JPH07125941A - Elevator control system - Google Patents

Abstract

PURPOSE:To improve the reliability of a system by receiving the transmitted data from a transmission circuit included in each control device, detecting a normal transmission confirmation error when the transmitted data and the received data do not coincide, and blocking a transmission start. CONSTITUTION:In a three-car group supervisory operation elevator control system having a plurality of service floors, an operating group supervisory control device 10M is provided with a group supervisory control microcomputer (host) 1G, an intelligent processing (back-up) group supervisory control device 10S is provided with a group supervisory control microcomputer 1S, and the group supervisory control device 10S has the function or the like as the back-up of the group supervisory control device 10M. Car control devices 10a1-10a3 are provided with car microcomputers 1a1-1a3, and the data transmission among the microcomputers 1G, 1S and the first through third car control microcomputers 10a1-10a3 is made via common transmission lines. A normal transmission confirmation error is detected when transmitted data and received data do not coincide.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an elevator control system, and more particularly to a method for transmitting data between elevator control devices arranged in parallel.

[0002]

2. Description of the Related Art An elevator control device devised in terms of how to use a communication transmission line, as disclosed in Japanese Patent Laid-Open No. 2-158278, detects that a common transmission line has a vacancy for a predetermined time or more, There is a transmission line management method that improves the reliability of the system by sending data to the transmission line.

[0003]

SUMMARY OF THE INVENTION In the above-mentioned prior art, in a side-by-side elevator control system in which a plurality of control devices are connected by a common transmission line, a transmission circuit part and a reception circuit part of a transmission circuit incorporated in each control device. Since only the case where both of them simultaneously fail, the sending circuit part of the transmission circuit is normal, and when only the receiving circuit part fails, it is not possible to determine whether or not the common transmission path is in use. The control device that is allowed to manage the common transmission line starts transmission to the common transmission line, monopolizes the common transmission line or duplicates the use with other control devices, and the transmission between the control devices There was a problem that an abnormality occurred and the side-by-side elevator system went down.

It is an object of the present invention to improve reliability in elevator control systems.

[0005]

The above-mentioned object is to receive the transmission data from the transmission circuit included in each control device in each control device and detect it as a regular transmission confirmation error when it does not match the transmission data, This is achieved by providing means for preventing the transmission circuit of the own transmission circuit from starting transmission.

[0006]

With the above configuration, when any of the control devices has a failure in the receiving circuit of its own station, the transmission to the common transmission line is blocked after the normal transmission confirmation error of the transmission data is detected for a predetermined time. By doing so, the system is restored with a partial loss of function after the system has been down for a certain period of time, so it is possible to prevent a complete stop of the function of the entire system and improve the reliability of the parallel installation elevator system.

[0007]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment in which the present invention is applied to an elevator control system will be described below with reference to FIGS. FIG. 1 shows the configuration of a group management elevator control system according to an embodiment of the present invention. 3 shows an elevator control system for managing three units having service floors B1 to 8F. In FIG. 1, service floors 1 to 4F are illustrated, and other floors are omitted. In FIG. 1, a group management microcomputer (host) 1G built in an operation group management control device 10M is
Input / output terminal devices (hereinafter, abbreviated as terminals) 4c1 to 4c connected to the group management I / O transmission circuits M17H1 to M17H3 and further interfacing each floor installation device for two floors
3, 4d1 to 4d3, and bus (common data transmission path) 3b
They are connected by 1 to 3b3. Further, the group microcomputer 1G is connected to a network transmission circuit M17C1 having two sets of transmission interface circuits and reception interface circuits for one transmission circuit, and is connected to the group management device 10S of the intelligent processing system (standby system). Network transmission circuit S17C
1, connected to the network transmission circuits 17a1 to 17a3 incorporated in the respective unit control devices 10a1 to 10a3. Between these two transmitting circuits a and b of the transmitting device and the receiving circuit, and the maintenance terminal device 10 shown in FIG.
H, monitoring panel, centrifugal monitoring system terminal, and transmission circuits of transmission devices 17U1 and 17H1 incorporated in a multi-function interface terminal device 10U (hereinafter abbreviated as U, C, B) used for information input and registration control system The common transmission lines L17a and L17b in which a and b are wired in a dual system are connected to each other.

