A control system for an electronic safety gear for an elevator

Abstract

The utility model relates to a control system of electronic safety tongs for elevator belongs to elevator safety control technical field, including double MCU control subsystem, it includes main and vice MCU module of working simultaneously, and external trigger signal is inputted to double MCU control subsystem through trigger input module, and double MCU control subsystem controls the working condition of 36V and 12V trigger module according to external trigger signal, and 36V and 12V trigger module controls electronic safety tongs coil power on or power off through safety tongs output port, makes electronic safety tongs action, and trigger detection module detects whether 36V and 12V trigger module are normal work and detects whether the coil of electronic safety tongs has short circuit or open circuit and will detection result feedback to double MCU control subsystem, when input power outage, the power loss keeping module provides the maintaining voltage of preset time length for the coil of electronic safety tongs. The utility model has the advantages of simple structure, high stability, low failure rate etc.

Description

Technical Field

[0001] This utility model relates to the field of elevator safety control technology, and in particular to a control system for an electronic safety clamp for elevators. Background Technology

[0002] With the widespread use of elevators, people's requirements for elevators have gradually expanded from functionality to include comfort, safety, and reliability. As an important safety device, the safety brake effectively protects passengers' lives in the event of elevator malfunction or a fall. Compared to traditional mechanical safety brakes (which rely on speed governors for triggering), the core of electronic safety brakes lies in electronic intelligent control, which can significantly improve braking speed, braking force adjustment capabilities, and fault self-diagnosis functions. Therefore, electronic safety brakes are currently one of the important research directions in elevator safety systems.

[0003] Traditional elevator safety brake control systems generally employ a single MCU control architecture, which carries the risk of single-point failure. A failure of the main controller will directly paralyze the safety brake function, failing to meet the requirements of the EN 81-20 elevator standard. In terms of safety, the electronic safety brake must continue to operate reliably when the elevator loses power; however, traditional battery backup solutions can only maintain braking power for a few seconds, insufficient to cover the full braking requirements of ultra-high-rise elevators (≥10 seconds). Furthermore, existing control systems lack real-time diagnostic capabilities for critical faults such as coil short circuits / open circuits, relying solely on fuses for passive protection. This results in a large fault detection blind spot, severely restricting the reliability of elevator safe operation. Utility Model Content

[0004] Therefore, it is necessary to provide a control system for elevator electronic safety clamps based on a dual MCU redundancy architecture to address the problems of poor stability, insufficient power failure maintenance capability, and blind spots in existing electronic safety clamp control systems. This control system is suitable for rapid and reliable braking of elevators in high-rise elevator safety scenarios when the elevator is overspeeding or experiencing a power failure.

[0005] To solve the above problems, the present invention adopts the following technical solution:

[0006] A control system for an electronic safety gear for elevators includes a dual MCU control subsystem and a 36V trigger module, a 12V trigger module, a trigger detection module, a trigger input module, an alarm module, a safety gear input port, and a power failure retention module, all connected to the dual MCU control subsystem. It also includes a safety gear output port. The dual MCU control subsystem comprises a main MCU module and a secondary MCU module that operate simultaneously. The main MCU module and the secondary MCU module cross-verify instructions via a serial communication interface. When any one of the MCU modules fails, the other MCU module takes over control of the 36V trigger module and the 12V trigger module.

[0007] External trigger signals generated by the elevator main control system or the elevator absolute position measurement system are input to the dual MCU control subsystem through the trigger input module. The dual MCU control subsystem controls the working status of the 36V trigger module and the 12V trigger module according to the external trigger signals. The 36V trigger module and the 12V trigger module control the coil of the electronic safety gear to be energized or de-energized through the safety gear output port, so that the electronic safety gear can be activated. The trigger detection module detects in real time whether the 36V trigger module and the 12V trigger module are working properly and whether the coil of the electronic safety gear is short-circuited or open-circuited, and feeds back the detection results to the dual MCU control subsystem.

