Elevator safety control method, elevator controller, elevator and storage medium

Abstract

The embodiment of the invention relates to the technical field of elevator control, and discloses an elevator safety control method, an elevator controller, an elevator and a storage medium. According to the invention, the elevator controller monitors the safety state of the elevator in real time during the operation period of the elevator; the elevator comprises an elevator controller, a lift car, a plurality of first safety switches arranged on the top of the lift car, a plurality of second safety switches and safety loops arranged in a machine room, and a plurality of third safety switches arranged in a bottom pit. And when the elevator controller monitors that the safety circuit is abnormal in grounding, the safety circuit is disconnected to stop elevator operation, and the abnormal position is determined according to the state signal of the first safety switch, the state signal of the second safety switch and the state signal of the third safety switch. In this way, the running state of the elevator can be monitored in real time, potential safety hazards can be checked, after a grounding fault occurs in the safe meeting of the elevator, the area and the position where the fault occurs can be quickly locked, and the overhaul and maintenance cost is reduced.

Description

Technical Field

[0001] Embodiments of the present invention relate to the technical field of elevator control, and in particular to an elevator safety control method, an elevator controller, an elevator, and a storage medium. Background Art

[0002] The elevator safety circuit is an essential component of the elevator control system. If the safety circuit is grounded (here, ground refers to the earth, the full name is Protective Earth, abbreviated as PE) for some reason, it may cause the elevator to malfunction and pose a safety hazard.

[0003] Traditional elevator safety circuits are implemented using high-voltage circuits, typically 110 volts (V) or 220V AC (alternating current). Grounding protection for the safety switch is achieved by grounding the neutral end of the safety circuit and adding a fuse to the safety circuit. High-voltage safety circuit wiring is expensive, inconvenient to detect, and can easily cause personal injury. The protection principle of this safety circuit is that the safety switch is drawn from 102. After a fault occurs, maintenance personnel first need to check where the safety switch is grounded, then replace the fuse to restore the elevator to normal operation.

[0004] The inventors have discovered that there are at least the following problems in the related art: after a fault occurs, maintenance personnel cannot determine the location of the fault and need to check each safety switch in turn to see if there is a fault. This will undoubtedly take a lot of time and manpower, increasing maintenance costs. Summary of the Invention

[0005] The purpose of the embodiments of the present invention is to provide an elevator safety control method, an elevator controller, an elevator and a storage medium, so that the operating status of the elevator can be monitored in real time and safety hazards can be checked. After an elevator failure occurs, the area and location of the failure can be quickly identified, thereby reducing inspection and maintenance costs.

[0006] To solve the above technical problems, an embodiment of the present invention provides an elevator safety control method, which is applied to an elevator controller of an elevator. The method includes: monitoring the safety status of the elevator in real time during elevator operation; wherein, the elevator includes: the elevator controller, a car, multiple first safety switches arranged on the car roof of the car, multiple second safety switches and a safety circuit arranged in the machine room, and multiple third safety switches arranged in the pit; when a grounding abnormality is detected in the safety circuit, the safety circuit is disconnected to terminate the elevator operation, and the location of the abnormality is determined based on the status signal of the first safety switch, the status signal of the second safety switch, and the status signal of the third safety switch.

[0007] An embodiment of the present invention also provides an elevator controller, comprising: an abnormality detection module, used to monitor the safety status of the elevator in real time during the operation of the elevator; wherein the elevator comprises: the elevator controller, a car, a plurality of first safety switches provided on the car roof of the car, a plurality of second safety switches and a safety circuit provided in the machine room, and a plurality of third safety switches provided in the pit; an abnormality handling module, used to disconnect the safety circuit to terminate the operation of the elevator when a grounding abnormality is detected in the safety circuit, and determine the location of the abnormality based on the status signal of the first safety switch, the status signal of the second safety switch and the status signal of the third safety switch.

