KR20190083670A - Remote recovery system of elevator faults - Google Patents

Abstract

The information processing device 360 extracts a plurality of kinds of restoration commands including a program update command corresponding to the failure code included in the failure signal when the failure signal is received from the elevator control device 200. [ The information processing apparatus 360 refers to the recovery rate of each of the extracted recovery commands and transmits a program update command to the elevator control device 200 when the recovery rate corresponding to the program update command is higher than other recovery commands do.

Description

Remote recovery system of elevator faults

The present invention relates to a system for remotely recovering a fault in an elevator.

BACKGROUND ART Conventionally, a system is known in which a recovery command is sent from a remote management center or the like when a fault such as a failure occurs in an elevator, and the recovery is attempted.

For example, in Patent Document 1, when an individual control request (customer request) of an equipment in a building occurs, an update program is rebuilt in accordance with the specification of the equipment in the building in the monitoring center, And stores it as a verification program. The verification program is switched to the self-diagnosis, and if the self-diagnosis is satisfactory, the verification program is copied (updated) to the activation program. On the other hand, if there is a problem in the result of the self-diagnosis, it switches to the existing operation program and notifies the monitoring center of abnormality.

Patent Document 2 discloses a software rewriting system having a function of monitoring the state of a work machine by reading an error log (error code) generated from the work machine and a function of changing the gas control program by rewriting the control software of the work machine . In this system, an error code generated in the working machine is read out, the defect occurrence point and the content of the defect are specified, and the setting value in the gas control program of the working machine is rewritten to adjust the failure of the working machine.

JP 2009-286600 A JP 2008-144435 A

An object of the present invention is to provide a remote restoration system of an elevator failure capable of more reliably restoring a failure such as a failure by program updating.

The present invention relates to an elevator remote recovery device, which communicates with an elevator control device that performs drive control of an elevator. The remote recovery apparatus includes an information processing apparatus and a recovery diagnosis database. The information processing apparatus receives a failure signal including a failure code of the elevator from the elevator control device and sends a restoration command corresponding to the failure of the elevator to the elevator control device. In the recovery diagnosis database, a plurality of types of recovery commands corresponding to the failure code and a recovery rate when the respective recovery commands are executed are stored. The information processing apparatus extracts a plurality of types of restoration commands including a program update command corresponding to the failure code included in the failure signal when a failure signal is received from the elevator control device. The information processing apparatus refers to the recovery rate of each of the extracted recovery commands and sends a program update command to the elevator control device when the recovery rate corresponding to the program update command is higher than other recovery commands.

In the above invention, the remote restoration device may include a program database, which is applied to the elevator control device at the time of sending out the failure signal, in which a version of the program different from that of the current version is stored. In this case, when a newer version of the program is stored in the program database than the current version of the program, the information processing device may transmit the program of the new version to the elevator control device as the program update command.

In the above invention, the remote restoration device may include a storage unit for storing the program update schedule management data for which the update schedule of the plurality of elevator control devices for updating the program of the new version is determined. In this case, when transmitting the program of the new version as the program update command to the elevator control device, the information processing device may advance the update order in the program update schedule management data of the elevator control device of the transmission destination to the head.

Further, in the above invention, the remote restoration apparatus may include a program database, which is applied to the elevator control apparatus at the time of sending out the failure signal, in which a version of the program different from that of the current version is stored. In this case, when the program of the new version is not stored in the program database as compared with the program of the current version, the information processing apparatus transmits the program of the version earlier than the current version of the program to the elevator control device You can.

According to the present invention, the recovery operation by the program update is executed when the recovery rate is higher than the other recovery operations. This makes it possible to more reliably solve defects such as malfunctions than in the past due to program updating.

BRIEF DESCRIPTION OF DRAWINGS FIG. 1 is a block diagram showing a configuration of a remote recovery system for an elevator failure in an embodiment of the present invention. FIG.
2 is a functional block diagram of a remote recovery system for an elevator failure in an embodiment of the present invention.
3 is a diagram showing a configuration of the maintenance database shown in FIG.
4 is a diagram showing the configuration of the recovery diagnosis database shown in FIG.
5 is a flowchart showing the operation of the remote recovery system of an elevator failure in the embodiment of the present invention.
6 is a flowchart showing the operation of the remote recovery system of an elevator failure in the embodiment of the present invention.
FIG. 7 is a diagram showing the configuration of a restoration diagnostic database. FIG.
8 is a diagram showing the configuration of the restoration diagnostic database.
Fig. 9 is a systematic diagram showing a configuration related to a program update command, in particular, of the configuration of a remote recovery system for an elevator fault in an embodiment of the present invention. Fig.
10 is a diagram showing functional blocks related to the program update command, among the functional blocks of the elevator failure remote recovery system according to the embodiment of the present invention.
11 is a diagram illustrating program update history data.
12 is a flowchart for explaining a program download process.
13 is a diagram illustrating program update schedule management data.
Fig. 14 is a diagram for explaining details of the recovery command selection step S106 in Fig. 5; Fig.
15 is a diagram showing another example of the configuration of the restoration diagnostic database.

Hereinafter, an elevator failure remote recovery system 100 according to the present embodiment will be described with reference to the drawings. 1, the remote restoration system 100 includes an elevator control device 200 that performs drive control of an elevator 20 disposed in a hoistway 11 of a building 10, an elevator control device 200 that controls the elevator control device 200, And a remote recovery device 300 for causing the elevator 20 to perform a recovery operation of the failure. The elevator 20 for allowing the remote recovery apparatus 300 to perform the recovery operation may be one rental or plural rental. When there are a plurality of elevators 20, each elevator 20 may be installed in the same building 10 or may be installed in another building 10.

The elevator control device 200 includes a control panel 210 and a communication device 250 for controlling the driving of the elevator 20. The control panel 210 is a computer including a CPU and a memory therein. The remote recovery apparatus 300 further includes a remote monitoring center 310 including the communication apparatus 320 and the monitoring panel 330, an information processing apparatus 360, a maintenance database 370, 380). The remote monitoring center 310, the information processing apparatus 360, the maintenance database 370 and the restoration diagnosis database 380 may be installed at the same place or may be installed at different places and connected to each other by lines or the like .

The communication device 250 is connected to the control panel 210 and transmits the output from the control panel 210 to the communication network 30. [ The communication device 250 receives the command for the control panel 210 selected by referring to the recovery diagnosis database 380 through the communication device 320 and the communication network 30 by the information processing device 360 And outputs it to the control panel 210. The communication device 320 receives a signal from the control panel 210 via the communication device 250 and the communication network 30 and outputs the signal to the information processing device 360. The communication device 320 also transmits a command to the control panel 210 selected by the information processing device 360 to the communication network 30. [ The communication devices 250 and 320 may be devices that perform wireless communication or devices that perform wired communication. The communication network 30 may be an Internet communication network or a telephone line network.

