Automatic rescue operation in an elevator system

Abstract

An automatic elevator safety system includes an elevator safety circuit and an external server. The elevator safety circuit is configured for monitoring the operation of an elevator system comprising at least one elevator car traveling along a hoistway, and an elevator control configured for controlling the movement of the elevator car. At least one of the elevator control and the elevator safety circuit is configured for sending data comprising information about the current state of the elevator system to the external server, in particular in case a safety issue has been detected. The external server is configured for (A) receiving the data sent by the at least one elevator safety circuit; (B) analyzing the received data; and (C) depending on the result of the analysis, sending commands to the elevator system.

Claims

1. Method of performing an automatic rescue operation of an elevator system (2), the method comprising: (A) detecting a safety signal indicating a safety issue within the elevator system; (B) sending data comprising information about the current state of the elevator system (2) to an external server (22); (C) analyzing the transmitted data on the external server (22); and (D) depending on the result of the analysis, sending commands to the elevator system (2), wherein the commands include instructing the elevator system (2): (a) to ignore the safety issue and resume normal operation of the elevator system (2), (b) to operate the elevator system (2) in a restricted rescue mode, or (c) to stop operating of the elevator system (2); wherein the analysis of the received data is based on a model of the elevator system; wherein the model is implemented on the external server (22); wherein the model is configured for transferring the elevator system (2) from its current state, via at least one intermediate state, into a state allowing normal operation or into a state allowing a restricted rescue operation of the elevator system (2); wherein steps (B) to (D) are repeated in a loop for checking whether the elevator system (2) reaches a desired intermediate state of the at least one intermediate state before the next command is sent to the elevator system (2).

2. Method according to claim 1, wherein the method further comprises the following steps to be carried out before and/or after step (C): (E1) the external server (22) requesting further information from the elevator system (2); (E2) the elevator system (2) sending additional data comprising further information to the external server (22); and (E3) analyzing the additionally received data on the external server (22).

3. Method according to claim 1, wherein the model includes a numerical model or a state model of the elevator system (2).

4. Method according to claim 1, wherein the data comprising information about the current state of the elevator system (2) include data indicating the state of at least one switch or node, in particular of at least one safety switch or safety node (12), of the elevator system (2).

5. Method according to claim 1, wherein the restricted rescue mode includes moving the elevator car (6) with reduced speed or for a limited distance, in particular moving the elevator car (6) to the next landing (8) and opening doors (10, 11) of the elevator car (6) and of the hoistway (4).

6. Automatic elevator safety system (1) including: an elevator safety circuit (17) configured for monitoring the operation of an elevator system (2) comprising at least one elevator car (6) traveling along a hoistway (4) and an elevator control (13) configured for controlling the movement of the elevator car (6); and an external server (22); wherein at least one of the elevator control (13) and the elevator safety circuit (17) is configured for sending data comprising information about the current state of the elevator system (2) to the external server (22), in particular in case a safety issue has been detected; wherein the external server (22) is configured for (A) receiving the data sent by the at least one elevator safety circuit (17); (B) analyzing the received data; and (C) depending on the result of the analysis, sending commands to the elevator system (2), wherein the commands include instructing the elevator system (2): (a) to ignore the safety issue and to resume normal operation of the elevator system (2); (b) to operate the elevator system (2) in a restricted rescue mode; or (c) to stop operating the elevator system (2); wherein the external server is configured for analyzing the received data based on a model of the elevator system; wherein the model is implemented on the external server (22); wherein the model is configured for transferring the elevator system (2) from its current state, via at least one intermediate state, into a state allowing normal operation or into a state allowing a restricted rescue operation of the elevator system (2); wherein the server (22) is configured for repeating steps (A) to (C) in a loop for checking whether the elevator system (2) has reached a desired intermediate state of the at least one intermediate state before sending the next command to the elevator system (2).

7. Automatic elevator safety system (1) according to claim 6, wherein the at least one elevator safety circuit (17) comprises a safety chain (16) including at least one mechanical switch and/or at least one electronic safety node (12), wherein the data comprising information about the current state of the elevator system (2) includes data indicating the state of the at least one safety switch and/or the at least one safety node (12).

8. Automatic elevator safety system (1) according to claim 6, wherein the external server (22) is configured for requesting further information from the elevator system (2) and analyzing the data additionally received from the elevator system (2).

9. Automatic elevator safety system (1) according to claim 6, wherein the model includes a numerical model or a state model of the elevator.

10. Automatic elevator safety system (1) according to claim 6, wherein the external server (22) is configured for receiving and analyzing data from a plurality of elevator systems (2).

11. Elevator system (2) comprising: at least one elevator car (6) traveling along a hoistway (4) and an elevator control (13) configured for controlling the movement of the elevator car (6); and an automatic elevator safety system (1) according to claim 6.

Description

(1) In the following, an exemplary embodiment of the invention is described with reference to the enclosed figures.

(2) FIG. 1 schematically depicts an elevator system comprising an automatic elevator safety system according to an exemplary embodiment of the invention.

(3) FIG. 2 schematically illustrates the steps of a method of performing an automatic rescue operation according to an exemplary embodiment of the invention.

