WO2008081074A1 - Elevator safety device - Google Patents

Elevator safety device Download PDF

Info

Publication number
WO2008081074A1
WO2008081074A1 PCT/FI2007/000302 FI2007000302W WO2008081074A1 WO 2008081074 A1 WO2008081074 A1 WO 2008081074A1 FI 2007000302 W FI2007000302 W FI 2007000302W WO 2008081074 A1 WO2008081074 A1 WO 2008081074A1
Authority
WO
WIPO (PCT)
Prior art keywords
elevator
electric safety
safety controller
controller
series circuit
Prior art date
Application number
PCT/FI2007/000302
Other languages
French (fr)
Inventor
Ari Kattainen
Kimmo Heikkilä
Timo Syrman
Original Assignee
Kone Corporation
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Kone Corporation filed Critical Kone Corporation
Priority to CN2007800492752A priority Critical patent/CN101578228B/en
Priority to EP07858326.7A priority patent/EP2099706B1/en
Priority to ES07858326.7T priority patent/ES2483890T3/en
Publication of WO2008081074A1 publication Critical patent/WO2008081074A1/en
Priority to US12/496,683 priority patent/US7891467B2/en
Priority to HK10103995.7A priority patent/HK1137004A1/en
Priority to US13/013,452 priority patent/US7980363B2/en

Links

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B13/00—Doors, gates, or other apparatus controlling access to, or exit from, cages or lift well landings
    • B66B13/22—Operation of door or gate contacts
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
    • B66B5/0043—Devices enhancing safety during maintenance
    • B66B5/005—Safety of maintenance personnel
    • B66B5/0056—Safety of maintenance personnel by preventing crushing
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B66—HOISTING; LIFTING; HAULING
    • B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
    • B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
    • B66B5/0043—Devices enhancing safety during maintenance
    • B66B5/005—Safety of maintenance personnel
    • B66B5/0056—Safety of maintenance personnel by preventing crushing
    • B66B5/0062—Safety of maintenance personnel by preventing crushing by devices, being operable or not, mounted on the elevator car

