Elevator control system and control method

Abstract

The invention discloses an elevator control system and method. A circuit comprises a hall door lock module, a car door lock module, a door lock safety relay module, a voltage conversion module, a band-type brake control module, an elevator main control module and a frequency converter module. The door lock safety relay module can be arranged among the hall door lock module, the car door lock module and the voltage conversion module to replace an existing contactor, meanwhile, the elevator master control module can control sealing of an elevator through signal output of the elevator master control module and signals output by the voltage conversion module, and use of the contactor is reduced; meanwhile, the band-type brake control module can control the band-type brake power supply to be the first preset voltage through the third driving signal, the third driving voltage and the band-type brake control signal, so that the band-type brake module stops working, the structure and control logic of the circuit can be changed, use of contactors in the system is reduced, stability is improved, and the service life of the system is prolonged. The cost of the control system is reduced. The method can be widely applied to the technical field of elevator control.

Description

TECHNICAL FIELD

[0001] The present application relates to the elevator control technical field, and especially to an elevator control system and a control method. BACKGROUND

[0002] In the related art, in order to realize the motor star sealing and the brake control of the elevator, in the traditional elevator control system, the designer usually sets several contactors between the elevator main control module and the hall door lock module and the car door lock module, sets the contactor for the brake between the brake power supply and the brake, and sets the contactor for the star sealing between the frequency converter and the motor. The system can feed back whether the hall door lock module switch and the car door lock module switch can normally operate through the opening or closing of the main contactor. If the hall door lock module switch and the car door lock module switch normally operate, the hall door lock module and the car door lock module output a fixed voltage signal to the elevator main control module. Then, the elevator main control module determines whether the star sealing is needed according to the voltage signal output by the hall door lock module and the car door lock module. When the elevator is star sealed, the elevator main control module can short the motor three-phase coil through the star sealing contactor to realize the motor braking. The elevator main control module can also control whether the brake power supply stops supplying power to the brake through the brake contactor according to the output voltage signal.

[0003] However, the traditional elevator control system has the problems of low integration and difficulty in miniaturization due to the design of multiple contactors, and when the number of contactors of the control system is relatively large, relatively large noise is easily generated to cause the anti-interference ability of the system to decrease, and further cause the stability of the elevator to decrease. Therefore, there are still technical problems to be solved in the related art. SUMMARY

[0004] The present application aims to at least partly solve one of the technical problems in the prior art.

[0005] To this end, one purpose of the embodiments of the present application is to provide an elevator control system and a control method, which can improve the integration and stability of the elevator control system.

[0006] In order to achieve the above technical purpose, the technical scheme adopted by the embodiments of the present application comprises: 1. An elevator control system, characterized in that, comprising:

[0007] a hall door lock module, a car door lock module, a door lock safety relay module, a voltage conversion module, a brake control module, an elevator main control module, and a frequency converter module;

[0008] the elevator main control module is configured to output a first drive signal, a second drive signal, a third drive signal, a star sealing control signal, and a brake control signal;

[0009] The door lock safety relay module is configured to output a first driving voltage of the brake control module according to the first switch state of the hall door lock module, the second switch state of the car door lock module, and the first driving signal;

[0010] The voltage conversion module is configured to output a second driving voltage and a third driving voltage according to the first driving voltage and the second driving signal;

[0011] The brake control module is configured to control a brake power supply to output a first preset voltage to stop the brake module from working according to the third driving signal, the third driving voltage, and the brake control signal;

[0012] The elevator main control module is further configured to output a fourth driving signal according to the second driving voltage;

[0013] The frequency converter module is configured to control whether to stop supplying power to a driving host according to the fourth driving signal, and to starve the motor of the elevator according to the starve control signal.

[0014] In addition, the elevator control system according to the above-mentioned embodiment of the present application can have the following additional technical features:

[0015] Further, in the embodiment of the present application, the door lock safety relay module comprises a first voltage conversion unit and a first relay;

[0016] The first voltage conversion unit is configured to control the first relay to be closed according to the first switch state of the hall door lock module and the first driving signal;

[0017] When the first relay is closed, the door lock safety relay module outputs the driving voltage of the brake control module according to the second switch state.

[0018] Further, in the embodiment of the present application, the voltage conversion module comprises a first voltage conversion unit and a second voltage conversion unit;

[0019] The first voltage conversion unit is configured to convert the first driving voltage into a second driving voltage according to the second driving signal;

[0020] The second voltage conversion unit is configured to convert the first driving voltage into a third driving voltage according to the second driving signal.

