Energy storage rescue control method and system for elevator direct current bus

Abstract

The invention relates to an energy storage rescue control method and system for an elevator direct current bus, and the method comprises the steps: generating a power shortage feature, a load feature and a reverse power transmission prevention permission feature in a power-off rescue state; the power shortage characteristic is used for representing power loss of the alternating current side of the elevator and / or insufficient energy of the direct current bus; the load characteristic is used for representing that the running load on the direct-current bus is effective; the anti-reverse power transmission permission feature is used for representing that an energy reverse power transmission channel from the alternating current side to the direct current bus is isolated; calculating a discharge enable signal based on the power shortage characteristic, the load characteristic and the reverse power transmission prevention permission characteristic; and in response to the effective discharge enable signal, controlling the energy storage device to execute discharge rescue on the direct current bus. Through the method and the device, the problem of insufficient discharge rescue reliability caused by adopting a single condition to trigger a discharge enabling decision in a power-off rescue state in the prior art can be solved.

Description

Technical Field

[0001] This application relates to the field of energy storage rescue control technology, and in particular to an energy storage rescue control method and system for an elevator DC bus. Background Technology

[0002] In the field of elevator power supply control technology, connecting an external energy storage cabinet to the elevator's DC bus has become an effective means of energy recovery and backup rescue, enabling energy storage and rescue during elevator power outages. Specifically, it absorbs regenerative braking energy from the elevator when the power grid is normal and discharges it to the DC bus when AC power is interrupted, providing emergency operating power for the elevator and achieving the dual goals of energy saving and safety assurance. Therefore, it is crucial to determine the elevator's status during power outage rescue operations, given the deep integration of the external energy storage cabinet with the elevator system, in order to perform reliable discharge rescue.

[0003] Currently, existing energy storage emergency control methods typically rely on the triggered power outage emergency state, combined with a threshold judgment of the DC bus voltage as an electrical condition, to execute the discharge enable decision. Since the DC bus voltage is susceptible to load changes, short-term fluctuations, or other non-power outage conditions, the discharge enable decision triggered by this single condition cannot guarantee its reliability.

[0004] Therefore, there is currently no complete solution to the technical problem of insufficient reliability of discharge rescue caused by using a single condition to trigger discharge enable decision in the power outage rescue state. Summary of the Invention

[0005] This application provides an energy storage rescue control method and system for an elevator DC bus to solve the problem in related technologies where the discharge enable decision is triggered by a single condition during power outage rescue, resulting in insufficient reliability of discharge rescue.

[0006] In a first aspect, this application provides an energy storage rescue control method for an elevator DC bus, used to control an energy storage device connected to the elevator's DC bus, the method comprising:

[0007] In the power outage rescue state, a power shortage characteristic, a load characteristic, and a reverse power transmission permission characteristic are generated; the power shortage characteristic is used to indicate that the AC side of the elevator is without power, and / or that the DC bus has insufficient energy; the load characteristic is used to indicate that the operating load on the DC bus is valid; the reverse power transmission permission characteristic is used to indicate that the energy reverse power transmission channel from the AC side to the DC bus has been isolated;

[0008] A discharge enable signal is calculated based on the power shortage characteristics, the load characteristics, and the anti-reverse power transmission permission characteristics.

[0009] In response to a valid discharge enable signal, the energy storage device is controlled to perform a discharge rescue to the DC bus.

[0010] In some embodiments, the method further includes:

[0011] The power outage rescue state is triggered based on a valid power outage rescue latch flag;

[0012] The AC side health status signal of the elevator is collected as the power outage rescue latch; the AC side health status signal is valid when the duration of the abnormal state reaches a first preset time.

[0013] And / or, the AC side feedback status signal of the elevator is collected as the power failure rescue latch flag, and the AC side feedback status signal is valid when the duration of the reliable disconnection state reaches the second preset time.

[0014] In some embodiments, the step of generating the power deficiency feature includes:

[0015] The power supply status of the elevator is detected to obtain a power failure rescue latch flag; when the power failure rescue latch flag is valid, a first electron deficiency feature is generated;

[0016] And / or, detect the power supply status of the elevator to obtain the voltage status signal of the DC bus; obtain a voltage filter value based on the voltage status signal; when the voltage filter value is lower than a preset rescue voltage threshold, generate a second electron deficiency feature;

[0017] And / or, detect the power supply status of the elevator to obtain the voltage status signal of the DC bus; when a voltage drop event is detected based on the voltage status signal, generate a third electron deficiency feature;

[0018] When any one of the first electron-deficient feature, the second electron-deficient feature, and the third electron-deficient feature is obtained as an effective sub-feature, the corresponding effective sub-feature is taken as the electron-deficient feature;

[0019] When at least two of the first electron-deficient feature, the second electron-deficient feature, and the third electron-deficient feature are obtained as valid sub-features, all valid sub-features are processed based on a pre-configured priority to obtain the electron-deficient feature.

[0020] In some further embodiments, the step of generating the power deficiency feature further includes:

[0021] When obtaining at least one of the second electron-deficient feature and the third electron-deficient feature, and obtaining the first electron-deficient feature as an effective sub-feature, the first electron-deficient feature is taken as the main effective sub-feature, and the second electron-deficient feature, and / or the third electron-deficient feature is taken as an auxiliary effective sub-feature, so as to obtain the electron-deficient feature.

[0022] In some embodiments, the step of generating the load characteristics includes:

[0023] The load status of the DC bus is detected to obtain a current status signal; a current filter value is obtained based on the current status signal; when the absolute value of the current filter value is greater than a preset minimum load current threshold and the duration reaches a preset first confirmation time, a first load sub-feature is generated.

[0024] Alternatively, the load status of the DC bus is detected to calculate a power status signal; a load power value is obtained based on the power status signal; and a second load sub-feature is generated when the load power value is greater than a preset minimum load power threshold and the duration reaches a preset second confirmation time.

[0025] The generated first or second load sub-feature is used as the load feature.

[0026] In some embodiments, the step of generating the anti-reverse power transmission permission feature includes:

[0027] Acquire the AC side feedback status signal in the isolated state of the AC side of the elevator; acquire isolation evidence based on the AC side feedback status signal; the isolation evidence is one or more of the following: the dual-path auxiliary contact feedback signal of the elevator's isolation device, the electrical quantity signal of the AC input side of the elevator, and the discharge permission signal issued by the upper system;

[0028] The isolation evidence is subjected to consistency verification; when the isolation evidence passes the consistency verification and the isolation state duration reaches the preset isolation confirmation duration, the anti-reverse power transmission permission feature is generated.

[0029] In some further embodiments, the consistency check includes:

[0030] When both auxiliary contact feedback signals of the two paths continuously indicate an open state, the consistency check is passed;

[0031] And / or, based on the electrical quantity signal of the AC input side of the elevator, obtain the AC input voltage and AC input power, and when the AC input voltage and the AC input power are both zero, pass the consistency check;

[0032] And / or, when the discharge permission signal is valid and has passed security authentication, the consistency check is passed;

[0033] The anti-reverse power transmission permission feature is invalid if the isolation evidence fails the consistency check or is lost.

[0034] In some embodiments, controlling the energy storage device to perform discharge rescue to the DC bus in response to a valid discharge enable signal includes:

[0035] In response to the valid discharge enable signal, a discharge current command is generated using a droop control algorithm based on the target voltage and voltage filter value of the DC bus.

[0036] Based on the maximum discharge current and maximum discharge power, the discharge current command is limited, and then ramping is performed based on the rate of change of current.

[0037] Based on the discharge current command after slope processing, the energy storage device is controlled to discharge to the DC bus.

[0038] When any one of the following rescue exit conditions is met—overvoltage rescue exit condition, overcurrent rescue exit condition, energy storage rescue exit condition, anti-reverse power transmission rescue exit condition, voltage rescue exit condition, current rescue exit condition, time rescue exit condition, and signal rescue exit condition—the energy storage device is controlled to exit, thereby stopping the discharge to the DC bus.