[0008] The power failure retention module is connected to the output port of the safety clamp and is used to provide a retention voltage for a preset duration to the coil of the electronic safety clamp under the control of the dual MCU control subsystem when the input power is lost, so that the electronic safety clamp can maintain its operation for a preset duration.

[0009] The dual MCU control subsystem receives the action switch signal from the electronic safety gear via the safety gear input port, determines the coil connection status of the electronic safety gear based on the detection results from the trigger detection module, and controls the alarm module to issue corresponding alarm reminders based on the action switch signal and connection status.

[0010] Compared with the prior art, the present invention has the following beneficial effects:

[0011] The control system for the electronic safety brake for elevators proposed in this invention completely eliminates the risk of single-point failure through the redundancy and mutual verification mechanism of the dual MCU control subsystem. When either the main or auxiliary MCU module fails, the other module can seamlessly take over the control of the 36V trigger module and the 12V trigger module, making the failure rate of the system at the MCU level close to zero. Combined with the design of the power failure holding module, it can still continuously output a holding current to the safety brake output port after the input power is cut off, solving the technical bottleneck of full-stroke braking of ultra-high-rise elevators. At the same time, through the trigger detection module, it can actively detect in real time whether the 36V trigger module and the 12V trigger module are working properly and whether the coil of the electronic safety brake has a short circuit or open circuit, avoiding the existence of fault detection blind spots. It has the advantages of simple structure, high stability and low failure rate. Attached Figure Description

[0012] Figure 1 This is a schematic diagram of the control system of the electronic safety clamp for elevators according to an embodiment of the present invention;

[0013] Figure 2 The circuit diagram of the main MCU module;

[0014] Figure 3 This is the circuit diagram for the secondary MCU module;

[0015] Figure 4 This is a circuit diagram of the communication link for a dual MCU control subsystem.

[0016] Explanation of reference numerals in the attached diagram: 1. Dual MCU control subsystem; 2. 36V trigger module; 3. 12V trigger module; 4. Trigger detection module; 5. Trigger input module; 6. Alarm module; 7. Safety clamp input port; 8. Power failure retention module; 9. Safety clamp output port; 10. 36V DC power supply module; 11. 12V DC power supply module; 12. Overvoltage and undervoltage detection module; 13. Input power supply. Detailed Implementation

[0017] The technical solution of this utility model will now be described in detail with reference to the accompanying drawings and preferred embodiments.

[0018] like Figure 1 As shown, this embodiment provides a control system for an electronic safety clamp for elevators. This control system specifically includes a dual MCU control subsystem 1, a 36V trigger module 2, a 12V trigger module 3, a trigger detection module 4, a trigger input module 5, an alarm module 6, a safety clamp input port 7, a power failure retention module 8, a safety clamp output port 9, and a power supply subsystem. The dual MCU control subsystem 1 is connected to the 36V trigger module 2, the 12V trigger module 3, the trigger detection module 4, the trigger input module 5, the alarm module 6, and the safety clamp input port 7, respectively. In this embodiment, the dual MCU control subsystem 1 includes a main MCU module and a secondary MCU module that operate simultaneously. The main MCU module and the secondary MCU module cross-verify instructions through a serial communication interface. When any one MCU module fails, the other MCU module directly takes over the control of the 36V trigger module 2 and the 12V trigger module 3, controlling their operating state (triggered or non-triggered state). Optionally, both the main MCU module and the secondary MCU module in this embodiment can be implemented using GigaDevice's GD32F303VET6 chip, such as... Figure 2 and Figure 3 As shown, the GD32F303VET6 is a high-performance 32-bit microcontroller (MCU) launched by GigaDevice. It boasts advantages such as fast response, high security, multi-ADC synchronous sampling, and support for low-power management. As the core decision-making unit of this control system, it improves the stability and reliability of the control system and reduces the failure rate. Through the redundancy and mutual verification mechanism of the dual MCU control subsystem, the risk of single-point failure is completely eliminated—when either the main or secondary MCU module fails, the other module can seamlessly take over the control of the 36V trigger module and the 12V trigger module, making the system's failure rate at the MCU level approach zero.

