Elevator emergency operation device with safety function testing capability
By designing the connection unit and control unit in the elevator emergency operation device, the testing capability of the star sealing function and the brake holding function is achieved, the problem of lack of testing capability in the existing technology is solved, and the maintenance efficiency and safety of the elevator system are improved.
Patent Information
- Application Number
- CN202311494965.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-11-10
- Publication Date
- 2025-05-13
AI Technical Summary
The existing elevator emergency operation devices lack the ability to test the star sealing function and the brake holding function, resulting in low maintenance efficiency and difficulty in ensuring safety of the elevator system.
An elevator emergency operation device with safety function testing capability is designed, the device including a connecting unit and a control unit. The connecting unit is connected to the car state detection device and the brake holder through the first and second connecting parts, and the control unit is configured to perform various operations, including elevator emergency operation, star sealing function test and single-arm loosening test.
Through integrated testing capabilities, the maintenance efficiency and safety of the elevator system are improved, the normal operation of the star sealing function and the brake holding function is ensured, maintenance costs are reduced and user sense of security is improved.
Smart Images

Figure CN119976552A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to elevator technology, and in particular to an elevator emergency operating device with safety function testing capability. Background Art
[0002] In an elevator system, when an emergency occurs in the elevator (such as an elevator failure, power outage, or fire), the elevator emergency operation (EMRO) device will be activated. This device allows maintenance personnel or operators to safely control the operation of the elevator for rescue or evacuation without relying on the normal elevator control function. As an important safety function, EMRO is usually required by laws and regulations to be equipped in the elevator system. Summary of the invention
[0003] According to one aspect of the present application, there is provided an elevator emergency operation device with a safety function testing capability, the device comprising a connection unit and a control unit. The connection unit comprises a first connection component suitable for connecting to a car state detection device and a second connection component suitable for connecting to a brake controller. The control unit is connected to the connection unit and is configured to perform various operations. For example, in one of the operations, in a first configuration state in which the first connection component and the second connection component are respectively connected to the car state detection device and the brake controller, an elevator emergency operation function is performed. For another example, in another operation, in the first configuration state, the brake associated with the brake controller is released and whether the star-sealing function is normal is determined based on the first car state signal provided by the car state detection device.
[0004] Optionally, in the above elevator emergency operation device, the brake controller includes a first brake controller and a second brake controller. Accordingly, the control unit is further configured to perform the following operations: in a second configuration state in which the first connecting component is connected to the car state detection device and the second connecting component is connected to the first brake controller, activate the first brake associated with the first brake controller and determine whether the function of the first brake is normal based on the second car state signal provided by the car state detection device, wherein the second car state signal is obtained when the second brake associated with the second brake controller is in a released state. Further, the control unit is further configured to perform the following operations: in a third configuration state in which the first connecting component is connected to the car state detection device and the second connecting component is connected to the second brake controller, activate the second brake and determine whether the function of the second brake is normal based on the third car state signal provided by the car state detection device, wherein the third car state signal is obtained when the first brake is in a released state.
[0005] Optionally, the control unit of the elevator emergency operation device comprises an input / output port, a central processing unit, a memory, and a computer program stored in the memory. The input / output port comprises an input port connected to the first connection component to receive the first to third car state signals; and an output port connected to the second connection component to output a control command to the brake controller. The operation of the computer program on the central processing unit results in the execution of various operations.
[0006] Optionally, in the above-mentioned elevator emergency operating device, the first to third car status signals are displacement signals of the car, and the car status detection device includes an encoder for detecting car displacement.
[0007] Optionally, the elevator emergency operation device further comprises a plurality of buttons, which are configured to generate a trigger signal for causing the control unit to perform a corresponding type of operation in response to an event that a set combination of the plurality of buttons is pressed.
[0008] Optionally, the elevator emergency operation device further comprises a display component configured to present the type and result of the operation currently performed by the control unit.
[0009] Optionally, in the above elevator emergency operation device, the control unit is configured to allow the single-arm brake release test operation to be performed only when it is determined that the star-sealing function is normal.
[0010] Optionally, in the above-mentioned elevator emergency operation device, the elevator emergency operation is performed in the following manner: determining the speed of the car based on the car status signal provided by the car status detection device; and activating or releasing the brake associated with the brake controller based on the speed of the car, so that the car moves to the desired position.
