Control unit for an elevator installation

Abstract

The invention comprises a control unit for an elevator installation, wherein at least one separation element (12, 31, 32, 33, 34, 35) is configured according to the invention in such a way that the safety circuit (3) can be interrupted in less than 5 milliseconds, preferably less than 2.5 milliseconds, further preferably less than 3 milliseconds, in order to detect a compliant operating state of the elevator installation by at least one checking action in the activated state of the safety element (7) of the drive unit (2), in particular the main protection device (8) or the functional unit, in particular a maintenance bridge (5) that has been contacted in the safety circuit (3) and / or a fault-induced short circuit.

Description

Technical Field

[0001] This invention relates to a control unit for an elevator system according to the preamble of claim 1, the elevator system having a car movable between floors along an elevator shaft and a drive unit for moving the car between floors, wherein the control unit is configured to cooperate with a safety circuit, particularly through the elevator shaft, the safety circuit being constructed by a plurality of safety switches connected in series, the plurality of safety switches being switchable between an open state that interrupts travel and a closed state that releases travel, depending on safety-related operating conditions of the elevator system, wherein the safety circuit, particularly at least one safety switch, is bridging in sections via electrical contacts of a maintenance bridge for maintenance and / or repair work, has an intermediate tap arranged in the safety circuit for tapping intermediate voltage, and has a fuse element, particularly a main protection device, the fuse element being able to... The safety circuit is operated as follows: when the safety circuit is interrupted, the fault state of the fuse element is activated to shut off the drive unit, in particular to disconnect the supply voltage from the drive unit; and when the safety circuit is closed, the activation state of the fuse element is activated to activate the drive unit for the driving operation, in particular to connect the drive unit to the supply voltage. It has a monitoring device and a connection device for measuring and evaluating intermediate voltages. The monitoring device and the connection device are in an operational connection with the safety circuit as follows: the safety circuit can be interrupted and / or at least one safety switch can be connected by means of at least one disconnecting element that can switch between a closed switching position and an open switching position. The monitoring device and the connection device are configured to perform a check operation to detect at least one intermediate voltage based on the switching position of the at least one disconnecting element.

[0002] Furthermore, the present invention relates to an elevator facility having a control unit according to the invention, and the application of the control unit according to the invention for operating the elevator facility. Background Technology

[0003] As is generally known in the prior art, a safety circuit for monitoring elevator facilities is constructed by routing multiple safety switches connected in series along the elevator shaft. Each safety switch in the safety circuit has an open and a closed state and monitors safety-related operating parameters of the elevator facility. Thus, for example, when security personnel perform maintenance work, the safety switches in the safety circuit are placed in the open state, thereby interrupting the safety circuit. Because the safety circuit is operatively connected to a safety element (which in turn affects the operating state of the elevator facility's drive unit), it is ensured that the elevator car cannot move when the safety circuit is interrupted. For this purpose, the safety circuit is often connected to the control input of a power protection device (main protection device), which is triggered when the safety circuit is interrupted, disconnecting the supply voltage from the drive unit.

[0004] Furthermore, it is known from existing technology that the closing status of the car door and / or the landing door is monitored by a safety switch to prevent the car from moving under any circumstances when the car door or landing door is open or not fully closed, as this represents a high possibility of injury to passengers.

[0005] However, what is required for maintenance and / or repair work is that individual safety switches and / or groups of safety switches in the safety circuit are interrupted by the electrical contact of the maintenance bridge, so as to facilitate, for example, troubleshooting of damaged components and / or, for example, enable the necessary maintenance work on the elevator facility to be performed in the elevator shaft. But what always happens is that maintenance bridges, which are only temporarily installed for performing maintenance work, are either intentionally left in the safety circuit for the temporary (mostly only temporarily planned) operation of the elevator facility, or unintentionally left in the safety circuit purely due to service personnel negligence.

[0006] Therefore, monitoring and measurement are performed at regular intervals in elevator systems to check for compliance with prescribed operating conditions. In this case, short circuits caused by faults in the safety circuit can be identified, in addition to maintenance bridges that are not permitted to be left in place. To perform monitoring and measurement, known control units have monitoring devices configured to measure and detect intermediate voltages in the safety circuit and have engagement devices including disengagement elements that can be connected between a closed switching position and an open switching position. In this case, the engagement devices are in an active connection with the safety circuit, such that either individual safety switches or groups of safety switches can be bridging via a path connected by the disengagement element, or the safety circuit can be interrupted by opening the disengagement element. However, in the case of known control units, when performing the inspection actions required for monitoring and measurement (in which case at least one intermediate voltage is detected based on the switching position of at least one disengagement element), an interruption of the safety circuit occurs, negatively impacting the operation of the elevator system. Furthermore, in elevator systems with a main protection device (power protection device) as a safety element, interrupting the safety circuit disconnects the energy supply from the elevator system. Therefore, the necessary monitoring and measurement can only be performed during the idle phase of the elevator facility, that is, only when no passengers are using the elevator. Furthermore, the triggering of the power protection device, through the mechanical separation and connection of contacts, is accompanied by loud switching noise, which can be perceived as interference in residential and / or office environments. Summary of the Invention

[0007] For this reason, the objective of the present invention is to overcome the disadvantages known from the prior art and to provide an improved control unit for elevator systems. Furthermore, the objective of the present invention is particularly to improve the control unit for elevator systems in such a way that, while regularly monitoring the safety circuit for unacceptable operating conditions, complete disconnection of the drive unit from the supply voltage can still be prevented.

[0008] Furthermore, the objective is to provide an elevator system that includes such a control unit according to the invention.

[0009] The task is addressed using the features of claim 1 in relation to the control unit of the elevator, namely, that at least one disconnecting element is configured such that the safety circuit can be interrupted for less than 5 milliseconds, preferably less than 2.5 milliseconds, and more preferably less than 1.3 milliseconds, so as to detect the conformity of the elevator facility's operating status, particularly short circuits caused by maintenance bridges and / or faults that have been contacted in the safety circuit, through at least one check action while the safety element of the drive unit, especially the main protection device or functional unit, is in an activated state.

