Elevator multi-redundant safety control device and control method

Abstract

The application relates to an elevator multiple-redundancy safety control device which comprises a safety circuit connected with a power supply system, an STO drive module and an electronic star breaker drive module, a brake power supply, a main control system, a door lock circuit, an SBC power module, a star breaker contactor control circuit, an elevator motor, an SBC drive module, a brake and a star breaker contactor; the door lock circuit is connected in series with the safety circuit, the SBC power module and the star breaker contactor control circuit are connected in parallel and then connected in series with the door lock circuit, the STO drive module and the electronic star breaker drive module are connected with the SBC power module, the STO drive module and the electronic star breaker drive module are connected in series with the elevator motor and the star breaker contactor, the brake power supply, the SBC drive module, the star breaker contactor and the brake are connected in series, the star breaker contactor control circuit, the STO drive module and the electronic star breaker drive module, the brake power supply and the SBC drive module are connected with the main control system, and the brake brakes the elevator motor.

Description

Technical Field

[0001] This invention relates to the field of elevator control technology, and more specifically, to an elevator multi-redundancy safety control device and control method. Background Technology

[0002] Contactless control technology refers to eliminating the contactors in traditional elevator control systems and replacing them with safety circuits and / or programmable electronic safety systems containing electronic components. It mainly includes Safe Torque Off (STO) technology, Safety Brake Control (SBC) and Electronic Safety Gear Technology.

[0003] With the release of the national standard GB / T 7588-2020, contactless control technology is permitted for use in passenger elevators. However, the elimination of safety torque requires PESSRAL certification, and the brake safety control requires safety circuit certification. Contactless control technology is also one of the main trends in the future development of elevator control systems, and its safety is paramount. The shift from traditional mechanical switches to electronic logic circuit drives places higher demands on the reliability and safety of electronic logic circuits. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings and deficiencies of the prior art and provide an elevator multi-redundant safety control device and control method. It adopts a multi-redundant protection mechanism to improve the safety of elevator control equipment, realize real-time monitoring and rapid response of elevator operation status, ensure safe switching in the event of a fault, and effectively improve the safety and reliability of elevator.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0006] An elevator multi-redundant safety control device includes a power supply system, a safety circuit, a door lock circuit, an SBC power module, a sealing star contactor control circuit, an STO drive module and an electronic sealing star drive module, an elevator motor, a brake power supply, an SBC drive module, a brake, a main control system, and a sealing star contactor.

[0007] The safety circuit, STO drive module and electronic star sealing drive module, brake power supply and main control system are connected to the power supply system respectively. The door lock circuit is connected in series with the safety circuit. The SBC power module and the star sealing contactor control circuit are connected in parallel and then connected in series with the door lock circuit. The STO drive module, electronic star sealing drive module and SBC drive module are connected to the SBC power module respectively.

[0008] The STO drive module and the electronic star-sealing drive module are connected in series with the elevator motor and the star-sealing contactor. The brake power supply, the SBC drive module, the star-sealing contactor, and the brake are connected in series. The star-sealing contactor control circuit, the STO drive module and the electronic star-sealing drive module, the brake power supply, and the SBC drive module are respectively connected to the main control system. The brake brakes the elevator motor.

[0009] Furthermore, the power supply system outputs one or more of the following: 0~380V AC and DC power.

[0010] Furthermore, the sealing contactor includes a normally open contact and a normally closed contact of the sealing contactor. The STO drive module and the electronic sealing drive module, the elevator motor, and the normally closed contact of the sealing contactor are connected in series. The brake power supply, the SBC drive module, the normally open contact of the sealing contactor, and the brake are connected in series.

[0011] Furthermore, the equipment also includes a power supply circuit. The SBC power module outputs two independent currents, which are used to power the STO drive module, the electronic star-sealing drive module, and the SBC drive module respectively through the power supply circuit.

