Accidental car movement in elevator system

Abstract

According to one aspect, there is provided an elevator system comprising: an elevator car configured to operate between landing floors; a lifting machine configured to drive the elevator car; at least one lifting mechanical brake configured to stop movement of the elevator car; an elevator controller configured to control the drive to move the elevator car during a normal elevator mode of operation; a plurality of safety sensors configured to provide safety information related to the elevator car; and a security system configured to receive security information from the plurality of security sensors. The elevator controller is configured to determine one or more predetermined operating conditions that satisfy an unexpected car movement test and, in response to the determination, cause at least one of the hoisting machine and the at least one hoist brake to initiate an unexpected car movement detection. The safety system is configured to detect accidental car movement based on safety information received from at least one of the plurality of safety sensors and initiate a stop of the elevator car in response to the detection.

Description

Technical Field

[0001] Various example embodiments generally relate to the field of elevator systems. In particular, some example embodiments relate to a solution for ensuring the safe operation of an elevator in the case of an unexpected car movement. Background Art

[0002] An elevator has electromechanical lifting machine brakes as safety devices to apply a braking force to the traction sheave or the rotating shaft of the elevator lifting machine. There are at least one, typically at least two, separate brakes acting on the same lifting machine. These brakes are designed to keep the elevator car stationary at the landing floors.

[0003] An elevator may also be equipped with an unexpected car movement protection device that provides a safe stop of the elevator car in the case of detecting an unexpected movement of the elevator car away from the platform where the door is open. Such an unexpected movement may be, for example, the result of a malfunction of the elevator control system and may be dangerous for elevator users entering or leaving the car. Therefore, it is important that the unexpected car movement protection is operative and operates correctly.

[0004] Therefore, there is a need to ensure safe elevator operation in the case of an unexpected car movement. Summary of the Invention

[0005] According to a first aspect, an elevator system is provided. The elevator system includes: an elevator car configured to operate between landing floors; a lifting machine configured to drive the elevator car; at least one lifting machine brake configured to stop the movement of the elevator car; an elevator controller configured to control a drive to move the elevator car during normal elevator operation mode; a plurality of safety sensors configured to provide safety information associated with the elevator car, and a safety system configured to receive safety information from the plurality of safety sensors. The elevator controller is configured to determine that one or more predetermined operating conditions of an unexpected car movement test are satisfied, and in response to that determination, cause at least one of the lifting machine and the at least one lifting machine brake to initiate an unexpected car movement detection. The safety system is configured to detect an unexpected car movement based on safety information received from at least one of the plurality of safety sensors, and in response to that detection, initiate a stop of the elevator car.

[0006] In an implementation of the first aspect, the elevator system includes a positioning system configured to provide the position of the elevator car in the elevator hoistway, and the elevator controller is configured to determine, based on data from the positioning system, the distance from the initial test position of the elevator car to the stop position of the elevator car after the elevator car stops, and determine the operating condition of the unexpected car movement detection based on that distance.

[0007] In an implementation form of the first aspect, the drive is configured to determine the distance from the initial test position of the elevator car to the stop position of the elevator car after the elevator car stops; and the elevator controller is configured to determine the operating condition of the unexpected car movement detection based on the distance.

[0008] In an implementation form of the first aspect, the elevator controller is configured to compare the distance with a first threshold distance, and if the distance is greater than the first threshold distance, then take the elevator car out of service.

[0009] In an implementation form of the first aspect, the elevator controller is configured to compare the distance with a second threshold distance, and if the distance is greater than the second threshold distance, then issue a warning signal.

[0010] In an implementation form of the first aspect, when starting the unexpected car movement detection for at least one of the hoisting machine and at least one hoisting machine brake, the elevator controller is configured to open at least one hoisting machine brake at the initial test position without powering the hoist motor.

[0011] In an implementation form of the first aspect, when starting the unexpected car movement detection for at least one of the hoisting machine and at least one hoisting machine brake, the elevator controller is configured to open at least one hoisting machine brake at the initial test position and power the hoist motor to move the elevator car.

[0012] In an implementation form of the first aspect, one or more predetermined operating conditions include at least one of the following: the elevator car is empty; the elevator car has a test load; the elevator controller and the safety system accept an unexpected car movement test; the elevator controller receives a test request; and a predetermined test time period is triggered.