The remote monitoring center 310 is provided with a monitoring unit 330 for monitoring the operation status and the failure status of the elevator 20 by exchanging data with the information processing unit 360. The supervisory panel 330 is provided with a display 331 for displaying the operational state of the elevator 20, a failure situation, a notification from the information processing apparatus 360, and a switch 332 for operating the display 331 Is installed. The monitoring unit 330 is also provided with a telephone 333 for communicating with the service center 340 via the communication network 35. [

The maintenance database 370 stores the specifications of the elevator 20, and history data such as inspection, repair, and repair. The recovery diagnosis database 380 stores a plurality of failure factors corresponding to the failure code output from the control panel 210 of the elevator 20, and data such as the number and the recovery rate thereof.

The information processing apparatus 360 is a computer including a CPU and a memory therein. A failure signal outputted by the control panel 210 when a failure occurs in the elevator 20 is inputted to the information processing apparatus 360 via the communication devices 250 and 320 and the communication network 30. When the failure signal is input, the information processing apparatus 360 refers to the data in the recovery diagnosis database 380 and selects a recovery command and a recovery diagnosis command corresponding to the failure code included in the failure signal. The selected restoration command and the restoration diagnosis command are input to the control panel 210 via the communication devices 250 and 320 and the communication network 30 to cause the elevator 20 to perform the restoration operation and the restoration diagnosis operation.

2, elevator specification data 371, inspection history data 372, maintenance work history data 373, remote maintenance history data 374, and modulation history data 375 are stored in the maintenance database 370, Repair history data 376, failure history data 377, and failure factor-specific data 378 are stored.

3, the elevator specification data 371, inspection history data 372, maintenance work history data 373, remote maintenance history data 374, modulation history data 375, repair work history data 372, 376, fault history data 377, and fault-specific data 378 will be described.

The elevator specification data 371 has a data structure for storing data such as a management number of the elevator 20, a model, a manufacturing date, a manufacturing number, a name of the building to be installed, and data of the use of the building. The purpose of the installation building is, for example, an office, a general residence, a restaurant, a school, and the like.

The inspection history data 372 has a data structure for storing the control number of the elevator 20, the date and time of the inspection performed locally by the descriptor 350, inspection items, and inspection result data. Inspection is carried out by, for example, inspecting the opening and closing states of the doors 13 and 26 of the elevator 20 shown in Fig. 1 and inspecting the stop positions of the respective floors (the bottom floor 12 of the floor 22 and the floor 27 ), Inspection of the wire 23, inspection of the traveling speed, and the like. In addition, whether the inspection result indicates that an abnormality has been found, whether a repair operation such as cleaning is necessary, or a component replacement is not required even though no abnormality has been found is input. In Fig. 1, reference numeral 25 denotes a weight.

The maintenance work history data 373 has a database structure for storing the maintenance number of the elevator 20, the repair work date and time of the elevator 20 performed by the engineer 350, the maintenance work item, and the repair work result. The maintenance work items include, for example, an operation check of the elevator 20, a cleaning of the door rails of the elevator 20, a lubrication to the drive unit 24 shown in Fig. 1, a brake adjustment of the elevator 20 to be. The results of the maintenance work include the results of inspection, cleaning, refueling, and adjustment.

The remote maintenance history data 374 has a data structure for storing the maintenance number of the elevator 20, the remote maintenance date and time, the remote maintenance item, and the remote maintenance result. The remote control of the elevator 20 is carried out by the control panel 210 of the elevator 20 according to a preset schedule, for example once a month. The control panel 210 of the elevator 20 moves the car 22 of the elevator 20 shown in Fig. 1 to a predetermined layer. It is checked by the various sensors attached to the elevator 20 whether or not there is any abnormality in the operation performance (acceleration, abnormal sound), door opening / closing, braking, emergency battery and external communication device. And stores the check result in the remote check history data 374 from the information processing apparatus 360 via the communication devices 250 and 320 and the communication network 30. [ The remote monitoring may be performed by an instruction from the remote monitoring center 310. [

The modulation history data 375 has a data structure for storing the management number of the elevator 20, the date and time of occurrence of modulation, the modulation item, and the modulation correspondence result. Modulation of the elevator 20 means that when the result of the inspection, the inspection, the repair work or the remote inspection by the engineer 350 does not reach the abnormal value but is changed more than the normal value of the elevator 20 Quot; For example, when the result of inspection of the traveling speed is within the permissible value, but the difference from the value of the inspection result of the elevator 20 is large at the time of the last inspection, Driving speed ".

The repair history data 376 has a data structure for storing the maintenance number of the elevator 20, date and time of repair work, repair work item, and repair work result. Repair work is repair work by replacing parts such as wire 23 exchange, hanger roller exchange, brake pad exchange, control board exchange, and relay exchange. Therefore, the name of the replacement part such as "wire exchange", "hanger roller exchange", "brake pad exchange", etc. is inputted to the repair work item, and the result of the repair work includes "repair work end", " "And the like are input.

The failure history data 377 has a data structure for storing a management number of the elevator 20, a failure occurrence date and time, a failure code, a recovery method, and a restoration judgment result. The failure code is a code obtained by combining numbers, numerals, and alphabets output from the control panel 210 when a failure occurs in the elevator 20. The number of types of failure codes is, for example, about 1000 types. In the item of the restoration method, for example, when the technician 350 is dispatched and inspected, checked, and restored, "technician dispatch" is input. The item of the recovery method is input, for example, as "remote recovery" in the case of recovery by the remote recovery system 100. [ When the elevator 20 is restored and the operation is resumed, the item of the restoration judgment result is inputted as "restoration ". When the elevator 20 fails to recover, the item of the restoration judgment result is inputted as "failure ".

The fault-specific data 378 indicates the number of fault factors corresponding to the fault code according to the result of inspection and inspection performed by the engineer 350 at the site when the fault code is output from the control panel 210, And the total number of failure factors corresponding to the failure code in the case of recovery to the remote recovery system 100 is stored. For example, when the fault code is 0001 indicating a fault relating to the doors 13 and 26, the engineer 350 checks the fault locator of the fault code "0001" Failure factor 1), contact failure of door switch device (failure factor 2), or other failure factor 3. Thus, the data for each failure cause is as follows. When the failure code "0001" is output, 100 cases are the clogging factor of the door threshold (failure factor 1), 100 cases are the case where the contact failure of the door opening / The data structure is such that the number of cases is 50, and the case of the other failure factors 3 is 10, and the data is arranged in the order of the number of cases. In the case of recovery by the remote recovery system 100, when the recovery of the elevator 20 is successful due to the restoration command, the number of the failure factors corresponding to the failure code serving as the basis of the restoration command is the number of the total failure factors .

4, the restoration diagnostic database 380 includes, in descending order of the number of failure factors of the failure factor-specific data 378, a restoration diagnosis command set as a set of restoration commands and restoration diagnosis commands, (%), Which is the rate at which the failure of the elevator 20 is recovered due to the execution of the repair operation. The recovery diagnosis database 380 is a database in which the recovery diagnosis command set and the recovery rate are interlocked with the above-described failure-specific data 378.