[0019] The elevator main control system or elevator absolute position measurement system (e.g., magnetic ruler measurement system) or other system generates an external trigger signal and inputs the external trigger signal to the dual MCU control subsystem 1 through the trigger input module 5. The dual MCU control subsystem 1 controls the 36V trigger module 2 and the 12V trigger module 3 to trigger or not trigger according to the external trigger signal. The 36V trigger module 2 and the 12V trigger module 3 control the coil of the electronic safety clamp to be energized or de-energized through the safety clamp output port 9, so that the electronic safety clamp can move. The safety clamp output port 9 acts like a plug switch to control whether the electromagnet coil on the electronic safety clamp body is energized. The 36V trigger module 2 provides a 36V working voltage to energize the electromagnet coil on the electronic safety clamp body, while the 12V trigger module 3 provides a 12V working voltage after the electromagnet coil on the electronic safety clamp body is energized, so as to maintain the movement of the electronic safety clamp.

[0020] The trigger detection module 4 continuously monitors whether the 36V trigger module 2 and the 12V trigger module 3 are working properly and whether the coil of the electronic safety clamp is short-circuited or open-circuited, and feeds the detection results back to the dual MCU control subsystem 1. The trigger detection module 4 can automatically detect whether the coil of the electronic safety clamp is connected to the control system. For example, the trigger detection module 4 can determine whether the coil of the electronic safety clamp is connected by detecting the current value. If a current value within a reasonable range is detected, it is determined that the coil of the electronic safety clamp is connected. If there is an open circuit (i.e., the current value is zero), it is determined that no coil of the electronic safety clamp is connected. If the short-circuit current far exceeds the threshold, it is determined that the electronic safety clamp is faulty. When the detection result of the trigger detection module 4 is abnormal (open circuit or short circuit), the trigger detection module 4 feeds the detection result back to the dual MCU control subsystem 1. The dual MCU control subsystem 1 controls the alarm module 6 to issue a corresponding alarm, such as by lighting and / or flashing LEDs of different colors.

[0021] The power failure holding module 8 is connected to the safety clamp output port 9. When the input power supply 13 is de-energized, it provides a holding voltage for a preset duration (e.g., 10 to 30 seconds) to the coil of the electronic safety clamp under the control of the dual MCU control subsystem 1, so that the electronic safety clamp maintains the operation for the preset duration and ensures the reliable operation of the electronic safety clamp.

[0022] Optionally, the power failure holding module 8 can employ a supercapacitor energy storage circuit. A 12V DC power supply module 11 charges each supercapacitor connected in series in the supercapacitor energy storage circuit as a backup power source. After a power failure, the dual MCU control subsystem 1 controls the supercapacitor energy storage circuit to operate, supplying power to the coil of the electronic safety clamp through the safety clamp output port 9, thereby providing the required sustaining voltage for the electronic safety clamp. The supercapacitor energy storage circuit includes four supercapacitors connected in series: CF1, CF2, CF3, and CF4.

[0023] The safety gear input port 7 is connected to the electronic safety gear and is used to detect the switch signal of the electronic safety gear action. It sends the action switch signal fed back by the electronic safety gear to the dual MCU control subsystem 1. At the same time, the dual MCU control subsystem 1 determines the connection status of the electronic safety gear coil (normal connection, not connected, fault) based on the detection result fed back by the trigger detection module 4. Then, based on the received action switch signal and the determined connection status of the electronic safety gear coil, it controls the alarm module 6 to give corresponding alarm reminders. For example, the alarm module 6 includes multiple LEDs, which use different colored LEDs to remind users of different types of faults.