[0021] Further, in the embodiment of the present application, the brake control module comprises a brake power supply and a first control unit:

[0022] The first control unit is configured to output a first control signal according to the third driving signal and the third driving voltage.

[0023] The brake power source is configured to output a first preset voltage according to the first control signal.

[0024] Further, in the embodiment of the present application, the frequency converter module comprises an STO function unit and a frequency converter driving unit.

[0025] The frequency converter driving unit is configured to drive the motor or stop power supply to the host machine and starve the star according to the signal output by the STO function unit.

[0026] The STO function unit is configured to control whether the frequency converter driving unit executes the stop of power supply to the driving host machine according to the fourth driving signal, and generate a feedback signal to the elevator host control module.

[0027] Further, in the embodiment of the present application, the car door lock module comprises a safety return circuit switch, a car door lock switch, a car door bypass switch and an elevator car accidental movement protection system switch; the second switch state comprises that the safety return circuit switch, the car door lock switch and the car door bypass switch are all in the closed state, or the safety return circuit switch is in the closed state and the elevator car accidental movement protection system switch is in the closed state.

[0028] Further, in the embodiment of the present application, the first driving voltage is 110V, the second driving voltage is 24V, and the third driving voltage is 5V.

[0029] Further, in the embodiment of the present application, the hall door lock module comprises a hall door bypass switch and a hall door switch, and the first switch state comprises that the hall door bypass switch and the hall door switch are both in the closed state.

[0030] On the other hand, the embodiment of the present application also provides an elevator control method, which is realized by the elevator control system of any one of the preceding embodiments, and the method comprises:

[0031] The elevator host control module outputs a first driving signal, a second driving signal, a third driving signal, a starve star control signal and a brake control signal.

[0032] The door lock safety relay module outputs a first driving voltage of the brake control module according to the first switch state of the hall door lock module, the second switch state of the car door lock module and the first driving signal.

[0033] The voltage conversion module outputs a second driving voltage and a third driving voltage according to the first driving voltage and the second driving signal.

[0034] The brake control module controls the brake power supply to output a first preset voltage according to the third driving signal, the third driving voltage and the brake control signal, so as to stop the brake module from working.

[0035] The elevator main control module outputs a fourth driving signal according to the third driving voltage.

[0036] The frequency converter module controls whether to stop supplying power to the driving host according to the fourth driving signal, and performs starve according to the starve control signal.

[0037] Further, in the embodiment of the application, the car door lock module comprises a safety loop switch, a car door lock switch, a car door bypass switch and an elevator car accidental movement protection system switch; the hall door lock module comprises a hall door bypass switch and a hall door switch, the first switch state comprises that the hall door bypass switch and the hall door switch are both in a closed state; the door lock safety relay module outputs the first driving voltage of the brake control module according to the first switch state of the hall door lock module, the second switch state of the car door lock module and the first driving signal, comprising:

[0038] When the safety loop switch, the car door lock switch and the car door bypass switch are all in a closed state and the hall door bypass switch and the hall door switch are both in a closed state, the door lock safety relay module outputs the first driving voltage of the brake control module based on the first driving signal.

[0039] Or when the safety loop switch is in a closed state, the elevator car accidental movement protection system switch is in a closed state and the hall door bypass switch and the hall door switch are both in a closed state, the door lock safety relay module outputs the first driving voltage of the brake control module based on the first driving signal.

[0040] The advantages and beneficial effects of the application will be partially given in the following description, partially will become obvious from the following description, or will be known by the practice of the application:

[0041] The application can set a hall door lock module, a car door lock module, a door lock safety relay module, a voltage conversion module, a brake control module, an elevator main control module and a frequency converter module. The elevator main control module can output a first drive signal, a second drive signal, a third drive signal, a star seal control signal and a brake control signal; the door lock safety relay module can output a first drive voltage of the brake control module according to a first switch state of the hall door lock module, a second switch state of the car door lock module and the first drive signal; the voltage conversion module can output a second drive voltage and a third drive voltage according to the first drive voltage and the second drive signal; the brake control module can control the brake power supply to output a first preset voltage according to the third drive signal, the third drive voltage and the brake control signal, so that the brake module stops working; the elevator main control module is further used for outputting a fourth drive signal according to the second drive voltage; the frequency converter module can control whether to stop supplying power to the drive host according to the fourth drive signal, and seal the star of the motor of the elevator according to the star seal control signal; the application can set the door lock safety relay module between the hall door lock module, the car door lock module and the voltage conversion module to replace the existing contactor, and the elevator main control module can control the star seal of the elevator through the signal output of itself and the signal output by the voltage conversion module, further reducing the use of the contactor, and the brake control module can control the brake power supply to be the first preset voltage through the third drive signal, the third drive voltage and the brake control signal, so that the brake module stops working, the application can change the structure and control logic of the circuit, reduce the use of the contactor in the control system, improve the stability of the control system and reduce the cost of the control system. BRIEF DESCRIPTION OF DRAWINGS

[0042] Figure 1 It is a circuit schematic diagram of an elevator control system in the prior art;

[0043] Figure 2 It is a circuit schematic diagram of a hall door lock module and a car door lock module in the prior art connected with an elevator main control module through a contactor;

[0044] Figure 3 It is a circuit schematic diagram of an elevator control system in a specific embodiment of the application;

[0045] Figure 4 It is a circuit schematic diagram of a hall door lock module and a car door lock module in a specific embodiment of the application connected with an elevator main control module through a door lock safety relay module;

[0046] Figure 5 It is a circuit schematic diagram of an elevator main control module in a specific embodiment of the application. DETAILED DESCRIPTION

[0047] The principles and processes of the elevator control system and the control method in the embodiments of the present application are described below in conjunction with the accompanying drawings.

[0048] Firstly, the terms appearing in the present application are explained:

[0049] UCMP: Unintended car movement protection system, elevator car unintended movement protection system;

[0050] STO: Safety torque off, which is a safety device that disconnects the power supply for the operation of the motor. The definition of the safety device that disconnects the power supply for the operation of the motor is based on the requirements of standard GB / T 7588.1-2020, i.e. static element power supply and control for alternating current or direct current motors, by means of "the circuit meets the requirements of 5.11.2.3, the device is a safety component, and shall be verified in accordance with the requirements of 5.6 in GB / T 7588.2-2020". According to the electrical safety device mentioned in GB / T 7588.1-2020 (or EN81-20:2014), the highest requirement of SIL level is SIL3 and HFT≥1.

[0051] SBC: Safety device that cuts off the brake current. The definition of the safety device that cuts off the brake current is based on the requirements of 5.9.2.2.2.3.a).2) in standard GB / T 7588.1-2020 (or EN81-20:2014), i.e. when the safety device cuts off the brake current as specified in 5.11.2.4, by means of "the circuit shall meet the requirements of 5.11.2.3, the device is a safety component, and shall be verified in accordance with the requirements of 5.6 in GB / T 7588.2-2020".

[0052] Secondly, based on Figure 1 and Figure 2 the technical problems existing in the related art are explained. In Figure 1 , the elevator system can include a hall door lock module, a car door lock module, a brake power supply, an elevator main control board (elevator main control module), a brake, a frequency converter (frequency converter module), and a motor. The number of brakes can be one or more. The hall door lock module can include a hall door lock switch and a hall door lock bypass switch. The car door lock module can include a safety return circuit switch, a car door lock switch, a car door lock bypass switch, and a UCMP switch; four contactors KM1, KM2, KM3, and KM4 can be provided between the hall door lock module, the car door lock module, and the elevator main control board. Referring to Figure 2 , KM1, KM3, and KM4 can control the transmission of voltage and current between the brake power supply and the brake; KM2 can control the frequency converter to implement star isolation for the motor. The control process of the conventional elevator control system includes:

[0053] (1) Safety circuit switch is off, the main machine running contactor KM1 coil loses power, and the KM1 normally open contact is in an open state. At this time, the motor has no power supply, and the safety torque is cut off.

[0054] (2) Safety circuit switch is off, and the brake contactor KM3 coil loses power. The KM3 normally open contact is in an open state. At this time, the brake has no power supply, and the brake current is cut off.

[0055] (3) The motor three-phase coil is short-circuited through the star contactor KM2, and the motor brake is realized.

[0056] It should be noted that the hall door lock is usually connected in series with other safety devices to form a safety circuit. However, due to the large number of elevator landings, that is, the hall door lock circuit is too long, a separate hall door lock circuit is usually used, which is indirectly connected in series with other safety devices to form a safety circuit. Figure 1 The door lock contactor KM4 is bridged.