[0011] Optionally, in the above-mentioned elevator emergency operating device, the star-sealing function test operation is performed in the following manner: releasing the brake associated with the brake controller to make the car go up or down a set distance; determining the speed of the car based on the first car status signal; and if the speed of the car is less than or equal to a set threshold while the car goes up or down the set distance, it is determined that the star-sealing function is normal; otherwise, it is determined that the star-sealing function is abnormal.
[0012] Optionally, in the above-mentioned elevator emergency operation device, the single-arm brake release test operation is performed in the following manner: activating the first brake; determining the no-load speed of the car based on the second car status signal obtained when the second brake is in a released state and the car is unloaded; determining whether the function of the first brake is normal based on the no-load speed of the car; if the function is normal, determining the fixed load speed of the car based on the second car status signal obtained when the second brake is in a released state and the car has a set load; and determining whether the function of the first brake is normal based on the fixed load speed of the car.
[0013] Optionally, in the above-mentioned elevator emergency operation device, a single-arm brake release test operation is also performed in the following manner: activating the second brake; determining the no-load speed of the car based on the third car status signal obtained when the first brake is in a released state and the car is unloaded; determining whether the function of the second brake is normal based on the no-load speed of the car; if the function is normal, determining the fixed load speed of the car based on the third car status signal obtained when the first brake is in a released state and the car has a set load; determining whether the function of the second brake is normal based on the fixed load speed of the car. BRIEF DESCRIPTION OF THE DRAWINGS
[0014] The above and / or other aspects and advantages of the present application will become clearer and easier to understand through the following description of various aspects in conjunction with the accompanying drawings, in which the same or similar units are represented by the same reference numerals. The accompanying drawings include:
[0015] Figure 1 A schematic block diagram of a typical elevator emergency operation (EMRO) device is shown.
[0016] Figure 2 The principle of realizing the star-sealing function in the elevator system is shown.
[0017] Figure 3 The present invention is a schematic block diagram of an elevator emergency operation device with a safety function testing capability according to some embodiments of the present application.
[0018] Figure 4 for Figure 3 A schematic block diagram of a specific example of a control unit in an elevator emergency operating device is shown. DETAILED DESCRIPTION
[0019] The present application is described more fully below with reference to the accompanying drawings in which illustrative embodiments of the present application are illustrated. However, the present application may be implemented in different forms and should not be interpreted as being limited to the embodiments given herein. The above embodiments are given to make the disclosure herein comprehensive and complete, so as to more fully convey the scope of protection of the present application to those skilled in the art.
[0020] In this specification, terms such as "comprise" and "include" indicate that in addition to the units and steps directly and explicitly stated in the specification and claims, the technical solution of the present application does not exclude the situation where there are other units and steps that are not directly or explicitly stated.
[0021] Figure 1 FIG. 1 shows a schematic block diagram of a typical elevator emergency operation (EMRO) device. Figure 1 The device 11 shown includes an input / output port 111, a central processing unit 112, a memory 113 (e.g., a non-volatile memory such as flash memory, ROM, hard drive, magnetic disk, optical disk, etc.), and a computer program 114 stored on the memory 113 and executable on the central processing unit 112.
[0022] See also Figure 1 , the input / output port 111 includes an input port 111A, which is configured to receive a car state signal (such as a car position signal and an indication signal that the car has reached the door zone position, etc.) from the car state detection device 12. Exemplarily, the car state detection device 12 includes an encoder 121 and a door zone switch 122. The encoder 121 can be an optical encoder or a magnetic encoder, etc., which is used to measure the position or displacement of the car and output a corresponding digital signal. The central processing unit 112 can determine the movement speed of the car based on the output signal of the encoder. The door zone switch 122 is used to detect whether the car is parked in the door zone to ensure that the car is aligned with the floor door when parked. When the car approaches the door zone switch, the door zone switch 112 will detect the position of the car and generate a corresponding trigger signal when the car reaches the door zone position.
