Elevator safety system

Abstract

The elevator safety system (26) includes: an electronic safety actuator (22) configured to brake and stop the movement of the elevator car (6) in the elevator system (2), wherein the electronic safety actuator (22) is configured to be activated by interrupting the electrical control signal supplied to the electronic safety actuator (22); a safety controller (24, 32) configured to deactivate the electronic safety actuator (22) by providing an electrical control signal to the electronic safety actuator (22) and to activate the electronic safety actuator (22) by interrupting the supply of an electrical control signal to the electronic safety actuator (22); and a temporary power supply circuit (30) configured to be activated by the safety controller (24, 32) prior to a planned reset of the safety controller (24, 32) to temporarily provide an auxiliary electrical control signal to the electronic safety actuator (22) when the safety controller (24, 32) is reset, so as to prevent the electronic safety actuator (22) from being activated due to the reset of the safety controller (24, 32).

Description

Technical Field

[0001] The present invention relates to an elevator safety system including at least one safety controller, to an elevator system including such an elevator safety system, and to a method for resetting the safety controller of the elevator safety system. Background Technology

[0002] An elevator system typically includes at least one elevator car configured to move along a shaft between multiple floors and a drive system configured to drive the elevator car. The drive system includes at least one motor for moving the elevator car along the shaft and at least one elevator brake for braking and / or preventing the movement of the elevator car.

[0003] To enhance elevator system safety, elevator cars are equipped with Electronic Safety Actuators (ESA). These ESAs are configured to provide safety devices at the elevator car level for braking and / or preventing any movement of the elevator car in an emergency. Elevator systems equipped with ESAs do not require a speed governor. The speed governor and associated components (such as governor ropes) are replaced by a speed / acceleration / position sensing system, a controller, and the ESA.

[0004] Electronic safety actuators can be implemented using a closed-circuit principle. When an electrical control signal with an electrical control voltage is provided to the electronic safety actuator, the actuator, operating on a closed-circuit principle, is deactivated, allowing the elevator car to move along the elevator car guide rails within the hoistway. When no electrical control signal is provided, the electronic safety actuator is triggered. Triggering the electronic safety actuator activates at least one safety device for braking and / or preventing any movement of the elevator car.

[0005] The operation of the electronic safety actuator is controlled by an elevator safety system including at least one safety controller. The elevator safety system is configured to deactivate the electronic safety actuator during normal operation by providing an electrical control signal to it. The elevator safety system is also configured to deactivate the supply of electrical control signals to the electronic safety actuator to activate it for braking the elevator car and / or preventing further movement of the elevator car in the event of a detected malfunction and / or emergency.

[0006] To ensure the safe operation of the elevator safety system, at least one safety controller of the elevator safety system is periodically checked and reset. When at least one safety controller is being reset, the elevator safety system does not provide electrical control signals to the electronic safety actuators. Therefore, the electronic safety actuators will be activated each time at least one safety controller is reset.

[0007] Each activation of the electronic safety actuator results in unwanted noise and wear. Wear can shorten the lifespan of the electronic safety actuator and / or the elevator car guide rails.

[0008] Therefore, it would be beneficial to provide an improved elevator safety system that prevents electronic safety actuators from being unnecessarily activated when resetting at least one safety controller without compromising the safety of the elevator system. Summary of the Invention

[0009] According to an exemplary embodiment of the present invention, an elevator safety system includes an electronic safety actuator configured to brake and / or prevent movement of the elevator car. The electronic safety actuator is configured to be deactivated by providing an electrical control signal to it. The electronic safety actuator is also configured to be activated by interrupting the electrical control signal provided to it.

[0010] The elevator safety system also includes a safety controller configured to deactivate the electronic safety actuators by providing electrical control signals to them, and to activate them by interrupting the supply of electrical control signals to them. The elevator safety system also includes a temporary power supply circuit configured to be activated by the safety controller prior to a reset of its scheduling, to temporarily provide auxiliary electrical control signals to the electronic safety actuators when the safety controller is reset, preventing the electronic safety actuators from being activated due to the reset of the safety controller.

[0011] An exemplary embodiment of the present invention also includes an elevator system comprising at least one elevator car configured to travel along a shaft between a plurality of floors; at least one electronic safety actuator configured to brake and / or prevent movement of at least one elevator car in an emergency; and at least one safety system according to an exemplary embodiment of the present invention configured to activate at least one electronic safety actuator in an emergency.

[0012] An exemplary embodiment of the present invention further includes a method for resetting the safety controller of an elevator safety system according to an exemplary embodiment of the present invention, wherein the method includes (1) activating a temporary power supply circuit; (2) resetting the safety controller after the temporary power supply circuit has been activated; and (3) providing an auxiliary electrical control signal from the temporary power supply circuit to an electronic safety actuator to prevent the electronic safety actuator from being activated while the safety controller is being reset.

[0013] In the elevator safety system and the method for resetting the safety controller of the elevator safety system according to an exemplary embodiment of the present invention, a temporary power supply circuit prevents the electronic safety actuator from being activated while the safety controller is being reset. Therefore, unwanted noise and wear caused by unnecessary activation of the electronic safety actuator can be avoided.

[0014] Since the temporary power supply circuit according to an exemplary embodiment of the present invention is configured to provide auxiliary electrical control signals only temporarily, particularly only for a predefined time period, it does not permanently prevent the electronic safety actuator from being activated. Therefore, by adding the temporary power supply circuit according to an exemplary embodiment of the present invention to the elevator safety system, the safety of the elevator system is not compromised.