[0012] Furthermore, the equipment also includes a communication circuit, a sealing contactor control circuit, an STO drive module and an electronic sealing drive module, a brake power supply, and an SBC drive module, all of which are connected to the main control system via the communication circuit.

[0013] A method for elevator multi-redundancy safety control, applied to any of the elevator multi-redundancy safety control devices described above, includes the following steps:

[0014] S1: Power supply system supplies power, main control system, STO drive module and electronic star sealing drive module, brake power supply are powered, safety circuit and door lock circuit are closed;

[0015] S2: The SBC power supply module and the control circuit of the sealing star contactor are energized, the coil of the sealing star contactor is energized, the normally closed contact of the sealing star contactor opens, and the normally open contact of the sealing star contactor closes.

[0016] S3: After receiving the running command, the main control system communicates with the STO drive module and the electronic star-sealing drive module, disconnects the electronic star-sealing of the elevator motor, outputs the elevator motor drive signal, and the elevator motor is powered on and runs.

[0017] S4: The main control system communicates with the brake power supply and SBC drive module, allowing the brake power supply to output current and outputting the SBC enable signal. The brake power supply outputs current to power the brake, and the brake stops braking the elevator motor.

[0018] S5: After receiving the operation completion command, the main control system communicates with the brake power supply and SBC drive module, stops outputting the SBC enable signal, prohibits the brake power supply from outputting current, de-energizes the brake, and brakes the elevator motor.

[0019] S6: The main control system communicates with the STO drive module and the electronic star-sealing drive module, stops outputting elevator motor drive signals, and the elevator motor begins to decelerate and stop running, and performs electronic star-sealing on the elevator motor;

[0020] S7: After the main control system detects a major fault or power failure, it communicates with the sealing contactor control circuit, the sealing contactor coil is de-energized, the normally closed contact of the sealing contactor closes, mechanically sealing the elevator motor, and the normally open contact of the sealing contactor opens.

[0021] Furthermore, the timing of the operation of the sealing contactor control circuit, STO drive module and electronic sealing drive module, holding brake power supply and SBC drive module is uniformly controlled by the main control system;

[0022] The main control system monitors the status and fault information of the sealing contactor control circuit, STO drive module and electronic sealing drive module, holding brake power supply and SBC drive module through the communication circuit, and transmits control signals.

[0023] Furthermore, the STO drive module and the electronic star-sealing drive module are allowed to conduct in their respective circuits only when the SBC power module supplies power and the main control system enable signal is input together.

[0024] The SBC drive module allows its circuit to conduct only when both the SBC power module power supply and the main control system enable signal are input.

[0025] Furthermore, the SBC driver module consists of one or more of the following connected in series: transistor, metal-oxide-semiconductor field-effect transistor, insulated-gate bipolar transistor, optocoupler, and relay.

[0026] Furthermore, the brake achieves braking of the elevator motor through one or more of the following forms: bilateral braking, single-sided braking, bilateral independent braking, and four-sided independent braking.

[0027] Compared with the prior art, the present invention has the following advantages and beneficial effects:

[0028] 1. This invention employs redundant protection of electronic and mechanical star-sealing, software redundant protection of the SBC drive module, and hardware redundant protection of the brake, which greatly increases the safety of the equipment.

[0029] 2. The sealing contactor of this invention is connected in series in the brake circuit. It utilizes the electronic logic circuit driven by the SBC function and the physical switching function provided by the sealing contactor to achieve dual redundancy protection, which greatly reduces the probability of brake failure and increases the overall safety of the equipment.

[0030] 3. This invention uses advanced electronic control technology to replace traditional contactors, achieving efficient, stable, and safe control of elevators. Attached Figure Description

[0031] Figure 1 This is a structural diagram of a multi-redundant safety control system for elevators.

[0032] Figure 2 This is a flowchart illustrating a multi-redundancy safety control method for elevators. Detailed Implementation

[0033] The elevator multi-redundancy safety control device and control method of the present invention will be further described below with reference to the accompanying drawings and specific embodiments.

