EP1852382A1 - Aufzugsvorrichtung - Google Patents
Aufzugsvorrichtung Download PDFInfo
- Publication number
- EP1852382A1 EP1852382A1 EP05719533A EP05719533A EP1852382A1 EP 1852382 A1 EP1852382 A1 EP 1852382A1 EP 05719533 A EP05719533 A EP 05719533A EP 05719533 A EP05719533 A EP 05719533A EP 1852382 A1 EP1852382 A1 EP 1852382A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- abnormality
- car
- circuit
- safety controller
- signal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000005856 abnormality Effects 0.000 claims abstract description 230
- 238000012544 monitoring process Methods 0.000 description 127
- 238000001514 detection method Methods 0.000 description 115
- 238000012545 processing Methods 0.000 description 115
- 239000000872 buffer Substances 0.000 description 45
- 230000006870 function Effects 0.000 description 42
- 238000010586 diagram Methods 0.000 description 37
- 238000012360 testing method Methods 0.000 description 34
- 230000002159 abnormal effect Effects 0.000 description 28
- 238000003745 diagnosis Methods 0.000 description 20
- 230000008859 change Effects 0.000 description 19
- 238000007689 inspection Methods 0.000 description 19
- 238000000034 method Methods 0.000 description 15
- 230000009977 dual effect Effects 0.000 description 11
- 230000005284 excitation Effects 0.000 description 10
- 125000004122 cyclic group Chemical group 0.000 description 7
- 230000000737 periodic effect Effects 0.000 description 7
- 238000004891 communication Methods 0.000 description 6
- 230000004044 response Effects 0.000 description 6
- 238000004092 self-diagnosis Methods 0.000 description 5
- 230000006399 behavior Effects 0.000 description 4
- 230000007246 mechanism Effects 0.000 description 4
- 230000008569 process Effects 0.000 description 4
- 101100041125 Arabidopsis thaliana RST1 gene Proteins 0.000 description 3
- 101100443250 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) DIG1 gene Proteins 0.000 description 3
- 238000012937 correction Methods 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 238000013461 design Methods 0.000 description 2
- 238000011835 investigation Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000000717 retained effect Effects 0.000 description 2
- 238000010998 test method Methods 0.000 description 2
- 238000012546 transfer Methods 0.000 description 2
- 230000007704 transition Effects 0.000 description 2
- 101100443251 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) DIG2 gene Proteins 0.000 description 1
- 101100041128 Schizosaccharomyces pombe (strain 972 / ATCC 24843) rst2 gene Proteins 0.000 description 1
- 238000009825 accumulation Methods 0.000 description 1
- 230000001174 ascending effect Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 230000000295 complement effect Effects 0.000 description 1
- 230000007423 decrease Effects 0.000 description 1
- 230000003111 delayed effect Effects 0.000 description 1
- 238000012905 input function Methods 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 238000011084 recovery Methods 0.000 description 1
- 230000001960 triggered effect Effects 0.000 description 1
Images
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
- B66B5/0006—Monitoring devices or performance analysers
- B66B5/0018—Devices monitoring the operating condition of the elevator system
- B66B5/0031—Devices monitoring the operating condition of the elevator system for safety reasons
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
- B66B5/0087—Devices facilitating maintenance, repair or inspection tasks
- B66B5/0093—Testing of safety devices
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
- B66B5/02—Applications of checking, fault-correcting, or safety devices in elevators responsive to abnormal operating conditions
- B66B5/027—Applications of checking, fault-correcting, or safety devices in elevators responsive to abnormal operating conditions to permit passengers to leave an elevator car in case of failure, e.g. moving the car to a reference floor or unlocking the door
Definitions
- the present invention relates to an elevator apparatus which employs an electronic safety controller for detecting abnormality of an elevator based on a detection signal from a sensor.
- sensors or the like are connected to bus nodes provided to a hoistway, a machine room, and a car, which allows information from the sensors or the like to be sent through the bus nodes and a communication network bus to a safety controller (see, for example, Patent Document 1).
- Patent Document 1 JP 2002-538061 A
- the present invention has been devised to solve the problem as described above. It is an object of the invention to provide an elevator apparatus capable of improving the reliability of a safety system with a relatively simple structure.
- An elevator apparatus includes: an elevator control unit for controlling an operation of a car; and an electronic safety controller which detects an abnormality of an elevator and generates an instruction signal for shifting the elevator to a safe state.
- the electronic safety controller is capable of detecting an abnormality of the electronic safety controller itself.
- the electronic safety controller outputs a nearest floor stop instruction for stopping the car at a nearest floor to the elevator control unit. After a predetermined time has elapsed from the output of the nearest floor stop instruction, the electronic safety controller outputs an emergency stop instruction for performing an emergency stop of the car to the elevator control unit.
- Fig. 1 is a diagram of an elevator apparatus according to a first embodiment of the invention.
- a hoistway 1 includes a pair of car guide rails 2 and a counterweight guide rail (not shown).
- a car 3 is raised and lowered in the hoistway 1 while being guided by the car guide rails 2.
- a counterweight 4 is raised and lowered in the hoistway 1 while being guided by the counterweight guide rail.
- an emergency stop apparatus 5 that engages with the car guide rails 2 to stop the car 3 in an emergency is provided.
- the emergency stop apparatus 5 has a pair of braking pieces (wedge members) 6 that are operated by mechanical operation and pushed toward the car guide rails 2.
- a driving apparatus (traction machine) 7 that raises and lowers the car 3 and the counterweight 4 via a main rope is provided.
- the driving apparatus 7 has: a drive sheave 8; a motor unit (not shown) that rotates the drive sheave 8; a brake unit 9 that brakes the rotation of the drive sheave 8; and a motor encoder 10 that generates a detection signal according to the rotation of the drive sheave 8.
- the brake unit 9 is, for example, an electromagnetic brake apparatus.
- a spring force of a braking spring is used to push a brake shoe toward a braking surface to brake the rotation of the drive sheave 8 and an electromagnetic magnet is excited to separate the brake shoe from the braking surface to cancel the braking.
- An elevator control panel 11' is provided, for example, in a lower part of the hoistway 1.
- the elevator control panel 11 includes: an operation control unit 12 that controls the operation of the driving apparatus 7; and a safety circuit unit (relay circuit unit) 13 that suddenly stops the car 3 when the elevator has abnormality.
- the operation control unit 12 is inputted with a detection signal from the motor encoder 10. Based on the detection signal from the motor encoder 10, the operation control unit 12 calculates the position and speed of the car 3 to control the driving apparatus 7.
- a speed governor (mechanical speed governor) 14 is provided in the upper part of the hoistway 1.
- the speed governor 14 includes: a speed governor sheave 15, an overspeed detection switch 16, a rope catch 17, and a speed governor encoder 18 serving as a sensor.
- the speed governor sheave 15 is wound at a speed governor rope 19. Both ends of the speed governor rope 19 are connected to the operation mechanism of the emergency stop apparatus 5.
- the lower end of the speed governor rope 19 is wound around a tightening pulley 20 provided in the lower part of the hoistway 1.
- Overspeeds to be detected are set as a first overspeed (OS speed) that is higher than a rated speed and a second overspeed (Trip speed) that is higher than the first overspeed.
- OS speed first overspeed
- Trip speed second overspeed
- the overspeed detection switch 16 When the traveling speed of the car 3 reaches the first overspeed, the overspeed detection switch 16 is operated. When the overspeed detection switch 16 is operated, the relay circuit of the safety circuit unit 13 is opened. When the traveling speed of the car 3 reaches the second overspeed, the rope catch 17 grips the speed governor rope 19 to stop the rotation of the speed governor rope 19. When the rotation of the speed governor rope 19 is stopped, the emergency stop apparatus 5 provides a braking operation.
- the speed governor encoder 18 generates a detection signal according to the rotation of the speed governor sheave 15.
- the speed governor encoder 18 is a dual sense type encoder that simultaneously outputs two types of detection signals, i.e., first and second detection signals.
- the first and second detection signals from the speed governor encoder 18 are inputted to an ETS circuit unit 22 of an Emergency Terminal Slowdown apparatus (ETS apparatus) provided at an electronic safety controller 21.
- the ETS circuit unit 22 detects, based on a detection signal from the speed governor encoder 18, abnormality of an elevator to output an instruction signal for shifting the elevator to a safe state. In other words, the ETS circuit unit 22 calculates, based on the signal from the speed governor encoder 18, the traveling speed and a position of the car 3 independent of the operation control unit 12 and monitors whether the traveling speed of the car 3 in the vicinity of a terminal landing reaches an ETS monitoring overspeed.
- the ETS circuit unit 22 also converts the signal from the speed governor encoder 18 to a digital signal to perform a digital arithmetic processing and determine whether the traveling speed of the car 3 reaches an ETS monitoring overspeed. When the ETS circuit unit 22 determines that the traveling speed of the car 3 reaches the ETS monitoring overspeed, the relay circuit of safety circuit unit 13 is opened.
- the ETS circuit unit 22 can also detect abnormality of the ETS circuit unit 22 itself and abnormality of the speed governor encoder 18. When the ETS circuit unit 22 detects abnormality of the ETS circuit unit 22 itself or abnormality of the speed governor encoder 18, the ETS circuit unit 22 outputs a nearest floor stop instruction signal as an instruction signal for shifting the elevator to a safe state to the operation control unit 12.
- the ETS circuit unit 22 can also have an interactive communication with the operation control unit 12.
- first to fourth reference sensors 23 to 26 for detecting that the car 3 is located at a reference position in the hoistway.
- the reference sensors 23 to 26 can be top and bottom terminal landing switches. Detection signals from the reference sensors 23 to 26 are inputted to the ETS circuit unit 22. Based on the detection signals from the reference sensors 23 to 26, the ETS circuit unit 22 corrects the information for the position of the car 3 calculated in the ETS circuit unit 22.
- a car buffer 27 and a counterweight buffer 28 are respectively provided.
- the car buffer 27 and the counterweight buffer 28 are provided in the lower part in the hoistway 1.
- the car buffer 27 is provided just below the car 3 and reduces an impact caused when the car 3 collides with a bottom part of the hoistway 1.
- the counterweight buffer 28 is provided just below the counterweight 4 and reduces an impact caused when the counterweight 4 collides with a bottom part of the hoistway 1.
- These buffers 27 and 28 may be, for example, an oil-filled-type or spring-type buffer.
- Fig. 2 is a graph of overspeed patterns set in the speed governor 14 and the ETS circuit unit 22 of Fig. 1.
- the speed governor 14 is associated with first and second overspeed patterns V1 and V2 by a mechanical position adjustment.
- the ETS circuit unit 22 is associated with an ETS monitoring overspeed pattern VE.
- the ETS monitoring overspeed pattern VE is set to be higher than the normal speed pattern V0.
- the ETS monitoring overspeed pattern VE is also set to have an equal interval from the normal speed pattern V0 in the entire ascending/descending process.
- the ETS monitoring overspeed pattern VE changes according to a car position. More specifically, the ETS monitoring overspeed pattern VE is set to be fixed in the vicinity of an intermediate floor and is set to continuously and smoothly decline, in the vicinity of a terminal landing, while being closer to an end of the hoistway 1 (upper end and lower end).
- the ETS circuit unit 22 monitors the traveling speed of the car 3 not only in a position in the vicinity of a terminal landing but also in a position in the vicinity of an intermediate floor (a fixed speed traveling zone in the normal speed pattern V0). However, the ETS circuit unit 22 does not always have to monitor the traveling speed of the car 3 in a position in the vicinity of the intermediate floor.
- the first overspeed pattern V1 is set to be higher than the ETS monitoring overspeed pattern VE.
- the second overspeed pattern V2 is set to be higher than the first overspeed pattern V1.
- the first and second overspeed patterns V1 and V2 are fixed at all heights in the hoistway 1.
- the counterweight buffer 28 has a buffer stroke that is set, according to a collision speed of the counterweight 4 to the counterweight buffer 28 limited by the ETS circuit unit 22, to be shorter than a stroke specified according to a collision speed limited by the speed governor 14.
- the car buffer 27 has a buffer stroke specified according to the collision speed limited by the speed governor 14.
- the buffers 27 and 28 have a buffer stroke that is determined according to an initial speed at the time when the car 3 or the counterweight 4 first come into contact with the buffer 27 or 28 and an allowable deceleration until the car 3 or the counterweight 4 stops.
- the buffer stroke of the car buffer 27 is set to be shorter than the buffer stroke of the counterweight buffer 28.
- the buffer stroke of the counterweight buffer 28 is set to be shorter than the buffer stroke of the car buffer 27.