[0015] The following describes several optional features of an elevator safety system according to exemplary embodiments of the present invention. Unless otherwise expressly stated, these features may be implemented individually or in combination with any other features in a particular embodiment.

[0016] The temporary power supply circuit can be configured to provide auxiliary electrical control signals to the electronic safety actuators for a predefined time period ranging from 100ms to 1000ms. This predefined time period is long enough to allow for a complete reset of the safety controller without compromising the safety of the elevator system.

[0017] A safety controller may include at least one safety processor, particularly a programmable safety processor, configured to run appropriate software programs for controlling the operation of the safety controller. The safety controller, controlled by the programmable safety processor running the software programs, can be easily adapted to different elevator systems and / or varying safety parameters and requirements.

[0018] The temporary power supply circuit may include at least one capacitor configured to be charged when the temporary power supply circuit is activated. The at least one capacitor may also be configured to provide an auxiliary electrical control signal to the electronic safety actuator when the safety controller is reset. The capacitor can be rapidly charged after the temporary power supply circuit is activated by at least one safety processor. The capacitor is capable of providing an auxiliary electrical control signal with a predefined auxiliary control voltage to the safety actuator. Therefore, the capacitor is well-suited for temporarily providing an auxiliary electrical control signal to prevent activation of the electronic safety actuator when the safety controller is reset.

[0019] Activating a temporary power supply circuit may include charging at least one capacitor of the temporary power supply circuit.

[0020] To enhance the safety provided by the elevator safety system, a temporary power supply circuit can be configured to charge at least one capacitor from a power source that is electrically isolated from the capacitor.

[0021] At least one capacitor can be charged via a transformer that electrically isolates the capacitor from the power source. Such a transformer can be part of a temporary power supply circuit.

[0022] Transformers can also provide voltage converters. In particular, transformers can be components of DC / DC voltage converters.

[0023] A temporary power supply circuit can be configured to provide electrical pulses to at least one capacitor to charge it. Each electrical pulse can have a higher voltage than that supplied by the power source of the temporary power supply circuit. Charging at least one capacitor with electrical pulses enhances the safety of the elevator safety system because, in the event of a fault, the capacitor will not be permanently charged with a constant current.

[0024] To generate an electrical pulse to supply at least one capacitor, a temporary power supply circuit may include at least one of an inductor, a resistor, and a diode. The temporary power supply circuit may, in particular, include a full-bridge rectifier comprising at least four diodes.

[0025] In order to generate an electrical pulse to supply at least one capacitor, the temporary power supply circuit may also include at least one electrical switch; the temporary power supply circuit may in particular include two or four electrical switches.

[0026] Activating a temporary power supply circuit may include periodically opening and closing at least one electrical switch of the temporary power supply circuit to generate electrical pulses for charging at least one capacitor.

[0027] A temporary power supply circuit may include two pairs of electrical switches. The two switches in each pair can be configured to switch simultaneously with each other. Alternatively, the two pairs of switches can be configured to switch in opposite directions, such that when the second pair of switches is closed, the first pair is open, and vice versa. This configuration of the switches allows alternating current to be supplied to the primary winding of the transformer, resulting in an electrical pulse induced in the secondary winding of the transformer. The electrical pulse induced in the secondary winding of the transformer may have a higher or lower voltage than the pulse supplied to the primary winding.

[0028] Electrical switches can include electromagnetic switches, such as relays. Electrical switches can also include electronic switches, especially semiconductor switches, such as MOSFETs or bipolar transistors.

[0029] Electrical switches, transformers, and diodes can form voltage converters, especially DC / DC voltage converters, which allow the generation of auxiliary electrical control signals with voltages higher than the power supply voltage provided to temporary power supply circuits. Attached Figure Description

[0030] In the following, exemplary embodiments of the invention are described in more detail with reference to the accompanying drawings: Figure 1 A schematic diagram of an elevator system according to an exemplary embodiment of the present invention is depicted.

[0031] Figure 2A schematic diagram of an elevator safety system according to an exemplary embodiment of the present invention is depicted.

[0032] Figure 3A A schematic circuit diagram of a temporary power supply circuit for an elevator safety system according to an exemplary embodiment of the present invention is shown in the first switching state.

[0033] Figure 3B Depicting Figure 3A The diagram depicts a temporary power supply circuit in the second switching state.

[0034] Figure 4A A diagram was drawn, which illustrates the following: Figure 3A and 3B The voltage supplied by the primary coil of the transformer in the temporary power supply circuit depicted in the figure.

[0035] Figure 4B A diagram is depicted that schematically illustrates the voltage induced in the secondary coil of a transformer.

[0036] Figure 4C A graph is drawn to illustrate the voltage supplied from the capacitor to the electronic safety actuator as the electrical switch periodically switches between a first state and a second state.

[0037] Figure 5A A schematic circuit diagram of another temporary power supply circuit for an elevator safety system according to an exemplary embodiment of the present invention is shown in the first switching state.

[0038] Figure 5B Depicting Figure 5A The diagram depicts a temporary power supply circuit in the second switching state.

[0039] Figure 6A Describing the Figure 5A and 5B The temporary power supply circuit depicted in the image is supplied with electrical pulses by the capacitors.

[0040] Figure 6B Schematic illustration Figure 5A and 5B The voltage across the capacitor in the temporary power supply circuit depicted is a function of time.

[0041] Figure 7 A schematic circuit diagram of a temporary power supply circuit according to yet another exemplary embodiment of the present invention is depicted.

[0042] Figure 8 A schematic circuit diagram of a temporary power supply circuit according to another exemplary embodiment of the present invention is depicted.