[0039] In some further embodiments, controlling the energy storage device to exit and stop discharging to the DC bus includes:

[0040] The energy storage device is controlled to perform a hard exit when any of the following rescue exit conditions are met:

[0041] The overvoltage rescue exit condition is met when the voltage filter value of the DC bus reaches the overvoltage protection threshold; or, the overcurrent rescue exit condition is met when the current filter value of the DC bus reaches the overcurrent protection threshold; or, the energy storage rescue exit condition is met when the state of charge, temperature, or voltage of the energy storage device exceeds the limit; or, the reverse power transmission prevention rescue exit condition is met when the reverse power transmission prevention permission feature is invalid.

[0042] The energy storage device shall perform a soft exit when any of the following rescue exit conditions are met:

[0043] The voltage rescue exit condition is met when the voltage filter value of the DC bus reaches the rescue exit voltage threshold; or, the current rescue exit condition is met when the absolute value of the current filter value of the DC bus is lower than the no-load current threshold and the duration reaches the no-load confirmation duration; or, the time rescue exit condition is met when the discharge duration exceeds the maximum rescue duration; or, the signal rescue exit condition is met when a rescue end signal is received from the upper system.

[0044] After the discharge stops, the interlock is executed, and the power outage rescue state is prohibited from being triggered again until the reset conditions are met.

[0045] In some embodiments, the method further includes:

[0046] When the elevator has an automatic rescue device and the energy storage device is connected to the DC bus, any of the following interlocking controls shall be executed:

[0047] When the automatic rescue device is detected to be active, the energy storage device is prohibited from discharging.

[0048] Alternatively, the discharge enable signal may be generated only upon receiving a discharge permission signal from the automatic rescue device or a discharge permission signal from the host system.

[0049] Alternatively, when the energy storage device is in a discharge rescue state and the automatic rescue device is detected to be in a start-up preparation state, an interlock signal is sent to the automatic rescue device.

[0050] Secondly, this application provides an energy storage and rescue control system for an elevator DC bus, including: a memory, a processor, and an interface circuit for connecting the elevator DC bus.

[0051] The processor is used to execute the steps of the energy storage rescue control method for the elevator DC bus as described in any one of the first aspects.

[0052] Compared with the prior art, the embodiments of this application have the following beneficial effects:

[0053] This application's embodiments effectively overcome the limitations of existing technologies that rely on bus voltage thresholds to determine discharge enablement by generating power shortage characteristics, load characteristics, and anti-reverse power supply permission characteristics in parallel, and using the logical AND operation results of these three as the sole condition for discharge enablement. The power shortage characteristic comprehensively determines the AC and DC bus states, identifying genuine and continuous energy shortages and preventing false triggering due to short-term voltage fluctuations. The load characteristic verifies the DC bus current or power demand in real time, ensuring discharge only occurs when there is effective load, avoiding the risk of ineffective energy replenishment. The anti-reverse power supply permission characteristic forcibly verifies electrical isolation safety evidence on the AC side, fundamentally eliminating the hidden danger of reverse power supply. The synergistic effect of these three dimensions of characteristics jointly constructs a reliable discharge decision-making mechanism based on multi-state joint determination, thereby systematically improving the accuracy, necessity, and safety of discharge enablement decisions during power outage rescue, ultimately solving the technical problem of insufficient discharge reliability caused by the failure to execute multi-dimensional collaborative state determination.

[0054] Details of one or more embodiments of this application are set forth in the following drawings and description to make other features, objects and advantages of this application more readily apparent. Attached Figure Description

[0055] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments of this application and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0056] Figure 1 This is a flowchart of an embodiment of the energy storage rescue control method for an elevator DC bus provided in this application;

[0057] Figure 2 This is a flowchart of entering the power outage rescue mode provided in one embodiment of this application;

[0058] Figure 3 This is a flowchart of generating a discharge enable signal provided in one embodiment of this application;

[0059] Figure 4 This is a flowchart of an embodiment of the present application providing a process for controlling an energy storage device to perform discharge rescue based on a discharge energy output signal;

[0060] Figure 5 This is a block diagram of an elevator DC bus energy storage rescue control system provided in one embodiment of this application;

[0061] Figure 6 This is a block diagram of an energy storage and rescue control system for an elevator DC bus with a modular architecture provided in one embodiment of this application.

[0062] In the diagram: 102, processor; 104, memory; 106, transmission device; 108, input / output device. Detailed Implementation

[0063] To better understand the purpose, technical solution, and advantages of this application, the application is described and illustrated below in conjunction with the accompanying drawings and embodiments.

[0064] Unless otherwise defined, the technical or scientific terms used in this application shall have the general meaning understood by one of ordinary skill in the art to which this application pertains. Words such as “a,” “an,” “an,” “the,” “the,” and “these” used in this application do not indicate quantitative limitation and may be singular or plural. The terms “comprising,” “including,” “having,” and any variations thereof used in this application are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or device that comprises a series of steps or modules (units) is not limited to the listed steps or modules (units) but may include steps or modules (units) not listed, or may include other steps or modules (units) inherent to these processes, methods, products, or devices. Words such as “connected,” “linked,” and “coupled” used in this application are not limited to physical or mechanical connections but may include electrical connections, whether direct or indirect. “Multiple” used in this application refers to two or more. “And / or” describes the relationship between related objects, indicating that three relationships may exist; for example, “A and / or B” can represent: A alone, A and B simultaneously, and B alone. Normally, the character " / " indicates that the objects before and after it are in an "or" relationship. The terms "first," "second," "third," etc., used in this application are merely to distinguish similar objects and do not represent a specific order.

[0065] This embodiment provides an energy storage rescue control method for an elevator DC bus, used to control an external energy storage device connected to the elevator's DC bus. Figure 1 This is a flowchart of the energy storage rescue control method for the elevator DC bus in this embodiment. Please refer to it. Figure 1 The process includes the following steps:

[0066] Step S110: In the power outage rescue state, generate power shortage characteristics, load characteristics, and anti-reverse power transmission permission characteristics; power shortage characteristics are used to characterize the loss of power on the AC side of the elevator and / or insufficient energy on the DC bus; load characteristics are used to characterize the effective operating load on the DC bus; anti-reverse power transmission permission characteristics are used to characterize the energy reverse power transmission channel from the AC side to the DC bus has been isolated.

[0067] In this step, the power outage rescue state refers to a specific operating mode, characterizing the AC power supply status of the elevator. For example, a continuous power outage has occurred, and preparations are underway to activate an external energy storage device as an emergency energy source. In this step, the power shortage characteristics, load characteristics, and reverse power supply permission characteristics need to be generated in parallel based on independent signal sources and decision logic. By generating power shortage characteristics, load characteristics, and reverse power supply permission characteristics under the power outage rescue state, this step provides multi-dimensional, independent, and mutually verified state inputs for discharge decisions, thus constructing a highly reliable decision-making basis.

[0068] Step S120: Calculate the discharge enable signal based on the power shortage characteristics, load characteristics, and anti-reverse power transmission permission characteristics.

[0069] In this step, the valid state of the discharge enable signal indicates whether the energy storage device is allowed to perform discharge rescue to the branch bus. In practical applications, it can refer to a Boolean control signal. This step ensures that the discharge rescue action is triggered only under the triple conditions of actual power failure, actual load, and safe isolation by strictly constraining the generation of the discharge enable signal to three necessary characteristics and forming a highly reliable discharge enable signal through joint calculation of these characteristics.

[0070] In step S130, in response to a valid discharge enable signal, the energy storage device is controlled to perform discharge rescue to the DC bus.

