EP4214149A1 - Safety device for controlling safety-relevant ucm and udm functions in a lift system - Google Patents
Safety device for controlling safety-relevant ucm and udm functions in a lift systemInfo
- Publication number
- EP4214149A1 EP4214149A1 EP21777483.5A EP21777483A EP4214149A1 EP 4214149 A1 EP4214149 A1 EP 4214149A1 EP 21777483 A EP21777483 A EP 21777483A EP 4214149 A1 EP4214149 A1 EP 4214149A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- car
- component
- safety device
- elevator system
- door
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000009434 installation Methods 0.000 claims description 12
- 238000012545 processing Methods 0.000 claims description 8
- 230000004044 response Effects 0.000 claims description 4
- 230000004913 activation Effects 0.000 description 16
- 230000008901 benefit Effects 0.000 description 3
- 230000001419 dependent effect Effects 0.000 description 2
- 238000006073 displacement reaction Methods 0.000 description 2
- 230000007257 malfunction Effects 0.000 description 2
- 238000000034 method Methods 0.000 description 2
- 230000001133 acceleration Effects 0.000 description 1
- 230000003213 activating effect Effects 0.000 description 1
- 238000013459 approach Methods 0.000 description 1
- 230000000712 assembly Effects 0.000 description 1
- 238000000429 assembly Methods 0.000 description 1
- 230000004888 barrier function Effects 0.000 description 1
- 238000009530 blood pressure measurement Methods 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000002265 prevention Effects 0.000 description 1
- 230000008569 process Effects 0.000 description 1
- 230000008054 signal transmission Effects 0.000 description 1
- 239000000725 suspension Substances 0.000 description 1
- 230000036962 time dependent Effects 0.000 description 1
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
- B66B5/0006—Monitoring devices or performance analysers
- B66B5/0018—Devices monitoring the operating condition of the elevator system
- B66B5/0031—Devices monitoring the operating condition of the elevator system for safety reasons
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B13/00—Doors, gates, or other apparatus controlling access to, or exit from, cages or lift well landings
- B66B13/02—Door or gate operation
- B66B13/14—Control systems or devices
- B66B13/143—Control systems or devices electrical
Definitions
- Safety device for controlling safety-related UCM and UDM functions in an elevator system
- the present invention relates to a safety device for controlling safety-related functions in an elevator system and a correspondingly equipped elevator system.
- elevator systems people can be transported vertically in a car between different floors of a building.
- Very high security requirements must be met. For example, it must be ensured that the elevator car, which is sometimes also referred to as an elevator car, is not moved unintentionally as long as its doors are not properly closed. In addition, it should be ensured that the doors of the elevator car are not opened or closed unintentionally.
- EP 2 583 928 A1 describe devices or methods with the aid of which unintentional movements of a car in an elevator installation can be avoided.
- a safety device and an elevator system equipped with it which on the one hand can be used to ensure safe operation of the elevator system and on the other hand are simple, reliable and/or inexpensive to install.
- a safety device for controlling safety-related functions in an elevator system.
- the Safety device configured, based on input signals from at least a first component of the elevator system, which indicate information about current conditions within the elevator system, to control both at least a second component of the elevator system in such a way that an unintentional movement of a car of the elevator system is prevented, and at least one to control the third component of the elevator system in such a way that unintentional movement of a car door is prevented.
- an elevator system which comprises at least the following:
- At least one third component configured to prevent unintentional movement of a car door of the car of the elevator system in response to receiving a second control signal
- a safety device for driving the at least one second component and the at least one third component, each based on the input signals from the at least one first component.
- a car door is used to selectively release or block access to the car by opening or closing one or more door panels of the car door.
- the car door generally has an actuator such as an electric motor in order to be able to move the door panels.
- This actuator is typically controlled by a very simple, "dumb" actuator control.
- the actuator control controls upon receipt of an activation signal which indicates that the car door is to be opened or closed. is to be closed, an electrical current supplied to the actuator in such a way that the door leaves are moved with a suitable force and/or speed into an open configuration or into a closed configuration.
- the activation signal is usually generated by an elevator controller, which monitors the operation of the entire elevator system and controls individual components of the elevator system accordingly via activation signals.
- the elevator controller can use the information it has to recognize that the car has been moved to a desired floor and stopped there, so that the activation signal can then be issued, according to which the car door can be opened to allow passengers to enter the car.
- Unintentional car door movements can be caused, for example, if activation signals are generated in the elevator control due to malfunctions or due to incorrect information about a current status of the elevator, although for the actual current status of the elevator system, for example, opening the car door should not be permitted because the car is currently moving, for example.
