Method for controlling a lift system, safety control device, and lift system

Abstract

The invention relates to an in particular computer-implemented method for controlling a lift system by means of a safety control device (2). A movement of a safety brake triggering element (4) of a safety brake triggering device (3) from its release position (5) into its braking position (6) on the basis of a predefined non-critical situation is detected. A safety brake triggering control status of a safety brake triggering control output (16) designed to control a restraining device (10) and an interrupter status of an interrupter interface (17) coupled to a safety interrupter (18) of the lift system are then stored. The invention further relates to a corresponding safety control device for a lift system.

Description

[0001] Method for controlling an elevator system, safety control device and elevator system

[0002] The invention relates to a method for controlling an elevator system using a safety control device. Furthermore, the invention relates to a safety control device for an elevator system, wherein the safety control device is configured to execute the method. Furthermore, the invention relates to an elevator system, which is designed, for example, as a passenger and / or freight elevator system.

[0003] To enable particularly advantageous control of elevator systems, digital safety controls are now used in elevator technology. This type of safety control is called a PESSRAL (Programmable Electronic System in Safety Related Applications for Lifts). Using this type of digital safety control, it is possible, for example, to electronically apply a safety brake wedge to a guide rail of the elevator system, even without an emergency situation, such as if the elevator system or the safety control system is activated in energy-saving mode. To ensure that the elevator system can then resume operation without approval from on-site specialist personnel, provided that this is safe, the safety brake wedge is electronically lifted from the guide rail using the safety control system.With such electronically controlled application of the safety brake wedge, it is not usually retracted between the guide rail and a brake wedge counter bearing, since the deliberate electronically controlled adjustment of the safety brake wedge prevents the elevator car from traveling downwards. However, it can undesirably happen that the safety brake wedge is slightly retracted between the brake wedge counter bearing and the guide rail, causing it to become somewhat tense between the brake wedge counter bearing and the guide rail. This can happen, for example, when passengers or loads are changed at an elevator stop, or when the elevator car comes to a stop during an upward travel after the safety brake wedge has been inadvertently applied to the guide rail. This can result in the situation that an actuator which is responsible for returning the safety brake wedge to its original or stop position is no longer triggered.The standby position cannot provide sufficient force to overcome the unwanted tension between the safety brake wedge and the guide rail, so that adjusting the safety brake wedge to its original position is unsuccessful. To resolve this, the car would have to be moved upwards to release the tension between the safety brake wedge and the guide rail. However, such an upward travel is currently only possible under the supervision of on-site service personnel, as it requires bridging a safety-relevant safety circuit breaker. This is therefore not currently possible in an automated manner.

[0004] EP 2 785 626 B1 discloses a method for resetting a safety brake of an elevator system, wherein a brake safety controller stores an event that led to the triggering of the safety brake. If an elevator controller detects that a brake safety circuit is interrupted and the brake safety controller reports the event as a non-critical cause for the triggering of the safety brake, the elevator controller initiates an automatic resetting of the safety brake. To reset the safety brake, a traveling body of the elevator system is moved downwards, thereby tensioning or further tensioning the safety brake. The traveling body is then moved upwards, whereby the safety brake is placed in a standby position, in which it is held by an activated holding device.

[0005] The object of the present invention is to enable a particularly simple resetting of a safety brake element of an elevator system, in particular by means of an automatic reset, without the need for on-site intervention by specialist personnel.

[0006] To achieve this object, the independent claims propose a method for controlling an elevator system using a safety control device, a safety control device, and an elevator system comprising the safety control device. Further embodiments and additional features emerge from the subclaims and the following description.

[0007] When used as intended, the safety control device according to the invention forms a component of the elevator system according to the invention, in particular a system control system of the elevator system, and is configured to carry out the method according to the invention. The method is in particular a computer-implemented method, wherein the safety control device is configured for electronic data processing. By executing program commands of a computer program, the program code of which characterizes the steps of the method, the elevator system is controlled by means of the safety control device in accordance with the steps of the method. Accordingly, the invention also includes a storage medium on which said computer program is stored. In particular, a bypassing of a safety interrupter, which will be explained in more detail below, can be carried out using software.