[0071] Through the above steps, this embodiment of the application generates power shortage characteristics, load characteristics, and anti-reverse power supply permission characteristics in parallel, and uses the logical and computational results of the three as the sole condition for enabling discharge. This effectively overcomes the limitations of existing technologies that rely on bus voltage thresholds to determine the discharge enable decision. The power shortage characteristic comprehensively judges the AC side and DC bus status, which can identify real and continuous energy shortages and avoid false triggering caused by short-term voltage fluctuations from the source. The load characteristic verifies the current or power demand of the DC bus in real time, ensuring that discharge only occurs when there is an effective load, avoiding the risk of ineffective energy replenishment. The anti-reverse power supply permission characteristic forcibly verifies the electrical isolation safety evidence on the AC side, fundamentally eliminating the hidden danger of reverse power supply. The synergistic effect of the above three dimensions of characteristics jointly constructs a reliable discharge decision mechanism with multi-state joint judgment, thereby systematically improving the accuracy, necessity, and safety of discharge enable decision in power outage rescue state, and ultimately solving the technical problem of insufficient discharge reliability caused by the failure to execute multi-dimensional collaborative state judgment. This solves the problem of insufficient discharge rescue reliability caused by the use of a single condition to trigger discharge enable decision in power outage rescue state in related technologies.

[0072] In some embodiments, prior to step S110, the method further includes the following steps:

[0073] The power outage rescue state is triggered based on the effective power outage rescue latch flag.

[0074] The power outage rescue latch flag mentioned in this step refers to a persistent logic flag. Its valid state indicates that the AC side power outage event has been confirmed and latched, thus officially entering the power outage rescue mode. By introducing a latching mechanism, this step transforms the transient power outage detection signal into a stable mode state, effectively avoiding frequent mode switching caused by short-term fluctuations or instantaneous drops in AC side voltage.

[0075] The elevator's AC side health status signal is collected as a power outage rescue latch; it is valid when the AC side health status signal is in an abnormal state for a period of time that reaches the first preset duration.

[0076] The AC-side health status signal mentioned in this step refers to the electrical or logical signal used to directly or indirectly characterize whether the AC input power supply is available. Correspondingly, the abnormal status mentioned refers to the signal characterizing the state of AC-side power loss or no effective power supply. The first preset duration refers to the preset time constant used for signal debouncing. In actual scenarios, this duration needs to be set longer than the duration of common short-term fluctuations or interference in the power grid to ensure that the rescue mode is triggered only when a continuous and real power outage occurs on the AC side.

[0077] And / or, the AC side feedback status signal of the elevator is collected as a power failure rescue latch, and it is valid when the duration of the AC side feedback status signal in a reliable disconnected state reaches the second preset time.

[0078] The AC-side feedback status signal mentioned in this step refers to the auxiliary contact feedback signal from the physical disconnect switch in the AC input circuit. Correspondingly, the reliable disconnection status means that the feedback signal clearly indicates that the main contacts of the disconnect switch are in the physically disconnected position. The second preset duration refers to the preset time used to confirm that the isolation status is stable and reliable. In actual scenarios, this duration is used to ensure that the isolation action has been completed and the feedback signal is stable, so as to confirm the power outage from a physical perspective.

[0079] This embodiment can achieve targeted judgment when each method is used individually; when several methods are combined, it can be used to quickly sense the direct electrical state or rely on the mechanical feedback of the physical switch for final confirmation; thus adapting to the interface configuration of different systems and greatly improving the accuracy and anti-interference capability of power failure event judgment.

[0080] In further embodiments, a specific implementation of triggering the power outage rescue state based on an effective power outage rescue latching flag is as follows: This embodiment involves explicit signals and configurable parameters. Among them, the AC side health status signal... When continuously in an abnormal state, such as And achieve the first shake removal duration Alternatively, when the AC side feedback status signal continuously indicates a reliable disconnection state, the power failure rescue latch flag is set and latched. To enter power outage emergency response mode. To maintain a stable state, a minimum hold time is set. During this period, maintain .when Return to normal state, such as And continue to restore confirmation time And when it is determined that the AC side can be safely powered back on, clear the [unclear] To exit this state. Furthermore, a sustained decline in bus voltage can be used as an auxiliary criterion for generating power shortage characteristics, based on the voltage change rate. Below the threshold or cumulative amount Exceeding a threshold triggers the process, but it is not an independent basis for entering rescue mode. This embodiment clarifies the reliable logic and engineering implementation of state transitions through specific signals and adjustable parameters.

[0081] In some preferred embodiments, Figure 2 This is a flowchart of the process for entering the power outage rescue mode provided in this embodiment. Please refer to it. Figure 2 The process includes the following steps:

[0082] During grid-connected operation or standby, key parameters such as AC side health status signal, AC side feedback status signal, and DC bus voltage and current filter values ​​are continuously monitored.

[0083] When an abnormality is detected in the AC side health status signal and the AC side feedback status signal indicates a reliable disconnection, the controller performs a consistency check on these two signals.

[0084] If the verification fails, the system remains in standby mode to suppress false triggering; if the verification succeeds, the controller sets and latches the power failure rescue latch flag, and enters the power failure rescue mode.

[0085] In some embodiments, step S110, the generation step of the power shortage feature, specifically includes the following steps:

[0086] The power supply status of the elevator is detected to obtain the power outage rescue latch flag; when the power outage rescue latch flag is valid, the first electron deficiency feature is generated.

[0087] In this step, the power supply status mentioned refers to the combined status including both the AC side and the DC bus. When the power outage rescue latch flag is valid, it indicates that it is set, signifying that the AC side power outage event has been confirmed and latched. The first energy shortage characteristic characterizes the energy shortage demand directly caused by the AC side power outage confirmed based on the power outage rescue latch flag. This step, by directly converting stable state latch signals into energy shortage criteria, achieves the core identification of continuous and real power outage events, providing the most direct and reliable basis for generating energy shortage characteristics.

[0088] And / or, detect the power supply status of the elevator to obtain the voltage status signal of the DC bus; obtain the voltage filter value based on the voltage status signal; when the voltage filter value is lower than the preset rescue voltage threshold, generate a second electron deficiency feature.

[0089] In this step, the second electron deficiency characteristic represents the energy deficiency state when the DC bus voltage has dropped below the preset safe operating threshold. This step, by converting continuous analog voltage quantities into discrete logic characteristics, provides quantifiable and configurable electrical quantity auxiliary basis for power deficiency determination, enhancing the system's response capability to bus voltage drops.

[0090] And / or, detect the power supply status of the elevator to obtain the voltage status signal of the DC bus; when a sustained voltage drop event is detected based on the voltage status signal, generate a third electron deficiency feature.

[0091] In this step, the "sustained voltage drop event" refers to an event where the DC bus voltage exhibits a continuous and rapid downward trend, with the rate of decline or cumulative drop exceeding a preset threshold. Correspondingly, the third electron deficiency characteristic indicates an emergency state where the bus energy is in the process of rapid loss. This step, by dynamically monitoring voltage change trends rather than absolute levels, can provide earlier warnings of potential power outage risks or identify rapid energy depletion processes.

[0092] Based on the above steps, the following steps for obtaining defect features can be performed by taking a single step or a combination of multiple steps:

[0093] When any one of the first, second, and third electron-deficient features is obtained as an effective sub-feature, the corresponding effective sub-feature is taken as the electron-deficient feature.

[0094] In this step, the preset scenario is that there is only one type of evidence that clearly indicates a power shortage. This single valid piece of evidence can be used to generate a power shortage feature, which simplifies the judgment logic and ensures the timeliness of the response in a clear scenario.

[0095] When acquiring at least two of the first, second, and third electron-deficient features as valid sub-features, all valid sub-features are processed based on a pre-configured priority to obtain the electron-deficient feature.