[0008] An embodiment of the present invention also provides an elevator, comprising: an elevator controller, a car, a plurality of first safety switches provided on the car roof, a plurality of second safety switches and a safety circuit provided in the machine room, a plurality of third safety switches provided in the pit, an electronic safety panel on the car roof, an electronic safety panel in the machine room, and an electronic safety panel in the pit; wherein the electronic safety panel on the car roof is used to receive status signals of all the first safety switches, the electronic safety panel in the machine room is used to receive status signals of all the second safety switches, and the electronic safety panel in the pit is used to receive status signals of all the third safety switches; the car is used to carry passengers, and the first safety switch, the second safety switch, and the third safety switch can send status signals to report the current status; the elevator controller can execute the elevator safety control method as described in any one of claims 1 to 7.

[0009] An embodiment of the present invention further provides a computer-readable storage medium storing a computer program, which implements the above-mentioned elevator safety control method when executed by a processor.

[0010] In an embodiment of the present invention, the safety status of an elevator is monitored in real time during operation. The elevator includes an elevator controller, an elevator car, multiple first safety switches located on the car roof, multiple second safety switches located in the machine room, a safety circuit, and multiple third safety switches located in the pit. When a grounding anomaly is detected in the safety circuit, the safety circuit is disconnected to halt elevator operation, and the location of the anomaly is determined based on status signals from the first, second, and third safety switches. This allows real-time monitoring of the elevator's operating status and troubleshooting of safety hazards. If a grounding fault occurs in the elevator's safety circuit, the fault area and location can be quickly identified, reducing inspection and maintenance costs.

[0011] In addition, the safety circuit and the elevator controller use the same power supply, saving a safety circuit power supply.

[0012] In addition, the safety circuit uses a low-voltage circuit (24 volts). Compared with the high-voltage safety circuit, it has lower wiring costs, is more convenient to detect, and is less likely to cause personal injury.

[0013] In addition, the safety circuit uses a self-resetting fuse, which saves replacement costs and eliminates the risk of the replaceable fuse being short-circuited by the wire. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] One or more embodiments are exemplarily illustrated by pictures in the corresponding drawings. These exemplifications do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings are represented as similar elements. Unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0015] Figure 1 is a flow chart of an elevator safety control method provided according to an embodiment of the present invention;

[0016] Figure 2 1. It is a schematic diagram of the connection relationship of the elevator operation system provided in one embodiment of the present invention;

[0017] Figure 3 is a structural diagram of an elevator controller according to another embodiment of the present invention;

[0018] Figure 4 It is a structural schematic diagram of an elevator according to another embodiment of the present invention. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, each embodiment of the present invention will be described in detail below with reference to the accompanying drawings. However, it will be understood by those skilled in the art that in each embodiment of the present invention, many technical details are provided to enable the reader to better understand the present application. However, even without these technical details and various changes and modifications based on the following embodiments, the technical solutions claimed in this application can be implemented. The division of the following embodiments is for convenience of description and should not constitute any limitation on the specific implementation of the present invention. The various embodiments can be combined with each other and referenced to each other under the premise that there is no contradiction.

[0020] One embodiment of the present invention relates to an elevator safety control method that can be applied to an elevator controller. The elevator controller can be composed of multiple control components, such as a drive control component, a safety control component, and a lighting control component. In this embodiment, the elevator controller monitors the safety status of the elevator by monitoring status signals received from an electronic safety panel on the car roof, an electronic safety panel in the machine room, and an electronic safety panel in the pit. The elevator includes an elevator controller, a car, multiple first safety switches located on the car roof, multiple second safety switches located in the machine room, a safety circuit, and multiple third safety switches located in the pit. If the status signal from any safety switch is abnormal, the safety circuit is immediately disconnected to terminate the elevator operation and determine the source of the abnormal signal. This method enables real-time monitoring of the elevator's operating status and troubleshooting of safety hazards. In the event of an elevator malfunction, the fault area and location can be quickly identified, reducing inspection and maintenance costs. The following describes the implementation details of the elevator safety control method of this embodiment. The following details are provided for ease of understanding and are not required for implementation.

