JPH1160102A - Elevator controller - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an elevator controller in which reliability of a microcomputer circuit is improved. SOLUTION: An abnormality informing means 16 is operated at the time before the specified time set in a watch dog timer 6 and outputs an abnormality informing signal. A normal execution confirming means 17 traces the executive state of a task in a data storage section 4, checks the executive state of the task traced in the data storage section 4 when it receives an abnormality informing signal from the abnormality informing means 16, and clears the watch dog timer 6 by outputting a watch dog timer clearing signal when the executive state of the task is normal.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an elevator control device constructed using a microcomputer.

[0002]

2. Description of the Related Art Elevators are installed not only in middle and high-rise buildings but also in small buildings and private houses as vertical transportation in buildings. In recent years, the number of installations has dramatically increased, and the number of installations in Japan alone has exceeded hundreds of thousands.

[0003] Further, with the advance of semiconductor technology, most elevators are configured to be controlled by a control device using a plurality of microcomputers, and the miniaturization of the control device is being promoted along with the improvement of performance. .

[0004] A microcomputer constituting the elevator control device is provided to perform processes such as elevator operation control, motor control, elevator car processing, elevator landing processing, data transmission, and elevator car position detection. Microcomputers are also used in display devices installed in elevator cars and landings and in elevator monitoring devices. As described above, a plurality of microcomputers are used according to diversified configurations.

[0005] Each processing content in the elevator control device continues to improve in performance, and accordingly, a microcomputer is also configured to perform distributed processing for each of a plurality of processes. For example, even for a control device installed in an elevator machine room, independent microcomputers are employed for motor control, operation control, data transmission control, position detection, and the like, and perform respective processes.

[0006] The microcomputer circuit employed in performing these processes independently performs predetermined processes. However, it is a matter of course that the microcomputer which performs operation control is mainly operated. The microcomputer described above communicates data with an operation control microcomputer to control the elevator. As described above, microcomputer circuits are becoming more complicated at present.

FIG. 8 shows a configuration of an operation control microcomputer circuit in the elevator control device. The operation control microcomputer circuit includes a CPU 1 serving as a center of calculation, a peripheral program storage unit 3 connected to a bus 2 composed of addresses and data lines controlled by the CPU 1, a data storage unit 4, Data storage unit 8
It is composed of

[0008] The program storage section 3 is constituted by a nonvolatile read-only storage device EPROM, in which a program to be processed by the CPU 1 is stored in advance. The data storage unit 4 is configured by a volatile read / write storage device RAM, and stores input data and data resulting from arithmetic processing. In addition, the setting data storage unit 8
It is composed of an electrically erasable ROM EEROM,
Setting data required for the arithmetic processing in the CPU 1 is stored.

These devices are connected to and controlled by a bus 2 using about 30 signals such as addresses and data output from the CPU 1 and their control signals. Also,
A call control unit and a car position control unit connected to the operation control microcomputer circuit are similarly connected to the local bus 2 and controlled by the CPU 1. In FIG. 8, these are collectively indicated by an input / output device 5 (I / O5).

On the other hand, as a device for detecting that the CPU 1 has performed an abnormal operation, a watch dock timer 6 (W
DTC 6) and a voltage drop detection unit 7 are provided.
The watchdog timer 6 determines whether or not the CPU 1 is operating normally on the basis of a watchdog timer clear signal (WDTL) from the CPU 1. When it is detected that an error has occurred, an alarm signal is output to the CPU 1.

That is, the CPU 1 outputs a watchdog timer clear signal (hereinafter referred to as WDTCL) to the watchdog timer 6 at regular intervals during execution of a program. In response, the watchdog timer 6 sets its own counter to zero. WDTCL even after a certain time
If there is no input, watchdog timer 6
A RESET signal is output to PU1, and CPU 1 stops operating. This is called a WDT trip,
Commonly used to indicate a program error.