[0096] In this step, the preset scenario is that multiple pieces of evidence indicate a power shortage simultaneously or sequentially. At this time, the system makes a decision based on a predefined priority, which can integrate information from multiple sources, improve the overall reliability of the power shortage judgment, and avoid misjudgment or missed judgment due to occasional abnormalities of a single signal.

[0097] In some further embodiments, step S110, the step of generating the power deficiency feature, specifically includes the following steps:

[0098] When obtaining at least one of the second and third electron-deficient features, and obtaining the first electron-deficient feature as an effective sub-feature, the first electron-deficient feature is used as the main effective sub-feature, and the second and / or third electron-deficient features are used as auxiliary effective sub-features to obtain the electron-deficient feature.

[0099] In this step, when the first electron deficiency feature is used as the primary effective sub-feature and the second electron deficiency feature is used as the auxiliary effective sub-feature, the absolute level of the DC bus voltage can be used to perform cross-verification and supplementation of the AC side power failure latching event at the electrical quantity level. When the first electron deficiency feature is used as the primary effective sub-feature and the third electron deficiency feature is used as the auxiliary effective sub-feature, the rapid energy consumption state of the bus can be more accurately identified after AC side power failure latching by combining the continuous downward trend of the voltage. When the three features are combined to obtain the power failure feature, the power failure feature at this time integrates the core latching state of AC side power failure, the static level evidence of low bus voltage, and the dynamic trend of voltage rapidly decreasing, which can ensure the timeliness, accuracy, and reliability of power failure status judgment to the greatest extent under various complex operating conditions.

[0100] In further embodiments, a specific implementation is provided for the generation step of the power shortage feature. Specifically, the power shortage feature is generated by a combination of one or more of a first electron shortage feature, a second electron shortage feature, and a third electron shortage feature, and its priority and latching logic can be configured. Power outage rescue latching flag. When effective, the first electron-deficient characteristic is generated; DC bus voltage filter value. Below the preset rescue start voltage threshold This generates a second electron-deficient characteristic; a sustained voltage drop event. This triggers the generation of the third electron-deficient feature.

[0101] In a typical configuration, the rescue start voltage threshold This setting can be based on the rated voltage of the elevator system's DC bus, for example, 80% to 85% of the rated voltage. (Voltage drop event) This can be determined by monitoring the rate of voltage drop or the cumulative voltage decrease on the bus. In specific implementation, the power shortage characteristic logic can be configured as follows: [The following is a separate, unrelated statement:] ...treat as the primary characteristic... When valid, the defect feature is set to valid regardless of whether the auxiliary feature is valid; alternatively, when the main feature is invalid but any auxiliary feature is valid, the power shortage feature can be set to valid or used only as a warning without direct triggering, depending on the configuration. Furthermore, independent latching or delay settings can be configured for auxiliary features to adapt to the sensitivity and noise immunity requirements of different application scenarios.

[0102] In some embodiments, step S110, the generation of load characteristics, specifically includes the following steps:

[0103] The load status of the DC bus is detected to obtain a current status signal; a current filter value is obtained based on the current status signal; when the absolute value of the current filter value is greater than the preset minimum load current threshold and the duration reaches the preset first confirmation time, a first load sub-feature is generated.

[0104] In this step, the load state mentioned refers to the energy demand state in which the elevator's drive system draws current from the DC bus to maintain operation. The duration for which the absolute value of the current filter value is greater than the minimum load current threshold refers to the process of debounce and continuously confirming the event that the current exceeds the threshold. When the first confirmation duration is reached, it indicates that the load demand is continuous and stable, rather than a momentary disturbance or noise. Therefore, the first load sub-characteristic refers to the state in which there is a clear effective load demand on the DC bus after confirmation based on the continuous current criterion.

[0105] Alternatively, detect the load status of the DC bus to calculate the power status signal; obtain the load power value based on the power status signal; and generate a second load sub-feature when the load power value is greater than a preset minimum load power threshold and the duration reaches a preset second confirmation time.

[0106] In this step, the power status signal refers to the instantaneous power calculated from the DC bus voltage and current. In practical scenarios, this can be obtained by multiplying and filtering the sampled values ​​using the controller. The duration during which the load power value is greater than the minimum load power threshold refers to the period during which stability verification is performed when the power exceeds the threshold. Correspondingly, when the second verification duration is reached, it indicates that the system has a continuous active power demand. Therefore, the second load sub-characteristic refers to the state where effective energy consumption on the DC bus is clearly confirmed after verification based on the continuous power criterion.

[0107] The generated first or second load sub-feature is used as the load feature.

[0108] This step provides two equivalent physical quantity criteria, current and power, and both are accompanied by duration confirmation to achieve data jitter reduction. This ensures that the load characteristics are only set to effective when a continuous and stable energy demand is detected, thereby reliably distinguishing between the actual load condition and no-load, standby, or light-load states. This effectively prevents the energy storage device from causing continuous power outages due to accidental discharge when there is no load or the load is extremely small.

[0109] In further embodiments, a specific application example of a load characteristic is provided. Setting a minimum load current threshold is also included. 2A, minimum load power threshold For 500W, the time for shake removal confirmation. The time is 200ms. In practice, the controller continuously samples and filters to obtain the filtered value of the DC bus current. DC bus power value When continuously monitored The state lasts for more than 200ms, or is continuously monitored If a state with a load greater than 500W persists for more than 200ms, a valid load characteristic is generated, indicating that there is a valid load on the DC bus that needs to be maintained.

[0110] To improve the accuracy of judgment under boundary conditions such as light load or standby and avoid misjudgment, this embodiment can further introduce additional criteria. For example, analysis of current direction or ripple characteristics can be added to ensure that the current is the positive current driving the motor and not the feedback current; or a continuous power criterion can be used, requiring that the integral value of the power over a longer time window also exceeds a certain threshold to filter out instantaneous power fluctuations. These additional criteria can be logically ANDed with the basic threshold criteria to jointly constitute the final load characteristics.

[0111] In some embodiments, step S110, the step of generating the anti-reverse power transmission permission feature, specifically includes the following steps:

[0112] Acquire the AC side feedback status signal in the isolated state of the elevator's AC side; obtain isolation evidence based on the AC side feedback status signal; the isolation evidence is one or more of the following: the dual-path auxiliary contact feedback signal of the elevator's isolation device, the electrical quantity signal of the elevator's AC input side, and the discharge permission signal issued by the upper system.

[0113] In this step, the isolation state of the elevator's AC side refers to the state of physical disconnection or equivalent electrical isolation taken to prevent energy from being fed back from the DC side to the AC power grid. Correspondingly, the AC side feedback state signal refers to the feedback signal used to directly or indirectly characterize whether this isolation state has been established and maintained. When the isolation evidence is the feedback signal of the elevator's dual-path auxiliary contacts, this evidence directly originates from the mechanical position feedback of the isolating switch, and its physical meaning is clear and its reliability is high. When the isolation evidence is the electrical quantity signal on the elevator's AC input side, this evidence indirectly infers that electrical isolation has been achieved by detecting whether the voltage, current, or power on the AC side is zero or close to zero. When the isolation evidence is a discharge permission signal issued by the upper-level system, this evidence represents a logical permission issued after safety logic judgment by a higher-level control system, integrating system-level safety strategies. When the isolation evidence uses a combination of the above methods, a redundant or complementary verification system can be constructed to adapt to different hardware configurations.

[0114] The isolation evidence is verified for consistency. When the isolation evidence passes the consistency verification and the isolation status lasts for the preset isolation confirmation duration, a reverse power transmission permission feature is generated.

[0115] The consistency check mentioned in this step aims to ensure that the obtained isolation evidence itself is reliable and consistent.

[0116] This embodiment ensures that discharge is only permitted after the reverse power transmission channel has been definitively and reliably cut off by clearly defining the types of multi-source isolation evidence upon which the reverse power transmission permission feature depends, and by introducing mandatory consistency verification and duration confirmation.

