Elevator control method and apparatus, elevator controller, elevator safety system and elevator

Abstract

An elevator control method and apparatus, an elevator controller, an elevator safety system and an elevator. The method comprises: determining a faulty floor, and determining a safe zone on the basis of the faulty floor; and when the position of a car is within the safe zone, determining a target stopping floor on the basis of the position of the car, a target floor and the safe zone, so as to execute a rescue operation on the basis of the target stopping floor, wherein the target floor is a floor selected by a user.

Description

Elevator control method, device, elevator controller, elevator safety system and elevator

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This disclosure claims priority to Chinese patent application number 2023117410676, filed on December 15, 2023, entitled “Elevator Control Method, Device, Elevator Controller, Elevator Safety System and Elevator,” the entire contents of which are incorporated by reference into this disclosure. Technical Field

[0003] The present disclosure relates to the technical field of elevators, and in particular to an elevator control method, an elevator control device, an elevator controller, a computer-readable storage medium, a computer program, a computer program product, an elevator safety system, and an elevator. Background Art

[0004] In related technologies, during elevator operation, the elevator safety link monitors the status of the landing doors on each floor and, if the landing doors fail to close properly, controls the elevator to an emergency stop to ensure passenger safety. However, triggering this emergency stop can cause passengers to be trapped in the elevator car for extended periods until rescue personnel arrive, reducing the passenger experience.

[0005] Public content

[0006] The present disclosure aims to solve, at least to a certain extent, one of the technical problems in the related art. To this end, the first object of the present disclosure is to provide an elevator control method that, when a fault floor occurs and the elevator car is located within a safe area, performs a rescue operation based on the elevator car position, the target floor, and the safe area. This method can complete passenger rescue in a timely manner while ensuring safety, avoid passengers being trapped in the elevator car for a long time, and improve the passenger riding experience.

[0007] A second object of the present disclosure is to provide a computer-readable storage medium.

[0008] The third objective of the present disclosure is to provide an elevator controller.

[0009] A fourth object of the present disclosure is to provide a computer-readable storage medium.

[0010] A fifth object of the present disclosure is to provide a computer program.

[0011] A sixth object of the present disclosure is to provide a computer program product.

[0012] A seventh objective of the present disclosure is to provide an elevator safety system.

[0013] An eighth object of the present disclosure is to provide an elevator.

[0014] To achieve the above-mentioned purpose, the first embodiment of the present disclosure proposes an elevator control method, which includes: determining the fault floor and determining a safe area based on the fault floor; when the car position is within the safe area, determining the target stop floor based on the car position, the target floor and the safe area, so as to perform a rescue operation based on the target stop floor, wherein the target floor is a floor selected by the user.

[0015] According to the elevator control method of the disclosed embodiment, the faulty floor is first determined, and a safe zone is determined based on the faulty floor. When the car is within the safe zone, a target landing floor is determined based on the car position, the target floor, and the safe zone, and a rescue operation is performed based on the target landing floor, where the target floor is a user-selected floor. Thus, when a faulty floor occurs and the car is within the safe zone, the method combines the car position, the target floor, and the safe zone to perform a rescue operation. This allows for timely passenger rescue while ensuring safety, preventing passengers from being trapped in the elevator car for extended periods of time and improving the passenger experience.

[0016] In addition, the elevator control method according to the above embodiment of the present disclosure may also have the following additional technical features:

[0017] According to an embodiment of the present disclosure, each floor is provided with a hall door lock, and determining the faulty floor includes: obtaining the position of the faulty hall door lock; and determining the faulty floor according to the position of the hall door lock.

[0018] According to one embodiment of the present disclosure, the target stopping floor is determined based on the car position, the target floor and the safety area, including: when the target floor is within the safety area, the target stopping floor is determined based on the positional relationship between the car position and the target floor; when the target floor is outside the safety area, the target stopping floor is determined based on the car position and the safety area.

[0019] According to one embodiment of the present disclosure, the target stopping floor is determined based on the positional relationship between the car position and the target floor, including: when the car position and the target floor are on the same side of the fault floor, the target floor is used as the target stopping floor; when the car position and the target floor are on both sides of the fault floor, the target stopping floor is determined according to the car position and the safety area.

[0020] According to one embodiment of the present disclosure, the elevator control method further includes: controlling the elevator to stop suddenly when the car position is outside the safety area, and determining the target landing floor according to the car position and the safety area, so as to perform rescue operations after the elevator stops suddenly according to the target landing floor.

[0021] According to one embodiment of the present disclosure, the target stopping floor is determined based on the car position and the safety area, including: determining the safety area limit position based on the car position and the safety area, and taking the floor closest to the safety area limit position and within the safety area as the target stopping floor, and the fault floor is not included between the car position and the target stopping floor.

[0022] According to one embodiment of the present disclosure, determining a safe area according to a fault floor includes: obtaining the running speed and braking capacity of the elevator; determining a target safe distance according to the running speed and braking capacity; and determining a safe area based on the target safe distance and the fault floor.

[0023] According to one embodiment of the present disclosure, determining a target safety distance based on running speed and braking capability includes: determining a distance adjustment parameter based on running speed and braking capability; and adjusting a preset safety distance based on the distance adjustment parameter to obtain a target safety distance.

[0024] According to an embodiment of the present disclosure, determining a safe area according to a faulty floor includes: determining the safe area based on the faulty floor and a preset safety distance.

[0025] According to one embodiment of the present disclosure, the elevator control method further includes: adjusting a preset service floor interval of the elevator according to the safety area.

[0026] To achieve the above-mentioned purpose, the second aspect embodiment of the present disclosure proposes an elevator control device, which includes: a first determination module, used to determine the fault floor and determine the safe area based on the fault floor; a second determination module, used to determine the target stop floor based on the car position, the target floor and the safe area when the car position is within the safe area, so as to perform a rescue operation based on the target stop floor, wherein the target floor is a floor selected by the user.