Further, a transmission circuit M1 is provided between the group supervisory control devices 10S and 10M and the maintenance terminal device 10H.
Bus line L1 by 7C2, S17C2, L17H3
The group management control device of the group management control devices 10M and 10S, or the state of learning / acquisition knowledge data, which is connected via 0G.
Or, perform elevator operation survey and group management control data communication between the two systems.

The group management controller 10S has the same structure as the group management controller 10M, and has a group management microcomputer 1S, a network transmission circuit S17C1, a group management data transmission circuit S17C2, and a group management I / O transmission circuit. S17H1
S17H3 are connected to the buses 3b1 to 3b3 via the bus lines L17H1 to L17H3, and have a function as a backup of the group management control device 10M. These backup operations can be automatically switched depending on the self-diagnosis result of the microcomputer 1G and the failure diagnosis result by the hardware circuit. On the other hand, each unit control device 1
0a1 to 10a3 are network transmission circuits 17a1 to 17a3 and elevator I / O transmission circuits 2a1 having two receiving circuits for each of the machine microcomputers 1a1 to 1a3 and one transmission control device connected thereto. 2a3. In addition, elevator I / O transmission circuits 2a1-2
The a3 is connected to the terminals 4c1 to 4c3 and 4d1 to 4d3 on each floor for each elevator via the buses 3b1 to 3b3. Further, it is connected via buses 3a1 to 3a3 to a terminal (not shown) installed for in-car operation or the like.

In the three elevator group management system having the above configuration, the first elevator group management control device (hereinafter, operating system) microcomputer 1G and the second elevator group management control device (hereinafter, intelligent system) microcomputer 1S About 1
Data transmission between the third unit control microcomputers 10a1 to 10a3 will be described with reference to the time chart of FIG. At the start of transmission, the common transmission line L17 from the operating system that has the transmission line control right first
It transmits and receives to and from the intelligent system via a. Next, the operating system sends service floor command data to each unit, and the operating status data (car position data, car weight data, etc.) is transmitted to the operating system for each unit.

Next, a time chart when a failure occurs in the operating system will be described with reference to FIG. Transmission from the operating system to the intelligent system is not performed because the operating system that initially has the transmission control right fails, and the intelligent system detects a reception error continuously for a predetermined time and determines that the operating system is faulty. . Therefore, the intelligent system switches the control state to the standby system and starts transmission to each unit control device. First, the standby system transmits service floor command data to the No. 1 control device, and the No. 1 control device sends back operation status data (car position data, car weight data, etc.) to the standby system. Next, the standby system transmits the service floor command data to the No. 2 control device, and the No. 2 control device returns the operation status data (car position data, car weight data, etc.) to the operation system. Next, the standby system transmits service floor command data to the No. 3 control device, and the No. 3 control device sends operation status data (car position, car weight data, etc.) to the standby system. Further, when both group management control devices are out of order, the number control microcomputer in the number control device detects an abnormality, and instead of the group microcomputer, the service floor command data is transmitted on the network transmission line via the network transmission control device 17a1 and the like. To send to other units. As a result, the deterioration of elevator service can be minimized.

Next, a method of preventing the drive of the transmission circuit when a transmission abnormality is detected at the time of transmission from the local station, which is a feature of the present invention, will be described.