[0117] In some further embodiments, consistency verification specifically includes the following steps:

[0118] When both auxiliary contact feedback signals continuously indicate an open state, the consistency check is passed.

[0119] In this step, by requiring the signals from the two independent feedback channels to be consistent and both to indicate disconnection, redundant verification of the physical disconnect switch status is achieved. Based on this method, single-point failures such as single contact adhesion, circuit breakage, or sensor failure can be effectively identified.

[0120] And / or, based on the electrical quantity signals of the elevator's AC input side, obtain the AC input voltage and AC input power, and pass the consistency check when both the AC input voltage and AC input power are zero.

[0121] In this step, by cross-validating that both voltage and power, two related electrical quantities, are simultaneously zero, rather than relying solely on a single voltage signal, it is possible to more reliably infer that there is no energy input on the AC side. This helps to eliminate false alarms caused by faulty voltage detection circuits or dangerous conditions such as disconnecting only the neutral wire instead of the live wire.

[0122] And / or, when the discharge permission signal is valid and has passed safety certification, pass the consistency check.

[0123] In this step, the logic permission signal is securely authenticated to confirm that the instruction comes from a trusted host system and is not generated by communication interference.

[0124] The anti-reverse power transmission permit feature is invalid if the isolation evidence fails the consistency check or is lost.

[0125] This step constructs the final safety barrier by implementing the failure-safe principle that invalidation of evidence invalidates the permission. The failure of consistency verification is directly and instantly converted into a prohibition of discharge permission, ensuring that in any uncertain situation where the signal is unreliable, ambiguous, or conflicting, it can automatically enter the safest state of prohibiting discharge, thereby effectively preventing potential reverse power transmission risks.

[0126] In further embodiments, a specific example of the engineering implementation and verification of the anti-reverse power transmission permission feature is provided. This example employs a verification method that uses a redundant combination of dual-contact feedback from the input contactor and an interlock permission signal from the upper-level system. Specifically, the system is configured with two independent auxiliary contact feedback signals. and It is used to characterize the mechanical disconnection state of the contactor and to receive the discharge permission signal sent by the elevator main controller through safety communication. When generating the anti-reverse power transmission permit feature, a consistency check is first performed: Requirements and The disconnected status must be continuously and consistently indicated, while also... The signal undergoes security authentication of its source and format. If the states of the two contacts are inconsistent, the isolation fault flag is immediately set. Specific fault codes are recorded for maintenance traceability. Secondly, all the above-mentioned successful verification states must remain for a preset isolation confirmation period. For example, 200ms is used to complete debouncing and state stabilization confirmation. The reverse discharge permission feature is only set to valid if and only after all evidence has been continuously verified. Throughout the process, the fail-safe principle is strictly followed: if any evidence is lost, verification fails, or a fault flag is set, the reverse discharge permission feature will be forcibly set to invalid, thereby ensuring that discharge is absolutely prohibited in any uncertain situation in the isolated state. This example fully implements a highly reliable reverse power transmission protection mechanism through a specific and operable redundant verification process and fail-safe logic.

[0127] In some embodiments, step S120, which is the step of calculating the discharge enable signal based on the power shortage characteristics, load characteristics, and reverse power transmission protection characteristics, specifically includes the following steps:

[0128] The system uses a logical AND operation to jointly determine the power shortage characteristic, load characteristic, and reverse power supply permission characteristic. A valid discharge enable signal is generated only when all three are simultaneously in a valid state (logic true). Timing or priority constraints can be introduced to form composite logic, such as adding interlocking conditions with the elevator emergency power supply device; or different activation and hold delays can be configured for each characteristic to optimize system response. This embodiment ensures the reliability of the discharge enable signal by strictly constraining the discharge enable to the logical AND result of the three characteristics, guaranteeing that discharge rescue is triggered only when all three necessary conditions are met simultaneously.

[0129] In some preferred embodiments, Figure 3 This is a flowchart of the process for generating the discharge enable signal provided in this embodiment. Please refer to it. Figure 3 The process includes the following steps:

[0130] In power outage rescue mode, the controller generates three necessary features in parallel and performs joint determination on them:

[0131] The system generates power outage characteristics, with the power outage rescue latch flag as the primary criterion, and can be supplemented by the DC bus voltage being lower than the rescue activation threshold or the detection of a continuous drop in bus voltage.

[0132] Generate load characteristics and determine whether the absolute value of the DC bus current filter value is greater than the minimum load current threshold, or whether the DC bus power is greater than the minimum load power threshold.

[0133] Generate anti-reverse power transmission permit feature: Perform consistency verification on the isolation evidence obtained from the AC side. The feature is only valid after the verification passes and the status is continuously confirmed.

[0134] The controller determines whether the three characteristics of power shortage, load, and reverse power transmission protection are all valid simultaneously. If they are all valid, the controller generates a valid discharge enable signal. If any one of them is invalid, the controller will re-evaluate.

[0135] In some embodiments, step S130, which is the step of controlling the energy storage device to perform discharge rescue to the DC bus in response to a valid discharge enable signal, specifically includes the following steps:

[0136] In step S131, in response to a valid discharge enable signal, a discharge current command is generated using a droop control algorithm based on the target voltage and voltage filter value of the DC bus.

[0137] In this step, the droop control algorithm refers to a control strategy that linearly adjusts the output current based on the bus voltage deviation. Correspondingly, this step introduces voltage negative feedback, enabling the energy storage device's discharge current to automatically adapt to changes in the bus voltage. This allows for smooth support of the bus voltage and adaptive adaptation to load demands during rescue operations, avoiding drastic voltage fluctuations while keeping the current command within a reasonable range.

[0138] Step S132: Based on the maximum discharge current and the maximum discharge power, the discharge current command is limited, and then ramping is performed based on the rate of change of current.

[0139] This step, by imposing dual constraints on the current command, ensures that the discharge process always remains within the safe operating range of the energy storage unit and the power converter, while avoiding current surges to the DC bus caused by abrupt changes in the current command, thus guaranteeing the stability of the rescue process.

[0140] Step S133: Based on the discharge current command after slope processing, control the energy storage device to discharge to the DC bus.

[0141] Step S134: When any one of the following rescue exit conditions is met: overvoltage rescue exit condition, overcurrent rescue exit condition, energy storage rescue exit condition, reverse power transmission prevention rescue exit condition, voltage rescue exit condition, current rescue exit condition, time rescue exit condition, and signal rescue exit condition, the energy storage device is controlled to exit, so as to stop discharging to the DC bus.

[0142] This step, by setting up multi-dimensional exit conditions covering hardware protection, operating condition changes, security permissions, and system commands, can form a closed-loop rescue process management mechanism. This ensures that in any abnormal, completed, or externally intervened situation, the system can safely and orderly stop discharging and switch states, preventing over-discharge, equipment damage, or conflicts with other systems.

[0143] In some further embodiments, step S134, which involves controlling the energy storage device to exit in order to stop discharging to the DC bus, specifically includes the following steps:

[0144] Step S134.1: When any of the following rescue exit conditions are met, control the energy storage device to perform a hard exit:

[0145] The overvoltage rescue exit condition is met when the voltage filter value of the DC bus reaches the overvoltage protection threshold; or, the overcurrent rescue exit condition is met when the current filter value of the DC bus reaches the overcurrent protection threshold; or, the energy storage rescue exit condition is met when the state of charge, temperature, or voltage of the energy storage device exceeds the limit; or, the reverse power transmission prevention rescue exit condition is met when the reverse power transmission prevention permission feature is invalid.

[0146] The reason for implementing hard disconnection in this step based on conditions such as overvoltage, overcurrent, energy storage unit failure, and failure of reverse power transmission protection permission is that these conditions are directly related to the hardware safety of power electronic equipment and energy storage batteries, or the safety of personnel and the power grid, and constitute serious faults or dangerous operating conditions that require immediate response. The hard disconnection mechanism, as the highest priority protection measure, aims to rapidly cut off the energy supply the instant a fault occurs.

