact 31A of the safety device 14A remains open. Accordingly, the car 1 cannot be operated in the maintenance operation mode, and the maintenance worker notices an input error by the invalidation designation means 15. For this reason, the trouble by invalidation of the undesired safety device 14B can also be prevented.

  Furthermore, even if the car 1 suddenly starts or accelerates due to an unexpected abnormality after invalidating the final limit switch, which is the safety device 14A, by closing the invalidation processing unit 33A, it is shown in FIG. Since the movement of the car 1 is monitored by the car position detection processing unit 24, the car speed detection processing unit 25, the car speed detection processing unit 26, and the maintenance worker detection processing unit 2, the speed 35 defined by the safety state parameter 35. Then, the safety state determination processing unit 29 detects that the specified value at the acceleration 36 is deviated. At this time, the safety state determination processing unit 29 outputs a signal for invalidating the invalidation processing of the invalidation processing unit 33A to the safety device determination processing unit 30. As a result, the closing of the invalidation processing unit 33A shown in FIG. 3 is released, the detection function of the safety device 14A is enabled, and the car is detected by detecting the abnormality by each of the safety devices 14A to 14N of the circuit shown in FIG. 1 can be braked.

  The safety device 14B shown in FIG. 4 is a maintenance limit switch provided to ensure a workable distance from the bottom of the pit to the bottom of the car when a maintenance worker works in the pit. This maintenance limit switch is required to operate reliably when the car 1 reaches its installation position in the maintenance operation mode. Therefore, the safety state parameter 35 of the safety state definition table permitting the invalidation of the maintenance limit switch is that the operation mode 33 is “maintenance”, and the position 34 is “2000 mm or more from below the pit and 4000 mm or less from the top of the top floor”, The speed 35 is set to “20 m / min or less”, the acceleration 36 is set to “0.4 G or less”, and the maintenance worker 37 is set to “Yes”.

  Therefore, even when the safety device 14B, which is a maintenance limit switch, is invalidated while the maintenance worker is under the pit or on the car 1, the car 1 is 2000 mm from the bottom of the pit or 4000 mm from the top of the top floor. When the position is reached, the safe state determination processing unit 29 can detect that the invalidation permission condition is not satisfied according to the safe state parameter 35 of the safe state definition table. At this time, the safety state determination processing unit 29 cancels the permission signal given to the invalidation processing unit 33B of the safety device determination processing unit 30. Thus, the car 1 can be stopped at the position of the maintenance limit switch by the circuit shown in FIG. 3, and the safety can be supplemented without impairing the function of the safety device 14B. Also, by setting numerical values for the speed 35 and the acceleration 36, an accident can be prevented even when the elevator system suddenly accelerates due to a system abnormality or the like.

  As described above, each set value of the safety state parameter 35 that permits or cancels the invalidation for each safety device 14A to 14N is invalidated in the operation mode in which the corresponding safety device may be invalidated. The position 34 is determined by the position 34 that does not affect the safety even if it is changed. In addition, by further limiting the speed 35 and the acceleration 36 in order to further improve safety, the car 1 can be safely braked immediately when the limit is exceeded even for an unexpected operation abnormality.

  As can be seen from the above-described examples of the safety device, the maintenance worker designates the safety device 14A by the invalidation designation means 15 in order to invalidate the safety device 14A that seems to have been operated in connection with the maintenance recovery work. When the operation mode is designated by the operation mode setting means 16, the safety state determination processing unit 29 shown in FIG. 2 refers to the safety state definition table of the safety device database 28 and satisfies the permission condition, the contact 31A of the safety device 14A. And invalidation processing such as closing the invalidation processing unit 33A connected in parallel with each other.

  When the bypass circuit is formed by the invalidation processing unit 33A and the functions of the contact 31A and the safety device 14A are invalidated, the energization to the shut-off signal determination unit 32 is restored, and the shut-off signals to the brake power source 10 and the power source 11 are released. Is done. The maintenance worker can move the car 1 in the maintenance operation mode given from the operation mode setting means 16 and can know that the correct designation is made from the invalidation designation means 15. Moreover, since the safety state determination processing unit 29 monitors the movement of the car 1 in accordance with the safety state parameter 35 even after the invalidation process, the car 1 can be safely kept when an abnormal event occurs even if the function of the safety device 14A is invalidated. Can be braked.