[0010] Regarding the elevator system, this task is solved using the features of claim 14.

[0011] Advantageous improvements of the invention are given in the dependent claims.

[0012] All combinations of at least two features disclosed in the specification, claims and / or drawings fall within the scope of this invention.

[0013] The invention is based on the fact that the monitoring device and the connection device are configured such that, in the activated state of the safety element, i.e., in particular the main protection device, at least one inspection action is performed to detect the compliant operating state of the elevator facility, especially the short circuit caused by the maintenance bridge and / or fault that is electrically contacted in the safety circuit.

[0014] In other words, the control unit according to the invention can perform a check operation while the safety element is in an activated state, i.e., particularly simultaneously with car travel. Thus, the safety element is not allowed to be replaced into a faulty state, or the safety circuit is not allowed to be affected and / or interrupted by the check operation, i.e., the check operation is detected by the safety element and therefore does not activate the faulty state. Nevertheless, it should be feasible to check and / or test the elevator facility's conformity to the prescribed operating state through at least one check operation, by evaluating the detected intermediate voltage based on the switching posture of the disconnecting element, to detect maintenance bridges that are not allowed to remain in the safety circuit and / or detect short circuits, especially due to faulty components.

[0015] Therefore, within the scope of this invention, the separation element is configured and manipulated such that the safety circuit can be interrupted for less than 5 milliseconds, preferably less than 2.5 milliseconds, and more preferably less than 1.3 milliseconds, wherein the safety element is not constructed and / or configured to detect such short interruptions.

[0016] Incorporating a fuse element as the preferred configuration of the main protection device means that the supply voltage is connected to the drive unit via the switchable power contacts of the main protection device, wherein the control input of the main protection device is in active connection with the safety circuit. Because the control input of the main protection device includes a time delay mechanism, this results in the main protection device remaining in a closed state when performing a check operation. In this case, the relatively small operating time (small switching power) of the protection device and the existing line inductance and / or capacitance effects are advantageously utilized in the safety circuit according to the invention, which prevent the power operation of the protection device. In this case, a custom-designed delay mechanism, especially a capacitor, can also be additionally arranged on the control input.

[0017] Furthermore, the inspection and / or analysis of the safety circuit according to the invention in the closed state of the main protection device can achieve the avoidance of unfavorable switching noise of the main protection device, which works advantageously in the case of using controllers in elevator facilities in office areas and / or residential areas.

[0018] Alternatively, the safety element can also be configured as a functional unit and / or integrated component of a drive unit, wherein the drive unit includes a converter with a control monitoring input for receiving and / or electrically contacting the safety circuit. The control input can advantageously monitor the safety circuit, wherein a fault condition can be directly triggered in the converter if a defined voltage level, such as the supply voltage dropping to 0V based on an open safety switch, is present. In this configuration, it is also advantageous to additionally arrange a delay mechanism, particularly a capacitor, on the control monitoring input, so that the adaptation can be directly implemented in hardware based on the detection speed of the functional unit. In this case, the aging process in the capacitor advantageously results in a shorter delay time, thus avoiding safety-related problems based on the levers of the protection scheme.

[0019] "Inspection action" is understood within the scope of this invention as forming and / or generating a specific switching posture by means of at least one separating element via a connecting device and detecting at least one intermediate voltage via a monitoring device at at least one intermediate voltage tap in a safety circuit.

[0020] The operating state of the elevator facility can be understood by describing it as being in the "activated state" of the safety element. In this operating state, the elevator facility is in a ready-to-go state, that is, the car can travel between floors (travel operation) according to the passenger settings.

[0021] A maintenance bridge can involve a fixedly installed circuit that can be activated by service personnel during maintenance to activate a bypass for bridging a safety circuit (individual safety switches and / or groups of safety switches), wherein the disconnected portion of the safety circuit is preferably disconnected from the safety circuit at least on the input side by opening contact elements. Alternatively, the maintenance bridge can also be constructed of conductors, especially conductive wires, which are brought into the functional connection with the safety circuit for bridging the safety switches.

[0022] Therefore, within the scope of this invention, it should be feasible to set the car's travel speed to a reduced rate only, since the maintenance bridge has been detected.

[0023] Monitoring the safety circuit while the safety element is activated allows for improvements to the control unit, as analysis of the safety circuit can now be performed not only when the elevator is stationary and / or idle, but also at any point in time, particularly during routine operation of the elevator. This significantly increases the number of checks (tests consisting of at least one inspection action), thus enabling earlier identification of unacceptable conditions and / or short circuits caused by malfunctions.

[0024] In a preferred embodiment, the separating element is configured and operable via a corresponding drive circuit such that the switching frequency can operate between 0.5 kHz and 30 kHz, preferably 0.5 kHz and 16 kHz, more preferably 0.5 kHz and 9 kHz, and very particularly preferably 0.5 kHz and 2 kHz. Advantageously, this allows for the application of standardized separating elements and corresponding drive circuits, resulting in low cost. Furthermore, the correspondingly configured separating element can enable the safety circuit to be interrupted and / or separated for short periods of time, i.e., periods not detected by the safety element, in order to advantageously perform at least one check action according to the invention.

[0025] Improvedly, this association also includes the configuration where the discrete elements disposed and / or arranged in the bonding device are configured as switchable semiconductor structural elements. In this association, it is particularly preferred to advantageously configure the semiconductor structural elements as MOSFETs, IGBTs, and / or thyristors, as these switching technologies can operate at high switching frequencies with low losses. This enables the low-cost implementation of discrete elements, as can be attributed to standardized components and / or proven circuit schemes.