- the counterweight buffer 28 has a sufficient capacity so as to not to be broken even when the counterweight buffer 28 collides with the counterweight 4 at speed higher than speed specified in the ETS monitoring overspeed pattern VE (e.g., when the main rope is broken).
- the sufficient capacity of the counterweight buffer 28 may be secured, for example, by using a buffer having a capacity higher than a general capacity or by using plural buffers having a general capacity.
- a size of a clearance between the upper end part of the car 3 and the ceiling part of the hoistway 1 at the time when the car 3 reaches a top floor is set according to a collision speed of the counterweight 4 with the counterweight buffer 28 that is limited by the ETS circuit unit 22.
- the size of a clearance at the top part of the hoistway 1 is set so as to prevent, even when the counterweight 4 collides with the counterweight buffer 28, the car 3 from colliding with the ceiling part of the hoistway 1.
- Fig. 3 is a block diagram of a relation of connection among the electronic safety controller 21, the elevator control panel 11, and various sensors of Fig. 1.
- the electronic safety controller 21 is inputted with two types of detection signals from the speed governor encoder 18, that is, detection signals from the first to fourth reference sensors 23 to 26 and signals from other sensors (first to Nth sensor).
- the electronic safety controller 21 also has plural signal input ports corresponding to the respective sensors.. In other words, the electronic safety controller 21 receives separate signals from the respective sensors as inputs. Thus, the electronic safety controller 21 can detect abnormality of the respective sensors.
- a failure/abnormality content signal including content of the failure or abnormality is inputted to a control unit (not shown) of the elevator control panel 11 and a stop signal according to the content of the failure or abnormality is inputted to a driving/braking unit (not shown) of the elevator control panel 11.
- Fig. 4 is a block diagram of the apparatus configuration of the main part of the electronic safety controller 21 of Fig. 1.
- the electronic safety controller 21 includes: a first microprocessor 31 that performs arithmetic processing for detecting abnormality of the elevator based on a first safety program; and a second microprocessor 32 that performs arithmetic processing for detecting abnormality of the elevator based on a second safety program.
- the first safety program is a program that has the same content as that of the second safety program.
- the first and second microprocessors 31 and 32 can have mutual communication via an interprocessor bus and a dual port RAM 33.
- the first and second microprocessors 31 and 32 can also check the soundness of the first and second microprocessors 31 and 32 themselves by mutually comparing the results of the arithmetic processing. In other words, the soundness of the first and second microprocessors 31 and 32 is checked by causing the first and second microprocessors 31 and 32 to perform an identical processing and the processing results are communicated and compared via the dual port RAM 33 or the like.
- the microprocessors 31 and 32 can also detect abnormality of the electronic safety controller 21 by arithmetic processing.
- Fig. 5 is an explanatory diagram of a method of performing arithmetic processing by the microprocessors 31 and 32 of Fig. 4.
- the microprocessors 31 and 32 repeatedly perform arithmetic processing with a predetermined computation cycle (e.g., 50 msec) based on a signal from a fixed-cycle timer and according to a program stored in a ROM.
- a program executed in one cycle includes a safety program for detecting abnormality of an elevator and a failure/abnormality check program for detecting the failure/abnormality of the electronic safety controller 21 itself and various sensors.
- the failure/abnormality check program may be executed only when predetermined states are satisfied.
- the electronic safety controller 21 can detect abnormality of the electronic safety controller 21 itself and outputs, even when abnormality of the electronic safety controller 21 itself is detected, an instruction signal for shifting the elevator to a safe state.
- a relatively-simple structure can be used to improve the reliability of a safety system while improving speed to detect abnormality of an elevator and speed of the processing for the abnormality.
- the electronic safety controller 21 can also detect abnormality of various sensors and can output, even when abnormality of the sensor is detected, an instruction signal for shifting the elevator to a safe state.
- the safety system can have a further improved reliability.
- the electronic safety controller 21 includes first and second microprocessors 31 and 32.
- the first and second microprocessors 31 and 32 can check the soundness of the first and second microprocessors 31 and 32 themselves by mutually comparing results of the arithmetic processing.
- the safety system can have a further improved reliability.
- Fig. 6 is a block diagram of the main part of the electronic safety controller 21 of Fig. 1. To secure a sufficient reliability, the electronic safety controller 21 adopts a double circuit configuration..
- the electronic safety controller 21 uses first and second CPUs (processing units) 41 and 42 as the first and second microprocessors.
- the first CPU 41 outputs control signals to the operation control unit 12 and a first output interface (output unit) 43.
- the second CPU 42 outputs control signals to the operation control unit 12 and a second output interface (output unit) 44.
- the operation control unit 12 When receiving the control signals from the first and second CPUs 41 and 42, the operation control unit 12 is controlled by the control signals. Based on the control signals from the first and second CPUs 41 and 42, the first and second output interfaces 43 and 44 output signals for opening the safety circuit unit 13.
- the first and second CPUs 41 and 42 are connected to a dual port RAM 45 to perform data transfer between the CPUs.
- the first CPU 41 is connected to a first watchdog timer 46.
- the second CPU 42 is connected to a second watchdog timer 47.
- the first CPU 41 has two types of signals from the speed governor encoder 18 (Fig. 1) as inputs.
- the second CPU 42 has also two types of signals from the speed governor encoder 18 as inputs.
- the signals from the speed governor encoder 18 are subjected to the arithmetic processing by the CPUs 41 and 42, whereby speed and a position of the car 3 are calculated (Fig. 1).
- the speed governor encoder 18 functions both as speed sensor and a position sensor.
- the CPUs 41 and 42 have also signals from various sensors as inputs as shown in Fig. 3.
- the first CPU 41 has a first clock signal from the first clock 48 as an input.
- the second CPU 42 has a second clock signal from the second clock 49 as an input.
- the first and second clock signals are set to have an identical frequency.
- the first and second clock signals are also inputted to a clock abnormality detection circuit 50.
- the clock abnormality detection circuit 50 counts the number of pulses of the first and second clock signals to detect, based on the difference of the number of pulses, abnormalities of the first and second clock signals.
- the first and second CPUs 41 and 42 transmit, to the clock abnormality detection circuit 50, test mode signals 51 and 52 to check the soundness of the clock abnormality detection circuit 50.
- the first and second CPUs 41 and 42 also transmits, to the clock abnormality detection circuit 50, detection start instruction signals 53 and 54 to start the detection of clock abnormality.
- the clock abnormality detection circuit 50 inputs error signals 55 and 56 to the first and second CPUs 41 and 42.
- Fig. 7 is a diagram of a specific structure of the clock abnormality detection circuit 50 of Fig. 6.
- the clock abnormality detection circuit 50 includes: a first monitoring counter 57 and a first monitored counter 58 for counting pulse edges of the first clock signal; and a second monitoring counter 59 and a second monitored counter 60 for counting pulse edges of the second clock signal.
- the first clock signal is inputted to the first monitored counter 58 via a first selector 61.
- the first selector 61 can provide switching between a normal circuit and a test circuit. In the normal circuit, the first clock signal is directly inputted to the first monitored counter 58. In the test circuit, the first clock signal is multiplied in the first multiplication circuit 62 to be inputted to the first monitored counter 58. The switching to the test circuit is performed when the test mode signal 51 from the first CPU 41 is inputted to the first selector 61.
- the second clock signal is inputted to the second monitored counter 60 via the second selector 63.
- the second selector 63 can provide switching between the normal circuit and the test circuit. In the normal circuit, the second clock signal is directly inputted to the second monitored counter 60. In the test circuit, the second clock signal is multiplied by the second multiplication circuit 64 and then inputted to the second monitored counter 60. The switching to the test circuit is performed when the test mode signal 52 from the second CPU 42 is inputted to the second selector 63.
- Ripple carry output signals (i.e., error signals 55 and 56) from the first and second monitored counters 58 and 60 are latched by first and second latch units 65 and 66.
- the first and second latch units 65 and 66 cancel the latch status when the latch units receive latch cancellation signals 67 and 68 from the first and second CPUs 41 and 42.
- the CPUs 41 and 42 When error signals from the clock abnormality detection circuit 50 are inputted to the CPUs 41 and 42, the CPUs 41 and 42 output abnormality detection signals to the output interfaces 43 and 44. Then, the output interfaces 43 and 44 output operation signals to the safety circuit unit 13. The safety circuit unit 13 shifts the elevator to a safe state.
- the electronic safety controller 21 includes a computer (microcomputer) including the CPUs 41 and 42 and a ROM shown in Fig. 6.
- a signal is outputted, according to the contents of the abnormality, to the operation control unit 12 or the safety circuit unit 13 to shift the elevator to a safe state.
- the expression "shift the elevator to a safe state” means, for example, suddenly stopping the car 3 or stopping the car 3 at the nearest floor. After shifting the elevator to a safe state, the operation control unit 12 is further controlled as required.
- Shift of the elevator to a safe state is also performed when the CPUs 41 and 42 have different computation results and it is judged that any system of the CPUs 41 and 42 has abnormality.
- a control signal for permitting the traveling of the car 3 is generated and is outputted to the operation control unit 12.
- the CPUs 41 and 42 perform the computation to calculate a car speed by counting pulse signals inputted within a fixed time.
- a timer that measures the "fixed time” is generated by clock signals from the clocks 48 and 49.
- the frequency of a clock signal is very important.
- the clock signals from the first and second clocks 48 and 49 are inputted to the clock abnormality detection circuit 50 and it is monitored whether the clock signals have abnormality.
- the detection start instruction signals 53 and 54 are given with High signals. Then, the latch cancellation signals 67 and 68 are sent from the CPUs 41 and 42 to the clock abnormality detection circuit 50.
- preset data values of the respective counters 57 to 60 are loaded to the respective counters 57 to 60 to start a countup.
- the preset data values are count values at which the count by the counters 57 to 60 is started.
- Preset data values of the monitored counters 58 and 60 are set to be, for example, 0 in advance.
- threshold values for judging a clock abnormality are set in advance.
- the preset data values of the monitoring counters 57 and 59 are set to be higher than the preset data values of the monitored counters 58 and 60 (set to 4 in this example).
- the monitoring counters 57 and 59 repeatedly count the number of pulses in a range smaller than those covered by the monitored counters 58 and 60 and reset the monitored counters 57 and 59 whenever the carryover thereof is caused.
- the monitored counters 58 and 60 also try to repeatedly count the number of pulses. However, when no abnormality is caused, the carryover of the monitoring counters 57 and 59 is caused prior to the carryover of the monitored counters 58 and 60 to reset the monitored counters 58 and 60.
- the preset data values can be arbitrarily set by configuring the clock abnormality detection circuit 50 by, for example, an FPGA (field programmable gate array).
- FPGA field programmable gate array
- the monitored counters 58 and 60 are reset by the ripple carry output signals of the monitoring counters 57 and 59 at a counter value that is smaller by four than a counter value at which the carryover of the monitored counters 58 and 60 is caused and a ripple carry output signal (i.e., error signals 55 and 56) is outputted.
- a ripple carry output signal i.e., error signals 55 and 56
- the error signal 56 is similarly outputted from the second monitored counter 60 and the error signal 56 is latched by the latch unit 66.
- the stop can also be detected by the clock abnormality detection circuit 50.
- the watchdog timers 46 and 47 work to provide a forced reset to prevent a dangerous state.
- This mechanism eliminates the need to use an exclusive clock for detecting a clock abnormality and can directly use the clocks 48 and 49 used for the double CPUs 41 and 42 for detecting a clock abnormality. This makes it possible to efficiently use of hardware resource. Therefore, a simple circuit configuration can be used to improve the reliability.
- the selector 61 provides switching to the test circuit and the first clock signal is multiplied by the first multiplication circuit 62.
- the first clock signal inputted to the first monitored counter 58 is put in an abnormal state purposely.
- the first monitored counter 58 will output the error signal 55.
- the error signal 55 is received in response to the transmission of the test mode signal 51.
- the soundness of the clock abnormality detection circuit 50 can be checked.
- the soundness of the second clock 49 can also be checked.
- the electronic safety controller 21 of this example includes: the first and second processing units to doubly perform a computation for the control of the elevator; the first clock that sends the first clock signal to the first processing unit; the second clock that sends the second clock signal to the second processing unit; and the clock abnormality detection circuit that is inputted with the first and second clock signals to detect abnormality of the first and second clock signals.
- the clock abnormality detection circuit counts the number of pulses of the first and second clock signals to detect, based on the difference in the number of pulses, the abnormality of the first and second clock signals.
