JPH07117940A - Control device for elevator - Google Patents

Abstract

PURPOSE:To prevent the disturbance of control due to the abnormal operation of a CPU when change data are inputted to a memory section to change the operation program. CONSTITUTION:This control device for an elevator is provided with an auxiliary controller 12 inputting the data via a judgment section 13 in consideration of the operating state of the elevator when the data change signal is inputted, and whether the first inputted data are equal to the second inputted data obtained after the first inputted data are read out is confirmed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an elevator control device, and more particularly to an elevator control device provided with a storage unit capable of rewriting operation data.

[0002]

2. Description of the Related Art As is well known, even in elevator control devices, a large number of microcomputers have been adopted in most elevator control devices due to the progress of semiconductor technology, and their performance and size are reduced. ing.

This microcomputer is used according to various control objects such as an elevator operation mode, motor control, elevator car processing, elevator landing processing, display devices installed in elevator cars and landings, and elevator monitoring devices. is doing.

By the way, the specifications of the equipment incorporated in the elevator control device are determined before the manufacturer's shipment, and it has been rare to change the specifications after the start of operation, but the application of microcomputers has been expanded. As a result, there are an increasing number of cases where the specifications that can be handled by software are changed after the start of operation. Not only that,
With the increase in software capacity, the frequency of program exchange due to software bugs is increasing.

In this case, there are roughly two changing methods. One of them is a partial data change, in which the maintenance staff of the elevator maintenance company connects a portable console to the control device in the elevator machine room. , A method of communicating with an elevator controller to change data.

[0006] The other is that the maintenance staff of the elevator company
This is a method of changing a program by replacing an EP-ROM which is a storage device in which a program of a control device in an elevator machine room is stored.

However, recently, there is also a demand for a specification in which a driving mode and the like can be changed by a user's operation.
For example, the operation mode of group management operation of a plurality of elevators installed in a high-rise building may be changed, or the message setting of a display device installed in an elevator hall or a car may be changed.

In order to meet such various specifications, a method of remotely changing the operation mode of the elevator is also adopted. As this method, a method of remotely writing data to the data for controlling the operation of the elevator is generally adopted. For example, if you input a command to change the operation mode of the elevator from the computer installed in the disaster prevention center in the building with the keyboard, the data is directly transmitted to the control panel of the elevator machine room and communicates with the microcomputer of the elevator control device. To do.

Here, when the microcomputer of the control device receives the data change command, the microcomputer changes the data and program of its own storage device. This storage device includes an erasable non-volatile memory (hereinafter referred to as E
An E-ROM) is often used. There are several methods for changing this, and it is also possible to communicate from the elevator maintenance company via a telephone line, which is the method adopted for most elevators installed in the future.

[0010]

The method of changing the stored data after the operation of the device is not limited to the elevator, but is generally used. However, in a device such as an elevator that carries passengers in real time. Special attention is required because it affects human life. The reason is that the stored data contains important data such as the operating status of elevators, stop floors, speed, and riding comfort.Therefore, if these data are entered by mistake, the elevator may not be able to be controlled. Because there is.

Especially when the data is changed during operation,
In the unlikely event of an elevator failure, passengers may be trapped inside the elevator car for extended periods of time, requiring greater reliability than other control devices.

FIG. 5 is a block diagram showing a configuration of a storage unit of a conventional elevator control device. FIG. 5 shows, as a general example, a storage unit of an elevator control device including a microcomputer circuit and a relay. In FIG. 5, the microcomputer circuit is provided with a central processing unit (microcomputer) CPU 1 and a peripheral non-volatile read-only storage device EP-ROM 2, a volatile read / write storage device RAM 3 and an EE-ROM 4. ing. Among them, the EE-ROM 4 stores the operation data and the operation program as described above.