[0026] Of particular advantage, it should be mentioned in this connection, that high switching speeds are achievable through modern semiconductor structural components, ensuring that even when the safety circuit is interrupted (very briefly) during the execution of inspection actions, the fuses, especially power protection devices or main protection devices, do not switch to a fault state due to the inertia caused by the components and / or the line inductance present in the wiring and / or leads. This not only allows for the execution of the corresponding inspection actions while the fuses are in the activated state, but also thereby increases the number of corresponding inspection measurements and / or test measurements (sequences of different inspection actions) during the normal operation of the elevator facility, as it is no longer necessary for the elevator to be in an idle phase, i.e., just when no passengers are being transported, during the execution of inspection measurements and / or test measurements.

[0027] An improved configuration: The junction device includes at least three discrete elements or switchable semiconductor structure elements, preferably configured as bipolar transistors, MOSFETs, IGBTs, and / or thyristors, to interrupt the safety circuit configured as a DC voltage loop and to bridge one or a group of safety switches. In this case, an arc suppression circuit is provided in connection with the thyristor configuration. The preferred application, known from the prior art, is to place the thyristor back into the off state. Alternatively, combinations of the aforementioned semiconductor structural elements can also be considered. In this association, for redundancy reasons, it can also be improved by using at least five discrete or switchable semiconductor structural elements, especially MOSFETs, IGBTs, and / or thyristors, to ensure the functionality of the safety circuit, i.e., to guarantee the interruption of the safety circuit, so as to double the safety switch fixedly assigned to the safety circuit and thus constructed to interrupt the safety circuit.

[0028] Advantageously, this allows for (n-1) safety, enabling the interruption of the safety circuit, especially in the event of damage to the disconnecting element and the possible continuous closure of the corresponding disconnecting element during switching. However, it is also conceivable, as an improvement, that the coupling device comprises a total of ten disconnecting elements or semiconductor structural elements, so that the control unit according to the invention can be used not only for DC-based safety circuits but also for AC-based safety circuits.

[0029] Furthermore, one embodiment of the invention is also preferred, wherein the control unit is configured to cooperate with a safety loop having an AC voltage as the supply voltage. In this case, the coupling device advantageously comprises at least five switchable semiconductor structural elements, wherein these semiconductor structural elements, configured to interrupt the safety loop, are arranged in double, particularly in anti-series configuration, to completely block both the positive and negative half-waves of the supply voltage and avoid unwanted current paths, particularly via an anti-parallel body diode of a MOSFET. Advantageously, in this association, the self-arc suppression characteristics of the thyristor can be fully utilized in conjunction with the supply voltage configured as AC.

[0030] Furthermore, this association can be improved by including additional discrete elements or semiconductor structural elements, also for redundancy reasons, i.e., to enhance safety or to ensure (n-1) safety, such that the discrete elements or semiconductor structural elements constructed to interrupt the safety circuit are arranged in double, i.e., in series with each other. In this case, the embodiment corresponding to the DC voltage circuit can still achieve reliable interruption of the safety circuit even in the event of semiconductor element failure and a continuously closed state. In other words, this association is configured such that the control unit or junction device comprises a total of ten semiconductor structural elements, wherein the control unit should comprise a total of no more than 20 discrete elements or semiconductor elements, preferably less than 16 discrete elements or semiconductor elements, and more preferably less than 11 discrete elements or semiconductor elements.

[0031] Furthermore, according to another preferred design of the invention, it is advantageously provided that at least five intermediate voltages are detected and evaluated by a monitoring device.

[0032] For this purpose, the intermediate voltage is connected to the center tap of the safety circuit so that the measured value of the supplied voltage can be detected based on the position of the corresponding center tap. Advantageously, this allows for the positioning of the opened safety switch in the safety circuit and / or a completely general inspection or detection of the operating status of the elevator equipment. This enables the detection of electrically contacted maintenance bridges in the safety circuit and / or the identification of short circuits caused by faults in the safety circuit, especially short circuits based on damaged safety switches or damaged disconnect components.

[0033] Furthermore, within the scope of an improved embodiment of the invention, the control unit is configured and arranged such that the safety loop is operationally connected to the monitoring device and / or connection device via a total of six interfaces. In this case, a bypass can be connected to the safety switches of the safety loop via one interface, either through the control unit or through the connection device, to bridging these safety switches. Alternatively, the safety loop can be constructed in a segmented manner via a pair of interfaces so that the safety loop can be completely interrupted by a separating element arranged in that segment. It is also conceivable that one interface is used solely to form an intermediate tap for voltage measurement.

[0034] In this case, for redundancy reasons, it is preferable that the discrete elements arranged in sections within the safety circuit are arranged in pairs within the constructed sections of the safety circuit. Thus, in the event of failure of a discrete element, the interruption of the safety circuit can be ensured by a second discrete element, thereby ensuring the failure state of the trigger fuse. Furthermore, it is also advantageous in this arrangement, particularly when MOSFETs or IGBTs are preferably used as discrete elements, that a total of four discrete elements are arranged in the sections of the safety circuit, wherein these discrete elements are then connected to each other in pairs in series and anti-series.

[0035] Furthermore, it is particularly preferred that safety switches be arranged in the safety circuit to monitor the closing state of the at least one car door and / or floor door, wherein, in this connection, the monitoring device and the engagement device are constructed such that the switching state of the corresponding safety switch can be detected by evaluating, in particular, at least three intermediate voltages, based on the switching posture of at least three disconnecting elements.

[0036] Advantageously, this can be achieved by improving the control unit according to the invention so that the closing status of the floor doors and / or car doors can be monitored at any time, thus eliminating the need for additional inspection and / or detection devices.

[0037] The engagement device is improved such that a disengagement element, particularly a first disengagement element, is arranged via an interface, particularly a first interface, on the output side of a safety switch in the safety circuit. These safety switches are used to monitor the closing status of the car door and / or the landing door. Furthermore, the engagement device includes additional disengagement elements, particularly second and third disengagement elements, which are functionally connected to the safety circuit via interfaces, particularly via the first and fourth interfaces. The safety switches for monitoring the closing status of the closed doors and the first disengagement element can be bridging these accessible paths.