Definitions

  • the present invention relates to an elevator safety device as defined in the preamble of claim 1 and to a method as defined in the preamble of claim 10.
  • New buildings are constructed with a view to saving space in the elevator shaft. This is accomplished by designing the spaces above and below the car in the elevator shaft to as small dimensions as possible. In this case, there is no sufficient safety space left in the elevator shaft above and below the elevator car to provide personal protection for a serviceman working on the top of the elevator car or in the elevator shaft.
  • the safety regulations permit limitation of the shaft spaces above and below the car, provided that the elevator shaft is provided with mechanical safety devices that can be set up in connection with work carried out in the elevator shaft so as to ensure a sufficient safety space in the upper and lower parts of the elevator shaft.
  • These safety devices limit the extreme ends of the path of movement of the elevator car in the elevator shaft in a manner such that a sufficient working space is left for an installer.
  • a similar safety solution officially approved by the authorities is likely to be used in new buildings as well.
  • a safety device often used is a turnable buffer placed on the shaft bottom so that a serviceman can turn it to an upright working position before starting work in the elevator shaft.
  • the turnable buffer may be placed on the bottom of the elevator shaft below the elevator car, in which case it will limit the movement of the elevator car in the shaft bottom space, or it may be placed below the counterweight, in which case it will limit the movement of the counterweight in the shaft bottom space while at the same time limiting the movement of the elevator car in the headroom space in the shaft.
  • the elevator car due to its kinetic energy, still goes on moving upwards in the top end of the shaft.
  • the length of this movement depends on the highest possible speed that the elevator car may have at the instant of the counterweight colliding with the buffer.
  • the safety distance must be so designed that it corresponds to the highest possible speed at the instant of collision.
  • the buffer compression caused by the collision has to be taken into account.
  • JP03018575 discloses a switch which is mounted in conjunction with a mechanical safety device and whose position changes when the mechanical safety device is turned into a working position. Operation of the elevator motor is not allowed until a change of state of the switch indicates that the mechanical safety device has been turned into the working position.
  • the solution for an electric safety arrangement described in this specification is based on discrete components, such as relays and switches, and is therefore very complicated in respect of the required wiring.
  • the testing of operation which is important in regard of safety of operation of the switch, requires a separate control logic and thus further increases the complexity of the solution.
  • the system is sensitive to momentary breaks in the control of the switches and to contact problems, which occur in an elevator system from time to time. If the operation of the elevator system is interrupted due to momentary breaks like this, then the reliability of operation of the elevator system also deteriorates. For a safety arrangement consistent with regulations, it is additionally required that a person entering the elevator shaft be detected and taken into account in the design of the logic of operation of the safety arrangement.
  • EP1159218B discloses an elevator safety device comprising an electric safety controller that reads data from sensors connected to the elevator system and, when it detects a safety risk in the elevator system, sends a control signal to the elevator motor controller, to the elevator brake and to the control center of the elevator system.
  • the safety controller according to this specification can not in itself provide a level of safety sufficient for the operation of the safety arrangement according to the present invention.
  • the elevator shaft be provided with detectors serving to define the allowed extreme limits of elevator car travel in the elevator shaft during maintenance operation, , and additionally detectors defining the allowed limits of elevator car travel during normal operation.
  • detectors are needed to identify a 'person in shaft' state, such as e.g. when an installer enters the elevator shaft.
  • a control logic is needed for monitoring the safety of the elevator system on the basis of detector data in different operational modes of the elevator system.
  • the object of the present invention is to disclose a new type of safety arrangement for implementing the safety spaces in an elevator shaft as re- quired by regulations.
  • a further object of the invention is to disclose a new type of electric safety system that monitors the entry of a person into the elevator shaft as well as the state of mechanical safety devices.
  • the elevator safety arrangement of the invention is characterized by what is stated in the characterizing part of claim 1.
  • the method of the invention for implementing the safety spaces in an elevator shaft is characterized by what is stated in the characterizing part of claim 10.
  • Other embodiments of the invention are characterized by what is stated in the other claims.
  • inventive embodiments are also presented in the description part of the present application.
  • the inventive content disclosed in the application can also be defined in other ways than is done in the claims below.
  • the inventive content may also consist of several separate inventions, especially if the invention is considered in the light of explicit or implicit sub-tasks or with respect to advantages or sets of advantages achieved. In this case, some of the attributes contained in the claims below may be superfluous from the point of view of separate inventive concepts.
  • the present invention concerns an elevator safety arrangement and a method according to the safety arrangement.
  • An elevator safety arrangement for implementing the prescribed safety spaces in an elevator shaft comprises a mechanical safety device, preferably a pole or barrier, which can be moved into a service position to ensure a sufficient safety space in the elevator shaft.
  • the safety arrangement comprises an electric safety system, which comprises in conjunction with the mechanical safety device at least one detector for identifying the operating state of the mechanical safety device, in conjunction with an elevator landing door at least one detector for identifying the position of the landing door, means for reading the detectors fitted in conjunction with the elevator landing door, in conjunction with the elevator car door at least one detector for identifying the position of the elevator car door, means for reading the detectors in conjunction with the elevator car door, and an electric safety controller which reads data from the elevator control devices and from the detectors comprised in the electric safety controller and, based on the data thus collected, controls one or more mechanical stopping devices which stop the movement of the elevator car in the elevator shaft.
  • the electric safety system comprises a data interface bus between the electric safety controller and the elevator control devices. In this bus, data is transferred both for determin- ing the
  • the electric safety controller reads information about the position of the elevator landing door and the position of the elevator car door and, based on this information, infers whether a person has entered the elevator shaft, i.e. deduces a 'person in shaft' state. After a 'person in shaft' state has been detected, the electric safety controller only allows maintenance operation after it detects that the mechanical safety device has assumed its operating position. For example, it is possible for a maintenance man to enter the elevator shaft by opening a landing door manually by means of a key used for that purpose.
  • the safety arrangement additionally comprises in conjunction with an elevator maintenance operation unit at least one detector for identifying the state of control of the elevator maintenance operation unit and, in the vicinity of each end of the elevator shaft, at least one end limit marker, and in conjunction with the elevator car at least one end limit marker reader for determining the extreme limits of movement of the elevator car in the elevator shaft.
  • the above-mentioned elevator control devices include e.g. an elevator system controller, an elevator motor controller and an elevator car door controller.
  • two separate sets of end limit markers are placed in the elevator shaft near each end for determining the position of the elevator car, of which end limit markers the ones located closer to the ends of the elevator shaft determine the extreme limits of elevator car movement during normal operation while the ones located farther away from the ends determine the extreme limits of elevator car movement during maintenance operation.
  • Fitted in conjunction with the elevator car are readers for reading the end limit markers, said readers being connected to the electric safety controller via the data interface bus.
  • the arrangement comprises two end limit marker readers fitted in conjunction with the elevator car and two end limit markers fitted at either end of the elevator shaft.
  • the readers used in this embodiment for reading the end limit markers are switches, and the end limit markers used are ramps, which are fitted in the elevator shaft in such a way that a switch mounted in conjunction with the elevator car will come into contact with the ramp and is opened when the elevator car moves in the shaft until it reaches the ramp.
  • the detectors fitted in conjunction with the elevator landing doors may preferably be switches whose contact is opened by forced control as the landing doors are opened.
  • the switches are arranged in series as a series circuit, which is connected to the electric safety controller via a gateway to allow measurement of the state of the series circuit.
  • the means for reading the detectors fitted in conjunction with the elevator landing door comprise, fitted in par- allel with each switch in the series circuit, a resistor of equal resistance value.
  • the means for reading the detectors fitted in conjunction with the elevator landing door comprise a resistor of unequal resistance value fitted in parallel with each switch in the series circuit. When resistors of unequal resistance value are used, it is possible to identify the position of each individual switch in the series circuit.
  • the resistor according to the invention may preferably be an encapsulated film resistor. Such a film resistor may be e.g. a metal film resistor. The structure of the film resistor is such that the resistance ele- ment is well protected e.g. against impurities.
  • the electric safety controller may additionally comprise means for measuring the total resistance of the series circuit.
  • Such means may consist of e.g. a voltage source provided in connection with the electric safety controller and used to supply a voltage into the series circuit, and a current measuring sensor for measuring the current flowing in the series circuit. From the ratio between the voltage supplied and the current measured, it is possible to infer the total resistance of the series circuit.
  • a circuit provides the advantage that, if all the resistors in the series circuit are of equal resistance value, then the number of open switches in the series circuit can be established by measuring the total resistance. If the switches are placed in connection with doors, such as landing doors, then the number of doors open can be detected.
  • the state of the switches in the series circuit can also be determined, using the same apparatus and method, without resistors fitted in parallel with the switches. In this case, the opening of one of the switches leads to a break in the flow of current through the switches.
  • the electric safety controller according to the invention may be integrated in conjunction with another device used in the control of the elevator sys- tern.
  • the safety arrangement of the invention can also be used in elevator systems without machine room, in which case the space saving achieved by integrating the electric safety controller is an advantage.
  • the safety arrangement of the invention can also be used in elevator systems without counterweight.
  • information is transmitted to the electric safety controller over a data interface bus from a control device fitted in conjunction with the elevator car.
  • the information transmitted contains at least data about the control of the elevator maintenance operation unit, data about the position of the elevator car in the elevator shaft, data about the state of the end limit switches of the elevator shaft separately during normal operation and maintenance operation, data about the position of the manhole cover in the top of the elevator car, and data about the state of the doors of the elevator car.
  • From the electric safety control- ler at least data regarding the operational state of the electric safety controller is transmitted via the data interface bus to the control device fitted in conjunction with the elevator car.
  • the elevator motor controller sends to the electric safety controller at least a request for closing the main contactor and a request for releasing the brake.
  • the elevator motor controller sends to the electric safety controller a request for advance opening of the doors as the elevator car is ap- proaching the target floor.
  • the elevator system controller also sends to the electric safety controller a request for closing the main contactor and releasing the brake. For the brake to be released and the main contactor to be closed, it is required that the electric safety controller receive congruent control requests from both the elevator motor controller and the elevator system controller.
  • the electric safety controller sends to the elevator system controller and to the elevator motor controller at least data regarding its operational state.
  • the number of landing doors open is read by means of detectors fitted in conjunction with the elevator landing doors
  • the number of elevator car doors open is read by means of detectors fitted in conjunction with the elevator car doors
  • the position of the mechanical safety device is read by means of detectors fitted in conjunction with the me- chanical safety device.
  • These reading operations can be performed by an electric safety controller comprising means for measuring the total resistance of the series circuit.
  • the number of doors open can be read from the total resistance of the series circuit. If according to the method it is detected that the number of landing doors open is greater than the num- ber of elevator car doors open, then the safety system is set into the 'person in shaft' state and operation of the elevator is prevented.
  • a manually controlled reset mechanism is arranged in conjunction with the electric safety controller to allow the elevator system to be restored to normal operation.
  • the aforesaid reset mechanism is disposed on the bottom- most floor in the elevator shaft. In another embodiment of the invention, the aforesaid reset mechanism is integrated with the operating interface for maintenance operation of the elevator system.
  • a method in a method according to the invention, after the safety system has been set into the 'person in shaft' state, data about this change is saved in the non-volatile memory of the electric safety controller.
  • the state of the manually controlled reset mechanism is also read by means of the electric safety controller, and when it is detected that the reset mechanism has been reset into the state of cancellation of inhibition of normal operation, the program being executed by the electric safety controller is reset from the 'person in shaft' state and data about this change is stored in the non-volatile memory of the electric safety controller.
  • Data regarding the change into the 'person in shaft' state as well as cancellation of that state can also be sent via the data interface bus to the control devices.
  • the data of the detectors in the electric safety system are read via the connection interface of the electric safety controller simultaneously by at least two microcontrollers and the data items read by the microcontrollers of the electric safety controller are compared to each other and the functional states of the microcontrollers are monitored via a communication bus between the microcontrollers.
  • the electric safety controller com- prises an non-volatile memory for the storage of data during a power failure.
  • the non-volatile memory is arranged to communicate with at least one processor of the electric safety controller via a communication bus reserved for that purpose.
  • an electric safety controller con- taining a non-volatile memory is used.
  • the operating volt- age of the electric safety controller is read by the safety controller itself. If it is detected that the operating voltage of the electric safety controller has fallen below a certain limit value, then the program being executed by the electric safety controller is set into a state where data is written to the non-volatile memory of the electric safety controller. Those variables of the electric safety controller which describe the current status of the program executed by the electric safety controller at the instant of activation of the write process are written to the non-volatile memory of the electric safety controller.
  • a voltage is fed into the series circuit by the electric safety controller through a series resistor connected to the voltage output of the electric safety controller and the current flowing in the series circuit is measured.
  • limit values R1 , R2, ..., Rn are determined for the current flowing in the series circuit in such manner that R1 corresponds to the highest current value and Rn to the lowest current value and that the limit values are so defined that they correspond to the number of switches open.
