Monitoring device for a passenger transport system, testing method and passenger transport system

Abstract

A monitoring device for monitoring a passenger transport system includes at least one sensor, a control unit, a bus, and at least one bus node connected to the bus. The bus node has a microprocessor and an inspection unit for data exchange with the control unit. A first program module in the microprocessor detects a state change of the sensor that is connected to an input of the microprocessor via a transmission line and spontaneously transmits a corresponding state message to the control unit. A second program module in the inspection unit, after receiving an instruction from the control unit, transmits an activation signal to a coupling point in the bus node that simulates a state change of the sensor, the activation signal being superimposed on a sensor signal and/or being coupled into a power supply line connected to the sensor.

Claims

1. A monitoring device for a passenger transport system, comprising: a sensor; a control unit; a bus; and a bus node, the control unit and the bus node being connected to the bus, the bus node including a first microprocessor and an inspection unit both in communication with the control unit, wherein data is transmitted from the control unit to the inspection unit and from the first microprocessor to the control unit, the first microprocessor including a first program module for detecting a state change of the sensor connected to an input of the first microprocessor and for spontaneously transmitting a corresponding state message to the control unit, the inspection unit including a second program module that, after receiving an instruction from the control unit, transmits an activation signal to a coupling point within the bus node to simulate the state change of the sensor, wherein the activation signal is at least one of superimposed on a sensor signal from the sensor and coupled into a power supply line connected to the sensor.

2. The monitoring device according to claim 1 wherein the inspection unit is implemented in the first microprocessor or in a second microprocessor.

3. The monitoring device according to claim 1 wherein the sensor emits the sensor signal as at least one of a digital sensor signal and an analog sensor signal at an output, and wherein the first microprocessor monitors the sensor signal for an occurrence of the state change.

4. The monitoring device according to claim 3 wherein the digital sensor signal includes an identification code associated with the sensor.

5. The monitoring device according to claim 1 wherein the inspection unit emits the activation signal as at least one of a digital activation signal and an analog activation signal at an output.

6. The monitoring device according to claim 5 wherein the activation signal includes at least one of a DC voltage pulse, a logic signal, and an AC voltage signal in a frequency range of 500 Hz to 2000 Hz.

7. The monitoring device according to claim 1 wherein the coupling point is arranged at: within an output stage of the sensor; within an input stage of the first microprocessor; between the output stage of the sensor and the input stage of the first microprocessor; at an input of the sensor; inside the sensor; or inside a power supply line connected to the sensor.

8. The monitoring device according to claim 1 wherein the coupling point is a galvanic connection for galvanic coupling of the activation signal, a coupling capacitor for capacitive coupling of the activation signal, or a coil for inductive coupling of the activation signal.

9. The monitoring device according to claim 1 wherein the coupling point is a logic circuit for combining the sensor signal in digital form and the activation signal in digital form.

10. The monitoring device according to claim 9 wherein the logic circuit is an inverter that is switched by the activation signal.

11. The monitoring device according to claim 1 wherein the sensor includes a code-bearing element and a code-reading element, the code-reading element reading an identification code from the code-bearing element from contactless transmission and in response the code-reading element sending the sensor signal to the first microprocessor, and the coupling point being arranged at an input or an output of the code-reading element.

12. The monitoring device according to claim 11 wherein the code-bearing element and the code-reading element each have an induction loop, the code-reading element providing the code-bearing element with electromagnetic energy with contactless transmission by the induction loops and the code-bearing element transmitting the identification code to the code-reading element with contactless transmission by the induction loops.

13. A method for testing a monitoring device according to claim 1 comprising the steps of: generating the instruction from the control unit to the inspection unit; generating the activation signal from the inspection unit to the coupling point; and at the coupling point, at least one of superimposing the activation signal on the sensor signal and coupling the activation signal into a power supply line connected to the sensor.

14. The method according to claim 13 including the steps of: emitting the activation signal from the inspection unit as at least one of a digital activation signal and an analog activation signal to the coupling point; and arranging the coupling point at within an output stage of the sensor, within an input stage of the first microprocessor, between the output stage of the sensor and the input stage of the first microprocessor, at an input of the sensor, inside the sensor, or inside a power supply line connected to the sensor.