[0038] Alternatively, for redundancy ((n-1)-safety), two or four disconnecting elements can be configured, either connected in series or anti-series. A particularly preferred design involves directly connecting two disconnecting elements in series, with the latter additionally connected anti-series to two first disconnecting elements. This ensures functionality regarding the cutoff capability of the disconnecting elements by their paired arrangement within a safety circuit with an AC voltage that has both positive and negative half-waves due to the AC portion. Alternatively, a switch pair can be constructed using two anti-series connected disconnecting elements, preferably then electrically connected in series to form an (n-1)-safety configuration.

[0039] This type of design allows for the temporary bridging of safety switches in the safety circuit to monitor closed car doors and / or floor doors, so that door opening is initiated, for example, before the car reaches its final position, without interrupting the safety circuit due to the switching of the corresponding safety switch from closed to open. Advantageously, this reduces waiting time for passengers in the car.

[0040] Furthermore, this type of improvement to the control unit can also be achieved by controlling the drive unit to advantageously balance the step formed between the floor and the car floor in the car's stopped position, which is caused by load changes due to passenger entry and exit. This advantageously renders additional adjusting devices, which would otherwise be necessary to bridge the safety circuit and / or to control the drive unit, in order to balance the step caused by car movement.

[0041] Furthermore, it should be mentioned in this context that the control unit can also detect the loss of drivability of the elevator system in this situation, thereby activating an emergency system, such as a mechanical brake, to prevent further damage. Therefore, in a corresponding improvement to the control unit according to the invention, the adjustment device for this purpose is also redundant.

[0042] Furthermore, within the scope of another preferred embodiment of the control unit, the monitoring device is configured and arranged such that a first intermediate voltage SR1_out can be measured in order to detect the voltage potential at a first intermediate tap, which is arranged in the safety circuit on the positive contact pin or positive terminal of the fuse element, i.e., in particular, to detect the voltage at the control input terminal of the main protection device.

[0043] In addition, or alternatively, it is also provided that: a second intermediate voltage ACD1 can be detected to detect the voltage on a second intermediate tap, which is arranged on the negative contact pin / connector of the at least one safety switch for monitoring the closing state of the car door, and / or a third intermediate voltage SCD1 can be detected to detect the voltage on a third intermediate tap, wherein the third intermediate tap is arranged between at least one safety switch for monitoring the closing state of at least one floor door and at least one safety switch for monitoring the closing state of at least one car door.

[0044] In addition, the association also includes the detection of the fourth intermediate voltage OC_out on the fourth intermediate tap, wherein the fourth intermediate tap in the safety loop is arranged on the output side of the upper interface pair, specifically directly at the fifth interface.

[0045] Finally, the monitoring device can also be constructed in such a way that the fifth intermediate voltage OC_in can be detected at the fifth intermediate tap of the safety loop, wherein the fifth intermediate tap is arranged on the input side of the upper interface pair, especially at the sixth interface.

[0046] Improved or supplementary, the fourth intermediate tap may also be located at the positive contact pin / joint of the safety switch originally arranged in the safety circuit, wherein, in particular, the fifth intermediate tap is separated from the safety circuit by a coupled switch together with a safety switch or group of safety switches via contact with a maintenance bridge preferably fixedly mounted.

[0047] The connector of a safety switch or fuse is understood by naming it "positive contact pin / positive connector / positive contact pin," which is located near the supply voltage. Conversely, the negative contact pin / negative connector / negative contact pin of a safety switch is the connector of a fuse, which is located away from the supply voltage in the safety circuit, i.e., at a negative potential, and is therefore located particularly near the fuse or, particularly, near the main protection device.

[0048] Advantageously, detecting and evaluating the intermediate voltage defined above enables the detection of the state of the intermediate circuit and thereby the detection of the safety-related operating state of the elevator facility. Advantageously, it also enables the detection of short circuits caused by maintenance bridges and / or faults that have been contacted in the safety circuit during the activation state of the safety element.

[0049] Furthermore, an improved arrangement is made: the connecting device is constructed and configured such that the first intermediate tap can be connected to the second intermediate tap via a first separating element. Further improved arrangement: the first intermediate tap can be connected to the fourth intermediate tap via a second separating element, preferably via two separating elements connected in series or anti-series, more preferably via four separating elements, especially connected in pairs in series or anti-series. Also preferably, the fourth intermediate tap can be connected to the fifth intermediate tap via a third separating element, preferably via two separating elements connected in series or anti-series, more preferably via four separating elements, especially connected in pairs in series or anti-series. Thus, by turning the separating elements on or off and thereby connecting the parallel paths and / or interrupting the safety circuit at different points, the safety circuit can be advantageously affected, allowing the state of the safety circuit to be analyzed by detecting the intermediate voltage. Advantageously, it is possible to detect short circuits caused by safety switches bridging the maintenance bridge and / or faults.

[0050] Furthermore, a preferred design of the control unit according to the invention includes monitoring and engagement devices, which are constructed and configured such that a fixed sequence of tests or inspections, consisting of multiple inspection actions every 60 seconds, preferably every 30 seconds, and more preferably every 10 seconds, is performed to monitor the operational status of the elevator facility, particularly for detecting short circuits caused by maintenance bridges and / or faults in electrical contacts within the safety circuit. In this case, within the scope of the invention, the number of measurements used to check the functional performance of discrete components can be advantageously reduced, because, for example, based on aging and / or wear effects when using mechanical switches, such as preferably relays, it has been common practice until now to check functionality only every 24 hours. This has the advantageous effect of being able to identify faulty functions significantly earlier.