[0008] The elevator system comprises at least one safety brake device, in particular in the form of a safety arrester, that can be triggered by a safety brake triggering device. The safety brake triggering device has a safety brake triggering element. A retaining device of the safety brake triggering device blocks movement of the safety brake triggering element when the retaining device is activated, in particular when energized. If, however, the retaining device is deactivated, movement of the movably mounted safety brake triggering element is permitted. The retaining device can be, for example, a magnetic or magnetizable holding element or a particularly movably mounted form-locking element, which is arranged on the safety brake triggering device in a suitable manner to implement a retaining function for the safety brake triggering element.The safety brake release device interacts with a safety brake element of the safety brake device, which is designed in particular as a safety gear, such that when the safety brake release element is released, a safety brake element, such as in particular a brake wedge, is applied to a guide rail of the elevator system in order to brake the elevator car and / or fix it in its current position on the guide rail. In particular, the safety brake release device can have a spring device by means of which the safety brake release element is pretensioned towards the release position. Accordingly, the safety brake release element can be moved from its initial position towards the release position by releasing the spring device. In order to move the safety brake release element from its release position back to its initial position, the spring device must be tensioned.In particular, the safety brake release element is connected to an actuator of the safety brake release device in such a way that the actuator can move the safety brake release element between a starting position and a release position. In the release position of the safety brake release device (no release of the safety brake), the safety brake release element is arranged in its starting position, which means that the restraint device is activated or energized, whereby the safety brake release element is held in the starting position by the actuator.

[0009] To trigger the safety brake release device, i.e., to move the safety brake device from its release position to its braking position, there are at least two triggering options: In the first triggering option, the restraint device is deactivated (i.e., de-energized) by means of corresponding control signals from the safety control device, thereby enabling movement of the safety brake release element. As a result, the safety brake release element is driven into its release position, particularly by releasing the spring device, whereby the safety brake element is applied to the guide rail. This first triggering option is intended to be used when a detected current operating parameter of the elevator system indicates a safety-critical situation in the elevator system.

[0010] According to a second triggering option, the safety brake release device is triggered during or due to a non-critical situation in the elevator system, whereby the safety brake device is moved from its release position to its braking position. Such a non-critical situation deviates from normal operation of the elevator system, but not in a safety-relevant way. This means that none of the current operating variables recorded by the elevator system indicate a safety-critical situation in the elevator system, and the elevator car should still be braked / restrained. In such a case, the restraint device is deactivated by means of corresponding control signals from the safety control device, or the restraint device is deenergized without a specific control signal from the safety control device, for example due to a particularly prolonged failure of an infrastructural power supply.

[0011] The proposed method determines that the safety brake trigger element has been moved from its release position to its braking position due to a predefined non-critical situation, causing the car to be braked and / or held via a safety brake device connected to the safety brake trigger element. At the time of this adjustment of the safety brake trigger element, the safety brake trigger control status of a safety brake trigger control output of the safety control device is detected. The safety brake trigger control output is coupled to the safety brake trigger device to control the restraint device.If it is / was detected that the adjustment of the safety brake release element was due to a non-critical situation, the safety brake release control status is saved in a power failure-safe, i.e. non-volatile or persistent manner at the time the safety brake element is adjusted, for example in a memory unit of the safety control device. Furthermore, at the time the safety brake element is adjusted, an interrupter control status of an interrupter interface of the safety brake release device is detected and saved in a power failure-safe manner. The interrupter interface is coupled to a safety interrupter of the elevator system. In particular, the safety interrupter, which can also be referred to as a safety catch switch, can be controlled by the safety control device via the interrupter interface. The safety circuit is interrupted oropen, whereas in the closed position of the safety breaker, the safety circuit is closed. When the safety circuit is interrupted, the elevator system is shut down as intended; travel in the elevator car, regardless of direction, is prohibited.

[0012] Once it has been detected that the non-critical situation no longer exists, the stored information, i.e., at least the stored safety brake trigger control status and the stored breaker status, are evaluated. If the safety brake trigger control status indicates a non-triggered operating state of the restraint device of the safety brake trigger device for the safety brake trigger element, and the breaker control status indicates a safety breaker that has been moved to its interrupted position, the procedure automatically activates a bypass of the safety breaker, i.e., solely by means of the safety control device. This does not require the involvement of specialist personnel.An adjustment attempt is then made using the actuator directly connected to the safety brake release element (which is in particular a linear actuator, e.g., with a spindle drive) to move the safety brake release element and the associated safety brake device from the braking position to the release position. This releases the safety brake element from the guide rail. In particular, no attempt is made to travel in the elevator car before such an initial adjustment attempt. During such an adjustment attempt, the safety brake release element is moved to the release position using the actuator, tensioning the spring device and activating or energizing the restraint device.

[0013] This process creates an automatic reset function that automatically returns the safety brake device to the release position using the safety brake release element after it has been triggered due to a non-safety-critical triggering event. Since no specially trained personnel (service technicians) are required for this, system availability is increased and the unwanted entrapment of passengers and / or cargo in the elevator car is prevented. By evaluating the stored information, a reliable distinction can be made between a critical and a non-critical situation.

