Brake failure protection control methods, systems and storage media

Abstract

This invention discloses a brake failure protection control method, system, and storage medium, relating to the field of elevator control. The method includes: acquiring the elevator's operating status; determining whether a brake failure exists based on the elevator's operating status; wherein, when the elevator's operating status is normal operating braking, brake failure includes brake device failure and / or brake actuator failure; if a brake failure exists, driving the car to a position balanced with the counterweight via the elevator drive; once the car reaches the position balanced with the counterweight, controlling the elevator drive to output a zero-speed holding torque to bring the car to a standstill. This invention solves the problem of insufficient safety protection measures in existing elevator control systems under brake failure conditions, achieving the effect of providing protection measures after brake failure and improving elevator safety.

Description

Technical Field

[0001] This invention relates to the field of elevator control technology, and in particular to a brake failure protection control method, system and storage medium. Background Technology

[0002] In current elevator control systems, the brake is the last line of defense ensuring safe braking. If the brake contactor or brake pads fail, the elevator car will be unable to brake accurately, leading to safety hazards such as brake slippage, rollover, or even overshooting. Existing measures to address these safety hazards primarily focus on testing the brake and improving braking control after brake failure.

[0003] The problem is that it overlooks the possibility that during normal use, the failure of the brake contactor or the temporary failure of the brake pads could lead to accidents such as brake failure, runaway, or even overshooting. There is no pre-detection or post-fault handling for such accidents. Summary of the Invention

[0004] The main objective of this invention is to provide a brake failure protection control method, system, and storage medium, aiming to solve the technical problem of insufficient safety protection measures in the case of brake failure in existing elevator control systems.

[0005] To achieve the above objectives, the present invention adopts the following technical solution:

[0006] In a first aspect, the present invention provides a brake failure protection control method, the method comprising:

[0007] Obtain elevator operating status;

[0008] Based on the elevator's operating status, determine whether there is a brake failure; wherein, when the elevator's operating status is normal operating braking, the brake failure includes a brake contactor failure and / or a brake brake failure.

[0009] If the brake fails, the elevator drive will move the car to a position that is balanced with the counterweight.

[0010] Once the car reaches a position where it is balanced with the counterweight, the elevator drive is controlled to output a zero-speed holding torque to bring the car to a standstill.

[0011] Optionally, in the above-mentioned brake failure protection control method, when the elevator is in a field test state, the step of determining whether a brake failure exists based on the elevator's operating state includes:

[0012] Based on the fact that the elevator is in the on-site test state, determine whether the test of the holding brake is successful.

[0013] If the test is successful, control the elevator drive to stop outputting torque and end the on-site test;

[0014] If the test fails, it is determined that the brake has failed.

[0015] Optionally, in the above-described brake failure protection control method, after the step of determining that a brake failure exists if the test fails, the method further includes:

[0016] If the brake fails, obtain the car load and braking friction force;

[0017] Based on the car load and the braking friction, the elevator drive is controlled to output a zero-speed holding torque to keep the car stationary;

[0018] If, while the elevator car remains stationary, the system detects that the user has selected to implement other safety measures, it controls the elevator drive to stop outputting torque, thus ending the field test.

[0019] Optionally, in the above-mentioned brake failure protection control method, when the elevator is in normal operating braking state, the step of determining whether brake failure exists based on the elevator operating state includes:

[0020] Based on the elevator's operating status being normal braking, determine whether the brake contactor has successfully disconnected.

[0021] If the brake contactor fails to disconnect, the brake is deemed to be in failure.

[0022] If the brake contactor successfully disconnects, the brake is controlled to apply the brakes, bringing the car to a stop.

[0023] Optionally, in the above-mentioned brake failure protection control method, after the step of determining that a brake failure exists if the brake contactor fails to disconnect successfully, the method further includes:

[0024] Multiple switch control signals are continuously output to the brake contactor to control the brake contactor to disconnect, and the success of the brake contactor disconnection is determined accordingly.

[0025] If so, then control the holding brake to apply the brakes and bring the car to a stop;

[0026] If the brake contactor still fails to disconnect after continuously outputting multiple switch control signals, it is determined that the brake failure is caused by a brake contactor malfunction.

[0027] Optionally, in the above-described brake failure protection control method, after the step of controlling the brake to apply braking force and bring the car to a stop, the method further includes:

[0028] Determine whether the traction machine rotates after the second preset time period;

[0029] If so, the holding brake is determined to have failed, indicating a holding brake malfunction.

[0030] If not, the holding brake is deemed to have applied successfully, and there is no holding brake failure.

[0031] Optionally, in the above-mentioned brake failure protection control method, after the step of determining that the brake has failed and that a brake failure exists, the method further includes:

[0032] Multiple brake control signals are continuously output to the brake to control the brake to apply the brake, and the traction machine is checked accordingly to determine whether it is rotating.

[0033] If not, the holding brake is deemed to have applied successfully, and there is no holding brake failure.

[0034] If the traction machine continues to rotate after multiple brake control signals are continuously output, it is determined that the brake has failed to brake, indicating a brake failure caused by a brake malfunction.

[0035] Optionally, in the above-mentioned brake failure protection control method, when the elevator is in an emergency braking state, the step of determining whether a brake failure exists based on the elevator's operating state includes:

[0036] Based on the fact that the elevator is in an emergency braking state, determine whether the safety circuit is disconnected;

[0037] If the safety circuit is disconnected, the emergency bypass circuit controlling the safety circuit will be activated, short-circuiting the safety circuit to enable the holding brake relay, holding brake, and elevator drive to work normally and achieve emergency braking.

[0038] If the safety circuit is not disconnected, further determine whether the brake contactor is faulty and / or whether the brake is faulty;

[0039] If the brake contactor or the brake actuator is faulty, then a brake failure is determined.

[0040] Optionally, in the above-described brake failure protection control method, after the step of determining whether a brake failure exists based on the elevator's operating status, the method further includes:

[0041] If the brake fails, determine whether the real-time position of the car is at the elevator door zone.

