JP2013180857A - Elevator system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an elevator system which reduces wiring and suppresses loss in function during failure.SOLUTION: An elevator system includes: a communication controller 1b that is installed in a car 5, a hoistway or a landing and connected to elevator equipment inside the car 5, elevator equipment inside the hoistway or elevator equipment of the landing; a communication controller 1a that is connected to the communication controller 1b through a serial communication network 2 and an individual communication line 3 so as to perform communication; and a control means that is connected to the communication controller 1a so as to control operations of the car 5, in which the individual communication line communicates a signal individually in a manner separate from a signal communicated through the network 2.

Description

  The present invention relates to an elevator system communication technology.

  In the conventional elevator system, since various elevator facilities such as switches and sensors are individually connected to the control panel, the amount of wiring has become enormous.

  Therefore, Patent Document 1 discloses a technique for reducing wiring by connecting facilities related to safety control among various elevator facilities to a bus node, and connecting the bus node and the safety controller via the safety bus.

  Further, Patent Document 2 discloses a technique for reducing wiring by making various signals of elevator equipment wireless.

JP 2002-538061 A JP 2004-48474 A

  However, the elevator system described in Patent Document 1 has a problem that wiring reduction is insufficient because only signals related to safety control are made into a bus (serialized). Further, even if other signals are made into a bus in the same manner, there is a problem that the function of the elevator is not ensured when a communication error occurs.

  Moreover, in the elevator system described in Patent Document 2, when a communication error occurs or wireless communication is disabled due to a power failure or the like, all communication is disabled, and thus the elevator function is not secured. .

  In view of the above-described problems, an object of the present invention is to provide an elevator system that reduces wiring and suppresses loss of function during an abnormality.

  The elevator system of the present invention is installed in an elevator car, a hoistway or a landing, and is connected to the elevator car or the elevator equipment in the hoistway or the landing, the first communication controller, the serial communication network, and the individual A second communication controller connected via a communication line and performing communication, and a control means connected to the second communication controller and controlling the operation of the elevator car. The individual communication line is separate from the signal communicated over the serial communication network. Communicate signals individually.

  The elevator system of the present invention is installed in an elevator car, a hoistway or a landing, and is connected to the elevator car or the elevator equipment in the hoistway or the landing, the first communication controller, the serial communication network, and the individual A second communication controller connected via a communication line and performing communication, and a control means connected to the second communication controller and controlling the operation of the elevator car. The individual communication line is separate from the signal communicated over the serial communication network. Communicate signals individually. By adopting a configuration in which the first and second communication controllers are connected via a serial communication network, the number of communication lines can be reduced as compared to the case where each elevator equipment installed in the car is connected to the control panel. Is possible. Furthermore, when communication via the serial communication network becomes unsatisfactory, it is possible to suppress loss of function at the time of abnormality by performing communication using individual communication lines.

1 is a block diagram illustrating a configuration of an elevator system according to a first embodiment. 2 is a block diagram illustrating a configuration of a communication controller according to Embodiment 1. FIG. 2 is a block diagram illustrating a hardware configuration of a communication controller according to Embodiment 1. FIG. It is a figure which shows the frame structure of the transmission signal between communication controllers. It is a flowchart which shows the transmission process of a communication controller. It is a flowchart which shows the reception process of a communication controller. It is a block diagram which shows the structure of the elevator system of Embodiment 2. FIG.

(Embodiment 1)
<A. Embodiment 1>
<A-1. Configuration>
FIG. 1 is a diagram showing a configuration of an elevator system according to Embodiment 1 of the present invention. The elevator system includes a car 5 and a control panel 4 that controls the operation of the car 5. The control panel 4 includes a communication controller 1a, and a car 5 is provided with a communication controller 1b connected to the communication controller 1a via a network 2 for parallel communication and a communication line 3 for serial communication. In addition, although the Example about two communication controllers is shown here, the number of communication controllers is not limited to this, There may be three or more.