[0043] Figure 9A flowchart illustrating a method for resetting an elevator safety controller according to an exemplary embodiment of the present invention is provided. Detailed Implementation

[0044] Figure 1 An elevator system 2 according to an exemplary embodiment of the present invention is schematically depicted.

[0045] Elevator system 2 includes a shaft 4 extending longitudinally along a LD between multiple floors 8 located on different floors. Elevator system 2 includes an elevator car 6 arranged in the shaft 4 for moving longitudinally along the LD between the multiple floors 8. The elevator car 6 can move, in particular, along at least one elevator car guide rail 14 provided in the shaft 4 and extending longitudinally along the LD.

[0046] The longitudinal LD ​​can be oriented along the vertical direction, and in Figure 1 As depicted in the figure. In an alternative embodiment not shown in the figure, the longitudinal LD ​​may be tilted relative to the vertical direction.

[0047] Despite Figure 1 Only a single elevator car guide rail 14 is depicted, but the elevator system 2 may include multiple elevator car guide rails 14 that extend parallel to each other.

[0048] Despite Figure 1 Only a single elevator car 6 is depicted in the illustration, but exemplary embodiments of the present invention may also include an elevator system 2 comprising a plurality of elevator cars 6 that move in one or more shafts 4.

[0049] The elevator car 6 is movably suspended by tension member 3. Although in Figure 1 Only a single tension member 3 is depicted in the illustration, but exemplary embodiments of the present invention may also include an elevator system 2 comprising multiple tension members 3.

[0050] At least one tension member 3, such as a rope or belt, is coupled to an elevator drive system 5. The elevator drive system 5 includes a motor 9 for rotatably driving a shaft 12 and a drive 17 that utilizes and controls the electrical energy supplied to the motor 9. The elevator drive system 5 is configured to drive at least one tension member 3 coupled to the shaft 12 via traction force to move an elevator car 6 longitudinally LD in a hoistway 4 between multiple landings 8.

[0051] The elevator drive system 5 also provides at least one elevator brake 20 for rotating the brake shaft 12 to allow stopping the movement of the elevator car 6 and holding the elevator car 6 in the desired position in the hoistway 4.

[0052] Optionally, the elevator system 2 may include a counterweight 16. The counterweight 16 may be attached to at least one tension member 3 opposite to the elevator car 6 and is configured to move simultaneously and in opposite directions relative to the elevator car 5. The counterweight 16 may move along at least one counterweight guide rail 19 provided in the hoistway 4 and extending longitudinally along the LD.

[0053] At least one tension member 3 may be a rope (e.g., a steel wire rope) or a belt, particularly a coated steel belt. At least one tension member 3 may be uncoated. Alternatively, at least one tension member 3 may be coated, for example, with a coating having a polymer sheath. In a particular embodiment, at least one tension member 3 may be a belt comprising a plurality of polymer-coated steel wire ropes (not shown). The elevator system 2 may have a traction drive that includes a traction pulley for driving at least one tension member 3.

[0054] exist Figure 1 In the exemplary embodiment depicted, a 1:1 roping is used to suspend the elevator car 6. However, the type of roping is not essential for the present invention, and different types of roping, such as 2:1 or 4:1 roping, can also be used.

[0055] A landing door 10 is provided at each of the landings 8. A corresponding elevator car door 11 is provided for the elevator car 6 to allow passengers to move between the landing 8 and the interior of the elevator car when the elevator car 5 is located at the corresponding landing 8.

[0056] In order for the elevator car 6 to move along the shaft 4 between different floors 8, the elevator drive system 5 can be controlled by the elevator controller 15 of the elevator system 2.

[0057] Elevator system 2 can be a machine-room-less elevator system 2. In an alternative embodiment, elevator system 2 may include a machine room 13 that houses elevator drive system 5 and elevator controller 15.

[0058] Input to the elevator controller 15 may be provided via a landing control panel 7a provided at each landing 8 (particularly near the landing door 10), and / or via an elevator car control panel 7b provided inside the elevator car 6.

[0059] The landing control panel 7a may include elevator hall call buttons and / or destination call buttons. The destination call buttons allow passengers to enter their respective destinations before entering the elevator car 6. With the landing control panel 7a equipped with destination call buttons, there is no need to provide an elevator car control panel 7b inside the elevator car 6, because the elevator system 2 is entirely controlled by commands input via the landing control panel 7a.

[0060] The floor control panel 7a and the elevator car control panel 7b can be used Figure 1 Electrical wiring, not shown, is coupled to the elevator controller 15, particularly via an electrical bus or a wireless data connection.

[0061] The elevator car 6 is also equipped with an electronic safety actuator (ESA) 22, which is configured to engage with the elevator car guide rail 14 in an emergency to stop and prevent any movement of the elevator car 6.

[0062] The electronic safety actuator 22 is implemented using a closed-circuit principle. This means that when an electrical control signal with a predefined electrical control voltage is provided to the electronic safety actuator 22, the electronic safety actuator 22 is deactivated and the elevator car 6 is allowed to move along the elevator car guide rail 14 in the hoistway 4.

[0063] Without providing an electrical control signal to the electronic safety actuator 22, the electronic safety actuator 22 is triggered, causing at least one safety device, which is part of the electronic safety actuator 22, to engage with the elevator car guide rail 14 to brake the movement of the elevator car 6. In particular, the electronic safety actuator 22 can ultimately stop and prevent any movement of the elevator car 6.