Hereinafter, the data configuration of the recovery diagnosis database 380 in the case where the failure code is "0001 " indicating the failure relating to the doors 13 and 26 will be described. When the door threshold is a cause of clogging of the garbage (failure factor 1), the recovery diagnosis data includes "door circuit reset + door height torque opening / closing" as the recovery command to the number data of the failure factor 1, "door opening / And a recovery rate x% by a recovery operation based on the recovery instruction. Likewise, when the contact failure of the door opening / closing apparatus switch is a factor (failure factor 2), the recovery diagnosis data includes "door circuit reset + door opening / closing retry" as the recovery command, And a recovery diagnosis command set B which is a set of two commands of "door opening / closing diagnosis" and a recovery rate y% of the recovery operation by this recovery command. Likewise, in the case of the failure factor 3, the recovery diagnosis data has a data structure in which the number-of-failure-data-number data 3 is linked to the recovery-diagnosis command set C and the recovery rate z%. In this way, the recovery diagnosis database 380 associates the failure code, the failure factor corresponding to the failure code, the number of the failure factors, the recovery diagnosis command set, which is the set of the recovery command and the recovery diagnosis, It is stored in the database. In the present embodiment, the recovery rate y% is larger than the recovery rate x%, z%, and the recovery diagnosis command set B has a higher recovery rate than the recovery diagnosis command set A and the recovery diagnosis command set C.

Hereinafter, the operation of the remote recovery system 100 when a failure signal is transmitted from the elevator 20 will be described with reference to Figs. 2, 5, and 6. Fig. In the following description, a description will be given of the remote recovery operation when the failure code signal "0001 " relating to the doors 13 and 26 is transmitted first. Next, a description will be given of the remote restoring operation when the failure code "0002" related to the control circuit provided in the control panel 210 is transmitted. Next, a description will be given of the remote restoration operation in the case where the failure code "0003 " relating to the brake in the drive unit 24 is transmitted. The remote recovery system 100 can also cope with a case where a failure code relating to the other parts is transmitted.

As shown in step S101 of FIG. 2 and FIG. 5, the control panel 210 of the elevator 20 determines whether or not a failure has occurred in the elevator 20. In the event of a failure such as door open / close failure, for example, in the case of a failure with respect to the doors 13 and 26 of the elevator 20, the control panel 210 displays the failure date and time and the failure code And outputs "0001" to the communication device 250. If no failure occurs in the elevator 20, the control panel 210 returns to the beginning of the step S101 and continues the monitoring of the elevator 20.

When the failure code "0001" is input from the control panel 210, the communication device 250 transmits the failure code "0001 ", the management number of the elevator 20, To the communication network (30). The communication device 320 of the remote monitoring center 310 receives the failure signal transmitted from the communication device 250 via the communication network 30 as shown in step S103 of FIG. 2 and FIG. Upon receiving the fault signal, the communication device 320 outputs the fault code "0001" included in the fault signal, the control number of the elevator 20, and the fault occurrence date and time to the information processing apparatus 360. The information processing apparatus 360 stores the inputted failure code "0001", the management number of the elevator 20, and the failure occurrence date and time in the failure history data 377 of the maintenance database 370.

Then, the information processing apparatus 360 determines whether or not the elevator 20 in which the failure has occurred can be remotely recovered, as shown in step S104 in Fig. 2 and 3, the information processing apparatus 360 acquires the model, the manufacture date, and the manufacturing number of the elevator 20 from the elevator specification data 371 using the control number of the elevator 20. [ The information processing apparatus 360 determines whether or not the elevator 20 is capable of executing a recovery command from the remote recovery apparatus 300 and a recovery operation and a recovery diagnosis operation based on the recovery diagnosis command based on the acquired specification data Check. When the elevator 20 is of a type in which the elevator 20 can not perform the remote restoration operation, the information processing apparatus 360 transmits to the remote monitoring center 310 a signal for notifying the remote surveillance center 310 of the impossibility of remote recovery, as shown in step S124 in FIG. 2 and FIG. .

2, the information processing apparatus 360 includes inspection history data 372, maintenance work history data 373, remote maintenance history data 374, modulation history data 375, (A) to (f) with reference to the data 376 and the failure history data 377. [

(a) The elevator 20 has been instructed to correct the uncomfortable position in a recent inspection.

(b) The elevator 20 is scheduled to be repaired recently or on the same day, and the possibility of misadjustment is predicted.

(c) In the remote check, the elevator 20 had the above diagnosis result.

(d) In recent years, modulation has occurred in the elevator 20.

(e) The elevator 20 has recently undergone repair work.

(f) The elevator 20 has recently issued a fault signal based on the same fault code "0001 ".

When the information processing apparatus 360 is in any one or more of the above (a) to (f), the information processing apparatus 360 is configured to send the descriptor 350 to the building 10 It is judged that dispatch is better, and it is judged as "NO" in step S104 of FIG. Then, as shown in step S124 of FIG. 2 and FIG. 5, the information processing apparatus 360 outputs a notification of the remote recovery impossibility to the remote monitoring center 310. [

The information processing apparatus 360 also uses the elevator 20 management number to determine from the elevator specification data 371 and the fault history data 377 whether the building 10 has a lot of faulty signal transmission Check. In such a case, the information processing apparatus 360 determines that it is better to send the technician 350 to the building 10 than to the recovery by the remote recovery system 100, NO "in step S104 of FIG. Then, as shown in step S124 in FIG. 2 and FIG. 5, the information processing apparatus 360 outputs a notification of the remote recovery impossibility to the remote monitoring center 310. [

The notification of the remote recovery impossible output from the information processing apparatus 360 to the remote monitoring center 310 is displayed on the display 331 of the remote monitoring center 310 as shown in Fig. When the monitor 334 confirms this display, the supervisor 334 instructs the elevator 20 to stop the operation and performs the broadcasting operation, as shown in step S125 in Fig. 2 and Fig. The supervisor 334 then dispatches the technician 350 to the building 10 in the service center 340 near the building 10 as shown in step S126 of Fig. 2 and Fig. 6 by the telephone 333 .

If the elevator 20 determines that the elevator 20 can not be remotely recovered in step S104 of FIG. 5, the information processing apparatus 360 determines in step S103 whether or not the inputted failure code "0001" and the management number of the elevator 20, And stores the occurrence date and time in the failure history data 377 of the maintenance database 370. The information processing device 360 then terminates the remote recovery operation without updating other data in the maintenance database 370 and updating the recovery diagnostic database 380. [

On the other hand, in step S104 shown in FIG. 5, the information processing apparatus 360 includes the inspection history data 372, the maintenance work history data 373, the remote maintenance history data 374, (G) to (n) below with reference to the history data 375, repair construction history data 376, and failure history data 377. [

(g) The elevator 20 is a specification capable of executing a recovery command from the remote recovery apparatus 300, a recovery operation by a recovery diagnosis command, and a recovery diagnosis operation.

(h) The elevator 20 does not indicate that there is a correcting instruction at a location which is not adjusted due to a recent inspection.

(i) The elevator 20 does not have a repair plan on the latest or the same day, and the possibility of misadjustment is not predicted.

(j) There is no diagnosis result in the elevator 20 due to the remote check.

(k) Recently, there is no occurrence of modulation in the elevator 20.

(l) The elevator 20 is not undergoing repair work recently.

(m) The elevator 20 has not recently issued a fault signal based on the same fault code "0001 ".

(n) The building 10 is not a building with a lot of malfunctioning signals.