15. The method according to claim 13 including coupling the activation signal into the coupling point by a galvanic connection, a coupling capacitor, or a coil.

16. The method according to claim 13 wherein the coupling point is a logic circuit and including combining the sensor signal in digital form and the activation signal in digital form in the logic circuit.

17. The method according to claim 16 wherein the coupling point is an inverter and including switching the logic with the activation signal.

18. A passenger transport system comprising the monitoring device according to claim 1.

Description

DESCRIPTION OF THE DRAWINGS

(1) The invention will be described below with reference to drawings, in which:

(2) FIG. 1 shows a monitoring device according to the invention comprising a control unit 10, which is connected to a bus node 30 via a bus 9, in which bus node a sensor 8 is connected to the input of a first microprocessor 4 via a coupling point 31, into which an activation signal can be coupled by an inspection unit or a second microprocessor 5;

(3) FIG. 2 shows the monitoring device from FIG. 1, comprising a coupling point 32 that is arranged inside the power supply line 71, 72 of the sensor 8;

(4) FIG. 3 shows the monitoring device from FIG. 1, in which the output signal of the sensor 8 is supplied to the first microprocessor 4 and the second microprocessor 5 via transmission lines 11, 11′ that are each provided with a coupling point 33, 34;

(5) FIG. 4 shows the monitoring device from FIG. 2, in which the output signal of the sensor 8 is supplied to the first microprocessor 4 and the second microprocessor 5 via transmission lines 12, 12′ and in which a coupling point 35 is provided in the power supply line 71, 72 of the sensor 8;

(6) FIG. 5 shows the monitoring device from FIG. 4, in which a first coupling point 36, which is actuated by the first microprocessor 4, and a second coupling point 37, which is actuated by the second microprocessor 5, are provided in the power supply line 71, 72 of the sensor 8;

(7) FIG. 6 shows a monitoring device according to the invention comprising a first sensor 8a, which is connected to the first microprocessor 4 via a first transmission line 14, and a second sensor 8b, which is connected to the second microprocessor 5 via a second transmission line 15, and comprising a first coupling point 38 in the first transmission line 14 to which activation signals can be supplied by the second microprocessor 5, and a second coupling point 39 in the second transmission line 15 to which activation signals can be supplied by the first microprocessor 4;

(8) FIG. 7 shows the monitoring device from FIG. 6, comprising the first coupling point 40 in the power supply line of the first sensor 8a and the second coupling point 41 in the power supply line of the second sensor 8b;

(9) FIG. 8 shows the monitoring device from FIG. 7, comprising a common power supply for the two sensors 8a, 8b, and comprising only one coupling point 42 in a common power supply line, to which coupling point activation signals can be applied by the two microprocessors 4, 5;

(10) FIG. 9 shows the monitoring device from FIG. 8, in which the two sensors 8a, 8b are connected to the first microprocessor 4 via a common transmission line 20, comprising a first coupling point 43 in the common transmission line 20 and a second coupling point 44 in the common power supply line of the two sensors 8a, 8b, to which coupling points activation signals can be applied by the second microprocessor 5;

(11) FIG. 10 shows the monitoring device from FIG. 6, in which the two sensors 8a, 8b are each connected to the first microprocessor 4 via a first transmission line 21 and to the second microprocessor 5 via a second transmission line 22, and comprising a first coupling point 45 in the first transmission line 21 to which activation signals can be applied by the second microprocessor 5, and comprising a second coupling point 46 in the second transmission line 22 to which activation signals can be applied by the first microprocessor 4;

(12) FIG. 11 shows the monitoring device from FIG. 10, comprising only one coupling point 47 in a common power supply line of the two sensors 8a, 8b, to which coupling point activation signals can be applied by the two microprocessors 4, 5; and

(13) FIG. 12 shows the monitoring device from FIG. 11, comprising a first coupling point 48 in a power supply line of the first sensor 8a, to which coupling point activation signals can be applied by the second microprocessor 5, and comprising a second coupling point 49 in a power supply line of the second sensor 8b, to which coupling point activation signals can be applied by the first microprocessor 4.