  • the measured current is compared to the limit values R1 , R2, ..., Rn, of which limit value R1 is highest. If the current measured exceeds the predetermined limit value R1 , then it is inferred that all the landing door switches fitted in the series circuit are closed. If the current measured is within the range of variation of one of the predetermined current limit values R2 Rn, then the number of switches open is inferred in such manner that the lowest limit value Rn corresponds to the largest number of switches open and when the current value increases the number of switches open decreases.
  • the position of the switches defining the state of the land- ing doors can also be monitored without resistors added in parallel with the switches. In this case, the current flowing through a series resistor connected to the voltage output of the electric safety controller is measured. When one of the landing door switches is opened, the flow of current through the series resistor is interrupted.
  • the voltage output of the electric safety controller need not necessarily be provided with a separate series resistor.
  • the current of the voltage output is limited by some other method, e.g. by an active current limiting connection formed using transistors.
  • resistors differing from each other in resistance value are fitted in parallel with the switches defining the state of the landing doors.
  • a voltage is fed by the electric safety controller into the series circuit through a series resistor connected to the voltage output of the electric safety controller and the current flowing in the series circuit is measured. The measured current is compared to a predetermined current limit value R1 , which concerns the highest predetermined current limit value.
  • the limit value R1 corresponds to a situation where all the switches in the series circuit are closed.
  • the measured current is compared to predetermined ranges of current variation, each one of said ranges indicating the opening of one or more series circuit switches corresponding to the range of variation in question.
  • the mechanical stopping device according to the invention may be e.g. a braking device engaging the elevator traction sheave or a braking device engaging an elevator car guide rail. It is also possible that the safety arrangement of the invention comprises both of the aforesaid braking devices.
  • the electric safety controller comprised in the electric safety system consists of a connection interface and two or more microcontrollers, which are arranged to communicate with each other via a connection bus reserved for that purpose and all of which execute the same program independently from each other, and which microcontrollers are arranged to monitor each other's operational state and to read via the connection interface the detector data and, when necessary, to issue a control command to one or more mechanical stopping devices which prevent movement of the elevator in the elevator shaft.
  • the purpose of this arrangement is to make sure that, when a fault occurs, the electric safety controller will still be able to guarantee the safety of the elevator system.
  • a safety arrangement comprises a controllable manipulator by means of which the mechanical safety device can be set into a working position, said manipulator being controlled by the electric safety controller comprised in the electric safety system.
  • the safety arrangement also comprises means for checking the service condition of the mechanical safety device by operating the controllable manipulator as well as means for checking the service condition of the controllable manipulator.
  • the electric safety controller has been arranged to set the mechanical safety device automatically into the working position by appropriate control of the manipulator when it detects a control situation allow- ing both manual opening of a landing door and maintenance operation of an elevator maintenance operation unit.
  • At least one detector comprised in the electric safety system is duplicated.
  • the structure of at least one detector comprises a mechanical switch openable by forced control.
  • the detectors fitted in conjunction with the landing doors are bistable switches which are opened and remain open when the landing doors are opened.
  • a separate detector for identifying an open landing door may be arranged in conjunction with the elevator landing door on the bottommost floor.
  • means for separately reading the state of the aforesaid detector via the communication bus may be arranged in conjunction with the electric safety controller.
  • An arrangement according to the invention comprises means for monitoring the condition of the detectors comprised in the electric safety system.
  • Arranged in conjunction with the electric safety controller are e.g. means for changing the operational state of the detectors and means for meas- uring a change in the operational state of the detectors.
  • the elevator safety device of the invention has significant advantages as compared to prior art.
  • the invention makes it possible to identify a 'person in shaft' state via a simple arrangement. It is only necessary to add a single resistor in parallel with each landing door contact.
  • the signals to be monitored can be filtered by software in the electric safety controller as necessary.
  • the system is immune to short-duration breaks in the contacts of the switches. As the number of malfunctions of the elevator system caused by these short-duration breaks is reduced, the reliability and utilization rate of the elevator system are improved.
  • the safety arrangement of the invention requires a very complex operat- ing logic to ensure that the system will identify all possible failure situations. Based on the measurement results obtained from the detectors, the logic employed is required to exclude all operating states in which maintenance operation is prohibited and to allow those operating states in which maintenance operation is allowed. Moreover, the system is re- quired to be able to infer whether detectors have become defective.
  • supervision of operation is performed in a centralized manner in the electric safety controller, which simplifies the implementation as compared to a solution implemented using discrete components. At the same time, the total number of components in the system is reduced and the reliability of the system is improved.
  • the electric safety system of the invention contains separate end limit markers for normal and maintenance operation.
  • both the choice as to which end limit switches are to be used in each situation and the deduction regarding the operating state of the safety arrangement are performed in a centralized manner by the electric safety controller ensures that the operating state of the safety arrangement determined by measurements by the detectors of the electric safety system corresponds to the end limit markers being used.
  • the end limit markers are read by the electric safety controller by means of end limit marker readers, it is possible to make sure that the correct end limit markers are selected in a situation where a serviceman operates the elevator in maintenance mode from the elevator shaft.
  • By fitting the end limit markers and marker readers advantageously in a mutually staggered manner it will be sufficient to use only two end-limit marker readers. This simplifies the safety arrangement, reduces the wiring and improves the reliability of the system.
  • Using the electric safety controller it is also possible to permit a direction-dependent read logic in the reading of end-limit markers. If for example
  • the switches comprised in the elevator safety arrangement are read in the manner proposed in the invention by measuring the current flowing through the resistors fitted in connection with the switches, the state of the series-connected switches can be determined by the electric safety controller via a single current measurement. This simplifies the connec- tion interface between the electric safety controller and the switches to be read.
  • a short circuit of resistors can be disregarded in the consideration of failures.
  • resistors can also be used to measure safety circuits, such as in the case of landing door switches.
  • Resistors are also advantageous as components for use in the measurements in the electric safety system.
  • the 'person in shaft' state is saved to the nonvolatile memory of the electric safety controller and the data regarding the transition into that state is preserved until it is cleared by means of a specific manually operated reset mechanism.
  • the reset mechanism may be e.g. a switch lockable with a key, and the state of the switch can be read directly by the same safety controller, thus allowing a simple and advantageous solution to be achieved as compared to a situation where the switch read logic is implemented using discrete components.
  • the detectors in the safety arrangement can be read in a centralized manner. There may be a serial communication bus arranged between them, or they may be connected in series. The amount of wiring needed in the electric safety system is thus reduced.
  • the electric safety system of the invention it is also possible to monitor the operation of different detectors by means of the electric safety controller, and a possible failure can be detected. Furthermore, it is possible to distinguish a failure situation of an individual detector, and corresponding information can be sent directly to a maintenance center, the system diagnostics being thus improved.
  • Fig. 1 represents a safety arrangement according to the invention
  • Fig. 2 represents a set of equipment used in an embodiment of the invention for identifying the state of the switches
  • Fig. 3 represents an elevator car according to Fig. 1 as seen from above.
  • Fig. 1 represents an elevator system applying a safety arrangement according to the invention.
  • An elevator car 28 has been fitted to travel in an elevator shaft 27 from floor to floor 21 , 22.
  • This elevator system according to the invention also comprises a counterweight 23, but the elevator system of the invention may also be implemented without a counterweight.
  • the elevator motor 25 is disposed in the elevator shaft, but it may also be placed in a machine room.
  • end limit markers 12, 13, 14, 15 The extreme limits of movement of the elevator car in the elevator shaft are determined by end limit markers 12, 13, 14, 15. During normal opera- tion, the elevator car travels between the extreme limits determined by end limit markers 12, 14. When the mechanical safety devices 10, 18, 24 have been set into their active position, the elevator can only be operated in maintenance mode within the shaft portion defined by end limit markers 13, 15. Fitted in conjunction with the elevator car are end limit marker readers 43,44. In this embodiment of the invention, the end limit markers used are ramps and the end limit marker readers are switches that can be brought into contact with the ramps.
  • the electric safety controller reads switches 7,8 measuring the position of the landing doors and, via a data interface bus 6, a detector 29 measuring the position of the elevator car. Based on the positions of these, the electric safety controller infers a transition of the safety system into the 'person in shaft' state. In this situation, operation of the elevator both in normal mode and in maintenance mode is inhibited.
  • the switch 9 reading the operating state of the mechanical safety device indicates that the mechanical safety device has been reset to the working position, maintenance operation is allowed.
  • the electric safety controller reads the switch indicating the state of the elevator mainte- nance operation unit via the data interface bus 6 and allows maintenance operation by controlling the brake 26.
  • the elevator shaft is provided with two different sets of end limits to determine the extreme limits of movement of the elevator car. During normal operation, the elevator is allowed to come closer to the end, determined by the ramps 12,14. In maintenance operation mode, the extreme limits of movement are defined by ramps 13,15.
  • the electric safety controller 3 reads the position of the elevator car in the elevator shaft by means of switches 43,44 and, when the elevator moves past a ramp, stops it by controlling the brake 26. The switch is opened when it comes into contact with a ramp. In this preferred embodiment of the invention, the switches are fitted in a staggered arrangement with the ramps such that switch 43 reads ramps 12 and 15 and switch 44 reads ramps 13 and 14.
  • the electric safety controller prevents elevator operation in both normal and maintenance modes. If only switch 43 is open, then upward movement in maintenance operation mode is inhibited. If only switch 44 is open, then downward movement in maintenance operation mode is inhibited.
  • the electric safety controller 3 additionally communicates via the data interface bus 6 with at least the elevator system controller 2, with the ele- vator motor controller 1 and the elevator car door controller 4.
  • the electric safety controller 3 makes an inference about the operating state of the safety arrangement of the elevator. If the controller detects a functional deviation on the basis of the data it has read from the detectors, it issues a control command to the mechanical stopping device 26. In addition, it sends over the data interface bus 6 a command preventing operation to the elevator motor controller 1 and data indicating the functional deviation to the other control devices 2,4.
  • the electric safety controller 3 When the electric safety controller 3 detects a 'person in shaft' state, it saves corresponding data to the non-volatile memory of the safety con- trailer. After this, the electric safety controller can only be restored to its normal state by means of a manually operated reset mechanism 41.
  • the manually operated reset mechanism In the safety arrangement according to Fig. 1 , the manually operated reset mechanism is disposed on the lowest floor in the elevator shaft, and the electric safety controller reads the state of the reset mechanism via the data interface bus 6.
  • the manually operated reset mechanism 41 can also be disposed in connection with the electric safety controller, and the electric safety controller can read the state of the reset mechanism 42 via a specific separate communication bus.
  • a mechanical safety device 24 is also placed on the top of the elevator car 28.
  • the state of the safety device can be read by the electric safety controller 3 via the data interface bus 6.
  • Fig. 2 represents a set of equipment according to the invention which can be used to read the operating states of the switches 37,38,39,40 in the electric safety system. These switches are connected as a series circuit and resistors 33,34,35,36 are fitted in parallel with them.
  • the series circuit is connected to the electric safety controller 3.
  • the electric safety controller feeds a voltage 30 into the series circuit through a series resistor 32.
  • the equipment additionally comprises means for measuring 31 ,42 the current flowing in the series circuit.
  • the electric safety controller feeds a known voltage 30 into the series circuit through the series resistor 32.
  • the current can now be measured by the measuring devices 31 , 42 and the state of the series circuit can be read correspondingly.
  • the current path through that switch is interrupted and the current starts flowing through the resistor fitted in parallel with the switch.
  • the current flowing in the series circuit is reduced, because the flow of the current is limited by the series connection of resistors 32 and 33. If additionally switch 38 is opened, then the current is reduced further, because its flow is limited by the series connection of resistors 32, 33 and 34.
  • the current measurement can reveal the opening of one or more switches.
  • the current flowing in the series circuit is the smaller the more switches are open. In this case, however, it is not possible to identify which particular switch is open.
  • the resistors 33,34,35,36 in the series circuit are so chosen that they differ from each other in resistance value, then it is possible to identify the state of each individual switch in the series circuit. In this case, in choosing the resistors it is also necessary to consider combinations of different resistors so that the value of each single resistor should differ from the combination of a series connection of two or more different resistors to allow the state of an individual switch to be detected. Using a set of equipment as illustrated in Fig.
  • the current flowing into the series circuit is measured by measuring device 31 and the current returning from the series circuit to the electric safety controller by measuring device 42.
  • the current fed into the series circuit escapes at the point of earth fault to other structural parts while only a proportion of it returns back to the electric safety controller 3 via the series circuit.
  • the returning current is measured by measuring device 42, and the fault condition can be de- tected by comparing the current flowing out of the series circuit and the current returning into the series circuit.
  • Fig. 3 is a top view representation of an elevator car 28 according to Fig. 1.
  • the switches 43 and 44 are placed in a staggered arrangement with the ramps 12,13,14,15 in such manner that ramps 12 and 15 lie in the path of switch 43 and ramps 13 and 14 lie in the path of switch 44 as the elevator car 28 is moving in the elevator shaft.
  • switch 43 can be used to read the ramp 15 in the upper part of the elevator shaft which determines the extreme limit of movement during maintenance operation and the ramp 12 in the lower part of the eleva- tor shaft which determines the extreme limit of movement during normal operation.
  • Switch 44 can similarly be used to read the ramp 14 in the upper part of the elevator shaft which determines the extreme limit of movement during normal operation and the ramp 13 in the lower part of the elevator shaft which determines the extreme limit of movement during maintenance operation.

