METHOD FOR OPERATING AN ELECTRONIC SAFETY SYSTEM WITH TEMPORARY SUBSCRIBERS

Abstract

A method for operating a safety system having a control unit, a bus, a plurality of bus nodes connected to the control unit via the bus and a plurality of participants connected to the control unit via the bus nodes, wherein at least one participant is designed as a temporary participant. The method involves the steps that the temporary participant is notified in the safety system by the temporary participant being connected at a bus node to the safety system via the bus, the temporary participants is recognized by the control unit, the temporary participant is integrated into the safety system by the control unit and the temporary participant is activated at least once. A further aspect of the invention relates to a safety system for an elevator system for carrying out the method and to an elevator system having the safety system.

Claims

1-15. (canceled)

16. A method for operating a safety system of an elevator system having a control unit, a bus, a plurality of bus nodes connected to the control unit via the bus, and a plurality of participants, of which at least one of the participants is designed as a temporary participant, that are connected to the control unit via the bus nodes, registering the at least one temporary participant in the safety system comprising the steps of: A) connecting the at least one temporary participant to the safety system at one of the bus nodes; B) recognizing the temporary participant by the control unit; C) integrating the temporary participant into the safety system by the control unit; and D) activating the temporary participant at least once.

17. The method according to claim 16 wherein the control unit places the safety system in a fault mode if, after connecting to the safety system the at least one temporary participant is not activated before a specified period of time has elapsed, or if the at least one temporary participant is disconnected from the safety system after the registration without further manipulation of the safety system.

18. The method according to claim 16 wherein the at least one temporary participant is registered in the safety system by the at least one temporary participant being notified to the control unit, before the connection, by manipulation of the safety system.

19. The method according to claim 18 wherein the manipulation of the safety system is by input of a control command at a designated input point, or by the activation of a switch, wherein the input point or the switch are each connected to the safety system.

20. The method according to claim 18 wherein the control unit places the safety system in a fault mode if after the manipulation of the safety system, the at least one temporary participant is not connected to the safety system before a specified period of time has elapsed, or if the at least one temporary participant is connected to the safety system before the manipulation of the safety system.

21. The method according to claim 16 wherein the recognition and integration of the at least one temporary participant is confirmed by a display medium.

22. The method according to claim 16 including implementing on the control unit a reference list of the participants, the reference list containing at least data relating to an identification number of each of the participants, and wherein the at least one temporary participant is recognized by the control unit if a match is found by the control unit during a comparison of an identification number of the at least one temporary participant with one of the identification numbers of the reference list.

23. The method according to claim 22 wherein the recognized at least one temporary participant is integrated by the control unit by an entry of the recognized at least one temporary participant in the reference list being changed by the control unit from an inactive status to an active status.

24. The method according to claim 23 including implementing on the control unit an actual list of the ones of the participants connected to the safety system, and enabling an operation of the elevator system only if a match is found by the control unit during a comparison of the participants activated in the reference list with the participants entered in the actual list.

25. The method according to claim 22 including recognizing the at least one temporary participant by the control unit by at least one of a first identification number representing a type of the at least one temporary participant and a second identification number enabling a unique identification of the at least one temporary participant as a result of a comparison of the first or second identification number of the at least one temporary participant with first and second identification numbers of the reference list.

26. The method according to claim 25 wherein the safety system is placed in a fault mode by the control unit if more than one temporary participant with a same first identification number is connected to the safety system.

27. The method according to claim 25 wherein the safety system is enabled by the control unit for an operation if the control unit recognizes the second identification number of the at least one temporary participant from a group of second identification numbers stored on the reference list.

28. The method according to claim 16 wherein in an event of a power failure a system status of the safety system is saved in a fixed memory of the control unit.

29. The method according to claim 28 wherein a reference list of the participants embodying the system status is saved.

30. The method according to claim 28 wherein at a time of re-commissioning of the safety system after the power failure the saved system status is compared by the control unit with a current system status.

31. The method according to claim 30 wherein a reference list of the participants representing the saved system status is compared with an actual list of the participants representing the current system status, and the safety system is placed in a fault mode by the control unit if, as a result of the comparison, an absence of the at least one temporary participant in the actual list is detected.