[0147] Step S134.2: When any of the following rescue exit conditions are met, control the energy storage device to perform a soft exit:

[0148] The voltage rescue exit condition is met when the voltage filter value of the DC bus reaches the rescue exit voltage threshold; or, the current rescue exit condition is met when the absolute value of the current filter value of the DC bus is lower than the no-load current threshold and the duration reaches the no-load confirmation duration; or, the time rescue exit condition is met when the discharge duration exceeds the maximum rescue duration; or, the signal rescue exit condition is met when a rescue end signal is received from the upper system.

[0149] In this step, the reason for performing a soft exit based on conditions such as voltage recovery, load disappearance, time limit exceeding, and external commands is that these conditions typically indicate that the rescue objective has been achieved, the load demand has ceased, or the rescue has ended as planned, which are normal operating condition transitions or process terminations. The soft exit mechanism achieves a smooth exit by reducing the current ramp, which can avoid the impact on the DC bus voltage caused by sudden current changes and ensure the stable operation of the load equipment.

[0150] Step S134.3: After stopping the discharge, the interlock is executed, and the power outage rescue state is prohibited from being triggered again until the reset condition is met.

[0151] This step, by setting a lockout state and anti-jitter time, prevents the system from immediately re-entering the discharge rescue mode due to fluctuations in the same boundary conditions for a short period after exiting, effectively preventing mode oscillation. Reset conditions typically include confirmation that AC power supply has been restored and stabilized, that the relevant fault has been cleared, or confirmation through manual intervention.

[0152] In further embodiments, a specific implementation example of a discharge rescue control and exit mechanism is provided. When the discharge enable signal is established, the bidirectional DC-DC converter in the energy storage device is controlled to enter the discharge rescue mode. The current command is preferably generated using a droop control algorithm. ,in This is the droop factor, for example, 0.5A / V. The target support voltage for the DC bus is, for example, 95% of the rated voltage. Then, the current to be processed... Limiting To constrain it to the maximum discharge current For example, 100A, with maximum discharge power For example, within the defined range of 20kW; then, perform ramp processing on the command after limiting. Limit its current change rate For example, not exceeding 100 A / s, To avoid current surges to the DC bus and ultimately obtain a smooth discharge current command. And execute.

[0153] The exit mechanism is divided into two categories based on the nature of the triggering conditions: hard exit and soft exit. Hard exit is a protective action that requires immediate cessation of discharge and entry into a locked state. Its triggering conditions include: DC bus overvoltage. , Overvoltage protection threshold, such as 110% of rated voltage; overcurrent or short circuit protection. , The conditions triggering a soft exit include: overcurrent protection threshold; abnormal energy storage unit status, such as SOC below 20%, temperature exceeding 60℃, or voltage exceeding limits; and failure of the reverse power transmission protection feature. Soft exit is a condition-based action that allows the control current to smoothly decline to zero. Its triggering conditions include: the bus voltage recovering to a higher emergency exit threshold, i.e. The load current remains below the no-load threshold, i.e. And reach the no-load confirmation time. The cumulative discharge time exceeded the maximum rescue duration. Or it receives a rescue termination signal from the elevator control system. After the discharge stops, the system enters a lockout / standby state and initiates an anti-shake period. During this period, triggering the discharge rescue again is prohibited until the preset reset conditions are met, such as AC power supply being restored and stabilized, the relevant fault being cleared, or confirmation by manual intervention. This example achieves safe, stable, and reliable management of the discharge rescue process through the above-mentioned hierarchical control and exit strategy.

[0154] In some preferred embodiments, Figure 4 This is a flowchart of the process of controlling the energy storage device to perform discharge rescue based on the discharge energy output signal provided in this embodiment. Please refer to it. Figure 4 The process includes the following steps:

[0155] When the discharge enable signal is valid, the energy storage device is controlled to perform discharge rescue. Discharge current commands are generated using algorithms such as droop control, and after current limiting, power limiting, and rate of change ramp processing, power is supplied to the DC bus to maintain the elevator's emergency operation.

[0156] During the discharge process, the controller continuously monitors the exit conditions. If hardware protection conditions such as overvoltage, overcurrent, short circuit, overtemperature, or failure of reverse power supply permission are triggered, the discharge is immediately hard-exited and stopped. If software operating conditions such as bus voltage recovery to the rescue exit threshold, no-load timeout, cumulative rescue time exceeding the limit, or receipt of an end signal are met, a soft exit is performed, smoothly stopping the discharge. After the discharge stops, it enters a lockout state until the reset conditions are met.

[0157] In some embodiments, the method further includes the step of executing any of the following interlock controls when the elevator has an automatic rescue device and an energy storage device is connected to the DC bus:

[0158] When the automatic rescue device is detected to be active, the energy storage device is prohibited from discharging.

[0159] The "activity status" mentioned in this step refers to the operational status of the automatic rescue device, which has been activated and is providing emergency power to the elevator system. This status is typically characterized by an activity signal issued by the ARD (Automatic Rescue Device). This step acquires and judges this activity signal, and when it is valid, forces the discharge enable signal of this invention to be invalid, thus achieving priority interlocking. This ensures that when the elevator manufacturer's own rescue device is in operation, the external energy storage cabinet actively deactivates or is prohibited from starting, thereby avoiding potential conflicts, circulating currents, or equipment damage that may be caused by two systems simultaneously supplying power to the elevator. This also clarifies the single responsibility for power supply.

[0160] Alternatively, a discharge enable signal may be generated only upon receiving a discharge permission signal from an automatic rescue device or a discharge permission signal from a higher-level system.

[0161] The discharge permission signal mentioned in this step refers to the logical permission signal actively issued by the automatic rescue device or the elevator main controller after confirming that it will not participate or conflict with the system. This step achieves permission-based interlocking by using this external permission signal as a necessary prerequisite for generating the discharge enable signal. This ensures that the rescue discharge of the external energy storage device is completely under the monitoring and authorization of the elevator main system or ARD, and coordinates the selection of rescue power supply at the system level, further eliminating the possibility of parallel operation.

[0162] Alternatively, when the energy storage device is in discharge rescue mode and the automatic rescue device is detected to be in the start-up preparation mode, an interlock signal is sent to the automatic rescue device.

[0163] The "start-up preparation state" mentioned in this step refers to the intermediate state where the automatic rescue device has received the start command but has not yet fully engaged in power supply. This state can be identified through its status signals or communication messages. This step continuously monitors the status of the automatic rescue device during its own discharge process. Once it detects that the device is preparing to start, it immediately sends a clear interlock request or prohibition signal to it via hardware connection or communication interface. This achieves conflict arbitration interlocking, proactively informing the automatic rescue device that another power source is currently supplying power and urging it to abort the start-up process. Therefore, even in scenarios where the activity signal of the automatic rescue device cannot be directly obtained, the uniqueness of the power source can still be guaranteed through proactive communication.

[0164] This embodiment constructs a clear, reliable, and flexibly configurable coordination and isolation mechanism between the external energy storage device and the elevator's built-in automatic rescue device by using one or a combination of priority interlocking, permission interlocking, and conflict arbitration interlocking. This fundamentally solves the potential power supply conflict between the two and ensures the safety, controllability, and clear responsibility of the rescue process.