[0013] According to a second aspect, there is provided a method for testing an unexpected movement of an elevator car of an elevator system, the elevator system including an elevator car configured to operate between landing floors, a hoisting machine configured to drive the elevator car, at least one mechanical brake configured to stop the movement of the elevator car, an elevator controller configured to control the drive to move the elevator car during normal elevator operation mode, a plurality of safety sensors configured to provide safety information associated with the elevator car, and a safety system configured to receive the safety information from the plurality of safety sensors. The method includes: determining, by the elevator controller, that one or more predetermined operating conditions of an unexpected car movement test are satisfied; in response to the determination, causing, by the elevator controller, at least one of the hoisting machine and the at least one hoisting machine brake to initiate an unexpected car movement detection; detecting, by the safety system, the unexpected car movement based on safety information received from at least one of the plurality of safety sensors; and in response to the detection, initiating, by the safety system, a stop of the elevator car.

[0014] In an implementation form of the second aspect, the elevator system includes a positioning system configured to provide the position of the elevator car in the hoistway, and wherein the method further includes: determining, by the elevator controller, based on data from the positioning system, the distance from an initial test position of the elevator car to a stop position of the elevator car after the elevator car stops; and determining, by the elevator controller, the operating condition of the unexpected car movement detection based on the distance.

[0015] In an embodiment form of the second aspect, the method further includes: after the elevator car stops, determining, by the drive, the distance from the initial test position of the elevator car to the stop position of the elevator car; and determining, by the elevator controller, the operating condition of the unexpected car movement detection based on the distance.

[0016] In an implementation form of the second aspect, the method further includes comparing, by the elevator controller, the distance with a first threshold distance; and if the distance is greater than the first threshold distance, causing, by the elevator controller, the elevator car to be taken out of service.

[0017] In an implementation form of the second aspect, the method further includes comparing, by the elevator controller, the distance with a second threshold distance; and if the distance is greater than the second threshold distance, emitting, by the elevator controller, a warning signal.

[0018] In an implementation form of the second aspect, causing, by the elevator controller, at least one of the hoisting machine and the at least one hoisting machine brake to initiate an unexpected car movement detection includes: opening, by the elevator controller, at least one hoisting machine brake at the initial test position without supplying power to the hoisting machine.

[0019] In an implementation of the second aspect, starting the unexpected car movement detection by the elevator controller for at least one of the hoisting machinery and at least one hoisting machinery brake includes: opening at least one hoisting machinery brake by the elevator controller at an initial test position; and powering the hoisting machinery by the elevator controller to move the elevator car.

[0020] In an embodiment of the second aspect, one or more predetermined operating conditions include at least one of the following: the elevator car is empty; the elevator car has a test load; the elevator controller and the safety system accept an unexpected car movement test; the elevator controller receives a test request; and a predetermined test time period is triggered. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] The drawings, which are included to provide a further understanding of the invention and constitute a part of this specification, illustrate embodiments of the invention and, together with the description, help to explain the principles of the invention. In the drawings:

[0022] Figure 1 A system according to an example embodiment is shown.

[0023] Figure 2 A graph representing the elevator car speed during an unexpected car movement according to an example embodiment is shown.

[0024] Figure 3 A flowchart for testing the unexpected movement of an elevator car of an elevator system according to an example implementation is shown. DETAILED DESCRIPTION

[0025] The various examples and embodiments discussed herein disclose a solution in which safe elevator operation in the event of an unexpected car movement can be achieved.

[0026] Figure 1 A system according to an example embodiment is shown. The elevator system includes an elevator controller 100 and at least one hoisting machinery brake 104. The elevator controller 100 is configured to control a drive 102 to move an elevator car in an elevator hoistway during normal elevator operation mode. In an example embodiment, there may be at least two, four or even more mechanical brakes. The drive 102 is configured to control a hoisting machinery 108 to drive the elevator car between landing floors in the elevator hoistway. The elevator system further includes a safety system 110. The safety system 110 is configured to control the elevator controller 100 and the drive 102. The safety system 110 is further configured to receive safety information associated with the elevator car from a plurality of safety sensors 112.

