ELEVATOR COMPRISING A DECENTRALIZED ELECTRONIC SAFETY SYSTEM

Abstract

An elevator includes a drive, a car operatively connected to the drive to traverse along a travel path, at least one guide rail positioned along the travel path to guide the car, a safety brake arranged on the car to exert a braking force on the guide rail, and a safety system. The safety system includes a first safety control unit and a second safety control unit that monitor a safety condition of the elevator. The first safety control unit outputs a stop signal to the drive, in particular to a drive brake and/or to a frequency converter of the drive, and the second safety control unit outputs a trigger signal to the safety brake to bring the elevator into a proper safety condition when an impermissible safety condition of the elevator is detected.

Claims

1-14. (canceled)

15. An elevator having a drive, a car operatively connected to the drive to be moved along a travel path, at least one guide rail arranged along the travel path and guiding the car, a safety brake arranged on the car for exerting a braking force on the guide rail, and a safety system, the safety system comprising: a first safety control unit monitoring a safety condition of the elevator; and a second safety control unit monitoring the safety condition of the elevator, wherein the first safety control unit outputs a stop signal to the drive and the second safety control unit outputs a trigger signal to the safety brake when an impermissible safety condition of the elevator is detected.

16. The elevator according to claim 15 wherein the first safety control unit outputs the stop signal to at least one of a drive brake and a frequency converter of the drive.

17. The elevator according to claim 15 wherein the stop signal is output only by the first safety control unit and the trigger signal is output only by the second safety control unit.

18. The elevator according to claim 15 wherein the first safety control unit is connected to an elevator control unit and outputs a status signal to the elevator control unit when the impermissible safety condition is detected.

19. The elevator according to claim 15 wherein the second safety control unit is connected to the first safety control unit and outputs a status signal to the first safety control unit when the impermissible safety condition is detected by the second safety control unit.

20. The elevator according to claim 15 wherein the second safety control unit is connected to an acceleration sensor to monitor the safety condition based on an acceleration signal generated by the acceleration sensor, wherein the second safety control unit compares the acceleration signal with a specifiable acceleration threshold value and upon the acceleration signal reaching or exceeding the acceleration threshold value, the second safety control unit outputs the trigger signal to the safety brake.

21. The elevator according to claim 15 wherein the second safety control unit is connected to a position and/or speed sensor for transmitting a position and/or speed signal generated by the position and/or speed sensor to the first safety control unit.

22. The elevator according to claim 21 wherein the first safety control unit monitors the safety condition based upon the position and/or speed signal, wherein the first safety control unit compares the position and/or speed signal with a position and/or speed threshold value, and upon the position and/or speed signal reaching or exceeding the position and/or speed threshold value the first safety control unit outputs the stop signal to the drive.

23. The elevator according to claim 22 wherein the position and/or speed threshold value is a position-dependent speed threshold value.

24. The elevator according to claim 22 wherein the position and/or speed threshold value specifies a speed-dependent and position-dependent limit value for a motion of the car in a user-definable range around a stopping position at a floor when doors of the car and landing doors at the floor are open to prevent an accidental movement of the car.

25. The elevator according to claim 22 wherein the position and/or speed threshold value specifies a position-dependent limit value for a motion of the car in an end region of the travel path to prevent a collision of the car with an end of the travel path.

26. The elevator according to claim 22 wherein the position and/or speed threshold value specifies a speed-dependent limit value for an excess speed of the car in an entire range of the travel path to prevent an excess speed of the car.

27. The elevator according to claim 26 wherein the speed-dependent limit value for the excess speed is specified as a function of an operating mode of the, wherein the limit value for the excess speed in a maintenance operating mode of the elevator is smaller than the limit value for the excess speed in a normal operating mode of the elevator.

28. The elevator according to claim 22 wherein the position and/or speed threshold value specifies a speed-dependent and position-dependent limit value for an approach zone of the car to an end of the travel path to ensure a controlled deceleration of the car towards the end of the travel path.

29. The elevator according to claim 28 wherein the speed-dependent and position-dependent limit value for the approach zone decreases towards the end of the travel path.

