An elevator car accidental movement protection circuit

CN122957706APending Publication Date: 2026-10-23GUANGZHOU CHUOLI TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202610785291.2
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2026-06-02
Publication Date
2026-10-23

AI Technical Summary

Technical Problem

[0003]相关技术中,主流方案是以软件控制为主,通过主控板MCU采集门区传感器信号,经软件逻辑运算判定轿厢意外移动后,再输出软件指令控制继电器断开门锁短接回路,该方案极其依赖MCU的数据处理速度,且需额外配置速度传感器,增加了系统的复杂性

Benefits of technology

[0017]本申请实施例至少包括以下有益效果:本申请提供一种电梯轿厢意外移动保护电路,该方案通过门区信号采集光耦隔离电路和安全控制输出电路基于门区信号控制电梯的门锁短接回路的通断,通过门区信号直接触发硬件逻辑动作,无需依赖MCU执行,响应及时、可靠性高。

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN122957706A_ABST
    Figure CN122957706A_ABST
Patent Text Reader

Abstract

The embodiment of the application provides an elevator car unexpected movement protection circuit, and belongs to the technical field of integrated circuits. The circuit comprises a door area signal acquisition optocoupler isolation circuit and a safety control output circuit. The door area signal acquisition optocoupler isolation circuit is used for receiving a door area signal output by an elevator door area sensor. The door area signal is processed, and a target control signal is output to a secondary side of a first optoelectronic coupler or the safety control output circuit. The safety control output circuit is used for driving a safety relay coil according to the target control signal, so as to control the on-off of a door lock short circuit loop of the elevator. The embodiment of the application can reduce the complexity of the circuit and improve the response speed of safety protection.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of integrated circuit technology, and in particular to a protection circuit for unexpected movement of an elevator car. Background Technology

[0002] Unintended Car Movement Protection (UCMP) is a mandatory requirement in the field of elevator safety control. According to relevant standards, elevators must be able to stop quickly and achieve a safety integrity level of SIL2 when the landing door / car door is not closed and locked, the car is in the door zone and an unexpected movement occurs.

[0003] Among related technologies, the mainstream solution is mainly software control. The main control board MCU collects the door area sensor signals, and after the software logic calculates and determines that the car has moved unexpectedly, it outputs a software command to control the relay to disconnect the door lock short-circuit circuit. This solution is extremely dependent on the data processing speed of the MCU and requires an additional speed sensor, which increases the complexity of the system.

[0004] In summary, the technical problems existing in the relevant technologies need to be improved. Summary of the Invention

[0005] The main objective of this application is to provide an elevator car accidental movement protection circuit that can reduce circuit complexity and improve the response speed of safety protection.

[0006] To achieve the above objectives, one aspect of this application provides an elevator car accidental movement protection circuit. The circuit includes a door zone signal acquisition optocoupler isolation circuit and a safety control output circuit. The safety control output circuit includes a first optocoupler and a control output circuit. The first input terminal of the control output circuit is connected to the first terminal of the secondary side of the first optocoupler. The upper door zone acquisition output terminal of the door zone signal acquisition optocoupler isolation circuit is connected to the second terminal of the secondary side of the first optocoupler. The lower door zone acquisition output terminal of the door zone signal acquisition optocoupler isolation circuit is connected to the second input terminal of the control output circuit. The control output circuit includes a safety relay coil. The door zone signal acquisition optocoupler isolation circuit is used to receive the door zone signal output by the elevator door zone sensor; process the door zone signal, and output the target control signal to the safety control output circuit or the secondary side of the first optocoupler; The safety control output circuit is used to drive the safety relay coil according to the control signal to control the opening and closing of the elevator door lock short-circuit circuit.

[0007] In some embodiments, the gate signal includes an upper gate signal, the target control signal includes a first control signal, the gate signal acquisition optocoupler isolation circuit includes an upper gate acquisition circuit, the upper gate acquisition circuit includes a second optocoupler, a first input circuit and a first output circuit, the first output terminal of the first input circuit serves as the upper gate acquisition output terminal, the second output terminal of the first input circuit is connected to the primary side of the second optocoupler, and the secondary side of the second optocoupler is connected to the first output circuit; The first input circuit is used to receive the upper gate area signal; and to unidirectionally conduct the upper gate area signal through a diode, and output the first control signal; The first input circuit is also used to filter and limit the current of the upper gate area signal and output an optocoupler drive signal; The second optocoupler is used to control the secondary side to be turned on or off in response to the optocoupler drive signal; The first output circuit is used to output a high level or a low level to the main control circuit according to the conduction or cutoff state of the secondary side of the second optocoupler, so as to monitor the upper gate area signal.