[0027] The elevator controller 100 is configured to: determine that one or more predetermined operating conditions for an unexpected car movement test have been met, and in response to that determination, cause at least one of the hoisting machine 108 and the hoisting machine brake 104 to initiate an unexpected car movement detection. In other words, the elevator controller 100 is configured to purposefully initiate an unexpected car movement to test how the elevator system responds to it. The safety system 110 is configured to detect an unexpected car movement based on safety information received from at least one of a plurality of safety sensors. The safety sensors can include, for example, a car encoder that measures the movement of the elevator car, a motor encoder that measures the rotation of the elevator hoisting machine, one or more door area sensors that measure the position of the elevator car near a landing floor, safety contacts that measure the open / closed state of the landing door and / or the car door, limit switches or corresponding sensors that measure the car reaching a predetermined point in the hoistway, a brake switch or corresponding sensor that measures the closed / open state of the hoisting machine brake, etc., at least one of which. In response to that detection, the safety system 110 is configured to initiate a stop of the elevator car. For example, the safety system 110 can be configured to control the drive 102 to stop the elevator car and / or control the elevator controller 100 to apply the hoisting machine brake 104.

[0028] In an exemplary embodiment, the safety system 110 can include, for example, a programmable electronic safety controller, and the unexpected car movement detection function can be implemented in the safety software of the electronic safety controller. The safety controller can run the unexpected car movement detection function as an independent software subroutine that is configured to remain unaffected even if other functions or memory locations of the safety controller are manipulated. For example, a software opening of the landing door safety contact can be performed in the safety controller software to simulate opening the landing door contact during an unexpected car movement test, rather than actually opening the landing door. Thus, since it is not necessary to open the landing door, elevator safety can be improved. The safety controller can cause a safe shutdown of the elevator by generating a control command that causes the hoisting machine brake to be applied and the power supply to the hoisting motor to be interrupted.

[0029] In an exemplary embodiment, an elevator system can include a positioning system configured to provide the position of an elevator car within an elevator hoistway. An elevator controller 100 can be configured to determine, based on data from the positioning system, the distance from an initial test position of the elevator car to a stop position of the elevator car after the elevator car has stopped. In another exemplary embodiment, a drive 102 can be configured to determine the distance from the initial test position of the elevator car to the stop position of the elevator car after the elevator car has stopped. The elevator controller 100 can then be configured to determine an operating condition of an unexpected car movement detection based on the distance. The elevator controller 100 can be configured to compare the distance to a first threshold distance and, if the distance is greater than the first threshold distance, take the elevator car out of service. The first threshold distance can be set to a value indicating that the unexpected car movement detection is not working properly and that additional maintenance actions may thus be immediately required. In another example embodiment, the elevator controller 100 can be configured to compare the distance to a second threshold distance and, if the distance is greater than the second threshold distance, issue a warning signal. The second threshold distance can be set to a value less than the first threshold distance and can be used as a means for providing the warning signal. In response to the warning signal, a maintenance visit to the elevator site can be requested without interrupting the service of the elevator system.

[0030] In an example embodiment, when at least one of a hoisting machine 108 and a hoisting machine brake 104 is activated for unexpected car movement detection, the elevator controller 100 can be configured to open the hoisting machine brake 104 at the initial test position without powering the hoisting machine 108. In other words, the elevator car begins to move upward in the elevator hoistway because the counterweight is heavier than the elevator car. In another exemplary embodiment, when at least one of the hoisting machine 108 and the hoisting machine brake 104 is activated for unexpected car movement detection, the elevator controller 100 can be configured to open the hoisting machine brake 104 at the initial test position and power the hoisting machine 108 to move the elevator car.