[0023] like Figure 1As shown, the input / output port 111 also includes an output port 111B, which is configured to output a control command to an external device (e.g., brake controllers 131 and 132), such as a command to activate or release the brake. When performing an elevator emergency operation, the central processing unit 112 instructs the brake controllers 131 and 132 to release the brakes 141 and 142 controlled by them (or associated with them), and at the same time, it determines the speed of the car according to the car position signal provided by the encoder 121. If the car speed is less than the set threshold, the central processing unit 112 instructs the brake controller to put the brake in a released state, otherwise, it instructs the brake controller to activate the brake to prevent the car from moving. Through the above-mentioned speed-based control mechanism, the central processing unit 112 causes the car to move to the desired floor, and after receiving an indication signal from the door zone switch 122 that the car has reached the door zone position, it instructs the brake controller to keep the brake activated to ensure that the car stops at that floor.
[0024] The star-sealing function is an important safety function of the elevator system. Figure 2 The figure shows the principle of realizing the star-blocking function in the elevator system. Figure 1 As shown, the three-phase output of the inverter is connected to the elevator motor M through the phase lines U, V and W, and the switch SW and the contactor SK are connected to the phase lines. During normal operation, when the car stops at a floor, the switch SW is opened and the contact of the contactor SK is closed, so that the three phase lines U, V, W of the motor M are short-circuited to prevent the motor from slipping quickly, thereby playing a safety protection role.
[0025] The brake function is another important safety function of the elevator system, which is often used in emergency braking and floor holding situations. When the elevator system detects an emergency (such as abnormal elevator speed, power failure, door failure or other problems), the brake function will be triggered to quickly stop and brake the car. For another example, when the car reaches the destination floor, the brake function will be triggered to stop the car and ensure that it stops at that floor.
[0026] The brake function of the elevator can be performed by an electromagnetic brake or an electromagnetic brake. The electromagnetic brake contains an electromagnetic coil (electromagnetic winding) and an iron core (brake iron core). When the car needs to be stopped, current flows into the electromagnetic coil, thereby generating a magnetic field in the coil. Under the action of the magnetic field, the iron core is attracted to the coil to prevent the movement of the car; when the brake needs to be released and the car needs to be restarted, the current stops flowing through the coil, the magnetic field disappears, and the brake iron core is released. In the following description, the state in which the brake function of the brake can work is called the activated state, and the state in which the brake function of the brake does not work is called the released state.
[0027] Typically, in order to improve safety redundancy, the elevator system is equipped with multiple brakes to ensure that the brake function can still work in an emergency.
[0028] The star-blocking function and brake function are key parts of the elevator system safety and reliability, so their design, operation and maintenance are strictly regulated by elevator safety standards and regulations. If the testing capability for safety functions such as the star-blocking function and brake function can be integrated into the elevator emergency operation (EMRO) device, it will help improve the maintenance efficiency of the elevator system.
[0029] In some embodiments of the present application, by using an elevator emergency operating device (e.g. Figure 1 By adding a connection unit and modifying the control logic in the device shown in the figure, the test capability for the star-locking function and the brake function is integrated into the elevator emergency operation device. Since there is no need to substantially change the hardware structure of the existing elevator emergency operation device, the development speed can be accelerated and the manufacturing cost can be reduced. In addition, the modification of the control logic does not involve the change of the human-computer interaction interface, which helps users to become familiar with the operation of the upgraded elevator emergency operation device in a relatively short time.
[0030] Figure 3 The schematic block diagram of an elevator emergency operation device with safety function testing capability according to some embodiments of the present application can be implemented using various control devices, such as but not limited to programmable logic controllers, remote terminal units, embedded control systems, and industrial computers.
[0031] Figure 3 The device 31 shown includes a connection unit 311 and a control unit 312. The connection unit 311 can provide a connection between the control unit 312 and external devices (such as the car state detection device 32 and the brake controllers 331, 332, etc.). For example, when the elevator emergency operation device 31 operates in the EMRO mode, the connection unit 311 provides the control unit 312 with a connection to the car state detection device (here, the encoder 321 and the door zone switch 322 are taken as examples). In addition, the connection unit 311 also establishes a connection between the control unit 312 and the brake controllers 331, 332.
[0032] Continue to see Figure 3 , the connection unit 311 includes a first connection component 311A and a second connection component 311B. In some embodiments, the first and second connection components provide a non-fixed connection between the control unit 312 and the external device, that is, the connection component can connect the control unit 312 to the external device only when needed. Exemplarily, these connection components can be in the form of a connector, a connector, a plug, and a socket.
