WO2016113895A1 - エレベータ安全制御装置およびエレベータ安全制御方法 - Google Patents
エレベータ安全制御装置およびエレベータ安全制御方法 Download PDFInfo
- Publication number
- WO2016113895A1 WO2016113895A1 PCT/JP2015/051056 JP2015051056W WO2016113895A1 WO 2016113895 A1 WO2016113895 A1 WO 2016113895A1 JP 2015051056 W JP2015051056 W JP 2015051056W WO 2016113895 A1 WO2016113895 A1 WO 2016113895A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- timer
- control device
- count
- timers
- elevator
- Prior art date
Links
Images
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B66—HOISTING; LIFTING; HAULING
- B66B—ELEVATORS; ESCALATORS OR MOVING WALKWAYS
- B66B5/00—Applications of checking, fault-correcting, or safety devices in elevators
- B66B5/0006—Monitoring devices or performance analysers
- B66B5/0018—Devices monitoring the operating condition of the elevator system
- B66B5/0031—Devices monitoring the operating condition of the elevator system for safety reasons
Definitions
- the present invention relates to an elevator safety control device and an elevator safety control method that use a timer to measure the time until the car is stopped when an abnormality is detected, and is particularly characterized by a timer diagnosis function.
- Conventional elevator safety control devices can detect abnormalities in the safety control device itself. And when this abnormality is detected, this conventional apparatus first outputs the nearest floor stop command for stopping the car to the nearest floor to the elevator control section. Furthermore, this conventional apparatus outputs an emergency stop command for emergency stop of the car to the elevator control unit when a preset time has elapsed from the output of the nearest floor stop command (see, for example, Patent Document 1).
- the conventional device of Patent Document 1 includes a timer circuit that counts the grace time for stopping the nearest floor, and in order to check the soundness of the timer, the timer circuit is operated periodically during service suspension. It is necessary to let As a result, there has been a problem that during the timer diagnosis, the elevator cannot be operated, or the abnormality of the timer cannot be detected until the timer period elapses.
- the present invention has been made to solve the above-described problems, and obtains an elevator safety control device and an elevator safety control method that ensure soundness and availability when performing safety control using a timer. With the goal.
- An elevator safety control device executes at least one safety monitoring function based on an input unit that reads a monitoring signal from a switch or sensor that monitors the state of the elevator, and a monitoring signal that is read via the input unit.
- the two arithmetic processing units and the arithmetic processing unit are provided independently, or a timer provided in the arithmetic processing unit and a signal for shutting off the power supplied to each of the elevator hoist and the brake are output.
- the elevator stops the car by shutting off the power supplied to the hoisting machine and the brake.
- a timer comparison unit that is provided independently of the arithmetic processing unit or is provided inside the arithmetic processing unit and executes a timer count diagnosis process, and the timer is activated as a dual system.
- the timer count diagnosis process is executed by determining that a count abnormality has occurred in at least one of the two timers and stopping the car.
- the elevator safety control method executes a safety monitoring function based on an input unit that reads a monitoring signal from a switch or sensor that monitors the state of the elevator, and a monitoring signal read through the input unit.
- At least one arithmetic processing unit and the arithmetic processing unit are provided independently of each other, or provided in the arithmetic processing unit, and are provided with two independent timers that are activated as a double system, and an elevator hoist and a brake
- An output unit that outputs a signal for shutting off the power supplied to each of the above and a timer comparison unit that is provided independently of the arithmetic processing unit or that is provided inside the arithmetic processing unit and executes timer count diagnosis processing
- the elevator safety control method is executed by the elevator safety control device, and the operation processing unit performs overall control of elevator operation.
- the first step for starting the two timers and the timer comparison unit perform two steps according to the first step. After starting the timer, the count values of the two timers are compared with each other. If the difference between the count values of the two timers exceeds a preset difference value, at least one of the two timers is counting abnormally In the second step of executing the timer count diagnosis process and the calculation processing unit until the respective count values of the two timers reach the timer time limit, the second time by the timer comparison unit is determined. If it is not determined that a count error has occurred in the step, it is determined that the two timers are normal.
- the operation processing unit receives a service request generation signal from the operation control unit during execution of the timer count diagnosis process according to the fourth step and the second step of stopping the car.