  When the invalidation processing units 33A to 33N shown in FIG. 3 are not provided as in the prior art, the cutoff signal determination unit 32 detects that the car 31 has opened the contact 31A of the safety device 14A on the terminal floor. When an emergency stop occurs, a maintenance worker is dispatched. At this time, the maintenance worker invalidates the operated safety device and enables the car 1 to move, but there is a possibility that the safety device may be invalidated by erroneous self-judgment. As a result, there is a possibility that a maintenance worker may be caught by unexpected movement of the car 1 or the like. However, as described above, by providing the invalidation designation means 15, the safety state determination processing unit 29, and the invalidation processing units 33A to 33N, it is possible to avoid the danger caused by invalidating other safety devices by mistake. it can.

  According to the elevator safety system described above, the safety controller 13 is provided with the safety state determination processing unit 29 that controls the permission conditions of the safety devices 14A to 14N to be invalidated in comparison with the definitions in the safety state definition table. Therefore, the safety state determination processing unit 29 firstly indicates that the operation is a maintenance / recovery operation involving the movement of the car 1 from the input of the invalidation designation means 15 and the operation mode setting means 16, and that the invalidation is going to be invalidated. It can be determined whether or not the safety devices 14A to 14N meet the conditions defined in the safety state definition table. Therefore, invalidation is not performed based on an erroneous determination by a maintenance worker, and invalidation processing can be performed more reliably. At this time, since it can be managed by the safety state determination processing unit 29 regardless of the technical skill of the maintenance worker, the reliability of the maintenance work can be further improved. In addition, since the above-described processing is realized by using the safety controller 13, it is not necessary to newly add a machine part or a terminal block as in the case of a mechanical type, and the configuration can be simplified. There is no increase in regular inspections by maintenance personnel as in the case of using mechanical switches.

  In addition, since the maintenance worker presence / absence detection means 18 and 19 arranged in the vicinity of the car 1 are provided and the condition of whether or not the maintenance worker is detected is added to the definition in the safety state definition table, it is erroneous. It is reliably prevented that the car 1 is erroneously moved for the invalidation process and other maintenance workers are caught in the car 1.

  Further, the safety controller 13 includes an invalidation designation means 15 that can designate invalidation of a plurality of safety devices 14A to 14N, an operation mode setting means 16 that sets an operation mode of the elevator, an invalidation designation means 15 and an operation mode setting. The safety state determination processing unit 29 that receives the information from the means 16 and gives the invalidation permission while referring to the safety state parameter defined in the safety state definition table, and receives the invalidation permission signal from the safety state determination processing unit 29 The safety device determination processing unit 30 is provided, and the safety device determination processing unit 30 connects the contact points 31A to 31N linked to the operation of the plurality of safety devices 14A to 14N in series, and when one of them operates, the brake power source 10 and the power supply 11 are provided with a cut-off signal and provided in parallel with the contacts 31A to 31N of the safety devices 14A to 14N. Since the invalidation processing units 33A to 33N for invalidating the safety devices 14A to 14N by the invalidation permission are provided, the invalidation processing units 33A to 33N can be canceled by the safety state determination processing unit 29. Therefore, the safe state determination processing unit 29 can compensate for dangerous event countermeasures that may occur due to invalidation of the activated safety devices 14A to 14N. For this reason, it becomes possible to perform maintenance and recovery work more safely.

  By the way, when it is attempted to invalidate the safety device 14 </ b> A that has been activated in connection with the maintenance recovery work, it is assumed that the maintenance worker mistakenly determines that the safety device 14 </ b> B is used and designates the safety device 14 </ b> B by the invalidation designation unit 15. At this time, even if the safety state determination processing unit 29 short-circuits the invalidation processing unit 33B connected in parallel with the contact 31B of the safety device 14B shown in FIG. 3, the contact 31A of the activated safety device 14A opens. In addition, since the invalidation processing unit 33A is also open, the energization to the cutoff signal determination unit 32 is not recovered. Therefore, the interruption signal to the brake power supply 10 and the power supply 11 is in a continuous state, and the car 1 cannot be operated. Here, the maintenance worker knows that the designation from the invalidation designation means 15 is wrong, and can perform the correct operation again. However, another embodiment will be described in which this error can be detected as early as possible. To do.

  FIG. 5 is an overall configuration diagram showing an elevator safety system according to another embodiment of the present invention. The same components as those of the previous embodiment are denoted by the same reference numerals, and detailed description thereof is omitted. Only explained. In this embodiment, when the designation from the invalidation designation means 15 by the maintenance worker is wrong as described above, the maintenance worker can be notified more quickly.