[0042] If the real-time position is the elevator door zone position, then control the elevator drive to output zero-speed holding torque to keep the car stationary;

[0043] If the real-time position is not at the elevator door zone, the elevator driver will drive the elevator back to the floor and then control the elevator driver to output a zero-speed holding torque to keep the car stationary.

[0044] While the car remains stationary, the car door is opened and closed after a first preset time, and the system stops responding to user-executed elevator operations.

[0045] Secondly, the present invention provides a brake failure protection control system, the system comprising:

[0046] The controller is used to implement the brake failure protection control method described above.

[0047] The brake contactor, connected to the controller via a safety circuit, is used for the braking function of starting and stopping the elevator;

[0048] A holding brake, connected to the holding brake contactor, is used to brake the elevator;

[0049] The elevator drive, connected to the controller via the safety circuit, is used to drive the elevator car.

[0050] Thirdly, the present invention provides a computer-readable storage medium storing a computer program, which, when executed by one or more processors, implements the brake failure protection control method described above.

[0051] The above-described one or more technical solutions provided by this invention can have the following advantages or at least achieve the following technical effects:

[0052] This invention proposes a brake failure protection control method, system, and storage medium. During normal elevator operation, it determines whether a brake failure exists by checking for malfunctions in the brake contactor and / or brake brake. In the event of brake failure, the elevator drive propels the car to a position balanced with the counterweight, then controls the elevator drive to output a zero-speed holding torque to bring the car to a stop. This prevents accidents such as car slippage, overshooting, or bottoming out caused by brake failure, providing a protective measure after brake failure and improving elevator safety. Moving the car to a position balanced with the counterweight before zero-speed holding allows the elevator drive to output a smaller torque, saving energy required to keep the car stationary, thus being both safe and energy-efficient. This method can be applied to any elevator control system, regardless of motor type, and is suitable for both synchronous and asynchronous motors. Attached Figure Description

[0053] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0054] Figure 1 This is a flowchart illustrating the first embodiment of the brake failure protection control method of the present invention;

[0055] Figure 2 This is a connection diagram of the brake failure protection control system involved in the present invention;

[0056] Figure 3 This is a schematic diagram of the torque output by the elevator drive in the first embodiment of the brake failure protection control method of the present invention;

[0057] Figure 4 This is a flowchart illustrating the second embodiment of the brake failure protection control method of the present invention;

[0058] Figure 5 This is a flowchart illustrating the third embodiment of the brake failure protection control method of the present invention;

[0059] Figure 6 This is a flowchart illustrating the fourth embodiment of the brake failure protection control method of the present invention;

[0060] Figure 7 This is a flowchart illustrating the fifth embodiment of the brake failure protection control method of the present invention.

[0061] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0062] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of the embodiments of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this invention, and not all of them. Based on the embodiments of this invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this invention.

[0063] It should be noted that in this invention, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or system. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of other identical elements in the process, method, article, or system that includes that element. Furthermore, the meaning of "and / or" throughout the text includes three parallel options; for example, "A and / or B" includes option A, option B, or options where both A and B are satisfied. In this invention, unless otherwise expressly specified and limited, the terms "connected," "fixed," etc., should be interpreted broadly. For example, "connected" can be a fixed connection, a detachable connection, or an integral part; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium; it can be a connection within two elements or an interaction between two elements. In this invention, descriptions involving terms such as "first" and "second" are for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Therefore, a feature defined with "first" or "second" may explicitly or implicitly include at least one of those features. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances. Furthermore, the technical solutions of the various embodiments can be combined with each other; however, this is based on the ability of those skilled in the art to implement them. When the combination of technical solutions is contradictory or impossible to implement, it should be considered that such a combination of technical solutions does not exist and is not within the scope of protection claimed by this invention.

[0064] Analysis of existing technologies reveals that the brake is the final line of defense in ensuring safe braking within the current elevator control system. If the brake contactor or brake pads fail, the elevator car will be unable to brake accurately, leading to safety hazards such as brake slippage, rollover, or even overshooting. Current measures primarily address these safety risks by focusing on testing the brake and implementing braking control measures in the event of brake failure.

[0065] Currently, the testing of the holding brake mainly involves two aspects: one is testing the holding braking force of the holding brake, which mainly tests whether a single or double arm can reliably brake under the maximum braking torque. If the traction machine is detected to be rotating under the premise of applying the maximum braking torque to the holding brake, the holding braking force test is considered to have failed, and then the output and testing are stopped; the other is the automatic detection of the holding brake by the elevator control system, which is carried out periodically or irregularly during the elevator's idle time, mainly testing the braking torque of the holding brake, and predicting in advance whether the holding brake can brake safely.

[0066] The problem with this method is that, due to the large braking torque applied during testing, if the brake fails due to spring failure or momentary brake pad failure, the current system will only issue a fault warning, and the drive will then stop outputting torque. Therefore, the car can only rely on the synchronous machine's sealing valve to somewhat slow its vertical movement, but this still cannot prevent the car from continuing to move until it overshoots or bottoms out. In the case of asynchronous machines, without the sealing valve, there are no safety measures, and the risk of overshooting or bottoming out is even greater. Although some testing procedures strictly require the car to be at the terminal level during brake force testing, it is still impossible to prevent the car from continuing to move after brake failure, still posing a risk of overshooting or bottoming out and damaging hoistway equipment. Moreover, even after the brake test is passed, during formal delivery and use, the risk of brake failure still exists because the brake cannot be guaranteed to be foolproof.

[0067] Currently, the braking control method after the brake fails is as follows: if the brake fails and slippage occurs during the normal operation of the elevator to the stop, the elevator car is first controlled to return to the level floor. Then, the driving torque is maintained to keep the car stopped. After the passengers are released, the car is controlled to run towards the terminal station, and the car automatically slides to the top or bottom.

[0068] The problem with this method is that, during normal braking, although certain measures are taken to ensure the safety of passengers in the car, it is still impossible to avoid the risk of the car overshooting the top after reaching the terminal level.