- the clock abnormality detection circuit has a monitored counter that counts the number of pulses of any one of the first and second clock signals and a monitoring counter that counts the number of pulses of the other of the first and second clock signals.
- a preset data value as a count value at which the counting by the monitored counter is started is set to be higher than a preset data value as a count value at which the counting by the monitoring counter is started.
- the monitoring counter includes the first monitoring counter that counts the number of pulses of the first clock signal and the second monitoring counter that counts the number of pulses of the second clock signal.
- the monitored counter includes a first monitored counter that counts the number of pulses of the first clock signal and a second monitored counter that counts the number of pulses of the second clock signal.
- the preset data value of the monitoring counter can be arbitrarily set.
- the clock abnormality detection circuit includes the multiplication circuit that multiplies the clock signal inputted to the monitored counter in the test mode.
- Fig. 8 is an explanatory diagram of separated areas of the electronic safety controller 21 of Fig. 1.
- the RAM includes a stack area that stores information required for computation by the CPU.
- the stack area stores therein, for example, a return address of a subroutine call, a return address of a timer interrupt, and an argument of a subroutine call.
- the ROM stores therein a program for monitoring a predetermined monitored area in the stack area of the RAM.
- the stack area monitoring unit has a CPU and a ROM.
- areas of COOOH to FFFFH are set as stack areas. Areas of D000H to D010H are set as monitored areas.
- a method of using a stack area is determined according to a microcomputer and is generally provided such that data is accumulated from an end address to preceding addresses in this order by a stack pointer owned by the microcomputer.
- a stack pointer owned by the microcomputer.
- an initial value of the stack pointer is FFFFH and data is accumulated to addresses in an order of FFFFH, FFFEH, FFFDH, ..., C001H, and C000H.
- monitored areas D000H to D010H are areas that are used when 75% of the stack areas is used.
- a monitored area in a position where 50% or more stack areas are used is preferable.
- a monitored area in a position where 60% or more stack areas are used is particularly preferable.
- a monitored area in a position where 90% or less stack areas are used is also preferable.
- a monitored area in a position where 80% or less stack areas are used is particularly preferable.
- Stack areas are set to be 0 in advance.
- the stack area monitoring unit monitors whether the entirety of a monitored area is 0. When the monitored area includes data other than 0, the stack area monitoring unit judges that a stack over is caused.
- Fig. 9 is a flowchart of an initial operation of the electronic safety controller 21 of Fig. 1.
- the electronic safety controller 21 is initialized.
- all interrupt computations are prohibited (step S1).
- the microcomputer is initialized (step S2) and the RAM area is set to be 0 (step S3).
- an interrupt computation becomes possible (step S4) and an interrupt is waited (step S5).
- An interrupt computation is repeatedly performed at every computation cycle time.
- Fig. 10 is a flowchart of a first example of an interrupt computation by the electronic safety controller 21 of Fig. 1.
- the interrupt computation is started, first, the state of monitored areas is checked (step S31). In other words, it is checked whether a state of the monitored areas D000H to D010H is 0000H.
- an input computation for inputting a signal required for a computation is performed (step S33).
- a car position computation for calculating a current position of the car 3 and a distance from the current position to a terminal landing (step S34), a car speed computation for calculating the speed of the car 3 based on a travel distance of the car 3 (step S35), and a judgment criterion computation for calculating a judgment criterion value for an abnormal speed according to the distance to the terminal landing (e.g., Fig. 2) (step S36) are performed.
- a safety monitoring computation is performed to detect, based on the car speed and the judgment criterion value, an abnormal car speed (step S37).
- a monitor computation for displaying a state of the elevator on a monitor is performed (step S38).
- an output computation for outputting an instruction signal required for permitting the traveling of the car 3 or suddenly stopping the car 3 is performed (step S39).
- the stack area monitoring unit monitors the state of monitored areas. When it is judged that the monitored areas have abnormality, the car 3 is suddenly stopped. Thus, an abnormal program execution due to the stack over of the RAM is prevented. This prevents damage to machines. In other words, a computation by a computer regarding an operation control can be performed more securely and the reliability can be improved.
- the stack over may be caused by abnormality of a microcomputer or a program.
- the microcomputer or the program has no abnormality, the most probable cause of the abnormality is considered to be that an interrupt computation is not completed within a computation cycle time (computation time out).
- the computation time out is generally not caused but is caused when a computation time is increased temporarily (e.g., when a great number of call buttons are operated to require a long period of time to perform a call scan computation).
- the computation time out may be caused when repeated modifications or improvements of software gradually increases the computation time.
- the stack over is caused and a stack area is used improperly and a return address from a timer interrupt may be broken.
- a return address is broken, an abnormal program execution may be caused or RAM data may be broken to make it impossible to control the elevator.
- the electronic safety controller 21 of this example can detect the stack over at an earlier stage to prevent the generation of a second failure to improve the reliability.
- the stack area monitoring unit also checks the pattern of processing information for each predetermined computation cycle. Thus, presence or absence of stack over can be always monitored to further improve the reliability.
- the car when it is judged that there is abnormality in the monitoring area, the car can be suddenly stopped to prevent the abnormality from causing more severe failure.
- the car 3 is suddenly stopped when the abnormality in the monitoring area is detected.
- a nearest floor stop instruction may be outputted to the operation control unit 12 to stop the car 3 at the nearest floor.
- passengers in the car 3 can get out of the car 3 to a landing smoothly.
- a signal for shifting the elevator to a safe state may be outputted and the state of the electronic safety controller 21 at the time may be recorded as a history (history computation).
- the history is recorded in, for example, an area other than a RAM stack area. This can prevent the generation of stack over and can use the history to investigate the reason of stack over. This can also reduce the time required to recover a failure.
- the electronic safety controller 21 in this example includes the RAM having stack areas for storing therein information required for the computation for monitoring the safety of the elevator and the stack area monitoring unit for monitoring a predetermined monitored area in the stack areas. According to the state of the monitored area detected by the stack area monitoring unit, the electronic safety controller 21 controls the operation of the elevator.
- the stack area monitoring unit also checks the state of the monitored area for each predetermined computation cycle. Furthermore, the check of the state of the monitored area is performed as a part of an interrupt arithmetic processing for monitoring the safety of the elevator.
- FIG. 11 is a flowchart of a second example of the flow of an interrupt computation by the electronic safety controller 21 of Fig. 1.
- a pattern of processing information written in the RAM is checked (step S41).
- the processing information is a value predetermined for each arithmetic processing task (functional unit) (identification value).
- the processing information is written in a table set in a predetermined area in the RAM. In this example, identification values of 1 to 7 are allocated to seven arithmetic processing and are written in corresponding TBL[0] to [6]. Values of TBL[7] to [9] are still set to be 0 because there is no corresponding arithmetic processing.
- TBL[0] to [6] and a storage pointer of the table are initialized to be 0 (step S42). Thereafter, an input computation to input a signal required for the computation (step S43), the car position computation to obtain a current position of the car and a distance from the current position to a terminal landing (step S44), the car speed computation to calculate the car speed based on the travel distance of the car (step S45), and the judgment criterion computation for obtaining a judgment criterion value for an abnormal speed according to the distance to the terminal landing (e.g., Fig. 2) (step S46) are performed.
- the safety monitoring computation is performed to detect, based on the car speed and the judgment criterion value, an abnormal car speed (step S47).
- the monitor computation to display a state of the elevator on a monitor is performed (step S48).
- an identification value is written in the corresponding table (steps S50 to S56). In other words, arithmetic processing and the writing of an identification value are performed alternately.
- the pattern of the identification values thus written is checked when the next interrupt computation is started (step S41). In other words, by checking the pattern of the identification values, it is judged whether an order of the execution of the arithmetic processing is correct.
- step S57 When abnormality is detected in the order of the execution of the arithmetic processing, the sudden stop computation to suddenly stop the car is performed (step S57). At the same time, when abnormality is detected in the order of the execution of the arithmetic processing, abnormality detection signal is also transmitted to an elevator monitoring room.
- the monitor computation is performed (step S58), the output computation for outputting an instruction signal required to suddenly stop the car is performed (step S59), and the interrupt arithmetic processing ends.
- the electronic safety controller 21 can quickly detect abnormality in an order of the execution of arithmetic processing. This allows a computation for the control of an operation by a computer to be performed more securely, thus improving the reliability.
- the electronic safety controller 21 can also detect abnormality of a program such as a self loop. In other words, the present invention can be applied to both of an operation control apparatus and a safety apparatus.
- Abnormality in an order of the execution of arithmetic processing may be caused by abnormality of a microcomputer or a program.
- the most probable cause of the abnormality in an order of the execution of arithmetic processing is considered to be that an interrupt computation is not completed within a computation cycle time (computation time out).
- the computation time out is generally not caused but is caused when a computation time is increased temporarily (e.g., when a great number of call buttons are operated to require a long period of time to perform a call scan computation).
- the computation time out may be caused when repeated modifications or improvements of software gradually increases the computation time.
- the electronic safety controller 21 can detect abnormality in an order of the execution of arithmetic processing at an earlier stage to prevent the generation of a second failure to improve the reliability.
- the electronic safety controller 21 also checks the pattern of processing information for each predetermined computation cycle. Thus, presence or absence of abnormality can be always monitored to further improve the reliability.
- the car when it is judged that there is abnormality in an order of the execution of arithmetic processing, the car can be suddenly stopped to prevent the abnormality from causing more severe failure.
- the car 3 is suddenly stopped when it is judged that there is abnormality in an order of the execution of arithmetic processing.
- a nearest floor stop instruction may be outputted to the operation control unit 12 to stop the car 3 at the nearest floor.
- passengers in the car 3 can get out of the car 3 to a landing smoothly.
- a signal for shifting the elevator to a safe state may be outputted and the state of the electronic safety controller 21 may be recorded as a history (history computation).
- pieces of processing information are allocated to all arithmetic processing.
- pieces of processing information are not always required to be allocated to all arithmetic processing.
- pieces of processing information may be allocated only to arithmetic processing for which an order of the execution is desired to be monitored.
- the electronic safety controller 21 in this example includes a controller body that has a program storage unit for storing a RAM and a program regarding a safety monitoring and a processing unit for executing plural arithmetic processing based on the program.
- the controller body writes, to the RAM, processing information corresponding to the respective arithmetic processing when arithmetic processing is executed, and monitors, based on the pattern of the processing information written in the RAM, whether an order of the execution of arithmetic processing is normal.
- Processing information is a numeric value set for each arithmetic processing.
- the control apparatus body also checks the pattern of processing information for each predetermined computation cycle. Furthermore, the writing of processing information and the check of the pattern of processing information are executed as a part of an interrupt arithmetic processing to monitor the safety of the elevator.
- Fig. 12 is a block diagram of the main part of the electronic safety controller 21 of Fig. 1.
- two types of instruction signals are outputted to the elevator control panel 11 to improve the reliability.
- a double circuit configuration is used and the first and second CPUs (processing units) 41 and 42 are used.
- the first CPU 41 outputs an instruction signal via the first output interface 43 to the elevator control panel 11.
- the second CPU 42 outputs an instruction signal via the second output interface 44 to the elevator control panel 11.
- the elevator control panel 11 shifts the elevator to a safe state.
- the first and second CPUs 41 and 42 are connected to the dual port RAM 45 to perform data transfer between the CPUs.
- the first CPU 41 is inputted with a signal from the first sensor.
- the second CPU 42 is inputted with a signal from the second sensor.
- the signals from the first and second sensors are subjected to arithmetic processing by the CPUs 41 and 42 to calculate speed and a position of the car 3.
- the first and second sensors may be, for example, the speed governor encoder 18.
- This elevator control apparatus also includes a +5-V power source voltage monitoring circuit 71 and a +3.3-V power source voltage monitoring circuit 72 for monitoring the power source voltages of the CPUs 41 and 42.
- the power source voltage monitoring circuits 71 and 72 are constituted, for example, by an IC (integrated circuit).
- the power source voltage monitoring circuits 71 and 72 monitor whether a stable power source voltage is supplied to the CPUs 41 and 42. When an abnormal power source voltage enough to deviate from a rated voltage of the CPUs 41 and 42 is caused, the CPUs 41 and 42 are forcedly reset based on the information from the power source voltage monitoring circuits 71 and 72 and the car 3 is suddenly stopped by the safety circuit unit 13 designed to have a fail-safe configuration.
- the +5-V power source voltage monitoring circuit 71 is inputted with a monitoring voltage from the first monitoring voltage input circuit 73.
- the +3.3-V power source voltage monitoring circuit 72 is inputted with a monitoring voltage from the second monitoring voltage input circuit 74.
