Control device and control method of elevator safety circuit

Abstract

The embodiment of the invention relates to the technical field of elevator control, and provides a control device and method for an elevator safety circuit, and the control device comprises at least one safety detection module which receives and transmits first and second class safety contact signals and a first control signal, the safety control module receives first, second, third and fourth types of safety contact signals and first and second control signals; the maintenance operation control module outputs a first control signal; the signal shielding module outputs a second control signal; the safety control module judges whether to shield at least part of the second-class or fourth-class safety contact signals based on the second control signal, and if yes, controls whether the braking module receives the driving power supply based on the first-class and third-class safety contact signals, the first control signal and the second-class and fourth-class safety contact signals which are not shielded; the braking module controls whether the elevator can operate based on whether the driving power source is received. The embodiment of the invention at least facilitates maintenance of various safety signals in the elevator.

Description

Technical Field

[0001] The disclosed embodiments relate to the technical field of elevator control, and in particular to a control device and a control method for an elevator safety circuit. Background Art

[0002] In modern society, various industries are developing rapidly, especially the construction industry. High-rise buildings and skyscrapers are rising from the ground everywhere, and they are getting higher and higher. At present, buildings with 20 or 30 floors are very common, and buildings with hundreds of floors are also common. Elevators have become an indispensable tool for work and life in modern society.

[0003] However, in order to ensure the safe operation and maintenance of the elevator, the degree of electronicization of the control device of the safety circuit in the elevator is low, and the control logic is relatively simple. Summary of the invention

[0004] The disclosed embodiments provide a control device and a control method for an elevator safety circuit, which are at least beneficial for separately inspecting various types of safety signals in the elevator.

[0005] According to some embodiments of the present disclosure, on the one hand, the embodiments of the present disclosure provide a control device for an elevator safety circuit, including: a safety control module, and at least one safety detection module communicatively connected to the safety control module; the safety detection module is configured to receive and transmit a first type of safety contact signal, a second type of safety contact signal, and a first control signal to the safety control module; the safety control module is configured to receive the first type of safety contact signal, the second type of safety contact signal, the first control signal, the third type of safety contact signal, the fourth type of safety contact signal, and the second control signal; a maintenance operation control module is communicatively connected to the safety detection module and is configured to output the first control signal to the safety detection module; a signal shielding module is communicatively connected to the safety control module and is configured The invention relates to a brake module, wherein the brake module is communicatively connected to the safety control module and configured to control the elevator to be in an operable state if the driving power is received; and to control the elevator to stop running if the driving power is not received; wherein the safety control module is further configured to determine whether to shield a portion of at least one of the second-type safety contact signal or the fourth-type safety contact signal based on the second control signal; if a portion of at least one of the second-type safety contact signal or the fourth-type safety contact signal is shielded, control whether the brake module receives the driving power based on the first-type safety contact signal, the third-type safety contact signal, the first control signal, and the second-type safety contact signal and the fourth-type safety contact signal that are not shielded.

[0006] In some embodiments, the second type of safety contact signal includes a car door lock signal and a second sub-safety signal; the fourth type of safety contact signal includes a floor door lock signal and a fourth sub-safety signal; the signal shielding module includes an emergency electric operation control module and a bypass module respectively connected to the safety control module in communication; the second control signal includes a first sub-control signal and a second sub-control signal; the emergency electric operation control module is configured to output the first sub-control signal to the safety control module; the bypass module is configured to output the second sub-control signal to the safety control module; the safety control module is configured to determine whether to shield at least one of the second sub-safety signal or the fourth sub-safety signal based on the first sub-control signal, and to determine whether to shield at least one of the car door lock signal or the floor door lock signal based on the second sub-control signal; the safety control module is also configured to control whether the braking module receives the driving power based on the first control signal output by the maintenance operation control module if at least one of the car door lock signal or the floor door lock signal has been shielded based on the second sub-control signal.

[0007] In some embodiments, the emergency electric operation control module is located in the machine room, one of the safety detection modules is located in the pit, and the other safety detection module is located on the top of the car. The safety detection module located in the pit is a first safety detection module, and the safety detection module located on the top of the car is a second safety detection module; the control device also includes: an elevator control module, which is communicatively connected to the first safety detection module, the second safety detection module and the emergency electric operation control module, and is configured to, if the first safety detection module is in a maintenance state, shield the second control signal received based on the second safety detection module, and shield the first sub-control signal received based on the emergency electric operation control module; if the first safety detection module is in an unmaintained state, and the second safety detection module is in a maintenance state, shield the first sub-control signal received based on the emergency electric operation control module.

[0008] In some embodiments, the control device also includes: a first type of safety contact, located in the first operating area and communicatively connected to the safety detection module, configured to output the first type of safety contact signal to the safety detection module; a second type of safety contact, located in the second operating area and communicatively connected to the safety detection module, configured to output the second type of safety contact signal to the safety detection module; a third type of safety contact, located in the third operating area and communicatively connected to the safety detection module, configured to output the third type of safety contact signal to the safety detection module; a fourth type of safety contact, located in the fourth operating area and communicatively connected to the safety detection module, configured to output the fourth type of safety contact signal to the safety detection module; wherein, the first operating area and the third operating area are in an area that is easy for the operator to operate, and the second operating area and the fourth operating area are in an area that is easy for the operator to operate when the elevator runs to a preset area.

[0009] In some embodiments, the control device also includes: an elevator control module, which is communicatively connected to the safety control module and is configured to, if the braking module receives the driving power, receive and control the elevator to run to a preset area based on the first sub-control signal; the emergency electric operation control module includes: an emergency electric / automatic unit, an emergency electric operation unit, an emergency electric up unit and an emergency electric down unit; the first sub-control signal includes: a first electric signal, a second electric signal, a third electric signal and a fourth electric signal; the emergency electric / automatic unit is configured to output the first electric signal to both the safety control module and the elevator control module; the emergency electric operation unit is configured to output the second electric signal to both the safety control module and the elevator control module; the emergency electric up unit is configured The third electric signal is output to both the safety control module and the elevator control module; the emergency electric downward unit is configured to output the fourth electric signal to both the safety control module and the elevator control module; the safety control module is also configured to shield the second sub-safety signal and the fourth sub-safety signal if the first electric signal is in a valid state; and not to shield the second sub-safety signal and the fourth sub-safety signal if the first electric signal is in an invalid state; the elevator control module is also configured to control the elevator to go up to the preset area if the first electric signal, the second electric signal and the third electric signal are all in a valid state; and to control the elevator to go down to the preset area if the first electric signal, the second electric signal and the fourth electric signal are all in a valid state.

[0010] In some embodiments, the emergency electric operation control module includes a first emergency electric unit and a second emergency electric unit; the first sub-control signal includes: a first emergency signal and a second emergency signal; the first emergency electric unit is configured to output the first emergency signal to both the safety control module and the elevator control module; the second emergency electric unit is configured to output the second emergency signal to both the safety control module and the elevator control module; the safety control module is also configured to, if the first emergency signal is in a valid state, shield the second sub-safety signal; if the first emergency signal is in an invalid state, not shield the second sub-safety signal; if the second emergency signal is in a valid state, shield the fourth sub-safety signal; if the second emergency signal is in an invalid state, not shield the fourth sub-safety signal.

[0011] In some embodiments, the bypass module includes a bypass floor door unit and a bypass car door unit; the second sub-control signal includes: a first bypass signal and a second bypass signal; the bypass floor door unit is configured to output the first bypass signal to both the safety control module and the elevator control module; the bypass car door unit is configured to output the second bypass signal to both the safety control module and the elevator control module; the safety control module is also configured to, if the first bypass signal is in a valid state, shield the floor door lock signal; if the first bypass signal is in an invalid state, not shield the floor door lock signal; if the second bypass signal is in a valid state, shield the car door lock signal; if the second bypass signal is in an invalid state, not shield the car door lock signal.

[0012] In some embodiments, the control device further includes: an elevator control module, which is communicatively connected to the safety detection module and is configured to receive and control the elevator to stop running or run to a preset area based on the first control signal; the maintenance operation control module includes: a maintenance / automatic unit, a maintenance operation unit, a maintenance up unit and a maintenance down unit; the first control signal includes: a first maintenance signal, a second maintenance signal, a third maintenance signal and a fourth maintenance signal; the maintenance / automatic unit is configured to output the first maintenance signal to both the safety detection module and the elevator control module; the maintenance operation unit is configured to output the second maintenance signal to both the safety detection module and the elevator control module; the maintenance The upward maintenance unit is configured to output the third maintenance signal to both the safety detection module and the elevator control module; the downward maintenance unit is configured to output the fourth maintenance signal to both the safety detection module and the elevator control module; the safety control module is also configured to control the braking module not to receive the driving power if only the first maintenance signal is in a valid state; the elevator control module is also configured to control the elevator to go up to the preset area if the first maintenance signal, the second maintenance signal and the third maintenance signal are all in a valid state; if the first maintenance signal, the second maintenance signal and the fourth maintenance signal are all in a valid state, the elevator is controlled to go down to the preset area.