If all of the above requirements (g) to (n) are satisfied, the information processing apparatus 360 determines YES in step S104 shown in FIG. 5, and in step S105, And notifies the start of the remote recovery. This signal is displayed on the display 331 of the remote monitoring center 310. This informs the supervisor 334 of the remote monitoring center 310 that remote recovery of the elevator 20 is started.

When the information processing apparatus 360 notifies the remote monitoring center 310 of the start of the remote recovery in step S105, the information processing apparatus 360 proceeds to step S106 shown in FIG. 5 and transmits a recovery command and a recovery diagnosis command corresponding to the failure code "0001 & Select. First, as described with reference to Fig. 4, the recovery diagnosis database 380 is a database in which the recovery diagnosis command set and the recovery rate are interlocked with the fault-specific data 378. Hereinafter, the data configuration of the restoration diagnostic database 380 in the case where the failure code is "0001 " indicating a failure relating to the doors 13 and 26 will be briefly described again. When the door threshold is a cause of clogging of the garbage (failure factor 1), the recovery diagnosis data includes "door circuit reset + door height torque opening / closing" as the recovery command to the number data of the failure factor 1, &Quot;, which is a set of two instructions, and a recovery rate x% by a recovery operation based on the recovery command. Likewise, when the contact failure of the door opening / closing apparatus switch is a factor (failure factor 2), the recovery diagnosis data includes "door circuit reset + door opening / closing retry" as the recovery command, And a recovery diagnosis command set B which is a set of two commands of "door opening / closing diagnosis" and a recovery rate y% of the recovery operation by this recovery command. Likewise, in the case of the failure factor 3, the recovery diagnosis data has a data structure in which the number-of-failure-number data item 3 is linked to the recovery diagnosis command set C and the recovery rate z%. As described earlier, the recovery rate y% is larger than the recovery rate x%, z%, and the recovery diagnosis command set B has a higher recovery rate than the recovery diagnosis command set A and the recovery diagnosis command set C.

The information processing apparatus 360 may select a command corresponding to the failure factor having the largest number of the plurality of failure factors corresponding to the failure code "0001 " as the restoration command. Further, the information processing apparatus 360 may select, as a restoration instruction, a command having the highest recovery rate among a plurality of instructions corresponding to the failure code "0001 ". Then, the information processing device 360 selects a recovery diagnosis command set that is in a set with a recovery command selected by the recovery diagnosis command corresponding to the selected recovery command.

First, a case where the information processing apparatus 360 selects a command in accordance with a failure factor having the largest number of failure factors among a plurality of failure factors corresponding to the failure code "0001 " The information processing apparatus 360 refers to the recovery diagnosis database 380 and identifies the failure factor having the greatest number of cases when the failure code is " 0001 " Then, the information processing apparatus 360 executes the "door circuit reset + door height torque opening and closing" which is a restoration instruction for executing the restoration operation corresponding to the clogging of the door (failure factor 1) of the door threshold which is the largest number of failure factors, And a "door opening / closing diagnosis" which is a recovery diagnosis command for executing a recovery diagnosis operation corresponding to the result of this recovery operation.

Next, a case where the information processing apparatus 360 selects a command having the highest recovery rate among a plurality of commands corresponding to the failure code "0001 " as a recovery command will be described. The information processing apparatus 360 refers to the recovery diagnosis database 380 and confirms the recovery rate with the highest recovery rate corresponding to the failure code "0001 " as the recovery command. Then, the information processing apparatus 360 executes the "door circuit reset + door opening / closing retry", which is a restoration instruction for executing the restoration operation corresponding to the factor (the failure factor 2) of the contact failure of the switch with the highest recovery rate y% And a repair diagnosis command set B consisting of two pieces of "door open / close diagnosis" which is a recovery diagnosis command for executing a recovery diagnosis operation corresponding to the result of this recovery operation.

In the case of selecting a recovery diagnosis command set, selection is made as to whether or not it is based on a failure factor having the greatest number of failures corresponding to the failure code "0001" or on the recovery rate of the recovery diagnosis command set corresponding to the failure code "0001" . For example, if the ratio of the maximum number to the next number (number of cases) and the ratio of the maximum recovery rate to the next recovery rate (recovery rate ratio) is larger, that is, do. Further, for example, when the previous remote recovery fails, the selection method may be different from the previous selection. The selection of the recovery diagnosis command set may be determined by, for example, the model, the specification, etc. of the elevator 20.

In the following description, the case where the information processing apparatus 360 selects the recovery diagnosis command set A on the basis of the failure factor 1 having the greatest number of failures corresponding to the failure code "0001" will be described.

When the recovery diagnosis command set A is selected in step S106 in Fig. 5, the information processing apparatus 360 sends out the selected recovery diagnosis command set A from the communication device 320 as shown in step S107 in Fig. 2 and Fig. do. 2 and 5, when the communication device 250 receives the recovery diagnosis command set A from the communication device 320, the communication device 250 outputs the recovery command and the recovery diagnosis command to the control panel 210. [

5, the control panel 210 first determines whether the elevator 20 is stopped, the weight sensor of the car 22, the camera in the car 22, the person sensor in the car 22, It is confirmed that there is no passenger in the car 22 from the output of the driver. Then, when it is confirmed that the elevator 20 is stopped and that there is no passenger in the car 22, the control panel 210 instructs the communication device speaker installed in the car 22 to " The door opens and closes. " And the like.

When the broadcast ends, the control panel 210 proceeds to step S110 in Fig. 5 and executes the recovery operation in accordance with the recovery instruction. Since the received restoration command is the "door circuit reset + door height torque opening ", which is a restoration instruction for executing the restoration operation corresponding to the clogging of the door of the door (failure factor 1), the control panel 210 , And the door circuit of the control panel 210 is reset. This operation resets the state in which the door circuit detects that the door 13 or the door 26 can not be opened or closed and detects an open (or closed) state or a half-opened (or semi-closed) Or the door 26 to be opened or closed. Next, the control panel 210 opens and closes the door 13 and the door 26 with a greater force than usual by making the torque of the drive motor of the door 13 and the door 26 higher than usual by 20 to 30% . This operation is an operation for moving the garbage clogged in the door threshold from the threshold and returning the opening and closing operations of the doors 13 and 26 to the normal state. The control panel 210 determines whether or not the garbage clogged at the threshold of the doors 13 and 26 has moved by the above operation and the opening and closing of the doors 13 and 26 have been restored, Quot; door open / close diagnosis "as a recovery diagnosis command, as shown in Fig. The control panel 210 opens and closes the door 13 and the door 26 with normal torque and determines whether the opening and closing operation is performed at a predetermined opening and closing time and whether the current of the driving motor of the door 13 and the door 26 is It is confirmed whether or not it is higher than normal. Next, the control panel 210 opens and closes the door 13 and the door 26 with the torque of the driving motor lowered by about 20% than usual, and confirms whether there is no abnormality in the opening / closing time.