- the power source voltage monitoring circuits 71 and 72 and the CPUs 41 and 42 are connected to a voltage monitoring soundness check function circuit 75 (hereinafter simply referred to as check function circuit 75) that monitors the soundness of the power source voltage monitoring circuits 71 and 72.
- the check function circuit 75 is constituted by a programmable gate IC such as an FPGA (field programmable gate array).
- the check function circuit 75 can also be realized by, for example, ASIC, CPLD, PLD, or a gate array.
- the power source voltage monitoring circuits 71 and 72 When an abnormal power source voltage is detected, the power source voltage monitoring circuits 71 and 72 output voltage abnormality detection signals 81 and 82 to the check function circuit 75.
- the check function circuit 75 outputs reset signals 83 and 84 to the CPUs 41 and 42.
- the check function circuit 75 is inputted with.the control signals 85 and 86 from the CPUs 41 and 42.
- the check function circuit 75 outputs monitoring-purpose input voltage forced change signals 87 and 88 to forcedly change voltage input pins of the power source voltage monitoring circuits 71 and 72 to have a low voltage.
- the monitoring-purpose input voltage forced change circuits 76 and 77 forcedly cause the voltage input pins of the power source voltage monitoring circuits 71 and 72 to have a low voltage.
- the check function circuit 75 is also connected to the first data bus 78 for the first CPU 41 and the second data bus 79 for the second CPU 42.
- a program to calculate the position and speed of the car 3 a program for judging abnormality of the elevator, a program for checking the soundness of the power source voltage monitoring circuits 71 and 72, and the like are stored in a ROM as a storage unit connected to the CPUs 41 and 42.
- Fig. 13 is a circuit diagram of an example of a specific structure of the check function circuit 75 of Fig. 12.
- the control signals 85 and 86 include selection signals 89 and 90, output permission signals 91 and 92, and chip select signals 93 and 94.
- the selection signals 89 and 90 are two bit signals for selecting the power source voltage monitoring circuit 71 or 72 for which the soundness should be checked.
- the output permission signals 91 and 92 are signals for permitting the output of the monitoring-purpose input voltage forced change signals 87 and 88 from the check function circuit 75 and latching the contents selected by the selection signals 89 and 90. In other words, the output permission signals 91 and 92 also work as a latch trigger signal.
- a voltage abnormality signal latch circuit 101 in the check function circuit 75 latches the voltage abnormality detection signals 81 and 82.
- the latch status by the voltage abnormality signal latch circuit 101 is cancelled when latch cancellation signals 95 and 96 as a part of the control signals 85 and 86 are inputted.
- the selection signals 89 and 90 are inputted to the first and second selectors 102 and 103.
- the first and second selectors 102 and 103 switch, based on the selection signals 89 and 90, the power source voltage monitoring circuits 71 and 72 for which the soundness should be checked.
- the contents selected by the selectors 102 and 103 are latched by the first and second selection contents latch circuits 104 and 105.
- the former stage of the output of the monitoring-purpose input voltage forced change signals 87 and 88 includes a change signal output buffer 106.
- the check function circuit 75 includes plural data bus output buffers 107 of the first CPU 41 and plural data bus output buffers 108 of the second CPU 42.
- Fig. 14 is an explanatory diagram of the meanings of data regarding the respective bits of the data buses 78 and 79 when the check function circuit 75 of Fig. 12 is read by the first and second CPUs 41 and 42.
- Fig. 15 is a flowchart of a method of checking the soundness of the monitoring of a power source voltage at the first CPU 41 of Fig. 12.
- the electronic safety controller 21 executes, for each computation cycle (e.g., 5 msec), an interrupt computation including arithmetic processing to monitor abnormality of the car 3, e.g., overspeed. Then, when executing a main routine of the interrupt computation, the electronic safety controller 21 judges whether the soundness check of the power source voltage monitoring circuits 71 and 72 is performed (step S11).
- the soundness check is performed at a predetermined timing. In other words, the soundness check is performed when the car 3 is stopped for a period of time longer than a predetermined time. In other words, the soundness check is performed, for example, in an off time during which the elevator is used by few users or which the elevator is out of service at night.
- the processing returns to the main routine.
- the soundness check is performed, first, the latch status of the voltage abnormality detection signals 81 and 82 as an error signal in the check function circuit 75 is cancelled.
- the electronic safety controller 21 outputs the latch cancellation signal 95 to the check function circuit 75 (step S12).
- the latch cancellation signal 95 is inputted to the voltage abnormality signal latch circuit 101 and the latch status of the voltage abnormality detection signals 81 and 82 is cancelled.
- the electronic safety controller 21 checks whether the output permission signal 91 of the first CPU 41 is High (step S13). Then, the electronic safety controller 21 requests the second CPU 42 via the dual port RAM 45 to change the output permission signal 92 to High (step S14).
- the electronic safety controller 21 outputs the select signal 89 for selecting which of the power source voltage monitoring circuits 71 and 72 for the soundness check to the check function circuit 75 and latches the circuit (step S15).
- the electronic safety controller 21 requests the second CPU 42 via the dual port RAM 45 to change the output permission signal 92 to Low (step S6).
- the electronic safety controller 21 changes the output permission signal 91 to Low (step S7).
- the check function circuit 75 the select signal 89 is latched by the selection contents latch circuit 104 in synchronization with the fall of the output permission signal 91. Then, the check function circuit 75 outputs the monitoring-purpose input voltage forced change signal 87 to the power source voltage monitoring circuit 71.
- the power source voltage monitoring circuit 71 detects an abnormal voltage and the voltage abnormality detection signal 81 is inputted to the check function circuit 75. Then, in the check function circuit 75, the voltage abnormality signal latch circuit 101 latches the voltage abnormality detection signal 81. At the same time, the CPUs 41 and 42 are inputted with the reset signals 83 and 84 from the check function circuit 75 (step S8). Consequently, the CPUs 41 and 42 are reset.
- Fig. 16 is a flowchart of an operation when the CPUs 41 and 42 are reset in the elevator control apparatus of Fig. 12. It goes without saying that the CPUs 41 and 42 may be reset not only due to the soundness check but also due to an actual abnormal power source voltage or other causes.
- the CPUs 41 and 42 When the CPUs 41 and 42 are reset, first, the CPUs 41 and 42 start software initialization processing (step S19). Next, in the initialization processing, the CPUs 41 and 42 read data of the check function circuit 75 (step S20). Then, the CPUs 41 and 42 check the status before the reset based on the latched contents to judge whether an abnormal power source voltage or a failure of the power source voltage monitoring circuits 71 and 72 is present (step S21). In other words, it is judged whether the reset is caused by the soundness check or by an actual abnormal power source voltage.
- the CPUs 41 and 42 permit the transition to the main routine (step S22).
- this section describes only the reset for the power source voltage, the reset may be triggered by the detection of another failure and the soundness check of another circuit. In this case, all abnormalities and failures are checked and then the transition to the main routine is permitted.
- the CPUs 41 and 42 output an instruction signal to the elevator control panel 11 (step S23) to shift the elevator to a safe state.
- the electronic safety controller 21 can monitor the soundness by monitoring not only an abnormal power source voltage but also a failure of the power source voltage monitoring circuits 71 and 72. Thus, the reliability of the monitoring of a power source voltage can be further improved.
- the electronic safety controller 21 does not require the double circuit configuration.
- the electronic safety controller 21 can use a simple structure and can suppress an increase in cost.
- the electronic safety controller 21 can also provide reliability equal to that provided when each power source voltage monitoring circuit has a double circuit configuration.
- the double circuit configuration using the two CPUs 41 and 42 is used and the soundness check operations by the respective CPUs 41 and 42 can be checked via the dual port RAM 45.
- failures of the check function circuit 75 and software can also be detected.
- the electronic safety controller 21 in this example includes a processing unit for performing a processing regarding a monitoring of the safety of an elevator and a power source voltage monitoring circuit for monitoring a power source voltage supplied to the processing unit.
- the electronic safety controller 21 further includes a voltage monitoring soundness check function circuit that outputs, according to a control signal from the processing unit, a monitoring-purpose input voltage forced change signal for forcedly changing the power source voltage inputted to the power source voltage monitoring circuit and that is inputted with a voltage abnormality detection signal from the power source voltage monitoring circuit.
- the voltage monitoring soundness check function circuit retains at least a part of the contents exchanged between the processing unit and the power source voltage monitoring circuit.
- the processing unit reads the data retained by the voltage monitoring soundness check function circuit to check the soundness of the power source voltage monitoring circuit.
- the processing unit also includes the first and second CPUs.
- the first and second CPUs can mutually check the soundness check operations via the dual port RAM.
- the electronic safety controller 21 further includes a monitoring-purpose input voltage forced change circuit that forcedly lowers, by inputting a monitoring-purpose input voltage forced change signal, a power source voltage inputted to the power source voltage monitoring circuit.
- the power source voltage monitoring circuit includes plural power source voltage monitoring circuits for monitoring different voltages of plural power sources.
- a control signal from the processing unit to the voltage monitoring soundness check function circuit includes a selection signal for selecting one of plural power source voltage monitoring circuits which is to be subjected to the soundness check.
- the processing unit can subject the respective power source voltage monitoring circuits to the soundness check one by one sequentially.
- the voltage monitoring soundness check function circuit can be constituted by a programmable gate IC.
- the ETS circuit unit 22 detects the position of the car 3 independent of the operation control unit 12.
- the initialization operation of the ETS circuit unit 22 (initialization operation step) is performed.
- the initialization operation of the ETS circuit unit 22 is performed.
- the operation mode of the operation control unit 12 is switched to the initialization operation mode.
- Fig. 17 is an explanatory diagram of a relation between a stage of the initialization operation of the ETS circuit unit 22 of Fig. 1 and the operations of the operation control unit 12 and the safety circuit unit 13.
- an initialization of speed detection is performed and then an initialization of position detection is performed.
- the safety circuit unit 13 puts the driving apparatus 7 in an emergency stop state. In other words, a power source of a motor of the driving apparatus 7 is blocked to bring the brake unit 9 of the driving apparatus 7 into a braking state.
- the ETS circuit unit 22 outputs an operation-prohibition instruction to the operation control unit 12.
- the safety circuit unit 13 is put in an emergency stop state and the operation control unit 12 is also in an operation-prohibited state. Thus, the monitoring by the ETS circuit unit 22 is impossible.
- the electronic safety controller 21 When the initialization of speed detection is completed, the electronic safety controller 21 outputs, to the operation control unit 12, a permission signal to permit a low-speed operation.
- the emergency stop state of the safety circuit unit 13 can also be cancelled. In this state, the ETS circuit unit 22 performs an operation for initializing position detection.
- the car 3 In the operation to initialize position detection, the car 3 is caused to travel from the lower part to the upper part of the hoistway 1 at speed equal to or lower than the allowable collision speeds of the buffers 27 and 28. Then, the ETS circuit unit 22 sets the relation between a signal from the speed governor encoder 18 and the position of the car 3 in the hoistway 1.
- the electronic safety controller 21 When the initialization operation is completed, the electronic safety controller 21 outputs, to the operation control unit 12, a permission signal for permitting a high-speed operation (rated speed operation).
- the ETS circuit unit 22 makes it possible to perform a high-speed monitoring.
- Fig. 18 is an explanatory diagram of the movement of the car 3 in the initialization operation mode of the elevator apparatus of Fig. 1.
- the floor writing start position is a position where the car 3 is lower than a bottom floor position P BOT and is higher than the car buffer 27.
- the car 3 (specifically, operation plates of reference sensors 23 to 26 provided at the car 3) is in a position lower than that of the fourth reference sensor 26.
- the hoistway 1 includes plural end point switches (not shown) for detecting the position of the bottom floor or the top floor using the operation control unit 12.. The movement of the car 3 to the floor writing start position is controlled by the operation control unit 12.
- a temporary current position P current temp of the car 3 corresponding to the signal from the speed governor encoder 18 is obtained.
- the floor writing start position is assumed as 0.
- the temporary current position is updated with every computation cycle (e.g., every 100 msec).
- the ETS circuit unit 22 includes an updown counter for counting encoder pulses of the speed governor encoder 18. Assuming that a travel distance in one computation cycle of the updown counter is GC1, the temporary current position P current temp at the Nth computation cycle is calculated by the following formula. P current temp N ⁇ P current temp N - 1 + GC ⁇ 1 In other words, the temporary current position and the travel distance in one computation cycle are calculated as the number of encoder pulses.
- the temporary current position is updated according to the ascent of the car 3.