[0013] According to some embodiments of the present disclosure, on the other hand, the embodiments of the present disclosure further provide a control method for an elevator safety circuit, including: providing a safety control module and at least one safety detection module; receiving a first type of safety contact signal, a second type of safety contact signal and a first control signal through the safety detection module, and transmitting them to the safety control module; receiving a third type of safety contact signal, a fourth type of safety contact signal and a second control signal through the safety control module; providing a maintenance operation control module, and outputting the first control signal to the safety detection module through the maintenance operation control module; providing a signal shielding module, and outputting the second control signal to the safety control module through the signal shielding module; providing a braking module, and controlling the elevator to be in an operable state through the braking module state or stops running; and, judging whether to shield part of at least one of the second-type safety contact signal or the fourth-type safety contact signal through the second control signal received by the safety control module; if the second-type safety contact signal or at least one of the fourth-type safety contact signal is shielded, the first-type safety contact signal, the third-type safety contact signal, the first control signal and the unshielded second-type safety contact signal and the fourth-type safety contact signal received by the safety control module are also used to control whether the braking module receives the driving power; wherein, if the braking module receives the driving power, the elevator is controlled to be in an operable state; if the braking module does not receive the driving power, the elevator is controlled to stop running.

[0014] In some embodiments, the step of providing the signal shielding module includes: providing an emergency electric operation control module and a bypass module; the step of outputting the second control signal to the safety control module through the signal shielding module includes: outputting the first sub-control signal to the safety control module through the emergency electric operation control module, and outputting the second sub-control signal to the safety control module through the bypass module; the step of judging whether to shield part of at least one of the second-type safety contact signal or the fourth-type safety contact signal through the second control signal received by the safety control module includes: judging whether to shield at least one of the second sub-safety signal or the fourth sub-safety signal based on the first sub-control signal, and judging whether to shield at least one of the car door lock signal or the floor door lock signal based on the second sub-control signal; wherein, the second-type safety contact signal includes the car door lock signal and the second sub-safety signal; the fourth-type safety contact signal includes the floor door lock signal and the fourth sub-safety signal.

[0015] The technical solution provided by the embodiments of the present disclosure has at least the following advantages:

[0016] On the one hand, the signal received by the safety detection module is classified into at least a first type of safety contact signal, a second type of safety contact signal and a first control signal, wherein at least part of the second type of safety contact signal can be shielded by the safety control module. Specifically, the safety control module is designed to determine whether to shield at least part of the second type of safety contact signal based on the second control signal sent by the signal shielding module. In this way, regardless of whether the second type of safety contact signal is abnormal, at least part of the second type of safety contact signal can be shielded with the help of the signal shielding module and the safety control module, so that the safety control module can control the brake module to receive the driving power supply based on other safety signals, which is conducive to shielding the second type of safety contact signal when it is abnormal, so that the safety control module can control the brake module to receive the driving power supply to put the elevator in an operable state, avoid the elevator from stopping due to the abnormality of the second type of safety contact signal, and avoid the operator from not being able to easily inspect the position where the second type of safety contact signal is sent due to the stop position of the elevator.

[0017] On the other hand, the signals in the safety control module that are not received via the safety detection module are also classified into at least a third type of safety contact signal, a fourth type of safety contact signal, and a second control signal, wherein at least a portion of the fourth type of safety contact signal can be shielded by the safety control module. Specifically, the safety control module is designed to determine whether to shield at least a portion of the fourth type of safety contact signal based on the second control signal sent by the signal shielding module. In this way, it is beneficial to shield the fourth type of safety contact signal when it is abnormal, so that the safety control module can control the brake module to receive the driving power supply to put the elevator in an operable state, and avoid the elevator from stopping due to the abnormality of the fourth type of safety contact signal, so as to avoid the operator from being unable to inspect the position where the fourth type of safety contact signal is sent due to the stop position of the elevator.

[0018] The above two aspects work together to design a control device for the elevator safety circuit that can detect and repair various types of safety contact signals separately, and is also conducive to improving the convenience of operators in inspecting the location where abnormal safety contact signals are sent. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] One or more embodiments are exemplarily illustrated by pictures in the corresponding drawings, and these exemplified descriptions do not constitute a limitation on the embodiments. Unless otherwise specified, the pictures in the drawings do not constitute a scale limitation. In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the traditional technology, the drawings required for use in the embodiments are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0020] Figure 1 A first structural block diagram of a control device for an elevator safety circuit provided by an embodiment of the present disclosure;

[0021] Figure 2 A second structural block diagram of a control device for an elevator safety circuit provided in an embodiment of the present disclosure;

[0022] Figure 3 A third structural block diagram of a control device for an elevator safety circuit provided in an embodiment of the present disclosure;

[0023] Figure 4 A fourth structural block diagram of a control device for an elevator safety circuit provided in an embodiment of the present disclosure;

[0024] Figure 5 A fifth structural block diagram of a control device for an elevator safety circuit provided in an embodiment of the present disclosure;

[0025] Figure 6 A structural block diagram of an emergency electric operation control module provided in one embodiment of the present disclosure;

[0026] Figure 7 Another structural block diagram of an emergency electric operation control module provided in one embodiment of the present disclosure;

[0027] Figure 8 A structural block diagram of a bypass module provided in one embodiment of the present disclosure;

[0028] Fig. 9 A structural block diagram of a maintenance operation control module provided in one embodiment of the present disclosure. DETAILED DESCRIPTION

[0029] As can be seen from the background technology, the design of the safety circuit in the elevator needs to be improved.

[0030] After analysis, it is found that the elevator safety system usually uses an electrical safety chain to achieve safety control. The safety chain is a safety circuit formed by connecting safety contacts and relays in series, which can be regarded as an electrical safety circuit. The conduction or disconnection of the safety circuit is mainly controlled by the conduction of the safety contacts and relays. Among them, if any safety contact is abnormal, the safety chain, that is, the safety circuit, will be disconnected, thereby prohibiting the operation of the drive and brake (the brake remains in the brake state), and the elevator stops running.

[0031] However, the safety contacts in the safety chain are distributed in various locations of the elevator, some in the machine room, some in the car, and some in the shaft, pit, etc. Therefore, the safety chain needs to be connected back and forth, which makes the cable distribution span large and increases the cable cost; and in order to reduce the voltage loss along the safety chain, a higher voltage circuit needs to be used, and the circuit design cost is correspondingly high; in addition, if any safety contact is abnormal, the safety circuit will be disconnected to stop the elevator, making the position of the elevator when it stops random and changeable, which will make some safety contacts in a position that is not easy for operators to maintain, reducing the maintenance convenience of operators, and it is not conducive to quickly troubleshooting abnormal safety contacts from many safety contacts.

[0032] The present disclosure provides a control device for an elevator safety circuit and a control method thereof. In the control device, not only the signals received by the safety detection module are classified, but also the signals received by the safety control module without passing through the safety detection module are classified. Among them, at least part of the second-class safety contact signal or the fourth-class safety contact signal can be shielded by the safety control module, so that the control device of the elevator safety circuit can detect and repair multiple categories of safety contact signals respectively, which is also conducive to improving the convenience of operators to inspect and repair the location where the abnormal safety contact signal is sent.

[0033] In the description of the embodiments of the present application, the technical terms "first", "second", etc. are only used to distinguish different objects, and cannot be understood as indicating or implying relative importance or implicitly indicating the number, specific order or primary and secondary relationship of the indicated technical features. In the description of the embodiments of the present application, the meaning of "multiple" is more than two, unless otherwise clearly and specifically defined.

[0034] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0035] In the description of the embodiments of the present application, when a certain component “includes” another component, unless otherwise stated, other components are not excluded and other components may be further included.

[0036] The following will describe the various embodiments of the present disclosure in detail with reference to the accompanying drawings. However, it will be appreciated by those skilled in the art that in the various embodiments of the present disclosure, many technical details are provided in order to enable the reader to better understand the embodiments of the present disclosure. However, even without these technical details and various changes and modifications based on the following embodiments, the technical solutions claimed in the embodiments of the present disclosure can be implemented.

[0037] An embodiment of the present disclosure provides a control device for an elevator safety circuit. The control device for an elevator safety circuit provided by an embodiment of the present disclosure will be described in detail below with reference to the accompanying drawings.