- the timer used as a counter until the elevator is stopped when the safety monitoring function is executed and the elevator abnormality is detected the timer is set to the double system and the timer of the double system is set. It has a function of diagnosing the soundness of the timer itself by comparing the count values with each other. When it is determined that the timer itself is abnormal, the car can be stopped. As a result, when performing safety control using a timer, an elevator safety control device that ensures soundness and availability can be obtained.
- Embodiment 1 is an overall configuration diagram including an elevator safety control device according to Embodiment 1 of the present invention. It is a flowchart which shows a series of operation
- FIG. 1 is an overall configuration diagram including an elevator safety control device according to Embodiment 1 of the present invention.
- the safety control device 10 according to the first embodiment includes a duplexed first CPU (Central Processing Unit) 1 and second CPU 2.
- each of the first CPU 1 and the second CPU 2 includes a ROM (Read Only Memory), a RAM (Random Access Memory), a clock, a watchdog timer, a bus, and the like.
- the first CPU 1 and the second CPU 2 are connected via a communication line, and perform failure diagnosis of the CPU by comparing the calculation results with each other.
- the safety control device 10 executes a safety control function, a self-diagnosis function, and a timer diagnosis function by software installed in each of the first CPU 1 and the second CPU 2.
- Each of the first CPU 1 and the second CPU 2 receives the signal from the safety-related switch / sensor 11 connected by electric wiring and the signal from the external safety control device 12 connected by the communication line, and monitors the state of the elevator. .
- the output from the safety control device 10 via the output interfaces 3 and 4 is connected to the power supply (power supply circuit) of the hoisting machine 14 and the brake 15 directly or through the safety circuit 13 of the elevator.
- the safety control device 10 When it is determined that the elevator is in the normal state, the safety control device 10 outputs a signal for connecting the power sources of the hoisting machine 14 and the brake 15 via the output interfaces 3 and 4. Specifically, the safety control device 10 performs an output to turn on a relay or a switching element, for example, an optical coupler or a MOSFET (metal-oxide-semiconductor field-effect transistor).
- a relay or a switching element for example, an optical coupler or a MOSFET (metal-oxide-semiconductor field-effect transistor).
- the safety control device 10 when it is determined that it is not in a safe state, the safety control device 10 outputs a signal for shutting off the power supply of the hoisting machine 14 and the brake 15 via the output interfaces 3 and 4. Specifically, the safety control device 10 performs an output for turning off the relay or the switching element.
- the operation control device 16 controls the hoisting machine power supply (inverter) connected to the hoisting machine 14, thereby rotating the hoisting machine and moving the car.
- the brake power supply control device controls the brake power supply (DC-DC converter) to cause a current to flow through the brake coil and lift the electromagnetic brake to release the brake.
- the operation control device 16 and the safety control device 10 are connected via a communication line.
- the safety control device 10 normally drives an insulating element (for example, an optical coupler) between the operation control device 16 and the hoisting machine power supply and an insulating element between the brake power supply control device and the brake power supply.
- the switching element connected to the power source is turned on via the output interfaces 3 and 4 so that the hoisting machine 14 and the brake 15 can be operated.
- the safety control device 10 receives a signal from the external safety-related switch / sensor 11 or the external safety control device 12. When the safety control device 10 detects that the elevator is not in a safe state based on these received signals, the safety control device 10 turns off the switching element. By turning off the switching element in this way, the safety control device 10 shuts off the power supply of the insulating element and shuts off the command of the operation control device 16 and the brake power supply device from reaching the hoisting machine power supply and the brake power supply. To do. As a result, the hoisting machine stops rotating, the brake current is prevented from being generated, the brake is applied, and the car is stopped.
- FIG. 2 is a flowchart showing a series of timer processing operations executed by the safety control device 10 according to Embodiment 1 of the present invention. More specifically, the series of processes shown in FIG. 2 is performed independently for each timer by the first CPU 1 and the second CPU 2 in the safety control device 10.
- the safety control device 10 When the safety control device 10 detects an abnormality, the safety control device 10 outputs a nearest floor stop command for stopping the car to the nearest floor to the operation control device 16 (step S201).
- the safety control device 10 initializes the timer counter to 0 simultaneously with the output of the nearest floor stop command (step S202), and updates the timer counter by a CPU timer interrupt sufficiently shorter than the periodic processing or the timer time limit. (Step S203).
- step S204 When the timer counter exceeds a preset time limit determination value (for example, 5 minutes) (step S204), the safety control device 10 turns off the output via the output interfaces 3 and 4 so as to wind up. The power supply to the machine 14 and the brake 15 is cut off, and the car is emergency stopped (step S205). Furthermore, the safety control device 10 instructs the operation control device 16 to stop the service (step S206), and ends the series of processes.