- Positions at which the operation plates enter the reference sensors 23 to 26 and positions at which the operation plates exit from the reference sensors 23 to 26 are written in a table of a storage unit (memory) provided in the ETS circuit unit 22.
- the entering position P tmp ETSD is calculated by the following formula.
- P tmp ETSD ⁇ P current temp N - 1 + GC ⁇ 1 - GC ⁇ 2
- GC2 represents a travel distance of an updown counter after the enter to the fourth reference sensor 26.
- the exit position P tmp ETSU is calculated by the following formula.
- P tmp ETSU ⁇ P current temp N - 1 + GC ⁇ 1 - GC ⁇ 3
- GC3 represents the travel distance of the updown counter after the exit from the fourth reference sensor 26.
- the exit positions from other reference sensors 23, 24, and 25 are similarly written in the table.
- the car 3 When the writing of all entering positions and exit positions is fini-shed, the car 3 is stopped at a top floor position P TOP .
- the operation control unit 12 is associated with the data of the bottom floor position P BOT and the top floor position P TOP based on an ideal zero point.
- the data of the bottom floor position P BOT and the top floor position P TOP based on the ideal zero point is transmitted from the operation control unit 12 to the electronic safety controller 21.
- the electronic safety controller 21 converts, based on the information transmitted from the operation control unit 12, the position data calculated as the temporary current position and written in the table to data based on the ideal zero point. As a result, detection of the current position P current based on the ideal zero point is possible.
- adding the correction amount ⁇ to the position data written in the table provides position data based on the ideal zero point.
- the corrected position data is written in E 2 PROM of the electronic safety controller 21 and is subsequently used.
- the electronic safety controller 21 When this correction is completed and the position control is switched to the position control based on the current position, the electronic safety controller 21 outputs, to the operation control unit 12, an instruction for permitting a high-speed operation to permit the execution of a high-speed automatic operation (i.e., normal operation mode).
- the ETS circuit unit 22 performs a normal monitoring operation.
- the normal monitoring operation uses the following formulae for calculating, with each computation cycle, a distance L1 between the upper face of the car buffer 27 and the car and a distance L2 between the upper face of the counterweight buffer 28 and the counterweight 4.
- L ⁇ 1 P current N - P BOT - L KRB
- L ⁇ 2 P TOP - L CRB - P current N
- L KRB represents the distance between the upper face of the buffer 27 and the bottom floor positions P BOT
- L CRB represents the distance between the top floor position P TOP and the position of the car 3 at which the counterweight 4 collides with the counterweight buffer 28 (CWT collision position of Fig.18).
- the car 3 is caused to travel at a speed equal to or lower than the allowable collision speed of the car buffer 27 until the initialization operation is completed. This can more securely prevent the car 3 from colliding with the car buffer 27 at a speed exceeding the allowable collision speed, thus improving the reliability.
- the initialization operation is performed in two steps of the initialization of speed detection and the initialization of position detection
- the initialization operation may be performed in three or more steps and an allowable car traveling speed may be determined for each step.
- the initialization operation is not limited to the initialization of speed detection and the initialization of position detection.
- the elevator apparatus in this example includes the elevator control apparatus that includes an operation control unit for controlling the operation of the car and a monitoring unit (electronic safety controller 21) for detecting an abnormal traveling of the car.
- the operation control unit causes, according to a stage of the initialization, the car to travel at a speed lower than that in a normal operation.
- the monitoring unit outputs a permission signal regarding a car speed to the operation control unit according to a stage of the initialization. Furthermore, the operation control unit controls the operation of the car by selectively switching plural operation modes including a normal operation mode and an initialization operation mode for initializing the monitoring unit while causing the car to travel. In the initialization operation mode, the operation control unit causes, according to a stage of the initialization, the car to travel at a speed lower than that in a normal operation mode.
- the method of controlling the elevator apparatus in this example includes an initialization operation step to initialize the monitoring unit for detecting an abnormal traveling of the car while causing the car to travel.
- the initialization operation step causes, according to a stage of the initialization, the car to travel at a speed lower than that in a normal operation.
- Fig. 19 is a circuit diagram of an abnormal contact point detection unit of the electronic safety controller 21 of Fig. 1.
- the safety circuit unit 13 includes: a brake power source contactor coil 111 for supplying power to the brake unit 9; a motor power source contactor coil 112 for supplying power to the motor unit of the driving apparatus 7; a safety relay main contact point 113 for turning ON and OFF the application of a voltage to the contactor coils 111 and 112; and a bypass relay main contact point 114 connected in parallel to the safety relay main contact point 113.
- the brake power source contactor coil 111, the motor power source contactor coil 112, and the safety relay main contact point 113 are connected to the power source so as to be arranged in series.
- the safety relay main contact point 113 is closed in a normal operation.
- the safety relay main contact point 113 is opened.
- the bypass relay main contact point 114 is opened during a normal operation.
- the electronic safety controller 21 includes: a controller body 115; a safety relay coil 116 for operating the safety relay main contact point 113; a bypass relay coil 117 for operating the bypass relay main contact point 114; a safety relay monitor contact point 118 opened or closed while being mechanically connected to the safety relay main contact point 113; and a bypass relay monitor contact point 119 opened or closed while being mechanically connected to the bypass relay main contact point 114.
- the safety relay coil 116, the bypass relay coil 117, the safety relay monitor contact point 118, and the bypass relay monitor contact point 119 are connected to the controller body 115 so as to be arranged in parallel.
- the safety relay main contact point 113 is mechanically coupled to the safety relay monitor contact point 118 by a link mechanism (not shown). Thus, when any one of the contact points 113 and 118 cannot operate due to adhesion or the like, the other of them cannot operate either.
- the bypass relay main contact point 114 is mechanically connected to the bypass relay monitor contact point 119 by a link mechanism (not shown). Thus, when any one of the contact points 114 and 119 cannot operate due to adhesion or the like, the other of them cannot operate either.
- the controller body 115 includes: a processing unit 120; a storage unit 121; an input/output unit 122; a safety relay monitor contact point receiver circuit 123; a bypass relay monitor contact point receiver circuit 124; a safety relay driver circuit 125; and a bypass relay driver circuit 126.
- the processing unit 120 is, for example, a CPU.
- the storage unit 121 is, for example, a RAM, a ROM, and a hard disk apparatus.
- the storage unit 121 stores, for example, data for judging abnormality of the elevator or a program for performing an operation test of the safety relay main contact point 113.
- the processing unit 120 performs transmission and reception of signals with the operation control unit 12 and various sensors via the input/output unit 122.
- the safety relay monitor contact point receiver circuit 123 is serially connected to the safety relay monitor contact point 118 and detects the open/close state of the safety relay monitor contact point 118.
- the bypass relay monitor contact point receiver circuit 124 is serially connected to the bypass relay monitor contact point 119 and detects the open/close state of the bypass relay monitor contact point 119.
- the safety relay driver circuit 125 is serially connected to the safety relay coil 116 and switches between the excitation and non-excitation of the safety relay coil 116.
- the bypass relay driver circuit 126 is serially connected to the bypass relay coil 117 and switches between the excitation and non-excitation of the bypass relay coil 117.
- the switching of the excitation or non-excitation of the safety relay coil 116 is performed by outputting a safety relay instruction signal from the processing unit 120 to the safety relay driver circuit 125.
- the switching between the excitation or non-excitation of the bypass relay coil 117 is performed by outputting a bypass instruction signal from the processing unit 120 to the bypass relay driver circuit 126.
- the receiver circuits 123 and 124 and the driver circuits 125 and 126 are connected to the processing unit 120 so as to be arranged in parallel to each other.
- the controller body 115 monitors the presence or absence of abnormality of the elevator based on the information from various sensors.
- the safety relay driver circuit 125 stops the drive of the safety relay coil 116.
- Fig. 20 is a flowchart for explaining the method of testing an operation of the safety relay main contact point 113 of Fig. 19.
- the operation test is performed whenever the car 3 is stopped at a stop floor in a normal operation.
- the processing unit 120 monitors whether the traveling speed of the car 3 becomes 0 according to the information from various sensors (stop detection step S61).
- the bypass relay driver circuit 126 excites the bypass relay coil 117. Thereafter, the processing unit 120 is on standby for a predetermined time (100 ms in this example) (step S62). Then, it is checked by the bypass relay monitor contact point receiver circuit 124 whether the bypass relay monitor contact point 119 is closed (step S63).
- the processing unit 120 determines a failure of the bypass relay and the controller body 115 outputs abnormality detection signal to the operation control unit 12 (step S64).
- the safety relay driver circuit 125 excites the safety relay coil 116. Thereafter, by the bypass relay monitor contact point receiver circuit 124 is on standby for a predetermined time (100 ms in this example) (test instruction step S65). Then, whether the safety relay monitor contact point 118 is opened is checked by the safety relay monitor contact point receiver circuit 123 (abnormality detection step S66).
- the processing unit 120 determines a failure of the safety relay and the controller body 115 outputs abnormality detection signal to the operation control unit 12 (step S64).
- the safety relay coil 116 is now brought into a non-excitation state. Thereafter, by the bypass relay monitor contact point receiver circuit 124 is on standby for a predetermined time (100 ms in this example) (step S67). Then, it is checked by the safety relay monitor contact point receiver circuit 123 whether the safety relay monitor contact point 118 is closed (step S68).
- the processing unit 120 judged that a failure of the safety relay has occurred, and the controller body 115 outputs an abnormality detection signal to the operation control unit 12 (step S64).
- step S69 When it is checked that the safety relay monitor contact point 118 is correctly closed, the bypass relay coil 117 is brought into a non-excitation state. Thereafter, the processing unit 120 is on standby for a predetermined time (100 ms in this example) (step S69). Then, it is checked by the bypass relay monitor contact point receiver circuit 124 whether the bypass relay monitor contact point 119 is opened (step S70).
- the processing unit 120 determines a failure of the bypass relay and the controller body 115 outputs abnormality detection signal to the operation control unit 12 (step S64).
- the processing unit 120 is on standby until the traveling speed of the car 3 increases to be equal to or higher than a predetermined set value (step S71).
- the ETS circuit unit 22 monitors the traveling speed until the car 3 stops. Then, whenever the car 3 stops, the operation test is carried out to check the soundness of the safety circuit unit 13.
- timing at which the car stops in a normal operation is used to perform an operation test of the safety relay main contact point 113.
- abnormality of the safety relay main contact point 113 can be detected without causing hindrance in the normal operation and the reliability can be improved.
- the operation test is carried out whenever the car stops, thereby making it possible to check the operation of the relay main contact point 113 with a sufficient frequency and further improve the reliability.
- bypass relay main contact point 114 is closed when the operation test of the safety relay main contact point 113 is performed, it is possible to prevent the conduction to the safety circuit unit 13 from being blocked during the operation test. Thus, it is possible to carry out the operation test while maintaining the safety circuit unit 13.
- the brake unit 9 provides a braking operation when the safety relay main contact point 113 is opened.
- the brake unit may provide a braking operation when the safety relay main contact point is closed. In this case, the operation test of a safety relay main contact point can also be carried out.
- the safety relay main contact point for operating the brake unit 9 provided at the driving apparatus 7 is described.
- the safety relay main contact point can also be applied to operate, for example, a rope brake to brake the car by gripping the main rope and a safety relay main contact point to operate an emergency stop apparatus provided at a counterweight.
- the operation test is performed every time the car 3 stops.
- timing at which the operation test is performed is not limited to this.
- a counter for counting the number of stops of the car may be provided in the detection circuit body such that the operation test is performed at every number of stops set in advance.
- the detection circuit body may include a timer such that the operation test is performed at the first stop of the car after the elapse of a predetermined time.
- the operation test may be performed only when the normal operation of the elevator is started (at the starting).
- the operation test may be performed only when the car stops at a predetermined floor.
- the electronic safety controller 21 in this example generates, when the car stops during the normal operation, a safety relay instruction signal to operate the safety relay main contact point in a direction along which the brake unit provides a braking operation.
- the electronic safety controller 21 also detects whether the safety relay main contact point has operated according to the safety relay instruction signal.
- the electronic safety controller 21 also includes the safety relay monitor contact point that is opened and closed while being mechanically linked with the safety relay main contact point. Based on the state of the safety relay monitor contact point, the electronic safety controller 21 detects the state of the safety relay main contact point. Furthermore, the safety relay main contact point is closed during the normal operation, and is opened when the elevator has abnormality. The bypass relay main contact point connected in parallel with the safety relay main contact point and opened during the normal operation is provided in the safety circuit. The electronic safety controller 21 generates, prior to the generation of a safety relay instruction signal, a bypass instruction signal to close the bypass relay main contact point.