5, the control panel 210 proceeds to step S113 in FIG. 5 when it determines that the doors 13 and 26 have been restored to the normal state by the recovery diagnosis operation. In step S113, the control panel 210 outputs a determination result signal indicating that the elevator 20 has been restored. This signal is transmitted from the communication device 250 to the communication network 30. [ The transmitted determination result signal is received by the communication device 320 as shown in step S114 in Fig. 6, and the determination result is input to the information processing apparatus 360. [ 6, the information processing apparatus 360 notifies the remote monitoring center 310, and the result is displayed on the display 331 of the remote monitoring center 310 (step S115) . The monitor 334 of the remote monitoring center 310 confirms this display and causes the elevator 20 to resume operation and perform the broadcasting operation as shown in step S116 in Fig. The information processing apparatus 360 also updates the repair database 370 and the restoration diagnostic database 380 as shown in steps S117 and S118 in Fig.

On the other hand, if the result of the recovery diagnosis operation is "No" in step S112 in FIG. 5, the control panel 210 proceeds to step S119 in FIG. In step S119, the control panel 210 outputs a determination result signal indicating that the recovery of the elevator 20 has failed. This signal is transmitted from the communication device 250 to the communication network 30. [ The transmitted determination result signal is received by the communication device 320 as shown in step S120 in Fig. 6, and the determination result is input to the information processing apparatus 360. [ 6, the information processing apparatus 360 notifies the remote monitoring center 310 and the result is displayed on the display 331 of the remote monitoring center 310 (step < RTI ID = 0.0 > . When the monitor 334 confirms the display, the supervisor 334 instructs the elevator 20 to stop the operation and performs the broadcasting operation, as shown in step S122 in Fig. The supervisor 334 dispatches the technician 350 to the building 10 in the service center 340 near the building 10 by the telephone 333 as shown in step S123 of Fig. 2 and Fig. . The information processing apparatus 360 also updates the repair database 370 and the restoration diagnostic database 380 as shown in steps S117 and S118 in Fig.

The information processing apparatus 360 updates the maintenance database 370 as follows when a judgment signal indicating that the elevator 20 has been restored as shown in step S113 in Fig. 5 is input.

5, the information processing apparatus 360 sets the item of the recovery method of the failure history data 377 as "remote recovery", "recovery" "Recovery" is stored in the item of the determination result. First, as described above, when the communication device 320 receives the failure signal, the information processing device 360 detects the failure code "0001" inputted from the communication device 320 and the management number of the elevator 20, And stores the occurrence date and time in the failure history data 377 of the maintenance database 370. Therefore, all the items of the failure history data 377 are updated by the current recovery method and the restoration determination result.

In the present remote repair, the information processing apparatus 360 refers to the recovery diagnosis database 380 and determines whether or not the number of times of trouble (" 0001 " Quot; door open / close diagnosis ", which is a recovery diagnosis command for executing a recovery diagnosis operation corresponding to the result of the recovery operation, "door circuit reset + door opening / And the recovery operation and the recovery diagnosis operation are executed. Therefore, when the elevator 20 is successfully recovered, the number of the failure code "0001" and the failure factor 1 (blockage of the garbage at the door threshold) of the recovery diagnosis database 380 is increased by one and the recovery rate . Further, the information processing apparatus 360 increases the number of the failure factors 1 of the failure code "0001" of the failure factor-specific data 378 by one.

On the other hand, when the determination signal indicating that the recovery of the elevator 20 has failed is input as shown in step S119 in Fig. 5, the information processing apparatus 360 executes the maintenance database 370 and the recovery diagnosis database 380 ). 5, the information processing apparatus 360 determines whether or not the recovery of the elevator 20 has failed by inputting the "remote recovery" to the item of the recovery method of the failure history data 377, , And stores "failure" in the item of the recovery determination result. In addition, the number of failure codes "0001 " and the failure factor 1 (blockage of garbage at the door threshold) of the recovery diagnosis database 380 is maintained, and the recovery rate is decreased by the number of failures in recovery. When the recovery is unsuccessful, the number of failure factors 1 of the failure code "0001 " of the failure factor data 378 is not changed.

In the above description, the case where the information processing apparatus 360 selects the recovery diagnosis command set A on the basis of the largest number of failure factors corresponding to the failure code "0001" has been described. When the information processing apparatus 360 selects the recovery diagnosis command set B on the basis of the recovery rate of the recovery diagnosis command set corresponding to the failure code "0001 ", the recovery operation of" door height torque opening & The door opening / closing retry operation for performing the opening and closing operations of the doors 13 and 26 again is performed. Other operations are the same as when the recovery diagnosis command set A is selected.

If the remote recovery of the elevator 20 is successful, the number of clogging of the door threshold (failure factor 1) at the door threshold, which is the largest number of failures in the case of the failure code "0001 " Therefore, when the remote recovery system 100 selects the recovery diagnosis command set based on the largest number of failure factors corresponding to the failure code "0001 ", when the failure code" 0001 " , The information processing apparatus 360 again selects the recovery diagnosis command set A. When the recovery rate of the recovery diagnosis command set A is higher than the recovery rate of the recovery diagnosis command set B, the information processing apparatus 360 sets a command with the highest recovery rate among the plurality of commands corresponding to the failure code "0001 " Also, the recovery diagnosis command set A is selected.

On the other hand, if the remote recovery of the elevator 20 fails, the number of the failure factors 1 of the failure code "0001" of the failure factor data 378 is not changed, but the recovery rate of the recovery diagnosis command set A decreases. As a result, the recovery rate of the recovery diagnosis command set B becomes relatively high. That is, the recovery rate ratio of the recovery diagnosis command set B to the recovery diagnosis command set A is increased. When the rate of recovery is larger than the ratio of the number of failure factors 1 to the number of failure factors 2, the information processing apparatus 360 determines that the recovery rate is the highest among the plurality of instructions corresponding to the failure code "0001" The command is selected as the return command. Therefore, when the failure code "0001" is input during the next remote recovery, the information processing apparatus 360 selects the recovery diagnosis command set B having the highest recovery rate. When the information processing apparatus 360 does not select the recovery diagnosis command set A that failed in the previous remote recovery, it is determined that the number of errors corresponding to the failure code "0001" Select the recovery diagnostic command set B linked.

When the information processing apparatus 360 has successfully recovered the elevator 20 by selecting the recovery diagnosis command set B having the highest recovery rate among the plurality of commands corresponding to the failure code "0001 ", the recovery diagnosis command set B The recovery rate is increased. Therefore, in the following remote recovery, the information processing apparatus 360 selects the recovery diagnosis command set B as in the previous case. On the other hand, when the recovery of the elevator 20 fails to the recovery diagnosis command set B, the recovery rate of the recovery diagnosis command set B is lowered. When the recovery rate of the recovery diagnosis command set B becomes lower than the recovery rate of the recovery diagnosis command set A, the information processing apparatus 360 selects the recovery diagnosis command set A. [ If the information processing apparatus 360 does not select the recovery diagnosis command set B that failed in the previous remote recovery, the recovery diagnosis command set B is followed by a recovery diagnosis command with high recovery rate corresponding to the failure code "0001" Select command set A.