- a preset time limit determination value for example, 5 minutes
- FIG. 3 is a flowchart showing a series of operations of the timer diagnosis process executed by the safety control device 10 according to the first embodiment of the present invention. More specifically, the series of processes shown in FIG. 3 is performed independently for each timer while the first CPU 1 and the second CPU 2 in the safety control device 10 compare the processing results of the other and their own processing results. To be implemented.
- the safety control device 10 receives a timer diagnosis permission signal (floor) that is a signal that allows a certain time (for example, one day) to elapse from the previous timer diagnosis or that the operation control device 16 can perform a timer diagnosis while the floor is stopped.
- floor a timer diagnosis permission signal
- a timer diagnosis start signal is transmitted to inform the operation control device 16 that the timer diagnosis is started (step S300).
- the operation control device 16 After receiving the timer diagnosis start signal, the operation control device 16 returns a timer diagnosis permission signal to the safety control device 10 when the elevator is not operating (no call is made).
- the safety control device 10 proceeds to step S302 by receiving a timer diagnosis permission signal from the operation control device 16 (step S301).
- the safety control device 10 cannot receive the timer diagnosis permission signal for a specified time, the safety control device 10 outputs an operation stop command to the operation control device 16 and performs the following diagnosis.
- the safety control device 10 starts a timer diagnosis process when a predetermined time (for example, one day) has elapsed since the previous timer diagnosis (step S302).
- the safety control device 10 switches to the off state when the output interfaces 3 and 4 (referred to as output units in the following description) operate normally. Diagnose whether or not. Specifically, when the safety control device 10 determines that a certain time has elapsed since the previous diagnosis, the safety counter 10 subtracts the diagnosis time (for example, 1 second) from the preset time limit determination value. The value is set (step S303), and the timer operation is started (step S304).
- the safety control device 10 determines whether or not the diagnosis time has elapsed by determining whether or not the timer counter has reached the time limit determination value (step S305). If it is determined that the diagnosis time has elapsed, the safety control device 10 confirms whether or not the output unit has been switched off by reading the state of the output interfaces 3 and 4 (step S306). .
- step S306 if the output unit is not in the off state, the safety control device 10 determines that the output unit is not operating normally and has detected a failure (step S307), and the hoisting machine 14 And the signal which turns on the power supply of the brake 15 is set to an output-off state (step S308), an elevator service stop instruction is output to the operation control device 16 (step S309), and the series of processes ends.
- the safety control device 10 can diagnose whether or not the operation of the output unit is normal in a short diagnosis time (1 second in the above example), and further the operation of the output unit. Is diagnosed as abnormal, the output interfaces 3 and 4 are turned off again in order to shut off the power to the hoisting machine 14 and the brake 15, and an elevator service stop instruction is sent to the operation control device 16. Can be output.
- step S302 if a predetermined time (for example, one day) has not elapsed since the previous timer diagnosis, the diagnosis of the output unit in steps S303 to S306 is omitted, and the steps after step S310 to be described next are omitted. You may transfer to the diagnosis of the timer count unit.
- a predetermined time for example, one day
- the safety control device 10 diagnoses the timer count unit. Specifically, the safety control device 10 performs diagnosis of the timer counter unit by comparing the count values of the first CPU 1 and the second CPU 2.
- both the first CPU 1 and the second CPU 2 in the safety control device 10 set the timer counter to the counter stored value (initially 0) (step S310) and start the respective timer operations constituting the dual system. (Step S311). And 1st CPU1 and 2nd CPU2 update a timer counter for every period, and compare the timer count value of own CPU with the timer counter value of the other CPU (step S312).
- step S312 if the difference between the timer counter values is equal to or greater than a certain value, the first CPU 1 and the second CPU 2 determine that a timer failure due to the count abnormality has been detected, stop the timer, and explain earlier.
- the processes in steps S307 to S309 are executed, and the series of processes ends.
- step S312 if the difference between the timer counter values is less than a certain value as a result of the comparison in step S312, the first CPU 1 and the second CPU 2 proceed to step 313 and determine whether the timer counter value is less than the time limit determination value. . Thereafter, the processes in steps S312 and S313 are repeated until the timer counter value reaches the time limit determination value.