[0069] The existing methods described above only verify and pre-test the reliability of the brake, but ignore the possibility that during normal use, the failure of the brake contactor or the temporary failure of the brake pads may lead to accidents such as brake failure, runaway, or even overshooting. There is no pre-testing or post-fault handling for such accidents. Furthermore, temporary brake failures are easily judged as brake failures, which may result in false detections.

[0070] In view of the inadequacy of safety protection measures in the case of brake failure in existing elevator control systems, and the technical problem of false detection of brake failure, this invention provides a brake failure protection control method, the overall idea of ​​which is as follows:

[0071] Obtain the elevator's operating status; based on the elevator's operating status, determine whether there is a brake failure; where, when the elevator's operating status is normal operating braking, brake failure includes brake contactor failure and / or brake brake failure; if a brake failure exists, drive the car to a position balanced with the counterweight through the elevator drive; once the car reaches the position balanced with the counterweight, control the elevator drive to output zero-speed holding torque to bring the car to a standstill.

[0072] The above technical solution prevents accidents such as car slippage, overshooting, or bottoming out of the elevator due to brake failure, providing protective measures after brake failure and improving elevator safety. Moving the car to a position balanced with the counterweight before maintaining zero speed allows the elevator drive to output less torque, saving energy required to keep the car stationary, thus ensuring both safety and energy efficiency. This method can be applied to any elevator control system, without limiting the type of motor; it is suitable for both synchronous and asynchronous motors.

[0073] The brake failure protection control method, system, and storage medium provided by the present invention will be described in detail below with reference to the accompanying drawings and through specific embodiments and implementation methods.

[0074] Example 1

[0075] Reference Figure 1 The flowchart illustrates the first embodiment of the brake failure protection control method of the present invention, which is applied to a brake failure protection control system. Figure 2 The diagram shows the connection of a brake failure protection control system, which may include:

[0076] The controller is used to implement the brake failure protection control method of this embodiment;

[0077] The brake contactor, connected to the controller via a safety circuit, is used for the braking function of starting and stopping the elevator;

[0078] A holding brake, connected to the holding brake contactor, is used to brake the elevator;

[0079] The elevator drive, connected to the controller via the safety circuit, is used to drive the elevator car.

[0080] The safety circuit and the brake contactor are each connected in parallel with an emergency bypass circuit, which is connected to the controller and controlled by the controller.

[0081] Based on the above-mentioned brake failure protection control system, the following section combines... Figure 1 The flowchart shown illustrates in detail the brake failure protection control method of this embodiment. The method may include the following steps:

[0082] Step S100: Obtain the elevator operating status.

[0083] Specifically, the brake failure protection control system can interact with the elevator control system, allowing the elevator control system to identify the elevator's operating status; alternatively, the brake failure protection control system and the elevator control system can share a single controller for centralized control, with the controller independently acquiring the elevator's operating status. The elevator's operating status can include on-site test status, normal operating braking status, and emergency braking status. The acquisition method can be manual selection by the user or automatic identification based on the elevator's operating conditions.

[0084] Step S200: Determine whether there is a brake failure based on the elevator's operating status; wherein, when the elevator's operating status is normal operating braking, the brake failure includes a brake contactor failure and / or a brake brake failure.

[0085] Specifically, when the elevator is in the on-site testing state, the determination of brake failure is based on whether the test is successful. If successful, it is determined that there is no brake failure; if unsuccessful, it is determined that there is a brake failure. When the elevator is in the normal operating braking state, the determination of brake failure is based on whether there is a fault in the brake contactor, or a fault in the brake brake, or whether both the brake contactor and the brake brake are faulty. If neither is faulty, it is determined that there is no brake failure; otherwise, it is determined that there is a brake failure. When the elevator is in the emergency braking state, the determination of brake failure is based on whether the emergency braking is successful, that is, whether the elevator traction machine is still rotating after a period of time. This is determined by receiving abnormal feedback pulses from the traction sheave. If the traction machine does not rotate after a period of time and no abnormal feedback pulses from the traction sheave are received, it is determined that there is no brake failure; otherwise, it is determined that there is a brake failure.

[0086] In this embodiment, the brake failure judgment mechanism fully considers that the causes of brake failure in actual use are not only brake failure caused by brake brake malfunction leading to brake brake arm failure, but also brake failure caused by brake contactor failure. The brake failure takes into account more factors to ensure that timely measures can be taken to prevent other accidents.

[0087] Step S300: If the brake fails, the elevator drive will move the car to a position that is balanced with the counterweight.

[0088] Step S400: When the car moves to a position where it is balanced with the counterweight, control the elevator drive to output a zero-speed holding torque to keep the car stationary.

[0089] Specifically, if the controller determines that the elevator's brake has failed, it can send a control signal to the elevator drive. The elevator drive then moves the elevator car to a position balanced with the counterweight. Finally, the controller outputs a zero-speed holding torque to bring the car to a stop, achieving zero-speed torque holding. Zero-speed torque holding means that forward movement can be directly reversed without relying on the brake for support when crossing zero speed.

[0090] Here, the elevator drive outputs a zero-speed holding torque, controlling the motor to directly switch from forward to reverse direction, such as... Figure 3 The diagram illustrates the torque output of an elevator drive system. The horizontal axis represents time, and the vertical axis represents the torque output by the elevator drive system. Assume the elevator drive system initially operates normally, as shown in stages one and two. Then, at a certain moment, as shown at the brake failure point, the controller detects a brake failure and controls the elevator drive system to output a reverse torque, as shown in stage three. The elevator drive system then adjusts the braking torque according to actual needs and stabilizes the output, keeping the elevator car stationary without relying on the brake, as shown in stage four. The torque output is then canceled when the car no longer needs to be stationary, as shown in stage five, and finally, the elevator stops running.

[0091] Optionally, when the elevator drive outputs zero-speed holding torque to keep the car stationary, the elevator drive can be controlled to stop outputting torque, or the elevator drive can be controlled to output zero-speed holding torque again according to the slight movement of the car detected by the controller.