[0034] Please see Figure 1 This invention discloses an elevator multi-redundancy safety control device, which includes a power supply system, a safety circuit, a door lock circuit, an SBC power module, a sealing star contactor control circuit, an STO drive module and an electronic sealing star drive module, an elevator motor, a brake power supply, an SBC drive module, a brake, a main control system and a sealing star contactor.

[0035] The safety circuit, STO drive module and electronic star-sealing drive module, brake power supply and main control system are connected to the power supply system respectively. The door lock circuit is connected in series with the safety circuit. The SBC power module and the star-sealing contactor control circuit are connected in parallel and then connected in series with the door lock circuit. The STO drive module, electronic star-sealing drive module and SBC drive module are connected to the SBC power module respectively.

[0036] The STO drive module and the electronic star-sealing drive module are connected in series with the elevator motor and the star-sealing contactor. The brake power supply, the SBC drive module, the star-sealing contactor, and the brake are connected in series. The star-sealing contactor control circuit, the STO drive module and the electronic star-sealing drive module, the brake power supply, and the SBC drive module are respectively connected to the main control system. The brake brakes the elevator motor physically.

[0037] Specifically, the power supply system is used to power the entire equipment, and the power supply system outputs one or more of AC and DC power from 0 to 380V. The sealing contactor includes normally open contacts and normally closed contacts of the sealing contactor. The STO drive module and electronic sealing drive module, elevator motor, and normally closed contacts of the sealing contactor are connected in series. The brake power supply, SBC drive module, normally open contacts of the sealing contactor, and brake are connected in series.

[0038] The STO drive module and the electronic star-sealing drive module are two modules with independent functions. However, their main components share the same parts, such as an insulated-gate bipolar transistor (IGBT). Therefore, in this embodiment, the STO drive module and the electronic star-sealing drive module are drawn in the same structural frame, as shown below. Figure 1 As shown. The STO drive module is used to output drive signals to control the operation of the elevator motor. The electronic star-sealing drive module is used to output drive signals to electronically seal the elevator motor.

[0039] Specifically, the equipment also includes a power supply circuit and a communication circuit. The SBC power module outputs two independent currents, which power the STO drive module, the electronic star-sealing drive module, and the SBC drive module respectively through the power supply circuit. The star-sealing contactor control circuit, the STO drive module, the electronic star-sealing drive module, the brake power supply, and the SBC drive module are all connected to the main control system through communication circuits.

[0040] Please see Figure 2 The present invention also discloses an elevator multi-redundancy safety control method, applied to the elevator multi-redundancy safety control device described in any of the above claims, comprising the following steps:

[0041] S1: Power supply system provides power, main control system, STO drive module and electronic star-sealing drive module, and brake power supply are powered, and safety circuit and door lock circuit are closed.

[0042] S2: The SBC power supply module and the control circuit of the sealing star contactor are energized, the coil of the sealing star contactor is energized, the normally closed contact of the sealing star contactor opens, and the normally open contact of the sealing star contactor closes.

[0043] S3: After receiving the operation command, the main control system communicates with the STO drive module and the electronic star-sealing drive module, disconnects the electronic star-sealing of the elevator motor, outputs the elevator motor drive signal, and the elevator motor is powered on and runs.

[0044] S4: The main control system communicates with the brake power supply and SBC drive module, allowing the brake power supply to output current and outputting the SBC enable signal. The circuit where the SBC drive module is located is turned on, the brake power supply outputs current to supply power to the brake, and the brake stops braking the elevator motor.

[0045] S5: After receiving the operation completion command, the main control system communicates with the brake power supply and SBC drive module, stops outputting the SBC enable signal, prohibits the brake power supply from outputting current, disconnects the circuit where the SBC drive module is located, de-energizes the brake, and brakes the elevator motor.

[0046] S6: The main control system communicates with the STO drive module and the electronic star-sealing drive module, stops outputting elevator motor drive signals, and the elevator motor begins to decelerate and stop running, performing electronic star-sealing on the elevator motor.