[0165] In some further embodiments, a specific interlocking implementation example is provided that works in conjunction with the elevator's built-in automatic rescue device. This example employs a combined strategy of priority interlocking as the primary method and permission interlocking as a secondary method. The activity status signal emitted by the automatic rescue device is obtained through a hardware interface or communication bus. For example, a high level or logic 1 indicates that the automatic rescue device is outputting power. Simultaneously, the system also listens for discharge permission signals issued by the elevator main controller or the automatic rescue device. The interlock logic configuration is as follows: When When effective, regardless of other conditions, immediately force the external energy storage system to discharge using the enable signal. If ineffective, prevent it from discharging and ensure that the automatic rescue device is the first priority rescue power source. If invalid, the system will perform further checks. If configured to require this license, then only It is only allowed when it is valid and the three characteristic conditions are met. Established. In addition, when the external energy storage system determines that it has entered the discharge rescue state, it will continuously send an interlocking prompt signal of "DC side power supply in progress" to the elevator control system through a digital output port or communication message, which is intended to be detected by the automatic rescue device to prevent it from starting at the same time.

[0166] Unable to obtain reliably or In this scenario, the interlocking logic of this example relies entirely on the core three-feature safety boundary, namely, strictly constraining the discharge behavior by load characteristics, anti-reverse power supply permission and various exit watchdogs, so that the necessity and safety of the action can still be guaranteed when running independently, and avoids erroneous actions with unclear responsibilities.

[0167] This embodiment also provides an energy storage rescue control system for elevator DC bus. Figure 5 This is a block diagram of the energy storage and rescue control system for the elevator DC bus provided in this embodiment. Please refer to it. Figure 5 , including one or more ( Figure 5 Only one is shown in the diagram. A processor 102 and a memory 104 for storing data are also shown. The processor 102 is used to implement the above embodiments and preferred embodiments; details already described will not be repeated. The processor 102 may include, but is not limited to, a microprocessor (MCU) or a programmable logic device (FPGA). The system may also include a transmission device 106 for connecting to the elevator's DC bus to perform communication functions, and further includes an input / output device 108. Those skilled in the art will understand that... Figure 5 The structure shown is for illustrative purposes only and does not limit the structure of the system described above. For example, the terminal may also include components that are larger than... Figure 5 The more or fewer components shown, or having the same Figure 5 The different configurations shown are illustrated.

[0168] The terms “module,” “unit,” “subunit,” etc., used below can refer to a combination of software and / or hardware that performs a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware implementation, or a combination of software and hardware, is also possible and contemplated.

[0169] The system may also include more Figure 5 The more or fewer components shown, or having the same Figure 5 Different configurations are shown. Memory 104 can be used to store computer programs, such as application software programs and modules, like the computer program corresponding to the elevator DC bus energy storage rescue control method in this embodiment. Processor 102 executes various functional applications and data processing by running the computer program stored in memory 104, thereby implementing the aforementioned method. Memory 104 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, memory 104 may further include memory remotely located relative to processor 102, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0170] The transmission device 106 is used to receive or send data via a network. This network includes a wireless network provided by the terminal's communication provider. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 can be a Radio Frequency (RF) module used for wireless communication with the Internet.

[0171] Furthermore, in conjunction with the energy storage and rescue control method for the elevator DC bus provided in the above embodiments, this embodiment can also provide a storage medium for implementation. This storage medium stores a computer program; when executed by a processor, the computer program implements any of the energy storage and rescue control methods for the elevator DC bus in the above embodiments.

[0172] This embodiment also provides a modular architecture elevator DC bus energy storage rescue control system. Figure 6 Please refer to the block diagram of the modular architecture elevator DC bus energy storage rescue control system provided in this embodiment. Figure 6 The system includes a core power supply link module and an energy storage auxiliary unit module;

[0173] The core power supply module provides the main operating power for the elevator, and its power transmission path consists of the following units connected in sequence:

[0174] AC power grid unit: serves as the initial AC energy source for the system.

[0175] Input isolation unit: connected in series between the AC power grid and the subsequent unit, it has the ability to physically disconnect and is equipped with auxiliary contacts for status feedback.

[0176] Elevator frequency converter unit: Internally, it contains a rectifier circuit, a DC bus, and an inverter circuit. The rectifier circuit converts the input AC power into DC power; the DC bus serves as a key node for power collection and distribution; the inverter circuit converts the DC power into AC power with controllable frequency and voltage.

[0177] Traction system load unit: As the final energy consumption and actuator, it includes the drive motor, the brake device, and the mechanical load consisting of the car and the counterweight.

[0178] The energy storage auxiliary unit module serves as a backup and supplement to the main power supply, providing emergency energy to the system under specific operating conditions, including:

[0179] Energy storage unit: Composed of battery packs or supercapacitor modules, used to store electrical energy.

[0180] Bidirectional DC-DC converter unit: Preferably, an isolated dual active bridge topology is adopted, which is connected between the DC bus of the energy storage unit and the elevator inverter unit to realize bidirectional controllable energy flow.

[0181] Energy storage controller unit: As the decision-making core of this module, it is configured to execute specific rescue control logic, including but not limited to the three-feature joint enable determination algorithm.

[0182] It also includes a signal and protection logic module; this module provides the entire system with status awareness, safety interlocking, and closed-loop regulation functions, and includes the following signal acquisition and processing units:

[0183] AC side status feedback unit: integrated into the input isolation unit, used to collect and output AC side health status signals and AC side feedback status signals that characterize the position of its contacts.

[0184] DC bus status sampling unit: used to collect DC bus voltage and current in real time and transmit the sampled values ​​to the relevant controller.

[0185] Automatic rescue device interaction unit: As an optional communication interface, it is used to exchange commands and status with the elevator main controller or the automatic rescue device provided by the manufacturer.

[0186] The above-mentioned modules work together through the following signal and energy flows to form a complete control closed loop:

[0187] Main power supply energy flow: Under normal operating conditions, energy flows from the AC power grid unit to the elevator inverter unit via the input isolation unit, and then flows unidirectionally to the traction system load unit through the rectifier circuit, DC bus, and inverter circuit to drive the elevator.

[0188] Status feedback signal flow: The AC side status feedback unit continuously sends the collected AC side health status signal and AC side feedback status signal to the energy storage controller unit. The DC bus status sampling unit continuously sends the DC bus voltage and current sampling values ​​to the energy storage controller unit. At the same time, these signals are also used for voltage, frequency and current closed-loop control within the elevator inverter unit to stabilize the DC bus.

[0189] Energy Storage Control Decisions and Energy Interaction Flow: The energy storage controller unit receives all signals from the AC side state feedback unit and the DC bus state sampling unit. Based on these signals, it performs signal filtering and feature calculation, generating power shortage characteristics, load characteristics, and reverse power transmission protection permission characteristics, and executes joint logic decisions. Only when all three characteristics are simultaneously satisfied does the energy storage controller unit generate a valid discharge enable signal and issue precise current or power control commands to the bidirectional DC-DC converter unit accordingly. The bidirectional DC-DC converter unit responds to the commands, draws electrical energy from the energy storage unit, and injects it into the DC bus of the elevator inverter unit, forming an auxiliary energy flow for the energy storage auxiliary unit module and the core power supply link module.

[0190] System-level interlock signal flow: The automatic rescue device interaction unit is responsible for transmitting interlock signals between the energy storage controller unit and the elevator main control system or automatic rescue device. For example, it receives the activity status signal or discharge permission signal of the automatic rescue device and uses it as one of the input conditions for the energy storage controller's decision logic. Under certain logic, the energy storage controller unit can also send status signals outward through this unit to achieve conflict arbitration.

[0191] It should be understood that the specific embodiments described herein are merely illustrative of the application and not intended to limit it. All other embodiments obtained by those skilled in the art based on the embodiments provided in this application without inventive effort are within the scope of protection of this application. Obviously, the accompanying drawings are only some examples or embodiments of this application, and those skilled in the art can apply this application to other similar situations based on these drawings without any inventive effort. Furthermore, it is understood that although the work done in this development process may be complex and lengthy, for those skilled in the art, certain design, manufacturing, or production modifications made based on the technical content disclosed in this application are merely conventional technical means and should not be considered as insufficient disclosure of this application. The term "embodiment" in this application refers to a specific feature, structure, or characteristic described in connection with an embodiment that may be included in at least one embodiment of this application. The appearance of this phrase in various places in the specification does not necessarily imply the same embodiment, nor does it imply that it is mutually exclusive and independent or alternative to other embodiments. Those skilled in the art can clearly or implicitly understand that the embodiments described in this application can be combined with other embodiments without conflict.