As described above, the remote recovery system 100 increases the number of failure factors and the recovery rate of the selected recovery diagnosis command set when the remote recovery is successful. Further, when the remote recovery system 100 fails in the remote recovery, the number of the failure factors remains the same and the recovery rate of the selected recovery diagnosis command set is lowered. Therefore, if the remote recovery is successful, the probability that the recovery diagnosis command set selected in the remote recovery is selected at the next remote recovery becomes high. Also, if a remote recovery fails, the set of recovery diagnostic commands selected in that remote recovery is less likely to be selected at the next remote recovery. Therefore, as the number of times of remote recovery increases, the information processing apparatus 360 can select a recovery diagnosis command set having a high possibility of recovery corresponding to the failure code from the recovery diagnosis database 380, It is possible to improve the reliability of the restoration.

In the embodiment described above, the operation of the remote recovery system 100 in the case where the failure code "0001" indicating the failure relating to the doors 13, 26 is outputted from the control panel 210 has been described. Next, a case where a failure code "0002" indicating a failure relating to the control circuit is outputted from the control panel 210 will be described. A description of the same operation as that in the case where the failure code "0001" is output will be omitted.

When the trouble code is "0002" indicating the trouble relating to the control circuit, as a result of the fact that the technician 350 checked it locally, it is judged that the cause of outputting the trouble code "0002 & (Failure factor 4), or if there is a failure in the relay drive circuit that drives the relay (failure factor 5) or other failure factor 6. In the case of the failure code "0002", the data 378 according to the failure factor indicates that there are 100 cases in which the failure is a factor of the relay (failure factor 4) and 50 cases in which the failure of the relay driving circuit is a factor (failure factor 5) And 10 cases in the case of the other failure factors 6 are arranged in the order of the number of the data structures. In the case of recovery by the remote recovery system 100 as described above, when the recovery of the elevator 20 is successful due to the recovery instruction, the number of the failure factors corresponding to the failure code on which the recovery instruction is based becomes Is added to the number of failure factors.

As shown in Fig. 7, the recovery diagnosis database 380 is a database in which the recovery diagnosis command set and the recovery rate are interlocked with the fault-specific data 378. Hereinafter, the data configuration of the recovery diagnosis database 380 in the case where the failure code is "0002" indicating a failure relating to the control circuit will be described. When there is a fault in the relay (fault 4), the recovery diagnosis data includes "control circuit reset + low speed up and down operation" as the recovery command and " Is a data configuration in which the recovery diagnosis command set D, which is a set of two commands of "operation diagnosis", and the recovery rate a% by the recovery operation based on the recovery diagnosis command are interlocked. When there is a failure in the relay drive circuit (failure factor 5), the recovery diagnosis data includes "control circuit reset + uppermost layer, lowermost layer operation" as the recovery command and " Speed operation diagnosis ", which is a set of two commands, and a recovery rate b% by the recovery operation based on the recovery diagnosis command. Likewise, in the case of the failure factor 6, the recovery diagnosis data has a data structure in which the number-of-failure data of the failure factor 6 is linked to the recovery diagnosis command set F and the recovery rate c%. In this way, the recovery diagnosis database 380 associates the failure code, the failure factor corresponding to the failure code, the number of the failure factors, the recovery diagnosis command set, which is the set of the recovery command and the recovery diagnosis, It is stored in the database. In addition, b% of the recovery diagnostic command set E has the highest recovery rate.

When the information processing apparatus 360 selects the recovery diagnosis command set D on the basis of the largest number of failure factors corresponding to the failure code "0002" in the information processing apparatus 360 when the failure code is "0002" The information processing apparatus 360 transmits the recovery diagnosis command set D to the control panel 210. The control panel 210 executes a low-speed up / down operation for raising / lowering the car 22 of the elevator 20 at a low speed after executing the control circuit reset operation. Thereafter, the control panel 210 executes each layer operation to stop at each layer without performing opening and closing of the doors 13 and 26, high-speed operation at a high speed between a plurality of layers, And that there is no abnormality in the running operation at high speed. When there is no abnormality in each layer operation and high-speed operation, the control panel 210 outputs a judgment result that the elevator 20 is successfully recovered. Further, when an abnormality is detected in each layer operation and high-speed operation, the control panel 210 outputs a judgment result indicating that the recovery of the elevator 20 has failed. The determination result is input from the control panel 210 to the information processing apparatus 360 via the communication devices 250 and 320. [ The information processing apparatus 360 is also provided with the failure history data 377, the failure factor specific data 378, the recovery diagnostic database 370, 380).

When the information processing apparatus 360 selects the recovery diagnosis command set E having the highest recovery rate corresponding to the failure code "0002", the information processing apparatus 360 transmits the recovery diagnosis command set E to the control panel 210 do. After executing the control circuit reset operation, the control panel 210 executes the lowermost layer and the uppermost layer operation in which the car 22 of the elevator 20 is moved between the lowermost layer and the uppermost layer. Next, the control panel 210 executes each layer operation and high-speed operation described above, performs recovery diagnosis of the elevator 20, and outputs a determination result indicating whether or not the recovery of the elevator 20 has succeeded or failed. As described above, this determination result is input from the control panel 210 to the information processing apparatus 360 via the communication devices 250 and 320. [ The information processing apparatus 360 updates the failure history data 377, the failure factor data 378, and the recovery diagnosis database 380 so that the recovery diagnosis command set having a higher recovery possibility can be selected based on the determination result do.

Next, the case where the failure code is "0003" indicating that the failure is related to the brake will be described.

When the trouble code is 0003 indicating the trouble relating to the brake, the engineer 350 checks in locally that the cause of the failure code "0003 " is the cause of the trouble of the brake circuit of the control panel 210 (failure factor 7 ), Other failure factors (8), and failure factors (9). Therefore, in the case of the failure code "0003 ", the data 378 according to the fault factor includes 100 cases where the abnormality of the brake circuit is a factor (fault factor 7), 50 cases where the fault factor is 8, , The data is structured such that the data is arranged in the order of the number of the data structures. In the case of restoration by the remote restoration system 100 as described above, when the recovery of the elevator 20 is successful due to the restoration command, the number of failure factors corresponding to the failure code that is the basis of the restoration command is Is added to the number of failure factors.

As shown in Fig. 8, the recovery diagnosis database 380 is a database in which the recovery diagnosis command set and the recovery rate are interlocked with the fault-specific data 378. [ Hereinafter, the data configuration of the recovery diagnosis database 380 in the case where the failure code is "0003 ", which indicates a failure relating to the brake, will be described. When the brake circuit abnormality is a factor (failure factor 7), the recovery diagnosis data includes the number of pieces of failure data 7, the "control circuit reset" as the recovery command, and the "brake torque diagnosis" And a recovery rate d% based on the recovery operation based on the recovery diagnosis command. In the case of the failure factor 8 and the failure factor 9, the restoration diagnosis data includes the recovery diagnosis command set H, the recovery rate e%, the recovery diagnosis command set I, and the recovery rate f%, respectively, in the respective number data of the failure factor 8 and the failure factor 9 Data structure. In this way, the recovery diagnosis database 380 correlates the failure code, the failure factor corresponding to the failure code, the number of the failure factors, the recovery diagnosis command set as the set of the recovery command and the recovery diagnosis, . In addition, e% of the recovery diagnosis command set H has the highest recovery rate.

Next, the operation of the remote recovery system 100 when the control panel 210 detects the occurrence of a failure related to the brake will be described.

