METHOD FOR OPERATING AN ELEVATOR SAFETY SYSTEM WITH TEMPORARY PARTICIPANTS

Abstract

A method for operating a safety system including a control unit, a bus, a plurality of bus nodes connected to the control unit via the bus, and a plurality of participants connected to the control unit via the bus nodes, wherein at least one participant is designed as a temporary participant. The method includes the step of enabling the safety system for operation by the control unit when either a first temporary participant or a second temporary participant is connected to the bus. An elevator system can be provided with a safety system for carrying out the method.

Claims

1-12. (canceled)

13. A method for operating a safety system of an elevator system including a control unit, a bus, a plurality of bus nodes connected to the control unit via the bus, and a plurality of participants connected to the control unit via the bus nodes, wherein at least one of the participants is designed as a temporary participant, comprising the steps of: designating one of the participants as a first temporary participant; designating another one of the participants as a second temporary participant; and releasing the safety system for operation by the control unit, if either the first temporary participant or the second temporary participant is connected to the bus.

14. The method according to claim 13 including setting the safety system in a fault mode if neither the first temporary participant nor the second temporary participant is connected to the bus, or both the first temporary participant and the second temporary participant are connected to the bus.

15. The method according to claim 13 including enabling by the control unit a maintenance mode only if the first temporary participant is connected to a bus.

16. The method according to claim 15 wherein the first temporary participant is a manual control unit or an input device.

17. The method according to claim 13 enabling by the control unit a normal operation mode only if the second temporary participant is connected to the bus.

18. The method according to claim 17 wherein the second temporary participant is a governor unit.

19. The method according to claim 13 including logging on the first temporary participant or the second temporary participant in the safety system by: A) the first temporary participant or the second temporary participant being connected to the safety system via the bus; B) the first temporary participant or the second temporary participant being recognized by the control unit; and C) the first temporary participant or the second temporary participant being connected by the control unit into the safety system.

20. The method according to claim 19 wherein a target list of the participants is implemented on the control unit and contains at least data for an identification number for each of the participants, and the first temporary participant and the second temporary participant are recognized by the control unit if, upon a comparison of an identification number of the first temporary participant or the second temporary participant to the identification numbers of the target list, a match is found by the control unit.

21. The method according to claim 20 wherein the recognized first temporary participant or the recognized second temporary participant is connected by the control unit by an associated entry in the target list being set from an inactive status to an active status.

22. The method according to claim 13 wherein the first temporary participant or the second temporary participant is logged out of the safety system by: D) a disconnection of the first temporary participant or the second temporary participant being signaled by the safety system using a manipulation to the safety system; and E) the first temporary participant or the second temporary participant being disconnected from the safety system.

23. The method according to claim 22 wherein a target list of the participants is implemented on the control unit that contains at least data for an identification number for each of the participants, and the first temporary participant or the second temporary participant is logged off by the control unit by an associated entry in the target list being set from active to inactive by the control unit.

24. The method according to claim 13 wherein an actual list of the participants is implemented on the control unit that represents the participants that are connected to the safety system, and an operation of the elevator system is only enabled if, after a comparison of the active participants in a target list to the participants entered into the actual list, a match is found by the control unit.

25. A safety system for an elevator system having a control unit, a bus, a plurality of bus nodes connected to the control unit via the bus, and a plurality of participants of which at least one of the participants is designed as a temporary participant and which are connected to the control unit via the bus nodes, wherein the safety system is configured to implement the method according to claim 13.

26. An elevator system having the safety system according to claim 25.

Description

DESCRIPTION OF THE DRAWINGS

[0028] The invention is further described in the following using exemplary embodiments. Shown are:

[0029] FIG. 1 is a schematic of an exemplary arrangement of an elevator system according to the invention;

[0030] FIG. 2 is an exemplary embodiment of a target list that is implemented on the control device of the safety system;

[0031] FIG. 3 is a flow chart having an exemplary sequence of a log-on procedure of a temporary participant of the safety system; and

[0032] FIG. 4 is a flow chart having an exemplary sequence of a log-off procedure of a temporary participant of the safety system.

DETAILED DESCRIPTION

[0033] The elevator system 1 schematically illustrated in FIG. 1 includes a control unit 2 that is connected via a bus 3 to a plurality of bus nodes 41 to 50. Control unit 2 can be arranged in a separate working space 8, as shown in FIG. 1. In a preferred embodiment, control unit 2 can also be arranged in a shaft 6.

[0034] A shaft 6 of a building in which elevator system 1 is installed is schematically represented using reference character 6. The building, for example, has three floors, where each floor is equipped with a shaft door 61, 62 or 63. Shaft door 61 is assigned to bus node 41, shaft door 62 with bus node 42 and shaft door 63 with bus node 43.

