Safety system for an elevator

Abstract

The safety system according to the invention is a safety system for an elevator with a cabin which is moved by a drive along a travel path, comprising a safety circuit for switching off the drive in the event of a safety fault, a brake safety device which is designed to brake and hold the cabin in the event of a safety fault, and a safety device which is designed to monitor at least one system of the elevator to be monitored and, in the event of a safety fault in a system to be monitored, to transmit a safety signal to the safety circuit and the brake safety device, wherein the safety device is designed to transmit the safety signal to the safety circuit in a first step and to the brake safety device in a second step, which is delayed by a certain period of time after transmission to the safety circuit.

Description

[0001] The invention relates to a safety system for an elevator for transmitting a safety signal in the event of a safety event to the safety circuit and the braking device.

[0002] Safety systems of the type mentioned are known from the state of the art, which transmit the safety signal simultaneously to the safety circuit and the braking device.

[0003] The object of the invention is to provide an improved security system of the type mentioned.

[0004] This object is achieved, starting from a security system of the type mentioned above, by a security system according to claim 1. Advantageous embodiments are specified in the further dependent claims.

[0005] The safety system according to the invention is a safety system for an elevator with a car which is moved along a travel route by a drive, with a safety circuit for switching off the drive in the event of a safety event, with a braking gear which is designed to brake and hold the car in the event of a safety event, with a safety device which is designed to monitor at least one system of the elevator to be monitored and to transmit a safety signal to the safety circuit and braking gear in the event of a safety event of a system to be monitored, wherein the safety device is designed to transmit the safety signal to the safety circuit in a first step and to transmit it to the braking gear in a second step, which is delayed by a time period from the transmission to the safety circuit.

[0006] A safety incident is the case of missing, invalid or inadmissible information necessary for the safe operation of the elevator, e.g. a reading error during position detection.

[0007] The safety circuit can be an electrical safety device in accordance with EN 81-20:2020, Chapter 5.1.2.1. If the safety circuit is open, the engine is prevented from starting or the engine is shut down immediately.

[0008] [Objective task] The safety system according to the invention can provide the advantage that a sharp emergency braking by the safety gear can possibly be avoided for the passengers of an elevator car and, under appropriate conditions, the journey can be continued without the lengthy summoning of an elevator technician to release the safety gear.

[0009] Preferably, the safety device is designed to determine the time duration as a function of the speed of the car, in particular the speed of the car when the safety event occurs, and / or a fixed speed, in particular a triggering speed specific to the braking device.

[0010] This can provide the advantage of maximizing the delay while still remaining within the permissible range. This maximizes the aforementioned advantage.

[0011] Preferably, the safety device is designed to transmit the safety signal to the braking device only if the safety case still exists when the time period has elapsed.

[0012] This can have the advantage that emergency braking can be avoided in this case and the above-mentioned advantage is realized.

[0013] Preferably, a first system to be monitored is a position determination system and / or a speed determination system and / or an acceleration determination system for determining the position of the car and / or the speed and / or the acceleration along the travel route.

[0014] Preferably, the safety device is designed to transmit the safety signal to the braking device only if no valid reading of the position has been made by the position determination system during the entire period.

[0015] This can have the advantage that the elevator is not stopped unnecessarily if invalid position data is present for only a negligible period of time.

[0016] Preferably, the safety device is designed to detect the safety case when the positioning system no longer carries out reliable position determination, in particular when four reading errors have occurred in succession.

[0017] This can have the advantage that the elevator is not stopped unnecessarily if invalid position data is present for only a negligible period of time.

[0018] Preferably, the safety controller is designed to transmit a safety signal until the elevator stops and no four reading errors have occurred in a row for at least 10 seconds.

[0019] This can have the advantage that the elevator is not blocked for an unnecessarily long time.

[0020] Preferably, a second system to be monitored is provided which is not a position determination system and the safety control is designed to transmit the safety signal simultaneously to the safety circuit and the braking device in the event of a safety situation in the second system to be monitored.

[0021] This can have the advantage that the behavior of the systems can be designed optimally.

[0022] Further features of the invention are set forth in the drawings.

[0023] The advantages mentioned can also be realized for combinations of features in which they are not mentioned. Overview of the drawings:

[0024] Embodiments of the invention are illustrated in the drawings and explained in more detail below. Like reference numerals in the individual figures denote corresponding elements. They show: Fig. 1Components of the security system Fig. 2Flowchart of the security system Detailed description of the drawings:

[0025] Fig. 1 shows the components of the safety system 10. The safety system comprises a safety device 11, which is connected to the safety circuit 13 via a signal connection 12 and to the safety gear 15 via a signal connection 14, which controls the latter. If the safety device opens the safety circuit 13, this interrupts the car's drive. If the safety device activates the safety gear 15, the elevator is braked to a standstill. The safety gear is a braking device designed to stop the elevator.