[0021] An elevator should consist of at least the following components: an elevator controller, a car, multiple primary safety switches located on the car roof, multiple secondary safety switches located in the machine room, a safety circuit, and multiple tertiary safety switches located in the pit. The names of the primary, secondary, and tertiary safety switches are used to distinguish their locations and do not necessarily imply differences in their structure. The safety circuit can be implemented using either high-voltage or low-voltage circuits. The principle of a safety control system is to ground the safety circuit ground terminal and add fuses to provide grounding protection for the safety switches. Current flows through the safety switch in the machine room, then to the safety switch on the car roof, and finally back to the machine room—the order of these switches does not affect the outcome. If a short circuit occurs in the circuit, the fuse will melt due to the surge in current, thus resolving the safety switch short-circuit protection issue.

[0022] like Figure 1 As shown, in step 101, the elevator controller of the elevator monitors the safety status of the elevator in real time during the operation of the elevator; the elevator is composed of at least an elevator controller, a car, a plurality of first safety switches provided on the car roof, a plurality of second safety switches and a safety circuit provided in the machine room, and a plurality of third safety switches provided in the pit;

[0023] In one example, the fuse in the safety circuit is a resettable fuse. When the elevator controller detects a ground fault in the safety circuit, the resettable fuse activates to disconnect the safety circuit. After the ground fault disappears, the resettable fuse's self-recovery function is used to reconnect the safety circuit. In one example, the fuse in the safety circuit is a resettable fuse. This reduces replacement costs and eliminates the risk of a replaceable fuse being shorted by a wire.

[0024] In one example, the voltage of the safety circuit is consistent with the voltage of the elevator controller. Implementing the safety circuit at low voltage allows the use of multiple power supplies with consistent voltages. More preferably, the safety circuit and the elevator controller can share the same power supply. This reuses the power supplies for the system and safety circuits, thus saving at least one safety circuit power supply.

[0025] In one example, the negative terminal of the power supply used in an elevator controller is grounded. This means the 0V terminal of the switching power supply is connected to PE. The primary purpose of grounding 0V is to ensure personal safety and reduce stray interference. In a control system, it's best to select the point with the lowest potential (the negative signal line) as the signal common point. The negative line of the 24V power supply has the lowest potential and serves as the signal common line. In one example, the voltage of the safety circuit and the voltage of the elevator controller are both 24V. By directly connecting the negative signal line and the signal common line (the 24V negative line), interference immunity can be improved.

[0026] The real-time monitoring of the elevator's safety status during operation in step 101 can be achieved by monitoring the status signals received by the car top electronic safety panel, the machine room electronic safety panel, and the pit electronic safety panel to monitor the elevator's safety status. Specifically, it can be:

[0027] After power-on, the car top electronic safety board detects the status of all first safety switches and sends a first start signal to the machine room electronic safety board when all first safety switches are normal; after power-on and receiving the first start signal, the machine room electronic safety board detects the status of all second safety switches and sends a second start signal to the pit electronic safety board when all second safety switches are normal; after power-on, the pit electronic safety board detects the status of all third safety switches and sends a third start signal to the elevator controller when all third safety switches are normal; when power-on and receiving the third start signal, the elevator controller starts a self-test operation and receives a status signal from the brake, and controls the elevator to start when the self-test is normal and the brake status is normal; after the elevator starts, the car top electronic safety board, the machine room electronic safety board and the pit electronic safety board will continuously send the received status signals to the elevator controller.

[0028] In step 102, if a grounding anomaly is detected in the safety circuit, the safety circuit is disconnected to halt elevator operation, and the location of the anomaly is determined based on the status signals of the first, second, and third safety switches. This allows for more accurate fault location and facilitates maintenance. It can distinguish between faults in the machine room and those in the car roof safety circuit. A grounding anomaly refers to a grounding failure of the safety circuit voltage, which can also cause an anomaly in the safety circuit power supply and, consequently, an anomaly in the status signals of the first, second, and third safety switches.