[0038] refer to Figure 1 , Figure 1 This is a first structural block diagram of a control device for an elevator safety circuit provided in an embodiment of the present disclosure. The control device 100 for an elevator safety circuit includes at least the following modules:

[0039] A safety control module 101 and at least one safety detection module 102 communicatively connected to the safety control module 101; the safety detection module 102 is configured to receive and transmit to the safety control module 101 a first type of safety contact signal s1, a second type of safety contact signal s2 and a first control signal c1; the safety control module 101 is configured to receive a first type of safety contact signal s1, a second type of safety contact signal s2, a first control signal c1, a third type of safety contact signal s3, a fourth type of safety contact signal s4 and a second control signal c2.

[0040] The maintenance operation control module 103 is in communication connection with the safety detection module 102 , and is configured to output a first control signal c1 to the safety detection module 102 .

[0041] The signal shielding module 104 is in communication connection with the safety control module 101 , and is configured to output a second control signal c2 to the safety control module 101 .

[0042] The brake module 105 is connected to the safety control module 101 and is configured to control the elevator to be in an operable state if the drive power 106 is received; and to control the elevator to stop running if the drive power 106 is not received.

[0043] In which, the safety control module 101 is also configured to determine whether to shield part of at least one of the second-type safety contact signal s2 or the fourth-type safety contact signal s4 based on the second control signal c2; if part of at least one of the second-type safety contact signal s2 or the fourth-type safety contact signal s4 is shielded, based on the first-type safety contact signal s1, the third-type safety contact signal s3, the first control signal c1, and the unshielded second-type safety contact signal s2 and the fourth-type safety contact signal s4, control whether the braking module 105 receives the driving power supply 106.

[0044] It is worth noting that the first type of safety contact signal s1, the second type of safety contact signal s2, the third type of safety contact signal s3 and the fourth type of safety contact signal s4 are all safety signals received by the control device 100. On the one hand, the safety signals received by the safety detection module 102 are classified into at least the first type of safety contact signal s1 and the second type of safety contact signal s2; on the other hand, the safety signals received by the safety control module 101 without passing through the safety detection module 100 are also classified into at least the third type of safety contact signal s3 and the fourth type of safety contact signal s4. In this way, the safety signals received by the safety control module 101 and the safety detection module 102 are classified. It should be noted that, according to the specific description scenario later, the safety signal described includes at least one of the first type of safety contact signal s1, the second type of safety contact signal s2, the third type of safety contact signal s3 and the fourth type of safety contact signal s4.

[0045] Moreover, when the safety control module 101 does not shield the second type safety contact signal s2 and the fourth type safety contact signal s4 based on the second control signal c2, if any of the first type safety contact signal s1, the second type safety contact signal s2, the third type safety contact signal s3, the fourth type safety contact signal s4 and the first control signal c2 is abnormal, the safety control module 101 can control the brake module 105 not to receive the driving power 106, so that the elevator stops running; if the first type safety contact signal s1, the second type safety contact signal s2, the third type safety contact signal s3, the fourth type safety contact signal s4 and the first control signal c2 are normal, the safety control module 101 can control the brake module 105 to receive the driving power 106, so that the elevator is in an operable state. The elevator being in an operable state means that the elevator can go up or down normally based on the operation of the person riding the elevator or the operation of the operator.

[0046] It can be understood that the first type of safety contact signal s1, the second type of safety contact signal s2, the third type of safety contact signal s3 and the fourth type of safety contact signal s4 are generally in a normal state, and the first control signal c1 based on the control output of the maintenance operation control module 103 is in a normal state, so that the elevator is in an operable state. In other words, the elevator is in an automatic operation state, that is, an automatic mode for passengers to take the elevator. At this time, the elevator can run or stop based on the instructions triggered by the passengers. The abnormality of any of the first type of safety contact signal s1, the second type of safety contact signal s2, the third type of safety contact signal s3 and the fourth type of safety contact signal s4 is determined by the safety control module 101. The abnormality of any of the four types of safety contact signals means that there is a fault at the location where the abnormal safety contact signal is sent or there is a fault on the transmission path from the location to the safety control module 101. Among them, the transmission path from the location where the abnormal safety contact signal is sent to the safety control module 101 includes: the transmission path from the location where the abnormal safety contact signal is sent to the safety detection module 102, and / or, the transmission path from the safety detection module 102 to the safety control module 101.

[0047] In some cases, the control device may also include: a first type of safety contact that outputs a first type of safety contact signal s1 to the safety detection module 102, a second type of safety contact that outputs a second type of safety contact signal s2 to the safety detection module 102; a third type of safety contact that outputs a third type of safety contact signal s3 to the safety detection module 102; and a fourth type of safety contact that outputs a fourth type of safety contact signal s4 to the safety detection module 102.

[0048] Based on this, the first type of safety contact signal s1 being in a normal state means that the first type of safety contact is in a closed state; the first type of safety contact signal s1 being abnormal means that the first type of safety contact is in a disconnected state, or there is a fault in the transmission path from the first type of safety contact to the safety control module 101.

[0049] The second-type safety contact signal s2 being in a normal state means that the second-type safety contact is in a closed state; the second-type safety contact signal s2 being abnormal means that the second-type safety contact is in an open state, or there is a fault in the transmission path from the second-type safety contact to the safety control module 101.

[0050] The third-type safety contact signal s3 being in a normal state means that the third-type safety contact is in a closed state; the third-type safety contact signal s3 being abnormal means that the third-type safety contact is in an open state, or there is a fault in the transmission path from the third-type safety contact to the safety control module 101.

[0051] The fourth type of safety contact signal s4 is in a normal state, which means that the fourth type of safety contact is in a closed state; the fourth type of safety contact signal s4 is abnormal, which means that the fourth type of safety contact is in a disconnected state, or there is a fault in the transmission path from the fourth type of safety contact to the safety control module 101. The first control signal c1 and the second control signal c2 are both control signals received by the control device 100. When the first type of safety contact signal s1, the second type of safety contact signal s2, the third type of safety contact signal s3 and the fourth type of safety contact signal s4 do not affect the operation of the elevator, the safety control module 101 can also control whether the elevator is running based on the first control signal c1 and the second control signal c2, which is conducive to controlling the operation of the elevator from multiple dimensions. Based on this, the functions of receiving the first control signal c1 and the second control signal c2 are designed on the safety control module 101 and the safety detection module 102 respectively. Regardless of the position of the operator in the safety control module 101 and the position of the safety detection module 102, the elevator can be controlled by adjusting the control signal to improve the convenience of the operator to inspect the elevator.

[0052] The following is a detailed description of the design logic of the control device for the elevator safety circuit provided by an embodiment of the present disclosure:

[0053] On the one hand, the signal received by the safety detection module 102 is classified into at least a first-type safety contact signal s1, a second-type safety contact signal s2 and a first control signal c1, wherein at least a portion of the second-type safety contact signal s2 can be shielded by the safety control module 101. Specifically, the safety control module 101 is designed to determine whether to shield at least a portion of the second-type safety contact signal s2 based on the second control signal c2 sent by the signal shielding module 104. In this way, regardless of whether the second-class safety contact signal s2 is abnormal or not, at least part of the second-class safety contact signal s2 can be shielded with the help of the signal shielding module 104 and the safety control module 101, so that the safety control module 101 can control whether the braking module 105 receives the driving power supply 106 based on other safety signals, which is beneficial to shielding the second-class safety contact signal s2 when it is abnormal, so that the safety control module 101 can control the braking module 105 to receive the driving power supply 106 to put the elevator in an operable state, avoiding the elevator from stopping due to the abnormality of the second-class safety contact signal s2, so as to avoid the operator from being unable to inspect the position where the second-class safety contact signal s2 is sent due to the stopped position of the elevator.

[0054] On the other hand, the signals in the safety control module 101 that are not received via the safety detection module 102 are also classified into at least the third type of safety contact signal s3, the fourth type of safety contact signal s4 and the second control signal c2, wherein at least part of the fourth type of safety contact signal s4 can be shielded by the safety control module 101. Specifically, the safety control module 101 is designed to determine whether to shield at least part of the fourth type of safety contact signal s4 based on the second control signal c2 sent by the signal shielding module 104. In this way, regardless of whether the fourth-category safety contact signal s4 is abnormal or not, at least part of the fourth-category safety contact signal s4 can be shielded with the help of the signal shielding module 104 and the safety control module 101, so that the safety control module 101 can control whether the braking module 105 receives the driving power supply 106 based on other safety signals, which is beneficial to shielding the fourth-category safety contact signal s4 when it is abnormal, so that the safety control module 101 can control the braking module 105 to receive the driving power supply 106 to put the elevator in an operable state, avoiding the elevator from stopping due to the abnormality of the fourth-category safety contact signal s4, so as to avoid the operator from being unable to inspect the position where the fourth-category safety contact signal s4 is sent due to the stopped position of the elevator.