DETAILED DESCRIPTION

(14) FIG. 1 shows a first embodiment of the monitoring device, which can advantageously be used in a passenger transport system. The monitoring device comprises a control unit 10, which communicates with at least one bus node 30 via a bus 9. The control unit 10, the bus 9 and the at least one bus node 30 form a bus system, within which each bus node 30 has a unique identifiable address. By means of this address, signals, in particular control commands from the control unit 10, can be transmitted to a particular bus node 30 in a targeted manner. Similarly, incoming signals at the control unit 10 can be uniquely allocated to a bus node 30.

(15) Data can therefore be sent in both directions between the bus node 30 and the control unit 10 via the bus 9. Using said data, state changes that are detected by a sensor 8 can be reported to the control unit 10. Upon occurrence of state changes, corresponding messages are in each case spontaneously transmitted from the nodes 30 to the control unit. The control unit 10 therefore does not have to carry out periodic polling in order to determine whether state changes have occurred, but rather is informed thereof spontaneously by the bus nodes 30. If no state changes occur, no corresponding data are transmitted via the bus 9. The data traffic through the bus 9 is thus substantially reduced. The control unit 10, merely for the purpose of inspecting the bus nodes 30, regularly sends instructions to said bus nodes 30 in order to bring about a state change that leads to a message. The integrity of the bus nodes and of the entire bus system can be regularly tested by sending instructions and receiving corresponding state change messages.

(16) For this purpose, the bus node 30 comprises a first microprocessor 4, by means of which state change messages can be transmitted to the control unit 10. Furthermore, an inspection unit in the form of a second microprocessor 5 is provided, which receives control commands or instructions from the control unit 10, by means of which tests are initiated. In order to be able to perform the tasks mentioned, corresponding program modules and communication means are provided in the two microprocessors 4 and 5.

(17) The two microprocessors 4, 5 can be configured both physically and virtually. In the case of two physically configured microprocessors 4, 5, two microprocessors 4, 5 are arranged on a die, for example. In an alternative embodiment, the two microprocessors 4, 5 can each be produced on their own die. However, it is also possible for only one microprocessor 4 to be physically present. In this case, a second microprocessor 5 or the inspection unit can be virtually configured by means of software on the first physically present microprocessor 4.

(18) Any kind of sensor can be monitored by means of the bus nodes 30. In the embodiments, sensors 8 are shown which comprise a code-bearing element 1 and a code-reading element 3. Preferably, the code-bearing element 1 is an RFID tag 1 and the code-reading element 3 is an RFID reader 3. Other technical options are available to a person skilled in the art seeking to achieve contactless transmission of an identification code between a code-bearing and code-reading element. Alternatively, combinations of code-bearing and code-reading elements 1, 3 consisting of a barcode carrier and laser scanner, loudspeaker and microphone, magnetic tape and Hall sensor, magnet and Hall sensor, or light source and light-sensitive sensor, can also be used, for example.

(19) Both the RFID tag 1 and the RFID reader 3 have an induction loop 2.1, 2.2. The RFID reader 3 supplies electromagnetic energy to the RFID tag 1 by means of said induction loops 2.1, 2.2. For this purpose, the RFID reader 3 is connected to a power or voltage source Vcc. If the RFID tag 1 is supplied with energy, the RFID tag 1 sends an identification code stored on the RFID tag 1 to the RFID reader 3 via the induction loops 2.1, 2.2. The energy supply Vcc of the RFID tag 1 is only guaranteed if the RFID tag 1 is in physical proximity under a critical distance from the RFID reader 3 and the induction loop 2.1 of the RFID tag 1 can be excited by means of the induction loop 2.2 of the RFID reader 3. The energy supply of the RFID tag 1 therefore only functions below a critical distance from the RFID reader 3. If the critical distance is exceeded, the RFID tag 1 does not draw enough energy to maintain the transmission of the identification code to the RFID reader 3.

(20) The RFID reader 3 transmits the received identification code via a data conductor 6 to the first microprocessor 4, which compares the identification code with a list of identification codes stored on a memory unit. During said comparison, the microprocessor 4 calculates a state value according to stored rules on the basis of the identification code. Said state value can have a positive or a negative value. A negative state value is generated, for example, when no identification code or a false identification code is transmitted to the microprocessor 4.