[0057] However, the traditional elevator control system has the problems of low integration and difficulty in miniaturization due to the design of multiple contactors, and the number of contactors is relatively large, which leads to a decrease in the anti-interference ability of the system, and further leads to a decrease in the stability of the elevator. Therefore, there are still technical problems to be solved in the related art.

[0058] In view of the above technical problems, the present application provides a new elevator control system. Referring to Figure 3 The elevator control system of the present application can include a hall door lock module, a car door lock module, a door lock safety relay module, a voltage conversion module, a brake control module, an elevator main control module, and a frequency converter module. The hall door lock module and the car door lock module are connected to an external 110V AC voltage. The hall door lock module and the car door lock module can be connected to the door lock safety relay module. The door lock safety relay module and the brake control module can be connected to the voltage conversion module. The frequency converter module, the door lock safety relay module, the brake control module, and the voltage conversion module can be connected to the elevator main control module. The brake control module can be connected to an external power supply. The frequency converter module can be connected to a motor.

[0059] Referring to Figure 3 and Figure 4, the elevator master control module can output a first drive signal Y8, a second drive signal Y6, a third drive signal Y13, a star seal control signal FX and a brake control signal Y5; the voltage externally connected to the hall door lock module and the car door lock module can be 110V. The door lock safety relay module can output a first drive voltage of the brake control module according to a first switch state of the hall door lock module, a second switch state of the car door lock module and the first drive signal Y8. It can be understood that Y8 can make the 110V voltage flow through the transformer T2 of the door lock safety relay board, so that the 110V voltage provides voltage for the door lock safety relay board and makes it work normally. The first switch state can be that the hall door bypass switch and the hall door switch are both in the closed state; the second switch state can be that the safety return circuit switch, the car door lock switch and the car door bypass switch are all in the closed state, or the safety return circuit switch is in the closed state and the elevator car accidental movement protection system switch is in the closed state. The voltage conversion module can convert and output a second drive voltage 24V and a third drive voltage 5V through the voltage conversion of the transformer T1 according to the first drive voltage 110V and the second drive signal Y13. It can be understood that Y13 can make the first drive voltage 110V flow through the main winding of the transformer T1 to provide voltage for the transformer T1. The brake control module can control the brake power to output a first preset voltage according to the third drive signal Y13, the third drive voltage 5V and the brake control signal Y5, so that the brake module stops working. The first preset voltage is 0V. The elevator master control module can also output a fourth drive signal STO+ and STO- according to the second drive voltage 24V. The frequency converter module controls whether to execute the stop of power supply to the drive host according to the fourth drive signal, and seals the star of the motor of the elevator according to the star seal control signal.

[0060] Further, with reference to Figure 3 , the door lock safety relay module can include a first voltage conversion unit and a first relay. The first voltage conversion unit is connected with the first relay. When the hall door bypass switch is closed, the hall door lock switch is closed and the Y8 signal makes the 110V form a loop with the transformer T2, the first relay is closed. When the first relay is closed, the door lock safety relay module can establish an electrical connection with the car door lock module.

[0061] Further, with reference to Figure 3 , the voltage conversion module can include a first voltage conversion unit and a second voltage conversion unit; the voltage conversion module can include a transformer T1, under the action of the Y6 signal, T1 can convert the first drive voltage 110V input by the door lock safety relay module into a second drive voltage 24V and a second drive voltage 5V.

[0062] Further, the brake control module can include a brake power supply and a first control unit. The first control unit is configured to output a first control signal according to the third drive signal Y13, the third drive voltage 5V and the brake control signal Y5. The first control signal can control the brake power supply to output a preset voltage of 0V, that is, the first control signal can disconnect the power supply transmission between the brake power supply and the brake.

[0063] Further, referring to Figure 3 , the frequency converter module can include an STO function unit and a frequency converter drive unit. The frequency converter module is configured to control whether to execute the power supply stop to the drive host according to the fourth drive signal, and to starve the motor of the elevator according to the starve control signal. The STO function unit is configured to control whether the frequency converter drive unit executes the power supply stop to the drive host according to the fourth drive signal STO+ and STO-, and to generate a feedback signal FB to the elevator host control module. The structure of the elevator host control module can refer to Figure 5 Since the hardware of the elevator host control module is not improved in the present application, the specific structure will not be described here.