[0024] The control system in this embodiment also includes a power supply subsystem, see below. Figure 1 The power supply subsystem includes a 36V DC power supply module 10, a 12V DC power supply module 11, and an overvoltage and undervoltage detection module 12. The 12V DC power supply module 11 converts the input power supply 13 (220VAC power supply) voltage to 12V DC and supplies it to the 36V DC power supply module 10, the 12V trigger module 3, and the overvoltage and undervoltage detection module 12. The 36V DC power supply module 10 converts the 12V DC voltage to 36V DC and supplies it to the 36V trigger module 2. The overvoltage and undervoltage detection module 12 monitors the output voltage of the 12V DC power supply module 11 in real time to see if it exceeds the limit. If it does, it feeds back a voltage abnormality signal to the dual MCU control subsystem 1. The dual MCU control subsystem 1 controls the operating state of the 36V trigger module 2 and the 12V trigger module 3 based on the voltage abnormality signal. The 36V DC power supply module 10 and the 12V DC power supply module 11 form a high-efficiency power chain, and with the real-time monitoring of the overvoltage and undervoltage detection module 12, the voltage fluctuation tolerance is controlled within ±10%.

[0025] Furthermore, the overvoltage and undervoltage detection module 12 is implemented using a voltage comparator LM393. The normal range of the voltage comparator LM393 is set to 12V±10%. When the output voltage of the 12V DC power supply module 11 exceeds this normal range, the overvoltage and undervoltage detection module 12 sends a voltage abnormality signal to the dual MCU control subsystem 1.

[0026] Furthermore, the serial communication interface between the main MCU module and the secondary MCU module can adopt an SPI bus, I... 2 Either C-bus or CAN bus.

[0027] When the main MCU module and the secondary MCU module communicate using the CAN bus, such as Figure 4As shown, the external CAN bus signal is connected via the CAN1 connector, and then passes through a fuse, a common-mode rejection inductor, a bidirectional transient voltage suppressor, and a terminating matching resistor before being input to the TJA1051T bus transceiver, and finally establishes a communication link with the dual MCU control subsystem 1.

[0028] Furthermore, in this embodiment, the dual MCU control subsystem 1 controls the PNP tube through an optocoupler to output the upper and lower leveling control signals, and drives the relay to output the elevator upper and lower limit signals, the elevator upward deceleration signal and the elevator downward deceleration signal for processing by the elevator main control system.

[0029] The control system for the electronic safety brake for elevators proposed in this invention completely eliminates the risk of single-point failure through the redundancy and mutual verification mechanism of the dual MCU control subsystem. When either the main or auxiliary MCU module fails, the other module can seamlessly take over the control of the 36V trigger module and the 12V trigger module, making the failure rate of the system at the MCU level close to zero. Combined with the design of the power failure holding module, it can still continuously output a holding current to the safety brake output port after the input power is cut off, solving the technical bottleneck of full-stroke braking of ultra-high-rise elevators. At the same time, through the trigger detection module, it can actively detect in real time whether the 36V trigger module and the 12V trigger module are working properly and whether the coil of the electronic safety brake has a short circuit or open circuit, avoiding the existence of fault detection blind spots. It has the advantages of simple structure, high stability and low failure rate.

[0030] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0031] The embodiments described above are merely illustrative of several implementations of this utility model, and while the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the utility model patent. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this utility model, and these all fall within the protection scope of this utility model. Therefore, the protection scope of this utility model patent should be determined by the appended claims.