30. The elevator according to claim 15 wherein the first safety control unit is connected to at least one safety contact to monitor the safety condition based upon a switching state of the at least one safety contact, wherein the first safety control unit evaluates the switching state of the at least one safety contact and outputs the stop signal to the drive when an impermissible switching state is present.

31. The elevator according to claim 30 wherein the at least one safety contact is one of a shaft door contact and a shaft end contact.

Description

DESCRIPTION OF THE DRAWINGS

[0030] The invention will be explained hereafter in further detail by reference to the attached Figures. They show:

[0031] FIG. 1 an elevator with a safety system according to the invention;

[0032] FIG. 2 a schematic illustration of the safety system shown in FIG. 1; and

[0033] FIG. 3 a schematic representation of the safety system shown in FIG. 2 and the implemented safety functions.

DETAILED DESCRIPTION

[0034] FIG. 1 shows a highly systematic representation of an exemplary embodiment of an elevator 10 according to the invention. The elevator 10 comprises a car 12, which is operatively connected via a support means or support device 31, in particular a rope or strap, to a drive 11. Here, the support means 31 passes over a traction sheave 32, which is driven by the drive 11. The traction sheave 32 converts a rotational motion by means of a frictional connection to the support means 31 into a translational motion of the latter, wherein the car 12 can be displaced along a travel path 20.

[0035] Typically, the travel path 20 is bounded by four side shaft walls 33, a shaft roof and a shaft floor. The shaft roof and the shaft floor are not shown in FIG. 1. During travel the car 12 is guided along the travel path 20 on guide rails 13. To this end, the car 12 is provided with guide shoes, which engage with the guide rails 13. For reasons of clarity, the guide shoes are not shown in FIG. 1.

[0036] In addition, the car 12 is provided with a safety brake 16, which can exert a braking force on the guide rails 13 in order to brake the car 12 if required.

[0037] In the example shown, the car 12 is attached to a first end 31.1 of the support means 31 and a counterweight 21, which balances the weight of the car 12, is attached to a second end 31.2 of the support means 31. The person skilled in the art will be familiar with other suspension arrangements of the car 12 or counterweight 21, such as the suspension of the car 12 in a loop of the support means 31, the ends of the support means 31 being connected in a fixed position relative to the travel path 20, for example either directly or indirectly to shaft walls 33. The invention can thus be implemented independently of a specific suspension arrangement.

[0038] Depending on the selected arrangement, at least one or more deflection pulleys 34, or car or counterweight support rollers, can be provided for guiding the support means 31.

[0039] The drive 11 is also provided with a drive brake 14. The drive brake 14 is designed to apply a braking torque directly or indirectly onto the traction sheave 32. In this arrangement, by means of the drive brake 14 it is possible to brake a rotational movement of the traction sheave 32 or a translational movement of the car 12.

[0040] In normal operation, the drive 11 is controlled or regulated by means of an elevator control unit 19. The elevator control unit 19 registers car calls and destination entries for floors 53 to be visited, and creates a travel schedule for executing the car calls and destination entries. The elevator control unit 19 generates control signals based on the travel schedule, in order to move the car 12 to the corresponding floors 53. The elevator control unit 19 transmits these control signals to a frequency converter of the drive 11 or to the drive brake 14. For reasons of clarity, only one floor 53 is indicated in FIG. 1.

[0041] In order to ensure a safe operation of the elevator 10 at all times, a safety system 1 is provided. The safety system 1 comprises a first safety control unit 2, which is preferably arranged near to the drive 11 and controls the drive 11, and a second safety control unit 3, which is arranged on the car 12 and controls the safety brake 16. In addition, the first and the second safety control units 2, 3 are connected to one another via a data line 24, which is represented schematically. The safety system 1 is connected to the elevator control unit 19 via the first safety control unit 2.

[0042] In addition, a position and/or speed sensor 17 is connected to the car 12 in a fixed position. In the example shown, the position and/or speed sensor 17 is designed to read out a position value from a code strip 37 which is arranged along the travel path 20, and if required, to calculate a speed value therefrom. The code strip 37 bears code marks in the form of optically, magnetically or capacitively readable patterns, which are read by a suitably selected position and/or speed sensor 17. The position and/or speed sensor 17 transmits a position and/or speed signal corresponding to a position and/or speed value to the second safety control unit 3.

