ELEVATOR

Description

[0001] The invention relates to an elevator according to the preamble of the independent claim.

[0002] During special operating procedures, i.e., in emergencies during commissioning, acceptance testing, inspection, maintenance, and other operating modes deviating from normal operation, it is necessary for qualified personnel to control the elevator. This requires an elevator equipped with appropriate controls for managing its individual functions.

[0003] Utility model DE 29615921 U1 discloses a device for the emergency evacuation of elevator passengers. The device is intended for elevators without a machine room, where the drive unit is located in the shaft. If the elevator car becomes stuck in the shaft, the brake is manually released, and the car is moved to the nearest floor. The brake is actuated from the floor using a Bowden cable. During evacuation, the car moves due to the imbalance between the loaded car and the counterweight, even when the elevator system is de-energized. The device requires only a battery to power a signaling device that indicates the car has reached the evacuation floor.

[0004] US Patent 2017 / 0313548 A1 discloses a rescue device for an elevator. The rescue device comprises a brake control unit with input terminals for connection to a power supply, output terminals for connection to a magnetizing coil of an electromagnetic brake, at least one controllable brake release switch associated with at least one of the input terminals, which in an open state prevents the supply of current from the power supply to the magnetizing coil and in a closed state allows the supply of current from the power supply to the magnetizing coil, a control cable with one or more control signal wires, and a remote control panel for actuating the at least one brake release switch, the remote control panel being coupled to the brake control unit via the control cable.

[0005] WO 2020 / 127982 A1 discloses a method for moving an elevator car to evacuate passengers from the elevator car in the event of a power failure, in which a brake blocks any vertical movement of the elevator car, the method comprising the following steps: applying one or more electrical impulses to the brake of the elevator car to release the brake and allow the elevator car to move vertically, the brake being released as long as the respective electrical impulse is applied to the brake; determining the height traveled by the elevator car while the respective electrical impulse is applied; comparing the determined height traveled with a predetermined distance; and ceasing to apply the respective electrical impulse to the brake when the determined height traveled is equal to or greater than the predetermined distance.

[0006] One disadvantage of the known elevators is that the evacuation is rigidly predetermined by the device.

[0007] The object of the present invention is to create an elevator which avoids the disadvantages of the prior art and in particular to create an elevator in which a choice can be made between a plurality of operating modes.

[0008] The problem is solved by an elevator according to the independent claim.

[0009] According to the invention, the elevator comprises an elevator shaft, a cabin movable within the elevator shaft, a drive for moving the cabin, a brake, preferably designed as a cabin brake, and a safety control unit. The safety control unit has an input for selecting an operating mode. The safety control unit is configured to distinguish at least a first input signal and a second input signal at the input. The elevator further comprises a main switch assembly with a switch. The main switch assembly is accessible from outside the shaft. The main switch assembly and the safety control unit are electrically connected. The switch can be switched from at least a first state to a second state. The safety control unit is configured such that it operates in a first operating mode when the switch is in the first state.The safety control unit is configured to operate in a second mode when the switch is in the second state and the safety control unit detects the first input signal at the input. The safety control unit is configured to operate in a third mode when the switch is in the second state and the safety control unit detects the second input signal at the input.

[0010] It is advantageous that by combining a switch with at least one first and one second state and one first and one second input signal, two different operating modes can be executed in the second state of the switch, depending on the input signal. For example, the first state of the switch, independent of the input signal, can be assigned to normal operation, in which the switch continuously connects a power supply from the building to the elevator. The second state of the switch can be assigned to emergency operation of the elevator, whereby different operating modes of the elevator are activated in the second state based on the detection of a first or second input signal. For example, in the second state of the switch, an operating mode of the elevator that enables a simple evacuation can be executed upon detection of the first input signal.This could, for example, be the elevator's normal state with the switch in the second operating state. In other words, the first signal could be a zero signal, meaning it corresponds to a state where no signal is present at the input. This allows a person to simply flip the switch, that is, to move the switch from the first state to the second state, switching the elevator into an operating mode that enables evacuation within predefined and limited parameters.