[0051] The monitoring and connection devices are improved to such that the corresponding sequence of predefined check actions for monitoring the operating status of the elevator facility, particularly for detecting short circuits caused by maintenance bridges and / or faults in electrical contacts of the safety circuit, lasts for a maximum of 1 second, preferably 500 milliseconds, more preferably 250 milliseconds, and most particularly preferably 100 milliseconds. In this connection, within the scope of the invention, the predefined sequence of check actions is arranged such that the control circuit is interrupted no longer than the value defined above. In this case, it is advantageous to combine a safety circuit with AC voltage, utilizing positive and / or negative zero-crossings of the supply voltage to generate a pause, wherein, in particular, the first check action is initiated to react to the detection of positive and / or negative zero-crossings.

[0052] Furthermore, the improved control unit includes a counter unit whose output value, count value, and / or sensor output signal can be activated to react to the result of a check operation, such as a missing voltage at the intermediate tap. Additionally, the improved control unit also includes a communication device configured and / or set to transmit sensor output signals, which can be either indirectly or directly influenced by or derived from the counter unit. The effect derived from this improvement is based on enabling temporary, i.e., travel operations permitted only for specific time periods, particularly with limited car speeds, especially near intermediate positions.

[0053] Of course, within the scope of this invention, protection is also claimed for the application of the control unit according to the invention for operating the elevator facility and for monitoring the operating status of the elevator facility, especially for detecting short circuits caused by maintenance bridges and / or faults that are not allowed to be accessed in the safety circuit of the elevator facility.

[0054] Furthermore, the present invention also claims protection for a system comprising an elevator facility and a control unit according to the present invention. Attached Figure Description

[0055] Other advantages, features and details of the invention will become apparent from the following description of preferred embodiments and from the accompanying drawings.

[0056] in:

[0057] Figure 1 A schematic diagram of a preferred embodiment of a control unit according to the present invention for an elevator system is shown;

[0058] Figure 2 A schematic diagram of switching states is shown, which are executed by the control unit 1 according to the invention during a test that includes multiple inspection actions;

[0059] Figure 3A schematic diagram of the switching states is shown, which are implemented in another test that includes multiple inspection actions; and

[0060] Figure 4 Another schematic diagram of another test is shown, which is conducted during the operation of the elevator facility with the car door and floor door closed. Detailed Implementation

[0061] Figure 1 A schematic structure of a preferred embodiment of the control unit 1 according to the present invention is shown. The control unit 1 shown is configured to cooperate with a control loop 3, which is constructed by a plurality of safety switches 4 connected in series. The safety switches 4 switch between an open state that prohibits travel and a closed state that releases travel, depending on the safety-related operating conditions of the elevator facility.

[0062] Safety circuit 3 is fed at the input side by supply voltage 10, which can be configured as either AC or DC voltage. Figure 1 The implementation shown involves DC voltage.

[0063] Safety circuit 3 is connected to fuse 7 on the output side. This fuse is currently configured as the main protection device 8, and its control input is connected to safety circuit 3. Once safety circuit 3 is interrupted and no voltage is applied to the control input of the main protection device 8, the main protection device 8 opens, and drive unit 2, connected via the power contacts of the main protection device 8, is disconnected from its power supply. This ensures that the car does not travel when safety circuit 3 is open, because drive unit 2 cannot travel without power or voltage supply.

[0064] Furthermore, in safety circuit 3, especially for performing maintenance and / or repair work, maintenance bridge 5 can be integrated to bridge individual safety switches 4 or groups of safety switches 4 by connecting a parallel path.

[0065] The corresponding maintenance bridge 5 is in Figure 1 This is achieved through a fixedly installed circuit that connects a bypass to the safety circuit 3 via an operating switch 17. This bypass bridging all the safety switches in the first group of safety switches 18 (not shown in detail).

[0066] One of the safety switches in the first group of safety switches 18 (not shown) monitors a capture device (not shown) to mechanically secure the car in the elevator shaft in case of a malfunction.

[0067] The drive unit 2 is disconnected from the power supply by interrupting safety circuit 3. To reset the capture device, the open safety switch must first be bridging the circuit by connecting the maintenance bridge 5, which is implemented through a fixed circuit. Because all the safety switches in the first group 18 are bridging the circuit in this operating state, this results in a critical operating state related to the safety of the elevator facility. To still interrupt operation, all disconnecting elements in safety circuit 3 are opened, thereby advantageously always allowing the safety element 7 to be placed in a fault state to shut down drive unit 2.

[0068] In addition to the first set of 18 safety switches, safety circuit 3 also includes additional safety switches 41 and 42, which monitor the closing status of at least one car door and at least one floor door. For overview purposes, Figure 1 The diagram shows only the safety switches for the corresponding functions of all floor doors and elevator doors. Nevertheless, it can be seen from this view that safety circuit 3 is interrupted by opening the door (car door or floor door) in order to prevent the car from traveling when the door is open.

[0069] Furthermore, the control unit 1 shown includes a monitoring device 9 for measuring and evaluating intermediate voltages, which are tapped at different intermediate taps 6 of the safety circuit 3. The connecting device is connected to the safety circuit 3 in such a way that the safety circuit 3 can be interrupted by means of at least one disconnecting element 12 and / or individual safety switches 4 or groups of safety switches 4 can be connected by closing the disconnecting element 12. For this purpose, the disconnecting elements 12 are configured such that they can switch between a closed switching position and an open switching position.

[0070] Controlling the separation element 12 and evaluating the intermediate voltage utilizes two in Figure 1 The microcontroller (not shown) performs this operation. The corresponding measurement and control signal flows are... Figure 1 The small arrows are used to illustrate the separation element 12 and the intermediate tap 6.

[0071] Advantageously, the monitoring device 9 and the engagement device 11 are configured and arranged to perform inspection actions. Within the scope of this invention, the inspection action is understood to be detecting at least one intermediate voltage based on the switching posture of at least one separation element 12, wherein a sequence of multiple inspection actions may also be performed to determine the operating status of the elevator facility.