Further, the peripheral input / output is provided with a digital input section 6 for converting the signal from the relay contact 5 so that the CPU 1 can read it, and a digital output section 8 for driving the relay coil 7, and further data rewriting. A transmission control unit 10 for controlling data from a communication line for receiving a command and a transmission control DP-RAM 11 which is a common RAM for transmitting the received data to the CPU 1 are provided. In addition, DP-RA
M is a dual port RAM, which is a RAM that can manage data in common by two CPUs.

Of these, the digital input section 6 is converted from the external relay contact 5 into a signal having a voltage of about 5V after being insulated from the external relay contact 5 by a photocoupler. Digital output section 8
On the contrary, a signal of a voltage of about 5V is output by a transistor after being insulated by a photocoupler.

Here, the EE-ROM is being driven while the elevator is being driven.
The EE-ROM write enable register 9, which allows write access to No. 4, is C by the procedure stored in the EP-ROM 2.
The PU 1 issues a command to the EE-ROM write permission register 9 to make the EE-ROM 4 writable. That is, in the normal state, the EE-ROM 4 is read (Note: RD
When the data change command is issued from the outside, the EE-ROM 4 is allowed to be written (note: displayed as WR).

Although the data can be changed in this way, if the contents of the EE-ROM 4 are always changeable, when the program is changed while the target program is being executed, the CPU 1 may be changed depending on the execution state of the program.
May cause abnormal operation.

Further, in order to write data in the EE-ROM 4, it takes time for reading, and as a result, the execution time of the program is significantly increased (about 10 ms / 32 bytes). For example, if the processing time increases for 10 ms during traveling of the elevator, there is a possibility that the normal stop operation cannot be performed. Then, there is a possibility that the elevator may be closed.

Therefore, an object of the present invention is to provide an elevator control device capable of eliminating the risk of control disturbance when writing data to a storage device.

[0019]

According to a first aspect of the present invention, an elevator control device is provided with a erasable storage means and a data changing means for changing operation data stored in the storage means in a control unit. In the above, an auxiliary control unit for monitoring the operation of the control unit and a determination unit for determining whether or not a signal for changing operation data is input from the auxiliary control unit and input to the data changing unit are provided.

Further, the invention according to claim 2 is an elevator control device comprising a erasable storage means and a data changing means for changing operation data stored in the storage means, in the control device for an elevator. It is characterized in that an auxiliary control unit for monitoring the operation of (1) and a judging unit for judging that the signal for changing the operation data is inputted from the auxiliary control unit and the control unit and can be inputted to the data changing unit are provided.

Further, the invention according to claim 3 is an elevator control apparatus comprising a erasable storage means and a data change means for changing operation data stored in the storage means, in the control device for an elevator. An auxiliary control unit for monitoring the operation of the control unit, and a determination unit for determining whether or not the signal for changing the operation data from the auxiliary control unit and the signal indicating the state of the power supply of the control unit are input to determine whether the data change unit can be input It is characterized by that.

[0022]

The data input from the auxiliary control unit to the storage unit via the determination unit is compared and confirmed with the read and written data.

[0023]

1 is a block diagram of an elevator control apparatus according to the present invention. FIG. 1 shows a block diagram of a general elevator control device. As shown in FIG. 1, an elevator control device of the present invention includes a CPU 1 of about 16 bits for elevator control, an EP-ROM 2 storing software for driving the CPU 1, and a RAM 3 storing data. , EE-ROM4 for storing elevator specification data and programs that differ depending on the customer
And a transmission control unit 10 for controlling transmission with peripheral devices, and C
The auxiliary control unit 12 monitors the command from the PU 1 and the operating condition of the elevator, and the determination unit 13 determines the command from the CPU 1 and the EE-ROM writing command from the auxiliary control unit 12.

Therefore, in addition to FIG. 5 shown in the prior art, an auxiliary control unit 12 for monitoring the operating condition of the elevator and issuing a write command to the EE-ROM 4 under the same condition as the CPU 1 is added. Compared with the conventional EE-ROM write permission register 9, the system is protected against malfunction of the CPU 1.