On the other hand, the voltage drop detector 7 outputs a warning signal to the CPU 1 when the power supply voltage of the microcomputer circuit drops. In FIG. 8, the warning signal is CP
U1 is input as NMI (non-maskable interrupt), and the elevator control is stopped by software. As a result, the operation can be stopped without executing abnormal processing. Here, non-maskable interrupt N
MI is an interrupt signal that cannot be prohibited by software.

Further, a remote monitoring device may be connected to the elevator control device. In such a system,
As shown in FIG. 9, a RESET signal is output from the remote monitoring device 12 installed separately from the elevator control device 11 to the elevator control device 11. The remote monitoring device 12 uses a microcomputer of about 16 bits to monitor the operation status of the elevator, and notifies the elevator maintenance company 14 of the status one by one via the communication line switching network 13.

As one of the functions of such a system,
There is a function to reset the elevator control device 11. This is the same as the RESET signal to the CPU 1 in FIG.
The CPU 1 is temporarily stopped and then restarted.

[0015]

However, in a device including a motor drive typified by an elevator, an inverter circuit for switching a current of several hundred A at several kHz is included in the device itself. Noise may cause an abnormality in the microcomputer circuit.
Naturally, the microcomputer circuit itself has been implemented with measures to improve its reliability. Although the reliability of the microcomputer circuit itself has been ensured, a watchdog timer 6 for confirming its operation and a voltage drop detection If the unit 7 malfunctions, the CPU 1 is stopped. Therefore, it is necessary to take different measures as compared with other circuits.

Further, in the system configuration shown in FIG. 9, there is a possibility of malfunction due to data error on the communication line other than the inverter device. There is a possibility that an elevator will stop.

An object of the present invention is to provide an elevator control device having improved microcomputer circuit reliability.

[0018]

An elevator control apparatus according to the first aspect of the present invention determines whether the operation state of a microcomputer is normal or abnormal based on whether a watchdog timer has counted a predetermined time, An elevator control device in which when the watchdog timer counts a predetermined time after receiving a watchdog timer clear signal from the microcomputer, the microcomputer determines that the operation state of the microcomputer is abnormal and stops the microcomputer. An abnormality notification unit that operates earlier than a predetermined time set in the timer and outputs an abnormality notification signal, and traces the execution state of the task and checks the execution state of the traced task when an abnormality notification signal is received. Watchdog when the execution status is normal It is obtained by a successfully executed confirmation means for outputting a Imakuria signal.

In the elevator control apparatus according to the first aspect of the present invention, the abnormality notification means operates earlier than a predetermined time set in the watchdog timer and outputs an abnormality notification signal. The execution normality checking means traces the execution state of the task to the data storage unit, and upon receiving an abnormality notification signal from the abnormality notification means, checks the execution state of the task traced to the data storage unit and executes the task. When the status is normal, a watchdog timer clear signal is output to clear the watchdog timer.

According to a second aspect of the present invention, in the elevator control apparatus according to the first aspect of the present invention, the abnormality notification signal is stored as error information of the apparatus in the data storage together with the time of occurrence thereof.

In the elevator control apparatus according to the second aspect of the present invention, in addition to the operation of the first aspect of the present invention, an abnormality notification signal is stored in the data storage section as error information of the apparatus. The error information is stored together with the time of occurrence and used as a database at the time of maintenance and inspection.

According to a third aspect of the present invention, in the elevator control apparatus according to the second aspect of the present invention, an abnormality notification signal is notified as error information of the apparatus to an elevator maintenance company via a communication line. .

In the elevator control apparatus according to the third aspect of the present invention, in addition to the operation of the second aspect of the present invention, the abnormality notification signal is stored as error information of the apparatus in the data storage unit and the elevator via the communication line. Contact the maintenance company.

According to a fourth aspect of the present invention, in the elevator control apparatus according to the first aspect of the present invention, the execution normality checking means includes:
Reads the counter value of the watchdog timer after receiving the watchdog timer clear signal, determines whether or not the count value is equal to or less than a predetermined reference value.If the count value is equal to or less than the predetermined reference value, the watchdog timer is determined to be normal. This is to determine.