- the safety control device 10 determines that the timer counter operation is normal, The timer is stopped (step S314), the counter stored value is set to 0 (step S315), and the process proceeds to step S319 described later.
- the operation control device 16 transmits a timer diagnosis stop request signal to the safety control device 10. Then, the safety control device 10 receives the timer diagnosis stop request signal, thereby determining that there is a service request before the timer counter value reaches the time limit determination value (step S316), and proceeds to the processing after step S317.
- the safety control device 10 stops the timer (step S317), stores the timer counter value at that time in the counter storage value (step S318), and proceeds to the process of step S319.
- the safety control apparatus 10 ends the timer diagnosis after the process of the previous step S315, interrupts the timer diagnosis after the process of the previous step S318, and performs a timer diagnosis for the operation control apparatus 16.
- An end signal is transmitted (step S319), and the series of processes ends.
- the operation control device 16 receives the timer diagnosis completion signal, the operation control device 16 resumes the elevator service.
- each of the first CPU 1 and the second CPU 2 performs [diagnosis of the output unit] if a predetermined time has elapsed since the previous timer diagnosis, Thereafter, the counter stored value is set as the timer counter value, and [diagnosis of the timer count unit] is restarted.
- each of the first CPU 1 and the second CPU 2 performs [diagnosis of the output unit] if a predetermined time has not elapsed since the previous timer diagnosis. Without setting, the counter stored value is set in the timer counter value, and [diagnosis of the timer count unit] is restarted.
- the [diagnosis of the output unit] can be performed in a short time at regular intervals, and the [diagnosis of the timer count unit] can be performed in a timer diagnosis by utilizing the stored count value. For each state in which the permission signal is being received, it is possible to resume from the previous diagnosis and continue the diagnosis.
- the first CPU 1 and the second CPU 2 performs the following processing. Notify the other CPU of abnormality detection. -Turn off the output of at least one system (CPU), shut off the hoisting machine power and brake power, and stop the car. A service stop request (abnormality detection signal) is transmitted to the operation control device 16.
- the operation control device 16 stops the service when receiving the service stop request (abnormality detection signal). If the service is already stopped, the service stop is continued.
- the safety monitoring function provided in the safety control device 10 includes the following in addition to the timer diagnosis function.
- Each door switch that detects the opening and closing of the car door and the landing door, and the signal of the landing sensor that detects that the car is in the landing zone, are used as inputs to indicate that the car has been removed from the landing zone while the door is open.
- [Maintenance personnel protection function] A function that inputs the signal of each door switch that detects the opening and closing of the car door and the landing door, and instructs the operation control device to invalidate the automatic operation when the opening of the door is detected by the maintenance staff.
- [Emergency electric operation function] A function that disables signals from some switches during operation such as rescue of passengers when confinement occurs, using signals from switches that monitor the movement of the car and signals from operation signals by maintenance personnel as input.
- Door switch bypass operation function A function that disables the signal from the door switch when inspecting the door switch, with each door switch that detects the opening and closing of the car door and the landing door as well as each signal from the operation signal from the maintenance staff.
- Terminal floor forced deceleration function A function that makes an emergency stop when an overspeed of the car is detected by inputting each signal from the switch installed in the hoistway that detects the movement of the car, the encoder attached to the speed governor or the hoisting machine.
- Other functions may include a function that monitors the state of the elevator and makes an emergency stop when it is determined that the elevator is not in a safe state.
- the safety control device detects an abnormal state of the elevator by these safety monitoring functions other than the timer diagnosis function, the safety control device executes the series of processes shown in FIG.
- the safety control device executes diagnosis related to the timer used in the series of processes shown in FIG. 2 by the series of processes shown in FIG.
- the reliability of the timer function at the time of abnormality detection of the elevator safety control device is ensured by providing the timer diagnosis function including the diagnosis of the output unit and the diagnosis of the timer count unit. be able to.
- diagnosis of the output unit can be performed in a short time at regular intervals, and the diagnosis of the timer count unit can be continuously performed over a plurality of time zones in which the timer diagnosis can be performed.
- diagnosis can be performed reliably without impairing serviceability, the soundness and availability of the elevator safety control device can be ensured, and abnormality of the timer necessary for safety control can be detected quickly. it can.
- FIG. FIG. 4 is an overall configuration diagram including an elevator safety control device according to Embodiment 2 of the present invention.