[0043] FIGS. 2 and 3 show the structure and functionality of the safety system 1 in greater detail. The first safety control unit 2 and the second safety control unit 3 are connected via a data line 24, for example, a bus connection or a wireless connection.

[0044] The second safety control unit 3 is designed to evaluate at least one acceleration signal. For this purpose the second safety control unit 3 is connected via a data line 29 to an acceleration sensor 18. The acceleration sensor 18 is connected to the car 12 in a fixed position and accordingly measures the acceleration of the car 12. On the second safety control unit 3 an acceleration threshold value 51 is stored, which represents a limit value for a permissible operation of the elevator 10. Upon reaching or exceeding this acceleration threshold value 51, the second safety control unit 3 outputs a trigger signal via the data line 28 to the safety brake device 16. This ensures that in the event of an impermissibly high acceleration level, such as occurs, for example, during a free fall following a rupture of the support means 31, the car 12 is reliably braked by the safety brake 16 until it comes to a standstill.

[0045] The short signal paths between the acceleration sensor 18, the second safety control unit 3 and the safety brake 16 guarantees a rapid activation of the safety brake 16 by the second safety control unit 3.

[0046] The second safety control unit 3 is also connected to a position and speed sensor 17 via a data line 30. The position and/or speed sensor 17 is connected to the car 12 in a fixed position. The position and/or speed sensor 17 used here is implemented as an absolute positioning sensor in accordance with either of the patents EP 1 412 274 A1 or EP 2 540 651 A1. Alternatively, the position and/or speed sensor 17 can also be designed as an incremental encoder, which rolls along the guide rail 13 as a friction wheel. The position and/or speed sensor 17 transmits a position and/or speed signal to the second safety control unit 3.

[0047] The position and/or speed signals can be further processed in the second safety control unit 3. For example, a position signal can be evaluated to give a position value, or using its derivative over time to give a velocity value. The position and velocity values determined by the second safety control unit 3 are transmitted to the elevator control unit 19. In the example shown, this is effected via the data line 24, the first safety control unit 2 and the data line 25.

[0048] If a direct link exists between the elevator control unit 19 and the data line 24, then alternatively the position and velocity values can also be transmitted directly to the elevator control unit 19 by the second safety control unit 3.

[0049] The elevator control 19 processes the position and speed values when generating control signals to the drive 11, in order to accurately move the car 12 by means of the drive 11 to a predefined floor.

[0050] In addition, the position and speed values are transmitted by the second safety control unit 3 via the data line 24 to the first safety control unit 2 as well. A plurality of the following position-dependent and/or velocity-dependent safety functions can be implemented on the first safety control unit 2: [0051] prevention of accidental movement of the car when the car doors and shaft doors are open on a landing, [0052] prevention of excess speed, [0053] prevention of an impermissibly high speed in an end region of the travel path 20, or [0054] prevention of crossing of an end position at the end of the travel path 20.

[0055] To prevent an accidental motion of the car when the car doors and shaft doors are open on a landing 53, a speed threshold value 52 is stored on the first safety control unit 2. In addition, a predetermined permissible travel range about a landing 53 is defined by an upper and a lower position threshold value 53.1, 53.2, which is also stored on the first safety control unit 2. FIG. 3 shows an upper and a lower position threshold value 53.1, 53.2 for only one landing 53. Preferably, corresponding position threshold values are provided for each additional landing.

[0056] While the car 12 is stopped on the landing 53 with the car doors open, the first safety control unit 2 compares a speed value with the speed threshold value 52. If the speed value reaches or exceeds the speed threshold value 52, then the first safety control unit 2 outputs a trigger signal to stop the drive 11. In doing so the drive 11 can control the drive brake 14 via the data line 26 and/or the frequency converter 15 via the data line 27, to brake the car 12. Alternatively, the first safety control unit 2 can shut off the drive 11 by disconnecting the drive 11 from its power source, for example, by opening a switch contact.

[0057] In addition, the first safety control unit 2 also compares a position value with the upper and lower position threshold values 53.1, 53.2. Once the car 12 departs from the permissible travel range, or crosses the upper or lower position threshold value 53.1, 53.2, the first safety control unit 2 outputs a trigger signal to stop the drive 11, analogously to the above procedure.