Next, the operation procedure of the elevator control apparatus of the present invention will be described with reference to the flow chart shown in FIG.
In FIG. 2, in step 21, a signal is externally input to the elevator control device in the normal operating state, and the next step
At 22, it is determined whether or not a situation has occurred in which the EE-ROM 4 is changed. Here, in general, when the EE-ROM 4 is changed, a maintenance staff rewrites it by using an inspection device,
Alternatively, it is limited to automatic data change by a remote maintenance device.

If it is determined in step 22 that the data need not be changed, the process returns to step 21, and the elevator is operated in a normal state. On the contrary, if the data needs to be changed, the process proceeds to the next step 23. In step 23, in order to change the EE-ROM 4, a write permission command is issued to the auxiliary control unit 12 on condition that the elevator is stopped, and the next step
Proceed to 24. On the other hand, the auxiliary control unit 12 determines whether the EE-ROM 4 can be changed in consideration of the state of the elevator.

At step 24, the CPU 1 actually executes the EE-
Write data to ROM4 and proceed to the next step 25,
In this step 25, it is judged whether or not the written data is normal. This judgment is made by reading the EE-ROM 4 once and comparing it with the written data.
If it is determined that it is not normal, the process returns to step 24, and if it is determined that it is normal, the process returns to step 21 and the above process is repeated. Therefore, in the elevator control device configured as described above, highly reliable data change can be performed.

Next, a time chart of the above operation procedure is shown in FIG. In FIG. 3, the write command shown in (a) indicates a write signal of the CPU 1, and the signal of this write command indicates that writing is possible at the L level. The write command shown in (b) indicates that the CPU 1 issues a command to the auxiliary control unit 12 to enable writing. Similarly, the write permission output shown in (c) indicates the signal output from the auxiliary control unit 12 to the determination unit 13. Furthermore, the EE-ROM shown in (d)
The write command is a signal output from the determination unit 13 to the EE-ROM 4.

On the other hand, step 21 shown in (e) simply indicates that the CPU 1 has issued a write command to the EE-ROM 4, and is an example in which the determination section does not accept it.
Further, step 23 is an example in which the CPU 1 issues the write command to the auxiliary control unit 12 in step 22, and the auxiliary control unit 12 determines that there is no problem.

The block diagram of FIG. 1 will be described in more detail below. In FIG. 1, the elevator can be controlled by using a 16-bit CPU 1, a 128-Kbyte EP-ROM 2, a 32-Kbyte RAM 3, and an input / output register of about 64 points.

In FIG. 1, the data and programs that can be expected to be changed are about 16 Kbytes, and the contents are stored in the EE-ROM 4. However, the present embodiment is characterized in that the auxiliary control unit 12 performs a time-out process.

This process is the pulse width of the write enable output of the auxiliary controller 12 in step 23 described above with reference to FIG. 3 (c). The auxiliary control unit 12 is composed of a CPU of about 8 bits, and is in the form of a general one-chip microcomputer. As a result, the auxiliary control unit 12 can sufficiently detect the state of the elevator like the CPU 1.

The processing procedure of the auxiliary control unit 12 of the elevator control device thus configured will be described with reference to the flowchart of FIG. First, the CPU status monitoring in step 31
This is a normal operation of the auxiliary control unit 12. In the next step 32, it is determined whether or not a write command from the CPU 1 to the EE-ROM 4 has been received. If there is a write command, the process proceeds to step 33, and if not, the process returns to step 31.

In step 33, the writing time for the EE-ROM 4 is set. EE-ROM4 has 32
If it is a page writable type of about Bytes / 10ms, it is desirable to set a restricted value of about 20ms, and if it is longer than this, the influence of malfunction may be considered.

In step 34, a permission signal is generated for the EE-ROM 4 for the write time set in step 33, and in the next step 35, the time-out time is determined. If it times out, go to the next step 36.
On the contrary, when the timeout has not occurred, the process returns to step 34. In this step 36, the write command for the EE-ROM 4 is reset and the normal monitoring is resumed.