- the safety control device 10 in the second embodiment is provided with a timer 5, a timer 6, and a timer comparison unit 7 outside the first CPU 1 and the second CPU 2. The point is different. Therefore, the following description will be focused on such a difference in configuration.
- timers 5 and 6 and a clock are installed outside the first CPU 1 and the second CPU 2.
- the timers 5 and 6 are composed of a logic circuit having a counter and a comparator, and perform a counting operation by counting clock pulses.
- the timer 5 starts / stops the counting operation according to a command from the first CPU 1, the timer counter value is set, and when the timer expires, the output unit is turned off to supply power to the hoisting machine 14 and the brake 15. The supply can be shut off.
- the timer 6 starts / stops the counting operation according to a command from the second CPU 2, the timer counter value is set, and when the timer expires, the output unit is turned off, so that the winding machine 14 and the brake 15 can be turned off.
- the power supply can be cut off.
- the timers 5 and 6 can be realized by, for example, CPLD (Complex Programmable Logic Device) or FPGA (Field-programmable gate array).
- a timer comparison unit 7 is provided between the two timers 5 and 6, and the timer counter values of the two timers 5 and 6 are compared. When the difference between the timer count values of the two timers 5 and 6 is greater than a certain value and an abnormality is detected, the timer comparison unit 7 detects the abnormality with respect to the first CPU 1 and the second CPU 2 or the output interfaces 3 and 4. Thus, by outputting an abnormality detection signal and turning off the output unit, the power supply to the hoisting machine 14 and the brake 15 is cut off, and the car is stopped.
- the soundness and availability of the elevator safety control device can be ensured by the configuration as shown in FIG. 4 as in the first embodiment. Furthermore, it is possible to quickly detect an abnormality in a timer necessary for safety control.
- the diagnostic method of the present invention is also applied when the number of timers is three or more. It is possible.
Landscapes
- Maintenance And Inspection Apparatuses For Elevators (AREA)
- Indicating And Signalling Devices For Elevators (AREA)
- Elevator Control (AREA)
Abstract
Description
特許文献1の従来装置は、最寄り階停止のための猶予時間をカウントするタイマー回路を備えており、タイマーの健全性を確認するためには、サービス休止中において、周期的に、タイマー回路を動作させる必要がある。この結果、タイマー診断中は、エレベータを稼働できない、あるいは、タイマー時限が経過するまでタイマーの異常が検出できない、という問題があった。
図1は、本発明の実施の形態1におけるエレベータ安全制御装置を含む全体構成図である。本実施の形態1における安全制御装置10は、二重化された第1CPU(Central Processing Unit)1、第2CPU2を備えて構成されている。各第1CPU1および第2CPU2には、図示していないが、ROM(Read Only Memory)、RAM(Random Access Memory)、クロック、ウォッチドッグタイマ、バス等が具備されている。