  The car 5 includes an interphone 13b for inputting / outputting voice, a safety switch / sensor 15, a normal control switch / sensor 16, a monitoring camera 17, a monitor 18, a card reader 19 of a serial communication device providing a security function, and a door controller 20. Various elevator facilities such as a door motor 21 and a safety shoe 22 are installed.

  The safety switch / sensor 15 is a switch / sensor that detects the state of the car 5 related to safety control and outputs the detection result as a safety signal. For example, a landing sensor or a door switch corresponds to this. The normal control switch / sensor 16 is a switch / sensor that detects the state of the car 5 not related to the safety control and outputs the detection result as a normal control signal. For example, the position switch etc. which detect the position plate (not shown) installed in the hoistway correspond to this.

  The door controller 20 drives the door motor 21 to control the opening / closing of the door (not shown) of the car 5 and the safety shoe 22.

  Further, various elevator facilities such as the management panel 10, the recording device 11, the video distribution device 12, and the interphone 13a are connected via the control panel 4 or directly to the control cable.

  The management panel 10 performs security management (for example, registration permission for the destination floor) in cooperation with the card reader 19. The recording device 11 records the video taken by the monitoring camera 17. The video distribution device 12 outputs a video to be displayed on the monitor 18. The interphone 13a inputs and outputs voice and has a call function with the interphone 13b installed in the car 5.

  The control panel 4 (or machine room or administrator room) is provided with a battery 14 serving as an auxiliary power source when the main power source is lost due to a power failure or the like, and a control device 7 and a safety control device 6 are further provided. ing. All these components installed in the control panel 4 and the like are independently connected to the communication controller 1a. Of the various types of elevator equipment in the control panel 4 shown in FIG. 1, each component other than the control device may be provided in a machine room or an administrator room outside the control panel 4. When these are provided in the machine room or the manager room, they are connected to the communication controller 1 a via the control panel 4.

  The safety control device 6 and the control device 7 are connected to the hoisting machine 8 and the brake 9 and drive them to control the movement of the car 5. The control device 7 controls the operation of the car 5 at the normal time based on information on various elevator facilities received from the communication controller 1a.

  On the other hand, the safety control device 6 performs safety-related control (such as overspeed monitoring and door-opening travel prevention) of the car 5 based on information on various elevator facilities received from the communication controller 1a, and the car 5 is in an abnormal state. If it is determined, the power of at least one of the hoisting machine 8 and the brake 9 is shut off to stop the car 5 at the nearest floor or to make an emergency stop.

  FIG. 2 is a block diagram showing the configuration of the communication controller 1a. The configuration of the communication controller 1b is the same as this. The communication controller 1a is a network communication I / F 30, a safety signal I / F 36, a normal control signal I / F 37, an audio signal I / F 38, a video signal I / F 39, a serial signal I / F as interfaces for connecting to various elevator facilities and the like. F40 is provided. Each interface digital / analog converts signals from the communication controller 1a to the various elevator facilities, and analog / digital converts signals from the various elevator facilities to the communication controller 1a. Also performs encoding, decoding, and protocol conversion.

  The communication controller 1a includes a transmission unit 31, a reception unit 32, a scheduling / integration unit 33, a distribution unit 34, and a safety communication unit 35. The safety communication unit 35 adds error detection information to the safety signal received from the safety signal I / F 36 at the transmission stage, and performs error detection based on the error detection information at the reception stage. The scheduling / integration unit 33 determines the transmission schedule of each signal. The transmission unit 31 transmits a signal from the network communication I / F 30 to the other communication controller according to the transmission schedule determined by the scheduling / integration unit 33. The receiving unit 32 receives a signal from the other communication controller via the network communication I / F 30. The distributing unit 34 distributes the signal received by the receiving unit 32 to any interface other than the safety signal I / F 36 or the safety communication unit.

  FIG. 3 is a diagram illustrating a hardware configuration of the communication controller 1a. The configuration of the communication controller 1b is the same as this. The safety communication unit 35 includes a CPU (Central Processing Unit) 51, a ROM (Read Only Memory) 52, a RAM (Random Access Memory) 53, and a WDT (Watch Dog Timer) 54. The various interfaces include a DAC (Digital to Analog Converter) 55, an ADC (Analog to Digital Converter) 56, an encoder 57, a decoder 58, and a protocol conversion chip 59.