In the elevator control apparatus according to a fourth aspect of the present invention, in addition to the operation of the first aspect of the present invention, the execution normality check means includes a counter of the watchdog timer when the watchdog timer clear signal is cleared and the counting is started. Read the value. Then, it is determined whether or not the count value is equal to or less than a predetermined reference value. When the count value is equal to or less than the predetermined reference value, it is determined that the watchdog timer is normal.

According to a fifth aspect of the present invention, in the elevator control device according to the first aspect of the present invention, the input of the abnormality notification signal to the execution normality check means is a non-maskable which cannot be ignored by the microcomputer itself by setting by software. In this case, an interrupt is used.

In the elevator control apparatus according to the fifth aspect of the present invention, in addition to the operation of the first aspect of the invention, the microcomputer itself uses a non-maskable interrupt as an input to the execution normality confirmation means for the abnormality notification signal. Cannot ignore the error notification signal input by software setting. Therefore, the abnormality notification signal is input to the execution normality checking means without error.

In the elevator control apparatus according to the sixth aspect of the present invention, in the first aspect of the invention, the execution normality checking means comprises:
The operation of the subroutine in the task is traced, and it is determined that the execution state of the task is normal by the completion of the operation of each subroutine.

In the elevator control apparatus according to the sixth aspect of the present invention, in addition to the function of the first aspect of the present invention, the execution normality checking means performs the tracing of the execution state of the task.
Trace the operation of a subroutine in a task. Then, it is determined that the execution state of the task is normal when the operation of each subroutine is completed. Therefore, the accuracy of determining the normality of the execution state of the table is improved.

According to a seventh aspect of the present invention, in the elevator control device according to the first aspect of the present invention, the determination as to whether the task execution state is normal is performed by performing the execution normality checking means instead of the execution normality checking means.
This is performed by a watchdog timer for checking the task execution state.

In the elevator control apparatus according to the seventh aspect of the present invention, in addition to the operation of the first aspect of the present invention, the determination as to whether the task execution state is normal is not made by software execution normality confirmation means but by software. This is performed by a watchdog timer for checking the task execution state as hardware. Therefore, the reliability of the normality determination of the execution state of the task is improved.

The elevator control device according to the invention of claim 8 is the elevator control device according to claim 1, wherein the execution normality checking means comprises:
The processing execution time for each task is measured, and when the task execution time is within the reference value, it is determined that the task execution state is normal.

In the elevator control apparatus according to the eighth aspect of the present invention, in addition to the effect of the first aspect of the present invention, whether the task execution state is normal is determined by measuring the processing execution time for each task. It is determined whether each task execution time is within the reference value. If it is within the reference value, it is determined that the execution state of the task is normal.

The elevator control apparatus according to the ninth aspect of the present invention is the elevator control apparatus according to the first aspect of the present invention,
When the execution state of the task is normal, the count of the watchdog timer is stopped.

In the elevator control apparatus according to the ninth aspect of the present invention, in addition to the operation of the first aspect of the present invention, when the execution normality check means determines that the task execution state is normal, the watchdog timer clear signal is output. Instead, the count of the watchdog timer is stopped. Thereafter, the microcomputer outputs a watchdog timer clear signal, and the watchdog timer starts counting.

According to a tenth aspect of the present invention, in the elevator control device according to the first aspect, when an abnormality notification signal is input from the remote monitoring device, the execution normality checking means checks the execution state of the traced task. When the execution state of the task is normal, the notification is sent to the remote monitoring device.

In the elevator control apparatus according to the tenth aspect of the present invention, in addition to the operation of the first aspect, when an abnormality notification signal is input from a remote monitoring apparatus for monitoring the elevator control apparatus, the operation of the elevator control apparatus is executed. The normality check means checks the execution state of the task traced in the data storage unit, and when the execution state of the task is normal, notifies the remote monitoring device of the execution state.