[0058] For preventing excess speed a further speed threshold value 54 is stored on the safety control unit 2. The safety control unit 2 compares a speed value with the additional speed threshold value 54. If the speed value reaches or exceeds the other speed threshold value 54, then the safety control unit 2 issues a trigger signal to the drive 11 in order to bring the car 12 back to a permissible travel condition with a speed value which is below the other speed threshold 54. The first safety control unit 2 preferably proceeds exactly as described above.

[0059] The other speed threshold value 54 can be specified differently depending on the operating mode. For example, the other speed threshold value 54 in a normal operating mode is greater than the other threshold speed 55 in a maintenance operating mode.

[0060] For preventing an impermissibly high speed in an end region of the travel path 20, a position-dependent speed threshold value 56 is stored on the first safety control unit 2. In this case, the position-dependent speed threshold 56 decreases towards the end of the travel path. In a first embodiment, for a last permissible position s1, s2 at the end of the travel path the speed threshold value 56 can assume the value zero. Alternatively, the speed threshold value for a last permissible position at the end of the travel path can assume a maximum permissible speed value for striking a buffer.

[0061] The position-dependent speed threshold value 56 can be specified differently depending on the operating mode. For example, the position-dependent speed threshold value 56 in a normal operating mode is greater than the position-dependent threshold speed value 57 in a maintenance operating mode.

[0062] The first safety control unit 2 compares a speed and position value with the position-dependent speed threshold value 56. Upon reaching or exceeding the position-dependent speed threshold value 56, the first safety control unit 2 issues a trigger signal to the drive 11, in order to keep the car 12 below the position-dependent speed threshold value. The first safety control unit 2 preferably proceeds exactly as described above.

[0063] For preventing the crossing of an end position at the end of the travel path, a further position threshold value 58 is stored on the first safety control unit 2. The safety control unit 2 compares a position value with the other position threshold value 58 and upon reaching the other position threshold 58, issues a trigger signal to the drive 11, in order to brake the car 12 before the end of the travel path. The first safety control unit 2 preferably proceeds exactly as described above.

[0064] Alternatively, the monitoring of the end position at the end of the travel path can be effected by means of a limit position switch 36. This end contact switch 36 is connected to the first safety control unit 2 via a data line 23. The limit position switch 36 adopts an operational state as long as the car 12 has not passed over the limit position switch 36. If the car 12 passes over the limit position switch 36, the latter indicates an impermissible safety condition by virtue of adopting a safe condition. The first safety control unit 2 monitors the condition of the limit position switch 36. If the limit position switch 36 adopts a safe condition, the first safety control unit 2 issues a trigger signal to the drive 11, in order to brake the car 12 before the end of the travel path.

[0065] Further switches 35 may be connected to the first safety control unit 2 via the data line 23. These switches can be configured, for example, as shaft door contacts. These shaft door contacts 35 indicate a permissible safety condition by adopting an operating state when a shaft door is closed. In the case of an open shaft door, a shaft door contact 35 indicates an impermissible safety condition by adopting a safe condition, except if the car 12 is located on the landing with the open shaft door. The first safety control unit 2 monitors the condition of the other shaft door contacts 35 and issues a trigger signal to the drive 11 if an additional shaft door contact 35 adopts its safe condition. The first safety control unit 2 preferably proceeds exactly as described above.

[0066] If the first or the second safety control unit 2, 3 detects an impermissible safety state, then the first or the second safety control unit 2, 3, transmits a status signal to the elevator control unit 19. In the example shown, this status signal is transmitted over the data line 25 to the elevator control unit 19. In the example shown, the second safety control unit 3 can indirectly transmit the status signal to the elevator control unit 19, only via the first safety control unit 2. Alternatively, the elevator control unit 19 can be directly connected using the data line 24. Accordingly, the second safety control unit 3 can in this case transmit a status signal directly to the elevator control unit 19.

[0067] Preferably, the two safety control units 2, 3 monitor each other and exchange mutually corresponding status signals via the data line 24.

[0068] In accordance with the provisions of the patent statutes, the present invention has been described in what is considered to represent its preferred embodiment. However, it should be noted that the invention can be practiced otherwise than as specifically illustrated and described without departing from its spirit or scope.