- the electronic safety controller 21 includes the bypass relay monitor contact point that is opened and closed while being mechanically linked with the bypass relay main contact point. Based on the state of the bypass relay monitor contact point, the electronic safety controller 21 detects the state of the bypass relay main contact point. The electronic safety controller 21 also detects whether the bypass relay main contact point has operated according to the bypass instruction signal. Furthermore, when abnormality of the safety relay main contact point is detected, the electronic safety controller 21 outputs abnormality detection signal to the operation control unit.
- Fig. 21 is a block diagram of the electronic safety controller 21 of Fig. 1 connected to a history information recording unit and a soundness diagnosis unit.
- the electronic safety controller 21 is connected to a history information recording unit 131 for recording the history of information regarding a judgment processing in the electronic' safety controller 21 (processing process).
- the history information recording unit 131 is a nonvolatile memory that continues to retain the information even when the power source of the elevator control apparatus is cut off.
- the memory includes, for example, a flush memory or a hard disk device.
- the electronic safety controller 21 and the history information recording unit 131 are connected to a soundness diagnosis unit 132 for automatically diagnosing the soundness of the electronic safety controller 21.
- the soundness diagnosis unit 132 can also diagnose the soundness of the entirety of a system such as various sensors or the safety circuit unit 13. The result of the diagnosis by the soundness diagnosis unit 132 is recorded in the history information recording unit 131.
- Fig. 22 is an explanatory diagram of an example of information stored in the history information recording unit 131 of Fig. 21.
- History information includes time, a car position, a car speed, a set value (threshold value) calculated according to a car position, a judgment result, and analysis data such as an internal variable.
- the history information recording unit 131 accumulates combinations of data such as data of car positions, data of car speeds, data of set values, data of judgment results, and analysis data that are divided for each corresponding time.
- a data table as shown in Fig. 22 is prepared.
- Fig. 23 is a flowchart for explaining an operation of the electronic safety controller 21 of Fig. 21.
- data of the current time is outputted to the history information recording unit 131 (step S81).
- the position of the car is detected (step S82).
- the detected car position data is outputted to the history information recording unit 131 (step S83).
- the speed of the car 3 is detected (step S84).
- the detected car position data is outputted to the history information recording unit 131 (step S85)
- a set value corresponding to the car position is calculated (step S86).
- the data of the set value is outputted to the history information recording unit 131 (step S87).
- a detected speed "v” is compared with a set value "f (x) " (step S88).
- the judgment result is "no abnormality” (Good) and is outputted to the history information recording unit 131 (step S89).
- this operation is repeated with every computation cycle.
- a stop instruction signal is outputted to the safety circuit unit 13 (step S90).
- the judgment result is "abnormality found (Bad) " and is outputted to the history information recording unit 131 (step S91).
- the history information recording unit 131 sequentially stores the data sent from the electronic safety controller 21.
- this elevator apparatus when the car 3 is suddenly stopped according to an instruction from the electronic safety controller 21, it is possible to check the soundness of the electronic safety controller 21 by checking the history recorded in the history information recording unit 13. When the car 3 is suddenly stopped in spite of a judgment result of "no abnormality", it can be judged that the elevator control panel 11 has a failure.
- the history information can be checked to obtain a part of an inspection result, thereby making it possible to simplify the inspection operation. Simply by checking the calculation result of set values and the comparison and judgment results stored in the history information recording unit 131, it is possible to complete a part of the periodic inspection, thereby reducing the number of inspection items.
- the set value set by the electronic safety controller 21 is set with a margin taking into account vibration of the car due to mischief.
- the range of the margin can also be adjusted for each elevator.
- the result of the diagnosis of the soundness of a system can be checked by the history information recording unit 131.
- the electronic element that has caused the failure can be identified efficiently.
- diagnosis results recorded in the history information recording unit 131 and the compiled results thereof can be checked to thereby reduce the number of inspection items of a periodic inspection. Items to be checked in a periodic inspection are as follows.
- an electronic element e.g., CPU, ROM, RAM
- the diagnosis result recorded in the history information recording unit 131 can be checked.
- an inspection of the electronic element in a periodic inspection can be omitted.
- inspection histories to be recorded include, for example, time at which the inspection is carried out and inspection items.
- the history information recording unit 131 and the soundness diagnosis unit 132 are provided outside the electronic safety controller 21. However, at least one of the history information recording unit 131 and the soundness diagnosis unit 132 may be provided in the electronic safety controller 21.
- information of the history of the monitoring of an abnormal speed is recorded.
- information on the history of rope-cut monitoring for monitoring damages to or cut of a main rope may be recorded.
- information of the history of the temperature of a motor of a traction machine, the temperature of an inverter, or the temperature of a control panel may be recorded.
- the elevator apparatus in this example includes: the abnormality monitoring unit (electronic safety controller 21) that judges, based on information from a sensor, presence or absence of abnormality of the elevator to output a signal for stopping the car when abnormality is detected; and the history information recording unit that records the history of information regarding the judgment processing in the abnormality monitoring unit.
- the abnormality monitoring unit electronic safety controller 21
- the history information recording unit that records the history of information regarding the judgment processing in the abnormality monitoring unit.
- Fig. 24 is a block diagram of the main part of the electronic safety controller 21 of Fig. 1.
- the electronic safety controller 21 has: a memory data abnormality check circuit 141 for checking abnormality of memory data; a CPU 142; and a designated address detection circuit 143 for checking abnormality of an address bus.
- the memory data abnormality check circuit 141 has: a main memory 141a and a sub memory 141b (RAM) having a parallel configuration in which the main memory 141a and the sub memory 141b are allocated to the same address space in a superimposed manner; a data buffer 141c for preventing the collision with output data of the sub memory 141b; and a data comparison circuit 141d for comparing the respective pieces of data of the main memory 141a and the sub memory 141b to thereby check abnormality of the data.
- RAM sub memory 141b
- the memory data abnormality check circuit 141 also has an error-correcting code check circuit as in the case of a conventional system.
- the CPU 142 has: designated address output software 142a for outputting a designated address during a data abnormality check; data bus abnormality check software 142b executed during a data bus abnormality check; and a ROM for storing a program (not shown).
- the main memory 141a and the sub memory 141b are connected to the CPU 142 via an address bus BA and a data bus BD, respectively.
- Data of the electronic safety controller 21 is written in the main memory 141a and the sub memory 141b from the CPU 142, and the data are read from the main memory 141a and the sub memory 141b by the CPU 142.
- the data bus BD branches into a main memory data bus BD1 and a sub memory data bus BD2.
- the main memory 141a and the sub memory 141b are connected to the data comparison circuit 141d via the main memory data bus BD1 and the sub memory data bus BD2, respectively.
- the data buffer 141c is interposed at the sub memory data bus BD2.
- the data comparison circuit 141d compares the respective pieces of memory data inputted.via the main memory data bus BD1 and the sub memory data bus BD2, respectively. When it is judged that the memory data has abnormality, the data comparison circuit 141d outputs a data abnormality signal ED.
- the designated address detection circuit 143 is connected to the CPU 142 via the address bus BA. When abnormality of the address bus BA is checked, the designated address detection circuit 143 detects a designated address and, when it is judged that the address bus BA has abnormality, outputs an address bus abnormality signal EBA.
- the designated address output software 142a in the CPU 142 operates when abnormality of the address bus BA is checked, and outputs, as described later, a designated address to the designated address detection circuit 143 in a cyclic manner.
- the data bus abnormality check software 142b in the CPU 142 operates when abnormality in the data bus BD is checked and, when it is judged that the data bus BD has abnormality, outputs a data bus abnormality signal EBD.
- Fig. 25 specifically shows the data comparison circuit 141d for the data abnormality check of Fig. 24.
- Fig. 25 shows a case in which the data comparison circuit 141d includes plural exclusive OR gates 151, an AND gate 152, and a D-type latch circuit 153 that uses a memory read signal RD.
- the data comparison circuit 141d has: the exclusive OR gates 151 provided in parallel; the AND gate 152 to calculate a logical product of the respective output signals of the exclusive OR gates 51; and the D-type latch circuit 153 to use the output signal of the AND gate 152 as a D terminal input to output a H (logic "1") level signal as the data abnormality signal ED.
- Each of the exclusive OR gates 151 receives data from the main memory data bus BD1 as an input signal from one side, and also receives the data from the sub memory data bus BD2 as an input signal from the other side. When those input signals are identical, the respective exclusive OR gates 151 output L (logic "0") level signals and, when those input signals are not identical, output H (logic "1") level signals.
- the AND gate 152 accepts inversion signals of output signals from the respective exclusive OR gates 151 to output, when the respective input signals are all at H level (i.e., output signals of the exclusive OR gates 151 are all at L level), the H (logic "1") level signal.
- the D-type latch circuit 153 operates in response to the memory read signal RD and changes the level of the output signal (data abnormality signal ED) in response to the D terminal input (output signal of AND gate 152) and is reset to the initial state in response to a reset signal RST.
- Fig. 26 is a specific illustration of the designated address detection circuit 143 for the address bus abnormality check of Fig. 24.
- the designated address detection.circuit 143 has: plural exclusive OR gates 161 that receive the H level signal as one input signal; plural exclusive OR gates 162 that receive the L level signal as the other input signal; a NAND gate 163 that calculates a logical product of the respective output signals of the exclusive OR gates 161 and an address strobe signal STR; a NAND gate 164 that calculates a logical product of the respective output signals of the exclusive OR gate 162 and an address strobe signal STR; a D-type latch circuit 165 for providing the output signal of the NAND gate 163 as an input signal of a set terminal; a D-type latch circuit 166 for providing the output signal of the NAND gate 164 as an input signal of a set terminal; an AND gate 167 that calculates a logical product of the respective output signals of the D-type latch circuits 165 and 166; a D-type latch circuit 168 that operates in response to a reset signal RST1 of the designated address detection circuit 143; a D-type latch
- the other input terminals of the exclusive OR gates 161 and 162 provided in parallel are inputted with designated addresses via the address bus BA, respectively.
- each of the exclusive OR gates 161 When a designated address of the H level signal is inputted from the address bus BA, each of the exclusive OR gates 161 outputs the L level signal. When a designated address of the L level signal is inputted, each of the exclusive OR gates 161 outputs the H level signal.
- each of the exclusive OR gates 162 outputs the H level signal.
- each of the exclusive OR gates 162 outputs the L level signal.
- An output signal from each of the exclusive OR gates 161 is level-inverted together with the address strobe signal STR and is inputted to the NAND gate 163.
- an output signal from each of the exclusive OR gates 162 is level-inverted together with the address strobe signal STR and is inputted to the NAND gate 164.
- the NAND gates 163 and 164 output H level signals with a fixed cycle and in a complementary manner such that the NAND gates 163 and 164 are in synchronization with the address strobe signal STR.
- the D input terminal is applied with the L level signal, and the D-type latch circuit 168 is operated by the first reset signal RST1.
- An output signal of the D-type latch circuit 168 is applied to the respective reset terminals of the D-type latch circuits 165 and 166.
- the D input terminal is applied with a 0 bit signal BTO of the data bus BD ("0" at mask ON and "1" at mask OFF) and the D-type latch circuit 169 is operated by the mask signal MSK.
- the respective D-type latch circuits 168 and 169 are reset by the second reset signal RST2, respectively.
- the OR gate 170 When the output signal of the AND gate 167 or the output signal of the D-type latch circuit 169 show the H level, the OR gate 170 outputs an address bus abnormality signal EBA.
- Fig. 27 is a flowchart of the processing operation by the designated address output software 142a and the designated address detection circuit 143 in the CPU 142 of Fig. 24.
- Fig. 27 shows an operation procedure when a designated address is outputted to the designated address detection circuit 143 to check abnormality of the address bus BA.
- Fig. 28 is a flowchart of the processing operation by the data bus abnormality check software 142b in the CPU 142 of Fig. 24.
- the main memory 141a and the sub memory 141b are allocated with the same address space in a superimposed manner.
- the CPU 142 writes data to the main memory 141a and the sub memory 141b, the same data is written in the same address of the main memory 141a and the sub memory 141b, respectively.
- the CPU 142 reads data from the main memory 141a and the sub memory 141b
- the data of the main memory 141a is read onto the main memory data bus BD1 and is sent to the CPU 142 via the data bus BD.
- the data of the sub memory 141b is read onto the sub memory data bus BD2 but is blocked by the data buffer 141c and thus is not sent to the data bus BD.