[0029] In one example, the elevator further includes a brake, a car top electronic safety panel, a machine room electronic safety panel, and a pit electronic safety panel. Each of the car top, machine room, and pit electronic safety panels is communicatively connected to the elevator controller and uses the same power supply. The car top electronic safety panel receives status signals from all first safety switches, the machine room electronic safety panel receives status signals from all second safety switches, and the pit electronic safety panel receives status signals from all third safety switches. The brake drives the elevator into operation upon receiving driving power. The car top electronic safety panel receives status signals from all first safety switches, the machine room electronic safety panel receives status signals from all second safety switches, and the pit electronic safety panel receives status signals from all third safety switches. Communication-based detection is employed, reducing the number of cores in the safety circuit portion of the accompanying cable.

[0030] Step 102 may be, for example: when the status signal of any first safety switch is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the electronic safety panel on the car top; when the status signal of any second safety switch is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the electronic safety panel in the machine room; when the status signal of any first safety switch is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the electronic safety panel in the pit.

[0031] In one example, after determining the source of an abnormal signal, interactive software displays the location of the abnormality and issues a reminder. After the grounding anomaly disappears and the software receives a run authorization, the elevator resumes operation and continues to monitor its safety status in real time. The grounding anomaly can be handled by a technician, and interactive software enables faster and more convenient human-machine interaction, facilitating a timely response from technicians.

[0032] In a specific elevator system, Figure 2For example, the system consists of a DC24V switching power supply, a machine room safety panel, a car top safety panel, and an elevator control part. For ease of understanding, the pit safety panel is not added in this example, which does not affect the overall operating principle.

[0033] The safety circuits in the machine room safety board and the car top safety board share the same power supply as the elevator control unit, represented by DC24V in the figure. The car top safety board consists of a resettable fuse (FUSE), an MCU, a power conversion module, a detection circuit module, and multiple first safety switches. Since there is more than one first safety switch, they are represented by dashed boxes in the figure for ease of distinction. The machine room safety board consists of a resettable fuse (FUSE), a microcontroller unit (MCU), a power conversion module, a detection circuit module, and multiple second safety switches. Since there is more than one second safety switch, they are represented by dashed boxes in the figure for ease of distinction. Initially, current flows from the machine room safety board to the car top safety board, allowing the machine room safety board, car top safety board, and elevator control unit to communicate with each other to achieve signal transmission.

[0034] When the negative signal line (S24V1) on the machine room safety panel is connected to PE, since PE is connected to 0V, a large current flows through the fuse, quickly causing it to open due to high resistance. The safety panel detects changes in the S24V signal and registers the safety switch short-circuit to ground. Further, a technician typically identifies the safety switch short-circuited to ground, eliminates the fault, and performs a manual fault reset, returning the elevator to normal operation. When the negative signal line (S24V2) on the car top safety panel is connected to PE, the principle is the same, except that the detection signal is detected by the car top safety panel and transmitted to the machine room safety panel and elevator control panel.

[0035] In this embodiment, the elevator controller monitors the safety status of the elevator by monitoring status signals received from the car roof electronic safety panel, the machine room electronic safety panel, and the pit electronic safety panel. The elevator includes: an elevator controller, a car, multiple first safety switches located on the car roof, multiple second safety switches and a safety circuit located in the machine room, and multiple third safety switches located in the pit. If the status signal from any safety switch is abnormal, the safety circuit is immediately disconnected to halt elevator operation and determine the source of the abnormal signal. This allows real-time monitoring of the elevator's operating status and troubleshooting of safety hazards. If an elevator malfunction occurs, the fault area and location can be quickly identified, reducing inspection and maintenance costs.

[0036] The steps of the above method are divided only for the purpose of clear description. During implementation, they can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this application; adding insignificant modifications or introducing insignificant designs to the algorithm or process without changing the core design of the algorithm and process are all within the scope of protection of this application.