[0008] In some embodiments, the gate signal includes a lower gate signal, the target control signal includes a second control signal, the gate signal acquisition optocoupler isolation circuit includes a lower gate acquisition circuit, the lower gate acquisition circuit includes a third optocoupler, a second input circuit and a second output circuit, the first output terminal of the second input circuit serves as the lower gate acquisition output terminal, the second output terminal of the second input circuit is connected to the primary side of the third optocoupler, and the secondary side of the third optocoupler is connected to the second output circuit. The second input circuit is used to receive the lower gate area signal; it uses a diode to unidirectionally conduct the lower gate area signal and outputs the second control signal. The second input circuit is also used to filter and limit the current of the lower gate area signal and output an optocoupler drive signal; The third optocoupler is used to control the secondary side to be turned on or off in response to the optocoupler drive signal; The second output circuit is used to output a high level or a low level to the main control circuit according to the on or off state of the secondary side of the third optocoupler, so as to monitor the lower gate area signal.

[0009] In some embodiments, the circuit further includes a main control circuit, the input terminal of which is connected to the upper gate area monitoring output terminal and the lower gate area monitoring output terminal of the gate area signal acquisition optocoupler isolation circuit, the upper gate area monitoring output terminal being the output terminal of the first output circuit, the lower gate area monitoring output terminal being the output terminal of the second output circuit, and the output terminal of the main control circuit being connected to the second control circuit of the safety control output circuit. The main control circuit is used to determine whether the gate signal is abnormal based on the high or low level output of the optocoupler isolation circuit for gate signal acquisition.

[0010] In some embodiments, the control output circuit further includes a transistor, the first end of the safety relay coil is connected to the lower gate area acquisition output terminal, the second end of the safety relay coil is connected to the collector of the transistor, the base of the transistor is connected to the first end of the secondary side of the first optocoupler, and the emitter of the transistor is connected to the negative power supply terminal. The transistor is used to determine whether to conduct based on the on / off state of the secondary side of the first optocoupler, so as to control the operating state of the safety relay coil.

[0011] In some embodiments, the safety control output circuit further includes a control input circuit, wherein the input terminal of the control input circuit is connected to the output terminal of the main control circuit, and the output terminal of the control input circuit is connected to the primary side of the first optocoupler. The control input circuit is used to receive the enable signal of the safety relay output by the main control circuit; to filter and current limit the enable signal, and to output it to the primary side of the first optocoupler; The first optocoupler is used to control the on / off state of the secondary side of the first optocoupler according to the enabled signal after filtering and current limiting.

[0012] In some embodiments, the circuit further includes a contact feedback detection circuit, the output of which is connected to the main control module, the input of which is connected to a power supply, and a normally closed contact of a safety relay is provided between the output and input of the contact feedback detection circuit. The contact feedback detection circuit is used to respond to the operating state of the safety relay coil, control the opening and closing of the normally closed contact, and feed back an electrical level signal to the main control module to detect the state of the safety relay.

[0013] To achieve the above objectives, another aspect of this application proposes a control method for an elevator car accidental movement protection circuit. The method is applied to the elevator car accidental movement protection circuit described in the above embodiments, and includes: Transmit an enable signal to the control input circuit to control the normally closed contact; Receives the level signal fed back by the contact feedback detection circuit; The status of the safety relay is determined based on the level signal.

[0014] To achieve the above objectives, another aspect of this application provides an electronic device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the method described above.

[0015] To achieve the above objectives, another aspect of the embodiments of this application proposes a computer-readable storage medium storing a computer program that, when executed by a processor, implements the methods described above.

[0016] To achieve the above objectives, another aspect of the embodiments of this application proposes a computer program product, including a computer program that, when executed by a processor, implements the aforementioned method.