Claims

1. A control system for an electronic safety clamp for elevators, characterized in that, It includes a dual MCU control subsystem (1) and a 36V trigger module (2), a 12V trigger module (3), a trigger detection module (4), a trigger input module (5), an alarm module (6), a safety clamp input port (7), and a power failure retention module (8) connected to the dual MCU control subsystem (1) respectively. It also includes a safety clamp output port (9). The dual MCU control subsystem (1) includes a main MCU module and a secondary MCU module that work simultaneously. The main MCU module and the secondary MCU module cross-verify instructions through a serial communication interface. When any one of the MCU modules fails, the other MCU module takes over the control of the 36V trigger module (2) and the 12V trigger module (3). The external trigger signal generated by the elevator main control system or the elevator absolute position measurement system is input to the dual MCU control subsystem (1) through the trigger input module (5). The dual MCU control subsystem (1) controls the working status of the 36V trigger module (2) and the 12V trigger module (3) according to the external trigger signal. The 36V trigger module (2) and the 12V trigger module (3) control the coil of the electronic safety clamp to be energized or de-energized through the safety clamp output port (9) so that the electronic safety clamp can move. The trigger detection module (4) detects in real time whether the 36V trigger module (2) and the 12V trigger module (3) are working normally and whether the coil of the electronic safety clamp is short-circuited or open-circuited, and feeds back the detection results to the dual MCU control subsystem (1). The power failure holding module (8) is connected to the safety clamp output port (9) and is used to provide a holding voltage for a preset duration to the coil of the electronic safety clamp under the control of the dual MCU control subsystem (1) when the input power supply (13) is de-energized, so that the electronic safety clamp can maintain the action for a preset duration. The dual MCU control subsystem (1) receives the action switch signal fed back by the electronic safety clamp through the safety clamp input port (7), and determines the connection status of the coil of the electronic safety clamp according to the detection result fed back by the trigger detection module (4), and controls the alarm module (6) to perform corresponding alarm reminders according to the action switch signal and the connection status.

2. The control system for an electronic safety clamp for an elevator according to claim 1, characterized in that, It also includes a power supply subsystem, which includes a 36V DC power supply module (10), a 12V DC power supply module (11), and an overvoltage and undervoltage detection module (12). The 12V DC power supply module (11) converts the input power supply (13) voltage into a 12V DC voltage and supplies it to the 36V DC power supply module (10), the 12V trigger module (3), and the overvoltage and undervoltage detection module (12). The 36V DC power supply module (10) converts the 12V DC voltage into a 36V DC voltage and supplies it to the 36V trigger module (2). The overvoltage and undervoltage detection module (12) detects in real time whether the output voltage of the 12V DC power supply module (11) exceeds the limit. If it exceeds the limit, it feeds back a voltage abnormality signal to the dual MCU control subsystem (1). The dual MCU control subsystem (1) controls the working state of the 36V trigger module (2) and the 12V trigger module (3) according to the voltage abnormality signal.

3. The control system for an electronic safety clamp for an elevator according to claim 2, characterized in that, The overvoltage and undervoltage detection module (12) is implemented using a voltage comparator LM393. The normal range of the voltage comparator LM393 is set to 12V±10%. When the output voltage of the 12V DC power supply module (11) exceeds this normal range, the overvoltage and undervoltage detection module (12) sends a voltage abnormality signal to the dual MCU control subsystem (1).

4. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that, The power failure retention module (8) uses a supercapacitor energy storage circuit. The supercapacitor connected in series in the supercapacitor energy storage circuit is charged by the 12V DC power supply module (11) as a backup power supply. After the power is cut off, the supercapacitor supplies power to the coil of the electronic safety clamp through the safety clamp output port (9).

5. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that, Both the main MCU module and the secondary MCU module are implemented using GigaDevice's GD32F303VET6 chip.

6. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that, The serial communication interface is an SPI bus, I... 2 Either C-bus or CAN bus.

7. The control system for an electronic safety clamp for an elevator according to claim 6, characterized in that, When using the CAN bus for communication, the external CAN bus signal is connected via the CAN1 connector, and then passes through the fuse element, common mode rejection inductor, bidirectional transient voltage suppressor and terminating matching resistor in sequence before being input to the TJA1051T bus transceiver, and finally establishes a communication link with the dual MCU control subsystem (1).

8. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that, The dual MCU control subsystem (1) outputs the upper and lower leveling control signals to the outside world through the PNP tube controlled by the optocoupler, and outputs the elevator upper and lower limit signals, elevator upward deceleration signals and elevator downward deceleration signals to the outside world through the drive relay.

9. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that, The input power supply (13) is a 220V AC power supply.

10. A control system for an electronic safety clamp for an elevator according to claim 1 or 2, characterized in that, The preset duration is 10 to 30 seconds.

Images