[0092] In other words, if the car and counterweight are completely balanced, the elevator drive does not need to output torque. This is because prolonged output of zero-speed holding torque can easily cause overcurrent damage to the elevator drive's IGBT. Therefore, it is not necessary to continuously output zero-speed holding torque through the elevator drive to keep the elevator stationary. Balance can be achieved by relying on the torque of the counterweight and the car itself. Once a slight movement of the car is detected, the elevator drive can be controlled to output zero-speed holding torque again to keep the car stationary.

[0093] It should be noted that when the drive car reaches the position balanced with the counterweight, the determination of the car's position and the counterweight's balance position can be achieved using many existing technologies, such as methods for measuring the balance coefficient, and will not be elaborated upon here. Zero-speed torque holding control technology is also a mature control technology, mainly relying on speed sensors and control algorithms, and will not be elaborated upon here either.

[0094] Optionally, if the controller determines that the elevator has a brake failure, it can also send a control signal to the elevator driver to directly control the elevator driver to output a zero-speed holding torque, so that the car remains stationary in place.

[0095] Currently, most elevators stop immediately after brake failure, while some stop at zero speed and then slowly move to the terminal station to hit the limit. However, this still inevitably leads to collisions with equipment in the hoistway. In this case, moving the car to a position balanced with the counterweight and then controlling the elevator drive to output zero-speed holding torque to keep the car stationary is a safer and more energy-efficient way after brake failure.

[0096] Step S500: If there is no brake failure, the brake will work normally and the car will remain stationary.

[0097] Specifically, if it is determined that there is no brake failure, the brake will work normally to keep the elevator car stationary, preventing it from hitting the top or falling, thus ensuring the safety of the people inside and the hoistway equipment.

[0098] The brake failure protection control method provided in this embodiment determines whether the elevator has experienced brake failure by checking for malfunctions in the brake contactor and / or brake brake during normal elevator operation. In the event of brake failure, the elevator drive propels the car to a position balanced with the counterweight, and then controls the elevator drive to output a zero-speed holding torque to bring the car to a stop. This prevents accidents such as car slippage, overshooting, or bottoming out caused by brake failure, providing a protective measure after brake failure and improving elevator safety. Moving the car to a position balanced with the counterweight before zero-speed holding allows the elevator drive to output a smaller torque, saving energy required to keep the car stationary, making it both safe and energy-efficient. This method can be applied to any elevator control system, regardless of motor type; it is suitable for both synchronous and asynchronous motors. This embodiment can be implemented with simple modifications to existing elevator control systems, mainly through improvements to the software algorithm, implementing a series of emergency avoidance measures after brake failure. The emergency bypass circuit in the system only requires simple modifications to electrical circuits such as the safety circuit, without the need for additional auxiliary equipment or hardware costs, offering the advantage of low cost.

[0099] Example 2

[0100] Based on the same inventive concept, referring to Figure 4 This paper presents a second embodiment of the brake failure protection control method of the present invention, which can also be applied to the aforementioned brake failure protection control system. The following is a combination of... Figure 4 The flowchart shown below provides a detailed description of the brake failure protection control method of this embodiment.

[0101] Based on Example 1, this example uses the elevator's operating state as the on-site test state for illustration. The method may include the following steps:

[0102] Step S100: Obtain the elevator operating status.

[0103] Step S200: Determine whether there is a brake failure based on the elevator's operating status.

[0104] In the first embodiment, step S200 may include:

[0105] Step S211: Based on the fact that the elevator is in the field test state, determine whether the test of the holding brake is successful;

[0106] Step S212: If the test is successful, control the elevator drive to stop outputting torque and end the on-site test;

[0107] Step S213: If the test fails, it is determined that there is a brake failure.

[0108] The elevator is in on-site testing mode, such as testing the braking force of the brake. The success of the brake test is determined by whether the braking force is within a preset threshold range. If the test is successful, it indicates no brake failure, and the elevator drive can be stopped to output torque, the elevator stops running, and the on-site test ends. If the test fails, it indicates a brake failure, and steps S300 and S400 can be executed to bring the car to a stop and prevent an accident.

[0109] Step S300: If the brake fails, the elevator drive will move the car to a position that is balanced with the counterweight.

[0110] Step S400: When the car moves to a position where it is balanced with the counterweight, control the elevator drive to output a zero-speed holding torque to keep the car stationary.

[0111] In the second embodiment, after step S213, the method may further include:

[0112] Step S214: If the brake fails, obtain the car load and braking friction force;

[0113] Step S215: Based on the car load and the braking friction force, control the elevator drive to output a zero-speed holding torque to keep the car stationary;

[0114] Step S216: If, during the process of the car remaining stationary, the system detects that the user has selected to perform other safety measures, it controls the elevator drive to stop outputting torque and ends the field test.

[0115] Optionally, if a brake failure occurs, a fault alarm can be issued. Specifically, after step S213 or step S215, a fault alarm can be issued to notify on-site maintenance personnel that the test has failed and safety measures need to be taken.

[0116] The brake failure protection control method provided in this embodiment detects that the brake test has failed. After the brake fails, the elevator drive will not immediately remove the torque output. Instead, it will maintain zero-speed torque based on the car load and the existing braking friction, keeping the car stationary until on-site maintenance personnel take other safety measures to ensure the safety of the car and the hoistway.

[0117] For more details on the specific implementation of the above method steps, please refer to the description of the specific implementation in Example 1. For the sake of brevity, these details will not be repeated here.

[0118] Example 3

[0119] Based on the same inventive concept, referring to Figure 5 This paper presents a third embodiment of the brake failure protection control method of the present invention, which can also be applied to the aforementioned brake failure protection control system. The following is a combination of... Figure 5 The flowchart shown below provides a detailed description of the brake failure protection control method of this embodiment.

[0120] Based on Example 1, this example describes the elevator's normal operating state, and the method may include the following steps:

[0121] Step S100: Obtain the elevator operating status.

[0122] Step S200: Determine whether there is a brake failure based on the elevator's operating status.

[0123] In the first embodiment, step S200 may include:

[0124] Step S221: Based on the elevator's operating status being normal operating braking, determine whether the brake contactor has successfully disconnected.