[0064] The operation of the electronic safety actuator 22 is controlled by an elevator safety system 26, which includes at least one safety controller 24. The elevator safety system 26 is configured to provide an electrical control signal to the electronic safety actuator 22 during normal operation to deactivate the actuator, thereby allowing the elevator car 6 to move along the elevator car guide rail 14. The elevator safety system 26 is also configured to deactivate the supply of an electrical control signal to the electronic safety actuator 22 to activate it in the event of a detected malfunction and / or emergency, for braking the movement of the elevator car 6 and / or preventing any further movement of the elevator car 6 along the elevator car guide rail 14.

[0065] Despite Figure 1 Only one electronic safety actuator 22 is depicted, but the elevator car 6 may be equipped with multiple electronic safety actuators 22. Alternatively, at least one electronic safety actuator 22 may also be provided at the counterweight 16.

[0066] To ensure the safe operation of the elevator safety system 26, at least one safety controller 24 of the elevator safety system 26 needs to be inspected and reset periodically. When at least one safety controller 24 is being reset, the elevator safety system 26 does not provide electrical control signals to the electronic safety actuator 22. Therefore, resetting at least one safety controller 24 will result in the activation of the electronic safety actuator 22.

[0067] Each activation of the electronic safety actuator 22 results in noise and wear. Frequent activation of the electronic safety actuator 22 may shorten the lifespan of the electronic safety actuator 21 and / or the elevator car guide rail 14. Therefore, any unnecessary activation of the electronic safety actuator 22, such as activation caused by resetting at least one safety controller 24, is undesirable and should be avoided if possible.

[0068] To prevent unnecessary activation of the electronic safety actuator 22 when at least one safety controller 24 is reset, an elevator safety system 26 configured to control the operation of the electronic safety actuator 22 according to an exemplary embodiment of the present invention includes a temporary power supply circuit 30. The temporary power supply circuit 30 is configured to temporarily provide an auxiliary electrical control signal to the electronic safety actuator 22 when at least one safety controller 24 is reset. During the reset, the auxiliary electrical control signal temporarily replaces the electrical control signal provided to the electronic safety actuator 22 from at least one safety controller 24 during normal operation.

[0069] Figure 2 A schematic diagram of an elevator safety system 26 according to an exemplary embodiment of the present invention is depicted.

[0070] The elevator safety system 26 includes an electronic safety actuator 22 and a power supply 28. The power supply 28 is configured to provide an electrical control signal to the electronic safety actuator 22, having an electrical control voltage for disabling the electronic safety actuator 22. The electrical control signal is provided via two safety switches 36a and 36b connected in series, such that the electrical control signal is provided to the electronic safety actuator 22 only when both safety switches 36a and 36b are closed.

[0071] Safety switches 36a and 36b can be electromagnetic switches, such as relays. Safety switches 36a and 36b can also be electronic switches, especially semiconductor switches, such as MOSFETs or bipolar transistors.

[0072] The elevator safety system 26 also includes a first safety controller 24 and a second safety controller 32. The first safety controller 24 is configured to control the operation of the electronic safety actuator 22 by controlling the operation of two safety switches 36a, 36b, as previously described.

[0073] The second safety controller 32 may be a watchdog controller, which is configured to monitor the operation of the first safety controller 24 and activate the electronic safety actuator 22 by opening at least one of the two safety switches 36a and 36b if the watchdog controller detects a fault in the first safety controller.

[0074] In an alternative configuration, the second safety controller 32 may be a copy of the first safety controller 24, and it may be configured to perform the same tasks as the first safety controller 24 to add redundancy to the elevator safety system 26.

[0075] Each of the first and second safety controllers 24, 32 may include at least one safety processor 25, 33, particularly a programmable safety processor 25, 33 configured to run appropriate programs to control the operation of the respective safety controller 24, 32.

[0076] The first and second safety controllers 24 and 32 are coupled to safety switches 36a and 36b via logic circuits 34a and 34b. The logic circuits 34a and 34b may include AND and / or OR circuits, and they are configured to open both safety switches 36a and 36b and interrupt the supply of electrical control signals to the electronic safety actuator 22 in the event that at least one of the first and second safety controllers 24 and 32 detects a fault.

[0077] The elevator safety system 26 also includes a temporary power supply circuit 30, which is configured to temporarily provide an auxiliary electrical control signal to the electronic safety actuator 22 when at least one of the first and second safety controllers 24, 32 is reset. Resetting at least one of the first and second safety controllers 24, 32 causes at least one of the first and second safety switches 36a, 36b to open, such that electrical control signals are not provided from the power supply 28 to the electronic safety actuator 22 via the first and second safety switches 36a, 36b.

[0078] The temporary power supply circuit 30 can be activated by an activation signal provided to the temporary power supply circuit 30 from at least one of the first and second safety controllers 24, 32 via an activation line 35.

[0079] The temporary power supply circuit 30 is configured to provide an auxiliary electrical control signal for a predefined time period when at least one of the first and second safety controllers 24, 32 is reset. This predefined time period is long enough to keep the electronic safety actuator 22 in a deactivated state.

[0080] The temporary power supply circuit 30 is configured to stop providing auxiliary electrical control signals to the electronic safety actuator 22 once the predefined time period has elapsed. Therefore, if the first or second safety controller 24, 32 fails to resume operation in a timely manner after being reset, the electronic safety actuator 22 is activated.

[0081] Figure 3A and 3B A schematic circuit diagram of a temporary power supply circuit 30 for an elevator safety system 26 according to an exemplary embodiment of the present invention is shown.

[0082] The temporary power supply circuit 30 includes a transformer 38 having a primary coil 38a and a secondary coil 38b.