(4) FIG. 1 schematically depicts an elevator system 2 comprising an automatic elevator safety system 1, which is configured for performing an automatic emergency rescue operation according to an exemplary embodiment of the invention.

(5) The elevator system 2 comprises an elevator car 6 movably suspended within a hoistway 4 extending between a plurality of landings 8 located on different floors.

(6) The elevator car 6 is movably suspended by means of a tension member 3. The tension member 3, for example a rope or belt, is connected to a drive 5, which is configured for driving the tension member 3 in order to move the elevator car 6 along the height of the hoistway 4 between the plurality of landings 8.

(7) Each landing 8 is provided with an elevator hoistway door (landing door) 10, and the elevator car 6 is provided with an elevator car door 11 allowing passengers 29 to transfer between a landing 8 and the interior of the elevator car 6 when the elevator car 6 is positioned at the respective landing 8.

(8) The exemplary embodiment of the elevator system 2 shown in FIG. 1 employs a 1:1 roping for suspending the elevator car 6. The skilled person, however, easily understands that the type of the roping is not essential for the invention and that different kinds of roping, e.g. a 2:1 roping, may be used as well. The elevator system 2 may further include a counterweight (not shown) moving concurrently and in opposite direction with respect to the elevator car 6. Alternatively, the elevator system 2 may be an elevator system 2 without a counterweight, as it is shown in FIG. 1. The drive 5 may be any form of drive used in the art, e.g. a traction drive, a hydraulic drive or a linear drive. The elevator system 2 may have a machine room or may be a machine room-less elevator system. The elevator system 2 may use a tension member 3, as it is shown in FIG. 1, or it may be an elevator system without a tension member 3, comprising e.g. a hydraulic drive or a linear drive (not shown).

(9) The drive 5 is controlled by an elevator control 13 for moving the elevator car 6 along the hoistway 4 between the different landings 8.

(10) Input to the elevator control 13 may be provided via landing control panels 7a, which may include destination call panels, provided on each landing 8 close to the elevator hoistway doors 10, and/or via a car operation panel 7b provided inside the elevator car 6.

(11) The landing control panels 7a and the car operation panel 7b may be connected to the elevator control 13 by means of electrical lines, which are not shown in FIG. 1, in particular by an electric bus, e.g. a field bus such as a CAN bus, or by means of wireless data connections.

(12) For determining the current position of the elevator car 6, the elevator system 2 is provided with at least one position sensor 25 configured for detecting the current position (height) of the elevator car 6 within the hoistway 4. The position sensor 25 may also allow determining the speed of the movement of the elevator car 6.

(13) The position sensor 25 is connected with the elevator control 13 via a signal line 23, or via a wireless connection (not shown) configured for transmitting the detected position of the elevator car 6 to the elevator control 13.

(14) Cameras 26 may be arranged within the hoistway 14 and/or at the elevator car 6 for providing at least one picture of the interior of the hoistway 14.

(15) A safety circuit 17 is configured for monitoring the safety of the elevator system 2. The safety circuit 17 particularly may be connected with a safety chain 16 comprising a plurality of safety nodes and/or safety switches 12. In case a safety issue, i.e. a malfunction which is relevant for the safety of the elevator system, occurs, at least one of the safety nodes/safety switches 12 interrupts the safety chain 16. As a result, the safety circuit 17 determines that a safety issue occurred and stops the movement of the elevator car 6. This is schematically illustrated as step 100 in FIG. 2. As a result, passengers 29 are trapped within the elevator car 6. As mentioned before, it is desirable to allow the trapped passengers 29 to leave the elevator car 6 as soon as possible.

(16) At least in case a safety issue has been detected, a communication circuit 18 provided within, or connected with, the elevator control 13 establishes a data connection 20 between the elevator control 13 and an external server 22. The external server 22 may be provided spatially separated from the elevator system 2, e.g. in a remote service center 21.

(17) The external server 22 may be configured for connecting with a plurality of elevator systems 2, in particular elevator systems 2 located at various locations.

(18) The data connection 20 between the elevator system 2 and the external server 22 may be established via the Internet 30, in particular via a virtual private network (VPN) and/or via a virtual cloud 32 within the Internet. The data connection 20 may include a conventional telephone line or a digital line such as ISDN or DSL. It further may include wireless communication systems including WLAN, GMS, UMTS, LTE, Bluetooth® etc.

(19) The steps following the establishment of the data connection 20 are schematically illustrated in the diagram depicted in FIG. 2.

(20) A safety signal indicating the detected safety issue is transmitted from the elevator control 13 via the communication circuit 18 and the established data connection 20 to the external server 22 (step 110).

(21) In response, the external server 22 requests information about the current state of the elevator system 2 (step 120). Data comprising the desired information are transferred from the elevator control 13 and/or from the safety circuit 17 to the external server 22 via the communication circuit 18 and the data connection 20 (step 130).

(22) The data transmitted to the external 22 server may comprise information related to the state of individual safety nodes/safety switches 12, information about the current position and/or speed of the elevator car 6 and/or information about the current state of the doors 10, 11, in particular information whether the doors 10, 11 are open or properly closed.