[0031] One or more operating conditions may include at least one of the following: the elevator car is empty; the elevator car has a test load; the elevator controller 100 and the safety system 110 are subjected to an unexpected car movement test; the elevator controller 100 receives a test request; and a predetermined test time period is triggered. The emptiness of the elevator car can be determined, for example, based on a visual inspection or data from at least one of a camera, a load weighing device, a proximity sensor, and a presence sensor. The predetermined test time period can be selected such that the unexpected car movement detection is tested regularly, for example, once a day, once a week, etc. In addition, in an exemplary embodiment, the predetermined test time period can be adaptive. For example, if the distance from the initial test position of the elevator car to the stop position of the elevator car after the elevator car stops remains substantially constant and is below a predetermined threshold, the predetermined test time period can be longer. Then, when it is determined that the distance begins to increase, the predetermined test time period can be set to a shorter time interval. The test request can be generated, for example, with a manual control panel, or can be received from a predetermined network address at a remote location (such as a server or a remotely located elevator service center). In another exemplary embodiment, the test request can be automatically generated locally at the elevator site based on a predetermined schedule (such as a day clock, etc.). The test request can be received by the safety system 110, and then the safety system 110 sends the test request to the elevator controller 100 via, for example, a redundant communication channel therebetween.

[0032] Figure 2 A graph showing the elevator car speed during an unexpected car movement according to an example embodiment is shown. The graph can be the result of an unexpected car movement test of the elevator car. There may be one or more preconditions for the unexpected car movement test, such as one or more of the following:

[0033] There is no one in the elevator car. This can be confirmed, for example, by a visual inspection or based on data received from a camera, a load weighing device, a proximity sensor, or a presence sensor.

[0034] The elevator car only has a test load.

[0035] The unexpected car movement test is triggered from a user interface or based on at least one predetermined condition (such as a time interval) or from a specified remote location.

[0036] The unexpected car movement test is accepted through mutual acceptance between the drive and the safety system:

[0037] The safety system can send an unexpected car movement test request to the drive, for example, using two communication-different channels or as two redundant messages in a single-channel system.

[0038] If the redundant test requests are consistent with each other, the drive receives the request and prepares the test conditions.

[0039] The drive responds to the safety system with the test conditions being ready.

[0040] If the safety system receives a message with the test conditions being ready from the drive, even if the safety system has requested a test, the safety system can move the elevator system to a safe state and prevent the start of the elevator car.

[0041] When the test conditions have been established, an unexpected car movement test can be initiated at 200, for example, via the user interface.

[0042] The test results can be reported to a remote entity, such as a service center, or can be reported locally on-site, for example, on the display of the elevator controller or on a mobile device carried by a service technician.

[0043] In Figure 2 In a first example, when the unexpected car movement test has been initiated, the drive holds the elevator car at a landing or at a predetermined test position, and the hoisting machine brake is opened. After a predetermined time, the drive can remove power (i.e., torque) from the hoisting machine and disable the dynamic brake. In another exemplary embodiment, the drive can apply a test power (i.e., torque) to the hoisting machine after a predetermined time. In the case of reaching a maximum acceleration (e.g., 2.5 m / s2), the test torque can be limited to the nominal current or lower. Due to the load imbalance between the elevator car and the counterweight associated with the elevator car or due to the test power, the elevator car starts to move and accelerate. The safety system is configured to detect the unexpected car movement at 202, for example, based on safety information from at least one safety sensor, and open the safety output. At the start of 204, the power supply to the hoisting machine and the hoisting machine brake is removed. Thus, at 206, the hoisting machine brake contacts the traction sheave and starts to generate a deceleration torque. Consequently, the elevator car speed slows down, and the movement of the elevator car finally stops at 208.

[0044] In Figure 2 In a second example, when the unexpected car movement test has been initiated, the drive holds the elevator car at a landing or at a predetermined test position, and the hoisting machine brake is opened. The drive can request an Unexpected Car Movement Protection (UCMP) stop from the safety system. The safety system responds to the UCMP request and opens the safety output at 202. At the start of 204, the power supply to the hoisting machine and the hoisting machine brake is removed. Due to the load imbalance between the elevator car and the counterweight associated with the elevator car, the elevator car starts to move and accelerate. At 206, the hoisting machine brake contacts the traction sheave and starts to generate a deceleration torque. Consequently, the elevator car speed slows down, and the movement of the elevator car finally stops at 208.