[0083] Each of the two ends of the primary coil 38a is electrically coupled to a pair of electrical switches 41-44.

[0084] Each pair of electrical switches 41-44 includes a first electrical switch 41, 43 electrically coupled to a power source 46 and a second electrical switch 42, 44 electrically coupled to an electrical ground 48.

[0085] Electrical switches 41-44 can be electromagnetic switches, such as relays. Electrical switches 41-44 can also be electronic switches, especially semiconductor switches, such as MOSFETs or bipolar transistors.

[0086] The terminals of the secondary coil 38b of transformer 38 are electrically coupled to four diodes 51-54 forming a full-bridge rectifier 50. In another embodiment not explicitly depicted in the figures, the full-bridge rectifier 50 may include active switching elements, such as transistors, as an alternative to or supplement to the diodes 51-54.

[0087] Capacitor 56 is electrically coupled to the output side of full-bridge rectifier 50.

[0088] Power supply 46 can be with Figure 2 The power supply 28 depicted is the same. Alternatively, the power supply 46 can be a separate auxiliary power supply 46 provided independently of the power supply 28 of the elevator safety system 26. The auxiliary power supply 46 of the temporary power supply circuit 30 can be particularly connected to capacitor 56 and... Figure 2 The elevator safety system 26 depicted in the image has a power supply 28 that is electrically isolated.

[0089] The temporary power supply circuit 30 also includes a switch controller 45, which is coupled to the electrical switches 41-44 and configured to control the operation of the electrical switches 41-44.

[0090] Switch controller 45 is specifically configured to control electrical switches 41-44 in Figure 3A The first state described in the text and Figure 3B They switch simultaneously between the second states described in the text.

[0091] exist Figure 3A In the first state depicted, the first and fourth electrical switches 41 and 44 are closed, and the second and third electrical switches 42 and 43 are open. The first electrical switch 41 electrically couples the power supply 46 to the first end of the primary coil 38a, and the fourth electrical switch 44 electrically couples the second end of the primary coil 38b to the ground 48. Figure 3A The configuration of the electrical switches 41-44 in the first state depicted causes a first current I1 to flow through the primary coil 38a of the transformer 38 in a first direction.

[0092] exist Figure 3B In the second state described, the second and third electrical switches 42 and 43 are closed, and the first and fourth electrical switches 41 and 44 are open. The second electrical switch 42 electrically couples the first end of the primary coil 38a to the electrical ground 48, and the third electrical switch 43 electrically couples the power supply 46 to the second end of the primary coil 38a. Figure 3B The configuration of the electrical switches 41-44 in the second state depicted causes the second current I2 to flow through the primary coil 38a of the transformer 38 in a second direction opposite to the first direction.

[0093] Figure 4A A graph is drawn to illustrate the voltage U supplied to the primary coil 38a of transformer 38 when electrical switches 41-44 are in the first state S1 and the second state S2, respectively. a .

[0094] Electrical switches 41-44 can periodically switch between a first state and a second state at frequencies ranging from 1 kHz to 100 kHz.

[0095] The alternating currents I1 and I2 flowing through the primary coil 38a of transformer 38 induce corresponding alternating currents in the secondary coil 38b of transformer 38. The magnitudes of the voltage and current induced in the secondary coil 38b depend on the ratio between the number of windings in the two coils 38a and 38b of transformer 38.

[0096] The ratio between the number of windings of the two coils 38a and 38b can be, for example, 4:1, 3:1, 2:1, 1:1, 1:2, 1:3 or 1:4.

[0097] If the secondary coil 38b includes a different number of windings than the primary coil 38a, then the transformer 38 acts as a voltage converter.

[0098] Figure 4B A graph is depicted that schematically illustrates the voltage U induced in the secondary coil 38b. b .

[0099] The voltage U induced in the secondary coil 38b b The capacitor 56 is rectified by the full-bridge rectifier 50 and supplied to the output side of the full-bridge rectifier 50.

[0100] When the electrical switches 41-44 periodically switch between the first and second states, the output of the full-bridge rectifier 50 charges the capacitor 56. Charging the capacitor 56 causes a voltage U to be established across it. c The voltage U across capacitor 56 c It can be used as an auxiliary electrical control voltage Uaux Provided to electronic safety actuator 22 for use with electrical safety switches 36a, 36b (see Figure 2 The electronic safety actuator 22 is prevented from being activated if at least one of the safety controllers 24 and 32 is turned on due to a reset of at least one of the safety controllers 24 and 32.

[0101] Figure 4C A graph is drawn illustrating the voltage U supplied from capacitor 56 to electronic safety actuator 22 when electrical switches 41-44 periodically switch between a first state and a second state. c =U aux .

[0102] When electrical switches 41-44 are no longer operated, no electrical energy is supplied from transformer 38 to capacitor 56. Therefore, capacitor 56 will discharge over time via electronic safety actuator 22 and / or via discharge resistor 58 coupled in parallel with capacitor 56 and electronic safety actuator 22. Decoupling diode 62 prevents capacitor 56 from being charged from the electronic safety actuator 22 side.

[0103] Therefore, when the voltage U of capacitor 56 c It has dropped to the predetermined threshold voltage U th In the following cases, the electronic safety actuator 22 will be activated without the electronic control signal provided by the electrical safety switches 36a and 36b to disable the electronic safety actuator 22.

[0104] The time period (after the operation of electrical switches 41-44 has stopped, the voltage U of capacitor 56 after this time period) c The voltage drops below the predetermined threshold voltage U th The resistance is defined by the capacitance of capacitor 56, the internal resistance of electronic safety actuator 22, and the resistance of optional discharge resistor 58, which can be electrically coupled in parallel with capacitor 56 and electronic safety actuator 22.