32. A safety system for an elevator system comprising: a control unit; a bus; a plurality of bus nodes connected to the control unit via the bus; a plurality of participants, of which at least one participant is designed as a temporary participant , connected to the control unit via the bus nodes; and wherein the safety system is configured to implement the steps of, A) connecting the at least one temporary participant to the safety system at one of the bus nodes; B) recognizing the temporary participant by the control unit; C) integrating the temporary participant into the safety system by the control unit; and D) activating the temporary participant at least once.

33. An elevator system having the safety system according to claim 32.

Description

DESCRIPTION OF THE DRAWINGS

[0031] The invention is described in further detail hereafter by reference to exemplary embodiments. Shown are:

[0032] FIG. 1 is a schematic view of an exemplary arrangement of an elevator system according to the invention;

[0033] FIG. 2 is an exemplary embodiment of a reference list which is implemented on the control unit of the safety system; and

[0034] FIG. 3 is a flow diagram with an exemplary sequence of a registration procedure of a temporary participant on the safety system.

DETAILED DESCRIPTION

[0035] The elevator system 1 shown schematically in FIG. 1 comprises a control unit 2, which is connected via a bus 3 to a plurality of bus nodes 41 to 49. The control unit 2 can be arranged as shown in FIG. 1 in a separate control chamber 8. In a preferred embodiment, the control unit 2 can also be arranged in a shaft 6.

[0036] Reference number 6 schematically indicates a shaft 6 of a building, in which the elevator system 1 is installed. The example building comprises three floors, wherein each floor is equipped with a shaft door 61, 62 or 63. The shaft door 61 is assigned to bus node 41, shaft door 62 to bus node 42 and the shaft door 63 to bus node 43.

[0037] Each of the respective bus nodes 41, 42 or 43 is assigned one participant, in this example a switch contact 61a, 62a, 63a, which collects information relating to the status of the assigned shaft door 61, 62 or 63 (open, closed, locked), and if appropriate can generate a fault message for the control unit 2.

[0038] The elevator system 1 is also provided with an elevator car 7. The elevator car 7 is equipped with a car door 74, which is also assigned to a bus node 44. The bus node 44 is assigned a further participant, for example a switch contact 74a, which determines information relating to the status of the assigned car door 74 (open, closed, locked) and if appropriate can generate a fault message for the control unit 2.

[0039] The elevator system 1 can also be provided with a bus node 45 and a bus node 46, to which other participants are assigned, namely in each case a safety brake 75 arranged on the elevator car 7 and an emergency switch 76. The safety brake 75 is used for a safety braking of the elevator car 7, for example when the same reaches an excess speed. By activating the emergency stop switch 76 the elevator system 1 can be brought to an immediate standstill in an emergency situation.

[0040] In a control chamber 8 a drive unit is also arranged, which is equipped with two other participants, i.e. with an emergency brake 87 and with a rotational speed sensor 88, each of which is assigned to one bus node 47 and 48. In a preferred embodiment the drive unit can be arranged in the shaft 6, wherein a separate control chamber is eliminated.

[0041] In addition, a bus node 49 is provided, which is arranged in the area of the shaft 6 and is designed to accommodate a temporary participant, namely a manual control device 89. The bus node 49 can be arranged in particular on the roof of the car 7 or in the pit of the shaft 1 or near one of the doors 61-63, depending on the location on the elevator system 1 where maintenance work is to be carried out, which require the elevator car 7 to be moved. The temporary participant 89 is thus connected via the bus node 49 to the bus 3 or the control unit 2.

[0042] In the example shown, the temporary participant 89 can be connected to the bus 3 at a plug-in slot of the corresponding bus node 49. Alternatively, the temporary participant 89 can also be wirelessly connected to bus 3, for example via a WLAN, Bluetooth or via a different type of radio connection.

[0043] The manual control device 89 is designed to control the elevator system 1 or the elevator car 7 during a maintenance mode and comprises, for example, four control elements, namely one button each for implementing a downwards or upwards directed travel, one button for triggering an emergency stop and one switch for activating or deactivating a maintenance mode.