- a device that is used to protect against unintentional door movements can, for example, analyze an activation signal transmitted to the actuator control of the car door for its plausibility. For example, on the basis of other available information, it can be monitored whether opening or closing the car door appears permissible in a current operating situation and whether an activation signal to be transmitted to the actuator control of the car door should actually be passed on to this actuator control or whether this activation signal should be filtered out due to lack of plausibility.
- a device implementing the UDM function typically comes as a separate package interposed between the device that generates the activation signal, ie, for example, the elevator control, on the one hand, and the actuator control ultimately receiving the activation signal, on the other hand. Accordingly, the UDM device can block the forwarding of an activation signal if required, ie in particular if the activation signal was recognized as not being sufficiently plausible.
- the UDM device can, for example, receive signals or information from sensors or other components of the elevator system, which allow conclusions to be drawn about the current admissibility of a door movement of the car door.
- the UDM device can detect via switches or other sensors suitably arranged along the travel path of the car when the car is at the level of a floor and is stopping there. If necessary, the UDM device can also detect via additional switches or other sensors when the car is within a so-called door zone, i.e. is already very close to a desired target height adjacent to the floor within an acceptable height tolerance.
- the plausibility check it can then be checked whether the car is currently stopping at a floor so that the car door can be opened, or is at least within the height tolerance close to such a target position, so that the car door can be opened shortly before the target position is reached the floor may be initiated.
- the safety device proposed herein addresses at least some of these disadvantages. To this end, it is proposed that the implementation of the UDM function not be integrated in a separate device, but rather in a device provided for other purposes in any elevator installation.
- the UDM function into a device that is used in elevator systems to reliably prevent unintentional movements of the elevator car.
- a device that is used in elevator systems to reliably prevent unintentional movements of the elevator car.
- UCM function English: unintended car movement.
- Regulations such as the European standard EN8E20 or the US standard A17 stipulate that the UCM function must be implemented in elevator systems in order to avoid serious accidents due to unintentional car movements. Accordingly, every elevator system has a UCM device.
- Such a UCM device is configured to receive appropriate input signals from, for example, sensors, switches or other components of the elevator system, which input signals indicate information about current conditions within the elevator system.
- the input signals can indicate where the car is currently located, whether it is currently being moved or at one Floor holds, how fast and in which direction the car is moving, whether a car door and/or landing doors are open or closed or about to open or close, etc.
- the input signals can indicate any information that has to be monitored according to the applicable regulations , in order to be able to reliably prevent an unintentional movement of the car.
- the UCM device is also configured to control one or more other components of the elevator system, taking into account the input signals received from it, in such a way that ultimately the unintentional movement of the elevator car is prevented.
- the UCM device can control a brake which is designed to brake the car in order in this way to prevent unintentional movement of the car.
- the UCM device can control a drive unit that is designed to move the car along a travel path, wherein the UCM device can interrupt a power supply to the drive unit when it detects an unintended travel movement.
- the UCM device is typically designed as a very secure assembly.
- the UCM device is usually designed in such a way that it satisfies high safety requirements such as safety level SIL3 (safety integrity level 3).
- safety level SIL3 safety integrity level 3
- monitoring measures and/or redundancies can be provided in the UCM device, with the aid of which malfunctions can be detected or prevented and failures can also be avoided.
- the signals and data typically required by a UCM device which it receives from sensors or other components of the elevator system in order to be able to implement the UCM function, generally contain sufficient information about the conditions currently prevailing in the elevator system included, so with their help also the UDM function can be implemented.
- the kinematic information received as input signals from the UCM device about the current location and the current speed of the car can also be used to implement the UDM function, since it can be used to determine, for example, whether the car is currently at a holding position or in a door zone close to the holding position.
- the information mentioned in particular the current speed and acceleration of the elevator car, can be used to determine whether the elevator car will stop at a nearby floor position or whether it will drive past it.
- the information mentioned is generally necessary and sufficient to determine whether the car door may be opened safely and can therefore be used to implement the UDM function, for example to check the plausibility of an activation signal to be transmitted to the car door actuator control and, if there is a lack To filter out plausibility if necessary.
- the safety device has at least the following assemblies:
- a signal processing unit for processing the input signals and generating first and second control signals based respectively on the input signals
- a control unit for controlling the at least one second component of the elevator system based on the generated first control signals and the at least one third component of the elevator system based on the generated second control signals.
- the signal input interface can receive the input signals from the first component.
- the signal input interface can have electrical connections, for example, via which it can be wired to the first component.