[0037] Another embodiment of the present invention relates to an elevator controller, such as Figure 3 As shown, it includes: an abnormality detection module, which is used to monitor the safety status of the elevator in real time during the operation of the elevator; wherein the elevator includes: an elevator controller, a car, a plurality of first safety switches arranged on the car roof of the car, a plurality of second safety switches and a safety circuit arranged in the machine room, and a plurality of third safety switches arranged in the pit; an abnormality handling module, which is used to disconnect the safety circuit to stop the elevator operation when a grounding abnormality is detected in the safety circuit, and determine the location of the abnormality according to the status signal of the first safety switch, the status signal of the second safety switch and the status signal of the third safety switch.

[0038] In one example, the elevator also includes: a brake, a car top electronic safety panel, a machine room electronic safety panel, and a pit electronic safety panel. The car top electronic safety panel, the machine room electronic safety panel, the pit electronic safety panel and the elevator controller can be communicated with each other and use the same power supply; the car top electronic safety panel is used to receive status signals of all first safety switches, the machine room electronic safety panel is used to receive status signals of all second safety switches, and the pit electronic safety panel is used to receive status signals of all third safety switches; the brake is used to drive the elevator to an operating state when receiving a driving power supply.

[0039] In one example, the fuse in the safety circuit is a resettable fuse;

[0040] In one example, when the device's fuse module detects a grounding anomaly in the safety circuit, the resettable fuse is activated to disconnect the safety circuit; after the grounding anomaly disappears, the self-recovery capability of the resettable fuse is used to connect the safety circuit.

[0041] In one example, the elevator controller uses a power supply with the negative terminal connected to ground.

[0042] In one example, after determining the source of the abnormal signal, the device's software display module displays the location of the abnormality through the interactive software and issues a reminder; after the grounding abnormality disappears, when the operating authorization issued by the interactive software is received, the operation of the elevator is resumed and the safety status of the elevator continues to be monitored in real time during the operation of the elevator.

[0043] In one example, the voltage of the safety circuit is kept consistent with the voltage of the elevator controller.

[0044] In one example, the safety circuit and the elevator controller use the same power supply. If the negative pole of the power supply used by the elevator controller is grounded, it means that the negative pole of the power supply used by the safety circuit is also grounded.

[0045] In one example, the voltage of the safety circuit and the voltage of the elevator controller are both 24V.

[0046] In an example, the signal detection module operates specifically as follows: after power-on, the car-top electronic safety board detects the status of all first safety switches, and sends a first start signal to the machine room electronic safety board when all first safety switches are normal; after power-on and receiving the first start signal, the machine room electronic safety board detects the status of all second safety switches, and sends a second start signal to the pit electronic safety board when all second safety switches are normal; after power-on, the pit electronic safety board detects the status of all third safety switches, and sends a third start signal to the elevator controller when all third safety switches are normal; when power-on and receiving the third start signal, the elevator controller starts a self-test operation and receives a status signal from the brake, and controls the elevator to start when the self-test is normal and the brake status is normal; after the elevator starts, the car-top electronic safety board, the machine room electronic safety board and the pit electronic safety board continue to send the received status signals to the elevator controller.

[0047] In one example, the specific operation mode of the exception handling module is: when the status signal of any first safety switch is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the electronic safety panel on the car top; when the status signal of any second safety switch is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the electronic safety panel in the machine room; when the status signal of any first safety switch is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the electronic safety panel in the pit.

[0048] In this embodiment, the elevator controller monitors the safety status of the elevator by monitoring status signals received from the car roof electronic safety panel, the machine room electronic safety panel, and the pit electronic safety panel. The elevator includes: an elevator controller, a car, multiple first safety switches located on the car roof, multiple second safety switches and a safety circuit located in the machine room, and multiple third safety switches located in the pit. If the status signal from any safety switch is abnormal, the safety circuit is immediately disconnected to halt elevator operation and determine the source of the abnormal signal. This allows real-time monitoring of the elevator's operating status and troubleshooting of safety hazards. If an elevator malfunction occurs, the fault area and location can be quickly identified, reducing inspection and maintenance costs.