[0045] In the first and / or second example, the drive can be configured to run the elevator car back to a landing or a predetermined test position and measure the running distance. The running distance is equal to the unexpected car movement stop distance. The distance can be compared with an allowed reference value (e.g., a first threshold). The elevator controller 100 can be configured to compare the distance with the allowed reference value, and if the distance is greater than the allowed reference value, put the elevator car out of service. The allowed reference value can be set to a value indicating that the unexpected car movement detection is not working properly, and thus additional maintenance actions may be immediately required. In another example embodiment, the elevator controller 100 can be configured to compare the distance with a second threshold distance, and if the distance is greater than the second threshold distance, issue a warning signal. The second threshold distance can be set to a value less than the first threshold distance, and it can be used as a means for providing a warning signal. In response to the warning signal, a maintenance visit to the elevator site can be requested without interrupting the elevator system service. As an alternative to measuring the distance with the drive, sensor data from, for example, sensors in the elevator hoistway and / or elevator car can be used to determine the distance based on data from the elevator car positioning system.

[0046] In an example embodiment, in a situation where it has been detected that the stop was not initiated as required by the safety system, there can be a supplementary protection function. In this case, the drive can be configured to, after the distance of the elevator car from the test position has exceeded a predetermined distance (e.g., one meter), if applicable, lower the hoisting machine brake and remove the test torque from the hoisting machine.

[0047] Figure 3 A flowchart showing the unexpected movement of an elevator car for testing an elevator system according to an example embodiment. The elevator system includes an elevator car configured to operate between landing floors, a hoisting machine configured to drive the elevator car, at least one mechanical brake configured to stop the movement of the elevator car, an elevator controller configured to control the drive to move the elevator car during normal elevator operation mode, a plurality of safety sensors configured to provide safety information associated with the elevator car, and a safety system configured to receive the safety information from the plurality of safety sensors.

[0048] At 300, the elevator controller can determine that one or more predetermined operating conditions for an unexpected car movement test are met.

[0049] At 302, in response to the determination, the elevator controller can cause at least one of the hoisting machine and at least one hoisting machine brake to initiate unexpected car movement detection.

[0050] At 304, the safety system can detect an unexpected car movement based on safety information received from at least one of the plurality of safety sensors.

[0051] At 306, the safety system can initiate the stopping of the elevator car in response to a detection.

[0052] One or more of the embodiments and exemplary implementations discussed above can implement a solution for simulating and validating the correct operation of unexpected car movement protection in an elevator system. This solution can even be applied to elevator solutions where the elevator lift and mechanical characteristics are unknown or not well-known. Additionally, one or more of the examples and exemplary implementations discussed above can implement a simple and safe solution for demonstrating the correct operation of unexpected car movement protection. Further, one or more of the examples and exemplary implementations discussed above can implement a simple and safe solution for monitoring changes in unexpected car movement protection through periodic test intervals.

[0053] One or more devices of the elevator system (e.g., the safety system and the elevator controller) can be implemented by a device (e.g., a computer or a controller). The device can include one or more processors, and one or more memories including computer program code. The device can also include at least one communication interface configured to provide a wireless and / or wired connection. In an example embodiment, the memory is capable of storing instructions, such as an operating system and / or various applications.

[0054] Additionally, the processor is capable of executing the stored instructions. In an example embodiment, the processor can be embodied as a multi-core processor, a single-core processor, or a combination of one or more multi-core processors and one or more single-core processors. For example, the processor can be embodied as one or more of various processing devices, such as a coprocessor, a microprocessor, a controller, a digital signal processor (DSP), processing circuitry with or without an accompanying DSP, or various other processing devices including integrated circuits (such as, for example, an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), a microcontroller unit (MCU), a hardware accelerator, a dedicated computer chip, etc.). In an example embodiment, the processor can be configured to execute hard-coded functions. In an example embodiment, the processor is implemented as an executor of software instructions, where the instructions can specifically configure the processor to perform the algorithms and / or operations described herein when the instructions are executed.

[0055] The memory can be embodied as one or more volatile memory devices, one or more non-volatile memory devices, and / or a combination of one or more volatile memory devices and non-volatile memory devices. For example, the memory can be embodied as semiconductor memory (such as mask ROM, PROM (programmable ROM), EPROM (erasable PROM), flash ROM, RAM (random access memory), etc.).

[0056] In one embodiment, at least one memory may store program instructions that, when executed by at least one processor, cause the device to perform the functions of the various embodiments discussed herein. Additionally, in an embodiment, at least one of the processor and the memory may constitute components for implementing the discussed functions.