This processing shows the entire operation of the abnormality processing program of the intelligent system group management microcomputer in FIG. In the operation flow chart, it is confirmed in step 100 whether there is a normal transmission, and if abnormal, it is determined in step 200 whether the transmission data from the partner microcomputer (operating system) can be normally received. If normal reception is not possible, it is determined that the partner microcomputer (operating system) has failed, and after 45 seconds have elapsed in step 300, the control state is switched from the intelligent system to the standby system. In step 400, it is determined whether the retry counter is within 8 times. If it is within 8 times, in step 500 data is sent to the network transmission line as a standby system. Next, in step 600, the last one byte of the transmission data is received (all may be used), and the transmission data is compared, and if there is no difference, it is determined that there is no transmission confirmation error. Set the send confirmation error flag. If it is confirmed in step 700 that the transmission confirmation error flag is continuously standing for a predetermined time (30 S) or more, in step 800 the transmission circuit driving subroutine is stopped by updating the transmission permission flag Prevents circuit drive. Step 20
If 0 does not detect the abnormality of the partner microcomputer, step 2
At 50, check whether an error has occurred in the group management software. If an error is detected here, software restart processing is performed in step 260 and the abnormality diagnosis processing ends. If no soft error is detected in step 200, it is determined in step 400 whether the retry counter is within 8 times. If it is less than 8 times, it is operatively connected to the network transmission line as an intelligent system or standby system in step 500, and if it is 8 times or more, there is an abnormality in the intelligent system group management software, so in step 450 processing as an intelligent system or standby system is performed. Then, in step 500, the driving of the transmission circuit is blocked and the transmission is stopped. If it is determined in step 100 that there is regular transmission, the transmission stop is released.

Next, the operation of the operation system group management microcomputer will be described with reference to an operation flowchart. At step 100, it is confirmed whether there is a proper transmission. If it is judged as a transmission error, step
At 200, it is judged whether the reply data from the intelligent system can be normally received. If it cannot be received normally, the abnormality of the partner microcomputer is detected, and it is determined in step 300 whether the retry counter is within 8 times. If it is less than 8 times, the operation system is operatively connected to the network transmission line in step 400 and step 5
Proceed to 00. Further, if it is determined in step 300 that the retry counter is eight times or more, the operation of the operation system is stopped in step 350, the driving of the transmission circuit is blocked in step 700, the transmission circuit is disconnected from the network transmission path, and the abnormality diagnosis processing is ended. In step 500, the last 1 byte of the transmission data is received (all the data may be received), the transmission data is compared, and if they match, it is determined that there is no transmission confirmation error.
If they do not match, a normal transmission confirmation error flag is set as a transmission data regular transmission confirmation error. Step 600
If it is confirmed that the regular transmission confirmation error flag is continuously turned on for a predetermined time (30S) or more in step 700, step 700
Then, the drive of the transmission circuit is blocked and the abnormality diagnosis processing is ended. If normal transmission is detected in step 100, step 150
Stops driving of the transmission circuit and stops the abnormality diagnosis process. If you do not detect the abnormality of the intelligent system in step 200,
At step 250, it is confirmed whether an error has occurred in the operation system management software. If an error is detected here, software restart processing is performed in step 260 and the abnormality diagnosis processing is stopped. If no soft error has occurred, the process proceeds to step 300.

FIG. 4 which is a flow chart of the group management elevator operation management control will be described. Step 1 when power is turned on
At 00, initial processing (restart) is performed. Next, at step 200, input / output processing of data required for elevator control is performed. In step 300, the input control data is edited. In steps 400 and 500, the abnormality detection process for the intelligent system or the operating system, which is shown in detail in FIGS. 5 and 6, is performed at a cycle of 1 second. Thereafter, in step 600, it is determined whether or not an abnormality has occurred in the group management software, and if not, the process loops to step 200. If an abnormality occurs, the process returns to step 100 and re-initialization processing is performed.