[0017] The embodiments of this application include at least the following beneficial effects: This application provides an elevator car accidental movement protection circuit. This solution controls the opening and closing of the elevator door lock short-circuit circuit based on the door zone signal through the door zone signal acquisition optocoupler isolation circuit and the safety control output circuit. The hardware logic action is directly triggered by the door zone signal, without relying on the MCU for execution, and the response is timely and the reliability is high. Attached Figure Description

[0018] Figure 1 This is a schematic diagram of the structure of the elevator car accidental movement protection circuit provided in the embodiment of this application; Figure 2 This is a schematic diagram of the upper area acquisition circuit provided in the embodiment of this application; Figure 3 This is a schematic diagram of the lower area acquisition circuit provided in the embodiment of this application; Figure 4 This is a schematic diagram of the structure of the safety control output circuit provided in the embodiment of this application; Figure 5 This is a schematic diagram of the contact feedback detection circuit provided in the embodiments of this application; Figure 6 This is a schematic diagram of the detection results of the control method for the elevator car accidental movement protection circuit provided in the embodiments of this application; Figure 7 This is a schematic diagram illustrating the principle of the hardware independent disconnection mechanism of the elevator car accidental movement protection circuit provided in this application embodiment. Detailed Implementation

[0019] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of this application and are not intended to limit it. In the following description, when referring to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with those of this application; they are merely examples of apparatuses and methods consistent with some aspects of the embodiments of this application as detailed in the appended claims.

[0020] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of this application only and is not intended to limit this application.

[0021] Before providing a detailed description of the embodiments of this application, some of the nouns and terms involved in the embodiments of this application will be explained first. The nouns and terms involved in the embodiments of this application are subject to the following interpretations.

[0022] UCMP: Unexpected movement protection function for the car; MCU: Microcontroller Unit; DZ1: On-site area photoelectric sensor signal; DZ2: Lower gate area photoelectric sensor signal; Y1~Y6: Safety relay enable signals; K1~K6: Safety relays; K1A~K6A: Safety relay coils, K1A controls K1B and K1C, and so on; K1B~K6B: Normally closed contacts of safety relays; K1C~K6C: Normally open contacts of safety relays; K1_FB~K6_FB: Safety relay contact feedback signals; S1~S6: Door locks; SIL2: Security Integrity Level 2; Door lock short circuit: Elevator door lock contact short circuit; Door zone: The area within the elevator landing door zone; VCC3.3: 3.3V power supply; N24: Negative terminal of 24V power supply.

[0023] Unexpected Car Movement Protection (UCMP) is a mandatory requirement in the field of elevator safety control. According to the relevant standard GB / T 7588.1-2020, the elevator must be able to stop quickly and achieve a safety integrity level of SIL2 when the landing door / car door is not closed and locked, the car is in the door zone and an unexpected movement occurs.

[0024] Among related technologies, the mainstream solution is mainly software control. The main control board MCU collects the door area sensor signals, and after the software logic calculates and determines that the car has moved unexpectedly, it outputs a software command to control the relay to disconnect the door lock short-circuit circuit. This solution is extremely dependent on the data processing speed of the MCU and requires an additional speed sensor, which increases the complexity of the system.

[0025] The door lock short-circuit disconnection of the relevant UCMP relies entirely on the elevator main control board software instructions. From the detection of unexpected car movement and relay action to disconnect the door lock short-circuit circuit, it needs to go through multiple stages such as software data acquisition, logic judgment, instruction output, and signal transmission. If the main control board experiences a single failure such as program crash, system freeze, or software malfunction, it will directly lead to the inability to output the UCMP stop command, the inability to disconnect the door lock short-circuit circuit, and the complete failure of the UCMP protection function, posing a serious safety hazard. The relay does not have a dedicated contact feedback signal and can only be judged indirectly through the coil power supply signal. It cannot truly reflect the actual working state of the relay contacts, and is prone to false fault judgments such as "coil de-energized but contacts stuck / coil energized but contacts open". This causes the relay to fail to disconnect or stick during UCMP protection, which in turn leads to elevator accidents.

[0026] In view of this, this application provides an elevator car accidental movement protection circuit. This solution uses an independent hardware cutoff mechanism. When the car accidental movement causes any signal of the photoelectric sensor in the upper or lower door area to fail, the door lock short-circuit circuit is directly disconnected through hardware without the need for MCU software instruction intervention. This meets the fast response requirements of SIL2 level and solves the problems of high response delay and insufficient safety redundancy caused by software control.