[0055] It is worth emphasizing that, compared with the current safety circuit formed by connecting safety contacts and relays in series, the above two aspects work together, and the control logic of the safety circuit formed by the control device of the elevator safety circuit provided by an embodiment of the present disclosure is more multidimensional, which can control the operation of the elevator not only based on various safety signals but also based on various control signals, and realize the detection and maintenance of various types of safety signals respectively, which is also conducive to improving the convenience of operators to inspect the location where the abnormal safety contact signal is sent. Moreover, classifying various safety signals and designing to shield some categories of safety signals is conducive to quickly troubleshooting abnormal safety signals from multiple types of safety signals, and improving the efficiency of operators in troubleshooting.

[0056] An embodiment of the present disclosure will be described in more detail below with reference to the accompanying drawings.

[0057] In some embodiments, in conjunction with reference Figure 1 and Figure 2 , Figure 2A second structural block diagram of a control device for an elevator safety circuit provided in an embodiment of the present disclosure, wherein the second type of safety contact signal s2 includes a car door lock signal s21 and a second sub-safety signal s22; the fourth type of safety contact signal s4 includes a floor door lock signal s41 and a fourth sub-safety signal s42; the signal shielding module 104 includes an emergency electric operation control module 114 and a bypass module 124 respectively connected to the safety control module 101 for communication; the second control signal c2 includes a first sub-control signal c21 and a second sub-control signal c22; the emergency electric operation control module 114 is configured to output the first sub-control signal c21 to the safety control module 101; the bypass module 124 is configured to output the second sub-control signal c22 to the safety control module 101.

[0058] It is worth noting that the second-class safety contact signal s2 and the fourth-class safety contact signal s4 can both include multiple independent single signals, which can correspond one-to-one to the interfaces on the safety control module 101 or the safety detection module 102, and various types of safety signals have been transmitted to the safety control module 101 or the safety detection module 102. The number of single signals contained in the second-class safety contact signal s2 and the fourth-class safety contact signal s4 can be flexibly designed based on the actual application scenarios of the control device 100.

[0059] In some cases, both the first-class safety contact signal s1 and the second sub-safety signal s22 may include multiple independent single signals. For example, the second sub-safety signal s22 may include at least one of the car top emergency stop switch signal, the safety clamp switch signal, the speed limiter switch signal or the upper limit switch signal, and the first-class safety contact signal s1 may include at least one of the car top emergency stop switch signal or the car safety window switch signal.

[0060] In some cases, both the third-type safety contact signal s3 and the fourth sub-safety signal s42 may include multiple independent single signals. For example, the fourth sub-safety signal s42 may include at least one of a hall door lock signal, a detector switch signal, a sensor signal, a host emergency stop switch signal, a control cabinet emergency stop switch signal, a speed limiter electrical switch signal, a safety clamp switch signal, or a car top limit switch signal, and the third-type safety contact signal s3 may include at least one of a host emergency stop switch signal or a machine room emergency stop switch signal.

[0061] Based on this, continue to refer to Figure 2 The safety control module 101 can also be configured to determine whether to shield at least one of the second sub-safety signal s22 or the fourth sub-safety signal s42 based on the first sub-control signal c21, and to determine whether to shield at least one of the car door lock signal s21 or the floor door lock signal s41 based on the second sub-control signal c22.

[0062] It is worth noting that the signals in the second-category safety contact signal s2 and the fourth-category safety contact signal s4 are further divided, and the device for shielding the second sub-safety signal s22 or the fourth sub-safety signal s42 and the device for shielding the car door lock signal s21 or the floor door lock signal s41 are separately designed, which is conducive to making the shielding logic of the signal shielding module 104 multidimensional, for example, the signal shielding module 104 shields at least one of the second sub-safety signal s22, the fourth sub-safety signal s42, the car door lock signal s21 or the floor door lock signal s41.

[0063] In this way, if the reason why the brake module 105 does not receive the driving power 106 is that at least one of the second sub-safety signal s22, the fourth sub-safety signal s42, the car door lock signal s21 or the floor door lock signal s41 is abnormal, before checking other signals received by the safety control module 101, the signal shielding module 104 can be used to shield at least one of the second sub-safety signal s22, the fourth sub-safety signal s42, the car door lock signal s21 or the floor door lock signal s41, and the abnormal signal can be quickly screened out to further repair it, which is conducive to improving the efficiency of troubleshooting for operators. In an example, if the brake module 105 does not receive the driving power 106, after shielding the second sub-safety signal s22 by the signal shielding module 104, the brake module 105 receives the driving power 106, then it can be confirmed that the second sub-safety signal s22 received by the safety control module 101 is abnormal, and so on, the same is true for checking the fourth sub-safety signal s42, the car door lock signal s21 or the floor door lock signal s41.

[0064] Among them, the shielding function of the second sub-safety signal s22 or the fourth sub-safety signal s42 is realized with the help of the emergency electric operation control module 114, and the second sub-safety signal s22 or the fourth sub-safety signal s42 is shielded when it is abnormal, so that the safety control module 101 can also control the braking module 105 to receive the driving power supply 106 to put the elevator in an operable state, so as to avoid the elevator stopping due to the abnormality of the second sub-safety signal s22 or the fourth sub-safety signal s42, so as to avoid the operator from being unable to inspect the position where the second sub-safety signal s22 or the fourth sub-safety signal s42 is sent due to the stopping position of the elevator, which is conducive to improving the convenience of maintenance for the operator.

[0065] By means of the bypass module 124, the shielding function of the car door lock signal s21 or the floor door lock signal s41 can be realized, and the car door lock and the floor door lock can be precisely controlled. For example, when the car door lock or the floor door lock fails, making the car door lock signal s21 or the floor door lock signal s41 abnormal, the shielding function of the car door lock signal s21 or the floor door lock signal s41 can be realized by means of the bypass module 124, and the safety control module 101 can also control the brake module 105 to receive the driving power supply 106 to put the elevator in an operable state, so that the operator can control the elevator to go up or down, so that the operator can be in a suitable position to more conveniently repair the floor door lock, or more conveniently rescue the living things trapped in the faulty elevator.

[0066] In some embodiments, reference Figure 3 , Figure 3 The third structural block diagram of the control device of the elevator safety circuit provided by an embodiment of the present disclosure, the emergency electric operation control module 114 can be located in the machine room, a safety detection module 102 is located in the pit, and another safety detection module 102 is located on the top of the car. The safety detection module 102 located in the pit is the first safety detection module 112, and the safety detection module 102 located on the top of the car is the second safety detection module 122. In actual applications, at least one safety detection module can also be set in the hoistway, and multiple safety detection modules can be dispersedly set in the hoistway.

[0067] In some cases, the signal shielding module 104 that is communicatively connected to the security control module 101 may also be located in the machine room, which is beneficial for reducing the distribution length of cables and thus reducing cable costs.

[0068] Based on this, continue to refer to Figure 3 The control device 100 may also include: an elevator control module 107, which is communicatively connected to the first safety detection module 112, the second safety detection module 122 and the emergency electric operation control module 114, and is configured to, if the first safety detection module 112 is in a maintenance state, shield the second control signal c2 received based on the second safety detection module 122, and shield the first sub-control signal c21 received based on the emergency electric operation control module 114; if the first safety detection module 112 is in an unmaintained state and the second safety detection module 122 is in a maintenance state, shield the first sub-control signal c21 received based on the emergency electric operation control module 114.

[0069] It should be noted that, in addition to the situation where the brake module 105 does not receive the driving power 106 due to the abnormality of various safety signals caused by the safety control module 101, the safety control module 101 can also control whether the brake module 105 receives the driving power 106 based on the first control signal c1 and the second control signal c2. In this way, with the help of any of the three modules of the first safety detection module 112, the second safety detection module 122 and the emergency electric operation control module 114, the safety control module 101 can control the brake module 105 to receive the driving power 106. Since the first safety detection module 112, the second safety detection module 122 and the emergency electric operation control module 114 are located in different positions, it is necessary to design the priority between the first safety detection module 112, the second safety detection module 122 and the emergency electric operation control module 114 to avoid accidents caused by accidental touch.

[0070] Based on this, when the first safety detection module 112 located in the pit is in a maintenance state, the elevator control module 107 is designed to shield the second control signal c2 received based on the second safety detection module 122, and to shield the first sub-control signal c21 received based on the emergency electric operation control module 114. Even if an accidental touch occurs on the second safety detection module 122 and / or the emergency electric operation control module 114, resulting in a change in the second control signal c2 and / or the first sub-control signal c21 output by the second safety detection module 122, the elevator control module 107 will only change the operating state of the elevator based on the change in the second control signal c2 output by the first safety detection module 112, thereby effectively preventing the operator from accidentally touching the second safety detection module 122 and / or the emergency electric operation control module 114, resulting in erroneous operation of the elevator, causing harm to the operator in the pit.