[0026] An absolute positioning system 20 is a first system to be monitored. The absolute positioning system 20 is connected to the safety device 11 via the signal connection 21. The safety device 11 monitors the absolute positioning system 20 for the presence of invalid position data and controls the safety circuit and the braking device depending on the presence of valid or invalid position data.

[0027] A second system 30 to be monitored is connected to the safety device 11 via the signal connection 31. The safety device 11 monitors the second system 30 to be monitored for the presence of inadmissible data and controls the safety circuit 12 and the safety gear 15 in a different manner than the absolute position determination system 20 by simultaneously activating or deactivating the safety circuit and the safety gear.

[0028] Fig. 2 shows a flowchart of safety system 10. The process begins with the car moving with the safety circuit (SAC) closed and the safety gear (SCC) deactivated (40). The positioning system (APS) provides position data (41). These are checked for valid or invalid position data (51).

[0029] In the event of invalid position data, a check is made to see whether four consecutive invalid position data items are present (52). If there are no four consecutive invalid position data items, the process returns to the positioning system (41). If four consecutive invalid position data items are present, the safety circuit is opened. A check is then made to see whether a specific time period has elapsed (54). As long as the specific time period has not elapsed, the process returns to the positioning system (41). However, if the specific time period has elapsed, the safety gear (SCC) is activated (55), causing the elevator car to stop.

[0030] If the position data check (51) shows that the position data is valid, the specific time period is determined depending on the current speed and parameters relating to the safety gear, and the start of the time period is started (61). A check is then made to see whether valid position data has been available for at least ten seconds (62). As long as valid position data has not been available for ten seconds continuously, the process returns to the positioning system (41). If valid position data has been available for at least ten seconds, a check is made to see whether the elevator car is stopped (63). If the elevator car is not stopped, the process returns to the positioning system (41). If the elevator car is stopped, the safety circuit is closed again (64). List of reference symbols:

[0031] 10Safety system 11Safety device 12Signal connection 13Safety circuit 14Signal connection 15Safety gear 20Positioning system 21Signal connection 30Second system to be monitored 41Signaling device 40Start of the elevator 41Detection of the position of the elevator 51Check whether valid position data is present 52Check whether invalid position data is present four times in a row 53Opening of the safety circuit 54Check whether the specified time period has elapsed 55Activation of the safety gear 61Calculation and start of the scheduled time period 62Check whether position data has been valid for 10 seconds 63Check whether the elevator is stopped 64Closing the safety circuit

Claims

1. Safety system - for a lift with a car which is moved by a drive along a travel route, - with a safety circuit - for switching off the drive in the event of a safety event, - with a braking gear which is designed - to brake and hold the car in the event of a safety event - with a safety device which is designed - to monitor at least one system of the lift to be monitored - and to transmit a safety signal to the safety circuit and braking gear in the event of a safety event of a system to be monitored, characterized in that - the safety device is designed to - transmit the safety signal - in a first step to the safety circuit and - in a second step, which is delayed by a period of time from the transmission to the safety circuit, to the progressive safety gear.

2. Security system according to one of the preceding claims, characterized by, - the safety device is designed to determine the time period as a function of - the speed of the car, in particular - the speed of the car when the safety event occurs, - and / or a fixed speed, in particular - a triggering speed specific to the safety gear.

3. Security system according to one of the preceding claims, characterized in that - the safety device is designed to transmit the safety signal to the safety gear only if the safety event still exists when the time period has elapsed.

4. Security system according to one of the preceding claims, characterized in that- a first system to be monitored is a position determination system and / or a speed determination system and / or an acceleration determination system - for determining the position and / or the speed and / or the acceleration of the cabin along the travel route.

5. Security system according to claim 4, characterized in that - the safety device is designed to transmit the safety signal to the progressive safety gear only if no valid reading of the position has been made by the positioning system during the entire period.

6. Security system according to one of claims 4 or 5, characterized in that - the safety device is designed to - detect the safety case if - the positioning system no longer carries out reliable position determination, - in particular if four reading errors have occurred in succession.

7. Security system according to one of claims 4 to 6, characterized in that- the safety control is designed to transmit a safety signal until the lift is stopped and no four reading errors have occurred in a row for at least 10 seconds.

8. Security system according to one of claims 4 to 7, characterized in that - a second system to be monitored is provided and - the safety control is designed to transmit the safety signal simultaneously to the safety circuit and the braking device in the event of a safety event in the second system to be monitored.

Images