Landscapes

  • Maintenance And Inspection Apparatuses For Elevators (AREA)
  • Elevator Control (AREA)
  • Indicating And Signalling Devices For Elevators (AREA)

Abstract

The invention relates to an elevator safety arrangement and a method for implementing safety spaces in an elevator shaft. The safety arrangement of the invention comprises a mechanical safety device which can be set to a working position to ensure a sufficient safety space in the elevator shaft and an electric safety system for identifying the operating state of the mechanical safety device. According to the method of the invention, detectors comprised in the electric safety system are read by an electric safety controller and, when a functional deviation is detected, one or more stopping devices are actuated to bring the elevator system into a safe operating state.

Description

ELEVATOR SAFETY DEVICE
Field of the invention
The present invention relates to an elevator safety device as defined in the preamble of claim 1 and to a method as defined in the preamble of claim 10.
Prior art
When elevators in old buildings are to be modernized, problems are often encountered because the safety regulations have been changed in the course of years and the spaces above and below the elevator car in the elevator shaft are not large enough to satisfy the new safety regulations. Extending the shaft upwards or downwards is in most cases impossible in respect of construction technology or at least too expensive and difficult to be considered as an alternative.
New buildings are constructed with a view to saving space in the elevator shaft. This is accomplished by designing the spaces above and below the car in the elevator shaft to as small dimensions as possible. In this case, there is no sufficient safety space left in the elevator shaft above and below the elevator car to provide personal protection for a serviceman working on the top of the elevator car or in the elevator shaft.
In the case of old buildings, the safety regulations permit limitation of the shaft spaces above and below the car, provided that the elevator shaft is provided with mechanical safety devices that can be set up in connection with work carried out in the elevator shaft so as to ensure a sufficient safety space in the upper and lower parts of the elevator shaft. These safety devices limit the extreme ends of the path of movement of the elevator car in the elevator shaft in a manner such that a sufficient working space is left for an installer. In the future, a similar safety solution officially approved by the authorities is likely to be used in new buildings as well.
A safety device often used is a turnable buffer placed on the shaft bottom so that a serviceman can turn it to an upright working position before starting work in the elevator shaft. The turnable buffer may be placed on the bottom of the elevator shaft below the elevator car, in which case it will limit the movement of the elevator car in the shaft bottom space, or it may be placed below the counterweight, in which case it will limit the movement of the counterweight in the shaft bottom space while at the same time limiting the movement of the elevator car in the headroom space in the shaft. In this case, to determine the required safety distance in the headroom space in the elevator shaft, it is necessary to take into account that, when the counterweight hits the buffer at the shaft bottom, the elevator car, due to its kinetic energy, still goes on moving upwards in the top end of the shaft. The length of this movement depends on the highest possible speed that the elevator car may have at the instant of the counterweight colliding with the buffer. Thus, the safety distance must be so designed that it corresponds to the highest possible speed at the instant of collision. In addition, in determining the safety distance both in the headroom space and in the bottom space of the elevator shaft, the buffer compression caused by the collision has to be taken into account.
The previously known state of the art is represented by specification WO 97/23399. This specification discloses an arrangement providing a safety space at the lower end of an elevator shaft. It comprises a support pillar which is arranged in the path of the car frame and which is turned to a working position by means of an actuating element secured to the floor of the shaft and to the support pillar. Arranged in conjunction with the support pillar are the required switches to indicate the position of the support pillar. According to regulations, the operation of a mechanical safety device also has to be supervised. It is required that the system be able to detect a maintenance man entering the elevator shaft, and likewise to detect the operating state of the mechanical safety device.
Specification JP03018575 discloses a switch which is mounted in conjunction with a mechanical safety device and whose position changes when the mechanical safety device is turned into a working position. Operation of the elevator motor is not allowed until a change of state of the switch indicates that the mechanical safety device has been turned into the working position. The solution for an electric safety arrangement described in this specification is based on discrete components, such as relays and switches, and is therefore very complicated in respect of the required wiring. Moreover, the testing of operation, which is important in regard of safety of operation of the switch, requires a separate control logic and thus further increases the complexity of the solution. As the electric safety arrangement is implemented using discrete components, such as relays and switches, the system is sensitive to momentary breaks in the control of the switches and to contact problems, which occur in an elevator system from time to time. If the operation of the elevator system is interrupted due to momentary breaks like this, then the reliability of operation of the elevator system also deteriorates. For a safety arrangement consistent with regulations, it is additionally required that a person entering the elevator shaft be detected and taken into account in the design of the logic of operation of the safety arrangement.
Specification EP1159218B discloses an elevator safety device comprising an electric safety controller that reads data from sensors connected to the elevator system and, when it detects a safety risk in the elevator system, sends a control signal to the elevator motor controller, to the elevator brake and to the control center of the elevator system. However, the safety controller according to this specification can not in itself provide a level of safety sufficient for the operation of the safety arrangement according to the present invention. For an implementation of the safety arrangement compliant to regulations, it is required that the elevator shaft be provided with detectors serving to define the allowed extreme limits of elevator car travel in the elevator shaft during maintenance operation, , and additionally detectors defining the allowed limits of elevator car travel during normal operation. Furthermore, detectors are needed to identify a 'person in shaft' state, such as e.g. when an installer enters the elevator shaft. In addition, a control logic is needed for monitoring the safety of the elevator system on the basis of detector data in different operational modes of the elevator system.
Object of the invention
The object of the present invention is to disclose a new type of safety arrangement for implementing the safety spaces in an elevator shaft as re- quired by regulations. A further object of the invention is to disclose a new type of electric safety system that monitors the entry of a person into the elevator shaft as well as the state of mechanical safety devices.
Features of the invention
The elevator safety arrangement of the invention is characterized by what is stated in the characterizing part of claim 1. The method of the invention for implementing the safety spaces in an elevator shaft is characterized by what is stated in the characterizing part of claim 10. Other embodiments of the invention are characterized by what is stated in the other claims. Inventive embodiments are also presented in the description part of the present application. The inventive content disclosed in the application can also be defined in other ways than is done in the claims below. The inventive content may also consist of several separate inventions, especially if the invention is considered in the light of explicit or implicit sub-tasks or with respect to advantages or sets of advantages achieved. In this case, some of the attributes contained in the claims below may be superfluous from the point of view of separate inventive concepts.
The present invention concerns an elevator safety arrangement and a method according to the safety arrangement.
An elevator safety arrangement for implementing the prescribed safety spaces in an elevator shaft comprises a mechanical safety device, preferably a pole or barrier, which can be moved into a service position to ensure a sufficient safety space in the elevator shaft. Moreover, the safety arrangement comprises an electric safety system, which comprises in conjunction with the mechanical safety device at least one detector for identifying the operating state of the mechanical safety device, in conjunction with an elevator landing door at least one detector for identifying the position of the landing door, means for reading the detectors fitted in conjunction with the elevator landing door, in conjunction with the elevator car door at least one detector for identifying the position of the elevator car door, means for reading the detectors in conjunction with the elevator car door, and an electric safety controller which reads data from the elevator control devices and from the detectors comprised in the electric safety controller and, based on the data thus collected, controls one or more mechanical stopping devices which stop the movement of the elevator car in the elevator shaft. In addition, the electric safety system comprises a data interface bus between the electric safety controller and the elevator control devices. In this bus, data is transferred both for determin- ing the safety of the elevator and for controlling the elevator in a normal operating situation.
The electric safety controller reads information about the position of the elevator landing door and the position of the elevator car door and, based on this information, infers whether a person has entered the elevator shaft, i.e. deduces a 'person in shaft' state. After a 'person in shaft' state has been detected, the electric safety controller only allows maintenance operation after it detects that the mechanical safety device has assumed its operating position. For example, it is possible for a maintenance man to enter the elevator shaft by opening a landing door manually by means of a key used for that purpose.
In a preferred embodiment of the invention, the safety arrangement additionally comprises in conjunction with an elevator maintenance operation unit at least one detector for identifying the state of control of the elevator maintenance operation unit and, in the vicinity of each end of the elevator shaft, at least one end limit marker, and in conjunction with the elevator car at least one end limit marker reader for determining the extreme limits of movement of the elevator car in the elevator shaft.
The above-mentioned elevator control devices include e.g. an elevator system controller, an elevator motor controller and an elevator car door controller.
In an embodiment of the invention, two separate sets of end limit markers are placed in the elevator shaft near each end for determining the position of the elevator car, of which end limit markers the ones located closer to the ends of the elevator shaft determine the extreme limits of elevator car movement during normal operation while the ones located farther away from the ends determine the extreme limits of elevator car movement during maintenance operation. Fitted in conjunction with the elevator car are readers for reading the end limit markers, said readers being connected to the electric safety controller via the data interface bus.
In a preferred embodiment of the invention, the arrangement comprises two end limit marker readers fitted in conjunction with the elevator car and two end limit markers fitted at either end of the elevator shaft. The readers used in this embodiment for reading the end limit markers are switches, and the end limit markers used are ramps, which are fitted in the elevator shaft in such a way that a switch mounted in conjunction with the elevator car will come into contact with the ramp and is opened when the elevator car moves in the shaft until it reaches the ramp. The positions of the ramps in the shaft and the positions of the switches in con- junction with the elevator car have been so chosen that they interlap each other in such manner that one of the switches, which is referred to as K1 , can be brought at the upper end of the elevator shaft into contact with the ramp placed farther away from the end and at the lower end of the elevator shaft with the ramp placed closer to the end. Correspondingly, switch K2 can be brought into contact with the ramp placed closer to the end at the upper end of the elevator shaft and with the ramp placed farther away from the end at the lower end of the elevator shaft. Using the electric safety controller, the state of the switches is read and, based on the state, the position of the elevator car in the elevator shaft is inferred. If it is detected that both switch K1 and switch K2 are open, then both normal and maintenance operation of the elevator is prevented. If it is detected that only switch K1 is open, then only maintenance operation in the upward direction is inhibited. If it is detected that only switch K2 is open, then only maintenance operation in the downward direction is inhibited. This solution provides the advantage that all four end limit markers can be read by means of two simple end limit marker readers, such as switches. This reduces the amount of wiring between the readers and the electric safety controller.
The detectors fitted in conjunction with the elevator landing doors may preferably be switches whose contact is opened by forced control as the landing doors are opened. The switches are arranged in series as a series circuit, which is connected to the electric safety controller via a gateway to allow measurement of the state of the series circuit.
In an embodiment of the invention, the means for reading the detectors fitted in conjunction with the elevator landing door comprise, fitted in par- allel with each switch in the series circuit, a resistor of equal resistance value. In another embodiment of the invention, the means for reading the detectors fitted in conjunction with the elevator landing door comprise a resistor of unequal resistance value fitted in parallel with each switch in the series circuit. When resistors of unequal resistance value are used, it is possible to identify the position of each individual switch in the series circuit. The resistor according to the invention may preferably be an encapsulated film resistor. Such a film resistor may be e.g. a metal film resistor. The structure of the film resistor is such that the resistance ele- ment is well protected e.g. against impurities. This means that it is highly unlikely for the resistor to undergo a failure that would short-circuit the resistance element. This improves the reliability of a measuring circuit that uses film resistors. The electric safety controller may additionally comprise means for measuring the total resistance of the series circuit. Such means may consist of e.g. a voltage source provided in connection with the electric safety controller and used to supply a voltage into the series circuit, and a current measuring sensor for measuring the current flowing in the series circuit. From the ratio between the voltage supplied and the current measured, it is possible to infer the total resistance of the series circuit. Such a circuit provides the advantage that, if all the resistors in the series circuit are of equal resistance value, then the number of open switches in the series circuit can be established by measuring the total resistance. If the switches are placed in connection with doors, such as landing doors, then the number of doors open can be detected.
The state of the switches in the series circuit can also be determined, using the same apparatus and method, without resistors fitted in parallel with the switches. In this case, the opening of one of the switches leads to a break in the flow of current through the switches.
The electric safety controller according to the invention may be integrated in conjunction with another device used in the control of the elevator sys- tern. The safety arrangement of the invention can also be used in elevator systems without machine room, in which case the space saving achieved by integrating the electric safety controller is an advantage. Furthermore, the safety arrangement of the invention can also be used in elevator systems without counterweight.
In an embodiment of the invention, information is transmitted to the electric safety controller over a data interface bus from a control device fitted in conjunction with the elevator car. The information transmitted contains at least data about the control of the elevator maintenance operation unit, data about the position of the elevator car in the elevator shaft, data about the state of the end limit switches of the elevator shaft separately during normal operation and maintenance operation, data about the position of the manhole cover in the top of the elevator car, and data about the state of the doors of the elevator car. From the electric safety control- ler, at least data regarding the operational state of the electric safety controller is transmitted via the data interface bus to the control device fitted in conjunction with the elevator car.
Via the interface bus, data is also transmitted between the electric safety controller and the elevator motor controller as well as data between the electric safety controller and the elevator system controller. The elevator motor controller sends to the electric safety controller at least a request for closing the main contactor and a request for releasing the brake. In addition, the elevator motor controller sends to the electric safety controller a request for advance opening of the doors as the elevator car is ap- proaching the target floor. The elevator system controller also sends to the electric safety controller a request for closing the main contactor and releasing the brake. For the brake to be released and the main contactor to be closed, it is required that the electric safety controller receive congruent control requests from both the elevator motor controller and the elevator system controller. The electric safety controller sends to the elevator system controller and to the elevator motor controller at least data regarding its operational state.
In a method according to the invention for implementing safety spaces in an elevator shaft, the number of landing doors open is read by means of detectors fitted in conjunction with the elevator landing doors, the number of elevator car doors open is read by means of detectors fitted in conjunction with the elevator car doors, and the position of the mechanical safety device is read by means of detectors fitted in conjunction with the me- chanical safety device. These reading operations can be performed by an electric safety controller comprising means for measuring the total resistance of the series circuit. The number of doors open can be read from the total resistance of the series circuit. If according to the method it is detected that the number of landing doors open is greater than the num- ber of elevator car doors open, then the safety system is set into the 'person in shaft' state and operation of the elevator is prevented. If it is detected that, when the safety system is in the 'person in shaft' state, the number of landing doors open is equal to the number of elevator car doors open, and that the mechanical safety device has been set into the service position, then maintenance operation is allowed. In an embodiment according to the invention, a manually controlled reset mechanism is arranged in conjunction with the electric safety controller to allow the elevator system to be restored to normal operation. In an embodiment of the invention, the aforesaid reset mechanism is disposed on the bottom- most floor in the elevator shaft. In another embodiment of the invention, the aforesaid reset mechanism is integrated with the operating interface for maintenance operation of the elevator system.
In a method according to the invention, after the safety system has been set into the 'person in shaft' state, data about this change is saved in the non-volatile memory of the electric safety controller. According to a pre- ferred embodiment of the invention, the state of the manually controlled reset mechanism is also read by means of the electric safety controller, and when it is detected that the reset mechanism has been reset into the state of cancellation of inhibition of normal operation, the program being executed by the electric safety controller is reset from the 'person in shaft' state and data about this change is stored in the non-volatile memory of the electric safety controller. Data regarding the change into the 'person in shaft' state as well as cancellation of that state can also be sent via the data interface bus to the control devices.
In a method according to the invention, the data of the detectors in the electric safety system are read via the connection interface of the electric safety controller simultaneously by at least two microcontrollers and the data items read by the microcontrollers of the electric safety controller are compared to each other and the functional states of the microcontrollers are monitored via a communication bus between the microcontrollers. If it is discovered that the data read from the detectors differs between the microcontrollers or a failure situation is detected in the functional state of a microcontroller, then operation of the elevator is prevented by actuating by means of the electric safety controller at least one mechanical stop- ping device and in the same connection a command preventing operation is transmitted by the electric safety controller via the data interface bus to the controller of the elevator motor and data regarding the prevention of operation is transmitted to the control devices.
In an embodiment of the invention, the electric safety controller com- prises an non-volatile memory for the storage of data during a power failure. The non-volatile memory is arranged to communicate with at least one processor of the electric safety controller via a communication bus reserved for that purpose.
In a method according to the invention, an electric safety controller con- taining a non-volatile memory is used. In this method, the operating volt- age of the electric safety controller is read by the safety controller itself. If it is detected that the operating voltage of the electric safety controller has fallen below a certain limit value, then the program being executed by the electric safety controller is set into a state where data is written to the non-volatile memory of the electric safety controller. Those variables of the electric safety controller which describe the current status of the program executed by the electric safety controller at the instant of activation of the write process are written to the non-volatile memory of the electric safety controller.