- the signal input interface can communicate wirelessly with the first component and for this purpose, for example, send radio signals to and/or receive from the first component.
- the signal processing unit can process the input signals received via the signal input interface in order to generate the first and second control signals based on them. These control signals can then be used by the control unit to implement both the UDM function and the UCM function.
- the control unit can transmit the first control signals to the second component, with the aid of which the UCM function is carried out.
- the control unit or the safety device can have a first signal output interface for this purpose.
- the control unit can transmit the second control signals to the third component, which is used to carry out the UDM function.
- the control unit or the safety device can have a second signal output interface.
- the at least one first component supplies input signals that indicate a current position and a current speed of the car of the elevator system.
- the elevator system can have, for example, one or more sensors as at least a first component, with the aid of which the current position at which the elevator car is located within the elevator system can be determined.
- a large number of markings can be provided in the elevator system, for example, which encode the position of the marking and which can be read, for example, by a sensor attached to the car.
- a magnetizable band can be arranged along the travel path of the elevator car and position information can be stored magnetically on the band.
- the position of the car can also be determined in various other ways, for example by presence sensors attached along the travel path, light barriers, a local or global positioning system (GPS), air pressure measurement sensors for measuring an altitude-dependent air pressure or the like.
- GPS global positioning system
- the elevator installation can have a device with which a speed, in particular an overspeed, of the elevator car can be detected.
- the at least one first component can supply input signals which indicate a current position and a current speed of the car of the elevator system for every possible position of the Specify the car along a travel path of the car and for each point in time during operation of the elevator system.
- the at least one first component can provide information about the current location and the current speed of the car not only for specific operating situations in which the car is, for example, at a floor position or within a door zone near a floor position.
- the first component should preferably be able to determine the current position and speed of the car for every possible operating situation to be assumed by the elevator system, i.e. for every possible position of the car along a permissible travel path. In this case, it should preferably be possible to be able to indicate this information on the basis of the input signals from the first component for any point in time during the operation of the elevator system.
- the at least one second component includes a brake, which is configured to brake or prevent a travel movement of the elevator car.
- the second component can be a brake, in particular an emergency brake, which is attached to the elevator car or which can interact with a suspension means moving the elevator car and with the help of which the elevator car can be braked quickly and efficiently in a displacement movement or can be prevented from a displacement movement .
- the safety device can implement the UCM function and prevent the car from inadvertently traveling.
- the at least one third component includes a door operator configured to move a door panel of the car door between an open and a closed configuration.
- the door drive can include the actuator already mentioned at the outset as well as the actuator control of the car door.
- the safety device can implement the UDM function and prevent the car door from moving unintentionally.
- the safety device can be configured as a filter instance to transmit a door control signal transmitted by an elevator controller of the elevator system depending on the input signals to a door drive, which is configured to shift a door panel of the car door between an open and a closed configuration or to filter out.
- the safety device described here can be connected between an elevator control and a door drive of a car door, similar to a conventional UDM device, so that door control signals generated by the elevator control must first pass the safety device as activation signals before they ultimately reach the door drive or its door drive Actuator control are forwarded.
- the safety device can therefore serve as a filter instance.
- the safety device can check door control signals to be transmitted for plausibility by analyzing these door control signals, taking into account information available to it from the input signals transmitted to it.
- This door control signal is only transmitted as a second control signal to the third component of the elevator system used for the UDM function if a door control signal appears plausible given the information derived from the input signals about the current conditions within the elevator system.
- the door control signal is filtered out and thus unintentional movement of the car door is prevented.
- all the components forming the safety device are integrated as a unit in a common housing.
- both the signal input interface and the signal processing unit as well as the control unit including possible signal output interfaces for generating and transmitting the first control signals for implementing the UCM function and for generating and transmitting the second control signals for implementing the UDM function in a common housing added and thus form a uniform assembly.
- Such a unitary safety device can be easily installed in the elevator system and wired if necessary.
- FIG. 1 shows an elevator system with a safety device according to an embodiment of the present invention.
- FIG. 1 shows an elevator system 1 with a safety device 13 according to an embodiment of the present invention.
- the elevator installation 1 includes an elevator car 3 which can be displaced along a vertical travel path 7 within an elevator shaft 5 .
- the elevator car 3 is moved by an elevator car drive 9 whose operation is controlled by an elevator controller 11 .
- Movements of the elevator car 3 can be braked or prevented with the aid of a brake 23 attached to the elevator car 3 .
- the brake 23 can have brake shoes, for example, which are fixed to the elevator car 3 and thus move with it.