[0011] For example, the second operating mode can allow evacuation without additional propulsion energy. During such an evacuation, only an imbalance between the cabin and the counterweight is used to move the cabin.

[0012] The second input signal, which could be a positive voltage signal other than zero, allows the second operating mode to be easily activated without requiring an additional switch position. This enables a service technician, for example, to use a mobile device to inform the elevator control system that they are assisting with the evacuation, meaning they are at the elevator. Upon detecting the technician's presence, the elevator control system can then apply the second signal to the input, thus activating the third operating mode.

[0013] This allows for the provision of a main switch device that enables an untrained person to carry out a simple evacuation without identification, simply by flipping the switch. This eliminates the risk of the person accidentally triggering an evacuation mode requiring specialized knowledge. The elevator thus provides a simple and safe evacuation method for both untrained personnel and qualified personnel. This ensures that the waiting time for potentially trapped individuals is kept to a minimum.

[0014] In a preferred embodiment, the switch can also be switched to a third state. In this third state, the switch interrupts the power supply to the elevator. Preferably, the switch is designed as a rotary switch.

[0015] The main switch device, as described above and below, allows the elevator to be switched from normal operation to evacuation mode and to power-off mode from outside the shaft. This makes it possible to easily select all essential operating modes from a central location.

[0016] Designing the switch as a rotary switch proves advantageous, as a multiple switching states can easily be implemented in a rotary switch.

[0017] In a preferred embodiment, the switch is designed such that the second state is an unstable state.

[0018] Such a switch ensures that the second state, which enables elevator evacuation, is only activated when a person actively selects this state. Accidental remaining in this state is prevented by the switch automatically returning to a different state. This guarantees that the elevator cannot be operated in evacuation mode (i.e., the second operating mode) without a person being in close proximity to the main switch. This enhances elevator safety.

[0019] In a preferred embodiment, the main switch device is openable. The switch can only be changed from one state to another when the main switch device is open. The main switch device is designed so that it can only be opened by an authorized person.

[0020] The main switch device, as described above and below, ensures that to change the operating mode, the main switch device must first be opened by an authorized person before the operating mode can then be changed via the switch. In its closed state, the main switch device thus forms a kind of mechanical lock, preventing any alteration of the operating mode.

[0021] In a preferred embodiment, the main switch device is lockable. When the main switch device is locked, the switch can no longer be operated.

[0022] In a preferred embodiment, in the first operating mode the safety control unit is designed such that the elevator can be operated in normal operation.

[0023] In a preferred embodiment, the safety control unit is configured in a second operating mode to perform an automatic pulsed emergency brake opening (PEBO).

[0024] PEBO is known from the state of the art, e.g. JP2011195270A.

[0025] This feature allows for automatic, pulsed brake release in the second switch position, even without a second input signal. This causes the elevator car to move at a specific speed in a particular direction, depending on the weight distribution within the elevator. The pulsed opening and closing of the brake ensures that even with a significant imbalance, the car does not accelerate excessively. With automatic PEBO (Pulse-Up Brake), the car is automatically locked by a brake upon reaching the next floor, providing a safe position for the evacuation of any passengers who may be trapped inside.

[0026] In this operating mode, an automatic halt to the evacuation can be predefined upon reaching certain thresholds within the elevator system. For example, the evacuation can be stopped when the cabin reaches a specific speed. Furthermore, traveling a certain distance can also trigger a halt to the evacuation. These termination parameters ensure that the evacuation can be carried out safely, even without the presence of a trained technician, and only within clearly defined parameters.

[0027] In a preferred embodiment, the safety control unit is configured in a third operating mode such that the cabin can be moved manually. The cabin is preferably moved using a mobile device operated by an authorized person.

[0028] In this case, an authorized person's mobile device can be used as a first step to generate the second input signal. The mobile device can, for example, establish an NFC connection with the elevator control system or, via the internet and a server of the elevator system, instruct the elevator control system to generate the second input signal. This allows the mobile device to select the third operating mode when the switch is in its second position. Subsequently, in this third operating mode, the authorized person can easily move the elevator car using a GUI on the mobile device. The mobile device can also display the car's position in the shaft, so the authorized person is always aware of the elevator car's position without needing to see into the shaft.This ensures that the authorized person can only enter manual evacuation mode after identification at the safety control unit. At the same time, it enables an efficient, intuitive, and comparatively safer evacuation of the elevator car.