[0105] Monitoring the voltage U at capacitor 56 of temporary power supply circuit 30 C And only when capacitor 56 has been fully discharged and the voltage U of capacitor 56 is... C Elevator system 2 resumed normal operation only after the temperature dropped below the predefined threshold.

[0106] If the voltage U at capacitor 56 C The voltage should not drop below a predefined threshold within a reasonable time period, or if the voltage U at capacitor 56... C If the power supply rises above a predefined threshold before the temporary power supply circuit 30 is activated, this indicates a serious and potentially dangerous malfunction in elevator system 2. Therefore, normal operation of elevator system 2 is prevented.

[0107] exist Figure 3A and 3B In the temporary power supply circuit 30 depicted, the capacitor 56 does not charge if the electrical switches 41-44 are stuck in one of the positions of the electrical switches 41-44 due to a fault in the switch controller 45 or at least one of the electrical switches 41-44.

[0108] therefore, Figure 3A and 3B The temporary power supply circuit 30 depicted is fail-safe because if at least one of the electrical switches 41-44 is to be locked in the closed position, then Figure 3A and Figure 3B The temporary power supply voltage 30 depicted will not permanently supply the auxiliary electrical control voltage U to the electronic safety actuator 22. aux .

[0109] Figure 5A and 5B A schematic circuit diagram of a temporary power supply circuit 30 according to another exemplary embodiment of the present invention is depicted.

[0110] Figure 5A and 5B The power supply circuit 30 depicted in the diagram has a higher power supply capacity than... Figure 3A and 3B The power supply circuit 30 depicted in the diagram has a simpler configuration and can be implemented at a lower cost.

[0111] Figure 5A and 5B The power supply circuit 30 depicted also includes a transformer 38 comprising a primary coil 38a and a secondary coil 38b.

[0112] Replace four electrical switches 41-44, Figure 5A and 5B The power supply circuit 30 depicted includes only a single electrical switch 41, which allows selectively enabling and interrupting the flow of current I from power source 46 through the primary coil 38a of transformer 38 to electrical ground 48.

[0113] Instead of the full-bridge rectifier 50, a single diode 55 is provided between the secondary coil 38b of the transformer 38 and the capacitor 56.

[0114] In such Figure 5A and 5B In the power supply circuit 30 depicted, capacitor 56 can be charged by periodically opening and closing electrical switch 41 to generate electrical pulses in primary coil 38a.

[0115] The electrical pulse generated in the primary coil 38a induces a corresponding electrical pulse in the secondary coil 38b of the transformer 38. Depending on the ratio between the number of windings in the primary and secondary coils 38a and 38b, the voltage of the electrical pulse induced in the secondary coil 38b can be higher or lower than the voltage of the electrical pulse generated in the primary coil 38a. That is, the transformer 38 can be used as a voltage converter.

[0116] The electrical pulses generated in the secondary coil 38b of transformer 38 are half-wave rectified by diode 55, and the rectified electrical pulses are provided to capacitor 56 to gradually charge capacitor 56. Figure 6A The diagram schematically depicts the rectified electrical pulse supplied to capacitor 56.

[0117] Figure 6B The diagram illustrates the voltage U across capacitor 56 as a function of time t. c .

[0118] and Figure 3A and 3B Similar to the embodiment depicted, at least one of the safety controllers 24, 32 is reset and the electronic safety switches 36a, 36b are opened so that no electrical control signal is transmitted via the electronic safety switches 36a, 36b (see [link]). Figure 2 During the period when the voltage U across capacitor 56 is supplied to electronic safety actuator 22, c It can temporarily replace the electrical control signal provided to the electronic safety actuator 22 for disabling the electronic safety actuator 22.

[0119] Figure 7 A schematic circuit diagram of a temporary power supply circuit 30 according to yet another exemplary embodiment of the present invention is depicted.

[0120] Figure 7 The temporary power supply circuit 30 depicted does not include a transformer 38, but only a single inductor 60 or coil electrically coupled to a power source 46 and an electrical ground 48 via two electrical switches 41, 42 that can be controlled by a switch controller 45.

[0121] Capacitor 56 is electrically coupled in parallel with inductor 60, with rectifier diode 55 electrically coupled between one end of inductor 60 and one end of capacitor 56. Electronic safety actuator 22 is electrically coupled in parallel with capacitor 56. Therefore, the voltage U across capacitor 56 is... c It is used as an auxiliary electrical control signal in the electronic safety actuator 22.

[0122] To activate Figure 7 The temporary power supply circuit 30 depicted in the diagram, with switch controller 45 periodically closing and opening two electrical switches 41 and 42, periodically applies the power supply voltage U provided by power source 46 to inductor 60.cc Periodically apply the power supply voltage U to inductor 60. cc This causes inductor 60 to generate an electrical pulse.

[0123] The electrical pulse generated by inductor 60 is rectified by diode 55 and supplied to capacitor 56 to charge capacitor 56. Charging capacitor 56 increases the voltage U across capacitor 56. C The voltage U C It is provided as an auxiliary electrical control signal to the electronic safety actuator 22.

[0124] When the voltage U across capacitor 56 C The predetermined threshold voltage U has been reached, which is sufficient to keep the electronic safety actuator 22 in its deactivated state. th At this time, at least one of the safety processors 25 and 33 can be reset without causing the activation of the electronic safety actuator 22, as previously mentioned. Figure 3A , 3B As described in the embodiments depicted in 5A and 5B.