  The network communication I / F 30 includes a PHY (PHYsical layer) chip 61. The transmission unit 31, the reception unit 32, the distribution unit 34, and the scheduling / integration unit 33 include an FPGA (Field Programmable Gate Array) 60. It may be used. The DAC 55, ADC 56, encoder 57, decoder 58, and protocol conversion chip 59 may be included in the FPGA 60. Each component is connected through a bus 62 and a connection line, and various data and signals are exchanged.

<A-2. Operation>
FIG. 4 shows a frame structure of a message communicated between the communication controllers 1a and 1b. The message includes a destination 83, a transmission source 84, a length / type 85, a data part 86, and a frame CRC (Cyclic Redundancy Check) code 87. The data section 86 stores a data type 82 and data bodies such as serial communication data 81, an audio signal 80, a video signal 79, and a normal control signal 78. In a message for transmitting a safety signal, a safety message 71 is added to these messages. The safety message 71 includes a destination 72, a transmission source 73, a type 74, a sequence number 75, a safety signal 76, and a safety CRC 77. The data type 82 may be replaced with the length / type 85.

  FIG. 5 is a diagram illustrating a transmission process from the communication controller 1b to the communication controller 1a. The communication controller 1b receives signals from various elevator facilities of the car 5 and transmits them to the communication controller 1a.

  The scheduling / integration unit 33 sets the priority, reliability, and responsiveness of various signals, and determines the transmission schedule and the number of continuous transmissions of various signals based on the priorities (step S1). For example, the safety message 71 is set to have the highest priority and the number of continuous transmissions is set higher, and the normal control signal 78 is set to a lower number of continuous transmissions. In addition, the audio signal 80 and the video signal 79 with low priority are not continuously transmitted, and are set to be thinned out when the bandwidth of the transmission path is insufficient.

  Each elevator installation installed in the car 5 is connected to the safety signal I / F 36, the normal control signal I / F 37, the audio signal I / F 38, the video signal I / F 39, and the serial signal I / F 40 of the communication controller 1b. The signals from each elevator facility are input to these interfaces. Then, the communication controller 1b determines the type of the input signal (step S2). The types of input signals are classified into safety signals, normal control signals, audio signals, video signals, and serial communications. The safety signal is a signal indicating the state of the safety switch / sensor 15 and is input to the safety signal I / F 36. The normal control signal is a signal indicating the state of the normal control switch / sensor 16 and is input to the normal control signal I / F 37. The audio signal is a signal from the intercom 13b and is input to the audio signal I / F 38. The video signal is a signal from the surveillance camera 17 and is input to the video signal I / F 39. The serial signal is a signal from the card reader 19 and is input to the serial signal I / F 40.

  When the input signal is taken in each interface, A / D conversion is performed on the safety signal and the normal control signal (steps S3 and S5), and the audio signal and the video signal are encoded (steps S6 and S7). Further, protocol conversion is performed on the serial communication signal (step S8).

  Then, the safety signal fetched by the safety signal I / F 36 is added with error detection information by the safety communication unit 35, and a safety message 71 is generated (step S4). For example, a safety CRC 77 and a sequence number 75 are added as error detection information, and a safety message 71 (lower part in FIG. 3) is generated.

  These input signals 78 to 81 and the safety message 71 are sent to the scheduling / integrating unit 33, and stored in the data unit 86 and framed according to the transmission schedule determined in step S1 (step S9). Further, the frame is duplicated as many times as the number of continuous transmissions determined in step S1, is sent to the transmission unit 31 (step S10), and is transmitted from the network communication I / F 30 to the network 2 (step S11).

  At this time, when the schedule and the number of continuous transmissions are common among a plurality of signals, they may be transmitted together in one message. Further, even when only the schedule is common, it is possible to collectively transmit in one message by matching the largest number of continuous transmissions.