In another method according to the invention, in which an electric safety controller containing a non-volatile memory is likewise used, those variables of the program being executed by the electric safety controller which describe the status prevailing at the instant of time in question in the program being executed by the electric safety controller are written to the non-volatile memory of the electric safety controller at regular intervals, e.g. at 10 ms intervals. In addition, in this method, in connection with each write situation an index variable for subsequent identification of the write situation is saved to the non-volatile memory of the electric safety controller. When the program of the electric safety controller is restarted e.g. after a power failure, those variables describing the status of the program executed by the electric safety controller the index variable for which has been used to mark the latest status of the program of the electric safety controller are read from the non-volatile memory of the electric safety controller. This method has the advantage that, in addition to al- lowing the state of operation of the electric safety controller before an interruption of operation to be established from the highest value of the index variable, it also makes it possible to establish the preceding operational states in an order according to the index. This provides an advantage e.g. when the operation of the safety arrangement is to be eluci- dated afterwards. In a method according to the invention, the switches defining the state of the landing doors are arranged in series as a series circuit and resistors of equal resistance value are fitted in parallel with the switches. In this method, a voltage is fed into the series circuit by the electric safety controller through a series resistor connected to the voltage output of the electric safety controller and the current flowing in the series circuit is measured. According to this method, limit values R1 , R2, ..., Rn are determined for the current flowing in the series circuit in such manner that R1 corresponds to the highest current value and Rn to the lowest current value and that the limit values are so defined that they correspond to the number of switches open.
In a method according to the invention, the measured current is compared to the limit values R1 , R2, ..., Rn, of which limit value R1 is highest. If the current measured exceeds the predetermined limit value R1 , then it is inferred that all the landing door switches fitted in the series circuit are closed. If the current measured is within the range of variation of one of the predetermined current limit values R2 Rn, then the number of switches open is inferred in such manner that the lowest limit value Rn corresponds to the largest number of switches open and when the current value increases the number of switches open decreases. In the method of the invention, the position of the switches defining the state of the land- ing doors can also be monitored without resistors added in parallel with the switches. In this case, the current flowing through a series resistor connected to the voltage output of the electric safety controller is measured. When one of the landing door switches is opened, the flow of current through the series resistor is interrupted.
In an embodiment of the invention, the voltage output of the electric safety controller need not necessarily be provided with a separate series resistor. In this case, the current of the voltage output is limited by some other method, e.g. by an active current limiting connection formed using transistors. In another method according to the invention, resistors differing from each other in resistance value are fitted in parallel with the switches defining the state of the landing doors. In this method, a voltage is fed by the electric safety controller into the series circuit through a series resistor connected to the voltage output of the electric safety controller and the current flowing in the series circuit is measured. The measured current is compared to a predetermined current limit value R1 , which concerns the highest predetermined current limit value. At the same time the limit value R1 corresponds to a situation where all the switches in the series circuit are closed. In addition, the measured current is compared to predetermined ranges of current variation, each one of said ranges indicating the opening of one or more series circuit switches corresponding to the range of variation in question. By defining beforehand a range of current variation within which the current flowing through the series circuit must remain when a given landing door switch is open, it is possible to ensure that the current value is identifiable even if the resistance value of the resistor fitted in parallel with the switch should vary within the scope of a tolerance or range of variation.
By observing the current flowing in the series circuit, it is also possible to analyze the working condition of the series circuit, e.g. in case of an earth fault in the series circuit. This can be accomplished by measuring the current flowing into the series circuit and the current returning from the series circuit. After this, the current flowing into the series circuit and the current returning from the series circuit are compared to each other. If the values of the current flowing in and the current returning differ from each other by more than a predetermined limit value, then operation of the elevator is prevented by sending by means of the electric safety controller a control command to at least one mechanical stopping device and in the same connection a stopping command is transmitted by the electric safety con- trailer via the data interface bus to the elevator motor controller and data regarding the stopping is sent to the control devices. Although the above description proposes an apparatus and a method for reading the state of landing door switches by the aid of resistors fitted in parallel with the switches, it is obvious to a person skilled in the art that it is also possible to read the operational state of other switches in an ele- vator system by using a corresponding apparatus and method. For example, it is possible to use a similar apparatus and method to read the end-limit switches or the switches measuring the car door position.
The mechanical stopping device according to the invention may be e.g. a braking device engaging the elevator traction sheave or a braking device engaging an elevator car guide rail. It is also possible that the safety arrangement of the invention comprises both of the aforesaid braking devices.
In a preferred embodiment of the invention, the electric safety controller comprised in the electric safety system consists of a connection interface and two or more microcontrollers, which are arranged to communicate with each other via a connection bus reserved for that purpose and all of which execute the same program independently from each other, and which microcontrollers are arranged to monitor each other's operational state and to read via the connection interface the detector data and, when necessary, to issue a control command to one or more mechanical stopping devices which prevent movement of the elevator in the elevator shaft. The purpose of this arrangement is to make sure that, when a fault occurs, the electric safety controller will still be able to guarantee the safety of the elevator system.
A safety arrangement according to the invention comprises a controllable manipulator by means of which the mechanical safety device can be set into a working position, said manipulator being controlled by the electric safety controller comprised in the electric safety system. The safety arrangement also comprises means for checking the service condition of the mechanical safety device by operating the controllable manipulator as well as means for checking the service condition of the controllable manipulator. The electric safety controller has been arranged to set the mechanical safety device automatically into the working position by appropriate control of the manipulator when it detects a control situation allow- ing both manual opening of a landing door and maintenance operation of an elevator maintenance operation unit.
In a preferred embodiment of the invention, at least one detector comprised in the electric safety system is duplicated.
In another preferred embodiment of the invention, the structure of at least one detector comprises a mechanical switch openable by forced control.
In a safety arrangement according to the invention, the detectors fitted in conjunction with the landing doors are bistable switches which are opened and remain open when the landing doors are opened. In connection with the switches, there may further be arranged means for subse- quent closing of the switches.
In the electric safety system of the invention, a separate detector for identifying an open landing door may be arranged in conjunction with the elevator landing door on the bottommost floor. In addition, means for separately reading the state of the aforesaid detector via the communication bus may be arranged in conjunction with the electric safety controller.
An arrangement according to the invention comprises means for monitoring the condition of the detectors comprised in the electric safety system. Arranged in conjunction with the electric safety controller are e.g. means for changing the operational state of the detectors and means for meas- uring a change in the operational state of the detectors. Advantages of the invention
The elevator safety device of the invention has significant advantages as compared to prior art. The invention makes it possible to identify a 'person in shaft' state via a simple arrangement. It is only necessary to add a single resistor in parallel with each landing door contact.
In the safety arrangement of the invention, as the states of the detectors in the electric safety system are monitored by a separate electric safety controller, the signals to be monitored can be filtered by software in the electric safety controller as necessary. Thus, the system is immune to short-duration breaks in the contacts of the switches. As the number of malfunctions of the elevator system caused by these short-duration breaks is reduced, the reliability and utilization rate of the elevator system are improved.
The safety arrangement of the invention requires a very complex operat- ing logic to ensure that the system will identify all possible failure situations. Based on the measurement results obtained from the detectors, the logic employed is required to exclude all operating states in which maintenance operation is prohibited and to allow those operating states in which maintenance operation is allowed. Moreover, the system is re- quired to be able to infer whether detectors have become defective. In the safety system of the invention, supervision of operation is performed in a centralized manner in the electric safety controller, which simplifies the implementation as compared to a solution implemented using discrete components. At the same time, the total number of components in the system is reduced and the reliability of the system is improved.
The electric safety system of the invention contains separate end limit markers for normal and maintenance operation. The fact that, in the solution of the invention, both the choice as to which end limit switches are to be used in each situation and the deduction regarding the operating state of the safety arrangement are performed in a centralized manner by the electric safety controller ensures that the operating state of the safety arrangement determined by measurements by the detectors of the electric safety system corresponds to the end limit markers being used. When the end limit markers are read by the electric safety controller by means of end limit marker readers, it is possible to make sure that the correct end limit markers are selected in a situation where a serviceman operates the elevator in maintenance mode from the elevator shaft. By fitting the end limit markers and marker readers advantageously in a mutually staggered manner, it will be sufficient to use only two end-limit marker readers. This simplifies the safety arrangement, reduces the wiring and improves the reliability of the system. Using the electric safety controller, it is also possible to permit a direction-dependent read logic in the reading of end-limit markers. If for example
As the switches comprised in the elevator safety arrangement are read in the manner proposed in the invention by measuring the current flowing through the resistors fitted in connection with the switches, the state of the series-connected switches can be determined by the electric safety controller via a single current measurement. This simplifies the connec- tion interface between the electric safety controller and the switches to be read. In the safety regulations concerning the elevator industry it is stated that, when metal film resistors are preferably used as components in an electric safety circuit, a short circuit of resistors can be disregarded in the consideration of failures. When a resistor undergoes a failure by being broken, the failure can always be detected by the electric safety controller, and therefore resistors can also be used to measure safety circuits, such as in the case of landing door switches. Resistors are also advantageous as components for use in the measurements in the electric safety system. According to the invention, the 'person in shaft' state is saved to the nonvolatile memory of the electric safety controller and the data regarding the transition into that state is preserved until it is cleared by means of a specific manually operated reset mechanism. In conjunction with the electric safety controller, the reset mechanism may be e.g. a switch lockable with a key, and the state of the switch can be read directly by the same safety controller, thus allowing a simple and advantageous solution to be achieved as compared to a situation where the switch read logic is implemented using discrete components.
In the safety controller of the invention, the detectors in the safety arrangement can be read in a centralized manner. There may be a serial communication bus arranged between them, or they may be connected in series. The amount of wiring needed in the electric safety system is thus reduced.
In the electric safety system of the invention, it is also possible to monitor the operation of different detectors by means of the electric safety controller, and a possible failure can be detected. Furthermore, it is possible to distinguish a failure situation of an individual detector, and corresponding information can be sent directly to a maintenance center, the system diagnostics being thus improved.
As the number of discrete components, such as relays, in the electric safety system is reduced, this also reduces the problems caused by mechanical wear which are inherent with these components and restrict their service life.
Description of the drawings
In the following, the invention will be described in detail by referring to the attached drawings, wherein Fig. 1 represents a safety arrangement according to the invention,
Fig. 2 represents a set of equipment used in an embodiment of the invention for identifying the state of the switches
Fig. 3 represents an elevator car according to Fig. 1 as seen from above.
Embodiment examples
Fig. 1 represents an elevator system applying a safety arrangement according to the invention. An elevator car 28 has been fitted to travel in an elevator shaft 27 from floor to floor 21 , 22. This elevator system according to the invention also comprises a counterweight 23, but the elevator system of the invention may also be implemented without a counterweight. The elevator motor 25 is disposed in the elevator shaft, but it may also be placed in a machine room.
The extreme limits of movement of the elevator car in the elevator shaft are determined by end limit markers 12, 13, 14, 15. During normal opera- tion, the elevator car travels between the extreme limits determined by end limit markers 12, 14. When the mechanical safety devices 10, 18, 24 have been set into their active position, the elevator can only be operated in maintenance mode within the shaft portion defined by end limit markers 13, 15. Fitted in conjunction with the elevator car are end limit marker readers 43,44. In this embodiment of the invention, the end limit markers used are ramps and the end limit marker readers are switches that can be brought into contact with the ramps.
Via a gateway 19, the electric safety controller reads switches 7,8 measuring the position of the landing doors and, via a data interface bus 6, a detector 29 measuring the position of the elevator car. Based on the positions of these, the electric safety controller infers a transition of the safety system into the 'person in shaft' state. In this situation, operation of the elevator both in normal mode and in maintenance mode is inhibited. When the switch 9 reading the operating state of the mechanical safety device indicates that the mechanical safety device has been reset to the working position, maintenance operation is allowed. The electric safety controller reads the switch indicating the state of the elevator mainte- nance operation unit via the data interface bus 6 and allows maintenance operation by controlling the brake 26.
The elevator shaft is provided with two different sets of end limits to determine the extreme limits of movement of the elevator car. During normal operation, the elevator is allowed to come closer to the end, determined by the ramps 12,14. In maintenance operation mode, the extreme limits of movement are defined by ramps 13,15. The electric safety controller 3 reads the position of the elevator car in the elevator shaft by means of switches 43,44 and, when the elevator moves past a ramp, stops it by controlling the brake 26. The switch is opened when it comes into contact with a ramp. In this preferred embodiment of the invention, the switches are fitted in a staggered arrangement with the ramps such that switch 43 reads ramps 12 and 15 and switch 44 reads ramps 13 and 14. This is accomplished by disposing the ramps 12 and 15 in the elevator shaft in such a way that that they are located on the path of movement of switch 43 and disposing markers 13 and 14 in such a way that they are located in the path of movement of switch 44 as the elevator car is moving in the elevator shaft.
If it detects that both switch 43 and switch 44 are open, the electric safety controller prevents elevator operation in both normal and maintenance modes. If only switch 43 is open, then upward movement in maintenance operation mode is inhibited. If only switch 44 is open, then downward movement in maintenance operation mode is inhibited.
The electric safety controller 3 additionally communicates via the data interface bus 6 with at least the elevator system controller 2, with the ele- vator motor controller 1 and the elevator car door controller 4. The electric safety controller 3 makes an inference about the operating state of the safety arrangement of the elevator. If the controller detects a functional deviation on the basis of the data it has read from the detectors, it issues a control command to the mechanical stopping device 26. In addition, it sends over the data interface bus 6 a command preventing operation to the elevator motor controller 1 and data indicating the functional deviation to the other control devices 2,4.
When the electric safety controller 3 detects a 'person in shaft' state, it saves corresponding data to the non-volatile memory of the safety con- trailer. After this, the electric safety controller can only be restored to its normal state by means of a manually operated reset mechanism 41. In the safety arrangement according to Fig. 1 , the manually operated reset mechanism is disposed on the lowest floor in the elevator shaft, and the electric safety controller reads the state of the reset mechanism via the data interface bus 6. The manually operated reset mechanism 41 can also be disposed in connection with the electric safety controller, and the electric safety controller can read the state of the reset mechanism 42 via a specific separate communication bus.
In the safety arrangement according to Fig. 1 , a mechanical safety device 24 is also placed on the top of the elevator car 28. In this case, the state of the safety device can be read by the electric safety controller 3 via the data interface bus 6.
Fig. 2 represents a set of equipment according to the invention which can be used to read the operating states of the switches 37,38,39,40 in the electric safety system. These switches are connected as a series circuit and resistors 33,34,35,36 are fitted in parallel with them. The series circuit is connected to the electric safety controller 3. The electric safety controller feeds a voltage 30 into the series circuit through a series resistor 32. The equipment additionally comprises means for measuring 31 ,42 the current flowing in the series circuit. The electric safety controller feeds a known voltage 30 into the series circuit through the series resistor 32. When the switches 37,38,39,40 are closed, the current flowing in the series circuit is only limited by resistor 32. The current can now be measured by the measuring devices 31 , 42 and the state of the series circuit can be read correspondingly. When one of the switches is opened, the current path through that switch is interrupted and the current starts flowing through the resistor fitted in parallel with the switch. For example, when switch 37 is opened, the current starts flowing through resistor 33. At the same time, the current flowing in the series circuit is reduced, because the flow of the current is limited by the series connection of resistors 32 and 33. If additionally switch 38 is opened, then the current is reduced further, because its flow is limited by the series connection of resistors 32, 33 and 34. When the current flowing in the series circuit is measured by the measuring devices 31 , 42, a change in the current can be detected while at the same time detecting a change in the state of the switches in the series circuit corresponding to the current change.
As the resistor connected in parallel with each switch 37,38,39,40 is of the same resistance value, the current measurement can reveal the opening of one or more switches. The current flowing in the series circuit is the smaller the more switches are open. In this case, however, it is not possible to identify which particular switch is open. If instead the resistors 33,34,35,36 in the series circuit are so chosen that they differ from each other in resistance value, then it is possible to identify the state of each individual switch in the series circuit. In this case, in choosing the resistors it is also necessary to consider combinations of different resistors so that the value of each single resistor should differ from the combination of a series connection of two or more different resistors to allow the state of an individual switch to be detected. Using a set of equipment as illustrated in Fig. 2, it is also possible to identify a failure of the series circuit of the switches, e.g. an earth fault. In this case, the current flowing into the series circuit is measured by measuring device 31 and the current returning from the series circuit to the electric safety controller by measuring device 42. In the case of an earth fault, some of the current fed into the series circuit escapes at the point of earth fault to other structural parts while only a proportion of it returns back to the electric safety controller 3 via the series circuit. The returning current is measured by measuring device 42, and the fault condition can be de- tected by comparing the current flowing out of the series circuit and the current returning into the series circuit.
Fig. 3 is a top view representation of an elevator car 28 according to Fig. 1. As shown in the figure, the switches 43 and 44 are placed in a staggered arrangement with the ramps 12,13,14,15 in such manner that ramps 12 and 15 lie in the path of switch 43 and ramps 13 and 14 lie in the path of switch 44 as the elevator car 28 is moving in the elevator shaft. Thus, switch 43 can be used to read the ramp 15 in the upper part of the elevator shaft which determines the extreme limit of movement during maintenance operation and the ramp 12 in the lower part of the eleva- tor shaft which determines the extreme limit of movement during normal operation. Switch 44 can similarly be used to read the ramp 14 in the upper part of the elevator shaft which determines the extreme limit of movement during normal operation and the ramp 13 in the lower part of the elevator shaft which determines the extreme limit of movement during maintenance operation.
The invention has been described above with reference to a few embodiment examples. It is obvious to the person skilled in the art that the invention is not limited to the embodiments described above, in which the invention has been described by way of example, but that many varia- tions and different other embodiments of the invention are possible within the scope of the inventive concept defined in the claims presented below.