[0049] It is not difficult to find that this embodiment is a device embodiment corresponding to the above-mentioned method embodiment, and this embodiment can be implemented in conjunction with the above-mentioned method embodiment. The relevant technical details mentioned in the above-mentioned method embodiment are still valid in this embodiment, and to reduce repetition, they are not repeated here. Accordingly, the relevant technical details mentioned in this embodiment can also be applied to the above-mentioned method embodiment.

[0050] It is worth noting that all modules involved in this embodiment are logical modules. In actual applications, a logical unit can be a physical unit, a part of a physical unit, or a combination of multiple physical units. In addition, to highlight the innovations of the present invention, this embodiment does not include units that are not closely related to solving the technical problems proposed by the present invention. However, this does not mean that other units do not exist in this embodiment.

[0051] Another embodiment of the present invention relates to an elevator, such as Figure 4 As shown, it includes: an elevator controller, a car, multiple first safety switches installed on the car roof, multiple second safety switches and safety circuits installed in the machine room, multiple third safety switches installed in the pit, an electronic safety board on the car roof, an electronic safety board in the machine room and an electronic safety board in the pit; wherein the electronic safety board on the car roof is used to receive status signals of all first safety switches, the electronic safety board in the machine room is used to receive status signals of all second safety switches, and the electronic safety board in the pit is used to receive status signals of all third safety switches; the car is used to carry passengers, and the first safety switch, the second safety switch and the third safety switch can send status signals to report the current status; the elevator controller can execute the elevator safety control method as described above.

[0052] Another embodiment of the present invention relates to a computer-readable storage medium storing a computer program. When executed by a processor, the computer program implements the aforementioned method embodiment. The processor is communicatively coupled to at least one memory; the memory stores instructions executable by the at least one processor. The instructions are executed by the at least one processor to enable the at least one processor to perform the aforementioned elevator safety control method.

[0053] The memory and processor are connected using a bus, which can include any number of interconnected buses and bridges. The bus connects various circuits of one or more processors and memories. The bus can also connect various other circuits such as peripheral devices, voltage regulators, and power management circuits. These are all well known in the art and are therefore not described further herein. The bus interface provides an interface between the bus and the transceiver. The transceiver can be a single component or multiple components, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by the processor is transmitted over a wireless medium via an antenna. Furthermore, the antenna receives data and transmits it to the processor.

[0054] The processor is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interfaces, voltage regulation, power management, and other control functions. Memory can be used to store data used by the processor when performing operations.

[0055] That is, those skilled in the art will understand that all or part of the steps in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a program, which is stored in a storage medium and includes a number of instructions for causing a device (which may be a single-chip microcomputer, chip, etc.) or a processor to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, etc., various media that can store program code.

[0056] Those skilled in the art will appreciate that the above-mentioned embodiments are specific examples for implementing the present invention, and that in actual applications, various changes may be made thereto in form and detail without departing from the spirit and scope of the present invention.

Claims

1. An elevator safety control method, characterized in that: An elevator controller applied to an elevator, the method comprising: Monitor the safety status of the elevator in real time during its operation; The elevator comprises: the elevator controller, a car, a plurality of first safety switches arranged on the car roof of the car, a plurality of second safety switches and a safety circuit arranged in a machine room, and a plurality of third safety switches arranged in a pit; When it is monitored that there is a grounding abnormality in the safety circuit, the safety circuit is disconnected to stop the elevator operation, and the location where the abnormality occurs is determined according to the status signal of the first safety switch, the status signal of the second safety switch and the status signal of the third safety switch.

2. The elevator safety control method according to claim 1, characterized in that: The elevator further comprises: a brake, a car top electronic safety board, a machine room electronic safety board, and a pit electronic safety board, wherein the car top electronic safety board, the machine room electronic safety board, the pit electronic safety board and the elevator controller are all communicatively connected with each other; The car top electronic safety panel is used to receive status signals of all the first safety switches, the machine room electronic safety panel is used to receive status signals of all the second safety switches, and the pit electronic safety panel is used to receive status signals of all the third safety switches; The brake is used to drive the elevator to a running state when receiving a driving power supply.