Next, the operation at the time of abnormality detection will be described with reference to FIGS. 5 and 6 by taking the group management elevator system as an example. First, a case where the receiving circuit of the intelligent group control microcomputer fails will be described. Since the intelligent system cannot receive the transmission from the driving system, an abnormality of the driving system is detected in step 200 of FIG. Since there is no reply from the intelligent system in step 200 in FIG. 6 on the driving system side, an abnormality in the intelligent system is detected, and
Go to step 300. Since the retry counter is 8 or less in step 300 of FIG. 6, it is connected to the common transmission line as an operation system in step 400 of FIG. 6 and data is sent to the machine control microcomputer on the common transmission line. On the other hand, the intelligent microcomputer detects an abnormality in the operating system in step 300 of FIG. 5, changes the control state from the intelligent system to the standby system after a predetermined time (45S), and connects to the common transmission line as the standby system in step 500. To be done. The standby system sends data to the machine control microcomputer on the common transmission line. At this time, since the data sent from the operating system and the data sent from the standby system are sent simultaneously to the common transmission line, the machine control microcomputer detects a transmission abnormality and leaves control from the group management microcomputer to perform backup operation. The intelligent system cannot properly receive the send data sent on the common transmission line in step 600 of FIG. 5 due to the failure of the receiving circuit, resulting in a normal send confirmation error of the send data. In step 800 for continuous (30S) detection for a predetermined time, driving of the transmission circuit is blocked. As a result, only the operating system sends data to the machine control microcomputer on the common transmission path, so that the machine control microcomputers have normal transmission and are re-entered into the group management. Thus, by disconnecting the intelligent microcomputer from the common transmission line after the group management system goes down, it is possible to recover the group management system by the operating system after a lapse of a predetermined time even though the learning function of the intelligent system is lost. Next, a case where the receiving circuit of the driving system fails will be described as an example.
Since the driving system cannot receive the reply from the intelligent system, FIG.
In step 200, the abnormality of the partner microcomputer is detected, and in step 400 of FIG. 6, the operation system is operatively connected to the network transmission line and data transmission to the machine control microcomputer is continued. Next, when trying to receive the sending data sent on the common transmission line in step 500 of FIG. 6, normal reception cannot be performed because the receiving circuit is broken, and a normal sending confirmation error of the sending data is generated. Since the detection is continuously performed for a predetermined time (30 S) in step 600, the driving of the transmission circuit is blocked in step 700 of step FIG. At this time, in the intelligent system, there is no transmission from the driving system, an abnormality of the driving system is detected in step 200 of FIG. 5, and step 300 of FIG.
Then, after a lapse of a predetermined time (45S), the system is switched to the standby system. During this 45 seconds, no data is sent from each unit control microcomputer, so a transmission error is detected and backup operation is performed separately from the control of the group management control device, but from the standby system to each unit control microcomputer on a common transmission line. When all the data are started to be sent, the control microcomputers of the respective units are in a normal transmission state and are transferred to the group management again. As a result, by disconnecting the operating microcomputer from the common transmission line after the group management system is down for a predetermined period of time, it is possible to recover the group management system by the standby system after a lapse of a predetermined time, even though the learning function of the intelligent system is lost. I can.

FIG. 2 shows the configuration of a side-by-side elevator control system which is an embodiment of the present invention. 3 shows an elevator control system for managing three vehicles having service floors B1 to 8F. In FIG. 1, service floors 1 to 4F are illustrated and other floors are omitted. Input / output terminal devices (hereinafter abbreviated as terminals) 4c1 to 4c3, 4d1 to 4d3 for interfacing each floor installed device for the second floor are connected by buses (common data transmission paths) 3b1 to 3b3. Further, the network transmission circuits 17a1 to 17a3 incorporated in the respective unit control devices 10a1 to 10a3, the a and b two transmission circuits and the reception circuits of these transmission devices, and the maintenance terminal device 10H, monitoring panel, and remote monitoring. System terminal, multi-functional interface terminal device 10U (hereinafter U, used for information input, registration control system, etc.)
Transmission devices 17U1 and 17 incorporated in C and B)
A common transmission line L in which the transmission circuits a and b of H1 are wired in a dual system
17a and L17b connect to each other.

Further, each unit control device 10a1-10a3.
Are network transmission circuits 17a1 to 17a3 and elevator I / O transmission control devices 2a1 to 2a3 each having two receiving circuits for each of the respective unit microcomputers 1a1 to 1a3 and one transmission control device connected to them. Composed of. In addition, elevator I / O transmission circuits 2a1 to 2a3
Connects to terminals 4c1 to 4c3 and 4d1 to 4d3 on each floor for each elevator via buses 3b1 to 3b3.
Further, it is connected via buses 3a1-3a3 to a terminal (not shown) installed for in-car operation or the like.