[0125] Step S222: If the brake contactor fails to disconnect, it is determined that there is a brake failure.

[0126] Specifically, during normal elevator braking, the brake contactor needs to be disengaged. If the brake contactor malfunctions, the controller will not receive feedback indicating successful disengagement, meaning the brake contactor cannot disengage successfully. If the brake contactor fails to disengage, the brake will not function properly, and the elevator will not be able to brake, resulting in brake failure. In this situation, the elevator drive can be used to move the car to a position balanced with the counterweight. Once the car reaches this position, the elevator drive can be controlled to output a zero-speed holding torque to bring the car to a stop, i.e., steps S300 and S400 are executed. Alternatively, the elevator drive can be directly controlled to output a zero-speed holding torque to bring the car to a stop.

[0127] Step S223: If the brake contactor is successfully disconnected, control the brake to apply the brakes and bring the car to a stop.

[0128] Specifically, if the brake contactor successfully disconnects, it can be determined that the brake contactor is not faulty, but it does not mean that the brake is not malfunctioning, because there may be a situation where the brake contactor is not faulty, but the brake itself is faulty. Therefore, it is not necessary to directly control the elevator drive to output zero-speed holding torque to keep the car stationary. Instead, the brake is controlled according to the normal procedure. If the brake is not faulty, the car will remain stationary normally.

[0129] In the second embodiment, after step S222, the method may further include:

[0130] Step S224: Continuously output multiple switch control signals to the brake contactor to control the brake contactor to disconnect, and determine whether the brake contactor has successfully disconnected.

[0131] Step S225: If yes, then control the holding brake to apply the brakes and bring the car to a stop.

[0132] Specifically, if the brake contactor can be successfully disconnected after multiple switch control signals are output continuously, it is determined that the brake contactor is not faulty and the brake can be controlled to apply the brake. If the brake is not faulty, the car will be brought to a normal stop.

[0133] Step S226: If the brake contactor still fails to disconnect after continuously outputting the multiple switch control signals, it is determined that the brake failure is caused by a brake contactor malfunction.

[0134] Specifically, continuously outputting multiple switch control signals to control the brake contactor to disconnect is to perform multiple attempts, preventing the brake contactor from failing to respond promptly due to delayed signal transmission or other factors, rather than a brake failure caused by a fault in the brake contactor itself. If multiple attempts to disconnect the brake contactor fail, it indicates that the brake contactor is indeed faulty, and therefore, a brake failure has indeed occurred. Continuously outputting multiple switch control signals prevents false detections of brake failure.

[0135] Optionally, after determining that the brake failure is caused by a fault in the brake contactor, the elevator drive can be used to drive the car to a position balanced with the counterweight. When the car reaches the position balanced with the counterweight, the elevator drive can be controlled to output a zero-speed holding torque to keep the car stationary, i.e., steps S300 and S400 are executed. Alternatively, the emergency bypass circuit of the brake contactor can be activated to control the brake to brake and keep the car stationary.

[0136] If the system automatically attempts to output the brake contactor multiple times and still detects brake failure after multiple attempts, it indicates that the brake contactor is indeed faulty. At this time, the system can execute steps S300 and S400 to maintain zero-speed torque, or it can bypass the brake contactor through the emergency bypass circuit of the brake contactor and then execute steps S300 and S400 to minimize energy loss after brake failure.

[0137] In the third embodiment, after step S223 or step S225, the method may further include:

[0138] Step S227: Determine whether the traction machine rotates after the second preset time period.

[0139] Step S228: If yes, then it is determined that the holding brake has failed and there is a holding brake failure.

[0140] Specifically, if the brake contactor successfully disconnects, the brake will then apply the braking force. Controlling the brake involves the controller closing it, causing the brake arm to drop and apply the braking force. After a certain period, the elevator traction machine will stop rotating, bringing the car to a stop. However, if the brake fails to close and the brake arm fails to drop, and the traction machine continues to rotate after a certain period, it indicates a potential brake malfunction and braking failure.

[0141] At this time, the elevator drive can be used to drive the car to a position that is balanced with the counterweight. After the car reaches the position that is balanced with the counterweight, the elevator drive can be controlled to output a zero-speed holding torque to keep the car stationary, i.e., steps S300 and S400 are executed. Alternatively, the elevator drive can be directly controlled to output a zero-speed holding torque to keep the car stationary.

[0142] Step S229: If not, it is determined that the holding brake has been successfully applied and there is no holding brake failure.

[0143] Specifically, if the traction machine stops rotating after the second preset time period, it can be determined that the holding brake is not faulty, the holding brake has successfully applied the brakes, and the car will come to a normal stop. At this point, the elevator is in normal braking mode, and can then continue operating according to user commands.

[0144] Optionally, if the holding brake successfully applies the brakes, it can be determined that the holding brake is not faulty, but it does not mean that the holding brake has not failed. This is because even if the holding brake is not faulty, the brake pads may temporarily fail after the holding brake arm drops, causing the car to slip and roll. Therefore, it is also possible to directly control the elevator drive to output a zero-speed holding torque to keep the car stationary.

[0145] In the fourth embodiment, after step S228, the method may further include:

[0146] Step S230: Continuously output multiple brake control signals to the brake to control the brake to brake, and determine whether the traction machine is rotating accordingly.

[0147] Step S231: If not, it is determined that the holding brake has been successfully applied and there is no holding brake failure.

[0148] Specifically, if the brake successfully engages and stops the traction machine after multiple consecutive brake control signals are output, then the brake is deemed to be functioning correctly, the car remains stationary, and the elevator can then resume operation based on user input.

[0149] Step S232: If the traction machine continues to rotate after the multiple brake control signals are continuously output, it is determined that the brake has failed to brake and there is a brake failure caused by a brake malfunction.

[0150] Specifically, continuously outputting multiple brake control signals to control the brake is to perform multiple attempts to prevent the brake from failing to respond promptly due to delayed signal transmission or other factors, rather than a brake failure caused by a malfunction in the brake itself. If multiple attempts to control the brake fail, it indicates that the brake is indeed faulty, and therefore a brake failure has occurred. Continuously outputting multiple brake control signals prevents false detections of brake failure.