[0071] Furthermore, when the second safety detection module 122 located in the pit is in a maintenance state, the elevator control module 107 is designed to shield the first sub-control signal c21 received based on the emergency electric operation control module 114. Even if an accidental touch occurs on the emergency electric operation control module 114, causing the first sub-control signal c21 to change, the elevator control module 107 will not change the operating state of the elevator based on the change in the first sub-control signal c21, thereby effectively preventing the operator from accidentally touching the emergency electric operation control module 114, causing the elevator to run incorrectly, causing harm to the operator on the top of the car.

[0072] In other words, the priority of the first safety detection module 112 is higher than that of the second safety detection module 122, and the priority of the second safety detection module 122 is higher than that of the emergency electric operation control module 114, which effectively avoids elevator malfunction caused by accidental touch.

[0073] It should be noted that, no matter it is the first safety detection module 112 or the second safety detection module 122, the safety detection module 102 is in a maintenance state, which means that: except for the situation where the braking module 105 does not receive the driving power 106 due to various safety signal abnormalities caused by the safety control module 101, the safety control module 101 controls whether the braking module 105 receives the driving power 106 based on the first control signal c1 received by the safety detection module 102, so as to control whether the elevator runs; the safety detection module 102 is in an unmaintained state, which means that the safety control module 101 will not control the braking module 105 not to receive the driving power 106 based on the first control signal c1 received by the safety detection module 102. In other words, the first control signal c1 received by the safety detection module 102 will not cause the braking module 105 to not receive the driving power 106.

[0074] In some embodiments, reference Figure 4 , Figure 4 A fourth structural block diagram of a control device for an elevator safety circuit provided by an embodiment of the present disclosure, the control device may further include: a first-type safety contact 118, located in a first operating area (not shown in the figure) and connected to the safety detection module 102 for communication, configured to output a first-type safety contact signal s1 to the safety detection module 102; a second-type safety contact 128, located in a second operating area (not shown in the figure) and connected to the safety detection module 102 for communication, configured to output a second-type safety contact signal s2 to the safety detection module 102; a third-type safety contact 138, Located in the third operating area (not shown in the figure) and communicated with the safety detection module 102, it is configured to output a third-type safety contact signal s3 to the safety detection module 102; the fourth-type safety contact 148 is located in the fourth operating area (not shown in the figure) and communicated with the safety detection module 102, and is configured to output a fourth-type safety contact signal s4 to the safety detection module 102; wherein the first operating area and the third operating area are in an area that is easy for the operator to operate, and the second operating area and the fourth operating area are in an area that is easy for the operator to operate when the elevator runs to the preset area.

[0075] It is worth noting that some of the various types of safety contacts are in areas that are easily accessible to operators, and other safety contacts are in areas that are not easily accessible to operators or areas that are easily blocked during the operation of the elevator. Therefore, the area where the safety contacts that are connected to the safety detection module 102 are located is divided into a first operating area and a second operating area, and the safety contacts are divided into a first type of safety contact 118 and a second type of safety contact 128 based on the different areas, and the area where the safety contacts that are connected to the safety control module 101 are located is divided into a third operating area and a fourth operating area, and the safety contacts are divided into a third type of safety contact 138 and a fourth type of safety contact 148 based on the different areas. In this way, it is beneficial to shield at least one part of the second type of safety contact signal s2 or the fourth type of safety contact signal s4 with the help of the signal shielding module 104, so that the safety control module 101 can still control the brake module 105 to receive the driving power supply 106 to put the elevator in an operable state, and further run to the preset area, so as to improve the convenience of the operator to inspect the second type of safety contact 128 or the fourth type of safety contact 148.

[0076] In some cases, the first type of safety contacts 118 and the second type of safety contacts 128 that are communicatively connected to the safety detection module 102 are located on the car roof or the pit like the safety detection module 102; the third type of safety contacts 138 and the fourth type of safety contacts 148 that are communicatively connected to the safety control module 101 are located in the machine room like the safety control module 101.

[0077] In some cases, in conjunction with reference Figure 4 and Figure 5 , Figure 5 A fifth structural block diagram of a control device for an elevator safety circuit provided in one embodiment of the present disclosure, wherein a first-type safety contact signal s1 may include at least one first sub-safety contact 118a; a second-type safety contact 128 may include a car door lock 128a and at least one second sub-safety contact 128b; a third-type safety contact signal s3 may include at least one third sub-safety contact 138a; and a fourth-type safety contact 148 may include a floor door lock 148a and at least one fourth sub-safety contact 148b.

[0078] In some embodiments, reference Figure 5 The control device may further include: an elevator control module 107, which is in communication with the safety control module 101 and is configured to, if the braking module 105 receives the driving power supply 106, receive and control the elevator to run to a preset area based on the first sub-control signal c21.

[0079] Combined with reference Figure 5 and Figure 6 , Figure 6A structural block diagram of an emergency electric operation control module provided in an embodiment of the present disclosure, the emergency electric operation control module 114 may include: an emergency electric / automatic unit 114a, an emergency electric operation unit 114b, an emergency electric up unit 114c and an emergency electric down unit 114d; the first sub-control signal c21 includes: a first electric signal c21a, a second electric signal c21b, a third electric signal c21c and a fourth electric signal c21d; the emergency electric / automatic unit 114a is configured to send a signal to the safety control module 101 and the elevator control module 107 both output the first electric signal c21a; the emergency electric operation unit 114b is configured to output the second electric signal c21b to the safety control module 101 and the elevator control module 107; the emergency electric up unit 114c is configured to output the third electric signal c21c to the safety control module 101 and the elevator control module 107; the emergency electric down unit 114d is configured to output the fourth electric signal c21d to the safety control module 101 and the elevator control module 107.

[0080] The safety control module 101 can also be configured to, if the first electric signal c21a is in a valid state, shield the second sub-safety signal s22 and the fourth sub-safety signal s42; if the first electric signal c21a is in an invalid state, not shield the second sub-safety signal s22 and the fourth sub-safety signal s42; the elevator control module 107 is also configured to, if the first electric signal c21a, the second electric signal c21b and the third electric signal c21c are all in a valid state, control the elevator to go up to a preset area; if the first electric signal c21a, the second electric signal c21b and the fourth electric signal c21d are all in a valid state, control the elevator to go down to a preset area.

[0081] It should be noted that any one of the first electric signal c21a, the second electric signal c21b, the third electric signal c21c and the fourth electric signal c21d has an effective state and an invalid state. Among them, the first electric signal c21a is used to control whether to shield the second sub-safety signal s22 and the fourth sub-safety signal s42; only when the first electric signal c21a and the second electric signal c21b are both in an effective state, can the elevator be finally controlled to go up or down based on the third electric signal c21c or the fourth electric signal c21d. In this way, it is beneficial to the dual protection based on the emergency electric / automatic unit 114a and the emergency electric operation unit 114b. When the first electric signal c21a is in an effective state, it is possible to avoid the elevator malfunction caused by accidentally touching the emergency electric up unit 114c or the emergency electric down unit 114d, so as to further improve the safety of the elevator.

[0082] In some cases, the emergency electric / automatic unit 114a, the emergency electric operation unit 114b, the emergency electric up unit 114c and the emergency electric down unit 114d may correspond to four buttons, and correspondingly, the first electric signal c21a, the second electric signal c21b, the third electric signal c21c and the fourth electric signal c21d are all trigger signals. If the button is pressed, the electric signal outputted by the button is in a valid state, and if the button is not pressed, the electric signal outputted by the button is in an invalid state. The button not being pressed includes at least two situations: the button has not been pressed (in its original state) or the button has been restored to its original state after being pressed.

[0083] In other cases, the emergency electric / automatic unit 114a can be a toggle switch, and correspondingly, the first electric signal c21a is a bistable signal. If the emergency electric / automatic unit 114a is toggled to emergency electric, the first electric signal c21a is in a valid state. If the emergency electric / automatic unit 114a is toggled to automatic, the first electric signal c21a is in an invalid state. At this time, the elevator is in an automatic operation state, that is, the automatic mode for passengers to take the elevator; the emergency electric operation unit 114b, the emergency electric up unit 114c and the emergency electric down unit 114d can be three buttons, and correspondingly, the second electric signal c21b, the third electric signal c21c and the fourth electric signal c21d are all trigger signals. If the button is pressed, the maintenance signal corresponding to the output of the button is in a valid state. If the button is not pressed, the maintenance signal corresponding to the output of the button is in an invalid state. In other embodiments, combined with reference to Figure 5 and Figure 7 , Figure 7 Another structural block diagram of the emergency electric operation control module provided for an embodiment of the present disclosure, the emergency electric operation control module 114 may include a first emergency electric unit 134 and a second emergency electric unit 144; the first sub-control signal c21 includes: a first emergency signal c211 and a second emergency signal c212; the first emergency electric unit 134 is configured to output the first emergency signal c211 to both the safety control module 101 and the elevator control module 107; the second emergency electric unit 144 is configured to output the second emergency signal c212 to both the safety control module 101 and the elevator control module 107.