Next, FIG. 7 of the parallel elevator operation management control flowchart will be described. First, (a) the flowchart of the parallel elevator operation control method A will be described. At step 100, the operating condition data such as the elevator position, direction, car call, and car overload of the own machine and other machines are fetched and the input table is edited. In step 200, a hall call signal or a floor floor zone signal of the own machine is created, and the own machine is operated based on the signal. In step 300, the car position is used as the operation status data of the own machine,
Set the load and driving direction on the transmission table to other units. Further, (b) a flowchart of the parallel elevator operation control method B will be described. In step 100, it is determined whether or not the own station is the control unit. If the own station is the control unit, the process proceeds to step 200, and if not, the process proceeds to step 150, and the car call, the load in the car, the operating direction, etc. are set in the transmission table to the control unit as the operation status data. In step 160, the hall call signal received from the management machine is received by the reception table 1 and set in the control table. If it is a control machine, the operation status data of the own machine and other machines received in step 200 are input and edited. In step 200, the operation status data of the own machine and the imported operation status data of other machines are edited. Based on the operating status data of each unit input in step 300, the responsible hall call signal or the responsible zone of each unit is determined. In step 400, the control data for other machines is set in the transmission table 2, and the control data for own machine is set in the control table for own machine.

Next, the abnormality diagnosis process of each elevator control device in the parallel elevator will be described with reference to the flowchart of FIG. Assuming that this abnormality diagnosis subroutine is called in the 1s task, for example, it is first determined in step 100 whether or not normal transmission is performed. If normal, the processing proceeds to step 150, and if abnormal, the processing proceeds to step 200. In step 200, if the transmission data from the partner's machine cannot be received, it is determined that the partner's machine is out of order, and the abnormality of the partner's machine is detected. When the abnormality of the partner's machine is detected, it is judged in step 300 whether the retry counter of the own station is counted 8 times or more. If it is 8 times or less, the own station is connected to the common transmission line as the management machine in step 400, and step 500 is executed. Go to. If the value of the retry counter is 8 times or more, the processing as the control machine is stopped in step 350, the driving of the transmission circuit is blocked and the transmission is stopped in step 700, and the abnormality diagnosis processing is ended. Step 50
When it is 0, the last 1 byte of the transmission data is received (all the data may be received), and if there is a match with the phase transmission data and they match, it is judged that there is no transmission confirmation error. If they do not match, a transmission confirmation error is determined and the transmission confirmation error flag is turned on. In step 600, the transmission confirmation error flag is set for a predetermined time (30S)
When it is confirmed that the power is continuously turned on as described above, in step 700, the driving of the sending circuit is stopped, the transmission is stopped, and the abnormality diagnosis processing is ended. When it is determined in step 100 that there is normal transmission, in step 150 the driving of the transmission circuit is blocked, the transmission is stopped, and the abnormality diagnosis processing ends.

Next, the abnormality diagnosing process for the unmanaged unit of the parallel elevator control device will be described with reference to the flowchart of FIG. First, in step 100, it is determined whether or not normal transmission is performed. If normal, the process proceeds to step 150, and if abnormal, the process proceeds to step 200. In step 200, if the transmission data from the partner's machine cannot be received, it is determined that the partner's machine is out of order, and the abnormality of the partner's machine is detected. When an abnormality of the other machine is detected, a predetermined time (45S) in step 300
After the lapse of time, it will switch from the unmanaged unit to the managed unit. Next, in step 400, it is judged whether or not the retry counter of the own station has counted eight times or more. If it is eight times or less, step 50
When it is 0, the own station is connected to the common transmission line as a management machine, and the process proceeds to step 600. If the value of the retry counter is 8 times or more, the processing as the control machine is stopped in step 450,
In step 800, the driving of the transmission circuit is blocked, the transmission is stopped, and the abnormality diagnosis processing is ended. In step 600, the last 1 byte of the transmitted data is received (all may be used).
Then, if it matches the transmission data and matches, it is determined that there is no transmission confirmation error. If they do not match, a transmission confirmation error is determined and the transmission confirmation error flag is turned on. When it is confirmed in step 700 that the transmission confirmation error flag is continuously turned on for a predetermined time (30 S) or more, in step 800, driving of the transmission circuit is blocked, transmission is stopped, and the abnormality diagnosis processing is ended. When it is determined in step 100 that there is normal transmission, in step 150 the driving of the transmission circuit is blocked, the transmission is stopped, and the abnormality diagnosis processing ends.