[0027] Figure 1 This is a schematic diagram of the structure of the elevator car accidental movement protection circuit provided in the embodiment of this application. The circuit includes a door zone signal acquisition optocoupler isolation circuit and a safety control output circuit. The safety control output circuit includes a first optocoupler and a control output circuit. The first input terminal of the control output circuit is connected to the first terminal of the secondary side of the first optocoupler. The upper door zone acquisition output terminal of the door zone signal acquisition optocoupler isolation circuit is connected to the second terminal of the secondary side of the first optocoupler. The lower door zone acquisition output terminal of the door zone signal acquisition optocoupler isolation circuit is connected to the second input terminal of the control output circuit. The control output circuit includes a safety relay coil. The door zone signal acquisition optocoupler isolation circuit is used to receive the door zone signal output by the elevator door zone sensor; it processes the door zone signal and outputs the target control signal to the safety control output circuit or the secondary side of the first optocoupler; The safety control output circuit is used to drive the safety relay coil according to the target control signal to control the opening and closing of the elevator door lock short-circuit circuit.

[0028] Specifically, when the car unexpectedly moves out of the door zone while the door is not closed, the DZ1 and DZ2 signals acquired by the door zone signal acquisition circuit become invalid. At this time, the door lock short-circuit relay contacts immediately disconnect (hardware cutoff, no MCU control required), and signal data is sent to the main board via CAN. The hardware logic action is triggered by the door zone signal level change, without relying on MCU execution, resulting in timely response and high reliability.

[0029] In some embodiments, the gate signal includes an upper gate signal, the target control signal includes a first control signal, the gate signal acquisition optocoupler isolation circuit includes an upper gate acquisition circuit, the upper gate acquisition circuit includes a second optocoupler, a first input circuit and a first output circuit, the first output terminal of the first input circuit serves as the upper gate acquisition output terminal, the second output terminal of the first input circuit is connected to the primary side of the second optocoupler, and the secondary side of the second optocoupler is connected to the first output circuit. The first input circuit is used to receive the upper gate area signal; the upper gate area signal is unidirectionally turned on by a diode, and the first control signal is output. The first input circuit is also used to filter and limit the current of the upper gate area signal and output the optocoupler drive signal. The second optocoupler is used to control the secondary side to be turned on or off in response to the optocoupler drive signal; The first output circuit is used to output a high level or a low level to the main control circuit according to the on or off state of the secondary side of the second optocoupler, so as to monitor the upper gate area signal.

[0030] Specifically, the door-to-door data acquisition circuit is as follows: Figure 2As shown, capacitor C33 and bidirectional transient suppression diode TVS3 are connected in parallel to reference ground N24 at DZ1 (the upper gate signal input terminal). After noise filtering and overvoltage protection, the signal is then unidirectionally conducted through diode D14 to prevent reverse current flow and interference. The first output terminal DZ1_1 is the upper gate acquisition output terminal, which is connected to pin 1 of the input side of the second optocoupler U5 through current limiting resistor R49. Reference branch N24 is connected to pin 2 of the primary side of the second optocoupler U5 through current limiting resistor R50. At the same time, resistor R51 and capacitor C34 are connected in parallel across the primary side of the second optocoupler U5 to further stabilize the input level and filter out residual noise. Pin 3 of the secondary side of the second optocoupler U5 is connected to digital ground DGND. Pin 4 is connected to the power supply through pull-up resistor R107 and in parallel with the series branch composed of current limiting resistor R53 and status indicator D29 for intuitive feedback of signal status. On the other hand, it is connected to the power supply through current limiting resistor R52. The isolated output signal DZ1_2 (displayed as a high or low level) is output to the main control circuit. At the same time, a filter capacitor C35 is connected in parallel to DGND at the output terminal to filter out high-frequency interference in the output signal.

[0031] The upper door area photoelectric sensor input signal (upper door area signal) DZ1 and N24 are connected to the primary side of the optocoupler to control the conduction of the optocoupler; the secondary side of the optocoupler, DZ1_2, is input to the MCU to monitor whether the upper and lower door area photoelectric sensor signals are normal. When the optocoupler is on, DZ1_2 outputs a low level; when the optocoupler is off, DZ1_2 outputs VCC3.3.