[0151] Optionally, after determining that a brake failure is caused by a brake malfunction, steps S300 and S400 can be executed; alternatively, the brake can be first controlled to open the brake arm, and then the elevator drive can be used to drive the car to a position balanced with the counterweight. Once the car reaches the position balanced with the counterweight, the brake can be controlled to apply the brake, lower the brake arm, and the elevator drive can be controlled to output a zero-speed holding torque to bring the car to a stop. This maximizes energy savings after brake failure; alternatively, the elevator drive can be directly controlled to output a zero-speed holding torque to bring the car to a stop.

[0152] Step S300: If the brake fails, the elevator drive will move the car to a position that is balanced with the counterweight.

[0153] Step S400: When the car moves to a position where it is balanced with the counterweight, control the elevator drive to output a zero-speed holding torque to keep the car stationary.

[0154] For the four implementation methods described above, steps S300-S400 can be executed after steps S222, S226, S228 or S232 to take timely measures when it is determined that the brake has failed, so as to prevent the car from crashing, falling or damaging other equipment in the elevator shaft.

[0155] The brake failure protection control method provided in this embodiment can take corresponding emergency avoidance measures in various situations during normal braking, such as brake contactor failure or brake brake failure causing the brake arm to fail to drop, or car slippage after the brake arm drops. It adds multiple attempts to disconnect the brake contactor and multiple attempts to brake the brake, solving the problem of false detection of brake failure in existing technologies. This avoids the inability to provide protection against brake failure caused by other abnormalities in the brake contactor and brake brake, and can also confirm whether the brake contactor or brake brake has truly failed and caused the car to slip before executing corresponding protection measures to prevent misoperation.

[0156] For more details on the specific implementation of the above method steps, please refer to the description of the specific implementation in Example 1. For the sake of brevity, these details will not be repeated here.

[0157] Example 4

[0158] Based on the same inventive concept, referring to Figure 6 This paper presents a fourth embodiment of the brake failure protection control method of the present invention, which can also be applied to the aforementioned brake failure protection control system. The following is a combination of... Figure 6 The flowchart shown below provides a detailed description of the brake failure protection control method of this embodiment.

[0159] Based on Example 1, this example describes the method using the elevator's operating state as an emergency braking state. The method may include the following steps:

[0160] Step S100: Obtain the elevator operating status.

[0161] Step S200: Determine whether there is a brake failure based on the elevator's operating status.

[0162] In the first embodiment, step S200 may include:

[0163] Step S241: Based on the fact that the elevator is in an emergency braking state, determine whether the safety circuit is disconnected.

[0164] During an emergency stop, if the controller issues a command to close the holding brake and the traction machine is still rotating after a certain period of time, it means that the holding brake may be malfunctioning and causing the holding brake to fail. At this time, it can be determined whether there is another fault besides the holding brake relay or the holding brake itself, that is, whether there is an emergency braking caused by the disconnection of the safety circuit or the door lock circuit.

[0165] Step S242: If the safety circuit is disconnected, the emergency bypass circuit controlling the safety circuit is activated, short-circuiting the safety circuit to enable the holding brake relay, holding brake, and elevator drive to work normally and achieve emergency braking.

[0166] like Figure 2 In the system shown, if the safety circuit is disconnected, the driver cannot output current to the traction machine to allow it to continue operating, thus preventing the elevator from continuing to run. This is something that existing technology has not considered. In this embodiment, after detecting a disconnection in the safety circuit, the emergency bypass circuit controlling the safety circuit is activated, short-circuiting the safety circuit. This allows the brake relay, brake, and elevator driver to operate normally, achieving emergency braking and bringing the car to a normal stop. At this point, the elevator is undergoing a normal emergency braking maneuver. Afterward, the elevator driver can be controlled to stop outputting torque, stopping the elevator until maintenance personnel perform maintenance, after which it can resume operation according to user instructions.

[0167] If the brake fails due to emergency braking caused by the disconnection of the safety circuit or door lock circuit, the controller will control the emergency bypass circuit to short-circuit the forward safety circuit, ensuring that the brake relay is disconnected normally, the brake can be closed normally, the drive can output normally, and the car will stop moving at zero speed.

[0168] It should be noted that during the normal operation of the brake relay, brake brake, and elevator drive, brake failure protection can also be provided based on the brake failure protection control method of Embodiment 3.

[0169] Step S243: If the safety circuit is not disconnected, further determine whether the brake contactor is faulty and / or whether the brake is faulty.

[0170] Step S244: If the brake contactor or the brake actuator is faulty, it is determined that there is a brake failure.

[0171] Specifically, if the brake failure is not caused by an emergency braking event due to a disconnection in the safety circuit or door lock circuit, it means the elevator drive can continue to output normally, and there is no need to activate the emergency bypass circuit. If the safety circuit is not disconnected, it means the elevator drive can work normally, but this does not guarantee that the brake relay and brake are fault-free. Therefore, it is necessary to further determine whether the brake contactor and / or the brake itself are faulty, thereby determining whether a brake failure has occurred. For details, please refer to the aforementioned implementation method for determining whether a brake failure has occurred when the elevator is in normal operating braking mode, which will not be repeated here.

[0172] Step S300: If the brake fails, the elevator drive will move the car to a position that is balanced with the counterweight.

[0173] Step S400: When the car moves to a position where it is balanced with the counterweight, control the elevator drive to output a zero-speed holding torque to keep the car stationary.

[0174] The brake failure protection control method provided in this embodiment proposes a series of emergency avoidance measures and methods to maximize the safety of the elevator system and hoistway equipment. This embodiment addresses brake failure caused by the disconnection of the safety circuit during emergency braking, a situation not considered in existing technologies, and proposes protective measures to ensure continued safety even if the safety circuit is disconnected.

[0175] For more details on the specific implementation of the above method steps, please refer to the description of the specific implementation in Example 1. For the sake of brevity, these details will not be repeated here.