[0084] The safety control module 101 can also be configured to, if the first emergency signal c211 is in a valid state, shield the second sub-safety signal s22; if the first emergency signal c211 is in an invalid state, not shield the second sub-safety signal s22; if the second emergency signal c212 is in a valid state, shield the fourth sub-safety signal s42; if the second emergency signal c212 is in an invalid state, not shield the fourth sub-safety signal s42.

[0085] It is worth noting that based on the differences between the safety control module 101 and the safety detection module 102, the second sub-safety signal s22 and the fourth sub-safety signal s42 can be controlled by the emergency electric operation control module 114 respectively, which is conducive to further improving the multidimensionality of the shielding logic of the shielding module 104, so that the operator can only shield the second sub-safety signal s22, or only shield the fourth sub-safety signal s42, and it is also beneficial for the operator to quickly check whether the second sub-safety signal s22 or the fourth sub-safety signal s42 is abnormal.

[0086] It should be noted that both the first emergency electric unit and the second emergency electric unit may include an emergency electric / automatic unit, an emergency electric operation unit, an emergency electric up unit, and an emergency electric down unit, wherein the emergency electric / automatic unit included in the first emergency electric unit may shield the second sub-safety signal, and the emergency electric / automatic unit included in the second emergency electric unit may shield the fourth sub-safety signal. In addition, the parts that are the same or corresponding to the above embodiments are not repeated here.

[0087] In practical applications, there may be more than one safety detection module, and each second sub-safety signal received by the safety detection module may be configured with a corresponding second emergency electric unit to shield and troubleshoot the second sub-safety signal. In other words, the emergency electric operation control module may include at least one second emergency electric unit, and the second emergency electric unit may correspond to the safety detection module one by one.

[0088] In some embodiments, in conjunction with reference Figure 5 and Figure 8 , Figure 8 A structural block diagram of a bypass module provided in an embodiment of the present disclosure, the bypass module 124 may include a bypass floor door unit 154 and a bypass car door unit 164; the second sub-control signal c22 may include: a first bypass signal c221 and a second bypass signal c222; the bypass floor door unit 154 is configured to output the first bypass signal c221 to both the safety control module 101 and the elevator control module 107; the bypass car door unit 164 is configured to output the second bypass signal c222 to both the safety control module 101 and the elevator control module 107; the safety control module 101 is also configured to, if the first bypass signal c221 is in a valid state, shield the floor door lock signal s41; if the first bypass signal c221 is in an invalid state, do not shield the floor door lock signal s41; if the second bypass signal c222 is in a valid state, shield the car door lock signal s21; if the second bypass signal c222 is in an invalid state, do not shield the car door lock signal s21.

[0089] In some cases, the bypass floor door unit 154 and the bypass car door unit 164 may correspond to two buttons. If the button is pressed, the bypass signal outputted by the button is in a valid state. If the button is not pressed, the bypass signal outputted by the button is in an invalid state.

[0090] In other cases, the bypass module 124 as a whole constitutes a toggle switch, that is, the bypass floor door unit 154 and the bypass car door unit 164 constitute a toggle switch as a whole, and correspondingly, the first bypass signal c221 and the second bypass signal c222 are two sub-signals of the bistable signal. If the bypass module 124 is toggled to the bypass floor door unit 154, the first bypass signal c221 in a valid state is output to the safety control module 101 and the elevator control module 107; if the bypass module 124 is toggled to the bypass car door unit 164, the second bypass signal c222 in a valid state is output to the safety control module 101 and the elevator control module 107. It is worth noting that based on the different positions of the floor door lock and the car door lock, the floor door lock signal s41 and the car door lock signal s21 can be controlled by the bypass module 124 respectively, which is conducive to further improving the multidimensionality of the shielding logic of the shielding module 104, so that the operator can only shield the floor door lock signal s41, or only shield the car door lock signal s21, and it is also beneficial for the operator to quickly check whether the floor door lock signal s41 or the car door lock signal s21 is abnormal.

[0091] In some embodiments, reference Figure 5 The control device may further include: an elevator control module 107, which is in communication with the safety detection module 102 and is configured to receive and control the elevator to stop running or run to a preset area based on the first control signal c1.

[0092] Combined with reference Figure 5 and Fig. 9 , Fig. 9A structural block diagram of a maintenance operation control module provided in an embodiment of the present disclosure, the maintenance operation control module 103 may include: a maintenance / automatic unit 113, a maintenance operation unit 123, a maintenance up unit 133 and a maintenance down unit 143; the first control signal c1 includes: a first maintenance signal c11, a second maintenance signal c12, a third maintenance signal c13 and a fourth maintenance signal c14; the maintenance / automatic unit 113 is configured to output the first maintenance signal c11 to both the safety detection module 102 and the elevator control module 107; the maintenance operation unit 123 is configured to output the second maintenance signal c12 to both the safety detection module 102 and the elevator control module 107; the maintenance up unit 133 is configured to output the second maintenance signal c12 to both the safety detection module 102 and the elevator control module 107; The safety detection module 102 and the elevator control module 107 both output a third maintenance signal c13; the maintenance downlink unit 143 is configured to output a fourth maintenance signal c14 to both the safety detection module 102 and the elevator control module 107; the safety control module 101 is also configured to control the braking module 105 not to receive the driving power supply 106 if only the first maintenance signal c11 is in a valid state; the elevator control module 107 is also configured to control the elevator to go up to a preset area if the first maintenance signal c11, the second maintenance signal c12 and the third maintenance signal c13 are all in a valid state; if the first maintenance signal c11, the second maintenance signal c12 and the fourth maintenance signal c14 are all in a valid state, the elevator is controlled to go down to a preset area.

[0093] It should be noted that any one of the first inspection signal c11, the second inspection signal c12, the third inspection signal c13 and the fourth inspection signal c14 has an effective state and an invalid state. Among them, the first inspection signal c11 can be used to control whether the brake module 105 receives the driving power supply 106; only when the first inspection signal c11 and the second inspection signal c12 are in an effective state, can the elevator be finally controlled to go up or down based on the second inspection signal c12 or the fourth inspection signal c14. In this way, it is conducive to the dual control based on the inspection / automatic unit 113 and the inspection operation unit 123. When only the first inspection signal c11 is in an effective state, the brake module 105 is controlled not to receive the driving power supply 106, that is, the elevator is prevented from running. When the first inspection signal c11 and the second inspection signal c12 are both in an effective state, the elevator may be in an operable turntable, and then the elevator is finally controlled to go up or down based on the second inspection signal c12 or the fourth inspection signal c14, so as to further improve the safety of the elevator.

[0094] In some cases, the maintenance / automatic unit 113, the maintenance operation unit 123, the maintenance uplink unit 133 and the maintenance downlink unit 143 may correspond to four buttons, and correspondingly, the first maintenance signal c11, the second maintenance signal c12, the third maintenance signal c13 and the fourth maintenance signal c14 are all trigger signals. If the button is pressed, the maintenance signal corresponding to the output of the button is in a valid state, and if the button is not pressed, the maintenance signal corresponding to the output of the button is in an invalid state. Among them, the button not being pressed includes at least two situations: the button has not been pressed (in its original state) or the button has been restored to its original state after being pressed.

[0095] In other cases, the maintenance / automatic unit 113 may be a toggle switch, and correspondingly, the first maintenance signal c11 is a bistable signal. If the maintenance / automatic unit 113 is toggled to maintenance, the first maintenance signal c11 is in a valid state. If the maintenance / automatic unit 113 is toggled to automatic, the first maintenance signal c11 is in an invalid state. At this time, the elevator is in an automatic operation state, that is, the automatic mode for passengers to take the elevator; the maintenance operation unit 123, the maintenance up unit 133 and the maintenance down unit 143 may be three buttons, and correspondingly, the second maintenance signal c12, the third maintenance signal c13 and the fourth maintenance signal c14 are all trigger signals. If a button is pressed, the maintenance signal corresponding to the button is in a valid state. If the button is not pressed, the maintenance signal corresponding to the button is in an invalid state. In some embodiments, reference Figure 5 , the safety control module 101 can adopt a dual microprocessor dual redundancy design. Specifically, the safety control module 101 includes a main control chip and an auxiliary control chip. The main control chip controls the closing or closing of the switch K1, and the auxiliary control chip controls the closing or closing of the switch K2. When both the switch K1 and the switch K2 are closed, the brake module 105 receives the driving power 106. Among them, the main control chip and the auxiliary control chip receive all safety contact signals and all control signals respectively, and based on any one of the main control chip and the auxiliary control chip, it can control whether the brake module 105 receives the driving power 106. In this way, the main control chip and the auxiliary control chip can verify information with each other, thereby improving the safety level.