[0033] The first connecting component 311A is suitable for connecting the car state detection device 32 with the control unit 312 (that is, connecting the car state detection device 32 with the control unit 312 when the elevator emergency operating device is in working state); the second connecting component 311B is suitable for connecting the control unit 312 with the brake controllers 331, 332 (that is, connecting the brake controllers 331, 332 with the control unit 312 when the elevator emergency operating device is in working state). In some embodiments, the second connecting component 311B may include multiple sub-components, each of which can connect the control unit 312 with one of the multiple brake controllers as needed. Figure 3 Taking the illustrated situation as an example, the second connecting component 311B includes two subcomponents 311B- 1 and 311B- 2 , which can be connected to the brake controllers 331 and 332 respectively, so that the control unit 312 can control the respectively associated brakes 341 and 342 via the brake controllers 331 and 332 .
[0034] In some embodiments, the connection unit 311 can connect the control unit 312 to one or more brake controllers (eg, Figure 3 A connection is established between the brake controllers 331 and 332 in the control unit 312, so that the control unit 312 can control the state (activated state or released state) of a single brake or a group of brakes with the help of the brake controller.
[0035] In some other embodiments, the elevator controller 35 is also adapted to access the connection unit 311. In particular, the elevator controller 35 can be connected to any one of the subcomponents 311B-1 and 311B-2, so as to control the state of one or all of the brakes 341 and 342 on the elevator controller side.
[0036] Figure 4 for Figure 3 A schematic block diagram of a specific example of a control unit in an elevator emergency operating device is shown. Figure 4 The device 41 shown includes an input / output port 411 , a central processing unit 412 , a memory 413 , and a computer program 414 stored on the memory 413 and executable on the central processing unit 412 .
[0037] See also Figure 4 , the input / output port 411 includes a connection unit (eg Figure 3 The input port 411A and the output port 411B are connected to the connection unit 311 in FIG. Figure 3 For example, the input port 411A can be connected to the first connecting component 311A, so as to receive the data from the car state detection device (eg Figure 3The output port 111B can be connected to one or all of the subcomponents 311B-1 and 311B-2, so that the central processing unit 412 can control the status of the respectively associated brakes with the help of the brake controller.
[0038] By executing the computer program 414 by the central processing unit 412, the elevator emergency operation device can implement various control logics to complete the EMRO operation, the star-locking function test operation and the single-arm release test operation. Figure 1 The computer program of the elevator emergency operation device shown in the figure adds a star-sealing function test module and a single-arm brake release test module to realize the integration of the star-sealing function test capability and the single-arm brake release test capability. The advantage of this upgrade method is that the existing EMRO function modules can be reused.
[0039] In some embodiments, the control unit 41 further includes a human-machine interaction interface 415. In particular, the human-machine interaction interface 415 includes a plurality of buttons (not shown), which may be disposed on the housing surface of the elevator emergency operating device and electrically connected to the input port 411A. These buttons may constitute one or more combinations, each of which corresponds to one of the operation types (e.g., the working mode to be described below). Therefore, when a button of a certain combination is pressed, a trigger signal representing the corresponding operation type will be input at the input port 411A. Subsequently, the central processing unit 412 performs the corresponding type of operation in response to the trigger signal.
[0040] In some other embodiments, the human-machine interaction interface 415 further includes a display component (such as a digital tube and an LED array, etc.). The display component can be arranged on the housing surface of the elevator emergency operation device and electrically connected to the output port 411B. The display component can be configured to present the type of operation currently performed by the control unit 312 and the result of the operation (such as the judgment result of normal or abnormal function and the speed of the car movement, etc.).
[0041] In some embodiments, the elevator emergency operation device can work in multiple modes, such as EMRO mode, star-locking function test mode and single-arm release test mode. Figure 3 and Figure 4 For further description.
[0042] EMRO Mode
[0043] In the EMRO mode, the control unit 312 or the central processing unit 412 is connected to the car state detection device 32 via the first connection component 311A, and is respectively connected to the brake controllers 331 and 332 via the subcomponents 312B-1 and 312B-2 of the second connection component 312B. In this configuration state, the control unit 312 will perform the elevator emergency operation function based on the corresponding control logic, such as determining the speed of the car based on the car position signal provided by the encoder 321, activating or releasing the brakes 331 and 332 based on the speed of the car so that the car moves to the desired position, and keeping the brakes 331 and 332 activated after receiving the indication signal from the door zone switch 322 that the car has reached the door zone position, etc.