[0047] S7: After the main control system detects a major fault or power failure, it communicates with the control circuit of the sealing contactor. The sealing contactor coil is de-energized, the normally closed contact of the sealing contactor closes, and the elevator motor is sealed. The normally open contact of the sealing contactor opens, cutting off its circuit.

[0048] In addition, when the power supply system is powered on, the safety circuit is detected to be disconnected. At this time, neither the SBC power supply module nor the sealing contactor control circuit is energized. The sealing contactor coil is de-energized, the normally closed contact of the sealing contactor closes, mechanically sealing the elevator motor. The normally open contact of the sealing contactor opens, cutting off its circuit.

[0049] Specifically, the timing of the operation of the sealing contactor control circuit, STO drive module and electronic sealing contactor drive module, brake power supply, and SBC drive module is uniformly controlled by the main control system. The main control system monitors the status and fault information of the sealing contactor control circuit, STO drive module and electronic sealing contactor drive module, brake power supply, and SBC drive module through the communication circuit, and transmits control signals.

[0050] Specifically, the STO drive module and the electronic satellite constellation drive module are allowed to conduct in their respective circuits only when both the SBC power module power supply and the main control system enable signal are input. The SBC drive module is allowed to conduct in its respective circuit only when both the SBC power module power supply and the main control system enable signal are input.

[0051] Specifically, the SBC drive module consists of one or more of the following connected in series: transistors, metal-oxide-semiconductor field-effect transistors, insulated-gate bipolar transistors, optocouplers, and relays. The brake achieves braking of the elevator motor through one or more of the following methods: bilateral braking, single-sided braking, bilateral independent braking, and four-sided independent braking.

[0052] This invention can be widely applied not only to safety control equipment in newly built elevators, but also to the renovation and upgrading of existing elevators, possessing broad market prospects and application value. Through the combination of multiple redundancy designs and intelligent monitoring, it can provide safer and more reliable technical support for the elevator industry, promoting the improvement of elevator safety standards.

[0053] In summary, the present invention has the following advantages and beneficial effects:

[0054] 1. This invention employs redundant protection of electronic and mechanical star-sealing, software redundant protection of the SBC drive module, and hardware redundant protection of the brake, which greatly increases the safety of the equipment.

[0055] 2. The sealing contactor of this invention is connected in series in the brake circuit. It utilizes the electronic logic circuit driven by the SBC function and the physical switching function provided by the sealing contactor to achieve dual redundancy protection, which greatly reduces the probability of brake failure and increases the overall safety of the equipment.

[0056] 3. This invention uses advanced electronic control technology to replace traditional contactors, achieving efficient, stable, and safe control of elevators.

[0057] The above description is a detailed description of the preferred embodiments of the present invention. However, the embodiments are not intended to limit the scope of the patent application of the present invention. All equivalent changes or modifications made under the technical spirit disclosed in the present invention should fall within the patent scope covered by the present invention.