[0057] Example embodiments may be implemented in software, hardware, application logic, or a combination of software, hardware, and application logic. Example embodiments may store information related to the various methods described herein. This information may be stored in one or more memories, such as hard disks, optical disks, magneto-optical disks, RAM, etc. One or more databases may store the information for implementing the example embodiments. Data structures (e.g., records, tables, arrays, fields, graphs, trees, lists, etc.) included in one or more of the memories or storage devices listed herein may be used to organize the databases. The methods described with respect to the example embodiments may include appropriate data structures for storing data collected and / or generated by the methods of the devices and subsystems of the example embodiments in one or more databases.

[0058] The components of the example embodiments may include a computer-readable medium or memory for holding instructions programmed according to the teachings and for holding data structures, tables, records, and / or other data described herein. In an example embodiment, the application logic, software, or instruction set is maintained on any of a variety of conventional computer-readable media. In the context of this document, "computer-readable medium" may be any medium or component that can contain, store, communicate, propagate, or transport instructions for use by or in connection with an instruction execution system, apparatus, or device such as a computer. Computer-readable media may include a computer-readable storage medium, which may be any medium or device that can contain or store instructions for use by or in connection with an instruction execution system, apparatus, or device such as a computer. Computer-readable media may include any suitable medium that participates in providing instructions to a processor for execution. Such media may take many forms, including but not limited to non-volatile media, volatile media, transmission media, etc.

[0059] While the fundamental novel features applied to its preferred embodiments have been shown and described and pointed out, it should be understood that various omissions, substitutions, and changes in the form and details of the described apparatus and methods may be made by those skilled in the art without departing from the spirit of the present disclosure. For example, it is expressly intended that all combinations of those elements and / or method steps that perform substantially the same function in substantially the same way to achieve the same result are within the scope of the present disclosure. In addition, it should be recognized that structures and / or elements and / or method steps shown and / or described in connection with any disclosed form or embodiment may be incorporated, as a general matter of design choice, into any other disclosed or described or suggested form or embodiment. Further, the means-plus-function clauses are intended to cover structures described herein as performing the recited function and cover not only structural equivalents but also equivalent structures.

[0060] The applicant hereby discloses each individual feature described herein and any combination of two or more such features in isolation, provided that such features or combinations are capable of being carried out by those skilled in the art based on the present specification as a whole in accordance with common general knowledge, regardless of whether such features or combinations of features solve any of the problems disclosed herein, and without limiting the scope of the claims. The applicant points out that the disclosed aspects / embodiments may consist of any such individual feature or combination of features. In view of the foregoing description, it will be apparent to those skilled in the art that various modifications may be made within the scope of the present disclosure.

Claims

1. An elevator system, comprising: An elevator car configured to move between landing floors; A hoisting machine (108) configured to drive the elevator car; At least one mechanical brake (104) configured to stop the movement of the elevator car; An elevator controller (100) configured to control the drive to move the elevator car during normal elevator operation mode; A plurality of safety sensors (112) configured to provide safety information related to the elevator car; A safety system (110) configured to receive safety information from the plurality of safety sensors (112); Wherein, the elevator controller (100) is configured to: Determine that one or more predetermined operating conditions of an unexpected car movement test are satisfied; and In response to the determination, cause at least one of the hoisting machine (108) and at least one hoisting machine brake (104) to initiate an unexpected car movement detection; Wherein, the safety system (110) is configured to: Detect an unexpected car movement based on the safety information received from at least one of the plurality of safety sensors (112); and In response to the detection, initiate the stop of the elevator car.

2. The elevator system according to claim 1, wherein The elevator system includes a positioning system configured to provide the position of the elevator car in the hoistway, and the elevator controller (100) is configured to: Determine the distance from the initial test position of the elevator car to the stop position of the elevator car after stopping based on data from the positioning system; and Determine the operating condition of the unexpected car movement detection based on the distance.

3. The elevator system according to claim 1, wherein: The drive (102) is configured to determine the distance from the initial test position of the elevator car to the stop position of the elevator car after stopping; And The elevator controller (100) is configured to determine the operating condition of the unexpected car movement detection based on the distance.

4. The elevator system according to claim 2 or 3, wherein the elevator controller (100) is configured to: Compare the distance with a first threshold distance; and If the distance is greater than the first threshold distance, take the elevator car out of service.

5. The elevator system according to claim 2 or 3, wherein the elevator controller (100) is configured to: Compare the distance with a second threshold distance; and If the distance is greater than the second threshold distance, issue a warning signal.

6. The elevator system according to any one of claims 1 - 5, wherein, When causing at least one of the hoisting machine (108) and at least one hoisting machine brake (104) to initiate an unexpected car movement detection, the elevator controller (100) is configured to: Open at least one hoisting machine brake (104) at the initial test position without powering the hoisting machine (108).

7. The elevator system according to any one of claims 1 - 5, wherein, When causing at least one of the hoisting machine (108) and at least one hoisting machine brake (104) to initiate an unexpected car movement detection, the elevator controller (100) is configured to: Open at least one hoisting machine brake (104) at the initial test position; and Power the hoisting machine (108) to move the elevator car.

8. The elevator system according to any one of claims 1 - 7, wherein, The one or more predetermined operating conditions include at least one of the following: The elevator car is empty; The elevator car has a test load; The elevator controller (110) and the safety system (110) receive an unexpected car movement test; The elevator controller (100) receives a test request; and Triggers a predetermined test time period.

9. A method for testing an unexpected movement of an elevator car of an elevator system, the elevator system including an elevator car configured to operate between landing floors, a hoisting machine (108) configured to drive the elevator car, and at least one mechanical brake (104) configured to stop the elevator car from moving; An elevator controller (100) configured to control a drive to move an elevator car during normal elevator operation mode; a plurality of safety sensors (112) configured to provide safety information related to the elevator car; And a safety system (110) configured to receive safety information from the plurality of safety sensors (112); Wherein, the method includes: The elevator controller (100) determines that one or more predetermined operating conditions for the unexpected car movement test are satisfied; In response to the determination, the elevator controller (100) causes at least one of the hoisting machine (108) and at least one hoisting machine brake (104) to initiate unexpected car movement detection; The safety system (110) detects unexpected car movement based on safety information received from at least one of the plurality of safety sensors (112); and The safety system (110) initiates the stop of the elevator car in response to the detection.

10. The method according to claim 9, wherein, The elevator system includes a positioning system configured to provide the position of the elevator car in the elevator shaft, and wherein, the method further includes: The elevator controller (100) determines the distance from the initial test position of the elevator car to the stop position of the elevator car after it stops based on data from the positioning system; and The elevator controller (100) determines the operating condition of the unexpected car movement detection based on the distance.

11. The method according to claim 9, further including: The drive (102) determines the distance from the initial test position of the elevator car to its stop position after the elevator car stops; And The elevator controller (100) determines the operating state of the unexpected car movement detection based on the distance.

12. The method according to claim 10 or 11, further including: The elevator controller (100) compares the distance with a first threshold distance; And If the distance is greater than the first threshold distance, the elevator controller (100) takes the elevator car out of service.

13. The method according to claim 10 or 11, further including: The elevator controller (100) compares the distance with a second threshold distance; And If the distance is greater than the second threshold distance, the elevator controller (100) issues a warning signal.

14. The method according to any one of claims 9 - 13, wherein, The elevator controller (100) causing at least one of the hoisting machine (108) and at least one hoisting machine brake (104) to initiate unexpected car movement detection includes: The elevator controller (100) opens at least one hoisting machine brake (104) at the initial test position without powering the hoisting machine (108).

15. The method according to any one of claims 9 - 14, wherein, The elevator controller causing at least one of the hoisting machine (108) and at least one hoisting machine brake (104) to initiate unexpected car movement detection includes: The elevator controller (100) opens at least one hoisting machine brake (104) at the initial test position; and Power is supplied from an elevator controller (100) to a hoisting machine (108) to move an elevator car.

16. The method according to any one of claims 9 - 15, wherein, The one or more predetermined operating conditions include at least one of the following: The elevator car is empty; The elevator car has a test load; The elevator controller (100) and the safety system (110) are subject to an unexpected car movement test; The elevator controller (100) receives a test request; and A predetermined test time period is triggered.

Images