[0072] The intermediate voltage can be advantageously detected and evaluated based on the different switching postures (inspection actions) of the separation element 12, and short circuits caused by electrical contact in the maintenance bridge 5 and / or faults in the safety circuit 3 can be detected. This allows for the inspection of the elevator facility's compliant operating condition.

[0073] According to the invention, the monitoring device 9 and the engagement device 11 are advantageously configured such that at least one inspection action can be performed in the activated state of the safety element 7 (i.e., when the main protection device 8 is in the closed switching position) to monitor the compliant operating status of the elevator facility and, in particular, to detect short circuits caused by electrical contact of the maintenance bridge 5 and / or faults in the safety circuit 3.

[0074] Furthermore, the control unit 1 shown is operatively connected to the safety circuit 3 of the elevator facility via six interfaces 51, 52, 53, 54, 55, and 56. In this case, the safety circuit 3 is constructed in sections via the upper interface pair 19 consisting of the fifth interface 55 and the sixth interface 56, wherein a separation element 12 for interrupting the safety circuit 3 is arranged in the section of the safety circuit 3 formed by the control unit 1.

[0075] Figure 1 The control unit 1 shown comprises a total of five discrete elements 12, which are configured as switchable semiconductor structure elements 13 in a preferred design of the field-effect transistors (MOSFETs) 14. Because the control unit 1 is configured to cooperate with the safety circuit 3 fed by a DC voltage, it does not include anti-series connected MOSFETs 14. However, for redundancy, two MOSFETs 14 are partially connected in series with each other so that the safety circuit 3 can be disconnected in case of a fault.

[0076] In addition, the control unit also includes a lower interface pair 20, which is configured via a first interface 51 and a fourth interface 54, and is functionally connected to the safety circuit 3 in such a way that safety switches 41 and 42, which are provided for monitoring the closing status of the car door and the floor door, can be bridging the gap through a separation element in a closed switching position.

[0077] In addition, the monitoring device 9 is constructed in order to perform at least one inspection action, that is, a total of five intermediate voltages can be detected.

[0078] Therefore, the first feasible approach is to detect the first intermediate voltage SR1_out at the first intermediate tap 21, which relates to the voltage on the positive contact pin of the fuse element 7. In this case, the control voltage of the main protection device 8 is also detected on the input side, thereby continuously monitoring the readiness status of the elevator facility.

[0079] In addition, a second intermediate voltage ACD1 is detected on the second intermediate tap 22, wherein the second intermediate tap 22 is arranged on the negative contact pin of at least one safety switch 42, which monitors the closing status of the car door.

[0080] A third intermediate voltage SCD1 is detected at a third intermediate tap 23, which is arranged between at least one safety switch 41 for monitoring the closing status of floor doors and at least one safety switch 42 for monitoring the closing status of at least one car door.

[0081] In addition, a fourth intermediate tap 24 is provided for contacting the fourth intermediate voltage OC_out. The fourth intermediate tap 24 is arranged on the output side of the upper interface pair 19, that is, directly arranged at the fifth interface 55.

[0082] The fifth intermediate voltage OC_in is measured on the fifth intermediate tap 25 of the safety circuit 3, wherein the fifth intermediate tap 25 is arranged on the input side of the upper interface pair 19, that is, on the sixth interface 56.

[0083] Furthermore, it is clear from the circuit shown in the control unit 1 that the first intermediate tap 21 can be connected to the second intermediate tap 22 via a first disconnect element 31, wherein the disconnect element is configured as a MOSFET 14.

[0084] It is also clear that the first interface 51 and the fourth interface 54 are connected via the second separation element 32 and the third separation element 33, wherein the second separation element 32 and the third separation element 33 are connected in series with each other.

[0085] Furthermore, the fourth intermediate tap 24 at the potential of the fifth interface 55 can be connected to the fifth intermediate tap 25 (of the sixth interface 56) via the fourth separation element 34 and the fifth separation element 35, wherein the fourth separation element 34 and the fifth separation element 35 are connected in series with each other.

[0086] Furthermore, the control unit 1 shown includes a counter unit 15, which can be controlled to react to the results of a check operation. Additionally, the control unit 1 has a communication device 16 to transmit control parameters to a communication partner (not shown) based on the sensor output signal of the counter unit 15 and / or the detected intermediate voltage, so as to enable, for example, the elevator facility to operate at a reduced travel speed and / or the final position of the car in the elevator facility to be changed for a limited time.

[0087] During the operation of the elevator facility, a sequence of multiple inspection actions is executed every 10 seconds by the control unit 1 according to the invention to monitor the operating status of the elevator facility. Advantageously, a positive zero crossing of the supply voltage 10 is detected for the timing of the inspection action and used to initiate the inspection action.

[0088] The discrete element 12, implemented as MOSFET 14, can advantageously achieve, according to the invention, interruption of the safety circuit 3 for short time periods based on a high switching speed, i.e., without triggering the main protection device 8.

[0089] Figure 2 To illustrate the inspection actions performed by the control unit 1 according to the invention, a section of the monitoring device 9 and the engagement device 11 is shown, wherein the four inspection actions are illustrated by the corresponding switching postures of the fourth separation element 34 and the fifth separation element 35.

[0090] In the first inspection action shown in area A, the fourth separating element 34 and the fifth separating element 35 are first closed by engaging device 9, and then the two intermediate voltages OC_in and OC_out on the fourth intermediate tap 24 and the fifth intermediate tap 25 are detected. The measurement results are then compared with empirical values, wherein, for the safety circuit 3 and / or the elevator facility to meet the specified operating conditions, the intermediate voltages OC_in and OC_out must have positive measured values ​​depending on the supply voltage 10.