Claims

1 . Elevator safety arrangement for implementing safety spaces in an elevator shaft (27), said safety arrangement comprising a mechanical safety device, preferably a pole or barrier (10,18,24), which can be moved to a working position to ensure a sufficient safety space in the elevator shaft, and said safety arrangement additionally comprising an electric safety system comprising at least the following equipment:
- in connection with the mechanical safety device (10,18,24) at least one detector (9) for identifying the operating state of the mechanical safety device, and
- in connection with the elevator landing door at least one detector (7,8,37,38,39,40) for identifying the position of the landing door, and
- means for reading the detectors fitted in conjunction with the landing door,
- in conjunction with the elevator car door at least one detector (29) for identifying the position of the elevator car door, and
- means for reading the detectors placed in conjunction with the ele- vator car door
- an electric safety controller (3), which reads data from the elevator control devices and which additionally reads data from detectors comprised in the electric safety controller, and based on the data obtained, controls one or more mechanical stopping devices (26) which prevent movement of the elevator car (28) in the elevator shaft (27) - a data interface bus (6) between the electric safety controller (3) and the elevator control devices
characterized in that the safety arrangement comprises two separate sets of end limit markers (12,13,14,15) for determining the position of the elevator car, of which end limit markers the ones (12,14) located closer to the ends of the elevator shaft determine the extreme limits of elevator car movement during normal operation while the ones (13,15) located farther away from the ends determine the extreme limits (16,17) of elevator car movement during maintenance operation, and that readers (43,44) of end limit markers are fitted in conjunction with the elevator car, said readers being connected to the electric safety controller (3) via the data interface bus (6).
2. Safety arrangement according to claim 1 , characterized in that the safety arrangement further comprises at least the following equipment:
- in conjunction with an elevator maintenance operation unit (5) at least one detector for identifying the state of control of the elevator maintenance operation unit, and
- in the vicinity of each end of the elevator shaft, at least one end limit marker (12,13,14,15), and in conjunction with the elevator car at least one end limit marker reader (43,44) for determining the extreme limits of elevator car movement in the elevator shaft.
3. Safety arrangement according to claim 1 or 2, characterized in that one of the elevator control devices is an elevator system con- trailer (2), one of the elevator control devices is an elevator motor controller (1 ) and one of the elevator control devices is an elevator car door controller (4).
4. Safety arrangement according to any one of claims 1 - 3, characterized in that the detectors (7,8,37,38,39,40) fitted in conjunction with the elevator landing doors (20) are switches whose contact is opened by forced control as the landing doors are opened, and which switches are arranged in series as a series circuit, which is connected to the electric safety controller via a gateway (19) to allow measurement of the state of the series circuit.
5. Safety arrangement according to claim 4, characterized in that the means for reading the detectors fitted in conjunction with the elevator landing doors comprise a resistor (33,34,35,36) of equal resistance value fitted in parallel with each switch (7,8,37,38,39,40) in the series circuit.
6. Safety arrangement according to claim 4, characterized in that the means for reading the detectors fitted in conjunction with the elevator landing doors comprise a resistor (33,34,35,36) of different resistance value fitted in parallel with each switch (7,8,37,38,39,40) in the series circuit for identification of the position of each individual switch.
7. Safety arrangement according to claim 5 or 6, characterized in that the aforesaid resistor (33,34,35,36) is preferably an encapsulated film resistor.
8. Safety arrangement according to any one of claims 4 - 7, characterized in that the electric safety controller (3) comprises means (30,31 ,32) for measuring the total resistance of the series circuit.
9. Safety arrangement according to any one of claims 1 - 8, characterized in that the aforesaid electric safety controller (3) is integrated in conjunction with another control device of the elevator system.
10. Method for implementing safety spaces in an elevator shaft, characterized in that an electric safety controller (3) comprises means (30,31 ,32) for measuring the total resistance of a series circuit and that, in the method
- the number of landing doors (20) open is read by means of detectors (7,8,37,38,39,40) fitted in conjunction with the landing doors (20), the number of elevator car doors open is read by means of detectors (29) fitted in conjunction with the elevator car doors, and the position of a mechanical safety device is read by means of de- tectors (9) fitted in conjunction with the mechanical safety device
(10,18,24).
- if it is established that number of landing doors open is greater than the number of elevator car doors open, then the safety system is set into a 'person in shaft' state and operation of the eleva- tor is prevented
- if it is established during the 'person in shaft' state of the safety system that the number of landing doors open is equal to the number of elevator car doors open and that the mechanical safety device has been set to a working position, then maintenance op- eration is allowed.
1 1. Method according to claim 10, characterized in that the method comprises at least one of the following steps:
- after the safety system has entered the 'person in shaft' state, data indicating this change is saved to the non-volatile memory of the electric safety controller (3),
- the state of a manually controlled reset mechanism (41 ) is read by the electric safety controller (3), and when it is detected that the reset mechanism (41 ) has been reset into a state of cancellation of inhibition of normal operation, the program being executed by the electric safety controller is reset from the 'person in shaft' state into an operating state permitting normal operation and data about this change is saved to the non-volatile memory of the electric safety controller (3)
- data indicating the change into the 'person in shaft' state as well as data indicating cancellation of that state are sent via the data interface bus (6) to the control devices
- data is read from the detectors comprised in the electric safety system via a connection interface of the electric safety controller
(3) simultaneously by at least two microcontrollers
- the data items read by the microcontrollers of the electric safety controller are mutually compared and the mutual operating states of the microcontrollers are monitored via a communication bus be- tween the microcontrollers,
- if it is discovered that the data read from the detectors differs between microcontrollers or a failure situation is discovered in the operating state of a microcontroller, then the operation of the elevator is prevented by actuating by means of the electric safety con- troller (3) at least one mechanical stopping device (26) and in the same connection a command preventing operation is transmitted by the electric safety controller (3) via the data interface bus (6) to the controller (1 ) of the elevator motor and data regarding the prevention of operation is transmitted to the control devices (2,4).
12. Method according to claim 10 or 1 1 , characterized in that the electric safety controller (3) contains a non-volatile memory and that the method comprises the following steps: - the operating voltage of the electric safety controller is read by means of the electric safety controller (3) itself
- when it is discovered that the operating voltage of the electric safety controller has fallen below a predetermined limit value, the program being executed by the electric safety controller is set into a state where data is written to the non-volatile memory of the electric safety controller (3)
- those variables of the electric safety controller which describe the current status of the program executed by the electric safety con- trailer (3) at the instant of activation of the write process are written to the non-volatile memory of the electric safety controller.
13. Method according to claim 10 or 11 , characterized in that the electric safety controller (3) contains a non-volatile memory and that the method comprises the following steps:
- those variables of the program being executed by the electric safety controller which describe the status prevailing at the instant of time in question in the program being executed by the electric safety controller are written to the non-volatile memory of the electric safety controller at regular intervals of time
- in connection with each write situation a growing index variable for subsequent identification of the write situation is saved to the nonvolatile memory of the electric safety controller
- when the program of the electric safety controller is started, those variables describing the status of the program executed by the electric safety controller which have the greatest index value are read from the non-volatile memory of the electric safety controller.
14. Method according to any one of claims 10 - 13, characterized in that the switches (7,8,37,38,39,40) defining the state of the landing doors (20) are arranged in series as a series circuit and resistors (33,34,35,36) of equal value are fitted in parallel with the switches and that the method comprises the following steps:
- a voltage is fed into the series circuit by the electric safety controller through a series resistor (32) connected to the voltage output (30) of the electric safety controller
- the current flowing in the series circuit is measured
- limit values R1 , R2, ..., Rn are determined for the current flowing in the series circuit in such manner that R1 corresponds to the highest current value and Rn to the lowest current value and that the limit values are so defined that they correspond to the number of switches open
- the measured current is compared to the predetermined limit values R1 , R2,...,Rn of the current, of which the limit value R1 is highest
- if the measured current exceeds the predetermined limit value R1 , then it is inferred that all the landing door switches fitted in the se- ries circuit are closed
- if the measured current is within the range of variation of a predetermined current limit value R2, ..., Rn, then the number of switches open is inferred in such manner that the lowest limit value Rn corresponds to the largest number of switches open, and as the value of the current increases, the number of switches open decreases.
15. Method according to any one of claims 10 - 13, characterized in that resistors (33,34,35,36) differing from each other in resistance value are fitted in parallel with the switches (37,38,39,40) defining the state of the landing doors (20) and that the method comprises the following steps:
- a voltage is fed by the electric safety controller (3) into the series circuit through a series resistor (31 ) connected to the voltage output (29) of the electric safety controller
- the current flowing in the series circuit is measured
- the measured current is compared to a predetermined current limit value R1 , which concerns the highest predetermined current limit value and which limit value R1 at the same time corresponds to a situation where all the switches in the series circuit are closed
- the measured current is compared to predetermined ranges of cur- rent variation, each one of said ranges indicating the opening of one or more series circuit switches corresponding to the range of variation in question.
16. Method according to claim 14 or 15, characterized in that the method further comprises the following steps:
- The current flowing into the series circuit is measured
- The current returning from the series circuit is measured
- The current flowing into the series circuit and the current returning from the series circuit are compared to each other
- If the values of the current flowing in and the current returning dif- fer from each other by more than a predetermined limit value, then it is inferred that the series circuit has undergone a failure, opera- tion of the elevator is prevented by actuating by means of the electric safety controller (3) at least one mechanical stopping device (26) and in the same connection a stopping command is transmitted by the electric safety controller (3) via the data interface bus (6) to the elevator motor controller (1 ) and data regarding the prevention of operation is sent to the control devices (2,4).
PCT/FI2007/000302 2007-01-03 2007-12-21 Elevator safety device WO2008081074A1 (en)