  The receiving unit 32 monitors communication errors, and determines the quality of the communication path from the frequency of occurrence of communication errors, with the frequency of occurrence of communication errors per unit time as the frequency of occurrence of communication errors. It is assumed that the relationship between the communication quality and the communication error occurrence frequency is set in advance and held by the communication controller 1b. When the communication quality changes, the receiving unit 32 notifies the scheduling / integration unit 33 of information on the communication quality (step S12).

  Receiving the notification, the scheduling / integration unit 33 resets the schedule according to the communication quality (step S13). For example, when the communication quality deteriorates, the number of times of transmission (continuous transmission) of signals with high priority is increased. Furthermore, the number of transmissions (continuous transmission) of signals with low priority is reduced, or signals that do not require reliability are thinned out and transmitted.

  Conversely, if the communication quality is improved, the number of high-priority signal transmission (continuous transmission) is reduced, the number of low-priority signal transmission (continuous transmission) is increased, or the signal that has been thinned out is transmitted. Avoid thinning out or reduce the amount of thinning out.

  Next, the reception process of the communication controller 1a will be described along the flowchart of FIG. The receiving unit 32 of the communication controller 1a receives a message from the network 2 through the network communication I / F 30 (step S21). The distribution unit 34 checks the frame CRC 87 and determines whether or not there is a normal frame among a plurality of the same messages sent continuously (step S22).

  If there is no normal frame in step S22, it is determined whether or not the specified time has been reached (step S34), and if it has reached, the car 5 is brought to an emergency stop (step S29). Here, the communication controller 1a notifies the safety control device 6 that the car 5 is to be stopped urgently, and the safety control device 6 shuts off the power to the hoisting machine 8 and the brake 9, whereby the car 5 is immediately stopped. . Alternatively, the communication controller 1a itself may cut off the power of the hoisting machine and the brake 9. After the emergency stop, the car 5 is kept stopped until the maintenance work is performed by the maintenance staff. Hereinafter, the emergency stop process is the same.

  If there is a normal frame in step S22, the distribution unit 34 extracts one of them and distributes the data for each signal type (step S23). Next, in step S24, the type of the input signal is determined. If the safety signal has not been received, the safety communication unit 35 is notified, and the safety communication unit 35 determines whether or not the specified time has been reached (step S34). (Step S29). If the specified time has not been reached, a process of stopping the car 5 at the nearest floor (step S28) may be performed. Here, the safety communication unit 35 notifies the control device 7 to stop the car 5 at the nearest floor, and the control device 7 stops the car 5 at the nearest floor. After that, it restarts and tries to restore the operation of the network 2 and the car 5. However, if the vehicle does not recover after restarting more than a predetermined number of times, the car 5 is kept stopped and a recovery by the maintenance staff is awaited. Hereinafter, the processing for stopping the nearest floor is the same. In the case of the safety signal, the safety message 71 is transferred to the safety communication unit 35, and the safety communication unit 35 performs error detection (inspection of the safety CRC 77 and the sequence number 75) based on the error detection information in the safety message 71 (step S75). S25). If no error is detected in step S25, the safety signal is output to the safety control device 6 and the control device 7 through the safety signal I / F 36 (step S26), and the process returns to step S21 to receive the next message.

  If an error is detected in step S25, it is determined whether or not the number of times of error detection has reached the specified number (step S27), and if not, the car 5 is stopped at the nearest floor (step S28). .

  Further, when the number of error detections reaches the specified number in step S27, the car 5 is emergency stopped (step S29).

  Signals other than safety signals are output to various elevator facilities through various signal interfaces 37 to 40. For example, the normal control signal is D / A converted by the normal control signal I / F 37 (step S30) and then output to the control device 7. The audio signal is decoded by the audio signal I / F 38 (step S31), and then output to the intercom 13a and the like. Further, the video signal is decoded by the video signal I / F 39 (step S32), and then output to the recording device 11 or the like. The serial signal is converted into a protocol by the serial signal I / F 40 (step S33), and then output to various elevator facilities such as the management panel 10.