- the main memory data read onto the main memory data bus BD1 and the sub memory data read onto the sub memory data bus BD2 are inputted to the data comparison circuit 141d and the comparison between the former and the latter is performed.
- the data comparison circuit 141d checks abnormality of the data and, when abnormality (data inconsistency) is detected, outputs the data abnormality signal ED.
- the CPU 142 executes the designated address output software 142a using designated addresses for check with which both cases of "0" and “1” can be checked (e.g., "FF" and "00” in the case of 8 bits) to repeatedly perform the processing of Fig. 27 (steps S101 to S104) in a cyclic manner.
- the designated address detection circuit 143 provided on the address bus BA is caused to detect the designated address.
- the designated address detection circuit 143 judges that the address bus BA has abnormality to output the address bus abnormality signal EBA.
- the first reset signal RST1 is used to reset the designated address detection circuit 143 (step S102) to operate the D-type latch circuit 168.
- stepS103 the maximum address "FFFF" at which all addresses are "1” (or the minimum address at which all addresses are "0") is read (stepS103).
- step S104 the mask of the designated address detection circuit 143 is turned OFF (step S104).
- the CPU 142 judges that the data bus BD has abnormality to output the data bus abnormality signal EBD.
- the CPU 142 reads the specified data written in step S12 from the test address (step S107) to judge whether the data is consistent with specified data before being written (step S108).
- step S108 When, it is judged in step S108 that the specified data after being read is inconsistent with the specified data before being written (i.e., NO), the CPU 142 assumes that the data bus BD has abnormality to output the data bus abnormality signal EBD (step S109) to cause an abnormal end.
- step S108 judges that the specified after being read is consistent with the specified data before being written (i.e., YES)
- the variable N is incremented (step S110) and it is judged whether the variable N is "8" or less (step S111).
- step S111 determines N ⁇ 8 (i.e., YES)
- the processing returns to the processing to write specified data (step S106) to repeatedly perform steps S107 to S110.
- step S107 After the respective pieces of data are read (step S107), consistency or inconsistency is judged (step S108).
- step S111 determines N>9 (i.e., NO)
- the abnormality check is particularly effective to check the soundness of a memory system in the elevator electronic safety apparatus.
- the electronic safety controller 21 in this example includes: the CPU having the designated address output software and the data bus abnormality check software; the main memory and the sub memory connected to the CPU via the address bus and the data bus; the memory data abnormality check circuit that compares the data of the main memory with that of the sub memory; and the designated address detection circuit connected to the CPU via the address bus.
- the CPU executes the designated address output software and uses the designated address detection circuit to check abnormality of the address bus in a cyclic manner.
- the CPU executes the data bus abnormality check software and uses the main memory and the sub memory to check abnormality of the data bus in a cyclic manner.
- the CPU executes the designated address output software to output, with regards to all of the respective bit signals used for the main memory and the sub memory in an address bus designated addresses for check with which both cases of "0" and "1" can be checked to the designated address detection circuit. Then, the designated address detection circuit detects plural designated addresses outputted from the CPU in a cyclic manner and, when the CPU cannot detect all of the designated addresses, the CPU judges that abnormality of the address bus has occurred and outputs an address bus abnormality signal.
- the CPU executes the data bus abnormality check software to input and output, with regards to all of the bit signals used for the main memory and the sub memory in the data bus, designated addresses for check with which both cases of "0" and "1" can be checked to once write plural pieces of specified data cyclically outputted from the CPU in the main memory and the sub memory and subsequently read and compare the pieces of specified data.
- the CPU determines that abnormality of the data bus has occurred and outputs a data bus abnormality signal.
- Fig. 29 is a flowchart of an operation of the electronic safety controller 21 and an elevator control unit 11 at a time when a nearest floor stop instruction of Fig. 1 is generated.
- an abnormality, with which the car should be stopped at the nearest floor such as a failure of the electronic safety controller 21 itself is detected by the electronic safety controller 21 (step S121), and then the nearest floor stop instruction signal is outputted from the electronic safety controller 21 to the operation control unit 12 of the elevator control unit 11 (step 5122).
- the operation control unit 12 performs a processing for stopping the car at the nearest floor (step S123).
- a built-in emergency stop timer is started to initiate counting by using the emergency stop timer (step S124). After a predetermined time (sufficient time for completing the nearest floor stop) has elapsed, the emergency stop timer indicates that the time is up. When the emergency stop timer indicates that the time is up, the electronic safety controller 21 outputs the emergency stop instruction to the safety circuit unit 13 of the elevator control unit 11 (step S125). As a result, the elevator control unit 11 performs an emergency stop operation (step S126).
- Fig. 30 is a circuit diagram of the main part of each of the electronic safety controller 21 and the elevator control unit 11 of Fig. 1.
- the electronic safety controller 21 is provided with an emergency stop timer circuit unit 171 serving as the emergency stop timer.
- the emergency stop timer circuit unit 171 is composed of a hardware circuit independent of a software program in the electronic safety controller 21.
- An instruction from a nearest floor stop output port 172 is simultaneously inputted to a first transistor 173 and the emergency stop timer circuit unit 171.
- a first relay unit 174 is turned off, and the nearest floor stop instruction signal is inputted to the operation control unit 12.
- the emergency stop timer circuit unit 171 When the nearest floor stop instruction is inputted to the emergency stop timer circuit unit 171, counting is started. When the counting in the emergency stop timer circuit unit 171 is ended, or when the emergency stop instruction is outputted from an emergency stop output port 175, a second transistor 176 is turned off, and then a second relay unit 177 is turned off. Then the emergency stop instruction is inputted to the safety circuit unit 13, that is, the safety circuit unit 13 is stopped. As a result, a drive power source contactor and the brake power source contactor of the driving apparatus 7 are turned off, thereby performing the emergency stop of the car.
- the elevator apparatus even if the nearest floor stop cannot be normally performed by the elevator control unit 11, it is possible to prevent the car from being kept to be operated while the abnormality is detected by the electronic safety controller 21. Further, when the failure of the electronic safety controller 21 is detected, the emergency stop is not immediately performed and the nearest floor stop is performed if the elevator control unit 11 is in a normal state, so the passengers are not trapped in the car due to the failure of the electronic safety controller 21.
- the soundness check for the emergency stop timer circuit unit 171 be periodically and automatically performed. It suffices that the soundness check for the emergency stop timer circuit unit 171 be performed, for example, once a day, that is, when the elevator is brought into an automatic light-off mode because the car call is not registered for a predetermined period of time.
- a signal indicating permission to undergo the soundness check is inputted from the elevator control unit 11 to the electronic safety controller 12.
- a signal indicating start of the check is inputted and then the nearest floor stop instruction is inputted from the electronic safety controller 12 to the elevator control unit 11. After that, a signal indicating good/bad of check results are returned from the elevator control unit 11 to the electronic safety controller 21.
- the emergency stop timer circuit unit 171 is recovered through hardware reset, and the second relay unit 177 is turned on.
Landscapes
- Maintenance And Inspection Apparatuses For Elevators (AREA)
- Indicating And Signalling Devices For Elevators (AREA)
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/JP2005/003132 WO2006090470A1 (ja) | 2005-02-25 | 2005-02-25 | エレベータ装置 |
Publications (3)
Publication Number | Publication Date |
---|---|
EP1852382A1 true EP1852382A1 (de) | 2007-11-07 |
EP1852382A4 EP1852382A4 (de) | 2013-01-30 |
EP1852382B1 EP1852382B1 (de) | 2015-12-30 |
Family
ID=36927121
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP05719533.1A Active EP1852382B1 (de) | 2005-02-25 | 2005-02-25 | Aufzugsvorrichtung |
Country Status (4)
Country | Link |
---|---|
EP (1) | EP1852382B1 (de) |
JP (1) | JP4757863B2 (de) |
CN (1) | CN100542927C (de) |
WO (1) | WO2006090470A1 (de) |
Cited By (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP2336073A1 (de) * | 2009-12-18 | 2011-06-22 | Inventio AG | Schaltvorrichtung für Beförderungsanlage |
WO2012072859A1 (en) * | 2010-12-01 | 2012-06-07 | Kone Corporation | Safety circuit of an elevator, and method for identifying a functional nonconformance of a safety circuit of an elevator |
ES2538418A1 (es) * | 2013-12-19 | 2015-06-19 | Orona, S. Coop. | Sistema de control de seguridad de un ascensor, escalera mecánica o ánden móvil |
EP2726391A4 (de) * | 2011-06-30 | 2016-07-20 | Tyco Fire & Security Gmbh | Verbesserte aufzugschnittstelle |
US9448273B2 (en) | 2010-12-14 | 2016-09-20 | Kone Corporation | Interface unit, conveying system and method |
EP3178768A1 (de) * | 2015-12-07 | 2017-06-14 | Kone Corporation | Antriebsvorrichtung |
EP2514703A4 (de) * | 2009-12-15 | 2017-09-13 | Mitsubishi Electric Corporation | Aufzugsvorrichtung |
EP1997764B1 (de) | 2006-03-17 | 2018-02-28 | Mitsubishi Electric Corporation | Aufzugsvorrichtung |
WO2018059945A1 (en) * | 2016-09-29 | 2018-04-05 | Inventio Ag | Elevator safety supervising entity with two units having an option for e.g. autonomous passenger evacuation |
DE112015005972B4 (de) | 2015-01-16 | 2021-12-02 | Mitsubishi Electric Corporation | Aufzugsicherheits-steuervorrichtung und aufzugsicherheits-sicherheits-steuerverfahren |
EP4112525A1 (de) * | 2021-06-30 | 2023-01-04 | Otis Elevator Company | Aufzugssicherheitssystem, aufzugsystem und aufzugssicherheitssteuerungsverfahren |
EP4121383B1 (de) * | 2020-03-19 | 2023-10-04 | Elgo Batscale AG | Steuereinheit für eine aufzugsanlage |
Families Citing this family (26)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR101034926B1 (ko) | 2007-06-14 | 2011-05-17 | 미쓰비시덴키 가부시키가이샤 | 엘리베이터 장치 |
EP2289832B1 (de) * | 2008-06-27 | 2018-10-31 | Mitsubishi Electric Corporation | Aufzugsvorrichtung und betriebsverfahren dafür |
US8887873B2 (en) | 2009-06-29 | 2014-11-18 | Mitsubishi Electric Corporation | Elevator device |
JP5222833B2 (ja) * | 2009-12-11 | 2013-06-26 | 株式会社日立製作所 | 電子安全エレベータ |
WO2011111223A1 (ja) | 2010-03-12 | 2011-09-15 | 三菱電機株式会社 | エレベータ安全制御装置 |