3. The elevator safety control method according to claim 1, characterized in that: The fuse in the safety circuit is a self-resetting fuse; The method further comprises: When the safety circuit is detected to have grounding anomaly, the self-recovery fuse is actuated to disconnect the safety circuit; After the grounding anomaly disappears, the self-recovery capability of the self-recovery fuse is used to connect the safety circuit.

4. The elevator safety control method according to claim 3, characterized in that: The negative pole of the power supply of the safety loop is grounded.

5. The elevator safety control method according to claim 2, characterized in that: The real-time monitoring of the safety status of the elevator during the operation of the elevator includes: After being powered on, the car top electronic safety panel detects the status of all the first safety switches, and sends a first start signal to the machine room electronic safety panel when all the first safety switches are normal; After the electronic safety board in the machine room is powered on and receives the first start signal, the electronic safety board in the machine room detects the status of all the second safety switches, and sends a second start signal to the electronic safety board in the pit when all the second safety switches are normal; After being powered on, the pit electronic safety board detects the status of all the third safety switches and sends a third start signal to the elevator controller when all the third safety switches are normal; When the elevator controller is powered on and receives the third start signal, it starts a self-check operation and receives a status signal from the brake, and controls the elevator to start when the self-check is normal and the brake is in a normal state; After the elevator is started, the car top electronic safety board, the machine room electronic safety board and the pit electronic safety board will continuously send the received status signals to the elevator controller.

6. The elevator safety control method according to claim 1, characterized in that: When the safety circuit is monitored to have a grounding anomaly, the safety circuit is disconnected to stop the elevator operation, and the position where the anomaly occurs is determined according to the state signal of the first safety switch, the state signal of the second safety switch, and the state signal of the third safety switch, including: When the state signal of any of the first safety switches is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the car top electronic safety panel; When the state signal of any of the second safety switches is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the electronic safety board in the machine room; When the state signal of any of the first safety switches is an abnormal signal, the safety circuit is disconnected to stop the elevator operation, and it is determined that the abnormal signal comes from the pit electronic safety panel.

7. The elevator safety control method according to claim 6, characterized in that: The method further comprises: After determining the source of the abnormal signal, the location where the abnormality occurs is displayed and a reminder is issued through interactive software; After the grounding anomaly disappears, when the operation authorization issued by the interactive software is received, the operation of the elevator is resumed and the safety status of the elevator continues to be monitored in real time during the operation of the elevator.

8. An elevator controller, characterized in that: include: Anomaly detection module, used to monitor the safety status of the elevator in real time during elevator operation; The elevator comprises: the elevator controller, a car, a plurality of first safety switches arranged on the car roof of the car, a plurality of second safety switches and a safety circuit arranged in a machine room, and a plurality of third safety switches arranged in a pit; The abnormality processing module is used to disconnect the safety circuit to stop the elevator operation when it is monitored that there is a grounding abnormality in the safety circuit, and determine the location where the abnormality occurs according to the status signal of the first safety switch, the status signal of the second safety switch and the status signal of the third safety switch.

9. An elevator, characterized in that: include: An elevator controller, a car, a plurality of first safety switches disposed on the car roof, a plurality of second safety switches and safety circuits disposed in the machine room, a plurality of third safety switches disposed in the pit, an electronic safety board on the car roof, an electronic safety board in the machine room, and an electronic safety board in the pit; The car top electronic safety panel is used to receive status signals of all the first safety switches, the machine room electronic safety panel is used to receive status signals of all the second safety switches, and the pit electronic safety panel is used to receive status signals of all the third safety switches; The car is used to carry passengers, and the first safety switch, the second safety switch, and the third safety switch can send status signals to report the current status; The elevator controller is capable of executing the elevator safety control method as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the elevator safety control method according to any one of claims 1 to 7 is implemented.

Images