[0064] Further, the car door lock module can include a safety return circuit switch, a car door lock switch, a car door bypass switch and an elevator car accidental movement protection system switch. The second switch state can include that the safety return circuit switch, the car door lock switch and the car door bypass switch are all in the closed state, or the safety return circuit switch is in the closed state and the elevator car accidental movement protection system switch is in the closed state.

[0065] Further, the hall door lock module can include a hall door bypass switch and a hall door switch. The first switch state can include that the hall door bypass switch and the hall door switch are both in the closed state.

[0066] Further, the first drive voltage is 110V, the second drive voltage is 24V, and the third drive voltage is 5V.

[0067] The specific calculation principle of the present application will be described below in conjunction with the drawings:

[0068] The structure diagram of the present application is shown in Figure 3 、 Figure 4 and Figure 5 The implementation principle can include steps (11) to (15).

[0069] (11) The safety return circuit enters the SBC power supply, generates the STO signal to the host control board through voltage conversion, and generates the SBC signal (Y13 series return circuit) to the SBC power supply board brake power supply circuit.

[0070] (12) The main control board divides the STO signal into two paths (STO1, STO2) based on STO+ and STO-, and controls whether to stop supplying power to the drive host, so as to achieve the function of safety torque off without using the running contactor.

[0071] (13) The generated SBC signal can control whether the brake power supply stops supplying power to the brake, so as to achieve the function of stopping the power supply to the brake without using the brake contactor.

[0072] (14) The main control board controls the electronic starve of the frequency converter IGBT lower tube, so as to achieve the function of motor starve without using the starve contactor.

[0073] (15) The safety relay board of the present application replaces the door lock contactor. The door lock safety relay board is composed of a power frequency transformer, a voltage reduction circuit and a safety relay. If the hall door lock circuit is closed, 110VAC input is converted into 24VDC to supply power to the safety relay coil, the safety relay normally open contact is attracted, and the normally closed contact is opened.

[0074] In some alternative embodiments, the functions / operations mentioned in the block diagrams can not occur in the order mentioned in the operation diagrams. For example, depending on the functions / operations involved, two blocks shown in succession can actually be executed substantially concurrently with each other, or sometimes the blocks can be executed in the reverse order. Furthermore, the embodiments presented and described in the flowcharts of the present application are provided by way of example only. The disclosed methods are not limited to the operations and logical flows presented in this specification. Alternative embodiments are contemplated in which the order of various operations is changed and in which sub-operations described as part of a larger operation are executed independently.

[0075] Furthermore, although the present application is described in the context of functional modules, it should be understood that one or more of the functions and / or features can be integrated in a single physical device and / or software module, or one or more functions and / or features can be implemented in separate physical devices or software modules, unless otherwise specified. It can also be understood that a detailed discussion of the actual implementation of each module is unnecessary to an understanding of the present application. Rather, consideration of the properties, functions and internal relationships of the various functional modules disclosed in the devices herein is sufficient for engineers of ordinary skill to implement the modules in the context of their engineering practices. Therefore, the present application as set forth in the claims is capable of being implemented in the absence of undue experimentation, using ordinary skill in the art. It can also be understood that the disclosed specific concepts are merely illustrative and are not intended to limit the scope of the present application, which is determined by the full scope of the appended claims and their equivalents.

[0076] In the above description of the present specification, the description of the terms "one embodiment", "another embodiment", or "certain embodiments" or the like means that the specific features, structures, materials or characteristics described in connection with the embodiments or examples are included in at least one embodiment or example of the present application. In the present specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Also, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in an appropriate manner.

[0077] Although the embodiments of the present application have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and variations can be made thereto without departing from the principles and spirit of the application, the scope of which is defined by the claims and their equivalents.

[0078] The above is a specific description of the preferred embodiments of the present application, but the present application is not limited to the described embodiments, and those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of the present application, and these equivalent modifications or substitutions are included in the scope defined by the claims of the present application.