[0176] Example 5

[0177] Based on the same inventive concept, and on any of the above embodiments, referring to... Figure 7 This paper presents a fifth embodiment of the brake failure protection control method of the present invention, which can also be applied to the aforementioned brake failure protection control system. The following is a combination of... Figure 7 The flowchart shown below provides a detailed description of the brake failure protection control method of this embodiment.

[0178] Furthermore, after step S200, the method may also include:

[0179] Step S600: If the brake fails, determine whether the real-time position of the car is the elevator door zone position.

[0180] Step S700: If the real-time position is the elevator door zone position, control the elevator drive to output zero-speed holding torque to keep the car stationary.

[0181] If the brake failure is detected and the elevator car is already in the door zone, the system can maintain zero-speed torque and open the door to let people out while the elevator is stationary, ensuring passenger safety.

[0182] Step S800: If the real-time position is not in the elevator door zone, the elevator is driven back to the floor by the elevator driver, and then the elevator driver is controlled to output a zero-speed holding torque to keep the car stationary.

[0183] If a brake failure is detected, but the elevator car is not in the door zone, the elevator car needs to be returned to the floor level and then maintained at zero speed torque so that the doors can be opened to release passengers while the elevator is stationary, ensuring passenger safety.

[0184] Step S900: While the car remains stationary, control the car door to open, and after a first preset time, control the car door to close, and stop responding to user-executed elevator operation.

[0185] While the controller controls the elevator drive to output zero-speed holding torque to keep the car stationary, it opens the door to let people in, that is, controls the car door to open, and closes the door after a certain period of time, and no longer responds to normal use needs until maintenance personnel clear the fault to prevent anyone from entering the elevator and getting trapped.

[0186] Optionally, after step S700, during the process of the car remaining stationary, and after step S800, during the process of the elevator returning to the floor and remaining stationary, a fault alarm can be issued to remind passengers in the car to exit the elevator after the car doors open, ensuring passenger safety. After passengers have exited, the car doors are closed, and the elevator operation performed by the user is stopped, i.e., normal elevator use is prohibited, to prevent passengers from being trapped while riding in the elevator during a fault. This maximizes the safety of passengers in the car and prevents entrapment.

[0187] It should be noted that after determining that the brake failure is caused by a brake malfunction, if the real-time position is not at the elevator door zone while the car is stationary, the brake can be activated first to ensure that the elevator car can move. Then, the elevator drive can be used to drive the car to the elevator door zone or back to the floor. The elevator drive can be controlled to output a zero-speed holding torque to keep the car stationary. Then, while the car is stationary, the car door can be opened and closed after a first preset time. The elevator operation performed by the user can be stopped.

[0188] It should be noted that steps S600-S900 can also be executed after steps S222, S226, S228, S232, and S400 in Embodiment 3, specifically when the car is stationary, to release passengers from the car and prevent accidents, providing an emergency avoidance strategy after the doors are opened and passengers are released. Corresponding to steps S600-S900 executed after step S222, after the passengers in the car have safely evacuated and the doors are closed, step S224 can be executed to further test the brake contactor; corresponding to steps S600-S900 executed after step S226, after the passengers in the car have safely evacuated and the doors are closed, step S227 can be executed to test the brake; corresponding to steps S600-S900 executed after step S228, after the passengers in the car have safely evacuated and the doors are closed, step S227 can be executed to test the brake; corresponding to steps S600-S900 executed after step S228, after the passengers in the car have safely evacuated and After the door is closed, continue with step S230 to perform further multiple tests on the holding brake; corresponding to steps S600-S900 executed after step S232, after the passengers in the car have safely evacuated and the door is closed, continue with step S300 to drive the car to a position balanced with the counterweight via the elevator drive; corresponding to steps S600-S900 executed after step S400, after the passengers in the car have safely evacuated and the door is closed, the elevator can be stopped and await maintenance personnel to handle the situation.

[0189] The brake failure protection control method provided in this embodiment immediately executes a release operation after a brake failure is detected at any stage, promptly releasing passengers from the car to prevent accidents and ensure passenger safety.

[0190] For more details on the specific implementation of the above method steps, please refer to the description of the specific implementation in any of the embodiments of Examples 1 to 4. For the sake of brevity, these details will not be repeated here.

[0191] Example 6

[0192] Based on the same inventive concept, referring to Figure 2 The connection diagram illustrates a brake failure protection control system provided in this embodiment, which may include:

[0193] The controller is used to implement the brake failure protection control method;

[0194] The brake contactor, connected to the controller via a safety circuit, is used for the braking function of starting and stopping the elevator;

[0195] A holding brake, connected to the holding brake contactor, is used to brake the elevator;

[0196] The elevator drive, connected to the controller via the safety circuit, is used to drive the elevator car.

[0197] The safety circuit and the brake contactor are each connected in parallel with an emergency bypass circuit, which is connected to the controller and controlled by the controller.

[0198] The controller may specifically include a processing unit and a storage unit. The storage unit stores a brake failure protection control program. When the processing unit executes the program, it implements all or part of the steps of the various embodiments of the brake failure protection control method of the present invention.

[0199] The storage unit is used to store various types of data, which may include, for example, instructions for any application or method in the brake failure protection control system, as well as application-related data. The storage unit can be implemented using any type of volatile or non-volatile storage device or a combination thereof, such as Static Random Access Memory (SRAM), Random Access Memory (RAM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read-Only Memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. Optionally, the storage unit can also be a storage device independent of the processing unit.

[0200] The processing unit is used to call the brake failure protection control program stored in the storage unit and execute the brake failure protection control method as described above. The processing unit can be an application-specific integrated circuit (ASIC), a digital signal processor (DSP), a digital signal processing device (DSPD), a programmable logic device (PLD), a field-programmable gate array (FPGA), a controller, a microcontroller, a microprocessor, or other electronic components, and is used to execute all or part of the steps of the various embodiments of the brake failure protection control method described above.

[0201] It is understandable that the brake failure protection control system may also include a communication bus, a user interface, and a network interface. The communication bus is used to establish communication between these components; the user interface is used to connect to clients and communicate data with them, and may include output units such as a display screen and input units such as a keyboard; the network interface is used to connect to the backend server and communicate data with it, and may include input / output interfaces such as standard wired or wireless interfaces.