(21) In the case of a negative state value, the microprocessor 4 sends a state change message to the control unit 10 via the bus 9. Said state change message contains at least the address of the bus node 30 and preferably the identification code of the detected RFID tag 1. By virtue of the notified address, the control unit 10 is capable of localizing the origin of the negative state value and initiating a corresponding reaction.

(22) The bus node 30 monitors the state of a shaft door, for example. The RFID tag 1 and the RFID reader 3 are arranged in the region of the shaft door, such that the distance between the RFID tag 1 and the RFID reader 3 is below the critical distance when the shaft door is closed. The microprocessor 4 thus receives the identification code from the RFID reader 3 and generates a positive state value. If the shaft door is opened, the RFID tag 1 and the RFID reader 3 exceed the critical distance. Since the RFID tag 1 is in this case no longer supplied with electrical energy by the RFID reader 3, the RFID tag 1 ceases transmission of the identification code thereof and the microprocessor 4 generates a negative state value. Accordingly, the microprocessor 4 sends a state change message to the control unit 10. The control unit 10 localizes the open shaft door using the address of the bus node 30. If said shaft door is open without authorization, for example if there is no elevator car in the shaft door region, the control unit 10 initiates a reaction in order to bring the elevator system into a safe state.

(23) The state of any given components, such as door locks, cover locks, emergency stop switches, or travel switches, of a passenger transport system, in particular an escalator or an elevator system, can therefore be monitored by means of the RFID tag 1 and RFID reader 3 of a bus node 30.

(24) Furthermore, other sensors 8 may be used which operate according to different physical principles and the state changes of which are reported to the control unit 10 in another way. In particular, the invention does not depend on data transmission protocols used for the entire bus system. Similarly, the invention does not depend on the way in which the sensor signals that can be compared with any given reference values and threshold values are analyzed in order to establish a change of state. The transmission of an identification code from the sensor 8 to the first microprocessor 4 is advantageous but it is not strictly necessary.

(25) The secure operation of the bus nodes 30 depends primarily on the functionality of the microprocessor 4. Therefore, the bus node 30 is regularly tested by the control unit 10 in order to check the spontaneous transmission behavior of the microprocessor 4 when the state of the sensor 8 changes.

(26) In order to test the bus node 30 according to FIG. 1, the control unit 10 sends a control command or an instruction via the bus 9 to the inspection unit 5 or the second microprocessor 5 in order to trigger or simulate a state change of the sensor 8 that prompts the first microprocessor 4 to send off a state change message.

(27) For this purpose, a coupling point 31 is provided in the circuit arrangement of the bus node 30, into which coupling point an activation signal is galvanically, capacitively or inductively coupled. The activation signal is generated by the inspection unit, for example by the second microprocessor 5, and is transmitted via a connection line 51 to the coupling point 31, which is arranged in a transmission line 6 in the configuration from FIG. 1, which transmission line connects the output of the sensor 8 to the input of the first microprocessor 4. A second connection line 52 is shown by a dashed line, via which activation signals can be transmitted into the sensor 8 to the second coupling coil 2.2 (the coupling point is not shown). The signals emitted by the sensor 8 are superimposed by the activation signal in the first coupling point 31. For example, the identification code is serially transmitted via the transmission line 6 as a pulse train. At least one of the data bits of the pulse train is modified by means of the activation signal, and therefore the expected identification signal is not received in the first microprocessor 4 and a change of state is established.

(28) The first coupling point 31 can also be designed as a circuit logic to which the sensor signal is supplied at a first input and to which the activation signal is supplied at a second input. For example, the data bits of the identification code are supplied to a first input of an EXOR gate in each case, the activation signal being applied to the second input thereof. As soon as the activation signal is set to logic “1”, the identification code is inverted by the EXOR logic. Therefore, instead of the identification code, the first microprocessor 4 can transmit the inverted identification code to the control unit 10. The control unit 10 therefore identifies in each case whether the bus node 30 reports a spontaneous or simulated state change.

(29) The test is carried out recurrently for each bus node 30. Since, during the test, the control unit 10 cannot identify any real information about the state of the tested bus node 30, the testing time is kept as short as possible and the test is only carried out as often as necessary. The frequency of the tests depends primarily on the probability of failure of the overall system. The more reliable the overall system, the more rarely said system can be tested in order to ensure secure monitoring of the state of an elevator component. In general, the test is carried out at least once daily.