If the failure code is "0003 ", the information processing apparatus 360 determines whether or not the information processing apparatus 360 determines in step S106 in FIG. 5 that the failure diagnosis code When the set G is selected, the information processing apparatus 360 transmits the recovery diagnosis command set G to the control panel 210. [

When the failure code is "0003 ", upon receiving the recovery diagnosis command set G, the control panel 210 executes the brake torque diagnosis operation in the field confirmation shown in step S109 in Fig. The brake torque diagnosis operation is an operation in which the traction machine in the drive unit 24 is not rotated by a mechanical brake and a driving force is given to the traction machine to confirm that the traction machine does not rotate due to the holding force of the brake. If there is no abnormality in this operation, the control panel 210 determines that the on-site confirmation of the elevator 20 is possible in step S109 in Fig. Thereafter, the process proceeds to step S110 in Fig. 5, and the control panel 210 executes a control circuit reset operation.

Thereafter, the control panel 210 executes the brake torque diagnosis operation. When there is no rotation of the traction machine by this operation, the control panel 210 outputs a result of the determination that the elevator 20 has been successfully recovered. When the traction machine is rotated, the control panel 210 outputs a result of the determination that the recovery of the elevator 20 has failed. The determination result is input from the control panel 210 to the information processing apparatus 360 via the communication devices 250 and 320. [ The information processing device 360 updates the failure history data 377, the failure factor data 378, and the recovery diagnosis database 380 so that the recovery diagnosis command set having a high possibility of recovery can be selected based on the determination result .

In the same way as described above, the information processing apparatus 360 may select the recovery diagnosis command set H having the highest recovery rate corresponding to the failure code "0003 " to execute the recovery operation and the recovery diagnosis operation on the control panel 210 .

If there is an abnormality in the brake torque diagnosis operation, the control panel 210 determines that the remote recovery can not be started, and notifies the remote monitoring center 310 of the remote recovery failure, without executing the remote recovery operation .

As described above, the remote restoration system 100 is configured such that when various failures occur in the elevator 20, the elevator 20 is restored to the elevator 20 by a command from the remote restoration device 300 disposed at a place remote from the elevator 20, The elevator 20 can be restored by executing the restoration operation and the restoration diagnosis operation. Therefore, when a failure occurs in the elevator 20, the elevator 20 can be restored in a short time without dispatching the technician 350 to the site, and the service of the elevator 20 can be improved.

The remote recovery system 100 further includes fault history data 377, fault-specific data 378, and fault-related data 378 so as to select a recovery diagnosis command set that is more likely to be recovered at the next remote recovery based on the result of the recovery determination. , And updates the recovery diagnosis database 380. Therefore, as the number of times of remote recovery increases, the information processing apparatus 360 can select a more appropriate recovery diagnosis instruction set corresponding to the failure code from the recovery diagnosis database 380. [ As a result, the elevator 20 can be reliably restored, and the time required for recovery can be shortened, thereby improving the service of the elevator 20.

≪ Remote recovery processing by program update command >

The remote restoration process by the program update command will be described with reference to Figs. 9 to 15. Fig. Fig. 9 shows a configuration related to the program update command, particularly of the configuration of the remote recovery system of the elevator failure in the embodiment of the present invention. The difference from FIG. 1 resides in that the remote recovery apparatus 300 has a program database 390. FIG. In addition, as a configuration accessible to the program database 390, a development center 400 is added in addition to the information processing apparatus 360. The development center 400 and the remote recovery device 300 can communicate with each other via the communication network 37. [ The communication network 37 may be an internet communication network or a telephone line network.

Fig. 10 shows functional blocks related to the program update command among the functional blocks of the elevator failure remote recovery system according to the embodiment of the present invention. The difference from FIG. 2 lies in that the remote recovery apparatus 300 has the program database 390, as in FIG. In addition, as a configuration accessible to the program database 390, a development center 400 is added in addition to the information processing apparatus 360.

In addition, the maintenance database 370 (storage section) includes program update history data 381 and program update schedule management data 382. FIG. 11 illustrates program update history data 381. FIG. In this data, the update history of the control program of the elevator control device 200 is stored.

Data is managed for each elevator management number. The management content includes, in addition to the elevator management number, the elevator model, the application program, the version of the application program, and the update date of the current version of the program.

In general, different control programs are applied depending on the model of the elevator 20. For example, different control programs are applied in hydraulic elevators and rope elevators. Other control programs are applied in the short term management elevator and the military management elevator. In addition, different control programs are applied to the elevator for high-rise systems and the elevator for low-rise systems. The model shown in Fig. 11 reflects, for example, the distinction between the hydraulic type and the rope type, the distinction between the short term management and the group management, and the distinction between the high-rise system and the low-rise system. In Fig. 11, P is added in front of the model symbol, and a control program suitable for the model is used. For example, the program is applied to the model AAA and is referred to as program PAAA. Such a control program conforms to, for example, PESSRAL (Programmable Electronic Systems in Safety-Related Applications for Lifts), which is a standard for a programmable electronic system for an elevator.

The program update schedule management data 382 is generated by the information processing apparatus 360 when the control program of the new version is stored (downloaded) in the program database 390.

The control program of the elevator control device 200 is generated in the development center 400, for example, deviating from the remote restoration device 300. In the development center 400, a control program for the new version is sequentially generated. For example, when a new function is developed in the development center 400, a control program of a new version is generated so that the processing according to the new function is enabled in the elevator control device 200. [

In the program database 390, a control program for each model is stored from the old version to the new version. That is, the current version of the control program applied to the elevator control device 200 is included, and the (old and new) version of the control program is also stored. When the control program of the new version is generated in the development center 400, it is added to the program database 390.

12 shows a flow of creating an update schedule of the control program. In the flow execution of Fig. 12, the information processing apparatus 360 is virtually created with functional sections for executing the respective steps. The information processing apparatus 360 refers to the program database of the development center 400 on a regular basis or on the basis of a notification from the development center 400 (S1002).

Next, the control program stored in the program database of the development center 400 is compared with the control program stored in the program database 390 of the remote restoration device 300. [ That is, the control program stored in the program database of the development center 400 determines whether or not there is an unregistered, i.e., new-version control program that is not stored in the program database 390 of the remote recovery apparatus 300 (S1004). When there is no new-generation control program in the program database of the development center 400, the flow ends.

When there is a control program of the new version in the program database of the development center 400, the information processing device 360 acquires (downloads) the control program of the new version from the development center 400 (S1006).

The information processing apparatus 360 also refers to the program update history data 381 and extracts the elevator 20 (more accurately, the elevator management number) to which the same type of program as the obtained new version control program is applied (S1008).

Thereafter, the information processing device 360 creates an update schedule of the control program of the new version to the elevator control device 200 with respect to the extracted elevator 20 (S1010). That is, the order of the upgrading (version up) for updating the control program to the new version is set. The update schedule is set so that, for example, the elevator 20 and the elevator control device 200 are upgraded first in the order of the oldest manufacturing date. When the update order is determined in this manner, it is stored as program update schedule management data 382 as shown in FIG.

Next, program updating as a remote restoration command operation will be described. For example, when an abnormality in the control panel (CPU substrate) of the elevator control device 200 is detected, the abnormality may be solved by the program update.