  The safety communication unit 35 further performs an inspection by the CPU 51 by a self-test program, an execution time monitoring by the WDT 54, a read / write inspection by the RAM 53, a CRC inspection by the ROM 52, an input / output by comparing the input / output signals of the dual system and reading back the output signals. It has a self-diagnosis function such as signal monitoring, and has high reliability for handling information related to safety control. The safety communication unit 35 may have redundancy.

  When the safety communication unit 35 detects its own failure by the self-diagnosis function, the safety communication unit 35 notifies the safety control device 6 and the like of the failure. The safety control device 6 stops the car 5 at the nearest floor if the failure of the safety communication unit 35 is a minor failure such as temporary bit corruption, and the car 5 if it is a serious failure such as stuck output signals. Emergency stop.

  In this specification, the case where the information of the elevator installation installed in the car 5 is transmitted from the communication controller 1b to the communication controller 1a and output to the elevator installation connected to the control panel 4 has been described. However, when the control signal is transmitted from the control device 7 to the door controller 20 or when the communication is performed in the reverse direction, such as when the video signal is transmitted from the video distribution device 12 to the monitor 18, both communication controllers 1a, What is necessary is just to reverse the process in 1b. In this case, the communication controller 1b notifies the communication controller 1a on the control panel 4 side of the occurrence of a communication error using the individual communication line 3, and the car 5 is moved by the safety control device 6 or the control device 7 according to the content. It is possible to continue the operation, stop the nearest floor, or make an emergency stop (or use the individual communication line 3 to instruct the safety control device 6 or the control device 7 to continue the operation or stop the nearest floor or make an emergency stop) It is. Alternatively, if a safety control device or a control device is connected to the communication controller 1b as the car-side control means for controlling the operation of the car 5, and provided in the car 5, the content of the communication error in the communication controller 1b and the type of communication information Accordingly, it is possible to stop the car 5 at the nearest floor or to make an emergency stop by the safety control device or the control device of the car 5.

  Communication between the communication controllers 1 was performed via the network 2. However, if communication via the network 2 is impossible due to a failure in the communication circuit, etc., communication of signals necessary for normal operation of the elevator, such as some safety signals, is performed by one-to-one communication using the communication line 3. Can be done. Of course, when communication via the network 2 is normal, one-to-one communication via the communication line 3 may be used together.

  Conventionally, a total of about 70 communication lines for connecting various devices in an elevator system are required. The breakdown includes about 20 safety switches / sensors 15 and about 20 normal control switches / sensors 16, and includes a card reader 19, management panel 10, interphones 13 a and 13 b, surveillance cameras 17, and monitors 18 that provide security functions. There were about five door controllers 20 and about ten door controllers 20, respectively.

  According to the elevator system of the present embodiment, the number of communication lines is reduced to a total of about 24 lines: 4 lines necessary for the network 2 (twisted pair full-duplex communication) and a minimum of about 20 communication lines necessary for elevator operation. Can be reduced. Note that this is not the case depending on the configuration of the elevator.

  Further, in the elevator system according to the present embodiment, the control panel 4 (or machine room or administrator room) is provided with the battery 14 as an auxiliary power source. Therefore, when the main power source is lost due to a power failure or the like, the auxiliary power source It is possible to continue communication by switching to. At this time, only the communication necessary for maintaining the function of the elevator at the time of a power failure, for example, the communication necessary for rescue of the confined passengers such as the intercom 13 and the emergency call device is continued. For other functions related to communication, the power is shut off or the mode is shifted to the power saving mode. When the main power supply is restored, the main power supply is switched to restore all communications. The battery 14 may be provided in each of the communication controllers 1a and 1b, or a common battery 14 may be used through a power line between the communication controllers 1a and 1b.