[0044] The control unit 2 is provided with a reference list 5a, which defines a set of expectations of the control unit 2. The reference list 5a comprises e.g. a list of which of the participants 61a-63a, 74a, 75, 76, 87, 88, 89 are to be connected to the bus 3 at a given time. In addition, the control unit 2 is provided with an actual list 5b, which represents a list of all participants 61a-63a, 74a, 75, 76, 87, 88, 89 that are currently connected to the bus 3.

[0045] By reference to FIG. 2, the reference list 5a will be explained in further detail. The reference list 5a comprises one entry for each participant contained therein. This entry corresponds to one row of the table. In a first column a bus address ADD of a bus node 41 to 49 is stored, to which the respective participant 61a-63a, 74a, 75, 76, 87, 88, 89 is connected. Via the bus address ADD the control unit 2 can communicate with a bus node 41 to 49, or with a participant 61a-63a, 74a, 75, 76, 87, 88, 89 connected thereto. Accordingly the control unit 2 can address, for example, control signals to a corresponding participant, for example to the safety brake 75 via the bus address ADD, 45 or selectively query states of the switching contact 61a on the bus address ADD, 41.

[0046] In a second column a first identification number ID1 of a participant 61a-63a, 74a, 75, 76, 87, 88, 89 is stored. This first identification number ID1 is dependent on the type of the participant. Thus the participants 61a to 63b all have the same initial consecutive identification number ID1 with the value SS, since all three participants are designed as switching contacts 61a to 63a of the same type, which monitor the state of an assigned shaft door 61 to 63. A safety brake 75 by contrast has an initial identification number ID1 different from this, with the value UU.

[0047] The participants can also be identifiable via a second identification number ID2. This second identification number ID2 provides for each participant 61a-63a, 74a, 75, 76, 87, 88, 89 e.g. a number AAA to JJJ, which enables a unique identification of each participant 61a-63a, 74a, 75, 76, 87, 88, 89.

[0048] Finally, an activation value of A or I is stored in the reference list 5a for each participant, wherein the activation value A represents an active status and the activation value I an inactive status of a participant. The reference list 5a shown comprises activation values A, I for each of two different operating modes of the elevator system 1, namely for a normal operating mode N and for a maintenance mode W. Thus, for example, in the entry for the temporary participant 89, or the manual control device, an activation value A is specified for a maintenance mode W and an activation value I for a normal operating mode. The manual control device 89 is thus assigned an active status in the maintenance mode W and an inactive status in the normal operation mode N.

[0049] The temporary participant 89 is registered in the control unit 2 by in a first step A in accordance with FIG. 3 the temporary participant 89 being first connected to the bus 3 at the bus node 49. In a second step B, the control unit 2 detects the newly connected participant 89 on the basis of an identification number ID1, ID2 stored on a storage medium of the temporary participant 89. In the example shown, the first identification number ID1 indicates the type of temporary participant 89, i.e. that in this case it is a manual control device 89. The second identification number ID2 represents a unique identification number of the temporary participant 89. This means also that a plurality of manual control devices 89 can be distinguished or assigned to a maintenance engineer. Accordingly, for the entry of the manual control device 89 a plurality of second identification numbers ID2 can also be stored or alternatively, one entry each with a separate second identification number ID2 can be stored for different manual control devices 89.

[0050] In the example shown, an example of a first identification number ID1 with the value YY and a second identification number ID2 with the value III is stored for the manual control device 89. Thus if a manual control device 89 with corresponding identification numbers ID1 and ID2 is connected to the bus 3, the control unit 2 reads out the values YY and III for the identification numbers ID1 and ID2 stored on the storage medium of the temporary participant 89 and compares them with the values YY and III listed in the reference list 5a. In the event of a match the participant 89 is considered to be recognized.

[0051] Furthermore, in a third step C the manual control device 89 is then integrated into the system by the control unit 2, by the status of the manual control 89 in the entry in the reference list 5a being changed from inactive I to active A. This can be associated, for example, with an automatic change of the operating mode, namely from a normal operating mode N to a maintenance mode W. On the basis of the activation values A, I of the temporary participant that are stored in the reference list 5a, after recognizing the manual control device 89 the control unit 2 can automatically switch into the maintenance mode W. In addition, the control unit 2 can be programmed in such a way that in a fourth step D the maintenance mode W is only enabled by pressing the activation switch on the manual control device 89. After completion of the activation of the manual control device 89 this is considered to be integrated in the safety system.