[0125] Because in such Figure 7 In the temporary power supply circuit 30 according to the exemplary embodiment, as depicted in the figure, the power supply voltage U is... cc In comparison, an electrical pulse may have a higher peak voltage U. peak Therefore, the power supply voltage U cc It can be below the predetermined threshold voltage U th .

[0126] In other words, as in Figure 7 As depicted in the exemplary embodiment, the temporary power supply circuit 30 can act as a DC / DC voltage converter, which allows the capacitor 56 to be charged to a voltage higher than the supply voltage U provided by the power source 46. cc Higher voltage U c .

[0127] If electrical switches 41 and 42 should be permanently closed, for example due to a fault in one of electrical switches 41 and 42 or in switch controller 45, then the voltage U across capacitor 56 C Limited to power supply voltage U cc Therefore, the voltage U across capacitor 56 C The predetermined threshold voltage U will not be reached or exceeded. th .

[0128] therefore, Figure 7 The temporary power supply circuit 30 depicted is fail-safe because it will not permanently disable the electronic safety actuator 22 in the event of such a failure.

[0129] Figure 8 A schematic circuit diagram of a temporary power supply circuit 30 according to another exemplary embodiment of the present invention is depicted.

[0130] Figure 8 The embodiment of the temporary power supply circuit 30 depicted includes a capacitor 56 but no inductor 60. Instead, when electrical switches 41 and 42 are closed, capacitor 56 is powered by the power supply voltage U provided by power source 46. cc Charged via resistor 58.

[0131] exist Figure 7 In the embodiment depicted, capacitor 56 cannot be charged to a voltage U higher than that provided by power source 46. cc Higher voltage U C Therefore, the power supply voltage U cc A voltage higher than the predetermined threshold U is required. th In order to charge capacitor 56 to a level exceeding the threshold voltage U of electronic safety actuator 22. th voltage U c .

[0132] Figure 9 A flowchart is depicted for a method 100 for resetting elevator safety controllers 24, 32 according to an exemplary embodiment of the present invention.

[0133] At the beginning 110 of method 100, elevator system 2 and elevator safety system 26 are in normal operating mode. In normal operating mode, the safety chain of elevator system 2 (not shown) and safety switches 36a and 36b of elevator safety system 26 (see [link to relevant documentation]) are activated. Figure 2 The circuit is closed. Therefore, the electrical control voltage provided by the power supply 28 is supplied to the electronic safety actuator 22 via safety switches 36a and 36b, and the electronic safety actuator 22 is deactivated.

[0134] In the next step 120, the elevator system 2 is brought into a safe state, which allows for the safe reset of at least one elevator safety controller 24, 32 of the elevator safety system 26. Bringing the elevator system 2 into a safe state may include, in particular, stopping the elevator car 6 at one of the landings 8, opening the elevator car door 11 and the corresponding landing door 10 to prevent passengers from being trapped inside the elevator car 6, and disengaging the safety chain of the elevator system 2 to prevent any further operation of the elevator system 2.

[0135] In the next step 130, the temporary power supply circuit 30 is activated by charging the capacitor 56, as previously referenced. Figures 3A to 8 As already described.

[0136] The capacitor 56 is charged to a voltage U across its terminals. C Exceeding the predetermined threshold voltage U required to prevent the electronic safety actuator 22 from being activatedth After the predefined charging state, at least one elevator safety controller 24, 32 is reset in step 140. Resetting at least one elevator safety controller 24, 32 causes at least one of the safety switches 36a, 36b of the elevator safety system 26 to open (see...). Figure 2 Therefore, electrical control signals are not supplied from the power supply 28 of the elevator safety system 26 to the electronic safety actuator 22 via safety switches 36a and 36b.

[0137] However, according to an exemplary embodiment of the present invention, as previously described, the electronic safety actuator 22 is prevented from being activated by the auxiliary electrical control signal temporarily supplied from the capacitor 56 to the electronic safety actuator 22.

[0138] After at least one elevator safety controller 24, 32 has been successfully reset, the two safety switches 36a, 36b of the elevator safety system 26 will close again. Therefore, the electrical control voltage supplied by the power supply 28 is provided as an electrical control signal to the electronic safety actuator 22. This prevents the electronic safety actuator 22 from being activated.

[0139] In the next step 160, the voltage at capacitor 56 of temporary power supply circuit 30 is monitored, and method 100 waits until capacitor 56 has been fully discharged and the voltage at capacitor 56 drops below a predefined threshold.

[0140] After capacitor 56 has been fully discharged and the voltage at capacitor 56 has dropped below a predefined threshold, the safety chain of elevator system 2 is closed in step 170, and elevator system 2 is switched back to normal operation.

[0141] If the voltage at capacitor 56 should not drop below a predefined threshold within a reasonable time period, or if the voltage at capacitor 56 rises above a predefined threshold before the temporary power supply circuit 30 is activated, this indicates a serious and potentially dangerous malfunction of elevator system 2. In this case, the safety chain is opened and remains open to prevent elevator system 2 from operating in normal operating mode.

[0142] While the invention has been described with reference to exemplary embodiments, those skilled in the art will understand that various changes can be made and elements can be substituted with equivalents without departing from the scope of the invention. Furthermore, many modifications can be made to the teachings of the invention to suit specific situations or materials without departing from its essential scope. Therefore, the invention is not intended to be limited to the specific embodiments disclosed, but rather to cover all embodiments within the scope of the appended claims.