[0032] In some embodiments, the gate signal includes a lower gate signal, the target control signal includes a second control signal, the gate signal acquisition optocoupler isolation circuit includes a lower gate acquisition circuit, the lower gate acquisition circuit includes a third optocoupler, a second input circuit and a second output circuit, the first output terminal of the second input circuit serves as the lower gate acquisition output terminal, the second output terminal of the second input circuit is connected to the primary side of the third optocoupler, and the secondary side of the third optocoupler is connected to the second output circuit. The second input circuit is used to receive the lower gate area signal; it uses a diode to unidirectionally conduct the lower gate area signal and outputs the second control signal. The second input circuit is also used to filter and limit the current of the lower gate area signal and output the optocoupler drive signal. The third optocoupler is used to control the secondary side to be turned on or off in response to the optocoupler drive signal; The second output circuit is used to output a high or low level to the main control circuit according to the on or off state of the secondary side of the third optocoupler, so as to monitor the lower gate area signal.

[0033] Specifically, please refer to Figure 3The lower gate area acquisition circuit has the same structure and operating principle as the upper gate area acquisition circuit, as detailed in the above embodiment. DZ2 is the lower gate area signal input terminal, and DZ2_1 is the lower gate area acquisition output terminal. The second input circuit and the second output circuit are connected through the primary and secondary sides of the third optocoupler U6, respectively, and finally output to the main control circuit through DZ2_2. The processing of the lower gate area photoelectric sensor signal (lower gate area signal) DZ2_2 is the same as that of the upper gate area signal.

[0034] In some embodiments, the circuit further includes a main control circuit. The input terminal of the main control circuit is connected to the upper gate area monitoring output terminal and the lower gate area monitoring output terminal of the gate area signal acquisition optocoupler isolation circuit, respectively. The upper gate area monitoring output terminal is the output terminal of the first output circuit, and the lower gate area monitoring output terminal is the output terminal of the second output circuit. The output terminal of the main control circuit is connected to the second control circuit of the safety control output circuit. The main control circuit is used to determine whether the gate signal is abnormal based on the high or low level output of the optocoupler isolation circuit of the gate signal acquisition.

[0035] Specifically, the MCU (main control circuit) receives the high and low levels of the upper door zone signal DZ2_1 and the lower door zone signal DZ2_1 to determine whether the photoelectric sensor signals of the upper and lower door zones are normal.

[0036] In some embodiments, the control output circuit further includes a transistor, the first end of the safety relay coil is connected to the lower gate area acquisition output terminal, the second end of the safety relay coil is connected to the collector of the transistor, the base of the transistor is connected to the first end of the secondary side of the first optocoupler, and the emitter of the transistor is connected to the negative power supply. The transistor is used to determine whether to conduct based on the on / off state of the secondary side of the first optocoupler, so as to control the operating state of the safety relay coil.

[0037] In some embodiments, the safety control output circuit further includes a control input circuit, wherein the input terminal of the control input circuit is connected to the output terminal of the main control circuit, and the output terminal of the control input circuit is connected to the primary side of the first optocoupler. The control input circuit is used to receive the enable signal of the safety relay output by the main control circuit; the enable signal is filtered and current-limited, and then output to the primary side of the first optocoupler. The first optocoupler is used to control the on / off state of the secondary side of the first optocoupler according to the enabled signal after filtering and current limiting.

[0038] Specifically, please refer to Figure 4VCC3.3 and Y1 are connected to the primary side of the first optocoupler U7. Y1 is the enable signal output by the MCU (main control circuit). DZ1_1 is connected to the secondary side of the optocoupler, and the optocoupler controls the conduction of the transistor Q5. DZ2_1 is connected to one end of the safety relay coil. When the transistor Q5 is turned on, the other end of the safety relay coil is grounded and the coil is energized.