[0052] The control unit 2 places the elevator system 2 in a fault mode if the activation of the temporary participant 89 after being plugged into the bus node 49 does not occur before a specified period of time has elapsed. The control unit also sets 2 the elevator system 2 in a fault mode if after the registration the temporary participant 89 is disconnected from the bus 3 without further manipulation of the safety system.

[0053] Optionally the reliability associated with the registration of the temporary participant 89 can be further increased if the temporary participant 89 is notified to the control unit 2 before the connection by means of a manipulation. The notification can be effected by inputting a control command at an input point designated for the purpose, which is either connected to the bus 3 via a bus node or else arranged directly on the control unit 2. A further possibility for notifying the connection involves the activation of a switch. This switch can also be connected to the bus 3 via a bus node or arranged directly on the control unit 2.

[0054] As a precaution, in this optional embodiment the control unit 2 can also place the elevator system 1 in a fault mode if after the manipulation the temporary participant 89 is not connected to the bus 3 before a specified period of time has elapsed. The control unit 2 can also place the elevator system 1 in a fault mode if the temporary participant 89 is connected to the bus 3 before the manipulation.

[0055] In a further embodiment it is also possible for the elevator system to be provided with a display medium. This display medium is designed to confirm the recognition or integration of the temporary participant 89. This confirmation indicates that the control unit 2 is ready for a registration of the one-off activation of the temporary participant 89. The display medium can for example be designed as a display lamp which is integrated in a corresponding bus node 41-49.

[0056] The control unit 2 is also designed to place the elevator system 1 into a fault mode if more than one temporary participant 89 with the same first identification number ID1 is connected to the bus 3. This can be used to prevent, for example, two manual control devices 89 from being simultaneously connected to the bus 3.

[0057] If the manual control device 89 has been recognized and integrated, it may realize the function assigned thereto, namely the control of the elevator system 1 during the maintenance mode W.

[0058] Also implemented on the control unit 2 is an actual list 5b of the participants 61a-63a, 74a, 75, 76, 87, 88, 89, which represents an image of the participants 61a-63a, 74a, 75, 76, 87, 88, 89 connected to the safety system 5b at a certain point in time. The actual list 5b is structured very similarly to the reference list 5a and essentially comprises the first four columns of the reference list 5a. The control unit 2 thus reads, for each available bus node 41 to 49, or their addresses ADD and the identification numbers ID1, ID2 of the participants 61a-63a, 74a, 75, 76, 87, 88, 89 connected to each bus node 41 to 49 into the actual list 5b. The operation of the elevator system 1 is only enabled by the control unit 2 if the control unit 2 finds a match during a comparison of the identification numbers ID1, ID2, in particular the identification numbers ID1, ID2 of the entries in the reference list 5a for which an active status is stored in a respective operating mode N, W, with those of the actual list 5b.

[0059] In the event of a power failure, the system status of the elevator system 1 is saved in a fixed memory of the control unit 2. In particular, the reference list 5a is saved on the fixed memory, since the reference list 5a represents such a system state. The reference list 5a contains all participants 61a-63a, 74a, 75, 76, 87, 88, 89 which should have an active status at a certain point in time.

[0060] In the event of a re-commissioning of the elevator system 1 after the power outage, the stored reference list 5a is used as a control list. In order to determine whether all temporary participants 89 present prior to the power outage are still connected to the bus 3, the stored reference list 5a is compared with the current actual list 5b after the power failure. If the control unit 2 detects the absence of a temporary participant 89 in the actual list as a result of the comparison, then the former places the elevator system 1 into a fault mode.

[0061] In accordance with the provisions of the patent statutes, the present invention has been described in what is considered to represent its preferred embodiment. However, it should be noted that the invention can be practiced otherwise than as specifically illustrated and described without departing from its spirit or scope.