[0027] According to the elevator control device of the disclosed embodiment, a first determination module determines the faulty floor and a safe zone based on the faulty floor. When the car is within the safe zone, a second determination module determines the target landing floor based on the car position, the target floor, and the safe zone, and performs a rescue operation based on the target landing floor, where the target floor is a user-selected floor. Thus, when a faulty floor occurs and the car is within the safe zone, the device performs a rescue operation based on the car position, the target floor, and the safe zone. This allows for timely passenger rescue while ensuring safety, preventing passengers from being trapped in the elevator car for extended periods of time and improving the passenger experience.

[0028] To achieve the above objectives, the third embodiment of the present disclosure proposes an elevator controller, including a memory, a processor, and an elevator control program stored in the memory and executable on the processor. When the processor executes the elevator control program, the elevator control method is implemented.

[0029] According to the elevator controller of the embodiment of the present disclosure, when the processor executes the elevator control program, the above elevator control method is implemented. Based on the above elevator control method, passenger rescue can be completed in a timely manner under the premise of ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, thereby improving the passengers' riding experience.

[0030] To achieve the above-mentioned objectives, a fourth embodiment of the present disclosure proposes a computer-readable storage medium on which an elevator control program is stored. When the elevator control program is executed by a processor, the above-mentioned elevator control method is implemented.

[0031] According to the computer-readable storage medium of the embodiment of the present disclosure, the processor implements the above-mentioned elevator control method when executing the elevator control program. Based on the above-mentioned elevator control method, passenger rescue can be completed in a timely manner under the premise of ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, thereby improving the passengers' riding experience.

[0032] To achieve the above-mentioned purpose, the fifth aspect of the present disclosure proposes a computer program, which includes instructions. When the instructions are executed by a signal processing device, the information processing device executes the above-mentioned elevator control method. Based on the above-mentioned elevator control method, passenger rescue can be completed in a timely manner while ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, thereby improving the passenger riding experience.

[0033] To achieve the above-mentioned objectives, the sixth aspect of the present disclosure proposes a computer program product, including a computer program / instruction, which implements the above-mentioned elevator control method when executed by a processor. Based on the above-mentioned elevator control method, passenger rescue can be completed in a timely manner while ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, thereby improving the passenger riding experience.

[0034] To achieve the above-mentioned purpose, the seventh embodiment of the present disclosure proposes an elevator safety system, which includes: a safety circuit, which includes a plurality of electrical safety switches; a safety device, which is used to detect the working status of the electrical safety switches and generate corresponding status detection signals; a car position detection device, which is used to detect the position of the elevator car; an elevator controller, which is connected to the safety device and the car position detection device, and is used to determine the fault floor according to the status detection signal, and determine the safe area according to the fault floor, and when the car position is within the safe area, determine the target stopping floor according to the car position, the target floor and the safe area, so as to perform rescue operations based on the target stopping floor, wherein the target floor is the floor selected by the user.

[0035] According to the elevator safety system of the disclosed embodiment, the safety circuit includes several electrical safety switches. The operating status of the electrical safety switches is detected by a safety device and a corresponding status detection signal is generated. The elevator car position is detected by a car position detection device. The elevator controller determines the faulty floor based on the status detection signal and determines a safe zone based on the faulty floor. When the car position is within the safe zone, the elevator controller determines the target landing floor based on the car position, the target floor, and the safe zone, and performs a rescue operation based on the target landing floor, wherein the target floor is a user-selected floor. Thus, when a faulty floor occurs and the car position is within the safe zone, the elevator safety system performs a rescue operation based on the car position, the target floor, and the safe zone. This allows for timely passenger rescue while ensuring safety, preventing passengers from being trapped in the elevator car for extended periods of time and improving the passenger experience.

[0036] To achieve the above-mentioned objectives, an eighth embodiment of the present disclosure proposes an elevator, comprising the above-mentioned elevator safety system.

[0037] According to the elevator of the embodiment of the present disclosure, based on the above-mentioned elevator safety system, passenger rescue can be completed in a timely manner under the premise of ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, and improving the passengers' riding experience.

[0038] Additional aspects and advantages of the present disclosure will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0040] FIG1 is a flow chart of an elevator control method according to an embodiment of the present disclosure;

[0041] FIG2 is a circuit diagram 1 of an elevator safety system according to a specific embodiment of the present disclosure;

[0042] FIG3 is a flow chart of an elevator control method according to a specific embodiment of the present disclosure;

[0043] FIG4 is a block diagram of an elevator control device according to an embodiment of the present disclosure;

[0044] FIG5 is a block diagram of an elevator controller according to an embodiment of the present disclosure;

[0045] FIG6 is a block diagram of an elevator safety system according to an embodiment of the present disclosure;

[0046] FIG7 is a second circuit diagram of an elevator safety system according to a specific embodiment of the present disclosure;

[0047] FIG8 is a third circuit diagram of an elevator safety system according to a specific embodiment of the present disclosure;

[0048] FIG9 is a circuit diagram of a state detection circuit according to a specific embodiment of the present disclosure;

[0049] FIG10 is a block diagram of an elevator according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0050] The following describes in detail embodiments of the present disclosure, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present disclosure, and should not be construed as limiting the present disclosure.

[0051] The following describes an elevator control method, an elevator control device, an elevator controller, a computer-readable storage medium, a computer program, a computer program product, an elevator safety system, and an elevator proposed in embodiments of the present disclosure with reference to the accompanying drawings.

[0052] FIG1 is a flowchart of an elevator control method according to an embodiment of the present disclosure.

[0053] As shown in FIG1 , the elevator control method according to an embodiment of the present disclosure may include:

[0054] S1, determine the fault floor and determine the safe area based on the fault floor;

[0055] S2, when the car position is within the safety area, determining the target stop floor according to the car position, the target floor and the safety area, so as to perform a rescue operation according to the target stop floor, wherein the target floor is a floor selected by the user.

[0056] Specifically, fault floors are used to identify floors where the elevator cannot operate normally, such as floors where the hall door cannot open or close normally. For example, a detection unit can be deployed on each floor, and feedback signals from the detection units can be used to determine whether a fault has occurred on the corresponding floor, thereby identifying the faulty floor. The detection units can be implemented as sensors, cameras, contact switches, and other methods, without limitation here.