[0029] In a preferred embodiment, the second input signal is applied to the input when the safety control unit detects the presence of an authorized person near the elevator. Otherwise, the first input signal is applied to the input.

[0030] In a preferred embodiment, the presence of an authorized person is detected at least partially based on communication with a mobile device. The mobile device is configured to scan a unique identifier of the elevator. This identifier is preferably accessible for scanning by the mobile device only when the main switch is open.

[0031] This implements a two-stage security concept. A person can only prove their authorization if they first unlock the main switch (e.g., with a key) and then scan the identification using a suitable mobile device (with the appropriate software). In this case, both the mechanical opening of the main switch and the digital reading of the identification are necessary. The identification can be implemented as a barcode or QR code, which is affixed to the inside of a flap on the main switch. This further enhances the safety of the elevator's evacuation procedures.

[0032] In a preferred embodiment, the main switch device further includes a plug for connecting an emergency power supply to the elevator.

[0033] It is possible that in an emergency the building's power supply, which is connected to the elevator via the main switchgear, could fail. A main switchgear, which, as described above and below, has a plug for connecting an emergency power supply to the elevator, allows the building's main power supply to be temporarily replaced by a mobile power supply in such an emergency, so that the elevator can be provided with the necessary power to operate its emergency functions, in particular its evacuation functions.

[0034] Installing this plug in the main switch assembly has the advantage that the authorized person for elevator evacuation can connect the emergency power supply directly to the elevator where they already have to control the evacuation operation. This eliminates time-consuming back-and-forth movement. An emergency power supply can, for example, be a battery.

[0035] In a preferred embodiment, the safety control unit is attached to the cabin. The connection between the main switch device and the safety control unit is preferably a secure, preferably wired, connection.

[0036] A connection can be considered safe if it meets, for example, the standardized Safety Integrity Level 1 (SIL1), preferably SIL2 and especially preferably SIL3 according to IEC 61508 and / or EN81-20 and / or EN81-50.

[0037] A main switch assembly, as described above and below, includes all components that must be accessible from the outside, i.e., outside the shaft, during elevator operation. A safety control unit, which is electrically connected to this main switch assembly, therefore does not need to be accessible. The main switch assembly and its connection to the safety control unit thus allow the safety control unit to be placed in a location where it can perform its otherwise assigned functions particularly efficiently. Since, in a preferred embodiment, the safety control unit also controls the elevator's brakes, which may be designed, for example, as car brakes, and optionally also monitors and controls the safety functions of the car and / or shaft doors, it can be advantageous to mount this safety control unit on the car.Transmission-related delays of signals from safety-relevant sensors to the safety control unit can thus be largely minimized, making the elevator safer.

[0038] In a preferred embodiment, the input is configured to detect a third input signal. The safety control unit is configured to operate in a fourth mode when the switch is in the second state and the safety control unit detects the third input signal at the input. In this fourth mode, the safety control unit is configured to manually release an elevator brake. Preferably, the safety control unit is configured in this fourth mode to manually release the elevator brake via a command received from a mobile device belonging to an authorized person.

[0039] A third input signal allows for a fourth operating mode to be provided in the second switch state, in addition to the second and third operating modes. Thus, three different states, i.e., three different operating modes, can be available in a single switch state based on a digitally generated signal. This enables the elevator's evacuation operation to be divided into three stages. For the second and third stages, further safety precautions can be implemented to identify the person, ensuring that these additional evacuation stages can only be selected by appropriately authorized and trained personnel. This guarantees that the safety-critical evacuation functions can only be performed by appropriately trained staff.This eliminates the need for a complex mechanical switch with multiple locks and locking mechanisms by combining a simple mechanical switch with a suitably designed safety control unit. Furthermore, it prevents a person from unknowingly generating evacuation commands in an incorrect state of the mechanical switch, which could endanger the safety of passengers potentially trapped in the cabin. A notification can be displayed on the person's mobile device before the requested evacuation function is executed, warning them and outlining the consequences of the impending evacuation. This further enhances evacuation safety. Fig. 1: a schematic representation of an elevator, Fig. 2: a schematic representation of a main switch device in an open state in a side view, Fig. 3: the main switch device in an open state in a front view.