[0039] Furthermore, the enable signal Y1 is processed by resistors R59 and R60 and capacitor C39, and then connected to pin 2 of the primary side of the first optocoupler U7. Pin 1 of the primary side of the first optocoupler U7 is connected to VCC3.3. Pin 4 (first end) of the secondary side of the first optocoupler U7 receives the upper gate signal DZ2_1, and pin 3 (second end) is connected to the first input terminal of the control output circuit. It is connected to the base of transistor Q5 through current limiting resistor R61. The base is simultaneously connected in parallel with pull-down resistor R62 and filter capacitor C40 to N24. The emitter E of the transistor is connected to N24, and the collector C is connected to the second end of the safety relay coil K1A. The lower gate signal DZ2_1 is connected to the first end of the safety relay coil K1A. A freewheeling diode D18 is connected in parallel across the two ends of the coil. The lower gate signal DZ2_1 is simultaneously connected to the safety relay coil K1A through status indicator D17 and current limiting resistor R63 in series, realizing the working status indication and coil power-off protection.

[0040] In some embodiments, six relays are used to control the door lock. The connection method of the control circuit of safety relays K2-K6 is the same as that of K1. The six relays have the same function: to control the door lock circuit to be short-circuited or disconnected. K1-K2 are used to control the synchronous machine to open the door single, K1-K4 are used to control the synchronous machine to open the door double, K1-K2 and K5-K6 are used to control the asynchronous machine to open the door single, and K1-K6 are used to control the asynchronous machine to open the door double.

[0041] In some embodiments, the circuit further includes a contact feedback detection circuit, the output of which is connected to the main control module, the input of which is connected to a power supply, and a normally closed contact of a safety relay is provided between the output and input of the contact feedback detection circuit. The contact feedback detection circuit is used to respond to the operating state of the safety relay coil, control the opening and closing of the normally closed contacts, and feed back an electrical level signal to the main control module to detect the status of the safety relay.

[0042] Specifically, please refer to Figure 4 The normally closed contact K1B of safety relay K1 outputs the K1_FB feedback signal, and the normally open contact controls the closure of the door lock short-circuit circuit; the connection method of the safety relay contact feedback signals K2_FB-K6_FB is similar. Terminal 3 of the normally open contact KXC is connected in series to jointly control the door lock short-circuit circuit, X is 1-6, and S1 and S2 are the door locks controlled by safety relays K1-K6 respectively.

[0043] This application also proposes a control method for an elevator car accidental movement protection circuit. The method is applied to the elevator car accidental movement protection circuit as described in the above embodiments, and the method may include, but is not limited to, steps S101 to S103: Step S101: Transmit an enable signal to the control input circuit to control the normally closed contact; Step S102: Receive the level signal fed back by the contact feedback detection circuit; Step S103: Determine whether the safety relay is in normal condition based on the level signal.

[0044] In some embodiments, please refer to steps S101 to S103. Figure 6 When the corresponding Y1-Y6 enable signal output of the MCU (main control circuit) is valid, the relay coil is energized, and the corresponding feedback signals K1_FB-K6_FB are pulled low and enter the MCU. If the MCU detects that the corresponding feedback signal is not low, it determines that the relay is in an abnormal state, controls all relays to disconnect, and sends fault data to the main control board.

[0045] When the corresponding Y1-Y6 signal output of the MCU is invalid, the relay coil is de-energized, and the corresponding feedback signals K1_FB-K6_FB are pulled high and enter the MCU. If the MCU detects that a certain signal is not high, it determines that the relay status is abnormal, controls all relays to disconnect, and at the same time outputs the abnormal status data to the main control board via CAN.

[0046] In some embodiments, the hardware-independent cutoff mechanism of the elevator car accidental movement protection circuit in this embodiment is achieved by the linkage between the door zone signal acquisition optocoupler isolation circuit and the safety control output circuit. Hardware logic actions are triggered by door zone signal level transitions, eliminating the need for MCU execution and ensuring timely response and high reliability. For details, please refer to... Figure 7 When the car moves unexpectedly out of the door zone while the door is not closed, the DZ1 and DZ2 signals collected by the door zone signal acquisition circuit become invalid. At this time, the URB02 door lock short-circuit relay contacts immediately disconnect (hardware cut-off, no MCU control required), and at the same time, signal data is sent to the main board via CAN.