[0057] The fault floor is divided into safe and unsafe areas. When the elevator car is in the safe area, the safety factor of the elevator operation is considered high, and the elevator can be controlled to continue running, so that the elevator car can be controlled to stop at the corresponding floor, and the car door and the landing door of the corresponding floor can be controlled to open, allowing users to evacuate the car as soon as possible. When the elevator car is in the unsafe area, it is considered that continuing to operate the elevator will pose a major safety hazard and the elevator will be controlled to stop immediately.

[0058] For example, if the elevator service area is floors 1-10 and the fault floor is floor 5, then floors 4-6 are considered unsafe, and floors 1-3 and 5-10 are considered safe. Assuming the elevator car is on the 2nd floor and in the safe area, the car will be controlled to stop at the nearest floor based on its actual direction of travel. For example, if the elevator is traveling upward, the car can be controlled to stop at the 3rd floor, and then the car door and the hall door on the 3rd floor can be controlled to open, allowing users to leave in time.

[0059] In order to improve the user's riding experience, when there is a fault floor and the car is located in a safe area, the target stopping floor is determined based on the car position, the target floor and the safe area. The target stopping floor is the stopping floor for rescue operations. On the premise of ensuring that passengers leave the elevator car as soon as possible, the target stopping floor is ensured to be in a safe area to improve rescue safety. At the same time, combined with the target floor, the target stopping floor can be made as close to the target floor as possible to reduce the distance users need to climb stairs to reach the target floor after leaving the car.

[0060] In one embodiment of the present disclosure, each floor is provided with a hall door lock, and determining the faulty floor includes: obtaining a position of the faulty hall door lock; and determining the faulty floor according to the position of the hall door lock.

[0061] That is to say, the faulty floor is determined according to the status of the hall door locks corresponding to each floor.

[0062] Specifically, as shown in Figure 2, each floor is equipped with a corresponding hall door lock (K_1, K_2, ..., K_n-1, K_n) to monitor the hall door status of the corresponding floor. When the hall door is closed, the hall door lock is in the closed state; when the hall door is open, the hall door lock is in the open state. The hall door lock status is monitored by a hall door device 61. The number of hall door safety devices 61 can be configured according to the number of floors. In Figure 2, one hall door safety device 61 is configured for every six floors, and the hall door lock status of all six floors is monitored by one hall door safety device 61.

[0063] Taking the hall door safety device 61 closest to the pit as an example, one end of the hall door lock K_1 on the first floor, the hall door lock K_2 on the second floor, the hall door lock K_3 on the third floor, the hall door lock K_4 on the fourth floor, the hall door lock K_5 on the fifth floor and the hall door lock K_6 on the sixth floor are all connected to the PWR pin of the hall door safety device 61, which is used for power supply. The other end is respectively connected to the In6, In5, In4, In3, In2 and In1 pins of the hall door safety device 61. The hall door safety device 61 can determine the hall door lock status of each floor according to the receiving level of each pin. For example, when the In1 pin is high, the hall door lock K_6 on the sixth floor is determined to be closed. If the elevator control determines that the hall door on the sixth floor was open at that time, hall door lock K_6 is considered faulty. If the elevator control determines that the hall door on the sixth floor was not open, hall door lock K_6 is considered not faulty. When the In1 pin is high, the hall door lock K_6 on the sixth floor is determined to be open. If the elevator control determines that the hall door on the sixth floor was open at that time, hall door lock K_6 is considered not faulty. If the elevator control determines that the hall door on the sixth floor was not open, hall door lock K_6 is considered faulty. Therefore, if hall door lock K_6 is determined to be faulty, the sixth floor is determined to be a faulty floor based on the installation location of hall door lock K_6.

[0064] In one embodiment of the present disclosure, determining a safe area according to a fault floor includes: obtaining the running speed and braking capacity of the elevator; determining a target safe distance according to the running speed and braking capacity; and determining a safe area based on the target safe distance and the fault floor.

[0065] When the elevator car is within the safe zone, if the elevator is braked according to the preset braking force, the distance between the elevator car's stopping position and the faulty floor meets safety requirements, and operational safety is high. When the elevator car is within the unsafe zone, if the elevator is braked according to the preset braking force, the elevator car may stop close to the faulty floor, or the elevator car may pass the faulty floor during braking, resulting in lower safety. Therefore, to improve elevator operational safety, this embodiment dynamically adjusts the safe zone based on the elevator's braking capacity and operating speed.

[0066] Specifically, to ensure safe elevator operation, the elevator safety system periodically monitors the elevator's braking capacity through a braking detection unit. Braking capacity can be determined based on parameters such as braking distance and braking force. During elevator control, braking capacity can be directly accessed from the elevator safety system and used to determine the elevator's operating speed based on a speed sensor. It is understood that at the same operating speed, greater braking capacity requires a shorter braking distance, while less braking capacity requires a longer braking distance. For the same braking capacity, faster operating speeds require a longer braking distance, while slower operating speeds require a shorter braking distance.

[0067] After determining the elevator's braking capacity and operating speed, the actual braking distance is determined based on these two factors. The target safety distance is then determined based on the actual braking distance. The safety zone is then determined based on the location of the fault floor. For example, if the actual braking distance is 1m, the target safety distance can be determined to be 1.5m. If the height of the fault floor is 10m, the safety zone is between 8.5m and 11.5m.

[0068] In one embodiment of the present disclosure, determining a target safety distance according to the running speed and braking capability includes: determining a distance adjustment parameter according to the running speed and braking capability; and adjusting a preset safety distance based on the distance adjustment parameter to obtain a target safety distance.

[0069] Specifically, in addition to determining the actual braking distance based on operating speed and braking capacity, and then determining the target safety distance based on the actual braking distance, a preset safety distance can also be pre-stored, and a distance adjustment parameter can be determined based on the operating speed and braking capacity determined in real time. The distance adjustment parameter can be a proportional coefficient or a distance value. For example, a relationship table between operating speed, braking capacity, and distance adjustment parameters can be established in advance based on experiments. During the control process, the distance adjustment parameter can be obtained by looking up the table based on the determined operating speed and braking capacity. The preset safety distance can then be adjusted using the distance adjustment parameter, with the adjusted preset safety distance serving as the target safety distance.