(30) The method according to the invention makes it possible to carry out the test within a very short time, since even the deletion of a single data bit of the identification code or a short pulse-like interruption of the sensor signal is sufficient to simulate a change of state. Opening and closing a switch and the problems associated with the switch are avoided.

(31) In the following, further embodiments of the monitoring device, in particular of the bus node 30, are described. Since the basic design of the bus node 30 and the functioning of the bus components 1 to 5 are comparable in these embodiments, the differences in design and functioning of the different bus nodes 30 will substantially be explained.

(32) FIG. 2 shows the monitoring device from FIG. 1, comprising a coupling point 32 in the power supply line 71, 72 of the sensor 8. By impressing the activation signal from the second microprocessor 5 into the power supply line 71, 72 via the connection line 53, the function of the sensor 8 is interrupted for a short time, and therefore a change of state occurs, which is identified in the first microprocessor 4. The interruption may in turn be effected in a pulse-like manner within a very short time with minimal effort.

(33) FIG. 3 shows a third embodiment of the monitoring device. In this embodiment, the output signal of the sensor 8 is transmitted to the first microprocessor 4 via a first transmission line 11, which is provided with a first coupling point 33, and to the second microprocessor 5 via a second transmission line 11′, which is provided with a second coupling point 34. The output signal of the sensor 8 or the transmitted identification code can be analyzed redundantly by the two microprocessors 4, 5. Therefore, if one of the two microprocessors 4, 5 generates a negative state value, a state change message is transmitted to the control unit 10 by the bus node 30. An advantage of this embodiment is the redundant and thus very reliable analysis of the sensor signal, for example of the identification code.

(34) In order to test the bus node 30, activation signals can be transmitted from the first microprocessor 4 to the second coupling point 34 and from the second microprocessor 5 to the first coupling point 33. During testing of one of the two microprocessors 4, 5, the microprocessor 4, 5 that triggers the activation signals continues to read the real identification code of the RFID tag 1. In contrast with the embodiments described above, the bus node 30 therefore remains capable of identifying actual state changes and of sending state change messages to the control unit 10. The control unit 10 can therefore distinguish between simulated and actual state changes when it receives two state change messages at the same time.

(35) FIG. 4 and FIG. 5 show a fourth and fifth embodiment of the monitoring device. According to these embodiments, the output signal of the sensor is transmitted via transmission lines 12, 12′ or 13, 13′ to the two microprocessors 4, 5 for redundant analysis.

(36) In the fourth embodiment, the control unit 10, for the purpose of testing the bus node 30, sends a control command to the second microprocessor 5 in order to trigger the emission of an activation signal to the coupling point 35, which is integrated in the power supply line 72.

(37) By impressing the activation signal into the power supply line 71, 72, the function of the sensor 8 is interrupted for a short time, and therefore a change of state occurs, which is identified in the first microprocessor 4. The interruption may in turn be effected within a very short time with minimal effort.

(38) In the fifth embodiment, a first coupling point 36, which is actuated by the first microprocessor 4, and a second coupling point 37, which is actuated by the second microprocessor 5, are provided in the power supply line 71, 72 of the sensor 8. When the state of the sensor 8 changes, for example in the absence of the identification code signal, both the first and the second microprocessor 4, 5 send a state change message to the control unit 10.

(39) In the embodiments according to FIGS. 6 to 12, the output signals are transmitted from two sensors 8a, 8b via different transmission lines to at least one of the microprocessors 4, 5. The coupling points used to test the bus node are arranged at different points within the circuit arrangements 30. The sensors 8a, 8b comprise corresponding code-bearing elements 1a, 1b, code-reading elements 3a, 3b and induction loops 2.1a, 2.2a, 2.1b, 2.2b. The functioning of the sensors is analogous to that of the sensors of the embodiments from FIGS. 1 to 5. The code-reading elements 3a, 3b are supplied via power supply lines (not marked in greater detail) analogous to the power supply lines 71, 72 of the previous embodiments according to FIGS. 1 to 5.

(40) Bus nodes 30 that have two sensors 8a, 8b can either redundantly monitor the state of an element of a passenger transport system or monitor the states of two physically adjacent elements of the passenger transport system. For example, the state of a shaft door is monitored redundantly in an elevator system by means of two sensors or the state of a car door is monitored on the one hand and the state of an alarm button is monitored on the other.