まず始めに、安全制御装置10は、タイマーカウンタが時限判定値に到達した際に、出力インタフェース3、4(以下の説明では、出力部と称す)が正常に動作することでオフ状態に切り換わるか否かを診断する。具体的には、安全制御装置10は、前回の診断から一定時間経過していると判断した場合には、タイマーカウンタを、あらかじめ設定した時限判定値から診断時間(例えば、1秒)を引いた値に設定し(ステップS303)、タイマー動作を開始させる(ステップS304)。
次に、安全制御装置10は、タイマーカウント部の診断を行う。具体的には、安全制御装置10は、第1CPU1および第2CPU2でのカウント値を比較することで、タイマーカウンタ部の診断を行っている。
・他方のCPUにも異常検出を通知する。
・少なくとも一つの系(CPU)の出力をオフして、巻上機電源およびブレーキ電源を遮断し、かごを停止させる。
・運行制御装置16に対して、サービス停止要求(異常検出信号)を送信する。
かご戸および乗場戸の開閉を検出する各ドアスイッチ、かごが着床ゾーンにあることを検出する着床センサのそれぞれの信号を入力とし、戸開中にかごが着床ゾーンから外れたことを検出して非常停止する機能。
かご戸および乗場戸の開閉を検出する各ドアスイッチの信号を入力とし、保守員による戸開を検知すると、運行制御装置に自動運転を無効化するよう指令を出す機能。
かごの動きを監視する各スイッチからの信号、保守員による運転操作信号からの信号をそれぞれ入力とし、閉じ込め発生時の乗客救出等の運転時に、一部のスイッチからの信号を無効化する機能。
かご戸および乗場戸の開閉を検出する各ドアスイッチ、保守員による運転操作信号からのそれぞれの信号を入力とし、ドアスイッチ点検時に、ドアスイッチからの信号を無効化する機能。
かごの移動を検知する昇降路に設置されたスイッチ、調速機または巻上機に取り付けられたエンコーダからのそれぞれの信号を入力とし、かごの過速度を検知すると非常停止する機能。
図4は、本発明の実施の形態2におけるエレベータ安全制御装置を含む全体構成図である。本実施の形態2における安全制御装置10は、先の実施の形態1における図1の構成と比較すると、タイマー5、タイマー6、タイマー比較部7を、第1CPU1および第2CPU2の外部に設けている点が異なっている。そこで、このような構成上の相違点を中心に、以下に説明する。
Claims (5)
- エレベータの状態を監視するスイッチまたはセンサからの監視信号を読み取る入力部と、
前記入力部を介して読み取った前記監視信号に基づいて安全監視機能を実行する、少なくとも1つの演算処理部と、
前記演算処理部とは独立に設けられ、または前記演算処理部の内部に設けられたタイマーと、
前記エレベータの巻上機およびブレーキのそれぞれに供給される電源を遮断する信号を出力する出力部と
を備え、前記演算処理部において、前記入力部を介して読み取った前記監視信号に基づいて前記安全監視機能を実行することで前記エレベータの異常を検出した場合に、前記タイマーを起動し、前記タイマーの時限にて前記出力部から前記電源を遮断する信号を出力させることで、前記巻上機および前記ブレーキに供給される電源を遮断してかごを停止させるエレベータ安全制御装置であって、
前記演算処理部とは独立に設けられ、または前記演算処理部の内部に設けられ、タイマーカウント診断処理を実行するタイマー比較部をさらに備え、
前記タイマーは、2重系として起動される独立した2つのタイマーで構成され、
前記タイマー比較部は、起動された前記2つのタイマーのカウント値を相互比較し、前記2つのタイマーのカウント値の差があらかじめ設定した一定差分値以上となった場合には、前記2つのタイマーの少なくとも一方でカウント異常が発生したと判断し、前記かごを停止させることで、前記タイマーカウント診断処理を実行する
エレベータ安全制御装置。 - 前記演算処理部は、
エレベータの運行を統括制御する運行制御装置に対して診断開始信号を送信した返答として、前記運行制御装置から診断許諾信号を受信した場合には、前記2つのタイマーを起動させ、前記タイマー比較部による前記タイマーカウント診断処理を実行させ、
前記2つのタイマーのそれぞれのカウント値が前記タイマーの時限に到達するまでに、前記タイマー比較部により前記カウント異常が発生したと判断されない場合には、前記2つのタイマーが正常であると判断し、前記タイマーカウント診断処理を終了させ、
前記2つのタイマーのそれぞれのカウント値が前記タイマーの時限に到達するまでに、前記タイマー比較部により前記カウント異常が発生したと判断された場合には、前記2つのタイマーの少なくとも一方が異常であると判断し、前記かごを停止させ、
前記タイマーカウント診断処理を実行中に、前記運行制御装置からサービス要求発生信号を受信した場合には、前記タイマー比較部による前記タイマーカウント診断処理を中断させるとともに、現時点までのカウント値をカウンタ保存値として記憶し、
前記タイマーカウント診断処理を中断中に、前記運行制御装置から前記診断許諾信号を再度受信した場合には、前記カウンタ保存値を初期値として設定して前記2つのタイマーを再起動させ、前記タイマー比較部による前記タイマーカウント診断処理を再開させる
請求項1に記載のエレベータ安全制御装置。 - 前記演算処理部は、
前記運行制御装置から前記診断許諾信号を受信した場合に、前記時限の直近の値を初期値として設定して前記2つのタイマーを起動させ、時限経過後に前記出力部の信号を読み取ることで、前記巻上機および前記ブレーキに供給される電源を遮断できる状態にあることを確認する
請求項2に記載のエレベータ安全制御装置。 - 前記演算処理部は、かごを目的階または最寄り階に停止させるために必要な時間を前記タイマーの時限として設定し、前記入力部を介して読み取った前記信号に基づいて前記安全監視機能を実行することで前記エレベータの異常を検出した場合には、前記かごを前記目的階または前記最寄り階に停止させるために、前記運行制御装置に対して停止指令を出力する
請求項1から3のいずれか1項に記載のエレベータ安全制御装置。 - エレベータの状態を監視するスイッチまたはセンサからの監視信号を読み取る入力部と、
前記入力部を介して読み取った前記監視信号に基づいて安全監視機能を実行する、少なくとも1つの演算処理部と、