[0070] This method automatically corrects the elevator's target safety distance based on the elevator's operating speed and braking capacity, improves controllability, and ensures riding safety.

[0071] In one embodiment of the present disclosure, determining a safe area according to a faulty floor includes: determining the safe area based on the faulty floor and a preset safe distance. That is, determining the safe area with a fixed preset safe distance during elevator control.

[0072] In one embodiment of the present disclosure, the target stopping floor is determined based on the car position, the target floor and the safety area, including: when the target floor is within the safety area, the target stopping floor is determined based on the positional relationship between the car position and the target floor; when the target floor is outside the safety area, the target stopping floor is determined based on the car position and the safety area.

[0073] Specifically, let's take the example of an elevator with service floors 1-20 and a faulty floor on floor 10, and the safe zones being floors 1-8 and 12-20. If the car is in the safe zone and the user's selected target floor is also within the safe zone, the target landing floor is determined based on the car position and the target floor for elevator rescue control. If the car is in the safe zone and the user's selected target floor is outside the safe zone, i.e., in the unsafe zone, the target landing floor is determined based on the car position and the safe zone to ensure the safety of the rescue operation.

[0074] In one embodiment of the present disclosure, the target stopping floor is determined based on the positional relationship between the car position and the target floor, including: when the car position and the target floor are on the same side of the fault floor, the target floor is used as the target stopping floor; when the car position and the target floor are on both sides of the fault floor, the target stopping floor is determined according to the car position and the safety area.

[0075] Specifically, let's take the example where the elevator service floors are 1-20 and the fault floor is 10, and the safe areas are 1-8 and 12-20.

[0076] If the current elevator car is on the 2nd floor and the target floor is the 6th floor, the 6th floor is directly used as the target floor. That is, the elevator is controlled to run to the 6th floor and stop. Then the elevator car door and the 6th floor hall door are controlled to open, allowing the user to leave the elevator car in time. This embodiment completes the user rescue operation and also meets the user's travel needs.

[0077] If the current car position is on the 2nd floor and the target floor is the 15th floor, then running to the target floor will pass the fault floor, which poses a safety risk. Therefore, the target stop floor is determined based on the car position and the safety zone, for example, the target stop floor is determined to be the 3rd floor. Under the premise of controlling the elevator to maintain the current running direction, the target stop floor is placed within the safety zone to ensure passenger safety.

[0078] In one embodiment of the present disclosure, the elevator control method further includes: controlling the elevator to stop suddenly when the car position is outside the safety area, and determining the target stopping floor according to the car position and the safety area, so as to perform rescue operations after the elevator stops suddenly according to the target stopping floor.

[0079] Specifically, let's take the example where the elevator service floors are 1-20 and the fault floor is 10, and the safe areas are 1-8 and 12-20.

[0080] If the elevator is currently on the 9th floor, if the elevator is controlled to continue running or braked according to the preset braking force, the elevator may stop on the faulty floor 10th, or even pass through the faulty floor, posing a significant safety risk. Therefore, if the current elevator position is determined to be outside the safe area, the elevator is controlled to stop suddenly, and rescue operations can be carried out after the elevator stops suddenly.

[0081] In one embodiment of the present disclosure, the target stopping floor is determined based on the car position and the safety area, including: determining the safety area limit position based on the car position and the safety area, and taking the floor closest to the safety area limit position and within the safety area as the target stopping floor, and the fault floor is not included between the car position and the target stopping floor.

[0082] Specifically, let's take the example where the elevator service floors are 1-20 and the fault floor is 10, and the safe areas are 1-8 and 12-20.

[0083] If the current car position is on the 2nd floor and the target floor is the 15th floor, the 8th floor is selected as the target stop floor. If the current car position is on the 9th floor, then after the elevator is emergency stopped, the 8th floor is selected as the target stop floor. If the current car position is on the 10th floor, then the distance between the car position and the two safety zones is equal. In this case, the target stop floor can be determined based on the direction of the elevator before the emergency stop. For example, if the elevator was running upward before the emergency stop, 12th floor is selected as the target stop floor.

[0084] In one embodiment of the present disclosure, the elevator control method further includes: adjusting a preset service floor interval of the elevator according to the safety area.

[0085] That is to say, assuming that the preset service floor range of the elevator is 1-20 floors, if it is determined that the 10th floor is the fault floor and the safe areas are 1-8 floors and 12-20 floors, the preset service floor range of the elevator can be adjusted to 1-8 floors, so that the elevator can operate normally within the safe area.

[0086] As a specific embodiment of the present application, as shown in FIG3 , the elevator control method may include the following steps:

[0087] S301, obtaining the status information of the hall door lock.

[0088] S302: Determine whether a hall door lock is faulty. If so, execute step S303; if not, execute step S301.

[0089] S303: Obtain the location of the faulty hall door lock.

[0090] S304: Determine the faulty floor based on the hall door lock position.

[0091] S305: Obtain the running speed and braking capacity of the elevator.

[0092] S306: Determine the distance adjustment parameter k by looking up a table according to the running speed and the braking capability.

[0093] S307, calculating the target safety distance S=k*S0, where S0 is the preset safety distance.

[0094] S308: Determine a safe area based on the target safety distance S and the fault floor.

[0095] S309: Determine whether the car is in a safe area. If so, proceed to step S310; if not, proceed to step S316.

[0096] S310: Determine whether the target floor is within the safety zone. If so, execute step S311; if not, execute step S312.

[0097] S311, determine whether the car position and the target floor are on the same side of the fault floor. If so, execute step S312; if not, execute step S314.

[0098] S312: Set the target floor as the target stop floor.

[0099] S313: Execute rescue operations according to the target landing floor.

[0100] S314, determining the safety zone limit position according to the car position and the safety zone.

[0101] S315: The floor closest to the limit position of the safety zone and within the safety zone is selected as the target stop floor, and the floor between the car position and the target stop floor does not include the fault floor. Execute step S313.

[0102] S316: Control the elevator to an emergency stop. Execute step S314.