(41) In the embodiment from FIG. 6, the first sensor 8a is connected to the first microprocessor 4 via a first transmission line 14 and the second sensor 8b is connected to the second microprocessor 5 via a second transmission line 15. A first coupling point 38 is provided in the first transmission line 14, to which coupling point activation signals can be supplied by the second microprocessor 5. A second coupling point 39 is provided in the second transmission line, to which coupling point activation signals can be supplied by the first microprocessor 4.

(42) FIG. 7 shows the monitoring device from FIG. 6, comprising a first coupling point 40, actuated by the second microprocessor 5, in a power supply line of the first sensor 8a and comprising a second coupling point 41, actuated by the first microprocessor 4, in a power supply line of the second sensor 8b. The state change of the sensors 8a and 8b is thus caused by impairment of the power supply. The first sensor 8a is connected to the first microprocessor 4 via a first transmission line 16 and the second sensor 8b is connected to the second microprocessor 5 via a second transmission line 17.

(43) In the embodiment according to FIG. 8, however, both microprocessors 4, 5 send activation signals to a single coupling point 42, which is provided in a power supply line common to both sensors 8a, 8b. The first sensor 8a is connected to the first microprocessor 4 via a first transmission line 18 and the second sensor 8b is connected to the second microprocessor 5 via a second transmission line 19.

(44) FIG. 9 shows an embodiment in which the output signals are transmitted from two sensors 8a, 8b to the first microprocessor 4 via a common transmission line 20. The second microprocessor 5 tests the functionality of the first microprocessor 4 by transmitting activation signals to a coupling point 43 that is integrated in the transmission line 20. In an alternative arrangement, a coupling point 44, which is actuated via a second connection line (see the dashed line), is provided in a common power supply line of the sensors 8a, 8b.

(45) FIGS. 10 to 12 also show embodiments of monitoring devices which comprise two sensors 8a, 8b, the output signals of which are redundantly supplied to the first and second microprocessor 4, 5.

(46) FIG. 10 shows the monitoring device from FIG. 6, in which the two sensors 8a, 8b are each connected to the first microprocessor 4 via a first transmission line 21 and to the second microprocessor 5 via a second transmission line 22. A first coupling point 45, to which activation signals can be applied by the second microprocessor 5, is provided in the first transmission line 21, and a second coupling point 46, to which activation signals can be applied by the first microprocessor 4, is provided in the second transmission line 22.

(47) FIG. 11 shows the monitoring device from FIG. 10, comprising only one coupling point 47, which is arranged in a common power supply line of the two sensors 8a, 8b and to which activation signals can be applied by the two microprocessors 4, 5. Furthermore, the first sensor 8a and the second 8b are in each case connected to the first microprocessor 4 via a first transmission line 23 and to the second microprocessor 5 via a second transmission line 24.

(48) FIG. 12 shows the monitoring device from FIG. 11, comprising a first coupling point 48 in a power supply line of the first sensor 8a, to which coupling point activation signals can be applied by the second microprocessor 5, and comprising a second coupling point 49 in a power supply line of the second sensor 8b, to which coupling point activation signals can be applied by the first microprocessor 4. State changes can therefore be induced individually, simultaneously or alternately at both sensors 8a, 8b. Furthermore, the first sensor 8a and the second 8b are in each case connected to the first microprocessor 4 via a first transmission line 25 and to the second microprocessor 5 via a second transmission line 26.

(49) In order to achieve maximum versatility, the two microprocessors 4 and 5 can communicate with the control unit 10 preferably independently of one another, and for this purpose preferably have different addresses. The control unit 10 can therefore sequentially test one and the other microprocessor 4 or 5 while the other microprocessor 5 or 4 monitors the associated sensor 8b or 8a, respectively.

(50) Provided that other sensors are used which provide further options for bringing about a change of state, the circuit can be correspondingly adapted.

(51) In accordance with the provisions of the patent statutes, the present invention has been described in what is considered to represent its preferred embodiment. However, it should be noted that the invention can be practiced otherwise than as specifically illustrated and described without departing from its spirit or scope.