- the brake shoes can be stationary with a braking surface mounted in the elevator shaft 5, such as a surface of a Guide rail interaction and thus the car 3 controlled by friction and brake efficiently.
- the car 3 has a car door 43 in order to be able to selectively release or block access to the interior of the car 3 .
- the car door 43 has two door leaves 45 which can be opened and closed with the aid of a door drive 27 .
- the door drive 27 has an actuator 29 such as an electric motor, the operation of which can be controlled via an actuator control 31 .
- both a UCM function for preventing unintentional movements of the car 3 and a UDM function for preventing unintentional movements of the car door 43 are implemented in it.
- the UCM function and the UDM function are both implemented together in the safety device 13, i.e. the safety device 13 is designed as a unit in which all components used for implementing the UCM function and the UDM function are in a common housing 47 are recorded.
- the safety device 13 is preferably designed in such a way that it satisfies statutory or normative safety regulations for implementing the UCM function.
- the safety device 13 is preferably designed in such a way that it corresponds to high safety levels, such as a SIL3 safety level.
- the safety device 13 can correspond to at least one first component 15 from which it can receive input signals.
- the input signals can indicate information about current conditions within the elevator installation 1 .
- one of the first components 15 is implemented using a magnetic tape 17 and a magnetic tape reader 19 .
- the magnetic tape 17 runs vertically along the entire travel path 7 through the elevator shaft 5.
- Information is stored on the magnetic tape 17 which encodes the position within the elevator shaft 5 for each of a large number of sections of the magnetic tape 17.
- the magnetic tape reader 19 can read this information. Since the magnetic tape reader 19 is attached to the car 3, in this way the current Position of the car 3 are determined.
- a current speed of the elevator car 3 can be inferred by analyzing time-dependent changes in these positions.
- the information about the current position and the current speed of the car 3 can thus be transmitted to the safety device 13 as input signals.
- the input signals can be received by a signal input interface 33 of the safety device 13 .
- the first component 15, ie the magnetic tape reader 19 in the example shown can be wired to the signal input interface 33 of the security device 13 or transmit its signals wirelessly to the signal input interface 33.
- Another of the first components 15 can be implemented in the form of a door sensor 47, for example.
- the door sensor 49 can detect whether the car door 43 is fully closed and locked. Information about a closed state of the car door 43 can then likewise be transmitted to the signal input interface 33 of the safety device 13 .
- first components 15 can be used as first components 15 to collect information about current conditions in the elevator system 1, in particular information about a position, speed, direction of travel, occupancy, etc. of the Car 3 and information regarding a current situation of the car door 3 such as its closed state, directions of movement of the door panels 45, etc. to obtain.
- the received input signals can then be processed in the security device 13 by a signal processing unit 35 .
- the signal processing unit 35 can generate both first control signals and second control signals based on these input signals.
- the first and second control signals generated in this way can then be used by a control unit 37 of the safety device 13 to control a second component 21 and a third component 25 in the elevator installation 1 .
- the control unit 37 can transmit the first control signal to the second component 21, for example via a first signal output interface 39, in order to access this Way to implement the UCM function, ie to prevent unintentional movements of the car 3.
- the control unit 37 can transmit the second control signal to the third component 25 via a second signal output interface 41, for example, in order to implement the UDM function in this way, ie to prevent unintentional movements of the car door 43.
- the second component 21 includes the brake 23 on the car 3 for this purpose. If the safety device 13 recognizes, for example based on the input signals received from the door sensor 47, that the car door 43 is not fully closed, and on the other hand based on the data from the magnetic tape reader 19 If the received input signals detect that the car 3 is moving along the travel path 7, the safety device 13 can activate the brake 23 and in this way stop the unintentional travel movement of the car 3.
- the third component 25 includes the door drive 27 on the car door 43. If, for example, the elevator controller 11 is to send a door control signal to the car door 43, on the basis of which the car door 43 is to be opened or closed, this door control signal is not sent directly to the Door drive 27 transmitted. Instead, the safety device 13 is interposed as a filter instance between the elevator control 11 and the door drive 27 . The door control signal is first checked for plausibility in the safety device 13 . For this purpose, the safety device 13 can recognize, for example based on the input signals received at the signal input interface 33, where the elevator car 3 is currently located and whether or at what speed it is moving.
- a door control signal that an opening of the car door 43 is indicated, is regarded as plausible. Only if such a plausibility is recognized is the door control signal then not filtered by the safety device 13 but forwarded to the door drive 27 .
- the actuator control 31 of the The door drive 27 can then energize the actuator 29 in a suitable manner in order to open the door leaves 45 of the car door 43 .