[0103] In addition to identifying the faulty floor using the hall door lock, if an electrical safety switch in the pit or machine room fails, the pit or machine room can also be used as the faulty floor, thereby determining a safe area for rescue operations. For example, if the car is on the 10th floor and the car buffer switch in the pit fails, a rescue operation can be carried out at the nearest level based on the elevator's direction of travel and car position to prevent people from being trapped in an emergency stop. The elevator can also be slowed down based on actual conditions, allowing it to stop at the target floor at a relatively low speed to ensure safe operation.

[0104] In summary, according to the elevator control method of the embodiment of the present disclosure, the faulty floor is first determined, and a safe area is determined based on the faulty floor. When the car is within the safe area, the target landing floor is determined based on the car position, the target floor, and the safe area, and a rescue operation is performed based on the target landing floor, where the target floor is a user-selected floor. Thus, when a faulty floor occurs and the car is within the safe area, the method performs a rescue operation based on the car position, the target floor, and the safe area. This allows for timely passenger rescue while ensuring safety, preventing passengers from being trapped in the elevator car for extended periods of time and improving the passenger experience.

[0105] Corresponding to the above embodiments, the present disclosure also proposes an elevator control device.

[0106] As shown in FIG. 4 , the elevator control device according to the embodiment of the present disclosure may include a first determining module 10 and a second determining module 20 .

[0107] The first determination module 10 is used to determine the fault floor and determine the safe area based on the fault floor. The second determination module 20 is used to determine the target stop floor based on the car position, the target floor, and the safe area when the car position is within the safe area, so as to perform a rescue operation based on the target stop floor, wherein the target floor is a floor selected by the user.

[0108] According to an embodiment of the present disclosure, each floor is provided with a hall door lock, and the first determining module 10 determines the faulty floor, specifically for: obtaining the position of the faulty hall door lock; and determining the faulty floor according to the position of the hall door lock.

[0109] According to one embodiment of the present disclosure, the second determination module 20 determines the target stopping floor based on the car position, the target floor and the safety area, and is specifically used to: when the target floor is within the safety area, determine the target stopping floor based on the positional relationship between the car position and the target floor; when the target floor is outside the safety area, determine the target stopping floor based on the car position and the safety area.

[0110] According to one embodiment of the present disclosure, the second determination module 20 determines the target stopping floor based on the positional relationship between the car position and the target floor, and is specifically used to: when the car position and the target floor are on the same side of the fault floor, use the target floor as the target stopping floor; when the car position and the target floor are on both sides of the fault floor, determine the target stopping floor according to the car position and the safety area.

[0111] According to one embodiment of the present disclosure, the second determination module 20 is also used to: control the elevator to stop suddenly when the car position is outside the safety area, and determine the target stopping floor according to the car position and the safety area, so as to perform rescue operations after the elevator stops suddenly according to the target stopping floor.

[0112] According to one embodiment of the present disclosure, the second determination module 20 determines the target stop floor based on the car position and the safety area, and is specifically used to: determine the limit position of the safety area based on the car position and the safety area, and take the floor closest to the limit position of the safety area and within the safety area as the target stop floor, and the floor between the car position and the target stop floor does not include the fault floor.

[0113] According to one embodiment of the present disclosure, the first determination module 10 determines the safe area according to the fault floor, and is specifically used to: obtain the running speed and braking capacity of the elevator; determine the target safe distance according to the running speed and braking capacity; and determine the safe area based on the target safe distance and the fault floor.

[0114] According to one embodiment of the present disclosure, the first determination module 10 determines the target safety distance based on the running speed and braking ability, and is specifically used to: determine the distance adjustment parameter based on the running speed and braking ability; adjust the preset safety distance based on the distance adjustment parameter to obtain the target safety distance.

[0115] According to an embodiment of the present disclosure, the first determining module 10 determines a safe area according to the fault floor, and is specifically configured to determine the safe area based on the fault floor and a preset safety distance.

[0116] According to one embodiment of the present disclosure, the first determining module 10 is further configured to adjust a preset service floor interval of the elevator according to the safety area.

[0117] It should be noted that for details not disclosed in the elevator control device of the embodiment of the present disclosure, please refer to the details disclosed in the elevator control method of the above embodiment of the present disclosure, and the details will not be repeated here.

[0118] According to the elevator control device of the disclosed embodiment, a first determination module determines the faulty floor and a safe zone based on the faulty floor. When the car is within the safe zone, a second determination module determines the target landing floor based on the car position, the target floor, and the safe zone, and performs a rescue operation based on the target landing floor, where the target floor is a user-selected floor. Thus, when a faulty floor occurs and the car is within the safe zone, the device performs a rescue operation based on the car position, the target floor, and the safe zone. This allows for timely passenger rescue while ensuring safety, preventing passengers from being trapped in the elevator car for extended periods of time and improving the passenger experience.

[0119] Corresponding to the above embodiments, the present disclosure also proposes an elevator controller.

[0120] As shown in Figure 5, the elevator controller 100 of the embodiment of the present disclosure includes a memory 110, a processor 120, and an elevator control program stored in the memory 110 and executable on the processor 120. When the processor 120 executes the elevator control program, the above elevator control method is implemented.

[0121] According to the elevator controller of the embodiment of the present disclosure, when the processor executes the elevator control program, the above elevator control method is implemented. Based on the above elevator control method, passenger rescue can be completed in a timely manner under the premise of ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, thereby improving the passengers' riding experience.

[0122] Corresponding to the above embodiments, the present disclosure also proposes a computer-readable storage medium.

[0123] The computer-readable storage medium of the embodiment of the present disclosure stores an elevator control program thereon, and the elevator control program implements the above-mentioned elevator control method when executed by a processor.

[0124] According to the computer-readable storage medium of the embodiment of the present disclosure, the processor implements the above-mentioned elevator control method when executing the elevator control program. Based on the above-mentioned elevator control method, passenger rescue can be completed in a timely manner under the premise of ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, thereby improving the passengers' riding experience.

[0125] A computer program according to an embodiment of the present disclosure includes instructions. When the instructions are executed by a signal processing device, the signal processing device is caused to execute the above-mentioned elevator control method. Based on the above-mentioned elevator control method, passenger rescue can be completed in a timely manner while ensuring safety, thereby avoiding the situation where passengers are trapped in the elevator car for a long time and improving the passenger riding experience.