[0038]

Embodiments of the present invention will be described below. FIG. 1 is a block diagram of an elevator control device according to a first embodiment of the present invention. The first embodiment is different from the conventional example shown in FIG. 8 in that abnormality notification means 16 which operates earlier than a predetermined time set in the watchdog timer 6 and outputs an abnormality notification signal, And the execution normality check means 17 for outputting the watchdog timer clear signal WDTCL when the execution state of the traced task is checked and the execution state of the task is normal when the abnormality notification signal is received and when the execution state of the task is normal. The output signal of the abnormality notification means 16 is output to the CPU 1 via the OR circuit 9 together with the output signal of the voltage drop detection unit 7.
Is output to

That is, the output of the watchdog timer 6 is not only the reset means (OUT1) 18 but also the abnormality notification means 16 (OUT2), so that the output becomes two points. Further, the abnormality notification means 16 is connected to the voltage drop detection
And the output from the OR circuit 9 and the NM of the CPU 1
Input to I port. This is called an abnormality report. In the program storage unit (ROM) 3, a program for realizing the normal execution confirmation means 17 is stored, and in the data storage unit (ROM) 4, a task calculated by the normal execution confirmation means 17 is executed. Is stored.

FIG. 2 is a configuration diagram of the watchdog timer 6 according to the first embodiment of the present invention. Normally, the watchdog timer 6 is constituted by a one-shot pulse generation circuit by oscillation of the capacitance C and the resistance R,
Here, the one using the counter circuit 15 is shown.

Oscillator 10 connected to counter circuit 15
Is usually about 200 KHz. When the count value based on the pulse from the oscillator 10 becomes equal to or greater than a preset value, the output signal from the terminal QN becomes H level.
, And the output signal of the reset means 18 becomes H. For this reason, RESET is applied to the CPU 1. Further, the counter circuit 15 is provided with a terminal QM,
It is set so that the output signal of the terminal QM becomes H before the output signal of the terminal QN becomes H. Thereby, NMI is applied to the CPU 1 from the abnormality notification means 16.

FIG. 3 is an explanatory diagram for detecting the execution state of the task of the CPU 1. FIG. 3 shows an example in which four tasks perform elevator operation control processing. In other words, the configuration is such that task 2, task 3, task 4, and then task 1 are started again after task 1. Here, the completion of execution of each task is stored in the data storage unit 4. This process is left as a task execution result of one program cycle (from task 1 to execution of the next task 1). By doing so, when the task operates normally, the execution state of the task is recorded in the data storage unit 4.

Next, FIG. 4 is a flowchart showing the processing contents of the normal execution confirmation means 17. This routine is called every cycle. Step S
Reference numeral 1 denotes processing for saving the execution state of the task shown in FIG. In step S2, it is determined whether or not there is an abnormality notification signal from the watchdog timer 6.
If no abnormality notification signal is detected, that is, if no NMI input is detected, the routine is completed.
On the other hand, if there is an NMI input, the process proceeds to step S3.

In step S3, the task execution status of each cycle stored in the data storage unit 4 in step S1 is confirmed, and the task execution status until an abnormality notification signal is input is checked. In step S4, based on the result of step S3, it is determined whether or not the execution state of the task is abnormal. If the execution state of the task is abnormal and the program is likely to be abnormal, the routine is executed. Complete. When the routine is completed, there is a possibility that after a while, the RISET signal is established and the WDT trip state is set.

On the other hand, if it is determined in step S4 that the task execution state is normal, a watchdog timer clear signal (WDTCL signal) is output to the watchdog timer 6 in step S5. As a result, the watchdog timer 6 is cleared.

Here, in the first embodiment, the CPU 1
Uses a 16-bit microcomputer, the program storage unit 3 has 128 Kbytes, and the data storage unit 4 has 32 bytes.
Use about K bytes. Elevator operation control is possible with this degree. The WDT time at this time is set to about one second.

A 250 KHz ceramic oscillator is attached to the watchdog timer 6 as the oscillator 10, and a binary counter capable of counting up to about 2 to the power of 20 is used as the counter circuit 15. At this time, the terminal QN satisfying the WDT time may use an 18th power output port. The terminal QM is preferably about 50% of the WDT time, and a ninth power output port may be used as QN / 2.