Claims

1. An elevator control system, characterized in that, include: Hall door lock module, car door lock module, door lock safety relay module, voltage conversion module, brake control module, elevator main control module, and frequency converter module; The elevator main control module is used to output a first drive signal, a second drive signal, a third drive signal, a star control signal, and a brake control signal; The door lock safety relay module is used to output the first driving voltage of the brake control module according to the first switching state of the hall door lock module, the second switching state of the car door lock module and the first driving signal; The voltage conversion module is used to output a second driving voltage and a third driving voltage according to the first driving voltage and the second driving signal; The brake control module is used to control the brake power supply to output a first preset voltage according to the third drive signal, the third drive voltage and the brake control signal, so as to stop the brake module from working. The elevator main control module is also used to output a fourth drive signal according to the second drive voltage; The inverter module is used to control whether to stop supplying power to the drive host according to the fourth drive signal, and to seal the elevator motor according to the sealing control signal.

2. The elevator control system according to claim 1, characterized in that, The door lock safety relay module includes a first voltage conversion unit and a first relay; The first voltage conversion unit is used to control the first relay to close according to the first switch state of the hall door lock module and the first drive signal; When the first relay is closed, the door lock safety relay module outputs the driving voltage of the brake control module according to the second switch state.

3. The elevator control system according to claim 1, characterized in that, The voltage conversion module includes a first voltage conversion unit and a second voltage conversion unit; The first voltage conversion unit is used to convert the first driving voltage into a second driving voltage according to the second driving signal; The second voltage conversion unit is used to convert the first driving voltage into a third driving voltage according to the second driving signal.

4. The elevator control system according to claim 1, characterized in that, The brake control module includes a brake power supply and a first control unit: The first control unit is configured to output a first control signal based on the third driving signal and the third driving voltage; The brake power supply is used to output a first preset voltage according to the first control signal.

5. The elevator control system according to claim 1, characterized in that, The inverter module includes: an STO functional unit and an inverter drive unit; The inverter drive unit is used to drive the motor or stop power supply to the host and shut down the satellite according to the signal from the STO function unit. The STO function unit is used to control whether the frequency converter drive unit stops supplying power to the drive host according to the fourth drive signal, and at the same time generate a feedback signal to the elevator main control module.

6. The elevator control system according to claim 1, characterized in that, The car door lock module includes a safety circuit switch, a car door lock switch, a car door bypass switch, and an elevator car accidental movement protection system switch; the second switch state includes the safety circuit switch, the car door lock switch, and the car door bypass switch all being in the closed state, or the safety circuit switch being in the closed state and the elevator car accidental movement protection system switch being in the closed state.

7. The elevator control system according to claim 1, characterized in that, The hall door lock module includes a hall door bypass switch and a hall door switch. The first switch state includes both the hall door bypass switch and the hall door switch being in the closed state.

8. The elevator control system according to claim 1, characterized in that, The first driving voltage is 110V, the second driving voltage is 24V, and the third driving voltage is 5V.

9. An elevator control method, characterized in that, The elevator control system described in any one of claims 1-8 is used, and the method includes: The elevator main control module outputs a first drive signal, a second drive signal, a third drive signal, a star control signal, and a brake control signal; The door lock safety relay module outputs the first drive voltage of the brake control module based on the first switch state of the hall door lock module, the second switch state of the car door lock module, and the first drive signal. The voltage conversion module outputs a second driving voltage and a third driving voltage based on the first driving voltage and the second driving signal; The brake control module controls the brake power supply to output a first preset voltage according to the third drive signal, the third drive voltage and the brake control signal, so as to stop the brake module from working; The elevator main control module outputs a fourth drive signal based on the third drive voltage; The inverter module controls whether to stop supplying power to the drive host according to the fourth drive signal, and seals the elevator motor according to the sealing control signal.

10. The elevator control method according to claim 9, characterized in that, The car door lock module includes a safety circuit switch, a car door lock switch, a car door bypass switch, and a switch for the elevator car accidental movement protection system; the hall door lock module includes a hall door bypass switch and a hall door switch, wherein the first switch state includes both the hall door bypass switch and the hall door switch being in the closed state; the door lock safety relay module outputs the first drive voltage of the brake control module based on the first switch state of the hall door lock module, the second switch state of the car door lock module, and the first drive signal, including: When the safety circuit switch, the car door lock switch, and the car door bypass switch are all closed, and the hall door bypass switch and the hall door switch are all closed, the door lock safety relay module outputs the first drive voltage of the brake control module based on the first drive signal; Alternatively, when the safety circuit switch is closed, the elevator car accidental movement protection system switch is closed, and both the hall door bypass switch and the hall door switch are closed, the door lock safety relay module outputs the first driving voltage of the brake control module based on the first driving signal.

Images