[0126] A computer program product according to an embodiment of the present disclosure includes a computer program / instructions. When executed by a processor, the computer program / instructions implement the aforementioned elevator control method. Based on the aforementioned elevator control method, passenger rescue can be completed promptly while ensuring safety, preventing passengers from being trapped in the elevator car for extended periods of time, thereby improving the passenger experience. Corresponding to the aforementioned embodiment, the present disclosure also provides an elevator safety system.

[0127] As shown in FIG6 , the elevator safety system according to the embodiment of the present disclosure includes: a safety circuit 50 , a safety device 60 , a car position detection device 70 and the above-mentioned elevator controller 80 .

[0128] The safety circuit 50 includes several electrical safety switches 51. A safety device 60 is used to detect the operating status of the electrical safety switches 51 and generate corresponding status detection signals. A car position detection device 70 is used to detect the position of the elevator car. An elevator controller 80 is connected to the safety device 60 and the car position detection device 70. The elevator controller 80 is used to determine the faulty floor based on the status detection signals, determine a safe zone based on the faulty floor, and, when the car is within the safe zone, determine a target landing floor based on the car position, the target floor, and the safe zone, so as to perform a rescue operation based on the target landing floor, where the target floor is a user-selected floor.

[0129] Specifically, the elevator safety system of this embodiment is described below with reference to FIG. 2 and FIG. 6 to FIG. 9 .

[0130] A plurality of electrical safety switches 51 are arranged in the elevator safety system. The elevator safety system implements safety monitoring and control of the elevator based on status detection of the electrical safety switches.

[0131] In related technologies, all electrical safety switches in an elevator are connected in series to form a safety circuit that controls the power supply to the elevator's main drive unit and brakes. Because the electrical safety switches are located in the machine room, hoistway, hall door, car roof, and pit, the entire elevator's safety circuit is very long. For an elevator with a hoist height of 100 meters, the safety circuit will be 1,000 meters or even longer. The power supply voltage for the safety circuit is typically 220Vac AC or 110Vac generated by a transformer. Long safety circuits can introduce problems such as circuit interference, circuit voltage drop, circuit diameter, and excessive circuit resistance due to aging door lock contacts. Furthermore, with long-term use, aging of the elevator can cause the safety circuit to become unstable, further reducing the elevator's safety performance.

[0132] In the elevator safety system of the embodiment of the present application, the safety device 60 includes a hall door safety device 61, a pit safety device 62, a car top safety device 63 and a machine room safety device 64. The number of hall door safety devices 61 can be configured according to the number of floors the elevator operates. For example, when the elevator serves 20 floors, four hall door safety devices 61 can be set, each hall door safety device 61 is responsible for detecting the hall door locks of five floors. The electrical safety switch 51 is connected to the hall door safety device 61, the pit safety device 62, the car top safety device 63, and the machine room safety device 64 according to the installation location of the electrical safety switch 51. Each electrical safety switch 51 is connected to the corresponding safety device 60 via I / O to monitor the switch status. Combined with a programmable electronic system, the hall door safety device 61, the pit safety device 62, and the car top safety device 63 send the monitored status of the electrical safety switch 51 to the machine room safety device 64 via a bus (such as a safety bus such as CAN / 485). At this point, the status of the electrical safety switch 51 of the entire elevator is summarized in the machine room safety device 64. The machine room safety device 64, in conjunction with the operating instructions of the elevator controller 80, connects the safety relays K1 and K2 via the Control pin to control the power supply to the elevator's drive unit and brake. This embodiment thus simplifies the physical connection complexity of the safety loop 50, shortens the path of the safety loop 50, and simultaneously reduces the problem of excessive line impedance and the impedance fluctuation caused by grid voltage fluctuations on the loop impedance.

[0133] It is understood that each safety device 60 is provided with a state detection circuit and a control module for detecting the switch state of the electrical safety switch 51. To improve state detection accuracy, multiple detection units can be arranged in each state detection circuit. These multiple detection units detect the state of an electrical safety switch 51 and output detection feedback signals respectively. The control module within the corresponding safety device 60 determines the current state of the electrical safety switch 51 based on the multiple detection feedback signals, thereby improving detection accuracy. For example, if multiple detection feedback signals from the same electrical safety switch 51 are identical, the current state of the electrical safety switch 51 can be determined based on the detection feedback signals. If multiple detection feedback signals from the same electrical safety switch 51 are different, the electrical safety switch 51 can be directly deemed to be faulty, or a detection fault signal can be fed back.

[0134] For example, the status detection circuit for hall door lock K_1 is shown in Figure 9. The PWR pin of hall door security device 61 is used to provide power supply VCC. One end of hall door lock K_1 is connected to power supply VCC via the PWR pin, and the other end is connected to the In6 pin to access the status detection circuit. This status detection circuit includes two detection units, each with an identical circuit consisting of resistor R1, resistor R2, Zener diode D1, comparator A1, and isolation optocoupler U1. The output end of isolation optocoupler U1 is used to output a detection feedback signal.

[0135] This embodiment uses a voltage comparison circuit to monitor the status of the hall door lock K_1. When the hall door lock K_1 is in the closed phase, VCC is divided by the hall door lock K_1 and resistor R1, and a first divided voltage is output to the positive input of comparator A1. Resistor R2 and Zener diode D1 output voltage Vref to the negative input of comparator A2. When the voltage at the positive input of comparator A1 is greater than the voltage at the negative input of comparator A2, comparator A1 outputs a high level, driving the isolation optocoupler U1 to output a high-level detection feedback signal.

[0136] It should be noted that the parameters of the electrical components in Figure 9 can be selected based on actual conditions to ensure that when the hall door lock K_1 is closed, comparator A1 outputs a high level, driving the isolation optocoupler U1 to operate and output a high-level detection feedback signal. At this point, comparator A1 only outputs a low level when the hall door lock K_1 is open, and the detection feedback signal is low, indicating that the hall door lock K_1 is open. This circuit significantly reduces the elevator safety system's requirements for the hall door lock contacts, improves the elevator electronic control system's adaptability to the environment, and avoids the state detection errors caused by excessive hall door lock contact resistance in related technologies.