JP5422488B2 (ja) * | 2010-05-31 | 2014-02-19 | 株式会社日立製作所 | 安全エレベータ |
JP5624845B2 (ja) * | 2010-10-14 | 2014-11-12 | 株式会社日立製作所 | 電子安全エレベータ |
JP5773893B2 (ja) * | 2012-01-10 | 2015-09-02 | 東芝エレベータ株式会社 | 乗客コンベアの安全装置及び安全システム |
JP2013241225A (ja) * | 2012-05-17 | 2013-12-05 | Mitsubishi Electric Corp | 乗客コンベアの制御装置および乗客コンベアの制御方法 |
DE112012006843T5 (de) | 2012-08-24 | 2015-05-21 | Mitsubishi Electric Corporation | Fahrzeugkommunikationssystem und Fahrzeugkommunikationsverfahren |
JP5783993B2 (ja) * | 2012-12-19 | 2015-09-24 | 株式会社日立製作所 | 電子安全エレベータ |
US20150355917A1 (en) * | 2013-03-01 | 2015-12-10 | Mitsubishi Electric Corporation | Data processing apparatus and communication system |
JP6317077B2 (ja) * | 2013-07-05 | 2018-04-25 | 株式会社日立製作所 | エレベーターの安全システム |
TWI530954B (zh) * | 2013-11-22 | 2016-04-21 | 新唐科技股份有限公司 | 保護非揮發性記憶體中儲存之程式碼的裝置 |
CN105813970B (zh) * | 2013-12-12 | 2019-04-12 | 奥的斯电梯公司 | 用于在驱动***中使用的安全*** |
JP6515068B2 (ja) * | 2016-07-14 | 2019-05-15 | 日立オートモティブシステムズ株式会社 | 電動モータの制御診断システム及び制御診断方法 |
CN109476450B (zh) * | 2016-07-29 | 2020-07-07 | 三菱电机株式会社 | 电梯的控制装置 |
ES2882042T3 (es) | 2018-03-16 | 2021-12-01 | Otis Elevator Co | Operación de rescate automático en un sistema de ascensor |
CN108750844B (zh) * | 2018-05-21 | 2020-06-26 | 日立楼宇技术(广州)有限公司 | 召梯类型识别方法和***、识别设备、可读存储介质 |
EP3656718A1 (de) * | 2018-11-23 | 2020-05-27 | Otis Elevator Company | Aufzugsicherheitssystem mit selbstdiagnosefunktion |
JP6601587B1 (ja) * | 2019-07-26 | 2019-11-06 | フジテック株式会社 | エレベーターのエンコーダー診断システム及び診断方法 |
WO2021176547A1 (ja) * | 2020-03-03 | 2021-09-10 | 株式会社日立製作所 | エレベーターの安全制御システム、並びにそれを用いるエレベーター |
TW202229150A (zh) * | 2021-01-25 | 2022-08-01 | 永大機電工業股份有限公司 | 具自動救出功能的電梯控制模組 |
JP7063410B1 (ja) | 2021-08-30 | 2022-05-09 | フジテック株式会社 | 昇降装置 |
CN114194965A (zh) * | 2021-11-23 | 2022-03-18 | 慧之安信息技术股份有限公司 | 一种智能化电梯停运功能管理*** |
JP7279836B1 (ja) | 2022-06-03 | 2023-05-23 | フジテック株式会社 | 制御装置、制御方法、および乗客搬送制御装置 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3587785A (en) * | 1969-03-04 | 1971-06-28 | Otis Elevator Co | Elevator control system safety arrangement |
US4898263A (en) * | 1988-09-12 | 1990-02-06 | Montgomery Elevator Company | Elevator self-diagnostic control system |
US5407028A (en) * | 1993-04-28 | 1995-04-18 | Otis Elevator Company | Tested and redundant elevator emergency terminal stopping capability |
Family Cites Families (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPS5450769A (en) * | 1977-09-30 | 1979-04-20 | Hitachi Ltd | Trouble diagnosing memory system |
JPS58177864A (ja) | 1982-04-07 | 1983-10-18 | 株式会社日立製作所 | 交流エレベ−タ−の制御装置 |
JPS5943780A (ja) * | 1982-09-07 | 1984-03-10 | 株式会社東芝 | 防爆エレベ−タの制御方法 |
JPH0729746B2 (ja) | 1984-01-11 | 1995-04-05 | 株式会社日立製作所 | エレベ−タ−の非常停止制御装置 |
JPS61162473A (ja) * | 1985-01-14 | 1986-07-23 | 三菱電機株式会社 | エレベ−タ制御装置 |
JPH01247382A (ja) | 1988-03-30 | 1989-10-03 | Hitachi Ltd | エレベーター制御システム |
JPH05132256A (ja) * | 1991-11-05 | 1993-05-28 | Hitachi Ltd | エレベーター制御装置とその遠隔監視システム |
DE19513851C2 (de) | 1995-04-12 | 1997-02-27 | Joerg Ammann | Sicherheitseinrichtung für einen Umlaufaufzug zur Personenbeförderung |
US6173814B1 (en) | 1999-03-04 | 2001-01-16 | Otis Elevator Company | Electronic safety system for elevators having a dual redundant safety bus |
US6962809B1 (en) | 2001-07-02 | 2005-11-08 | Hitachi, Ltd. | Sugar chain synthesizer |
-
2005
- 2005-02-25 JP JP2007504602A patent/JP4757863B2/ja active Active
- 2005-02-25 EP EP05719533.1A patent/EP1852382B1/de active Active
- 2005-02-25 WO PCT/JP2005/003132 patent/WO2006090470A1/ja active Application Filing
- 2005-02-25 CN CNB2005800349327A patent/CN100542927C/zh active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3587785A (en) * | 1969-03-04 | 1971-06-28 | Otis Elevator Co | Elevator control system safety arrangement |
US4898263A (en) * | 1988-09-12 | 1990-02-06 | Montgomery Elevator Company | Elevator self-diagnostic control system |
US5407028A (en) * | 1993-04-28 | 1995-04-18 | Otis Elevator Company | Tested and redundant elevator emergency terminal stopping capability |
Non-Patent Citations (1)
Title |
---|
See also references of WO2006090470A1 * |
Cited By (21)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1997764B2 (de) † | 2006-03-17 | 2022-06-29 | Mitsubishi Electric Corporation | Aufzugsvorrichtung |
EP1997764B1 (de) | 2006-03-17 | 2018-02-28 | Mitsubishi Electric Corporation | Aufzugsvorrichtung |
EP2514703A4 (de) * | 2009-12-15 | 2017-09-13 | Mitsubishi Electric Corporation | Aufzugsvorrichtung |
EP2336073A1 (de) * | 2009-12-18 | 2011-06-22 | Inventio AG | Schaltvorrichtung für Beförderungsanlage |
WO2012072859A1 (en) * | 2010-12-01 | 2012-06-07 | Kone Corporation | Safety circuit of an elevator, and method for identifying a functional nonconformance of a safety circuit of an elevator |
US9367416B2 (en) | 2010-12-01 | 2016-06-14 | Kone Corporation | Safety circuit of an elevator, and method for identifying a functional nonconformance of a safety circuit of an elevator |
US10114066B2 (en) | 2010-12-14 | 2018-10-30 | Kone Corporation | Interface unit, conveying system and method |
US9448273B2 (en) | 2010-12-14 | 2016-09-20 | Kone Corporation | Interface unit, conveying system and method |
EP2726391A4 (de) * | 2011-06-30 | 2016-07-20 | Tyco Fire & Security Gmbh | Verbesserte aufzugschnittstelle |
ES2538418A1 (es) * | 2013-12-19 | 2015-06-19 | Orona, S. Coop. | Sistema de control de seguridad de un ascensor, escalera mecánica o ánden móvil |
DE112015005972B4 (de) | 2015-01-16 | 2021-12-02 | Mitsubishi Electric Corporation | Aufzugsicherheits-steuervorrichtung und aufzugsicherheits-sicherheits-steuerverfahren |
CN108367882A (zh) * | 2015-12-07 | 2018-08-03 | 通力股份公司 | 驱动装置 |
WO2017097521A1 (en) * | 2015-12-07 | 2017-06-15 | Kone Corporation | Drive device |
EP3178768A1 (de) * | 2015-12-07 | 2017-06-14 | Kone Corporation | Antriebsvorrichtung |
US11661313B2 (en) | 2015-12-07 | 2023-05-30 | Kone Corporation | Drive device having safety circuits using logic states for an elevator |
WO2018059945A1 (en) * | 2016-09-29 | 2018-04-05 | Inventio Ag | Elevator safety supervising entity with two units having an option for e.g. autonomous passenger evacuation |
CN109789993A (zh) * | 2016-09-29 | 2019-05-21 | 因温特奥股份公司 | 带有具有例如乘客自主撤离的选择的两个单元的电梯安全监督实体 |
CN109789993B (zh) * | 2016-09-29 | 2020-10-09 | 因温特奥股份公司 | 带有具有例如乘客自主撤离的选择的两个单元的电梯安全监督实体 |
US11420848B2 (en) | 2016-09-29 | 2022-08-23 | Inventio Ag | Elevator safety supervising entity with two units having an option for e.g. autonomous passenger evacuation |
EP4121383B1 (de) * | 2020-03-19 | 2023-10-04 | Elgo Batscale AG | Steuereinheit für eine aufzugsanlage |
EP4112525A1 (de) * | 2021-06-30 | 2023-01-04 | Otis Elevator Company | Aufzugssicherheitssystem, aufzugsystem und aufzugssicherheitssteuerungsverfahren |
Also Published As
Publication number | Publication date |
---|---|
JPWO2006090470A1 (ja) | 2008-07-24 |
EP1852382B1 (de) | 2015-12-30 |
CN100542927C (zh) | 2009-09-23 |
JP4757863B2 (ja) | 2011-08-24 |
WO2006090470A1 (ja) | 2006-08-31 |
CN101039864A (zh) | 2007-09-19 |
EP1852382A4 (de) | 2013-01-30 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP1852382B1 (de) | Aufzugsvorrichtung | |
EP1792864B1 (de) | Aufzugsvorrichtung | |
JP5380407B2 (ja) | 安全エレベータ | |
US4898263A (en) | Elevator self-diagnostic control system | |
RU2509049C2 (ru) | Способ обеспечения безопасности транспортера | |
US6170614B1 (en) | Electronic overspeed governor for elevators | |
US6173814B1 (en) | Electronic safety system for elevators having a dual redundant safety bus | |
EP3484802B1 (de) | Aufzug mit sicherheitskreisüberlagerungssteuereinheit mit einer sicherheits-sps, die getrennt verschiedene sicherheitsschalter zur erhöhung des sicherheitsintegritätsniveaus überwacht | |
EP2671836B1 (de) | Sicherheitssteuervorrichtung für aufzüge | |
WO2005105646A1 (ja) | エレベータ制御装置 | |
US6439350B1 (en) | Differentiating elevator car door and landing door operating problems | |
US8072889B2 (en) | Programmable controller | |
US5139113A (en) | Apparatus for detecting abnormalities in elevator motion | |
EP1749779B1 (de) | Aufzugssteuerung | |
KR100894371B1 (ko) | 엘리베이터 장치 | |
EP0590637B1 (de) | Erkennung von ungeeigneter Wirkung eines CPUs mittels Zeitüberlappungspulsen und Zählung bedeutender ausgeführter Schritte | |
KR20070012457A (ko) | 엘리베이터 장치 | |
CN113939774A (zh) | 任务调度管理装置 | |
JPS6223712B2 (de) | ||
JP7285070B2 (ja) | ホームドアの状態診断システム、ホームドアの状態診断方法、可動装置の状態診断方法 | |
JPH11100183A (ja) | エレベータの診断運転装置 | |
CN109071163B (zh) | 升降机的开关信号诊断装置和升降机的维护计划生成*** | |
JPH05108418A (ja) | プログラム異常検出方式 | |
KR0167209B1 (ko) | 엘리베이터의 구출운전 제어 방법 및 장치 | |
JP7392892B1 (ja) | エレベーターのドア制御装置 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20061024 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): DE ES FR NL PT |
|
DAX | Request for extension of the european patent (deleted) | ||
RBV | Designated contracting states (corrected) |
Designated state(s): DE ES FR NL PT |
|
A4 | Supplementary search report drawn up and despatched |
Effective date: 20130107 |
|
RIC1 | Information provided on ipc code assigned before grant |
Ipc: B66B 5/02 20060101ALI20121221BHEP Ipc: B66B 3/00 20060101ALI20121221BHEP Ipc: B66B 5/00 20060101AFI20121221BHEP |
|
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
INTG | Intention to grant announced |
Effective date: 20150717 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): DE ES FR NL PT |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R096 Ref document number: 602005048188 Country of ref document: DE |
|
REG | Reference to a national code |
Ref country code: NL Ref legal event code: MP Effective date: 20151230 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: NL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20151230 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: ES Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20151230 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: PT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20160502 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R026 Ref document number: 602005048188 Country of ref document: DE |
|
PLBI | Opposition filed |
Free format text: ORIGINAL CODE: 0009260 |
|
26 | Opposition filed |
Opponent name: THYSSENKRUPP ELEVATOR AG Effective date: 20160929 |
|
PLAX | Notice of opposition and request to file observation + time limit sent |
Free format text: ORIGINAL CODE: EPIDOSNOBS2 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: ST Effective date: 20161028 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: FR Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20160229 |
|
PLBB | Reply of patent proprietor to notice(s) of opposition received |
Free format text: ORIGINAL CODE: EPIDOSNOBS3 |
|
PLAB | Opposition data, opponent's data or that of the opponent's representative modified |
Free format text: ORIGINAL CODE: 0009299OPPO |
|
R26 | Opposition filed (corrected) |
Opponent name: THYSSENKRUPP ELEVATOR AG Effective date: 20160929 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R100 Ref document number: 602005048188 Country of ref document: DE |
|
PLCK | Communication despatched that opposition was rejected |
Free format text: ORIGINAL CODE: EPIDOSNREJ1 |
|
PLBN | Opposition rejected |
Free format text: ORIGINAL CODE: 0009273 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: OPPOSITION REJECTED |
|
27O | Opposition rejected |
Effective date: 20190124 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R084 Ref document number: 602005048188 Country of ref document: DE |
|
P01 | Opt-out of the competence of the unified patent court (upc) registered |
Effective date: 20230512 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 20231229 Year of fee payment: 20 |