Generally, the execution time of a task is about 100 ms. Therefore, if the WDTCL signal is output each time the program is executed, the WDTCL interval is 100 ms.
Becomes Therefore, at the worst, an error can be detected in five program executions. The data storage unit 4
The area for storing the execution state of the task in the above may be about 20 bytes × 20 = 400 bytes. This is 1
Assuming that the number of tasks per cycle is 4, tracing is possible with 20 bytes, and the time for one cycle is 100 m
This is because if s is 20 cycles, a task for 2 seconds can be saved if there are 20 cycles, and an abnormally started task can be included.

The execution state data of this task includes task 1
The execution state of the task is saved by setting bit0 to 1 when the execution of the task is completed and setting 1 to bit1 when the execution of the task 2 is completed. In addition, since this data is processed in the form of a ring counter, data of a time irrelevant to the WDT trip (in this case, 2 seconds or more before) is overwritten. The WDTCL signal is output from an I / O port of the CPU 1.

Next, when an abnormality notification signal from the abnormality notification means 16 or the voltage drop detecting section 7 is input as an NMI input of the CPU 1, the NMI input is used as error information of the apparatus, and the data storage section is displayed together with the time of occurrence. 4 is stored. That is, the error information of the elevator control device 11 is added to the task execution state data in the normal execution confirmation means 17. In this way, the history of the error information is stored, and the history of the error information is referred to at the time of maintenance and inspection of the elevator.

When the elevator control device 11 of the present invention is configured as an elevator control system connected to the remote monitoring device 12 as shown in FIG. 9, the abnormality notification signal is used as error information of the device and stored in the data storage unit. 4 and communicate with the elevator maintenance company 14 via the remote monitoring device 12 and the communication line.

Next, the soundness of the watchdog timer 6 can be confirmed by the execution normality confirmation means 17. FIG. 5 is a configuration diagram of the watchdog timer 6 in that case. The watchdog timer 6 in FIG. 5 is configured so that the count value of the counter circuit 15 can be directly connected to the bus 2 of the CPU 1 and the count value is read by the CPU 1. The execution normality checking means 17 determines the soundness of the watchdog timer 6 based on the count value. That is, immediately after the input of the WDTCL signal, the execution normality check means 17 determines whether or not the counter value is close to 0, and determines that the counter value is normal if the counter value is close to 0. become.

FIG. 6 shows an execution normality check means 17 in that case.
5 is a flowchart showing the processing contents of FIG. Step S1
1 performs the original task, and executes step S1.
When the task execution is completed in step 2, a WDTCL signal is output. This processing is included in the original elevator control device. When the task is completed and the WDTCL signal is output, the process proceeds to step S13, where the watchdog timer 6
Read the count value of Then, in step S14, it is determined whether or not the count value obtained in step S13 is a value close to 0 (reference value). This reference value is determined by the frequency of the oscillator 10 and the processing time of a time interrupt or the like.

Then, as a result of the determination in step S14,
If the count value is equal to or smaller than the reference value, the process proceeds to step S15, and it is determined that the watchdog timer 6 is normal. On the other hand, if the count value is equal to or greater than the reference value, it is determined in step S16 that the watchdog timer 6 is abnormal. As a result, if the watchdog timer 6 is abnormal, the abnormality notification signal may be ignored.

In the above description, the abnormality information signal is transmitted to the CPU 1
The NMI port is used for inputting to the NMI port. However, since the NMI port does not have all the functions of the CPU 1, a general input or an interrupt signal may be used. In this case, NM
Since the I port is not used, there is a drawback that it is impossible to cope with a case where the program is completely abnormal. However, at this time, since a RESET signal is generated due to a WDT trip, it is effective for minor abnormalities. .

Here, whether or not the execution state of the task is normal in the execution normality checking means 17 is such that the task is determined to be normal upon completion of each task. The operation may be traced to check the detailed operation. In this case, the storage area of the task execution state in the data storage unit 4 has a capacity of about 10 times, but accurate determination is possible.

The execution status of the task is confirmed by the execution normality confirmation means 17 which is software, but a dedicated watchdog timer W is used for this confirmation.
DTC may be provided. In this case, the normal / abnormal state of the program can be detected only by hardware.