[0091] In the second check operation shown in area B, the fifth separation element 35 is then turned on and the two intermediate voltages are re-detected and evaluated. The measurement results are now checked as follows: is no voltage measured on the intermediate voltage OC_out, where OC_in must also have a voltage value? If this is not the case, a fault has occurred.

[0092] In the third check operation shown in region C, the fourth separation element 34 and the fifth separation element 35 are turned on, wherein only the intermediate voltage OC_in is allowed to have a voltage value in the subsequent voltage measurement.

[0093] Finally, in the fourth check action shown in region D, only the fourth separation element 34 is turned on, and the two intermediate voltages OC_in and OC_out are re-detected, and evaluated as follows: whether the voltage value is detected only in the case of the upper intermediate voltage OC_in.

[0094] If the detected intermediate voltage does not correspond to the empirical value, then either a short circuit in the fourth separation element 34 or a short circuit in the fifth separation element 35 may be detected. Alternatively, Figure 2 The connection of maintenance bridge 5, as shown in the diagram, can also be identified, or—if no voltage value is measured at all—a lack of supply voltage or damage to the measuring device can be detected. Furthermore, additional [details omitted]. Figure 1 The maintenance device (“inspection control”) not shown in detail may also be a cause for unmeasurable voltages.

[0095] The schematic description above of the sequence of the four inspection actions illustrates the design of the control unit 1 according to the invention. Since the safety circuit 3 is interrupted by opening the fourth separation element 34 or the fifth separation element 35, it is important to achieve the corresponding switching posture "close (zu)" for a very short time. This ensures that, despite the interruption of the safety circuit 3, Figure 2 The safety element 7, not shown, remains in the active state. For this purpose, it is suitable to insert manual pauses between various inspection actions, which in particular prevent dynamic effects and / or fluctuations that may occur in the safety circuit. In this case, it is important to achieve a switching posture of the disconnect element 12 during the pause that does not interrupt the safety circuit 3.

[0096] Figure 3 An additional test comprising multiple inspection actions is shown, performed within the scope of the control unit 1 according to the invention. Corresponding to... Figure 2 The known view shows a corresponding circuit diagram for each inspection action in areas A to D. The circuit diagram shows the open or closed state of safety switches 41 and 42 in safety circuit 3 and also constitutes the realized switching posture of the corresponding disconnecting elements 31, 32, and 33 connected in the test.

[0097] The inspection actions shown are always performed only when safety switches 41 and 42 are engaged, which monitor the closure status of at least one car door and at least one floor door. Furthermore, pauses are inserted between the inspection actions to avoid interrupting safety circuit 3 and triggering a fault condition in fuse element 7 or main protection device 8. During the pause, the switching posture shown in area A of the disconnecting elements 32 and 33 is understood in the context of the current inspection action, because an interruption of safety circuit 3 occurs in this situation.

[0098] In the switching state shown in region A (which corresponds to the switching posture when bridging safety switches 41 and 42), safety switches 41 and 42 of safety circuit 3 are bridged via the second disconnect element 32 and the third disconnect element 33. Next, the intermediate voltage SR1_out is detected and it is evaluated whether a voltage has been applied.

[0099] In the case of the second check operation shown in region B, the third disconnect element 33 and the first disconnect element 31 are opened for a very short time so that the intermediate voltage SR1_out can be re-evaluated as follows: whether there is no voltage applied to the corresponding first intermediate tap 21 now.

[0100] In the third check action shown in region C, all disconnect elements 31, 32, and 33 are now placed in the open switching state to check again whether no voltage is actually detected on the first intermediate tap 21 (intermediate voltage SR1_out).

[0101] Finally, the last check is performed, in which the third separation element 33 is closed again and the intermediate voltage SR1_out is checked again in terms of voltage degrees of freedom.

[0102] Furthermore, within the scope of this inspection action or another inspection action, the second intermediate voltage ACD1 on the second intermediate tap 22 and / or the third intermediate voltage SCD1 on the third intermediate tap 23 can be additionally or alternatively detected and evaluated. Advantageously, this enables the detection of the open or closed state of the floor door and / or car door based on the switching posture of the first separation element 31.

[0103] Figure 4 Another test is shown, which is performed through two check actions. These corresponding check actions are always performed when the two safety switches 41, 42 are not bridging each other through the parallel-arranged disconnecting elements 32, 33.

[0104] In this inspection, the first disconnect element 31 is first closed, and it is checked whether a voltage (similar to region A) is applied to the first intermediate tap 21 (intermediate voltage SR1_out) in the safety circuit 3.

[0105] Next, for a short duration, the first disconnect element 31 is turned on, and the intermediate voltage SR1_out is re-detected and evaluated as follows: whether the intermediate voltage is now zero. If not, a fault can be identified in the circuit, and the safety loop 3 can be interrupted by turning on all disconnect elements (12).

[0106] As a result, the present invention enables the optimization of control units known from the prior art in a surprisingly simple manner, so as to monitor the operating status of elevator facilities, especially at low cost, by analyzing safety loops.