[0044] Star sealing function test mode
[0045] In the star-sealing function test mode, the control unit 312 or the central processing unit 412 is still connected to the car state detection device 32 via the first connection component 311A, and is respectively connected to the brake controllers 331 and 332 via the subcomponents 312B-1 and 312B-2 of the second connection component 312B. In this configuration state, the control unit 312 commands the brake controllers 331 and 332 to release their associated brakes 341 and 342, and determines whether the star-sealing function is normal based on the car state signal provided by the car state detection device 32.
[0046] In some embodiments, based on the command of the control unit 312, the brake controllers 331 and 332 release their respective associated brakes 341 and 342, at which time the car will move up or down; then the control unit 312 or the central processing unit 42 determines the distance and speed of the car movement, for example based on the car position signal provided by the encoder 321; then the control unit 312 or the central processing unit 42 determines whether the speed of the car is less than or equal to a set threshold (e.g., 0.3 m / s) during the car's up or down set distance (e.g., 1.2 m); if it is less than or equal to the threshold, it is determined that the star sealing function is normal; otherwise, it is determined that the star sealing function is abnormal.
[0047] Single arm release test mode
[0048] In the single-arm release test mode, the control unit 312 or the central processing unit 412 is connected to the car state detection device 32 via the first connection component 311A, and is connected to the brake controller 331 via the subcomponent 312B-1 of the second connection component 312B. On the other hand, similar to normal operation, the brake controller 332 is still connected to the elevator controller or elevator control cabinet 35.
[0049] In the above configuration state, the control unit 312 can cooperate with the elevator controller 35 to test the function of the brake 341 under various conditions. For example, during the car no-load test, under the control of the elevator controller 35, the brake 342 is in a released state, and the central processing unit 412 activates the brake 341 with the help of the brake controller 331. At this time, the no-load speed of the car can be determined based on the car state signal (such as the car position signal) from the car state detection device 32, and the function of the brake 341 is determined to be normal based on the no-load speed. For example, if the no-load speed is greater than 0, it is determined that the function of the brake 341 is abnormal, otherwise, the subsequent test process is performed. In an exemplary subsequent test process, the car is loaded with a set load, the brake 341 is in an activated state and the brake 342 is in a released state. At this time, the fixed load speed of the car can be determined based on the car state signal (such as the car position signal) from the car state detection device 32, and the function of the brake 341 is determined to be normal based on the fixed load speed. For example, if the fixed load speed exceeds a set multiple of the rated speed, it is determined that the function of the brake 341 is abnormal; otherwise, it is determined that the function is normal.
[0050] After completing the single-arm release test of the brake 341, the single-arm release test can be performed on the brake 342. In order to complete the test of the brake 342, the control unit 312 or the central processing unit 412 is connected to the car state detection device 32 via the first connecting component 311A, and is connected to the brake controller 332 via the subcomponent 312B-2 of the second connecting component 312B, and at the same time, the brake controller 331 is connected to the elevator controller or the elevator control cabinet 35. Accordingly, in this test, the brake 341 is in a released state and the brake 342 is in an activated state, and the control unit 312 can determine whether the function of the brake 342 is normal based on the no-load speed and the fixed load excess of the car.
[0051] In some embodiments, the single-arm brake release test mode is executed only when it is determined in the star-sealing function test that the star-sealing function is normal.
[0052] Those skilled in the art will appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described herein may be implemented as electronic hardware, computer software, or a combination of both.
[0053] In order to show the interchangeability between hardware and software, various schematic components, blocks, modules, circuits and steps are generally described above according to their functionality. Such functionality is implemented in hardware form or software form depending on the specific application and the design restrictions imposed on the overall system. Those skilled in the art can implement the described functionality in a variable manner for specific specific applications, but such implementation decisions should not be understood as causing deviations from the scope of the present application.
[0054] Although only some of the specific embodiments of the present application are described, it should be understood by those skilled in the art that the present application can be implemented in many other forms without departing from its subject matter and scope. Therefore, the examples and embodiments shown are considered to be illustrative rather than restrictive, and the present application may include various modifications and substitutions without departing from the spirit and scope of the present application as defined in the appended claims.