[0035] Each bus node 41, 42 or 43 is assigned to one participant, here, for example, a switching contact 61a, 62a, 63a that includes information concerning the condition of the assigned shaft door 61, 62 or 63 (open, closed, locked) and, if necessary, can generate an error message for control unit 2.

[0036] Elevator system 1 also has an elevator car 7. Elevator car 7 is equipped with an elevator door 74 that also is assigned to a bus node 44. An additional participant, for example an additional switching contact 74a, is also assigned to bus node 44, which can determine information concerning the condition of the assigned elevator door 74 (open, closed, locked) and create an error message for control unit 2, if necessary.

[0037] Elevator system 1 can also have a bus node 45 and a bus node 46 that are each assigned to additional participants, namely with a safety brake 75 and an emergency switch 76 on elevator car 7. Safety brake 75 serves as a safety brake for elevator car 7, for example, if the latter reaches an excess speed. By activating the emergency switch 76, elevator system 1 can be brought to an immediate stop in an emergency situation.

[0038] In a working space 8, an additional drive unit is arranged that is equipped with two additional participants, namely with an emergency brake 87 and with a rotational speed sensor 88, each of which is assigned to a bus node 47 and 48. In a preferred embodiment, the drive unit can be arranged in shaft 6, a separate working space being omitted.

[0039] Furthermore, two bus nodes 49, 50 are provided that are arranged in the area of shaft 6 and are each configured to accommodate a first temporary participant and a second temporary participant, namely a manual control device 89a or a governor element 89b. Bus nodes 49, 50 can, in particular, be arranged on the roof of car 7 or in the cavity of shaft 6, depending upon the position of elevator system 1 at which maintenance operations are to be performed that require a movement of elevator car 7. Both temporary participants 89a, 89b are thus connected via the assigned bus nodes 49, 50 to bus 3 or control unit 2.

[0040] In the example shown, both temporary participants 89a, 89b can each be connected to the safety system at a slot of bus 3 via the corresponding bus nodes 49, 50. Alternately, both temporary participants 89a, 89b can also be connected wirelessly to bus 3, for example via a WLAN, a Bluetooth or a radio connection.

[0041] Manual control unit 89a is designed to control elevator system 1 or elevator car 7 during a maintenance mode and includes, for example, four control elements, namely a button each for implementation of an upwardly or downwardly directed trip, a button for triggering an emergency halt and, optionally, a switch for activating or deactivating a maintenance mode.

[0042] Governor element 89b is connected to bus 3 instead of manual control unit 89a, and is, for example, designed as a simple bridging element.

[0043] Control unit 2 has a target list 5a, which defines an expectation of control unit 2. Target list 5a includes, for example, a list of which of participants 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b should be connected to bus 3 at a given instant. In addition, control unit 2 has an actual list 5b that represents a list of all participants 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b currently connected to bus 3.

[0044] Target list 5a is explained in detail in reference to FIG. 2. Target list 5a includes an entry for each participant contained therein. This entry corresponds to a line in the table. In a first column is stored a bus address ADD of a bus node 41 to 50, to which a respective participant 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b is connected. Via bus address ADD, control unit 2 can communicate with a bus node 41 to 50 or to a participant 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b connected to it. Accordingly, control unit 2 can, for example, address control signals via bus address ADD, 45 to a corresponding participant, for example to safety brake 75 or query specific conditions of the switching contact 61a on bus address ADD, 41.

[0045] In a second column, a first identification number ID1 of a participant 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b is stored. This first identification number ID1 depends on the type of participant. Thus participants 61a to 63a consequently all have the same first identification number ID1 with the value SS, because all three participants are designed as equivalent switching contacts 61a to 63a, which monitor the state of one of assigned shaft doors 61 to 63. A safety brake 75, however, has a different first identification number ID1 having the value UU.

[0046] Participants 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b can also be identified via a second identification number 102. This second identification number 102 represents for each participant 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b, for example, a number AAA to JJJ that enables a unique identification of each participant 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b.

[0047] Finally, there is an activation value A or I stored in target list 5a for each participant 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b, wherein activation value A represents an active status and activation value I an inactive status for a participant 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b. Target list 5a shown has activation values A, I for each of two different operating modes of elevator system 1, namely for a normal operating mode N and for a maintenance mode W. Thus, for example, for first temporary participant 89a or the manual control unit, an activation value A is specified for a maintenance mode W and an activation value I for a normal operating mode N. Manual control device 89a is also assigned an active status in maintenance mode W and, in normal operating mode, an inactive status. Manual control device 89a is here assigned a higher priority for maintenance mode W than for normal operating mode N.

[0048] Control unit 2 issues a release for an operation of elevator system 1 if either the first temporary participant or manual control device 89a or the second temporary participant or governor element 89b is connected to bus 3 via the corresponding bus nodes 49, 50. Control unit 2 accordingly interrupts an operation of elevator system 1 if neither of the two temporary participants 89a, 89b is connected or both temporary participants 89a, 89b are simultaneously connected to bus 3.