[0107] List of reference numerals

[0108] 1 Control Unit

[0109] 2 drive units

[0110] 3 Safety Circuit

[0111] 4 Safety Switch

[0112] 5. Maintenance Bridge

[0113] 6. Center tap

[0114] 7. Fuse Components

[0115] 8. Main protection device

[0116] 9. Monitoring devices

[0117] 10 Supply voltage

[0118] 11. Connecting Devices

[0119] 12 Separating elements

[0120] 13 Switchable semiconductor structure elements

[0121] 14 MOSFET

[0122] 15 Counter Units

[0123] 16 Communication devices

[0124] 17 Switches / Buttons

[0125] 18 First group of safety switches

[0126] 19 Upper Interface Pair

[0127] 20 Lower Interface Pair

[0128] 21 First intermediate tap

[0129] 22 Second intermediate tap

[0130] 23 Third intermediate tap

[0131] 24. Fourth intermediate tap

[0132] 25. Fifth middle tap

[0133] 31 First Separation Element

[0134] 32 Second Separation Element

[0135] 33 Third Separation Element

[0136] 34 Fourth Separation Element

[0137] 35 Fifth Separation Element

[0138] 41st Floor Door Safety Switch

[0139] 42. Car door safety switch

[0140] 51 First Interface

[0141] 52 Second Interface

[0142] 53 Third Interface

[0143] 54 Fourth Interface

[0144] 55 Fifth Interface

[0145] 56 Sixth Interface

Claims

1. A control unit for elevator facilities (1). The elevator facility has a car that can move between floors along the elevator shaft and a drive unit (2) for moving the car between the floors. in, The control unit (1) is configured to work in conjunction with a safety circuit (3) installed through the elevator shaft. The safety circuit is constructed by multiple safety switches connected in series. These safety switches are capable of switching between an open state that interrupts the travel operation and a closed state that releases the travel operation, depending on the safety-related operating conditions of the elevator facility. The safety circuit (3) can be bridging in sections via the contacts of the maintenance bridge (5), has an intermediate tap arranged in the safety circuit (3) for tapping intermediate voltage, and has a fuse element (7) for the drive unit. The fuse element can be operated by the safety circuit (3) as follows: when the safety circuit (3) is interrupted, the fault state of the fuse element (7) is activated to shut off the drive unit (2); and when the safety circuit (3) is closed, the activation state of the fuse element (7) is activated to enable the drive unit (2) to operate for the driving operation. The system includes a monitoring device (9) and a connection device (11) for measuring and evaluating intermediate voltages. The monitoring device and the connection device are functionally connected to the safety circuit (3) such that the safety circuit (3) can be interrupted and / or at least one safety switch can be connected via at least one disconnecting element that can switch between a closed and an open switching position. The monitoring device (9) and the connection device (11) are configured to perform a check operation to detect at least one intermediate voltage based on the switching position of at least one disconnecting element. Its features are, At least one of the separation elements is configured such that the safety circuit (3) can be interrupted for less than 5 milliseconds so that the elevator facility can be detected to be in compliance with the prescribed operating status by at least one inspection action while the safety element (7) of the drive unit (2) is in the activated state.

2. The control unit according to claim 1, characterized in that, The separation element is configured such that it can operate at a switching frequency between 0.5 kHz and 30 kHz.

3. The control unit according to claim 1 or 2, characterized in that, The discrete element is configured as a switchable semiconductor structure element (13).

4. The control unit according to claim 1, characterized in that, The connecting device (11) includes at least three separating elements for interrupting the safety circuit (3) configured as a DC voltage circuit and for bridging the safety switch.

5. The control unit according to claim 1, characterized in that, The connecting device (11) includes at least five separating elements for interrupting the safety circuit (3) configured as an AC voltage loop and for bridging the safety switch.

6. The control unit according to claim 1, characterized in that, The monitoring device (9) is configured to detect and / or evaluate at least five intermediate voltages.

7. The control unit according to claim 1, characterized in that, The control unit (1) has at least six interfaces for cooperating with the safety circuit (3), wherein at least one of the separation elements can be switched on and / or integrated into the safety circuit (3) via the upper interface pair (19) of the fifth interface (55) and the sixth interface (56) to interrupt the safety circuit (3) in the switching posture of the at least one separation element being open.

8. The control unit according to claim 7, characterized in that, The connecting device (11) is constructed and configured such that a first separating element (31) is arranged on the output side of the safety switch used to monitor the closing status of the car door and / or the floor door, wherein the safety switch used to monitor the closing status of the car door and / or the floor door and the first separating element (31) can be bridging each other by at least one additional separating element, which is connected to a first interface (51) and a fourth interface (54) on the input and output sides.

9. The control unit according to claim 8, characterized in that, The monitoring device (9) is constructed and configured to measure a first intermediate voltage SR1_out for contacting the first intermediate tap (21), which is arranged on the positive contact pin of the fuse element (7), and / or Capable of measuring a second intermediate voltage ACD1 for contacting a second intermediate tap (22), the second intermediate tap being arranged on a negative contact pin of at least one of the safety switches for monitoring the car door, and / or Capable of measuring a third intermediate voltage SCD1 for contacting a third intermediate tap (23), the third intermediate tap being arranged between at least one safety switch for monitoring the at least one floor door and at least one safety switch for monitoring the at least one car door, and / or Capable of measuring the fourth intermediate voltage OC_out used to contact the fourth intermediate tap (24), which is located on the output side of the upper interface pair (19), and / or It is possible to measure the fifth intermediate voltage OC_in used to contact the fifth intermediate tap (25), which is located on the input side of the upper interface pair (19).

10. The control unit according to claim 9, characterized in that, The coupling device (11) is constructed and configured such that the first intermediate tap (21) can be connected to the second intermediate tap (22) via the first separating element (31), and / or The first intermediate tap (21) can be connected to the fourth intermediate tap (24) via the second separating element (32), and / or The fourth intermediate tap (24) can be connected to the fifth intermediate tap (25) via the fourth separation element (34).

11. The control unit according to claim 1, characterized in that, The monitoring device (9) and the coupling device (11) are configured such that a test is performed every 60 seconds, comprising a fixed sequence of inspection actions for monitoring the operational status of the elevator facility, and / or The monitoring device (9) and the coupling device (11) are configured such that a test is performed for a maximum of 1 second, which includes a fixed sequence of inspection actions for monitoring the operating status of the elevator facility.

12. The control unit according to claim 1, characterized in that... The counter unit (15) and communication device (16) are configured to transmit sensor output signals that can be affected by the counter unit (15) so that the elevator can operate at a reduced speed of the car for a limited time period.

13. An application of the control unit (1) according to any one of claims 1 to 12 for monitoring the operating status of the elevator facility.

14. An elevator facility having a control unit, said control unit being constructed according to any one of claims 1 to 12.

Images