Priority Applications (6)

Application Number Priority Date Filing Date Title
CN2007800492752A CN101578228B (en) 2007-01-03 2007-12-21 Elevator safety device
EP07858326.7A EP2099706B1 (en) 2007-01-03 2007-12-21 Elevator safety device
ES07858326.7T ES2483890T3 (en) 2007-01-03 2007-12-21 Elevator safety device
US12/496,683 US7891467B2 (en) 2007-01-03 2009-07-02 Elevator safety arrangement having safety spaces
HK10103995.7A HK1137004A1 (en) 2007-01-03 2010-04-23 Elevator safety device
US13/013,452 US7980363B2 (en) 2007-01-03 2011-01-25 Elevator safety arrangement having safety spaces

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FI20070006 2007-01-03
FI20070006A FI125141B (en) 2007-01-03 2007-01-03 Elevator safety device

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US12/496,683 Continuation US7891467B2 (en) 2007-01-03 2009-07-02 Elevator safety arrangement having safety spaces

Publications (1)

Publication Number Publication Date
WO2008081074A1 true WO2008081074A1 (en) 2008-07-10

Family

ID=37745621

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/FI2007/000302 WO2008081074A1 (en) 2007-01-03 2007-12-21 Elevator safety device

Country Status (7)

Country Link
US (2) US7891467B2 (en)
EP (2) EP2099706B1 (en)
CN (2) CN101573284B (en)
ES (2) ES2483890T3 (en)
FI (2) FI125141B (en)
HK (1) HK1137004A1 (en)
WO (1) WO2008081074A1 (en)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2010060950A1 (en) 2008-11-27 2010-06-03 Inventio Ag Device for checking a safety chain of an elevator
WO2010122211A1 (en) 2009-04-23 2010-10-28 Kone Corporation Safety arrangement of an elevator
EP2284110A1 (en) * 2009-08-14 2011-02-16 K.A. Schmersal Holding GmbH & Co. KG Electronic safety system for a lift
CN102025133A (en) * 2009-09-18 2011-04-20 东芝电梯株式会社 Safety circuit of elevator
US20110148442A1 (en) * 2009-12-21 2011-06-23 Oliver Berner Monitoring a suspension and traction means of an elevator system
WO2012123635A1 (en) * 2011-03-11 2012-09-20 Kone Corporation Elevator system
EP2576407A4 (en) * 2010-06-02 2017-11-22 Otis Elevator Company Switch detection system
EP3299325A1 (en) * 2016-09-26 2018-03-28 KONE Corporation Impact detection in an elevator door
EP3354614A1 (en) * 2017-01-25 2018-08-01 Otis Elevator Company Automatic door switch inspection
US10221042B2 (en) 2014-01-21 2019-03-05 Kone Corporation Elevator provided with a safety device arrangement
US10294073B2 (en) 2014-01-21 2019-05-21 Kone Corporation Elevator provided with a safety apparatus arrangement, and a safety apparatus
RU2700236C2 (en) * 2014-12-10 2019-09-13 Инвенцио Аг Elevator installation with safety control system with "master-slave" hierarchy
EP3760561A1 (en) * 2019-07-05 2021-01-06 Otis Elevator Company Elevator assembly with counterweight blocking stop
EP2671836B1 (en) 2011-02-02 2021-03-24 Mitsubishi Electric Corporation Safety control device for elevator

Families Citing this family (60)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7954605B2 (en) * 2005-09-09 2011-06-07 Otis Elevator Company Electric safety switch resetting device for a car safety device of elevators
EP2035313B1 (en) * 2006-06-30 2010-11-03 Otis Elevator Company Safety device for securing minimum spaces at the top or bottom of an elevator shaft being inspected, and elevator having such safety devices
ATE481348T1 (en) * 2006-06-30 2010-10-15 Otis Elevator Co ELEVATOR WITH A FLAT SHAFT AND/OR A SMALL HEADROOM
CN101511716B (en) * 2006-11-20 2013-05-01 三菱电机株式会社 Elevator apparatus
FI125141B (en) * 2007-01-03 2015-06-15 Kone Corp Elevator safety device
US8556043B2 (en) * 2007-12-03 2013-10-15 Otis Elevator Company Passive detection of persons in elevator hoistway
EP2067732A1 (en) * 2007-12-07 2009-06-10 Inventio Ag Elevator cabin position detection system
KR101300876B1 (en) * 2007-12-17 2013-08-27 미쓰비시덴키 가부시키가이샤 Elevator device
DE102008019195A1 (en) * 2008-04-17 2009-10-29 Beckhoff Automation Gmbh Method for operating a safety control and automation network with such a safety control
FI120730B (en) * 2008-09-01 2010-02-15 Kone Corp Elevator system and method in connection with the elevator system
US8256581B2 (en) * 2009-09-30 2012-09-04 Inventio Ag Landing door proximity warning system
JP5755233B2 (en) * 2009-10-26 2015-07-29 インベンテイオ・アクテイエンゲゼルシヤフトＩｎｖｅｎｔｉｏ Ａｋｔｉｅｎｇｅｓｅｌｌｓｃｈａｆｔ Safety circuit in an elevator system
JP2011195205A (en) * 2010-03-17 2011-10-06 Toshiba Elevator Co Ltd Safety circuit for elevator
FI20105587A0 (en) * 2010-05-25 2010-05-25 Kone Corp A method for limiting the load on an elevator assembly and an elevator assembly
US8418813B2 (en) * 2010-11-19 2013-04-16 Mitsubishi Electric Research Laboratories, Inc. Wireless communication network for transportation safety systems
FI122474B (en) * 2010-12-01 2012-02-15 Kone Corp LIFT SAFETY CONNECTION AND METHOD FOR DETERMINING THE FUNCTIONAL FAILURE OF A LIFT SAFETY CONNECTION
CN102229395B (en) * 2011-07-08 2013-01-16 中国矿业大学 Multi-functional simulation experiment system for mining elevator
DE102011054590B4 (en) * 2011-10-18 2022-06-09 Elgo-Electronic Gmbh & Co. Kg Device for detecting the position of an elevator car and method for operating an elevator system
JP5877909B2 (en) 2011-12-21 2016-03-08 オーチス エレベータ カンパニーＯｔｉｓ Ｅｌｅｖａｔｏｒ Ｃｏｍｐａｎｙ Elevator system including a cage stop to maintain headspace
ES2568907T3 (en) * 2012-10-30 2016-05-05 Kone Corporation An elevator and a method
TWI622548B (en) * 2012-12-13 2018-05-01 伊文修股份有限公司 Monitoring device for a transport installation for persons, trasnport installation for persons, and method of monitoring a transport installation for persons
ES2639128T3 (en) * 2013-02-22 2017-10-25 Kone Corporation Method and arrangement to monitor the safety of a counterweight elevator
EP2789563B1 (en) * 2013-04-09 2015-11-04 Kone Corporation Elevator having a safety chain with a series connection of safety switch arrangements
JP6207961B2 (en) * 2013-10-11 2017-10-04 株式会社日立製作所 Elevator safety system
CN105829232B (en) * 2013-12-18 2017-12-08 因温特奥股份公司 Security system for lift facility
BR112016030921B1 (en) * 2014-07-08 2022-11-16 Inventio Ag PROCESS FOR MAINTENANCE OF AT LEAST ONE COMPONENT OF AN ELEVATOR INSTALLATION, MAINTENANCE SYSTEM AND ELEVATOR INSTALLATION
FI126734B (en) * 2014-08-11 2017-04-28 Kone Corp Positioning equipment, lift and method for determining the position of the lift car
JP5793784B1 (en) * 2014-10-21 2015-10-14 ウネベ建設株式会社 Structure monitoring apparatus and structure monitoring method
EP3034445A1 (en) * 2014-12-18 2016-06-22 Kone Corporation A configuration apparatus and main safety circuit for an elevator system and an elevator system
EP3317220B1 (en) 2015-06-30 2023-01-04 Otis Elevator Company Elevator car location zones in hoistway
AU2016299722B2 (en) * 2015-07-30 2019-06-20 Inventio Ag Locking system for cabin door
US20190047818A1 (en) * 2015-09-10 2019-02-14 Otis Elevator Company Apparatus and method for ground fault detection
BR102016024614A2 (en) * 2015-10-22 2017-05-02 Otis Elevator Co elevator system and maintenance safety assembly
CN108349691B (en) * 2015-10-22 2020-08-28 通力股份公司 Elevator with safety arrangement and method for establishing a safe working space in an upper part of an elevator hoistway
EP3184477B1 (en) * 2015-12-22 2019-07-24 KONE Corporation A method and an arrangement for maintenance operation of an elevator
CN105775940B (en) * 2016-04-03 2018-06-26 合肥博雷电子信息技术有限公司 One kind is based on Internet of Things elevator monitoring system
CN107473061B (en) 2016-06-08 2020-10-16 奥的斯电梯公司 Maintenance safety device for elevator system and operation method thereof
US10457522B2 (en) * 2016-06-30 2019-10-29 Otis Elevator Company Limit switch system including first limit device and second limit device
US10502786B2 (en) * 2016-11-18 2019-12-10 GM Global Technology Operations LLC Vehicle including multiple analog switch monitoring system with simultaneous switch-state detection
US10112802B2 (en) * 2017-01-30 2018-10-30 Otis Elevator Company Elevator service person collision protection system
EP3357851B1 (en) * 2017-02-06 2023-08-02 KONE Corporation Mechanism for improving safety for an elevator system
EP3366626B1 (en) * 2017-02-22 2021-01-06 Otis Elevator Company Elevator safety system and method of monitoring an elevator system
JP6321245B1 (en) * 2017-03-06 2018-05-09 東芝エレベータ株式会社 Elevator maintenance work support system
EP3401260B1 (en) * 2017-05-12 2023-08-09 Otis Elevator Company Elevator overrun systems
EP3418238B1 (en) 2017-06-22 2020-07-08 Otis Elevator Company Elevator lintel door lock safety devices
CN107381265A (en) * 2017-06-26 2017-11-24 安徽亿纵电子科技有限公司 A kind of abnormal elevator condition monitoring system
EP3434634B2 (en) * 2017-07-25 2024-07-03 Otis Elevator Company Elevator safety device
US10889465B2 (en) 2017-07-31 2021-01-12 Otis Elevator Company Mechanical hoistway access control device
WO2019086205A1 (en) * 2017-10-31 2019-05-09 Inventio Ag Safety monitoring device for monitoring safety-relevant states in a person-transporting system, and method for operating same
CN108069313A (en) * 2017-12-27 2018-05-25 比亦特网络科技（天津）有限公司 Novel universal elevator monitoring and pre- diagnostic system
CN110203799B (en) * 2018-02-28 2024-02-06 蒂升电梯(上海)有限公司 Traction machine system with star sealing function and elevator system
CN108439119B (en) * 2018-03-16 2019-08-13 淮南矿业(集团)有限责任公司 A kind of control method and device of doube bridge mining elevator
EP3643674B1 (en) * 2018-10-26 2022-08-10 Otis Elevator Company Elevator system
US11591183B2 (en) 2018-12-28 2023-02-28 Otis Elevator Company Enhancing elevator sensor operation for improved maintenance
EP4051612A1 (en) * 2019-10-31 2022-09-07 Inventio AG Mobile control unit and method for remotely controlling a lift installation
US20230109720A1 (en) * 2020-03-31 2023-04-13 Inventio Ag Safety monitoring device, and method for monitoring the safety of an elevator system
WO2021229134A1 (en) * 2020-05-13 2021-11-18 Kone Corporation Access solution for conveyor systems
CN113682917B (en) * 2021-08-26 2023-04-18 日立电梯（中国）有限公司 Elevator safety device and control method thereof
CN113933576B (en) * 2021-10-14 2023-11-10 北京理工大学 Non-intervention type current testing method for discharge loop of electronic safety system
CN217417797U (en) * 2022-03-14 2022-09-13 菱王电梯有限公司 Elevator power control device and elevator system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6173814B1 (en) * 1999-03-04 2001-01-16 Otis Elevator Company Electronic safety system for elevators having a dual redundant safety bus
US6223861B1 (en) * 1999-08-30 2001-05-01 Otis Elevator Company Elevator hoistway access safety
WO2006108433A1 (en) * 2005-04-11 2006-10-19 Otis Elevator Company Safety circuit for a passenger conveyor system