(23) The data may further comprise pictures of the hoistway 4 provided by the cameras 26 arranged within the hoistway 14 and/or at the elevator car 6.

(24) The external server 22 analyzes the received data (step 140) for determining the severity of the detected safety issue and for identifying measures for resolving the detected safety issue.

(25) If the external server 22 determines that additional information is needed, the external server 22 may request additional information, particularly more detailed information, about the current state of the elevator system 2, from the elevator control 13 and/or from the safety circuit 17 (step 150). In step 160 the requested information is delivered to the external server 22.

(26) The external server 22 may analyze the received data using a model, in particular a numerical model or a state model, of the elevator system 2, implemented on the external server 22. The external server 22 may comprise a computer 24, allowing the model of the elevator system 22 to be implemented by a computer program running on said computer 24.

(27) The model may be based on binary information provided by the elevator system 2, in particular the elevator control 13 and/or the safety circuit 17. Said binary information may include information such as whether the doors 10, 11 are open or properly closed, whether the elevator system 2 is performing a normal run or a special maintenance run, and/or whether the safety switches 12 are open or closed. n pieces of binary information result in 2.sup.n possible states of the elevator system 2.

(28) In case the current state of the elevator system is an “error state” resulting from a safety issue, the external server 22 tries to determine possible ways for transferring the elevator system from the current erroneous state into a state allowing normal operation of the elevator system 2 (step 170).

(29) A possible result of said analysis may be instructing the elevator system 2 to ignore the safety issue and to resume normal operation (step 180). This e.g. may be the case when it is determined that the safety issue results from a temporary problem, such as a loose contact or a temporary overlap of control signals, which does not require taking any countermeasures and which does not prevent the elevator system 2 form being operated safely.

(30) If it is determined that it is not possible to transfer the elevator system 2 into a state allowing normal operation by sending commands to the elevator system 2, the external server 22 tries transferring the elevator system 2 at least into a state which allows operating the elevator system 2 in a restricted rescue mode for freeing passengers 29 trapped within the elevator car 6.

(31) In case the external server 22 determines that operating the elevator system 2 in a restricted rescue mode is possible, it sends a corresponding signal to the elevator system 2 (step 190). In response to receiving such a signal, the elevator system 2 confirms that it switches into a restricted rescue mode (step 200) and closes the safety chain 16 (step 210) in order to allow the elevator car 6 to move.

(32) Operating the elevator system 2 in a restricted rescue mode may include moving the elevator car 6 only to the nearest landing 8 and opening the doors 10, 11 (step 220) after the elevator car 6 has reached the desired landing for allowing passengers 29 to leave the elevator car 6. In the restricted rescue mode, the elevator car 6 may be allowed to move only over a limited distance and/or only with a reduced speed compared to normal operation.

(33) After the rescue run has been completed (step 230), the safety chain 16 is opened again (step 240), the operation of the elevator system 2 is stopped, and an alarm message is issued (step 250). The alarm message may request a qualified person, such as a mechanic 27, at the service center 21 to check the available information and to decide how to proceed further. This in particular may include that a mechanic 27 visits the elevator system 2 in order to remedy the detected malfunction.

(34) In case it should not be possible to transfer the elevator system 2 into a state which allows operating the elevator system 2 in a restricted rescue mode, steps 190 to 240 are skipped (step 185), the operation of the elevator system 2 is stopped, and an alarm message requesting a qualified person to check the available information and to decide how to proceed further is issued (step 250). This in particular may include that a mechanic 27 visits the elevator system 2 in order to free passengers 29 trapped within the elevator car 6 and to remedy the detected malfunction.

(35) Transferring the elevator system 2 from its current (erroneous) state into a state allowing normal operation or into a state allowing a restricted rescue operation of the elevator system 2 may include transferring the elevator system 2 from its current state into at least one intermediate state. Transferring the elevator system 2 in particular may include transferring the elevator system 2 through a chain of intermediate states. The external server 22 may check whether each intermediate state is reached before sending further commands for transferring the elevator system 2 into the next state. This ensures a controlled and secure transfer of the elevator system 2 from its current state into a desired final state.

(36) While the invention has been described with reference to exemplary embodiments, it will be understood by those skilled in the art that various changes may be made and equivalents may be substituted for elements thereof without departing from the scope of the invention. In addition, many modifications may be made to adopt a particular situation or material to the teachings of the invention without departing from the essential scope thereof. Therefore, it is intended that the invention is not limited to the particular embodiments disclosed, but that the invention includes all embodiments falling within the scope of the claims.

REFERENCES

(37) 1 elevator safety system 2 elevator system 3 tension member 4 hoistway 5 drive 6 elevator car 7a landing control panel 7b car operation panel 8 landing 10 hoistway door 11 elevator car door 12 safety switch/safety node 13 elevator control 16 safety chain 17 safety circuit 18 communication circuit 20 data connection 21 service center 22 external server 23 signal line 24 computer 25 position sensor 26 camera 27 mechanic 29 passenger 30 Internet 32 virtual cloud