  The safety controller 13 is connected to a display device 41 used together with the invalidation designation means 15. When the information corresponding to the safety device to be invalidated is input from the invalidation designation means 15 to the display device 41, the determination result made by the safety controller 13 and other related information are displayed.

  With the addition of the display device 44, the safety controller 13 stores the operation signals from the safety devices 14A to 14N detected by the storage device 42 and the safety device detection processing unit 20 in the storage unit 45 as shown in FIG. When the storage processing unit 43 and the invalidation designation detection processing unit 21 performing the processing to receive the invalidation designation signal from the invalidation designation unit 15, the detection signal of the safety device corresponding to the invalidation designation is stored in the storage unit 42. A function for determining whether or not it has already been stored, and for determining whether or not invalidation is permitted in comparison with each of the corresponding safety state parameters 35 in the safety state definition table shown in FIG. And a display processing unit 44 that performs a process of displaying the result determined by the safety state determination processing unit 29 on the display device 41.

  The display contents on the display device 41 can be variously determined, but the safety state determination process 29 is an invalidation designation detection process for an invalidation designation signal related to a safety device to be invalidated by the invalidation designation means 15, for example, the safety device 14A. When the operation mode signal received from the operation mode setting means 16 is received from the operation mode designation detection processing unit 22, first, the safety device corresponding to the invalidation designation signal from the invalidation designation detection processing unit 21 is received. 14A is determined, and it is determined whether or not there is information related to the safety device 14A in the data already stored in the storage unit 42 at this time.

  As a result of the determination, if there is no information related to the safety device 14A in the data already stored in the storage unit 42, it is determined that the safety device that has already been operated does not match the invalidation, and this is indicated through the display processing unit 44. It is displayed on the display device 41. Since the maintenance worker watches the display on the display device 41 after the invalidation designation by the invalidation designation means 15, the invalidation designation is inadequate by looking at the display, or his input designation is wrong. You can know that you are.

  However, if there is related information of the safety device 14A in the data already stored in the storage unit 42, it is determined that the activated safety device 14A is invalidated, and invalidated in the same manner as in the previous embodiment. The safety device to be compared is determined by comparison with each safety state parameter 35 defined in the safety state definition table. As a result, when invalidation can be permitted, the permission signal is given to the safety device determination processing unit 30 as in the case of the previous embodiment, and the invalidation is performed through the display processing unit 44, Related information such as the safety device 14 </ b> A and the operation mode is displayed on the display device 41. The maintenance worker sees the display device 41 and performs maintenance and recovery work.

  Thus, by providing the display device 41 used together with the invalidation designation means 15, it becomes possible to easily grasp the relationship between the activated safety device and the invalidation designation, and the maintenance worker is mistaken for the work. It is possible to improve the maintenance workability.

  Note that the display device 41 shown in FIG. 5 is not limited to displaying messages, and the same effect can be expected even when displaying a lamp or the like indicating a predetermined relationship.

  Like the elevator safety system described above, the maintenance worker can grasp the relationship between the safety device activated at the stage of the designation operation of the invalidation designation means 15 and the invalidation designation, or the invalidation designation means 15 and the display device 41. Can be integrated to receive various information from the safe state determination processing unit 29. Therefore, since the designation from the invalidation designation unit 15 can further improve the reliability, the operation mode setting unit 16 can be omitted and the determination in the safe state determination processing unit 29 can be performed. In this case, the invalidation designation means 15 that designates invalidation of any of the plurality of safety devices 14A to 14N, and the safety state based on the signal from the invalidation designation means 15 provided in the safety controller 13 A safety state determination processing unit 29 for giving invalidation permission while referring to the safety state parameter 35 defined in the definition table is provided, and the safety device determination processing unit 30 detects any operation signal of the safety devices 14A to 14N. In order to do so, each of the contacts 31A to 31N connected in series with the control system power supply in conjunction with the operation of each safety device, the invalidation permission signal from the safety state determination processing unit 29, and the cancellation signal of this invalidation permission signal The invalidation processing units 33A to 33N for invalidating the contacts corresponding to the safety device designated by the invalidation designation means 15 are arranged in parallel with the respective contacts 31A to 31N. It can be realized by a configuration connected.