[0202] Understandable. Figure 2 The devices shown do not constitute a limitation on the brake failure protection control system of the present invention, and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0203] Example 7

[0204] Based on the same inventive concept, this embodiment provides a computer-readable storage medium, such as flash memory, hard disk, multimedia card, card-type memory (e.g., SD or DX memory), random access memory (RAM), static random access memory (SRAM), read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), magnetic memory, disk, optical disk, server, etc. The storage medium stores a computer program, which can be executed by one or more processors. When the computer program is executed by the processor, it can implement all or part of the steps of the various embodiments of the brake failure protection control method of the present invention.

[0205] It should be noted that the sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments. The above embodiments are only optional embodiments of the present invention and do not limit the patent scope of the present invention. Any equivalent structural or procedural transformations made under the inventive concept of the present invention using the content of the present invention's specification and drawings, or direct or indirect applications in other related technical fields, are all included within the patent protection scope of the present invention.

Claims

1. A holding brake failure protection control method characterized by, The method comprises: obtaining an elevator running state; judging whether there is a brake holding failure according to the elevator running state; wherein when the elevator running state is normal running braking, the brake holding failure comprises brake holding contactor failure and / or brake holding brake failure; if there is a brake holding failure, driving the car to a position balanced with the counterweight by an elevator drive; after the car is driven to the position balanced with the counterweight, controlling the elevator drive to output a zero-speed holding torque to make the car stationary; the step of driving the car to the position balanced with the counterweight by the elevator drive if there is a brake holding failure comprises: if there is a brake holding failure and the real-time position of the car is not in the elevator door area position, driving the elevator to return to the landing after leveling by the elevator drive, and then controlling the elevator drive to output a torque to make the car stationary; after the car is kept stationary, opening the door to let people in, and then driving the car to the position balanced with the counterweight by the elevator drive.

2. The band brake fail-safe control method of claim 1, wherein when the elevator running state is a field test state, the step of judging whether there is a brake holding failure according to the elevator running state comprises: judging whether the test on the brake holding brake is successful based on the elevator running state being the field test state; if the test is successful, controlling the elevator drive to stop outputting the torque and ending the field test; if the test fails, determining that there is a brake holding failure.

3. The band brake fail-safe control method of claim 1, wherein when the elevator running state is normal running braking, the step of judging whether there is a brake holding failure according to the elevator running state comprises: judging whether the brake holding contactor is successfully disconnected based on the elevator running state being normal running braking; if the brake holding contactor is not successfully disconnected, determining that there is a brake holding failure; if the brake holding contactor is successfully disconnected, controlling the brake holding brake to brake to make the car stationary.

4. The band brake fail-safe control method of claim 3, wherein after the step of determining that there is a brake holding failure if the brake holding contactor is not successfully disconnected, the method further comprises: continuously outputting a plurality of switch control signals to the brake holding contactor to control the brake holding contactor to be disconnected, and judging whether the brake holding contactor is successfully disconnected; if yes, controlling the brake holding brake to brake to make the car stationary; if the brake holding contactor is still not disconnected after the plurality of switch control signals are continuously outputted, determining that there is a brake holding failure caused by brake holding contactor failure.

5. The band brake fail-safe control method according to claim 3 or 4, characterized by, after the step of controlling the brake holding brake to brake to make the car stationary, the method further comprises: judging whether the hoisting machine rotates after a second preset time length; if yes, determining that the brake holding brake fails to brake, and there is a brake holding failure; if no, determining that the brake holding brake successfully brakes, and there is no brake holding failure.

6. The band brake fail-safe control method of claim 5, wherein, after the step of determining that the brake holding brake fails to brake and there is a brake holding failure, the method further comprises: continuously outputting a plurality of brake holding control signals to the brake holding brake to control the brake holding brake to brake, and judging whether the hoisting machine rotates; if no, determining that the brake holding brake successfully brakes, and there is no brake holding failure; if the hoisting machine still rotates after the plurality of brake holding control signals are continuously outputted, determining that the brake holding brake still fails to brake, and there is a brake holding failure caused by brake holding brake failure.

7. The band brake fail-safe control method of claim 1, wherein, When the elevator operating state is the emergency braking state, the step of judging whether the brake failure exists according to the elevator operating state comprises: judging whether the safety circuit is disconnected based on the elevator operating state being the emergency braking state; if the safety circuit is disconnected, starting an emergency bypass circuit of the safety circuit, short-circuiting the safety circuit, and enabling the brake relay, the brake and the elevator drive to work normally, so as to realize the emergency braking; if the safety circuit is not disconnected, further judging whether the brake contactor is faulty and / or whether the brake is faulty; if the brake contactor is faulty or the brake is faulty, determining that the brake failure exists.

8. The band brake fail-safe control method of claim 1, wherein, After the step of judging whether the brake failure exists according to the elevator operating state, the method further comprises: if the brake failure exists, judging whether the real-time position of the car is the elevator door area position; if the real-time position is the elevator door area position, controlling the elevator drive to output a zero-speed holding torque, so as to keep the car stationary; if the real-time position is not the elevator door area position, driving the elevator to return to the landing after leveling by the elevator drive, and then controlling the elevator drive to output a zero-speed holding torque, so as to keep the car stationary; in the process of keeping the car stationary, controlling the car door to be opened, and then controlling the car door to be closed after a first preset time, and stopping responding to the use of the elevator performed by the user.

9. A band brake failure protection control system characterized by, The system comprises: a controller configured to implement the brake failure protection control method according to any one of claims 1 to 8; a brake contactor connected to the controller through a safety circuit, configured to start and stop the brake function of the elevator; a brake connected to the brake contactor, configured to brake the elevator; an elevator drive connected to the controller through the safety circuit, configured to drive the car to operate.

10. A computer-readable storage medium, characterized in that, The storage medium has a computer program stored thereon, and the computer program is executed by one or more processors to implement the brake failure protection control method according to any one of claims 1 to 8.

Images