In the execution normality checking means 17, whether or not the execution state of the task is normal is determined by the completion of each task, and the task is determined to be normal. The time may be measured to determine whether the execution time is appropriate.

In the above description, in response to the input of the abnormality notification signal, the execution normality checking means 17 performs a countermeasure by outputting the watchdog timer clear signal WDTCL as in the normal routine. On the other hand, the subsequent counting may be stopped. In other words, when the execution normality checking unit 17 determines that the task execution state is normal, the count of the watchdog timer 6 may be stopped instead of outputting the watchdog timer clear signal WDTCL. . In this case, the microcomputer outputs a watchdog timer clear signal WDCL after that,
The watchdog timer 6 starts counting again.

When the elevator control device 11 of the present invention is configured as an elevator control system connected to the remote monitoring device 12 as shown in FIG. It is also possible to input the abnormality notification signal first before receiving the signal and make the determination.

In FIG. 7, an abnormality notification signal from the remote monitoring device 12 is added to the conventional example shown in FIG. 8, and the CPU 1 is once sent to the CPU 1 at a time earlier than the RESET signal to the elevator control device 11. It is to report.

The elevator control device 11 has a configuration corresponding to FIG. 1. The abnormality notification signal is converted into an NMI signal to the CPU 1 and input to the CPU 1, and if the program is normal, a notification is sent to the remote monitoring device 12 by data communication processing. I do.
Of course, RESET for the elevator control device 11
Since the signal is not only when the program is abnormal, this determination is made by the remote monitoring device 12 to check again and RESET.
It will output a signal.

In the above description, the watch dock timer 6
Although the description has been given of the case where the present invention is applied to an abnormality of the voltage drop detection unit 7, the present invention can be similarly applied to a parity error of a storage device at the time of executing a task. In addition, watch dock timer 6
Although the configuration using the oscillator 10 has been described above, the present invention can be easily applied to a configuration using the capacitance C and the resistance R, a program timer, and the like.

When the elevator control device 11 is configured as an elevator control system connected to the remote monitoring device 12, the RESET signal from the remote monitoring device 12 has been described.
Application is also possible to the 1 reset button. This is to prevent the elevator from being stopped by touching the reset button due to an operation error during maintenance.
In addition, although the operation control unit has been described as an example, it goes without saying that other control such as motor control can be similarly applied.

[0065]

As described above, according to the first aspect of the present invention, even when the watchdog timer malfunctions due to disturbance such as noise, it can be detected before the CPU stops operating. It is possible to obtain stable performance by reducing it.

According to the second aspect of the present invention, the occurrence of a malfunction of the watchdog timer is preserved, so that a countermeasure can be taken from the presence or absence of an abnormality at the time of elevator maintenance, and preventive maintenance before a serious failure occurs can be performed.

According to the third aspect of the invention, the occurrence of a malfunction of the watchdog timer can be reported to the elevator maintenance company in real time, so that preventive maintenance can be performed before a serious failure occurs.

According to the fourth aspect of the present invention, the abnormality of the watchdog timer can be detected in a short time, so that there is an advantage that the response after the occurrence of the abnormality becomes easy. According to the fifth aspect of the present invention, the non-maskable interrupt is used. So
The abnormality notification signal is input to the execution normality check means without error.

According to the invention of claim 6, the detection of the operation of the program can be checked in more detail, and according to the invention of claim 7, the detection of the operation of the program can be realized by another hardware, so that the CPU load is increased. Is feasible.

According to the invention of claim 8, an abnormality in the execution state of the task can be detected by measuring the execution time of the task. According to the invention of claim 9, the watchdog timer having the abnormality is invalidated. Therefore, effective protection against continuous noise generation can be achieved. According to the tenth aspect of the present invention, the RESET signal of the elevator control device by remote operation can be made reliable.

[Brief description of the drawings]

FIG. 1 is a block configuration diagram of an elevator control device according to a first embodiment of the present invention.

FIG. 2 is a configuration diagram of a watchdog timer according to the first embodiment of the present invention.