Landscapes
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Elevator Control (AREA)
- Elevator Door Apparatuses (AREA)
Abstract
Description
Claims
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP20196605 | 2020-09-17 | ||
PCT/EP2021/075087 WO2022058276A1 (en) | 2020-09-17 | 2021-09-13 | Safety device for controlling safety-relevant ucm and udm functions in a lift system |
Publications (1)
Publication Number | Publication Date |
---|---|
EP4214149A1 true EP4214149A1 (en) | 2023-07-26 |
Family
ID=72560422
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP21777483.5A Pending EP4214149A1 (en) | 2020-09-17 | 2021-09-13 | Safety device for controlling safety-relevant ucm and udm functions in a lift system |
Country Status (4)
Country | Link |
---|---|
US (1) | US20230348228A1 (en) |
EP (1) | EP4214149A1 (en) |
CN (1) | CN116194399A (en) |
WO (1) | WO2022058276A1 (en) |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4367810A (en) * | 1979-12-27 | 1983-01-11 | Otis Elevator Company | Elevator car and door motion interlocks |
FI20090335A (en) | 2009-09-16 | 2011-03-17 | Kone Corp | Method and arrangement for preventing uncontrolled movement of the elevator car |
SG186731A1 (en) | 2010-06-18 | 2013-02-28 | Hitachi Ltd | Elevator system |
DE102010062154A1 (en) * | 2010-11-29 | 2012-05-31 | Thyssenkrupp Aufzugswerke Gmbh | Safety device for a lift |
CN109650210A (en) | 2019-01-30 | 2019-04-19 | 王国荣 | A method of preventing carriage accidental movement |
-
2021
- 2021-09-13 WO PCT/EP2021/075087 patent/WO2022058276A1/en unknown
- 2021-09-13 EP EP21777483.5A patent/EP4214149A1/en active Pending
- 2021-09-13 US US18/044,792 patent/US20230348228A1/en active Pending
- 2021-09-13 CN CN202180063327.1A patent/CN116194399A/en active Pending
Also Published As
Publication number | Publication date |
---|---|
US20230348228A1 (en) | 2023-11-02 |
WO2022058276A1 (en) | 2022-03-24 |
CN116194399A (en) | 2023-05-30 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP3209589B1 (en) | Elevator with a decentralised electronic safety system | |
DE112009004592B4 (en) | Elevator installation and method for checking the same | |
EP2022742B1 (en) | Lift system | |
EP3230189B1 (en) | Elevator system with safety monitoring system provided with a master-slave hierarchy | |
DE102011054590B4 (en) | Device for detecting the position of an elevator car and method for operating an elevator system | |
EP1490284A1 (en) | Shaft monitoring system for an elevator | |
EP3233694B1 (en) | Safety circuit for a lift facility | |
DE112013007449T5 (en) | winder | |
EP2457860B1 (en) | Safety device for a lift | |
WO2013072184A1 (en) | Lift with safety device | |
DE102017205354A1 (en) | Multi-cabin elevator system and method for operating a multi-car elevator system | |
EP3898477B1 (en) | Method and brake system for controlling a brake of a lift system | |
EP2160349B1 (en) | Arrangement, module and method for reliably operating a system | |
WO2022136504A1 (en) | Elevator, method for controlling an elevator | |
EP2206672B1 (en) | Method and device for monitoring a lift cabin | |
DE102010051413B4 (en) | Drive system and method for operating a drive system for an axis of a machine or plant | |
EP3704048B1 (en) | Safety monitoring device for monitoring of safety conditions in a device for transporting people and method for operating the same | |
EP4214149A1 (en) | Safety device for controlling safety-relevant ucm and udm functions in a lift system | |
DE102021109462A1 (en) | Device for monitoring an elevator system and method | |
DE202016101183U1 (en) | Elevator with a safety controller for directly influencing the braking force | |
EP3339234A1 (en) | Method for controlling a closing operation of an elevator door and elevator door closing assembly which can be operated according to the method | |
WO2020249475A1 (en) | Method for operating a passenger transportation system with an electronically sealable safety device | |
EP2463223B1 (en) | Device for monitoring the stopping position of a lift cabin | |
EP3744673B1 (en) | Method for securing an elevator cabin through a temporary unlock zone |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: UNKNOWN |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE |
|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE |
|
17P | Request for examination filed |
Effective date: 20230208 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
DAV | Request for validation of the european patent (deleted) | ||
DAX | Request for extension of the european patent (deleted) | ||
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: GRANT OF PATENT IS INTENDED |
|
INTG | Intention to grant announced |
Effective date: 20240703 |