[0047] The elevator car accidental movement protection circuit and its control method provided in this embodiment have at least the following beneficial effects: Through the UCMP independent hardware cutoff mechanism, when the car moves unexpectedly and causes any signal from the photoelectric sensor in the upper or lower door area to fail, the door lock short-circuit circuit is directly disconnected through hardware without the need for MCU software instruction intervention. This meets the fast response requirements of SIL2 level and solves the problems of response delay and insufficient safety redundancy caused by software control. A dedicated contact feedback signal acquisition channel (contact feedback detection circuit) for relays is established, and an independent normally closed feedback contact is set for each relay. The MCU compares the acquired contact feedback signal with the output signal of the control relay. Once the relay is found to be in an abnormal state, all relays are immediately controlled to disconnect and a fault signal is output. This solves the problem that relay faults cannot be handled in a timely manner in the existing technology and improves the reliability of UCMP protection.

[0048] This application also provides an electronic device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the above-described method. This electronic device can be any smart terminal, including tablet computers, in-vehicle computers, etc.

[0049] It is understood that the content of the above method embodiments is applicable to this device embodiment. The specific functions implemented by this device embodiment are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0050] This application also provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described method.

[0051] It is understood that the content of the above method embodiments is applicable to this storage medium embodiment. The specific functions implemented in this storage medium embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved in the above method embodiments.

[0052] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described method.

[0053] It is understood that the content of the above method embodiments is applicable to the embodiments of this program product. The specific functions implemented by the embodiments of this program product are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0054] Memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs and non-transitory computer-executable programs. Furthermore, memory may include high-speed random access memory, and may also include non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. In some embodiments, memory may optionally include memory remotely located relative to the processor, and these remote memories can be connected to the processor via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

[0055] The embodiments described in this application are for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and do not constitute a limitation on the technical solutions provided by the embodiments of this application. As those skilled in the art will know, with the evolution of technology and the emergence of new application scenarios, the technical solutions provided by the embodiments of this application are also applicable to similar technical problems.

[0056] Those skilled in the art will understand that the technical solutions shown in the figures do not constitute a limitation on the embodiments of this application, and may include more or fewer steps than shown, or combine certain steps, or different steps.

[0057] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0058] Those skilled in the art will understand that all or some of the steps in the methods disclosed above, as well as the functional modules / units in the systems and devices, can be implemented as software, firmware, hardware, or suitable combinations thereof.

[0059] The terms “first,” “second,” “third,” “fourth,” etc. (if present) in the specification and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms “comprising” and “having,” and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0060] It should be understood that in this application, "at least one (item)" means one or more, and "more than" means two or more. "And / or" is used to describe the relationship between related objects, indicating that three relationships can exist. For example, "A and / or B" can represent three cases: only A exists, only B exists, and both A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0061] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of the units described above is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0062] The units described above as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0063] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0064] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes multiple instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing programs, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0065] The preferred embodiments of the present application have been described above with reference to the accompanying drawings, but this does not limit the scope of the claims of the present application. Any modifications, equivalent substitutions, and improvements made by those skilled in the art without departing from the scope and substance of the embodiments of the present application shall be within the scope of the claims of the present application.

Claims

1. A protection circuit for unexpected movement of an elevator car, characterized in that, The circuit includes a gate signal acquisition optocoupler isolation circuit and a safety control output circuit. The safety control output circuit includes a first optocoupler and a control output circuit. The first input terminal of the control output circuit is connected to the first terminal of the secondary side of the first optocoupler. The upper gate acquisition output terminal of the gate signal acquisition optocoupler isolation circuit is connected to the second terminal of the secondary side of the first optocoupler. The lower gate acquisition output terminal of the gate signal acquisition optocoupler isolation circuit is connected to the second input terminal of the control output circuit. The control output circuit includes a safety relay coil. The door zone signal acquisition optocoupler isolation circuit is used to receive the door zone signal output by the elevator door zone sensor; process the door zone signal, and output the target control signal to the safety control output circuit or the secondary side of the first optocoupler; The safety control output circuit is used to drive the safety relay coil according to the target control signal to control the opening and closing of the elevator door lock short-circuit circuit.