[0143] Figure Labels 2. Elevator System 3 Tension members 4 shafts 5. Elevator Drive System 6. Elevator car 7a Floor Station Control Panel 7b Elevator car control panel 8-story station 9 motors 10th floor station door 11. Elevator car door 12-axis 13 Computer Room 14. Elevator car guide rails 15. Elevator controller 16 counterweights 17 drives 19 Counterweight guide rails 20 Elevator brake 22 Safety Actuators 24 First Safety Controller 25 Security Processors 26. Elevator Safety System 28 Power Supply 30 Temporary power supply circuit 32 Second Safety Controller 33 Security Processor Logic circuits 34a and 34b 35. Activate the line Safety switches 36a and 36b 38 Transformer 38A primary coil 38b secondary coil 41 First Electric Switch 42 Second power switch 43 Third power switch 44 Fourth electrical switch 45 Switch Controller 46 Power Supply 48. Electrical grounding 50 Full-bridge rectifier 51-55 diode 56 Capacitors 58 resistor 60 Inductor 62 Decoupling diode.

Claims

1. An elevator safety system (26), comprising: An electronic safety actuator (22) is configured to brake and / or prevent movement of the elevator car (6) in the elevator system (2) when activated, wherein the electronic safety actuator (22) is configured to be activated by interrupting the electrical control signal provided to the electronic safety actuator (22); Safety controllers (24, 32) are configured to deactivate the electronic safety actuator (22) by providing the electrical control signal to the electronic safety actuator (22), and to activate the electronic safety actuator (22) by interrupting the provision of the electrical control signal to the electronic safety actuator (22); and A temporary power supply circuit (30) is configured to be activated by the safety controllers (24, 32) prior to a planned reset of the safety controllers (24, 32) to temporarily provide auxiliary electrical control signals to the electronic safety actuator (22) when the safety controllers (24, 32) are reset, so as to prevent the electronic safety actuator (22) from being activated due to the reset of the safety controllers (24, 32).

2. The elevator safety system (26) according to claim 1, wherein, The temporary power supply circuit (30) is configured to provide the auxiliary electrical control signal to the electronic safety actuator (22) within a predetermined time period ranging from 100ms to 1000ms.

3. The elevator safety system (26) according to claim 1 or 2, wherein, The security controller (24, 32) includes at least one security processor (25, 33), particularly a programmable security processor (25, 33).

4. The elevator safety system (26) according to any one of the preceding claims, wherein, The temporary power supply circuit (30) includes at least one capacitor (56) configured to be charged when the temporary power supply circuit (30) is activated and to provide the auxiliary electrical control signal to the electronic safety actuator (22) when the safety controller (24, 32) is reset.

5. The elevator safety system (26) according to claim 4, wherein, The temporary power supply circuit (30) is configured to charge the at least one capacitor (56) from an auxiliary power supply (46) electrically isolated from the at least one capacitor (56), wherein the at least one capacitor (56) is charged, in particular via a transformer (38).

6. The elevator safety system (26) according to claim 4 or 5, wherein, The at least one capacitor (56) is charged by an electrical pulse supplied to the at least one capacitor (56).

7. The elevator safety system (26) according to any one of the preceding claims, wherein, The temporary power supply circuit (30) includes at least one of an inductor (38a, 39b), a resistor (58), and a diode (51-55), wherein the temporary power supply circuit (30) includes, in particular, a full-bridge rectifier (50) comprising a plurality of diodes (51-54).

8. The elevator safety system (26) according to any one of the preceding claims, wherein, The temporary power supply circuit (30) includes at least one electrical switch (41-44); wherein the temporary power supply circuit (30) specifically includes two electrical switches (41, 42) or four electrical switches (41-44).

9. The elevator safety system (26) according to claim 8, wherein, The electrical switches (41-44) include electromagnetic switches, such as relays, and / or semiconductor switches, such as MOSFETs.

10. The elevator safety system (26) according to claim 8 or 9, wherein, The temporary power supply circuit (30) includes two pairs of electrical switches (41-44); wherein two electrical switches in each pair of electrical switches (41-44) are configured to switch simultaneously with each other; and wherein the electrical switches (41-44) of different pairs of electrical switches (41-44) are configured to switch in opposite directions with each other.

11. The elevator safety system (26) according to any one of the preceding claims, wherein, The temporary power supply circuit (30) includes a voltage converter; in particular a DC / DC voltage converter.

12. An elevator system (2), comprising: At least one elevator car (6) is configured to travel along the shaft (4) between multiple floors (8); At least one electronic safety actuator (22) is configured to brake and / or stop the movement of the at least one elevator car (6) in an emergency; as well as At least one safety system (26) according to any one of the preceding claims is configured to activate the at least one electronic safety actuator (22) in an emergency.

13. A method for resetting the safety controller (24, 32) of an elevator safety system (26) according to any one of claims 1 to 11, wherein the method comprises: (1) Activate the temporary power supply circuit (30); (2) After the temporary power supply circuit (30) has been activated, reset the safety controllers (24, 32); and (3) The auxiliary electrical control signal is provided from the temporary power supply circuit (30) to the electronic safety actuator (22) to prevent the electronic safety actuator (22) from being activated when the safety controller (24, 32) is reset.

14. The method for resetting the security controller (24, 32) according to claim 13, wherein, Activating the temporary power supply circuit (30) includes charging at least one capacitor (56) of the temporary power supply circuit (30).

15. The method for resetting the security controller (24, 32) according to claim 13 or 14, wherein, Activating the temporary power supply circuit (30) includes periodically opening and closing at least one electrical switch (41-44) of the temporary power supply circuit (30).

Images