[0137] The control module of the hall door safety device 61 determines the current state of the hall door lock K_1 based on the two received detection feedback signals. For example, if the detection feedback signals from both detection units are high, the hall door lock K_1 is considered to be in the closed state; if the detection feedback signals from both detection units are low, the hall door lock K_1 is considered to be in the open state. If the detection feedback signals from one detection unit are high and the other are low, since the current state of the hall door lock K_1 cannot be determined, the hall door lock K_1 is directly considered to be faulty, or a detection fault signal may be fed back.

[0138] It is understood that Figure 9 can also be used to monitor the status of other electrical safety switches 51. For example, the pit safety device 62 includes the buffer electrical safety switch, limit switch, auxiliary emergency stop switch, pit door switch, pit ladder switch, speed limiter tensioning device switch, absolute position magnetic strip tensioning device switch, pit platform switch, etc.; the car top safety device 63 includes the safety clamp electrical safety switch, limit switch, car top emergency stop switch, auxiliary emergency stop switch, safety window switch, car lock switch, etc.; the machine room safety device 64 includes the speed limiter electrical safety switch, limit switch, control cabinet emergency stop switch, auxiliary emergency stop switch, turning handwheel switch, rope clamp switch, and traction machine protective cover switch.

[0139] It should be further explained that the electrical safety switches 51 of the pit safety device 62, the car top safety device 63, and the machine room safety device 64 can refer to the arrangement of the hall door locks, that is, one-to-one monitoring as shown in Figures 7 and 8, that is, the status of each electrical safety switch 51 is detected through the In pin; the electrical safety switches can also be grouped according to whether they are bypassed by the emergency electric switch. As shown in Figure 2, the electrical safety switches that can be bypassed by the emergency electric switch are connected in series, and the electrical safety switches that cannot be bypassed by the emergency electric switch are connected in series. The PWR pin and In pin of the corresponding safety device are respectively connected to the two ends of the series branch to detect the status of the electrical safety switch.

[0140] When the elevator starts operating normally, each safety module 60 monitors the status of the corresponding electrical safety switch 51 and transmits the status of each electrical safety switch 51 to the machine room safety device 64 via the safety bus. The machine room safety device 64 receives the operating status of all electrical safety switches 51 and, if all electrical safety switches 51 are closed, determines that the safety circuit 50 is normal. It then transmits the status of the safety circuit 50 to the elevator controller 80 via communication. The elevator controller 80 issues a start command to the machine room safety module 64, which then closes the output safety relays K1 and K2. Safety relays K1 and K2 act as control main contactors to control the power supply to the hoisting machine and brake. During normal elevator operation, if an electrical safety switch 51 disconnects, the disconnect status of the electrical safety switch 51 is immediately transmitted to the machine room safety device 64 via the safety bus. The machine room safety device 64 immediately disconnects the power supply to the output safety relays, thereby safely shutting off the power supply to the hoisting machine and brake, meeting the safety design requirements of elevator standards.

[0141] In addition, the elevator safety system can also bypass the corresponding hall door locks and the elevator car's car door locks by operating the floor door bypass device and car door bypass device connected to the machine room safety device 64. Specifically, because the hall door locks are independently monitored, maintenance personnel can bypass problematic hall door locks when operating the hall door lock bypass device. At this time, other intact hall door locks are still monitored. If a sudden disconnection occurs during operation, the elevator can be safely stopped. Correspondingly, because the car door locks are independently monitored, maintenance personnel can also bypass problematic car door locks when operating the car door lock bypass device.

[0142] In the embodiment where each electrical safety switch 51 located in the machine room, pit, and car roof is independently monitored (as shown in Figures 7 and 8), during emergency electric operation, the electrical safety switch 51 can be specifically bypassed. For example, during a test operation, the tested electrical safety switch 51 can be specifically bypassed, allowing the other electrical safety switches 51 to remain in the monitoring state, thereby improving operational safety. In addition, the car position detection device 70 uses an absolute safety hoistway position sensor to monitor the car position in real time, improving monitoring accuracy.

[0143] In the embodiment shown in Figure 8, the elevator safety system operates within the elevator group control system. Based on the destination floor selection system 90, the elevator safety system can exclude a faulty hall door lock from the service floors of the corresponding staircase, allowing the elevator to continue serving customers. For example, in this system, which includes elevators A and B, if the hall door lock on the 29th floor of elevator A fails, the 29th floor will be excluded from elevator A's service floor range.

[0144] According to the elevator safety system of the embodiment of the present disclosure, the safety circuit includes several electrical safety switches. The working status of the electrical safety switches is detected by the safety device, and a corresponding status detection signal is generated. The position of the elevator car is detected by the car position detection device. The elevator controller can determine the fault floor according to the status detection signal, and determine the safe area according to the fault floor. When the car position is within the safe area, the elevator controller determines the target stop floor according to the car position, the target floor and the safe area, so as to perform a rescue operation based on the target stop floor, wherein the target floor is the floor selected by the user. Therefore, when a fault floor occurs and the car position is within the safe area, the elevator safety system performs a rescue operation in combination with the car position, the target floor and the safe area. Passenger rescue can be completed in a timely manner under the premise of ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, and improving the passenger riding experience. In addition, the elevator safety system can also report the fault to the operation and maintenance center synchronously, shortening the response time of maintenance.

[0145] Corresponding to the above embodiments, the present disclosure also proposes an elevator.

[0146] As shown in FIG. 10 , the elevator 200 according to the embodiment of the present disclosure includes the elevator safety system 210 described above.

[0147] According to the elevator of the embodiment of the present disclosure, based on the above-mentioned elevator safety system, passenger rescue can be completed in a timely manner under the premise of ensuring safety, avoiding the situation where passengers are trapped in the elevator car for a long time, and improving the passengers' riding experience.