[0055] The embodiments and examples set forth herein are provided to best illustrate embodiments according to the present technology and its specific applications, and thereby enable those skilled in the art to implement and use the present application. However, those skilled in the art will appreciate that the above description and examples are provided only for ease of illustration and example. The description set forth is not intended to cover all aspects of the present application or to limit the present application to the precise form disclosed.
Claims
1. An elevator emergency operation device with safety function testing capability, comprising: A connecting unit, comprising a first connecting component adapted to be connected to the car state detecting device and a second connecting component adapted to be connected to the brake controller; as well as A control unit connected to the connection unit is configured to perform the following operations: A. in a first configuration state where the first connecting component and the second connecting component are respectively connected to the car state detection device and the brake controller, an elevator emergency operation function is performed; B. In the first configuration state, the brake associated with the brake controller is released and whether the star-locking function is normal is determined based on the first car state signal provided by the car state detection device.
2. The elevator emergency operating device according to claim 1, wherein: The brake controller includes a first brake controller and a second brake controller, and the control unit is further configured to perform the following operations: C. In a second configuration state in which the first connecting component is connected to the car state detection device and the second connecting component is connected to the first brake controller, the first brake associated with the first brake controller is activated and whether the function of the first brake is normal is determined based on a second car state signal provided by the car state detection device, wherein the second car state signal is acquired when the second brake associated with the second brake controller is in a released state.
3. The elevator emergency operating device according to claim 2, wherein: The control unit is further configured to perform the following operations: D. In a third configuration state in which the first connecting component is connected to the car state detection device and the second connecting component is connected to the second brake controller, the second brake is activated and whether the function of the second brake is normal is determined based on a third car state signal provided by the car state detection device, wherein the third car state signal is obtained when the first brake is in a released state.
4. The elevator emergency operating device according to claim 3, wherein: The control unit comprises: Input / output ports, including: An input port connected to the first connecting component to receive the first to third car status signals; an output port connected to the second connecting member to output a control command to the brake controller; Central processing unit; Memory; and A computer program stored on the memory and executable on the central processing unit, the execution of which results in the execution of operations A to D.
5. The elevator emergency operating device according to claim 3, wherein: The first to third car state signals are displacement signals of the car, and the car state detection device includes an encoder for detecting car displacement.
6. The elevator emergency operation device according to claim 3, further comprising a plurality of buttons configured to generate a trigger signal for causing the control unit to perform a corresponding type of operation in response to an event that a set combination of the plurality of buttons is pressed.
7. The elevator emergency operation device according to claim 1, further comprising a display component configured to present the type and result of the operation currently performed by the control unit.
8. The elevator emergency operating device according to claim 3, wherein: The control unit is configured to allow operations C and D to be performed only when it is determined that the star-sealing function is normal.
9. The elevator emergency operating device according to claim 1, wherein: Operation A includes: determining the speed of the car based on the car state signal provided by the car state detection device; and A brake associated with the brake controller is activated or released based on the speed of the car, so that the car moves to a desired position.
10. The elevator emergency operating device according to claim 1, wherein: Operation B includes: releasing a brake associated with the brake controller to allow the car to move up or down a set distance; determining a speed of the car based on the first car state signal; and If the speed of the car is less than or equal to a set threshold value during the period when the car goes up or down the set distance, it is determined that the star-sealing function is normal; otherwise, it is determined that the star-sealing function is abnormal.
11. The elevator emergency operating device according to claim 2, wherein: Operation C includes: activating the first holding brake; determining the no-load speed of the car based on the second car state signal acquired when the second brake is in a released state and the car is unloaded; determining whether the function of the first brake is normal based on the no-load speed of the car; If the function is normal, determining the fixed load speed of the car based on the second car state signal obtained when the second brake is in a released state and the car has a set load; and Whether the first brake functions normally is determined based on the fixed load speed of the car.
12. The elevator emergency operating device according to claim 3, wherein: Operation D includes: activating the second brake; determining the no-load speed of the car based on the third car state signal obtained when the first brake is in a released state and the car is unloaded; determining whether the function of the second brake is normal based on the no-load speed of the car; If the function is normal, determining the fixed load speed of the car based on the third car state signal obtained when the first brake is in a released state and the car has a set load; Whether the function of the second brake is normal is determined based on the fixed load speed of the car.