<A-3. Effect>
The elevator system of the present embodiment is installed in an elevator car (car 5), a hoistway or a landing, and is connected to an elevator facility in the car 5, the hoistway, or a landing, and a communication controller (communication controller 1b). The communication controller 1b is connected to the serial communication network (network 2) and the individual communication line (communication line 3) and communicates with the second communication controller (communication controller 1a). The communication controller 1a is connected to operate the car 5. Control means (safety control device 6, control device 7) for controlling are provided, and the communication line 3 communicates signals separately from signals communicated in the network 2. By adopting a configuration in which the communication controllers 1a and 1b are connected via the network 2, it is possible to reduce the number of communication lines compared to the case where each elevator equipment installed in a car or the like is connected to the control panel. It is. Furthermore, when communication by the network 2 becomes unsatisfactory, it is possible to reliably perform highly important communication such as a safety signal by performing communication using individual communication lines. That is, according to the elevator system of the present embodiment, it is possible to reduce wiring while preventing loss of function when an abnormality occurs.

  Moreover, since the communication controllers 1a and 1b transmit the transmission signal in the transmission schedule according to the priority of the transmission signal in the network 2, it is possible to reliably perform communication of a high priority signal such as a signal related to safety control. .

  Further, since the communication controllers 1a and 1b monitor the communication error of the network 2 and determine the transmission signal schedule based on the frequency of the communication error, network communication according to the communication quality is possible.

  Further, since the communication controllers 1a and 1b determine the transmission signal schedule according to the usable bandwidth of the communication path in the network 2, network communication according to the communication quality is possible.

  Further, when communicating information related to safety control, the communication controllers 1a and 1b add error detection information to information related to the safety control at the time of transmission and perform error detection using the error detection information at the time of reception. The reliability of communication necessary for safety control can be ensured.

  Further, when a communication error occurs, the communication controller 1a determines the content of the communication error and the type of communication information, and the safety control device 6 and the control device 7 operate the car 5 based on the determination of the communication controller 1a. Since it is continued, the nearest floor is stopped, or the emergency stop is performed, the safety of the elevator car 5 can be ensured even when a communication error occurs.

  Further, the communication controller 1b notifies the communication controller 1a on the control panel 4 side of the occurrence of a communication error using the individual communication line 3, and the car 5 is continuously operated by the safety control device 6 or the control device 7 according to the content. Then, the nearest floor is stopped or emergency stopped (or the individual control line 3 is used to instruct the safety control device 6 or the control device 7 to continue the operation or stop the nearest floor or emergency stop). Alternatively, when the car 5 is provided with a safety control device or a control device that is connected to the communication controller 1b and controls the operation of the car 5, the communication controller 1b is configured to communicate the contents of the communication error when a communication error occurs. The safety control device or the control device continues the operation of the car 5 based on the determination of the communication controller 1b, stops the nearest floor, or makes an emergency stop. With the above operation, the safety of the elevator car 5 can be ensured even when a communication error occurs.

  In addition, since the elevator system according to the present embodiment further includes an auxiliary power source that supplies power when the main power source is lost, the minimum reliability of elevator communication can be achieved by performing high-priority communication with the auxiliary power source. It can be secured.

<B. Second Embodiment>
FIG. 7 is a block diagram illustrating a configuration of the elevator system according to the second embodiment. The elevator system according to the second embodiment includes a communication controller 1c, a hoistway switch 25, a landing door switch 24, and a safety control device 6c installed in the hoistway 23 in addition to the configuration of the elevator system according to the first embodiment. .

  In the elevator system of the present embodiment, the control panel 4, the car 5, and the hoistway 23 are each provided with a communication controller and a safety control device, and these safety control devices perform separate safety controls. At that time, the respective communication controllers 1a, 1b, 1c communicate with each other the information of the elevator facilities connected thereto, so that the safety control devices 6a, 6b, 6c connected to the respective communication controllers 1a, 1b, 1c Safety control can be implemented while sharing information on elevator equipment.

  For example, the detection results of the landing door switch 24 and the hoistway switch 25 are transmitted from the communication controller 1c installed in the hoistway and received by the communication controller 1b of the car 5, thereby causing an unintended movement of the car 5. When detected, safety control such as operating an emergency stop 26 installed in the car 5 is possible.