前記演算処理部とは独立に設けられ、または前記演算処理部の内部に設けられ、2重系として起動される独立した2つのタイマーと、
前記エレベータの巻上機およびブレーキのそれぞれに供給される電源を遮断する信号を出力する出力部と、
前記演算処理部とは独立に設けられ、または前記演算処理部の内部に設けられ、タイマーカウント診断処理を実行するタイマー比較部と
を備えたエレベータ安全制御装置で実行されるエレベータ安全制御方法であって、
前記演算処理部において、前記エレベータの運行を統括制御する運行制御装置に対して診断開始信号を送信した返答として、前記運行制御装置から診断許諾信号を受信した場合には、前記2つのタイマーを起動させる第1ステップと、
前記タイマー比較部において、前記第1ステップにより前記2つのタイマーを起動させた後、前記2つのタイマーのカウント値を相互比較し、前記2つのタイマーのカウント値の差があらかじめ設定した一定差分値以上となった場合には、前記2つのタイマーの少なくとも一方でカウント異常が発生したと判断することで、前記タイマーカウント診断処理を実行する第2ステップと、
前記演算処理部において、前記2つのタイマーのそれぞれのカウント値が前記タイマーの時限に到達するまでに、前記タイマー比較部による前記第2ステップにより前記カウント異常が発生したと判断されない場合には、前記2つのタイマーが正常であると判断し、前記第2ステップによる前記タイマーカウント診断処理を終了させる第3ステップと、
前記演算処理部において、前記2つのタイマーのそれぞれのカウント値が前記タイマーの時限に到達するまでに、前記タイマー比較部による前記第2ステップにより前記カウント異常が発生したと判断された場合には、前記かごを停止させる第4ステップと、
前記第2ステップによる前記タイマーカウント診断処理を実行中に、前記演算処理部において、前記運行制御装置からサービス要求発生信号を受信した場合には、前記第2ステップによる前記タイマーカウント診断処理を中断させるとともに、現時点までのカウント値をカウンタ保存値として記憶する第5ステップと、
前記第2ステップによる前記タイマーカウント診断処理を中断中に、前記演算処理部において、前記運行制御装置から前記診断許諾信号を再度受信した場合には、前記カウンタ保存値を初期値として設定して前記2つのタイマーを再起動させ、前記タイマー比較部による前記タイマーカウント診断処理を再開させる第6ステップと
を有するエレベータ安全制御方法。
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE112015005972.5T DE112015005972B4 (de) | 2015-01-16 | 2015-01-16 | Aufzugsicherheits-steuervorrichtung und aufzugsicherheits-sicherheits-steuerverfahren |
CN201580070629.6A CN107108156B (zh) | 2015-01-16 | 2015-01-16 | 电梯安全控制装置及电梯安全控制方法 |
PCT/JP2015/051056 WO2016113895A1 (ja) | 2015-01-16 | 2015-01-16 | エレベータ安全制御装置およびエレベータ安全制御方法 |
JP2016569190A JP6230729B2 (ja) | 2015-01-16 | 2015-01-16 | エレベータ安全制御装置およびエレベータ安全制御方法 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/JP2015/051056 WO2016113895A1 (ja) | 2015-01-16 | 2015-01-16 | エレベータ安全制御装置およびエレベータ安全制御方法 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2016113895A1 true WO2016113895A1 (ja) | 2016-07-21 |
Family
ID=56405456
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/JP2015/051056 WO2016113895A1 (ja) | 2015-01-16 | 2015-01-16 | エレベータ安全制御装置およびエレベータ安全制御方法 |
Country Status (4)
Country | Link |
---|---|
JP (1) | JP6230729B2 (ja) |
CN (1) | CN107108156B (ja) |
DE (1) | DE112015005972B4 (ja) |
WO (1) | WO2016113895A1 (ja) |
Families Citing this family (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP3599203B1 (en) | 2018-07-27 | 2022-06-15 | Otis Elevator Company | Elevator safety system |
CN109795924B (zh) * | 2018-12-27 | 2021-12-31 | 日立电梯(中国)有限公司 | 安全电子板的状态监控方法、装置和安全电子板 |
KR102107672B1 (ko) * | 2019-02-13 | 2020-05-07 | (주)에이펙스테크놀러지 | 건물 공동 출입문과 연동된 엘리베이터 관리 시스템 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPS56157215A (en) * | 1980-05-08 | 1981-12-04 | Mitsubishi Electric Corp | Protection relay unit |
WO2006090470A1 (ja) * | 2005-02-25 | 2006-08-31 | Mitsubishi Denki Kabushiki Kaisha | エレベータ装置 |
JP5360231B2 (ja) * | 2009-12-15 | 2013-12-04 | 三菱電機株式会社 | エレベータ装置 |