Next, the operation at the time of detecting an abnormality in the side-by-side elevator system will be described with reference to FIGS. First, the case where the receiving circuit of the partner machine (unmanaged machine) fails will be described. Since the partner machine cannot receive the transmission from the management machine, the abnormality of the management machine is detected in step 200 of FIG. Since there is no reply from the system at step 200 of FIG. 8 on the management machine side, an abnormality of the partner machine is detected, and
Go to step 300 of. Since the retry counter is 8 or less in step 300 of FIG. 8, step 40 of FIG.
When it is 0, it is connected to the common transmission line as a control number and sends data to the partner's number to the common transmission line. On the other hand, the partner machine detects the abnormality of the management machine in step 300 of FIG. 9, and changes the control state from the unmanaged machine state to the management machine state after a predetermined time (45S), and in step 500 of FIG. It is operatively connected to the common transmission line and sends data to other units to the common transmission line. At this time, since the transmission data from the control machine and the transmission data of the partner machine are simultaneously transmitted to the common transmission line, each machine detects a transmission abnormality and leaves the control from the management machine to operate independently. The partner machine cannot normally receive the send data sent on the common transmission line in step 600 of FIG. 9 due to the failure of the receiving circuit, resulting in a normal send confirmation error of the send data. In step 800 of FIG. 9 for detecting continuously (30S) for a predetermined time, driving of the transmission circuit is blocked. As a result, only the control machine sends data to the other machine's microcomputer on the common transmission path, so that each machine becomes normal in transmission and is reintroduced into the group management. As a result, by disconnecting the abnormal machine from the common transmission line after the group management system goes down, the group management system can be restored by the operating system after a lapse of a predetermined time even though the learning function of the intelligent system is lost. Next, a case where the receiving circuit of the management machine is deceased will be described as an example. Since the management machine cannot receive the reply from the partner machine, the abnormality of the partner microcomputer is detected in step 200 of FIG. 8, and the management machine is operatively connected to the network transmission line in step 400 of FIG. Continue sending data. Next, when trying to receive the sending data sent on the common transmission line in step 500 of FIG. 8, a normal sending confirmation error of the sending data occurs because the receiving circuit cannot be received normally because of a failure of the receiving circuit.
This is continued for a predetermined time in step 600 of FIG. 8 (30S)
In order to detect, the driving of the transmitter circuit is blocked in step 700 of FIG. At this time, the transmission from the management machine disappears in the partner machine, the abnormality of the management machine is detected in step 200 of FIG. 9, and the machine is switched to the management machine after a predetermined time (45S) has elapsed in step 300 of FIG. During this 45 seconds, no data is sent out from each unit, so a transmission error is detected,
Although it operates independently from the control of the management machine, when the data of each machine is started to be sent to the common transmission line from the other machine, each machine becomes a normal transmission and is rejoined to the group management. As a result, by disconnecting the faulty control unit from the common transmission line after the parallel elevator system goes down for a predetermined period of time, it is possible to recover the parallel elevator system by another unit after the lapse of a predetermined time, although some functions are lost. Can be done.

[0023]

According to the present invention, in an elevator control system in which a plurality of control devices are connected by a common transmission line, common transmission is performed even if only the receiving circuit of the transmission circuit included in each control device fails. By reading the sending data at the time of sending the data to the path, if the data sending cannot be normally confirmed for a predetermined period of time, it is judged that a failure has occurred in the receiving circuit, the driving of the sending circuit is blocked, and the common transmission path Stops sending data to. As a result, even if the control device with a failure in the receiving circuit monopolizes the common transmission line or duplicates it with another control device and the system goes down, after a predetermined time has passed, the control device with the receiving circuit failure is shared. Since it is separated from the transmission line, the system can be restored with some functions in the system lost.

[Brief description of drawings]

FIG. 1 is a block diagram of a group management elevator control system.

FIG. 2 is a block diagram of a side-by-side elevator control system.

FIG. 3 is a common transmission path transmission time chart.

FIG. 4 is a group management elevator operation management control flowchart.

FIG. 5 is a flowchart of intelligent system abnormality diagnosis processing.

FIG. 6 is a flowchart of an operation system abnormality diagnosis process.

FIG. 7 is a flowchart for operation management control of parallel elevators.

FIG. 8 is a flow chart of abnormality diagnosis processing of a control machine in a parallel elevator.