  Moreover, it is possible to monitor each other by exchanging data between the safety control devices 6a, 6b, 6c, and when one of the safety control devices fails, the other safety control device can It is possible to stop movement and to perform a safety control backup. That is, according to the present embodiment, it is possible to further improve the function of the safety control device when an abnormality occurs while reducing the wiring of the elevator.

  In any of the embodiments, the safety communication unit 35 and the safety signal interface 36 of the communication controllers 1a, 1b, and 1c may be included in the safety control devices 6, 6a, 6b, and 6c. Furthermore, the information added to the safety signal by the safety communication unit 35 may be other than the CRC code, and the same effect can be obtained by using a parity bit, a BCH code, a Reed-Solomon code, an error correction code, or the like.

  1a, 1b, 1c communication controller, 4 control panel, 5 cage, 6, 6a, 6b, 6c safety control device, 7 control device, 8 hoisting machine, 9 brake, 10 management panel, 11 recording device, 12 video distribution device , 13a, 13b Interphone, 14 Battery, 15 Safety switch / sensor, 16 Normal control switch / sensor, 17 Surveillance camera, 18 Monitor, 19 Card reader, 20 Door controller, 21 Door motor, 22 Safety shoe, 30 Network communication I / F , 31 Transmitter, 32 Receiver, 33 Scheduling / Integration Unit, 34 Distribution Unit, 35 Safety Communication Unit, 36 Safety Signal I / F, 37 Normal Control Signal I / F, 38 Audio Signal I / F, 39 Video Signal I / F, 40 Serial signal I / F, 51 CPU, 52 ROM, 53 RA , 54 WDT, 55 DAC, 56 ADC, 57 encoder, 58 a decoder, 59 protocol converter chip, 60 FPGA, 61 PHY chip, 62 a bus.

Claims (11)

A first communication controller installed in an elevator car or a hoistway or a landing and connected to the elevator car or the hoistway or an elevator facility of the hall;
A second communication controller connected to the first communication controller via a serial communication network and an individual communication line for communication;
Control means connected to the second communication controller for controlling operation of the elevator car;
The individual communication line communicates signals separately from signals communicated over the serial communication network.
Elevator system. The first and second communication controllers transmit the transmission signal in a transmission schedule according to the priority of the transmission signal in the serial communication network;
The elevator system according to claim 1. The first and second communication controllers perform communication using the individual communication line when communication via the serial communication network is impossible.
The elevator system according to claim 1 or 2. The first and second communication controllers monitor communication errors of the serial communication network and determine a schedule of transmission signals based on the frequency of the communication errors;
The elevator system in any one of Claims 1-3. The first and second communication controllers determine a transmission signal schedule according to an available bandwidth of a communication path in the serial communication network;
The elevator system in any one of Claims 1-4. When communicating information related to safety control, the first and second communication controllers add error detection information to information related to safety control during transmission and perform error detection using the error detection information during reception. Do,
The elevator system in any one of Claims 1-5. The second communication controller determines the content of the communication error and the type of communication information when a communication error occurs,
The control means continues the operation of the elevator car based on the determination of the second communication controller, stops the nearest floor, or makes an emergency stop.
The elevator system in any one of Claims 1-6. The first communication controller transmits the content of the communication error and the type of communication information to the second communication controller using the individual communication line when a communication error occurs in the serial communication network.
The elevator system according to claim 7. The first communication controller determines the content of the communication error and the type of communication information when a communication error occurs in the serial communication network, and continues the operation of the elevator car based on the determination, or stops the nearest floor, Alternatively, an emergency stop is instructed to the second communication controller using the individual communication line,
The control means, based on the instruction received by the second communication controller from the first communication controller, continues the operation of the elevator car, stops the nearest floor, or makes an emergency stop.
The elevator system in any one of Claims 1-6. A second control means connected to the first communication controller for controlling operation of the elevator car;
The first communication controller determines the content of the communication error and the type of communication information when a communication error occurs,
The second control means continues operating the elevator car based on the determination of the first communication controller, stops the nearest floor, or makes an emergency stop.
The elevator system in any one of Claims 1-7. Auxiliary power supply for supplying power when main power is lost
The elevator system in any one of Claims 1-10.

Images