Family Cites Families (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP2452907A1 (en) * | 2010-11-11 | 2012-05-16 | Inventio AG | Elevator Safety Circuit |
JP5833995B2 (ja) * | 2012-10-05 | 2015-12-16 | 株式会社日立ビルシステム | エレベータの異常監視装置 |
-
2015
- 2015-01-16 JP JP2016569190A patent/JP6230729B2/ja not_active Expired - Fee Related
- 2015-01-16 DE DE112015005972.5T patent/DE112015005972B4/de not_active Expired - Fee Related
- 2015-01-16 WO PCT/JP2015/051056 patent/WO2016113895A1/ja active Application Filing
- 2015-01-16 CN CN201580070629.6A patent/CN107108156B/zh not_active Expired - Fee Related
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPS56157215A (en) * | 1980-05-08 | 1981-12-04 | Mitsubishi Electric Corp | Protection relay unit |
WO2006090470A1 (ja) * | 2005-02-25 | 2006-08-31 | Mitsubishi Denki Kabushiki Kaisha | エレベータ装置 |
JP5360231B2 (ja) * | 2009-12-15 | 2013-12-04 | 三菱電機株式会社 | エレベータ装置 |
Also Published As
Publication number | Publication date |
---|---|
CN107108156B (zh) | 2019-06-28 |
DE112015005972B4 (de) | 2021-12-02 |
CN107108156A (zh) | 2017-08-29 |
JP6230729B2 (ja) | 2017-11-15 |
JPWO2016113895A1 (ja) | 2017-04-27 |
DE112015005972T5 (de) | 2017-10-12 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP5816102B2 (ja) | 電子安全エレベータ | |
JP5550718B2 (ja) | エレベータ安全制御装置 | |
US10006455B2 (en) | Drive control apparatus | |
WO2015079976A1 (ja) | エレベータの安全システム | |
JP5624845B2 (ja) | 電子安全エレベータ | |
JP5682323B2 (ja) | 安全制御システム | |
JP6230729B2 (ja) | エレベータ安全制御装置およびエレベータ安全制御方法 | |
CN109843772B (zh) | 电梯控制装置、控制方法和电梯 | |
JP6207961B2 (ja) | エレベータの安全システム | |
JP7280709B2 (ja) | エレベーター及びエレベーターの制御方法 | |
JP6132976B2 (ja) | エレベータの制御装置 | |
SG180072A1 (en) | Elevator equipped with an electronic safety system | |
KR20120042991A (ko) | 엘리베이터의 안전 장치 | |
JP5402175B2 (ja) | 電動機駆動システム | |
JP6821086B2 (ja) | エレベーター制御装置およびエレベーター制御方法 | |
JP7279836B1 (ja) | 制御装置、制御方法、および乗客搬送制御装置 | |
JP2009091101A (ja) | エレベータのエミュレーション装置 | |
JP6625964B2 (ja) | 昇降機制御装置および昇降機制御方法 | |
WO2018198244A1 (ja) | エレベータの運転装置 | |
JP2001199648A (ja) | エレベータの救出運転装置 | |
SG186544A1 (en) | Elevator-use electronic safety assurance control apparatus | |
JPH02276784A (ja) | エレベータの制御装置 | |
JPH0133418B2 (ja) | ||
JP2005154132A (ja) | エレベータの制御装置 | |
JPH0122650B2 (ja) |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 15877847 Country of ref document: EP Kind code of ref document: A1 |
|
ENP | Entry into the national phase |
Ref document number: 2016569190 Country of ref document: JP Kind code of ref document: A |
|
WWE | Wipo information: entry into national phase |
Ref document number: 112015005972 Country of ref document: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 15877847 Country of ref document: EP Kind code of ref document: A1 |