Family Cites Families (29)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2084505B (en) 1980-07-28 1984-05-10 Raychem Ltd Producing heat recoverable articles
US5057699A (en) * 1989-12-20 1991-10-15 Allied-Signal Inc. Switch interface for determining position of a plurality of switches using a determined time
US5107964A (en) * 1990-05-07 1992-04-28 Otis Elevator Company Separate elevator door chain
US5476157A (en) * 1994-06-03 1995-12-19 Todaro; Sam S. Elevator control system with elevator hoistway operation monitoring system and method
FI110727B (en) * 1994-06-23 2003-03-14 Vaisala Oyj Electrically adjustable thermal radiation source
CN2252174Y (en) * 1995-06-22 1997-04-16 舒先达 Elevator safety device
US5806633A (en) 1995-12-22 1998-09-15 Macuga; Henry J. Elevator safety system incorporating false pit
CN2324133Y (en) * 1997-11-24 1999-06-16 顺德市佳顺微机控制设备有限公司 Elevator trouble detection and saving apparatus
FI108124B (en) 1998-03-18 2001-11-30 Kone Corp Elevator safety device
FR2777087B1 (en) * 1998-04-03 2000-05-05 Otis Elevator Co DEVICE FOR LOCATING A LOCKING DOOR CLOSING FAILURE IN AN ELEVATOR INSTALLATION
US6032761A (en) * 1998-04-27 2000-03-07 Otis Elevator Elevator hoistway terminal zone position checkpoint detection apparatus using a binary coding method for an emergency terminal speed limiting device
SG85215A1 (en) * 1999-10-08 2001-12-19 Inventio Ag Safety circuit for an elevator installation
US6452477B1 (en) * 2000-09-06 2002-09-17 Marconi Medical Systems, Inc. High voltage low inductance circuit protection resistor
DE10108772A1 (en) * 2001-02-23 2002-11-21 Otis Elevator Co Elevator safety device
US6467585B1 (en) * 2001-07-05 2002-10-22 Otis Elevator Company Wireless safety chain for elevator system
ES2258638T3 (en) * 2001-07-09 2006-09-01 Inventio Ag ELEVATOR INSTALLATION WITH VIRTUAL PROTECTION AREA AT THE FOOT OF THE HOLLOW AND / OR IN THE HEAD OF THE HOLLOW AND PROCEDURE FOR THE CONTROL OF THE SAME.
US6603398B2 (en) * 2001-11-16 2003-08-05 Otis Elevator Company Hoistway access detection system
FR2842512B1 (en) * 2002-07-16 2005-07-22 Jean Patrick Azpitarte SYSTEM FOR SECURING THE OPERATION OF THE BEARING DOORS OF AN ELEVATOR
US7264090B2 (en) * 2002-08-01 2007-09-04 Otis Elevator Company Elevator employing radio frequency identification devices (RFIDs)
JP4673574B2 (en) * 2003-05-07 2011-04-20 インベンテイオ・アクテイエンゲゼルシヤフト ELEVATOR EQUIPMENT USING APPARATUS FOR PROVIDING TEMPORARY PROTECTION SPACE, METHOD FOR MOUNTING THE APPARATUS, AND METHOD FOR PROVIDING TEMPORARY PROTECTION SPACE
US7097003B2 (en) * 2003-07-21 2006-08-29 The Peelle Company Ltd. Elevator landing door broken chain safety device
US7350626B2 (en) * 2004-10-20 2008-04-01 Otis Elevator Company Power-on-reset of elevator controllers
FI119878B (en) * 2005-02-04 2009-04-30 Kone Corp A system and method for improving elevator safety
FI117797B (en) * 2005-04-08 2007-02-28 Kone Corp Elevator system
FI119231B (en) * 2006-12-08 2008-09-15 Kone Corp A method, system, and software product for monitoring the condition of elevator safety switches
FI20070486A (en) * 2007-01-03 2008-07-04 Kone Corp Elevator security
FI125141B (en) * 2007-01-03 2015-06-15 Kone Corp Elevator safety device
FI120828B (en) * 2007-02-21 2010-03-31 Kone Corp Electronic motion limiter and procedure for controlling electronic motion limiter
FI121493B (en) * 2007-07-26 2010-11-30 Kone Corp with electric motor

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6173814B1 (en) * 1999-03-04 2001-01-16 Otis Elevator Company Electronic safety system for elevators having a dual redundant safety bus
US6223861B1 (en) * 1999-08-30 2001-05-01 Otis Elevator Company Elevator hoistway access safety
WO2006108433A1 (en) * 2005-04-11 2006-10-19 Otis Elevator Company Safety circuit for a passenger conveyor system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2099706A4 *

Cited By (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8552738B2 (en) * 2008-11-27 2013-10-08 Inventio Ag Device for checking a safety circuit of an elevator
US20100141267A1 (en) * 2008-11-27 2010-06-10 Daniel Quinn Device for checking a safety circuit of an elevator
WO2010060950A1 (en) 2008-11-27 2010-06-03 Inventio Ag Device for checking a safety chain of an elevator
CN102227367B (en) * 2008-11-27 2013-05-29 因温特奥股份公司 Device for checking safety circuit of elevator
WO2010122211A1 (en) 2009-04-23 2010-10-28 Kone Corporation Safety arrangement of an elevator
EP2896587A1 (en) * 2009-04-23 2015-07-22 KONE Corporation Safety arrangement of an elevator
EP2421784A4 (en) * 2009-04-23 2015-07-22 Kone Corp Safety arrangement of an elevator
EP2284110A1 (en) * 2009-08-14 2011-02-16 K.A. Schmersal Holding GmbH & Co. KG Electronic safety system for a lift
US8413765B2 (en) 2009-08-14 2013-04-09 K.A. Schmersal Holding Gmbh & Co. Kg Electronic safety system for an elevator having a bus and safety circuit
CN102025133A (en) * 2009-09-18 2011-04-20 东芝电梯株式会社 Safety circuit of elevator
CN102933482A (en) * 2009-12-21 2013-02-13 因温特奥股份公司 Monitoring a supporting and propulsion means of an elevator system
US8686747B2 (en) * 2009-12-21 2014-04-01 Inventio Ag Monitoring a suspension and traction means of an elevator system
US20110148442A1 (en) * 2009-12-21 2011-06-23 Oliver Berner Monitoring a suspension and traction means of an elevator system
AU2010342458B2 (en) * 2009-12-21 2015-09-17 Inventio Ag Monitoring a supporting and propulsion means of an elevator system
AU2010342458A8 (en) * 2009-12-21 2015-10-22 Inventio Ag Monitoring a supporting and propulsion means of an elevator system
EP2576407A4 (en) * 2010-06-02 2017-11-22 Otis Elevator Company Switch detection system
EP2671836B1 (en) 2011-02-02 2021-03-24 Mitsubishi Electric Corporation Safety control device for elevator
EP2665669A4 (en) * 2011-03-11 2014-09-17 Kone Corp Elevator system
WO2012123635A1 (en) * 2011-03-11 2012-09-20 Kone Corporation Elevator system
EP2665669A1 (en) * 2011-03-11 2013-11-27 Kone Corporation Elevator system
US10294073B2 (en) 2014-01-21 2019-05-21 Kone Corporation Elevator provided with a safety apparatus arrangement, and a safety apparatus
US10221042B2 (en) 2014-01-21 2019-03-05 Kone Corporation Elevator provided with a safety device arrangement
RU2700236C2 (en) * 2014-12-10 2019-09-13 Инвенцио Аг Elevator installation with safety control system with "master-slave" hierarchy
US10723593B2 (en) 2016-09-26 2020-07-28 Kone Corporation Impact detection in an elevator door
EP3299325A1 (en) * 2016-09-26 2018-03-28 KONE Corporation Impact detection in an elevator door
EP3354614A1 (en) * 2017-01-25 2018-08-01 Otis Elevator Company Automatic door switch inspection
EP3760561A1 (en) * 2019-07-05 2021-01-06 Otis Elevator Company Elevator assembly with counterweight blocking stop
US11591184B2 (en) 2019-07-05 2023-02-28 Otis Elevator Company Elevator assembly with counterweight blocking stop

Also Published As

Publication number Publication date
FI125141B (en) 2015-06-15
EP2099706A4 (en) 2013-10-02
US20090321192A1 (en) 2009-12-31
US7980363B2 (en) 2011-07-19
FI20070469A0 (en) 2007-06-13
FI20070006A (en) 2008-07-04
EP2772462B1 (en) 2015-05-20
ES2539357T3 (en) 2015-06-30
EP2099706B1 (en) 2014-07-02
US20110114422A1 (en) 2011-05-19
CN101573284A (en) 2009-11-04
FI20070006A0 (en) 2007-01-03
EP2772462A1 (en) 2014-09-03
ES2483890T3 (en) 2014-08-08
CN101578228A (en) 2009-11-11
CN101573284B (en) 2012-05-23
HK1137004A1 (en) 2010-07-16
EP2099706A1 (en) 2009-09-16
US7891467B2 (en) 2011-02-22
CN101578228B (en) 2012-05-02

Similar Documents

Publication Publication Date Title
US7891467B2 (en) Elevator safety arrangement having safety spaces
US7849975B2 (en) Safety arrangement of an elevator having sensors limiting extent of elevator travel
JP5516727B2 (en) Electronic safety elevator
CN1170757C (en) Safety device and method for entering in elevator shaft
FI121423B (en) Safety arrangement for a lift
AU2002315619B2 (en) Lift installation having a virtual protection area at the bottom and/or the top of the lift shaft, and method for controlling the same
EP3366626B1 (en) Elevator safety system and method of monitoring an elevator system
CN102482054A (en) Method and arrangement for preventing the drifting of an elevator car
CN108217360B (en) Elevator safety system and method of operating an elevator system
JP2013040029A (en) Elevator controller
EP2838827B1 (en) Testing apparatus and safety arrangement
CN108025892A (en) Monitoring device for lift facility
US9745169B2 (en) Safety system for an elevator, elevator system, and method for operating such a safety system
JP2008239273A (en) At-earthquake confinement preventive device of elevator
EP2741990A1 (en) Low pit access detection and monitoring
KR100817210B1 (en) Method appratus for controlling open/close of elevator door
CN116081427A (en) Avoiding stagnation in elevator systems
CN117623041A (en) Automatic rescue method for household ladder faults
JPH05213555A (en) Elevator control device

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 200780049275.2

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07858326

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 2007858326

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE