Control system of electronic safety tongs for elevator

Abstract

The invention relates to a control system of electronic safety tongs for an elevator, and belongs to the technical field of elevator safety control, the control system comprises a double-MCU control subsystem, the double-MCU control subsystem comprises a main MCU module and an auxiliary MCU module which work at the same time, and an external trigger signal is input into the double-MCU control subsystem through a trigger input module; the double-MCU control subsystem controls the working state of the 36V and 12V trigger module according to an external trigger signal, and the 36V and 12V trigger module controls the power-on or power-off of an electronic safety tongs coil through a safety tongs output port, so that the electronic safety tongs act. The trigger detection module detects whether the 36V trigger module and the 12V trigger module work normally or not in real time, detects whether a coil of the electronic safety tongs is short-circuited or open-circuited or not, and feeds back a detection result to the double-MCU control subsystem; and when the input power supply is powered off, the power-loss holding module provides a holding voltage for a coil of the electronic safety tongs for a preset duration. The device has the advantages of simple structure, high stability, low failure rate and the like.

Description

Technical Field

[0001] The present invention relates to the technical field of elevator safety control, in particular to a control system for an electronic safety clamp for an elevator. Background Art

[0002] With the widespread use of elevators, people's requirements for elevators have gradually expanded from functional functionality to comfort, safety, and reliability. As a key safety device, the safety clamp effectively protects passengers in the event of an elevator loss of control or fall. Compared to traditional mechanical safety clamps (which rely on overspeed limiters for triggering), the core of electronic safety clamps lies in electronic intelligent control, which significantly improves braking speed, braking force adjustment capabilities, and fault self-diagnosis capabilities. Therefore, electronic safety clamps are currently a key research direction in elevator safety systems.

[0003] Traditional elevator safety clamp control systems generally utilize a single MCU control architecture, which presents a single point of failure risk. A failure in the main controller will directly disable the safety clamp function, failing to meet the requirements of the EN 81-20 elevator standard. Regarding safety, the electronic safety clamp must be able to operate reliably when the elevator loses power. However, traditional battery backup solutions only provide braking power for a few seconds, making it difficult to meet the full braking requirements of ultra-high-rise elevators (≥10 seconds). Furthermore, existing control systems lack real-time diagnostic capabilities for critical faults such as coil shorts and breaks, relying solely on passive protection via fuses. This results in a significant blind spot in fault detection, severely limiting the reliability of safe elevator operation. Summary of the Invention

[0004] Based on this, it is necessary to provide a control system for electronic safety clamps for elevators based on a dual MCU redundant architecture to address the problems of poor stability, insufficient power-off maintenance capability, and blind spots in fault detection in the existing electronic safety clamp control system. This control system is suitable for fast and reliable braking when the elevator overspeeds or loses power in high-rise elevator safety scenarios.

[0005] In order to solve the above problems, the present invention adopts the following technical solutions:

[0006] A control system for an electronic safety clamp for an elevator includes a dual MCU control subsystem and a 36V trigger module, a 12V trigger module, a trigger detection module, a trigger input module, an alarm module, a safety clamp input port, and a power-failure hold module, each connected to the dual MCU control subsystem. The control system also includes a safety clamp output port. The dual MCU control subsystem includes a main MCU module and a secondary MCU module that operate simultaneously. Instructions are cross-verified between the main MCU module and the secondary MCU module via a serial communication interface. When either MCU module fails, the other MCU module takes over control of the 36V trigger module and the 12V trigger module.

[0007] The external trigger signal generated by the elevator main control system or the elevator absolute position measurement system is input into the dual-MCU control subsystem through the trigger input module. The dual-MCU control subsystem controls the working status of the 36V trigger module and the 12V trigger module according to the external trigger signal. The 36V trigger module and the 12V trigger module control the coil of the electronic safety clamp to be energized or de-energized through the safety clamp output port, thereby actuating the electronic safety clamp. The trigger detection module detects in real time whether the 36V trigger module and the 12V trigger module are working normally and whether the coil of the electronic safety clamp is short-circuited or open-circuited, and feeds back the detection results to the dual-MCU control subsystem.

[0008] The power-off holding module is connected to the output port of the safety clamp and is used to provide a holding voltage for a preset time to the coil of the electronic safety clamp under the control of the dual MCU control subsystem when the input power is cut off, so that the electronic safety clamp maintains the action for the preset time;

[0009] The dual MCU control subsystem receives the action switch signal fed back by the electronic safety clamp through the safety clamp input port, determines the access status of the coil of the electronic safety clamp based on the detection result fed back by the trigger detection module, and controls the alarm module to issue corresponding alarm reminders based on the action switch signal and access status.

[0010] Compared with the prior art, the present invention has the following beneficial effects:

[0011] The control system of the electronic safety clamp for elevators proposed in the present invention completely eliminates the risk of single point failure through the redundant mutual verification mechanism of the dual MCU control subsystem. When any module of the main / slave MCU fails, the other module can seamlessly take over the control of the 36V trigger module and the 12V trigger module, so that the failure rate of the system at the MCU level is close to zero. Combined with the design of the power-off holding module, it can continue to output maintenance current to the safety clamp output port after the input power is cut off, solving the technical bottleneck of full-stroke braking of super-high-rise elevators. At the same time, the trigger detection module can actively detect in real time whether the 36V trigger module and the 12V trigger module are working normally and whether the coil of the electronic safety clamp is short-circuited or open-circuited, avoiding the existence of fault detection blind spots. It has the advantages of simple structure, high stability and low failure rate. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 This is a schematic structural diagram of a control system for an electronic safety clamp for an elevator according to an embodiment of the present invention;

[0013] Figure 2 This is the circuit diagram of the main MCU module;

[0014] Figure 3 This is the circuit diagram of the secondary MCU module;

[0015] Figure 4 The circuit diagram of the communication link of the dual MCU control subsystem.

[0016] Explanation of the accompanying drawings: 1. Dual MCU control subsystem; 2. 36V trigger module; 3. 12V trigger module; 4. Trigger detection module; 5. Trigger input module; 6. Alarm module; 7. Safety clamp input port; 8. Power-off holding module; 9. Safety clamp output port; 10. 36V DC power supply module; 11. 12V DC power supply module; 12. Overvoltage and undervoltage detection module; 13. Input power supply. DETAILED DESCRIPTION

[0017] The technical solution of the present invention will be described in detail below with reference to the accompanying drawings and preferred embodiments.

[0018] like Figure 1 As shown, this embodiment provides a control system for an electronic safety clamp for an elevator, which specifically includes a dual MCU control subsystem 1, a 36V trigger module 2, a 12V trigger module 3, a trigger detection module 4, a trigger input module 5, an alarm module 6, a safety clamp input port 7, a power-off holding module 8, a safety clamp output port 9, and a power subsystem, wherein the dual MCU control subsystem 1 is connected to the 36V trigger module 2, the 12V trigger module 3, the trigger detection module 4, the trigger input module 5, the alarm module 6, and the safety clamp input port 7, respectively. The dual MCU control subsystem 1 in this embodiment includes a main MCU module and a sub-MCU module that work simultaneously, and the main MCU module and the sub-MCU module perform command cross-verification through a serial communication interface. When any one of the MCU modules fails, the other MCU module will directly take over the control of the 36V trigger module 2 and the 12V trigger module 3, and control the working state of the 36V trigger module 2 and the 12V trigger module 3 (trigger state or non-trigger state). Optionally, the main MCU module and the sub-MCU module in this embodiment can be implemented using GigaDevice's GD32F303VET6 chip, such as Figure 2 and Figure 3 As shown, the GD32F303VET6 is a high-performance 32-bit microcontroller (MCU) from GigaDevice. It offers advantages such as fast response, high security, simultaneous multi-ADC sampling, and support for low-power management. As the core decision-making unit of this control system, it can improve the stability and reliability of the control system and reduce the failure rate. The redundant mutual verification mechanism of the dual-MCU control subsystem completely eliminates the risk of single point failure. If either the primary or secondary MCU module fails, the other module can seamlessly take over control of the 36V trigger module and the 12V trigger module, bringing the system's failure rate at the MCU level to near zero.

[0019] The elevator main control system or the elevator absolute position measurement system (such as the magnetic scale measurement system) or other systems generates an external trigger signal and inputs the external trigger signal into the dual MCU control subsystem 1 through the trigger input module 5. The dual MCU control subsystem 1 controls the 36V trigger module 2 and the 12V trigger module 3 to trigger or not trigger according to the external trigger signal. The 36V trigger module 2 and the 12V trigger module 3 control the coil of the electronic safety clamp to be energized or de-energized through the safety clamp output port 9 to activate the electronic safety clamp. The function of the safety clamp output port 9 is similar to a plug switch, which is used to control whether the electromagnet coil on the electronic safety clamp body is energized. The 36V trigger module 2 is used to provide a 36V working voltage for triggering the electromagnet coil on the electronic safety clamp body to be energized, while the 12V trigger module 3 provides a 12V working voltage after the electromagnet coil on the electronic safety clamp body is energized to maintain the action of the electronic safety clamp unchanged.

[0020] The trigger detection module 4 monitors in real time whether the 36V trigger module 2 and the 12V trigger module 3 are functioning properly, and whether the coil of the electronic safety clamp is short-circuited or open-circuited, and feeds the detection results back to the dual-MCU control subsystem 1. The trigger detection module 4 can automatically detect whether the coil of the electronic safety clamp is connected to the control system. For example, the trigger detection module 4 can determine whether the coil of the electronic safety clamp is connected by detecting the magnitude of the current. If the current value detected is within a reasonable range, it is determined that the coil of the electronic safety clamp is connected. If the current value is open, that is, zero, it is determined that the coil of the electronic safety clamp is not connected. If the short-circuit current far exceeds the threshold, it is determined that the electronic safety clamp has failed. If the detection result of the trigger detection module 4 is abnormal (open or short-circuited), the trigger detection module 4 feeds the detection result back to the dual-MCU control subsystem 1, and the dual-MCU control subsystem 1 controls the alarm module 6 to issue a corresponding alarm, for example, by lighting and / or flashing LEDs of different colors.

[0021] The power-off holding module 8 is connected to the safety clamp output port 9 and is used to provide a holding voltage for a preset duration (e.g., 10 to 30 seconds) to the coil of the electronic safety clamp under the control of the dual MCU control subsystem 1 when the input power supply 13 is cut off, so that the electronic safety clamp maintains the action for the preset duration, ensuring the reliable action of the electronic safety clamp.

[0022] Optionally, the power-off holding module 8 can utilize a farad capacitor energy storage circuit. The 12V DC power module 11 charges the series-connected farad capacitors in the farad capacitor energy storage circuit as a backup power supply. After a power outage, the dual MCU control subsystem 1 controls the operation of the farad capacitor energy storage circuit, which supplies power to the coil of the electronic safety clamp via the safety clamp output port 9, thereby providing the required holding voltage for the electronic safety clamp. The farad capacitor energy storage circuit includes four series-connected farad capacitors, namely CF1, CF2, CF3, and CF4.

[0023] The safety clamp input port 7 is connected to the electronic safety clamp, and is used to detect the switch signal of the electronic safety clamp action, and send the action switch signal fed back by the electronic safety clamp to the dual MCU control subsystem 1. At the same time, the dual MCU control subsystem 1 determines the access status (normal access, non-access, fault) of the coil of the electronic safety clamp based on the detection result fed back by the trigger detection module 4, and then controls the alarm module 6 to issue a corresponding alarm reminder based on the received action switch signal and the judged access status of the electronic safety clamp coil. For example, the alarm module 6 includes multiple LEDs, and different types of faults are reminded by LED lights of different colors.

[0024] The control system of this embodiment also includes a power supply subsystem. Figure 1 The power subsystem includes a 36V DC power module 10, a 12V DC power module 11, and an overvoltage and undervoltage detection module 12. The 12V DC power module 11 converts the input power supply 13 (220VAC power supply) into a 12V DC voltage, which is then supplied to the 36V DC power module 10, the 12V trigger module 3, and the overvoltage and undervoltage detection module 12. The 36V DC power module 10 converts the 12V DC voltage into a 36V DC voltage, which is then supplied to the 36V trigger module 2. The overvoltage and undervoltage detection module 12 monitors the output voltage of the 12V DC power module 11 in real time to see if it exceeds the specified voltage limit. If so, it sends a voltage anomaly signal to the dual-MCU control subsystem 1. The dual-MCU control subsystem 1 then controls the operating states of the 36V trigger module 2 and the 12V trigger module 3 based on the voltage anomaly signal. The 36V DC power module 10 and the 12V DC power module 11 form a highly efficient power chain. Combined with the real-time monitoring of the overvoltage and undervoltage detection module 12, the voltage fluctuation tolerance is controlled within ±10%.

[0025] Furthermore, the overvoltage and undervoltage detection module 12 is implemented using the voltage comparator LM393, and 12V±10% is set as the normal range of the voltage comparator LM393. When the output voltage of the 12V DC power supply module 11 exceeds the normal range, the overvoltage and undervoltage detection module 12 sends a voltage abnormality signal to the dual MCU control subsystem 1.

[0026] Furthermore, the serial communication interface between the main MCU module and the sub-MCU module can adopt SPI bus, I 2 Either C bus or CAN bus.

[0027] When the main MCU module and the slave MCU module communicate using the CAN bus, such as Figure 4As shown in the figure, the external CAN bus signal is connected through the CAN1 connector, passes through the fuse element, common-mode suppression inductor, bidirectional transient voltage suppressor and terminal matching resistor in sequence, and is input to the TJA1051T bus transceiver, and finally establishes a communication link with the dual MCU control subsystem 1.

[0028] Furthermore, the dual MCU control subsystem 1 in this embodiment controls the PNP tube through an optocoupler to output up and down leveling control signals, and drives the relay to output elevator up and down limit signals, elevator up deceleration signals, and elevator down deceleration signals for processing by the elevator main control system.

[0029] The control system of the electronic safety clamp for elevators proposed in the present invention completely eliminates the risk of single point failure through the redundant mutual verification mechanism of the dual MCU control subsystem. When any module of the main / slave MCU fails, the other module can seamlessly take over the control of the 36V trigger module and the 12V trigger module, so that the failure rate of the system at the MCU level is close to zero. Combined with the design of the power-off holding module, it can continue to output maintenance current to the safety clamp output port after the input power is cut off, solving the technical bottleneck of full-stroke braking of super-high-rise elevators. At the same time, the trigger detection module can actively detect in real time whether the 36V trigger module and the 12V trigger module are working normally and whether the coil of the electronic safety clamp is short-circuited or open-circuited, avoiding the existence of fault detection blind spots. It has the advantages of simple structure, high stability and low failure rate.

[0030] The technical features of the above-mentioned embodiments can be combined arbitrarily. In order to make the description concise, not all possible combinations of the technical features in the above-mentioned embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0031] The above-described embodiments merely illustrate several implementations of the present invention, and while their descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the patent. It should be noted that a person skilled in the art would be able to make numerous variations and improvements without departing from the spirit of the present invention, all of which fall within the scope of protection of the present invention. Therefore, the scope of protection of the patent for this invention shall be determined by the appended claims.