[0049] Upon connection of manual control device 89a to bus node 49, maintenance mode W is enabled by control device 2. However, if governor element 89b is connected to bus node 50, a normal operating mode N is enabled by control unit 2. In maintenance mode W, control instructions can only be given to elevator system 1, for example, via manual control device 89a.

[0050] Depending upon which operating mode N, W elevator system 1 is in, different activation values are stored in target list 5a for participants 61a to 63a, 74a, 75, 76, 88, 87, 89a, 89b. Accordingly, depending on operating mode N, W in control unit 2, a different expectation is created corresponding to which participant must be connected to bus 3 so that an operational release for the assigned operating mode N, W takes place. Participants 61a to 63a, 74a, 75, 76, 88, 87, which are permanently connected to bus 3 are, of course, activated in both operating modes W, N. Temporary participants 89a, 89b, however, are each only activated in one of operating modes N, W, namely manual control device 89a for maintenance mode W and governor element 89b for normal operating mode N.

[0051] First temporary participant 89a is logged on to control unit 2 by temporary participant 89a being connected to bus node 49 on bus 3 in a first step A according to FIG. 3. Control unit 2 recognizes newly connected participant 89a in a second step B based on identification numbers 101, 102 stored in the memory medium of first temporary participant 89a. In the example shown, first identification number 101 shows the type for first temporary participant 89a, meaning that it is manual control device 89a. Second identification number 102 represents a unique identification number of temporary participant 89a. A plurality of manual control devices 89a can thus be differentiated or assigned to a maintenance technician. Correspondingly, a plurality of second identification numbers 102 can be stored for the entry of manual control device 89a, or alternatively, an entry with a separate second identification number 102 can be stored for each different manual control unit 89a.

[0052] In the example shown, for manual control unit 89a, for example, a first identification number 101 having the value YY and a second identification number 102 having the value III is stored. If, then, manual control unit 89a having corresponding identification numbers 101 and 102 is connected to bus 3, control unit 2 reads the stored values YY and III from the memory medium of participant 89a for identification numbers 101 and 102 and compares them to listed values YY and III in target list 5a. If there is a match, participant 89a counts as recognized. To do this, first identification number 101 can also be used alone for recognizing participant 89a.

[0053] In addition, manual control unit 89a is now connected into the system by control unit 2 in a third step C by the status of manual control unit 89a in the entry in target list 5a by set from inactive I to active A. For example, this can be done with an automatic change of operating mode, namely from a normal operating mode N to a maintenance mode W. Based on activation values A, I stored in target list 5a for the temporary participant, control unit 2 can automatically switch into maintenance mode W after recognition of manual control device 89a. Optionally, control unit 2 can also be so programmed that maintenance mode W is only enabled once the activation switch on manual control unit 89a is operated. Upon completion of activation of manual control unit 89a, it is considered to be incorporated into the safety system.

[0054] After manual control unit 89a is recognized and incorporated, manual control unit 89a can take over the functions intended for it, namely the control of elevator system 1 during maintenance mode W.

[0055] After termination of the maintenance operations, manual control unit 89a is logged off from control unit 2 by, in a further step D according to FIG. 4, a disconnection of manual control unit 89a, in particular along with bus node 49 of bus 3, being signaled to control unit 2 based on a reset of the activation switch of manual control unit 89a. After the reset of the activation switch, manual control unit 89a, in particular along with bus node 49, can finally be disconnected from bus 3 in a final step E. By resetting the activation switch, an expectation is created in control unit 2 that can be used for monitoring the log-off process of manual control device 89a.

[0056] When manual control device 89a is logged off, its entry in target list 5a by control unit 2 is set from an active status A to an inactive status I. The enabling of normal operating mode finally takes place after connection of governor element 89b to bus 3 via bus node 50. The recognition and incorporation of governor element 89b thus occurs analogous to the log-in process for manual control device 89a described above.

[0057] In addition, an actual list 5b of participants 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b is implemented on control unit 2 that represents an illustration of participants 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b connected to the safety system at a given instant. Actual list 5b is structured in a similar manner as target list 5a and includes essentially the first four columns from target list 5a. Control unit 2 thus reads for each existing bus node 41 to 50 its address ADD and the identification numbers 101, 102 of the participants 61a-63a, 74a, 75, 76, 87, 88, 89a, 89b connected to the respective bus node 41 to 50. Operation of elevator system 1 is only enabled by control unit 2 if control unit 2, upon comparison of identification numbers 101, 102, in particular identification numbers 101, 102 of the entries in target list 5a, for which an active status is stored for a particular operating mode N, W, finds a match to those in actual list 5b.

[0058] In accordance with the provisions of the patent statutes, the present invention has been described in what is considered to represent its preferred embodiment. However, it should be noted that the invention can be practiced otherwise than as specifically illustrated and described without departing from its spirit or scope.