[0148] It should be noted that the logic and / or steps represented in the flowcharts or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing the logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (e.g., a computer-based system, a system including a processor, or other system that can fetch and execute instructions from an instruction execution system, apparatus, or device). For purposes of this specification, a "computer-readable medium" can be any device that can contain, store, communicate, propagate, or transport a program for use by, or in conjunction with, an instruction execution system, apparatus, or device. More specific examples (non-exhaustive list) of computer-readable media include the following: an electrical connection with one or more wires (electronic device), a portable computer disk cartridge (magnetic device), random access memory (RAM), read-only memory (ROM), erasable and programmable read-only memory (EPROM or flash memory), fiber optic devices, and portable compact disc read-only memory (CDROM). Furthermore, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or otherwise processing it in a suitable manner if necessary, and then storing it in a computer memory.

[0149] It should be understood that various parts of the present disclosure can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented using hardware, as in another embodiment, any one of the following technologies known in the art or a combination thereof can be used to implement: a discrete logic circuit having a logic gate circuit for implementing a logic function on a data signal, an application-specific integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0150] Throughout this specification, reference to terms such as "one embodiment," "some embodiments," "examples," "specific examples," or "some examples" means that a specific feature, structure, material, or characteristic described in conjunction with that embodiment or example is included in at least one embodiment or example of the present disclosure. In this specification, schematic representations of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

[0151] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features being referred to. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one such feature. Throughout the present disclosure, "plurality" means at least two, such as two, three, etc., unless otherwise specifically defined.

[0152] In this disclosure, unless otherwise expressly specified or limited, terms such as "installed," "connected," "connect," and "fixed" should be understood in a broad sense. For example, they may refer to fixed connections, detachable connections, or integration; mechanical connections or electrical connections; direct connections or indirect connections through an intermediate medium; and internal communication between two components or interaction between two components, unless otherwise expressly limited. Those skilled in the art will understand the specific meanings of the above terms in this disclosure based on specific circumstances.

[0153] Although the embodiments of the present disclosure have been shown and described above, it is understood that the above embodiments are illustrative and are not to be construed as limitations on the present disclosure. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present disclosure.

Claims

1. An elevator control method, the method comprising: Determine the faulty floor, and determine the safe area based on the faulty floor; When the car position is within the safety area, a target stop floor is determined according to the car position, the target floor and the safety area, so as to perform a rescue operation according to the target stop floor, wherein the target floor is a floor selected by the user.

2. The method according to claim 1, wherein: Each floor is equipped with a hall door lock. The process of determining the faulty floor includes: Get the location of the failed hall door lock; The faulty floor is determined according to the hall door lock position.

3. The method according to claim 1 or 2, wherein: The step of determining the target stop floor according to the car position, the target floor and the safety area comprises: When the target floor is within the safety area, determining the target stop floor based on the positional relationship between the car position and the target floor; When the target floor is outside the safety area, the target stopping floor is determined according to the car position and the safety area.

4. The method according to claim 3, wherein: The determining the target stop floor based on the positional relationship between the car position and the target floor comprises: When the car position and the target floor are on the same side of the fault floor, taking the target floor as the target stop floor; When the car position and the target floor are on both sides of the fault floor, the target stop floor is determined according to the car position and the safety area.

5. The method according to any one of claims 1 to 4, wherein: The method further comprises: When the car position is outside the safety area, the elevator is controlled to stop urgently, and the target stopping floor is determined according to the car position and the safety area, so as to perform a rescue operation after the elevator stops urgently according to the target stopping floor.

6. The method according to any one of claims 3 to 5, wherein: The step of determining the target stop floor according to the car position and the safety area comprises: The safety zone limit position is determined according to the car position and the safety zone, and the floor closest to the safety zone limit position and within the safety zone is used as the target stop floor, and the fault floor is not included between the car position and the target stop floor.

7. The method according to any one of claims 1 to 6, wherein: The determining of the safe area according to the faulty floor comprises: Obtaining the running speed and braking capacity of the elevator; determining a target safety distance according to the running speed and the braking capacity; The safety area is determined based on the target safety distance and the fault floor.

8. The method according to claim 7, wherein: The step of determining the target safety distance according to the running speed and the braking capability includes: determining a distance adjustment parameter according to the running speed and the braking capacity; The preset safety distance is adjusted based on the distance adjustment parameter to obtain the target safety distance.

9. The elevator control method according to any one of claims 1 to 8, wherein: The determining of the safe area according to the faulty floor comprises: The safety area is determined based on the fault floor and a preset safety distance.

10. The elevator control method according to any one of claims 1 to 9, wherein: The method further comprises: The preset service floor interval of the elevator is adjusted according to the safety area.

11. An elevator control device, comprising: A first determination module is used to determine a faulty floor and determine a safe area according to the faulty floor; The second determination module is used to determine a target stop floor according to the car position, the target floor and the safety area when the car position is within the safety area, so as to perform a rescue operation according to the target stop floor, wherein the target floor is a floor selected by a user.

12. An elevator controller, comprising a memory, a processor, and an elevator control program stored in the memory and executable on the processor, wherein when the processor executes the elevator control program, the elevator control method according to any one of claims 1 to 10 is implemented.

13. A computer-readable storage medium having an elevator control program stored thereon, wherein the elevator control program, when executed by a processor, implements the elevator control method according to any one of claims 1 to 10.

14. A computer program, comprising instructions, which, when executed by a signal processing device, cause the information processing device to execute the elevator control method according to any one of claims 1 to 10.

15. A computer program product, comprising a computer program / instruction, wherein when the computer program / instruction is executed by a processor, the elevator control method according to any one of claims 1 to 10 is implemented.

16. An elevator safety system, the system comprising: A safety circuit, the safety circuit comprising a plurality of electrical safety switches; A safety device for detecting the working state of the electrical safety switch and generating a corresponding state detection signal; A car position detection device, used to detect the position of the elevator car; An elevator controller is connected to the safety device and the car position detection device, and is used to determine the fault floor according to the status detection signal, and determine the safety area according to the fault floor, and when the car position is within the safety area, determine the target stopping floor according to the car position, the target floor and the safety area, so as to perform a rescue operation based on the target stopping floor, wherein the target floor is a floor selected by the user.

17. An elevator comprising the elevator safety system according to claim 16.

Images