[0040] Fig. 1 shows an elevator 2. Part of elevator 2 is shown in a front view, as indicated by the dashed line.

[0041] The elevator 2 comprises a cabin 6, which travels along the shaft 4. The elevator cabin 6 is held by a suspension element, which is, for example, a rope or a belt. At the other end, the suspension element is connected to a counterweight. The suspension element is driven by a drive 8.

[0042] Cabin 6 includes a cabin door for opening and closing access to cabin 6. A safety control unit 12 is also mounted on the cabin. The safety control unit includes an entrance 14. The elevator 2 further includes a cabin brake 10 attached to cabin 6.

[0043] In this embodiment, the elevator 2 comprises three floors 42', 42", 42‴, wherein in Fig. 1 Cabin 6 is on the second, i.e., middle, floor 42" and is just before a stopping position. On the third floor 42‴, there is a person 28 holding a mobile device 32. On this floor 42‴, near the door below the call input device, a main switch 16 is installed.

[0044] The position of cabin 6 shown in the figure, slightly above floor 42, is a position in which cabin 6 has been unintentionally stopped due to an emergency, such as a power outage. Person 28 is a service technician who has come to elevator 2 to move the cabin to floor 42 and evacuate any passengers who may be trapped inside cabin 6.

[0045] Person 28 goes to the third floor (42‴) where the main switch 16 is located. By opening the main switch 16 and flipping the switch 18 located within the main switch 16, and using the mobile device 32, authorized person 28 can move the elevator car 6 in shaft 4. Using the main switch and the mobile device 32, person 28 can do this without needing access to the safety control unit 12 on the car 6 or visual contact with the car 6, as all evacuation-relevant information is displayed on the mobile device 32.

[0046] Fig. 2 The main switch device 16 is shown, which includes a switch 18, designed in this embodiment as a rotary switch 26. The main switch device 16 includes a flap 44, which is located in the Fig. 2 is shown in an open state. The main switch device 16 further includes a plug 36, with which an external emergency power supply can be connected to the elevator 2 (not shown). Fig. 2 It is further evident that the rotary switch can assume 26 different states, with the states being represented by knobs on the rotary switch's dial. The rotary switch's dial can be turned to change the switch's state. A first state 20 is shown on the rotary switch. A second state 22 is also shown.

[0047] The rotary switch 26 is located in Fig. 2 In the third state 24 The rotary switch 26 indicates in the Fig. 2 The illustrated embodiment further includes a fourth state 25.

[0048] Fig. 3 Figure 1 shows the main switch device 16 in a front view. The main switch device 16 is again shown in an open state. The flap 44 is visible, in which a lock 46 is also installed for securely locking the flap 44 in a closed position. The identification 39, which in this embodiment is implemented as a QR code, is also visible on the flap 44. It is derived from the Fig. 3 It is clear that the QR code can only be scanned with the mobile device (not shown) if the flap is in an open position. For this to happen, lock 46 must first be unlocked. Further details are available in Fig. 3 The knob 24 of the rotary switch 26 is visible, with the rotary switch being in this third state represented by the knob 24. Its locking device 50 is formed on the flap 44, which prevents the rotary switch 26 from changing its state when the flap 44 is closed. The plug 36 is also visible, which is located in Fig. 3 in the same state as in Fig. 2 , namely in a retracted state. Switch 26 can, for example, be extended from the main switch assembly with a screwdriver, so that an emergency power supply, such as a battery, can be conveniently connected to plug 36. In Fig. 3The locking device 48 is also visible, which can be folded out by 90°, so that when the flap 44 is closed the locking device protrudes from the flap 44 and by attaching a lock to the locking device 48 the flap 44 can no longer be opened even when the lock 46 is open.