[0096] The following reference Figure 5 , Figure 6 , Figure 8 and Fig. 9 The example shown is used to exemplarily illustrate the working principle of the control device of the elevator safety circuit provided by an embodiment of the present disclosure:

[0097] Based on the cooperation between the safety control module 101, the safety detection module 102, the maintenance operation control module 103, the signal shielding module 104 and the braking module 105, the control device of the elevator safety circuit can be in at least the following three operation modes:

[0098] Maintenance operation mode: If the maintenance / automatic unit 113 is switched to maintenance, and the maintenance operation unit 123 and the maintenance up unit 133 are pressed, the safety control module 101 controls the brake module 105 to receive the driving power 106, and controls the elevator to move upward; if the maintenance / automatic unit 113 is switched to maintenance, and the maintenance operation unit 123 and the maintenance down unit 143 are pressed, the safety control module 101 controls the brake module 105 to receive the driving power 106, and controls the elevator to move downward; if the maintenance / automatic unit 113 is switched to automatic, the elevator is in automatic operation, that is, the automatic mode for passengers to take the elevator.

[0099] Emergency electric operation mode: If the emergency electric / automatic unit 114a is turned to emergency electric, the second sub-safety signal s22 and the fourth sub-safety signal s42 are shielded, and then the emergency electric operation unit 114b and the emergency electric up unit 114c are pressed, then the safety control module 101 controls the brake module 105 to receive the drive power 106 and control the elevator to go up; if the emergency electric / automatic unit 114a is turned to emergency electric, the second sub-safety signal s22 and the fourth sub-safety signal s42 are shielded, and then the emergency electric operation unit 114b and the emergency electric down unit 114d are pressed, then the safety control module 101 controls the brake module 105 to receive the drive power 106 and control the elevator to go down. In other words, the emergency electric operation mode can be regarded as a special maintenance operation mode, which can control the elevator to go up or down while shielding the second sub-safety signal s22 and the fourth sub-safety signal s42.

[0100] Bypass operation mode: If the bypass module 124 is turned to the bypass floor door unit 154, the floor door lock signal s41 is shielded; if the bypass module 124 is turned to the bypass car door unit 164, the car door lock signal s21 is shielded. Based on this, whether the floor door lock signal s41 or the car door lock signal s21 is shielded, the maintenance operation unit 123 and the maintenance up unit 133 are pressed, and the safety control module 101 controls the brake module 105 to receive the drive power 106 and control the elevator to go up; and the maintenance operation unit 123 and the maintenance down unit 143 are pressed, and the safety control module 101 controls the brake module 105 to receive the drive power 106 and control the elevator to go down. In other words, the bypass operation mode can be regarded as another special maintenance operation mode, which can control the elevator to go up or down when the floor door lock signal s41 or the car door lock signal s21 is shielded.

[0101] In summary, the control logic of the safety circuit formed by the control device of the elevator safety circuit provided by an embodiment of the present disclosure is more multi-dimensional, and can control the operation of the elevator not only based on various safety signals but also based on various control signals, so as to realize the detection and maintenance of various types of safety signals respectively, and also help improve the convenience of operators to inspect the location where the abnormal safety contact signal is sent. Moreover, classifying various safety signals and designing to shield some categories of safety signals is conducive to quickly troubleshooting the abnormal safety signals from multiple types of safety signals, and improving the efficiency of troubleshooting for operators.

[0102] Another embodiment of the present disclosure further provides a control method for an elevator safety circuit, which is used to control the control device of the elevator safety circuit provided in the above embodiment. The control method for an elevator safety circuit provided in another embodiment of the present disclosure will be described in detail below in conjunction with the accompanying drawings. It should be noted that the parts that are the same or corresponding to the above embodiment will not be repeated here.

[0103] refer to Figures 1 to 9 The control method of the elevator safety circuit may include: providing a safety control module 101 and at least one safety detection module 102; receiving a first-type safety contact signal s1, a second-type safety contact signal s2 and a first control signal c1 through the safety detection module 102, and transmitting them to the safety control module 101; receiving a third-type safety contact signal s3, a fourth-type safety contact signal s4 and a second control signal c2 through the safety control module 101; providing a maintenance operation control module 103, outputting the first control signal c1 to the safety detection module 102 through the maintenance operation control module 103; providing a signal shielding module 104, outputting the second control signal c2 to the safety control module 101 through the signal shielding module 104; providing a braking module 105, controlling the elevator to be in a safe state through the braking module 105 Running state or stopped running; and, judging whether to shield part of at least one of the second-type safety contact signal s2 or the fourth-type safety contact signal s4 through the second control signal c2 received by the safety control module 101; if shielding part of at least one of the second-type safety contact signal s2 and the fourth-type safety contact signal s4, also through the first-type safety contact signal s1, the third-type safety contact signal s3, the first control signal c1 and the unshielded second-type safety contact signal s2 and the fourth-type safety contact signal s4 received by the safety control module 101, whether the braking module 105 receives the driving power 106 is controlled; wherein, if the braking module 105 receives the driving power 106, the elevator is controlled to be in an operable state; if the braking module 105 does not receive the driving power 106, the elevator is controlled to stop running.

[0104] In this way, it is beneficial to quickly check the second-category safety contact signal s2 and the fourth-category safety contact signal s4 with the help of the cooperation of the signal shielding module 104 and the safety control module 101, and the second-category safety contact signal s2 and the fourth-category safety contact signal s4 can be shielded when they are abnormal, so that the braking module 105 can still receive the driving power supply 106 to put the elevator in an operable state, so as to avoid the operator being unable to perform maintenance due to the stopped position of the elevator.

[0105] In some embodiments, reference Figure 2 , 3 or Figure 5 The step of providing a signal shielding module 104 may include: providing an emergency electric operation control module 114 and a bypass module 124; the step of outputting a second control signal c2 to the safety control module 101 through the signal shielding module 104 includes: outputting a first sub-control signal c21 to the safety control module 101 through the emergency electric operation control module 114, and outputting a second sub-control signal c22 to the safety control module 101 through the bypass module 124.

[0106] Based on this, the step of determining whether to shield part of at least one of the second-type safety contact signal s2 or the fourth-type safety contact signal s4 through the second control signal c2 received by the safety control module 101 may include: determining whether to shield at least one of the second sub-safety signal s22 or the fourth sub-safety signal s42 based on the first sub-control signal c21, and determining whether to shield at least one of the car door lock signal s21 or the floor door lock signal s41 based on the second sub-control signal; wherein the second-type safety contact signal s2 includes the car door lock signal s21 and the second sub-safety signal s22; the fourth-type safety contact signal s4 includes the floor door lock signal s41 and the fourth sub-safety signal s42. In this way, it is beneficial to make the shielding logic of the signal shielding module 104 multidimensional, for example, the signal shielding module 104 shields at least one of the second sub-safety signal s22, the fourth sub-safety signal s42, the car door lock signal s21 or the floor door lock signal s41.

[0107] Those skilled in the art can understand that the above-mentioned embodiments are specific examples for implementing the present disclosure, and in practical applications, various changes can be made to them in form and detail without departing from the spirit and scope of the embodiments of the present disclosure. Any person skilled in the art can make various changes and modifications without departing from the spirit and scope of the embodiments of the present disclosure, so the protection scope of the embodiments of the present disclosure shall be based on the scope defined in the claims.

Claims

1. A control device for an elevator safety circuit, characterized in that: include: A safety control module, and at least one safety detection module in communication with the safety control module; The safety detection module is configured to receive and transmit to the safety control module a first type of safety contact signal, a second type of safety contact signal and a first control signal; the safety control module is configured to receive the first type of safety contact signal, the second type of safety contact signal, the first control signal, the third type of safety contact signal, the fourth type of safety contact signal and the second control signal; A maintenance operation control module, which is in communication with the safety detection module and is configured to output the first control signal to the safety detection module; a signal shielding module, which is in communication with the safety control module and is configured to output the second control signal to the safety control module; A brake module is connected to the safety control module and is configured to control the elevator to be in an operable state if the drive power is received; and to control the elevator to stop running if the drive power is not received; In which, the safety control module is also configured to determine whether to shield part of at least one of the second-type safety contact signal or the fourth-type safety contact signal based on the second control signal; if part of at least one of the second-type safety contact signal or the fourth-type safety contact signal is shielded, control whether the braking module receives the driving power based on the first-type safety contact signal, the third-type safety contact signal, the first control signal, and the unshielded second-type safety contact signal and the fourth-type safety contact signal.