Claims

1. A method for multi-redundant safety control of elevators, applied to multi-redundant safety control equipment for elevators, characterized in that: The elevator's multi-redundant safety control equipment includes a power supply system, safety circuit, door lock circuit, SBC power module, sealing star contactor control circuit, STO drive module and electronic sealing star drive module, elevator motor, brake power supply, SBC drive module, brake, main control system and sealing star contactor; The safety circuit, STO drive module and electronic star sealing drive module, brake power supply and main control system are connected to the power supply system respectively. The door lock circuit is connected in series with the safety circuit. The SBC power module and the star sealing contactor control circuit are connected in parallel and then connected in series with the door lock circuit. The STO drive module, electronic star sealing drive module and SBC drive module are connected to the SBC power module respectively. The STO drive module and the electronic star-sealing drive module are connected in series with the elevator motor and the star-sealing contactor. The brake power supply, the SBC drive module, the star-sealing contactor, and the brake are connected in series. The star-sealing contactor control circuit, the STO drive module and the electronic star-sealing drive module, the brake power supply, and the SBC drive module are respectively connected to the main control system. The brake brakes the elevator motor. The sealing contactor includes normally open contacts and normally closed contacts of the sealing contactor. The STO drive module and electronic sealing drive module, elevator motor, and normally closed contacts of the sealing contactor are connected in series. The brake power supply, SBC drive module, normally open contacts of the sealing contactor, and brake are connected in series. The elevator multi-redundancy safety control method includes the following steps: S1: Power supply system supplies power, main control system, STO drive module and electronic star sealing drive module, brake power supply are powered, safety circuit and door lock circuit are closed; S2: The SBC power supply module and the control circuit of the sealing star contactor are energized, the coil of the sealing star contactor is energized, the normally closed contact of the sealing star contactor opens, and the normally open contact of the sealing star contactor closes. S3: After receiving the running command, the main control system communicates with the STO drive module and the electronic star-sealing drive module, disconnects the electronic star-sealing of the elevator motor, outputs the elevator motor drive signal, and the elevator motor is powered on and runs. S4: The main control system communicates with the brake power supply and SBC drive module, allowing the brake power supply to output current and outputting the SBC enable signal. The brake power supply outputs current to power the brake, and the brake stops braking the elevator motor. S5: After receiving the operation completion command, the main control system communicates with the brake power supply and SBC drive module, stops outputting the SBC enable signal, prohibits the brake power supply from outputting current, de-energizes the brake, and brakes the elevator motor. S6: The main control system communicates with the STO drive module and the electronic star-sealing drive module, stops outputting elevator motor drive signals, and the elevator motor begins to decelerate and stop running, and performs electronic star-sealing on the elevator motor; S7: After the main control system detects a major fault or power failure, it communicates with the sealing contactor control circuit, the sealing contactor coil is de-energized, the normally closed contact of the sealing contactor closes, mechanically sealing the elevator motor, and the normally open contact of the sealing contactor opens.

2. The elevator multi-redundancy safety control method according to claim 1, characterized in that, The power supply system outputs one or more of AC and DC power, ranging from 0 to 380V.

3. The elevator multi-redundancy safety control method according to claim 1, characterized in that, The equipment also includes a power supply circuit. The SBC power module outputs two independent currents, which are used to power the STO drive module, the electronic star-sealing drive module, and the SBC drive module respectively.

4. The elevator multi-redundancy safety control method according to claim 1, characterized in that, The equipment also includes a communication circuit, a sealing contactor control circuit, an STO drive module and an electronic sealing drive module, a brake power supply, and an SBC drive module, all of which are connected to the main control system via the communication circuit.

5. The elevator multi-redundancy safety control method according to claim 1, characterized in that, The timing of the operation of the sealing contactor control circuit, STO drive module and electronic sealing drive module, holding brake power supply and SBC drive module is uniformly controlled by the main control system. The main control system monitors the status and fault information of the sealing contactor control circuit, STO drive module and electronic sealing drive module, holding brake power supply and SBC drive module through the communication circuit, and transmits control signals.

6. The elevator multi-redundancy safety control method according to claim 1, characterized in that, Only when the SBC power module supplies power and the main control system enable signal are input together, the STO drive module and the electronic star-sealing drive module are allowed to conduct in their respective circuits. The SBC drive module allows its circuit to conduct only when both the SBC power module power supply and the main control system enable signal are input.

7. The elevator multi-redundancy safety control method according to claim 1, characterized in that, The SBC driver module consists of one or more of the following connected in series: transistor, metal-oxide-semiconductor field-effect transistor, insulated-gate bipolar transistor, optocoupler, and relay.

8. The elevator multi-redundancy safety control method according to claim 1, characterized in that, The brake achieves braking of the elevator motor through one or more of the following forms: bilateral braking, single-sided braking, bilateral independent braking, and four-sided independent braking.

Images