Claims

1. A control system for an electronic safety clamp for an elevator, characterized in that: The invention comprises a dual MCU control subsystem (1) and a 36V trigger module (2), a 12V trigger module (3), a trigger detection module (4), a trigger input module (5), an alarm module (6), a safety clamp input port (7) and a power-off holding module (8) respectively connected to the dual MCU control subsystem (1), and also comprises a safety clamp output port (9), wherein the dual MCU control subsystem (1) comprises a main MCU module and a sub-MCU module working simultaneously, and the main MCU module and the sub-MCU module perform command cross-verification via a serial communication interface, and when any one of the MCU modules fails, the other MCU module takes over the control of the 36V trigger module (2) and the 12V trigger module (3); An external trigger signal generated by an elevator main control system or an elevator absolute position measurement system is input into the dual MCU control subsystem (1) through a trigger input module (5). The dual MCU control subsystem (1) controls the working states of the 36V trigger module (2) and the 12V trigger module (3) according to the external trigger signal. The 36V trigger module (2) and the 12V trigger module (3) control the coil of the electronic safety clamp to be energized or de-energized through the safety clamp output port (9), thereby causing the electronic safety clamp to operate. The trigger detection module (4) detects in real time whether the 36V trigger module (2) and the 12V trigger module (3) are operating normally and whether the coil of the electronic safety clamp is short-circuited or open-circuited, and feeds back the detection results to the dual MCU control subsystem (1). The power-off holding module (8) is connected to the safety clamp output port (9) and is used to provide a holding voltage for a preset time period to the coil of the electronic safety clamp under the control of the dual MCU control subsystem (1) when the input power supply (13) is powered off, so that the electronic safety clamp maintains the operation for the preset time period; The dual MCU control subsystem (1) receives an action switch signal fed back by the electronic safety clamp through the safety clamp input port (7), determines the access state of the coil of the electronic safety clamp based on the detection result fed back by the trigger detection module (4), and controls the alarm module (6) to issue a corresponding alarm reminder based on the action switch signal and the access state.

2. The control system of an electronic safety clamp for an elevator according to claim 1, characterized in that: The invention also includes a power supply subsystem, which includes a 36V DC power supply module (10), a 12V DC power supply module (11) and an overvoltage and undervoltage detection module (12). The 12V DC power supply module (11) converts the input power supply (13) voltage into a 12V DC voltage and provides it to the 36V DC power supply module (10), the 12V trigger module (3) and the overvoltage and undervoltage detection module (12). The 36V DC power supply module (10) converts the 12V DC voltage into a 36V DC voltage and provides it to the 36V trigger module (2). The overvoltage and undervoltage detection module (12) detects in real time whether the output voltage of the 12V DC power supply module (11) exceeds the limit. If the limit is exceeded, the voltage abnormality signal is fed back to the dual MCU control subsystem (1). The dual MCU control subsystem (1) controls the working state of the 36V trigger module (2) and the 12V trigger module (3) according to the voltage abnormality signal.

3. The control system of an electronic safety clamp for an elevator according to claim 2, characterized in that: The overvoltage and undervoltage detection module (12) is implemented using a voltage comparator LM393, and 12V±10% is set as the normal range of the voltage comparator LM393. When the output voltage of the 12V DC power supply module (11) exceeds the normal range, the overvoltage and undervoltage detection module (12) sends a voltage abnormality signal to the dual MCU control subsystem (1).

4. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that: The power-off holding module (8) adopts a farad capacitor energy storage circuit, and charges the farad capacitors connected in series in the farad capacitor energy storage circuit through a 12V DC power supply module (11) as a backup power supply. After power failure, the farad capacitors supply power to the coil of the electronic safety clamp through the safety clamp output port (9).

5. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that: Both the main MCU module and the sub-MCU module are implemented using GigaDevice's GD32F303VET6 chip.

6. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that: The serial communication interface is SPI bus, I 2 Either C bus or CAN bus.

7. The control system of an electronic safety clamp for an elevator according to claim 6, characterized in that: When CAN bus is used for communication, the external CAN bus signal is connected via the CAN1 connector, passes through the fuse element, common mode suppression inductor, bidirectional transient voltage suppressor and terminal matching resistor in sequence, and is input to the TJA1051T bus transceiver, and finally establishes a communication link with the dual MCU control subsystem (1).

8. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that: The dual MCU control subsystem (1) outputs up and down leveling control signals to the outside through the optical coupler to control the PNP tube and outputs the elevator up and down limit signals, the elevator up deceleration signal and the elevator down deceleration signal to the outside through the driving relay.

9. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that: The input power supply (13) is a 220V AC power supply.

10. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that: The preset duration is 10 to 30 seconds.

Images