Therefore, in the elevator control device configured as described above, the auxiliary control unit 12 performs EE
-Since the time for writing to the ROM 4 is also taken into consideration, it is possible to surely protect the data in the configuration in which the command from the CPU 1 is simply executed faithfully.

In the above embodiment, the case of the erasable non-volatile memory (EE-ROM) has been described, but the invention can be similarly applied to the flash erasable batch ROM or the battery-backed RAM.

In addition, the CPU 1
Power condition (for example, within the rated DC5V ± 5%),
By adding conditions such as an unstable state at power-on and a momentary power failure due to a lightning surge and checking the normal state of the CPU 1, a more reliable configuration can be achieved. Further, in the above-described embodiment, the auxiliary control unit 12 is a dedicated CPU, but can be similarly implemented in a CPU that also serves as another control, such as a CPU for a drive motor and a CPU for transmission. .

[0039]

As described above, according to the invention of claim 1,
In an elevator control device having a control unit having erasable storage means and data changing means for changing operation data stored in the storage means, an auxiliary control section for monitoring the operation of the control section, and the auxiliary control section Since the operation data stored in the storage means at the time of data change is protected by providing the judgment means for judging whether or not the signal for changing the operation data is inputted to the data change means, the control at the time of data writing It is possible to obtain an elevator control device that can prevent the disturbance of the.

According to a second aspect of the present invention, there is provided an elevator control device comprising a erasable storage means and a data change means for changing operation data stored in the storage means in a control unit. By providing an auxiliary control unit that monitors the operation of the control unit and a determination unit that determines that the auxiliary control unit and a signal for changing the operation data are input from the auxiliary control unit and the data change unit can be input, Since the operation data stored in the storage means is protected, it is possible to obtain the elevator control device capable of preventing the control disturbance during the data writing.

Further, according to the invention of claim 3,
In an elevator control device having a control unit having erasable storage means and data changing means for changing operation data stored in the storage means, an auxiliary control section for monitoring the operation of the control section, and the auxiliary control section A signal for changing the operation data and a signal indicating the state of the power supply of the control unit are input, and a judgment unit for judging whether or not the data can be input to the data changing unit is provided. Since the data is protected, it is possible to obtain the elevator control device capable of preventing the disturbance of the control at the time of writing the data.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of an elevator control device according to the present invention.

FIG. 2 is a flowchart showing the operation of the elevator control device of the present invention.

FIG. 3 is a time chart showing the operation of the elevator control device of the present invention.

FIG. 4 is a flowchart showing the operation of an auxiliary control unit of the elevator control device of the present invention.

FIG. 5 is a block diagram showing an example of a conventional elevator control device.

[Explanation of symbols]

1 ... CPU, 2, 4 ... EP-ROM, 3 ... RAM, 5 ...
Relay contact, 6 ... Digital input section, 7 ... Relay coil, 8 ... Digital output section, 10 ... Transmission control section, 11 ... DP
-RAM, 12 ... Auxiliary control section, 13 ... Judgment section.

Claims (3)

[Claims] 1. An elevator control device comprising a erasable storage means and a data change means for changing operation data stored in the storage means in a control portion, the auxiliary control portion monitoring operation of the control portion. An elevator control apparatus, further comprising: a determination unit that receives a signal for changing the operation data from the auxiliary control unit and determines whether the data change unit can be input. 2. An elevator control apparatus comprising a erasable storage means and a data changing means for changing operation data stored in the storage means in a control portion, the auxiliary control portion monitoring operation of the control portion. And an auxiliary control unit and a determination unit which determines that the signal for changing the operation data is input from the auxiliary control unit and determines that the data changing unit can be input. 3. An elevator control device comprising a erasable storage means and a data changing means for changing operation data stored in the storage means in a control portion, the auxiliary control portion monitoring operation of the control portion. A signal for changing the operation data and a signal indicating the state of the power source of the control unit are input from the auxiliary control unit, and a determination unit for determining whether or not the data change unit can be input is provided. Elevator control device.