2. The control device according to claim 1, characterized in that: The second type of safety contact signal includes a car door lock signal and a second sub-safety signal; the fourth type of safety contact signal includes a floor door lock signal and a fourth sub-safety signal; The signal shielding module includes an emergency electric operation control module and a bypass module respectively connected to the safety control module in communication; the second control signal includes a first sub-control signal and a second sub-control signal; The emergency electric operation control module is configured to output the first sub-control signal to the safety control module; The bypass module is configured to output the second sub-control signal to the safety control module; The safety control module is configured to determine whether to shield at least one of the second sub-safety signal or the fourth sub-safety signal based on the first sub-control signal, and determine whether to shield at least one of the car door lock signal or the floor door lock signal based on the second sub-control signal; The safety control module is also configured to control whether the brake module receives the driving power based on the first control signal output by the maintenance operation control module if at least one of the car door lock signal or the floor door lock signal has been shielded based on the second sub-control signal.

3. The control device according to claim 2, characterized in that: The emergency electric operation control module is located in the machine room, one of the safety detection modules is located in the pit, and the other safety detection module is located on the top of the car. The safety detection module located in the pit is a first safety detection module, and the safety detection module located on the top of the car is a second safety detection module. The control device also includes: The elevator control module is communicatively connected to the first safety detection module, the second safety detection module and the emergency electric operation control module, and is configured to, if the first safety detection module is in a maintenance state, shield the second control signal received based on the second safety detection module, and shield the first sub-control signal received based on the emergency electric operation control module; if the first safety detection module is in an unmaintained state and the second safety detection module is in a maintenance state, shield the first sub-control signal received based on the emergency electric operation control module.

4. The control device according to claim 2, characterized in that: Also includes: A first type of safety contact, located in a first operating area and in communication connection with the safety detection module, and configured to output the first type of safety contact signal to the safety detection module; A second type of safety contact, located in the second operating area and in communication connection with the safety detection module, and configured to output the second type of safety contact signal to the safety detection module; A third type safety contact, located in a third operating area and in communication connection with the safety detection module, and configured to output the third type safety contact signal to the safety detection module; A fourth type of safety contact, located in a fourth operating area and in communication connection with the safety detection module, and configured to output the fourth type of safety contact signal to the safety detection module; The first operating area and the third operating area are located in an area that is easy for an operator to operate, and the second operating area and the fourth operating area are located in an area that is easy for an operator to operate when the elevator runs to a preset area.

5. The control device according to claim 2 or 4, characterized in that: Also includes: an elevator control module, which is in communication with the safety control module and is configured to receive and control the elevator to run to a preset area based on the first sub-control signal if the brake module receives the driving power; The emergency electric operation control module includes: an emergency electric / automatic unit, an emergency electric operation unit, an emergency electric up unit and an emergency electric down unit; the first sub-control signal includes: a first electric signal, a second electric signal, a third electric signal and a fourth electric signal; The emergency electric / automatic unit is configured to output the first electric signal to both the safety control module and the elevator control module; The emergency electric operation unit is configured to output the second electric signal to both the safety control module and the elevator control module; The emergency electric upward unit is configured to output the third electric signal to both the safety control module and the elevator control module; The emergency electric down unit is configured to output the fourth electric signal to both the safety control module and the elevator control module; The safety control module is further configured to shield the second sub-safety signal and the fourth sub-safety signal if the first electric signal is in a valid state; and not shield the second sub-safety signal and the fourth sub-safety signal if the first electric signal is in an invalid state; The elevator control module is also configured to control the elevator to move upward to the preset area if the first electric signal, the second electric signal and the third electric signal are all in a valid state; and to control the elevator to move downward to the preset area if the first electric signal, the second electric signal and the fourth electric signal are all in a valid state.

6. The control device according to claim 2 or 4, characterized in that: The emergency electric operation control module includes a first emergency electric unit and a second emergency electric unit; the first sub-control signal includes: a first emergency signal and a second emergency signal; The first emergency electric unit is configured to output the first emergency signal to both the safety control module and the elevator control module; The second emergency electric unit is configured to output the second emergency signal to both the safety control module and the elevator control module; The safety control module is also configured to, if the first emergency signal is in a valid state, shield the second sub-safety signal; if the first emergency signal is in an invalid state, not shield the second sub-safety signal; if the second emergency signal is in a valid state, shield the fourth sub-safety signal; if the second emergency signal is in an invalid state, not shield the fourth sub-safety signal.

7. The control device according to claim 2 or 4, characterized in that: The bypass module includes a bypass landing door unit and a bypass car door unit; the second sub-control signal includes: a first bypass signal and a second bypass signal; The bypass landing door unit is configured to output the first bypass signal to both the safety control module and the elevator control module; The bypass car door unit is configured to output the second bypass signal to both the safety control module and the elevator control module; The safety control module is also configured to, if the first bypass signal is in a valid state, shield the floor door lock signal; if the first bypass signal is in an invalid state, not shield the floor door lock signal; if the second bypass signal is in a valid state, shield the car door lock signal; if the second bypass signal is in an invalid state, not shield the car door lock signal.

8. The control device according to claim 1 or 2, characterized in that: Also includes: an elevator control module, which is in communication with the safety detection module and is configured to receive and control the elevator to stop running or run to a preset area based on the first control signal; The maintenance operation control module includes: a maintenance / automatic unit, a maintenance operation unit, a maintenance up unit and a maintenance down unit; the first control signal includes: a first maintenance signal, a second maintenance signal, a third maintenance signal and a fourth maintenance signal; The inspection / automatic unit is configured to output the first inspection signal to both the safety detection module and the elevator control module; The maintenance operation unit is configured to output the second maintenance signal to both the safety detection module and the elevator control module; The maintenance upward unit is configured to output the third maintenance signal to both the safety detection module and the elevator control module; The maintenance downlink unit is configured to output the fourth maintenance signal to both the safety detection module and the elevator control module; The safety control module is further configured to control the brake module not to receive the driving power if only the first inspection signal is in a valid state; The elevator control module is also configured to control the elevator to move upward to the preset area if the first maintenance signal, the second maintenance signal and the third maintenance signal are all in a valid state; and to control the elevator to move downward to the preset area if the first maintenance signal, the second maintenance signal and the fourth maintenance signal are all in a valid state.

9. A control method for an elevator safety circuit, characterized in that: include: Providing a safety control module and at least one safety detection module; Receiving a first type of safety contact signal, a second type of safety contact signal and a first control signal through the safety detection module, and transmitting them to the safety control module; Receiving a third-type safety contact signal, a fourth-type safety contact signal and a second control signal through the safety control module; Providing a maintenance operation control module, and outputting the first control signal to the safety detection module through the maintenance operation control module; Providing a signal shielding module, and outputting the second control signal to the safety control module through the signal shielding module; A brake module is provided, through which the elevator is controlled to be in an operable state or to stop running; Furthermore, the second control signal received by the safety control module is used to determine whether to shield part of at least one of the second-type safety contact signal or the fourth-type safety contact signal. If part of at least one of the second-type safety contact signal or the fourth-type safety contact signal is shielded, the first-type safety contact signal, the third-type safety contact signal, the first control signal, and the unshielded second-type safety contact signal and the fourth-type safety contact signal received by the safety control module are also used to control whether the braking module receives the driving power; wherein, if the braking module receives the driving power, the elevator is controlled to be in an operable state; if the braking module does not receive the driving power, the elevator is controlled to stop running.

10. The control method according to claim 9, characterized in that: The steps of providing the signal shielding module include: providing an emergency electric operation control module and a bypass module; The step of outputting the second control signal to the safety control module through the signal shielding module includes: outputting the first sub-control signal to the safety control module through the emergency electric operation control module, and outputting the second sub-control signal to the safety control module through the bypass module; The step of determining whether to shield a portion of at least one of the second type safety contact signal or the fourth type safety contact signal through the second control signal received by the safety control module comprises: determining whether to shield at least one of the second sub-safety signal or the fourth sub-safety signal based on the first sub-control signal, and determining whether to shield at least one of the car door lock signal or the floor door lock signal based on the second sub-control signal; Among them, the second type of safety contact signal includes the car door lock signal and the second sub-safety signal; the fourth type of safety contact signal includes the floor door lock signal and the fourth sub-safety signal.

Images