[0192] The above embodiments merely illustrate several implementation methods of this application, and their descriptions are relatively specific and detailed, but they should not be construed as limiting the scope of patent protection. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the scope of protection of this application.

Claims

1. A method for energy storage rescue control of an elevator DC bus, used to control an energy storage device connected to the elevator's DC bus, characterized in that, The method includes: In the power outage rescue state, a power shortage characteristic, a load characteristic, and a reverse power transmission permission characteristic are generated; the power shortage characteristic is used to indicate that the AC side of the elevator is without power, and / or that the DC bus has insufficient energy; the load characteristic is used to indicate that the operating load on the DC bus is valid; the reverse power transmission permission characteristic is used to indicate that the energy reverse power transmission channel from the AC side to the DC bus has been isolated; A discharge enable signal is calculated based on the power shortage characteristics, the load characteristics, and the anti-reverse power transmission permission characteristics. In response to a valid discharge enable signal, the energy storage device is controlled to perform a discharge rescue to the DC bus.

2. The energy storage rescue control method for elevator DC bus according to claim 1, characterized in that, The method further includes: The power outage rescue state is triggered based on a valid power outage rescue latch flag; The AC side health status signal of the elevator is collected as the power outage rescue latch; the AC side health status signal is valid when the duration of the abnormal state reaches a first preset time. And / or, the AC side feedback status signal of the elevator is collected as the power failure rescue latch flag, and the AC side feedback status signal is valid when the duration of the reliable disconnection state reaches the second preset time.

3. The energy storage rescue control method for elevator DC bus according to claim 1, characterized in that, The steps for generating the power deficiency feature include: The power supply status of the elevator is detected to obtain a power failure rescue latch flag; when the power failure rescue latch flag is valid, a first electron deficiency feature is generated; And / or, detect the power supply status of the elevator to obtain the voltage status signal of the DC bus; obtain a voltage filter value based on the voltage status signal; when the voltage filter value is lower than a preset rescue voltage threshold, generate a second electron deficiency feature; And / or, detect the power supply status of the elevator to obtain the voltage status signal of the DC bus; when a voltage drop event is detected based on the voltage status signal, generate a third electron deficiency feature; When any one of the first electron-deficient feature, the second electron-deficient feature, and the third electron-deficient feature is obtained as an effective sub-feature, the corresponding effective sub-feature is taken as the electron-deficient feature; When at least two of the first electron-deficient feature, the second electron-deficient feature, and the third electron-deficient feature are obtained as valid sub-features, all valid sub-features are processed based on a pre-configured priority to obtain the electron-deficient feature.

4. The energy storage rescue control method for elevator DC bus according to claim 1, characterized in that, The steps for generating the load characteristics include: The load status of the DC bus is detected to obtain a current status signal; a current filter value is obtained based on the current status signal; when the absolute value of the current filter value is greater than a preset minimum load current threshold and the duration reaches a preset first confirmation time, a first load sub-feature is generated. Alternatively, the load status of the DC bus is detected to calculate a power status signal; a load power value is obtained based on the power status signal; and a second load sub-feature is generated when the load power value is greater than a preset minimum load power threshold and the duration reaches a preset second confirmation time. The generated first or second load sub-feature is used as the load feature.

5. The energy storage rescue control method for elevator DC bus according to claim 1, characterized in that, The steps for generating the anti-reverse power transmission permission feature include: Acquire the AC side feedback status signal in the isolated state of the AC side of the elevator; acquire isolation evidence based on the AC side feedback status signal; the isolation evidence is one or more of the following: the dual-path auxiliary contact feedback signal of the elevator's isolation device, the electrical quantity signal of the AC input side of the elevator, and the discharge permission signal issued by the upper system; The isolation evidence is subjected to consistency verification; when the isolation evidence passes the consistency verification and the isolation state duration reaches the preset isolation confirmation duration, the anti-reverse power transmission permission feature is generated.

6. The energy storage rescue control method for elevator DC bus according to claim 5, characterized in that, The consistency check includes: When both auxiliary contact feedback signals of the two paths continuously indicate an open state, the consistency check is passed; And / or, based on the electrical quantity signal of the AC input side of the elevator, obtain the AC input voltage and AC input power, and when the AC input voltage and the AC input power are both zero, pass the consistency check; And / or, when the discharge permission signal is valid and has passed security authentication, the consistency check is passed; The anti-reverse power transmission permission feature is invalid if the isolation evidence fails the consistency check or is lost.

7. The energy storage rescue control method for elevator DC bus according to claim 1, characterized in that, The step of controlling the energy storage device to perform discharge rescue to the DC bus in response to a valid discharge enable signal includes: In response to the valid discharge enable signal, a discharge current command is generated using a droop control algorithm based on the target voltage and voltage filter value of the DC bus. Based on the maximum discharge current and maximum discharge power, the discharge current command is limited, and then ramping is performed based on the rate of change of current. Based on the discharge current command after slope processing, the energy storage device is controlled to discharge to the DC bus. When any one of the following rescue exit conditions is met—overvoltage rescue exit condition, overcurrent rescue exit condition, energy storage rescue exit condition, anti-reverse power transmission rescue exit condition, voltage rescue exit condition, current rescue exit condition, time rescue exit condition, and signal rescue exit condition—the energy storage device is controlled to exit, thereby stopping the discharge to the DC bus.

8. The energy storage rescue control method for elevator DC bus according to claim 7, characterized in that, The step of controlling the energy storage device to exit and stop discharging to the DC bus includes: The energy storage device is controlled to perform a hard exit when any of the following rescue exit conditions are met: The overvoltage rescue exit condition is met when the voltage filter value of the DC bus reaches the overvoltage protection threshold; or, the overcurrent rescue exit condition is met when the current filter value of the DC bus reaches the overcurrent protection threshold; or, the energy storage rescue exit condition is met when the state of charge, temperature, or voltage of the energy storage device exceeds the limit; or, the reverse power transmission prevention rescue exit condition is met when the reverse power transmission prevention permission feature is invalid. The energy storage device shall perform a soft exit when any of the following rescue exit conditions are met: The voltage rescue exit condition is met when the voltage filter value of the DC bus reaches the rescue exit voltage threshold; or, the current rescue exit condition is met when the absolute value of the current filter value of the DC bus is lower than the no-load current threshold and the duration reaches the no-load confirmation duration; or, the time rescue exit condition is met when the discharge duration exceeds the maximum rescue duration; or, the signal rescue exit condition is met when a rescue end signal is received from the upper system. After the discharge stops, the interlock is executed, and the power outage rescue state is prohibited from being triggered again until the reset conditions are met.

9. The energy storage rescue control method for elevator DC bus according to claim 1, characterized in that, The method further includes: When the elevator has an automatic rescue device and the energy storage device is connected to the DC bus, any of the following interlocking controls shall be executed: When the automatic rescue device is detected to be active, the energy storage device is prohibited from discharging. Alternatively, the discharge enable signal may be generated only upon receiving a discharge permission signal from the automatic rescue device or a discharge permission signal from the host system. Alternatively, when the energy storage device is in a discharge rescue state and the automatic rescue device is detected to be in a start-up preparation state, an interlock signal is sent to the automatic rescue device.

10. An energy storage rescue control system for an elevator DC bus, characterized in that, include: Memory, processor, and transmission equipment for connecting the DC bus of the elevator; The processor is used to execute the steps of the energy storage rescue control method for the elevator DC bus according to any one of claims 1 to 9.

Images