For example, if the current version of the control program applied to the elevator control device 200 is Ver. 2.0, Ver. 1 generation ago Ver. 1.0, Ver. 1 generation from the current version Ver. 3.0.

Ver. 1.0, it is assumed that the function of the elevator 20 is provided with, for example, a stop layer skip function passing through a specific layer. Ver. 2.0, it is assumed that a specific layer forced stop function is added in addition to the stop layer skip function. Also Ver. 3.0 is supposed to further include an adjustment function that gives priority to the specific layer forced stop function when the pass layer set in the stop layer skip function and the forced stop layer set in the specific forced stop function are overlapped.

At this time, the current version Ver. If the pass layer set in the stop layer skip function and the forced stop layer set by the specific forcible stop function are overlapped in the case of 2.0, the opposite functions conflict with each other and an abnormality of the control panel 210 (CPU board) )). For example, when the setting layer of one of the functions is changed, the abnormality of the control panel 210 is solved. In addition, the control program is updated, and the version of the old version Ver. 1.0, or a Ver. Of a new version equipped with an adjustment function for adjusting when both functions are in conflict. 3.0, the abnormality of the control panel 210 is eliminated.

That is, in the above example, as the restoration operation, there are two types of change of setting layer (parameter change) and control program update. For the former, it is effective if the cause of the failure (or abnormality) is clear. However, for example, when the above-mentioned failure code is shown only in a faulty device (for example, CPU board), it is difficult to specify the cause of the failure, Is a reasonable countermeasure.

Based on the above description, the remote recovery system operation of the elevator failure when the program is updated as the recovery operation will be described below.

Since the basic flow of the remote recovery system has been described with reference to FIG. 5, the description of each step is appropriately omitted. In step S106, in selecting the recovery instruction and the recovery diagnosis instruction corresponding to the failure code, the information processing apparatus 360 executes the flow illustrated in FIG. 14, in the information processing apparatus 360, function units for executing the respective steps are virtually created. For example, in executing step S1014, a recovery diagnosis command set selector is generated. In executing step S1022, an update schedule confirmation unit is created. In executing step S1026, an update schedule changing unit is generated.

That is, the information processing apparatus 360 refers to the recovery diagnosis database 380 and extracts a recovery diagnosis command set corresponding to the failure code included in the failure signal transmitted from the elevator control device 200 (S1012). 15 shows a recovery diagnosis command set when the failure code is "0015 ", that is, when the fault machine is the CPU board of the control panel 210. [ In this example, as the failure factor 10 (for example, system freeze), two sets of recovery diagnosis command sets K1 and K3 are illustrated. In the recovery diagnosis command set K1, the program update is included as the recovery processing, and the recovery diagnosis command set K3 includes the parameter change as the recovery processing. In the recovery diagnosis database 380, a recovery rate (success rate) for each recovery diagnosis command set is stored. Here, the recovery rate g%> h%> i% is set.

The information processing apparatus 360 selects the set of the highest recovery rate among the recovery diagnostic command sets corresponding to the failure code (S1014). For example, since the recovery rate g% of the recovery diagnosis command set K1 including the program update in the recovery processing is higher than the recovery rates h% and i% of the other recovery diagnosis command sets K2 and K3, the recovery diagnosis command set K1 is selected.

Next, the information processing device 360 determines whether or not the recovery instruction of the selected recovery diagnostic instruction set is a program update (S1016). If the recovery command is different from the program update, the processing is executed according to the selected recovery diagnostic command set (S1018).

If the recovery instruction of the selected recovery diagnostic instruction set is a program update, the information processing apparatus 360 determines whether to apply the old version or the new version of the current program as the control program to be updated. Specifically, when a program of a new version is stored in the program database 390 in comparison with the current version, the program of the new version is transmitted as a program update command.

The information processing apparatus 360 refers to the program update schedule management data 382 in step S1020 and determines whether the management number of the restoration target elevator 20 (elevator control device 200) is in the program update schedule management data 382 It is determined whether or not it is included (S1022).

If the control number of the restoration target elevator 20 is not included in the program update schedule management data 382, that is, if the elevator control device 200 has the program of the new version more in the program database 390 than the control program of the current version, The information processing apparatus 360 selects the control program of the old version of the current version as the update program (S1024). Thereafter, the control program of the old version is transmitted to the elevator control device 200, and the updating (downgrade) is performed.

On the other hand, when the management number of the restoration target elevator 20 is included in the program update schedule management data 382, the information processing device 360 updates the restoration target elevator 20 (elevator control device 200) (S1026). By advancing the update sequence, the update program applied to the restoration-purpose elevator control device 200 is a new version (S1028). As a result, the control program of the new version is transmitted to the elevator control device 200, and the updating (upgrading) is performed.

The present invention is not limited to the embodiments described above, but includes all changes and modifications which do not depart from the technical scope or nature of the present invention defined by the claims.

The elevator includes a door and an elevator which are connected to the elevator by means of the elevator so that the elevator is connected to the elevator. The present invention relates to an elevator control system and a control method thereof that are capable of providing a control system and an elevator control system that are capable of efficiently and efficiently controlling a plurality of elevators. , 372: switch, 333: telephone, 334: monitor, 340: service center, 350: technician, 360: information processing device, 370: repair database, 371: elevator specification data, 372: inspection history data, 373: 382: repair diagnosis history data, 381: program update history data, 382: repair history data, 377: repair history data, 376: repair history data, Program update schedule management data, 390: program database, 400: development center.

Claims (4)

11. An elevator remote recovery device communicating with an elevator control device for performing drive control of an elevator,
An information processing device for receiving a failure signal including a failure code of the elevator from the elevator control device and for sending a restoration command corresponding to the failure of the elevator to the elevator control device,
And a restoration diagnostic database in which a plurality of types of restoration commands corresponding to the failure code and a restoration rate when each of the restoration commands are executed are stored,
The information processing apparatus includes:
A plurality of types of the restoration commands including a program update command corresponding to the failure code included in the failure signal when the failure signal is received from the elevator control device,
And the elevator control device transmits the program update command to the elevator control device when the recovery rate corresponding to the program update command is higher than the other recovery commands, . The method according to claim 1,
And a program database, which is applied to the elevator control device at the time of sending out the failure signal, in which a version of the program different from that of the current version is stored,
Wherein when the program of the new version is stored in the program database more than the program of the current version, the information processing apparatus transmits the program of the new version to the elevator control device . 3. The method of claim 2,
And a storage unit for storing program update schedule management data in which a plurality of elevator control apparatuses for updating the program of the new version are scheduled to be updated,
The information processing apparatus according to claim 1, wherein when the program of the new version is transmitted to the elevator control device as the program update command, the information processing device advances the update order in the program update schedule management data of the elevator control device of the transmission destination, Remote recovery device of an elevator. The method according to claim 1,
And a program database, which is applied to the elevator control device at the time of sending out the failure signal, in which a version of the program different from that of the current version is stored,
Wherein the information processing apparatus is further configured to cause the elevator control device to execute a program of a version earlier than the current version of the program as the program update command when a program of a newer version than the current version of the program is not stored in the program database The remote recovery device of the elevator.

Images