  According to such a configuration, it becomes possible for the maintenance worker to control the invalidation processing units 33A to 33N in which the safety devices 14A to 14N are invalidated through the invalidation designation means 15 by the safety state determination processing unit 29. Even if an unexpected dangerous event occurs, the function of the safety device can be restored by giving a cancellation signal from the safety state determination processing unit 29, so that the maintenance recovery work can be performed more safely. Can do. In addition, since the above-described processing is realized by using the safety controller 13, it is not necessary to newly add mechanical parts or a terminal block as in the case of a mechanical type, and the configuration can be simplified. There is no increase in regular inspections by maintenance personnel as in the case of using mechanical switches.

DESCRIPTION OF SYMBOLS 1 Car 2 Rope 3 Power converter 4 Electric motor 5 Sheave 6 Elevator controller 7 Hoistway 8 Landing side door 9 Car side door 10 Brake power source 11 Power source 12 Brake 13 Safety controller 14A-14N Safety device 15 Invalidation designation means 16 Operation mode setting means 17 Car detection means 18 Maintenance worker detection means 19 Maintenance worker detection means 20 Safety device detection processing section 21 Invalidation designation detection processing section 22 Operation mode detection processing section 23 Pulse input processing section 24 Car position detection processing Unit 25 Car speed detection processing unit 26 Car acceleration detection processing unit 27 Maintenance worker detection processing unit 28 Safety device database 29 Safety state determination processing unit 30 Safety device determination processing unit 31A to 31N Contact point 32 Blocking signal determination unit 33A to 33N Invalidation Processing unit 34 Target safety device 35 State parameter 36 operating mode 37 Position 38 speed 39 acceleration 40 maintenance worker 41 display

Claims (6)

There are a plurality of safety devices attached to the elevator system, and a safety device determination processing unit that brakes the car by outputting a shut-off signal of a power source and a brake power source by an operation signal of any one of the plurality of safety devices. In an elevator safety system equipped with a safety controller
Invalidation designation means for designating invalidation of any of the plurality of safety devices, operation mode setting means for setting an operation mode of an elevator, the invalidation designation means provided in the safety controller, and A safety state determination processing unit that gives a disabling permission while referring to the safety state parameter defined in the safety state definition table based on a signal from the operation mode setting means, while the safety device determination processing unit includes the safety device An elevator safety system comprising: an invalidation processing unit that receives an invalidation permission signal from a state determination processing unit and invalidates the safety device designated by the invalidation designation unit.   Car detection means capable of calculating the car position, speed and acceleration of the car is provided, and specified values of the car position, speed and acceleration calculated by the car detection means are added to the safety state parameter, and the safety state parameter 2. The elevator safety system according to claim 1, wherein the invalidation permission signal from the safety state determination processing unit is canceled when the specified value defined in 1 is exceeded.   Maintenance worker detection means for detecting the presence of maintenance workers located at the upper and lower parts of the car is provided, and an item defining the presence of the maintenance worker from the maintenance worker detection means is provided in the safety state parameter. 2. The elevator safety system according to claim 1, wherein an invalidation permission signal from the safety state determination processing unit is canceled when it is added and deviates from an item defined by the safety state parameter.   The elevator safety system according to claim 2, wherein the car detection means is a pulse generator that outputs a pulse in accordance with the position of the car.   A storage unit for storing that the safety device has been activated is provided, and the safety state determination processing is performed on a correspondence relationship between the safety device specified to be invalidated by the invalidation designation unit and the safety device stored in the storage unit. The elevator safety system according to claim 1, further comprising a display device that performs display at least when there is no corresponding relationship. There are a plurality of safety devices attached to the elevator system, and a safety device determination processing unit that brakes the car by outputting a shut-off signal of a power source and a brake power source by an operation signal of any one of the plurality of safety devices. In an elevator safety system equipped with a safety controller
An invalidation designation means for designating invalidation of any of the plurality of safety devices, and a safety state defined in the safety state definition table based on a signal from the invalidation designation means provided in the safety controller A safety state determination processing unit for giving invalidation permission while referring to the parameter, and the safety device determination processing unit includes the safety device determination processing unit in series with a control system power supply in order to detect any operation signal of the safety device. Corresponding to the safety device designated by the invalidation designation means by each contact connected to be linked to the operation of the safety device, the invalidation permission signal from the safety state determination processing unit and the cancellation signal of the invalidation permission signal An elevator safety system, wherein an invalidation processing unit for invalidating the contact is connected to each contact in parallel.

Images