FIG. 3 is a diagram showing C in the first embodiment of the present invention.
FIG. 9 is an explanatory diagram for detecting an execution state of a task in a PU.

FIG. 4 is a flowchart showing the processing contents of a normal execution confirmation unit according to the first embodiment of the present invention.

FIG. 5 is a configuration diagram of the watchdog timer in a case where the normality of the execution of the watchdog timer can be confirmed by the normal execution confirmation means in the first embodiment of the present invention.

FIG. 6 is a flowchart illustrating the processing performed by a normal execution check unit when checking the soundness of the watchdog timer illustrated in FIG. 5;

FIG. 7 is a block diagram of an elevator control system when a remote monitoring device is connected to the elevator control device of the present invention.

FIG. 8 is a block diagram of a conventional elevator control device.

FIG. 9 is a block diagram of a conventional elevator control system when a remote monitoring device is connected to the conventional elevator control device.

[Explanation of symbols]

 Reference Signs List 1 CPU 2 bus 3 program storage unit 4 data storage unit 5 input / output device (I / O) 6 watchdog timer (WDTC) 7 voltage drop detection unit 8 setting data storage unit 9 OR circuit 10 oscillator 11 elevator control device 12 remote Monitoring device 13 Communication line 14 Elevator maintenance company 15 Counter circuit 16 Abnormality reporting means 17 Normal execution confirmation means 18 Reset means

Claims (10)

[Claims] The microcomputer determines whether the operation state of the microcomputer is normal or abnormal based on whether a watchdog timer has counted a predetermined time, and the watchdog timer receives a watchdog timer clear signal from the microcomputer. After counting a predetermined time, the elevator control device determines that the operation state of the microcomputer is abnormal and stops the microcomputer, and operates at a time earlier than the predetermined time set in the watchdog timer. Abnormality notification means for outputting an abnormality notification signal, and tracing the execution state of the task and checking the execution state of the traced task when receiving the abnormality notification signal, and when the execution state of the task is normal, Outputs the watchdog timer clear signal An elevator control device comprising: an execution normality check unit for performing the operation. 2. The elevator control device according to claim 1, wherein the abnormality notification signal is used as error information of the device.
An elevator control device characterized in that it is stored in a data storage section together with the time of occurrence. 3. The elevator control device according to claim 2, wherein the abnormality notification signal is used as error information of the device.
An elevator control device, wherein an elevator maintenance company is contacted via a communication line. 4. The elevator control device according to claim 1, wherein the execution normality check means reads a counter value of the watchdog timer after receiving the watchdog timer clear signal, and the count value is set to a predetermined reference value. The elevator control device is characterized in that it is determined whether or not it is less than or equal to a predetermined reference value, and when it is less than a predetermined reference value, the watchdog timer is determined to be normal. 5. The elevator control device according to claim 1, wherein the input of the abnormality notification signal to the execution normality checking means uses a non-maskable interrupt that cannot be ignored by the microcomputer itself by software setting. An elevator control device characterized in that: 6. The elevator control device according to claim 1, wherein the execution normality checking means traces the operation of the subroutine in the task, and confirms that the execution state of the task is normal by completing the operation of each subroutine. An elevator control device characterized in that the determination is made by: 7. The elevator dock control apparatus according to claim 1, wherein the determination whether the execution state of the task is normal is made by a watchdog timer for task execution state confirmation instead of the execution normality confirmation unit. An elevator control device characterized in that the control is performed by: 8. The elevator control device according to claim 1, wherein the execution normality checking means measures a processing execution time for each task, and when each task execution time is within a reference value, the task execution time is determined. An elevator control apparatus characterized in that it is determined that the execution state of (i) is normal. 9. The elevator control device according to claim 1, wherein the execution normality checking means stops counting of the watchdog timer when the execution state of the task is normal. Elevator control device. 10. The elevator control device according to claim 1, wherein when an abnormality notification signal is input from a remote monitoring device, the execution normality checking means checks an execution state of the traced task, and executes the task. An elevator control device, wherein when the status is normal, the remote monitoring device is notified.