2. The circuit according to claim 1, characterized in that, The gate signal includes an upper gate signal, the target control signal includes a first control signal, the gate signal acquisition optocoupler isolation circuit includes an upper gate acquisition circuit, the upper gate acquisition circuit includes a second optocoupler, a first input circuit and a first output circuit, the first output terminal of the first input circuit serves as the upper gate acquisition output terminal, the second output terminal of the first input circuit is connected to the primary side of the second optocoupler, and the secondary side of the second optocoupler is connected to the first output circuit; The first input circuit is used to receive the upper gate area signal; and to unidirectionally conduct the upper gate area signal through a diode, and output the first control signal; The first input circuit is also used to filter and limit the current of the upper gate area signal and output an optocoupler drive signal; The second optocoupler is used to control the secondary side to be turned on or off in response to the optocoupler drive signal; The first output circuit is used to output a high level or a low level to the main control circuit according to the conduction or cutoff state of the secondary side of the second optocoupler, so as to monitor the upper gate area signal.

3. The circuit according to claim 1, characterized in that, The gate signal includes a lower gate signal, the target control signal includes a second control signal, the gate signal acquisition optocoupler isolation circuit includes a lower gate acquisition circuit, the lower gate acquisition circuit includes a third optocoupler, a second input circuit and a second output circuit, the first output terminal of the second input circuit serves as the lower gate acquisition output terminal, the second output terminal of the second input circuit is connected to the primary side of the third optocoupler, and the secondary side of the third optocoupler is connected to the second output circuit. The second input circuit is used to receive the lower gate area signal; it uses a diode to unidirectionally conduct the lower gate area signal and outputs the second control signal. The second input circuit is also used to filter and limit the current of the lower gate area signal and output an optocoupler drive signal; The third optocoupler is used to control the secondary side to be turned on or off in response to the optocoupler drive signal; The second output circuit is used to output a high level or a low level to the main control circuit according to the conduction or cutoff state of the secondary side of the third optocoupler, so as to monitor the lower gate area signal.

4. The circuit according to claim 1, characterized in that, The circuit also includes a main control circuit. The input terminal of the main control circuit is connected to the upper gate area monitoring output terminal and the lower gate area monitoring output terminal of the gate area signal acquisition optocoupler isolation circuit, respectively. The upper gate area monitoring output terminal is the output terminal of the first output circuit, and the lower gate area monitoring output terminal is the output terminal of the second output circuit. The output terminal of the main control circuit is connected to the second control circuit of the safety control output circuit. The main control circuit is used to determine whether the gate signal is abnormal based on the high or low level output of the optocoupler isolation circuit for gate signal acquisition.

5. The circuit according to claim 1, characterized in that, The control output circuit also includes a transistor. The first end of the safety relay coil is connected to the lower gate area acquisition output terminal, the second end of the safety relay coil is connected to the collector of the transistor, the base of the transistor is connected to the first end of the secondary side of the first optocoupler, and the emitter of the transistor is connected to the negative power supply terminal. The transistor is used to determine whether to conduct based on the on / off state of the secondary side of the first optocoupler, so as to control the operating state of the safety relay coil.

6. The circuit according to claim 1, characterized in that, The safety control output circuit also includes a control input circuit, the input terminal of which is connected to the output terminal of the main control circuit, and the output terminal of which is connected to the primary side of the first optocoupler. The control input circuit is used to receive the enable signal of the safety relay output by the main control circuit; The enable signal is filtered and current-limited, and then output to the primary side of the first optocoupler; The first optocoupler is used to control the on / off state of the secondary side of the first optocoupler according to the enabled signal after filtering and current limiting.

7. The circuit according to claim 1, characterized in that, The circuit also includes a contact feedback detection circuit. The output of the contact feedback detection circuit is connected to the main control module, and the input of the contact feedback detection circuit is connected to the power supply. A normally closed contact of a safety relay is provided between the output and input of the contact feedback detection circuit. The contact feedback detection circuit is used to respond to the operating state of the safety relay coil, control the opening and closing of the normally closed contact, and feed back an electrical level signal to the main control module to detect the state of the safety relay.

8. A control method for an elevator car accidental movement protection circuit, characterized in that, The method is applied to the elevator car accidental movement protection circuit as described in any one of claims 1 to 7, and the method includes: Transmit an enable signal to the control input circuit to control the normally closed contact; Receives the level signal fed back by the contact feedback detection circuit; The status of the safety relay is determined based on the level signal.

9. An electronic device, characterized in that, include: At least one processor; At least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor performs the method as described in claim 8.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it implements the method described in claim 8.