FIG. 9 is a flowchart of an abnormality diagnosing process for an unmanaged unit in a parallel elevator.

[Explanation of symbols]

250 ... Software error occurred, 400 ... Retry within 8 times, 800 ... Command to stop transmission.

 ─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Kenfumi Kuragane 2-832, Horiguchi, Katsuta-shi, Ibaraki Hitachi System Plaza Katsuta Hitachi Mito Engineering Co., Ltd. (72) Inventor Kenji Yoneda 1070, Ige, Katsuta-shi, Ibaraki Hitachi, Ltd. Mito Plant (72) Inventor Keiichi Aida 2-832, Horiguchi, Katsuta City, Ibaraki Hitachi Elevator Engineering Co., Ltd.

Claims (6)

[Claims] 1. A plurality of control devices including at least one set of transmission circuits each including a transmission circuit and a reception circuit and including an elevator control device for driving a car, and a plurality of control devices incorporated in the control device and connecting the transmission circuits. In the elevator control system including a common transmission path, at least a part of the data transmitted by the transmission circuit of the transmission circuit incorporated in each control device is received by the reception circuit that constitutes the transmission circuit that transmits the data. And a means for detecting a match between the transmitted send data and the received data, a transmitting circuit abnormality detecting means for detecting a mismatch between the transmitting circuits constituting the transmission circuits in the respective control devices, and the transmitting An elevator control system comprising: means for preventing the drive of the transmission circuit when the circuit abnormality detecting means operates. 2. The elevator according to claim 1, wherein the transmission abnormality detection means receives at least the final data of the transmission data of the transmission circuits, which constitutes a transmission circuit incorporated in each of the control devices, and detects the transmission abnormality. Control system. 3. A plurality of elevator control devices for driving at least a car, a first elevator group management control device for pointing out a service for a hall call generated in any of the plurality of elevator control devices, and the first control device. Failure detecting means for detecting a failure of the elevator group management control device, and, when a failure of the first elevator group management control device is detected, a second elevator group issuing a service for a hall call in place of this In an elevator control system including a management control device and a common transmission line, the first elevator group management control device failure detection means uses the common transmission line based on data received by a reception circuit of the second elevator group management control device. If the transmission is not received for at least a predetermined period, it is configured to monitor the data transmission via It is determined that the elevator group management control device has failed, and at this time, the second elevator group management control device is switched to a standby system that substitutes all or part of the functions of the first elevator group management control device. And a standby system switching means for transmitting service floor command data for a hall call to each of the elevator control devices via the common transmission path. 4. The third elevator group management control device after switching to the first elevator group management control device and the standby system mode according to claim 3, wherein a transmission data transmission abnormality in the transmission circuit is detected for a predetermined time. In the case of continuous detection, the common transmission is provided by transmission stop means for preventing driving of the transmission circuit of the first elevator group management control device or the second elevator group management control device, and failure control of the reception circuit. Group control elevator control system characterized by preventing monopoly or duplicate use of roads and preventing continuous system down. 5. An elevator control system, comprising: a plurality of elevator control devices for controlling the operation of elevators servicing a plurality of floors; and a common transmission path connecting between transmission circuits incorporated in the elevator control devices. The operation control means for giving service floor commands etc. to each elevator control device to the control device and the operation control transmission in which the only elevator control device performs data transmission necessary for operation control on the common transmission path Transmission management control means, means for confirming the mutual status between the units with reception data from the common transmission line, and transmission management elevator control device for determining a failure of the transmission management unit with reception data from the reception circuit Of the transmission line management abnormality detecting means for detecting the failure of the above, and the elevator control device when the transmission line management abnormality detecting means detects a failure. , Juxtaposed elevator control system characterized by comprising a means for switching to the common transmission line management. 6. The unmanaged switching means according to claim 5, wherein when it is not possible to confirm correct data transmission to each of the elevator control devices by the transmission path, the transmission management control means of the common transmission path brings it into an unmanaged state. An elevator control system, comprising: the above-mentioned common transmission line, which prevents a monopoly or duplicate use of the common transmission line due to a failure of a receiving circuit, prevents a continuous system down, and enables the normal elevator control device to use the common transmission line.