[0049] Finally, it should be noted that terms such as "comprising," "encompassing," etc., do not exclude other elements or steps, and terms such as "a" or "an" do not exclude a plurality. Reference numerals in the claims are not to be considered limiting.

Claims

1. An elevator (2) with - an elevator shaft (4), - a car (6) movable in an elevator shaft (4), - a drive (8) for moving the car (6), - a brake (10) which is preferably designed as a car brake, - a safety control unit (12), wherein the safety control unit (12) has an input (14) for the selection of an operating mode, wherein the safety control unit (12) is designed to distinguish between at least a first input signal and a second input signal at the input (14), - a main switch device (16) comprising a switch (18), wherein the main switch device (16) is accessible from outside the shaft (4), wherein the main switch device (16) and the safety control unit (12) are electrically connected, - wherein the switch (18) is switchable from at least one first state (20) to a second state (22), characterized in that the safety control unit (12) is configured such that it operates in a first operating mode when the switch (18) is switched to the first state (20), in a second operating mode when the switch (18) is switched to the second state (22) and the safety control unit (12) detects the first input signal at the input (14), and in a third operating mode when the switch (18) is switched to the second state (22) and the safety control unit (12) detects the second input signal at the input (14).

2. The elevator (2) according to Claim 1, wherein the switch (18) is further switchable to a third state (24), wherein in the third state (24) the main switch device (16) interrupts a power supply (28) to the elevator (2), wherein the switch (18) is preferably a rotary switch (26).

3. The elevator (2) according to Claim 2, wherein the switch (18) is designed such that the second state (22) is an unstable state.

4. The elevator (2) according to any one of the preceding claims, wherein the main switch device (16) can be opened, wherein the main switch device (16) is designed such that the switch (18) can only be switched from one state to another when the main switch device (16) is open, wherein the main switch device (16) is designed such that only an authorized individual (28) can open it.

5. The elevator (2) according to Claim 4, wherein the main switch device (16) can be locked, wherein when the main switch device (16) is locked, the switch (18) can no longer be switched.

6. The elevator (2) according to any one of the preceding claims, wherein the safety control unit (12) is designed such that in the first operating mode it can operate the elevator (2) in normal operation.

7. The elevator (2) according to any one of the preceding claims, wherein the safety control unit (12) is configured in a second operating mode to perform an automatic pulsed emergency brake opening.

8. The elevator (2) according to any one of the preceding claims, wherein the safety control unit (12) is configured such that in a third operating mode the car (6) can be moved manually, preferably via a mobile device (32) of an authorized individual (28).

9. The elevator (2) according to any one of the preceding claims, wherein the second input signal is applied to the input (14) when the safety control unit (12) detects a presence of an authorized individual (28) in the vicinity of the elevator (2), wherein otherwise the first input signal is applied to the input (14).

10. The elevator (2) according to Claim 9, wherein the presence of an authorized individual (28) is detected based at least in part on the basis of a communication with a mobile device (32) which is configured to scan a unique identification (34) on the elevator (2), wherein the identification is preferably only accessible to be scanned by the mobile device (32) when the main switching device (16) is open.

11. The elevator (2) according to any one of the preceding claims, wherein the main switching device (16) further comprises a plug (36) for connecting an emergency power supply (38) to the elevator (2).

12. The elevator (2) according to any one of the preceding claims, wherein the safety control unit (12) is mounted on the car (6) and wherein the connection between the main switch device (16) and the safety control unit (12) is preferably designed as a secure, preferably wired, connection (40).

13. The elevator (2) according to any one of the preceding claims, wherein the input (14) is configured to detect a third input signal, wherein the safety control unit (12) is configured to operate in a fourth operating mode when the switch (18) is in the second state (22) and the safety control unit (12) detects the third input signal at the input (14), wherein the safety control unit (12) is configured in the fourth operating mode to manually release an elevator brake (10), preferably via a mobile device (32) of an authorized individual (28).