[0014] If the safety braking element, for example a safety brake wedge, is pulled slightly between a braking element counter-bearing of the safety braking device and the guide rail after being applied to the guide rail, the safety braking element becomes slightly tensed between the braking element counter-bearing and the guide rail. This can happen, for example, during a passenger change or load change at an elevator stop, or if the elevator car comes to a stop during an upward travel after the safety braking element has been inadvertently applied to the guide rail. This can result in the actuator being unable to provide sufficient force to overcome the unwanted tension between a safety braking element and a guide rail, meaning that adjusting the safety braking triggering element using the safety braking device or the safety braking element is unsuccessful.

[0015] To resolve this, in another possible embodiment of the method, a release request signal is provided if the first adjustment attempt has not led to a successful adjustment of the safety brake release element with the safety brake device or the safety brake element into its release position. Depending on the release request signal, the elevator car is moved a predetermined release travel distance in the lifting direction of the elevator system, after which a further adjustment attempt is made to move the safety brake release element with the safety brake device into the release position using the actuator. Because the bridging of the safety interruption is activated in the method, the release travel with the elevator car is particularly easy to carry out. This further increases system availability even in the event of undesired tensioning of the safety brake element.

[0016] According to a further possible embodiment, one or more of the following situations in the elevator system are predefined as non-critical situations, after which the automatic activation of the safety interrupter is permissible: In one of these situations, the safety brake triggering element is triggered by vibrations of the elevator system during normal operation when the restraint device is activated (energized). In the case of a restraint device in the form of a restraint electromagnet, this can occur, for example, due to insufficient contact of the safety brake element with the restraint magnet. Such vibrations can occur, for example, during a passenger change or load change at a stop in the elevator system, or due to unusually high vibrations after the elevator car comes to a stop after an upward travel.In a second of these possible situations, an operating voltage failure of the safety control triggering device occurs. This not only refers to a failure of an infrastructural power supply, but also to the termination of an uninterruptible power supply (UPS: uninterruptible power supply) after such a power failure. In a third possible situation, the operating voltage of the safety control triggering device fluctuates or there is a particularly brief voltage drop in the operating voltage. In a fourth possible situation, the safety control triggering device is switched to a passive operating mode, for example, manually by specialist personnel into a maintenance operating mode or automatically into an energy-saving mode or similar.Thanks to this procedure, the elevator system can be returned to normal operation without the intervention of specialist personnel once these or similar non-critical situations have ceased. Furthermore, as an additional safety function, it is conceivable that bridging of the safety interrupter is only permitted after certain non-critical situations, for example, only after a specific non-critical situation, in particular the one mentioned here.

[0017] According to another possible embodiment, the position of the elevator car is detected at the time the safety brake release element is moved to the braking position and stored securely in a power failure-proof manner. A reset travel distance, beginning at the detected car position, is then specified for performing a reset travel with the elevator car. After the safety brake release element has been successfully moved to its release position, the elevator car is then moved along the reset travel distance, with the bridging of the safety breaker being deactivated at the latest when the elevator car has completed the specified reset travel distance. Based on the reset travel, a reliable check can be made to determine whether the elevator system can easily return to normal operation without the need for monitoring by specialist personnel.If the safety circuit is interrupted again after the bridging has been deactivated, this indicates that the elevator system needs to be repaired.

[0018] A possible further development provides for the bypass of the safety circuit breaker to be deactivated immediately and as quickly as possible if, during the reset run, a movement of the elevator car counter to the lifting direction of the elevator system is detected. This means that only an upward movement of the elevator car is permitted during the reset run. Therefore, if, apart from measurement tolerances and expected sensor signal fluctuations, a downward movement of the elevator car is detected during the reset run, the bypass of the safety circuit is deactivated. This further increases the safety functionality of the elevator system.

[0019] In another possible refinement, the reset travel path is specified so that it ends at the defined elevator stop closest to the car in the elevator system's lifting direction. This way, the override is deactivated when the car reaches the stop, allowing passengers to exit the car safely, even if the subsequent deactivation of the safety breaker override should again result in an open safety circuit. This prevents the affected passengers from being trapped in the car.

[0020] According to another possible configuration, after the reset run has been completed, the safety breaker bypass is deactivated, and the safety breaker is specifically activated to interrupt the safety circuit. If an operating parameter is detected during the reset run that indicates that the elevator system cannot be switched to normal operation, the elevator system is specifically shut down to prevent consequential damage and potentially resulting unwanted passenger entrapment.

[0021] According to another possible embodiment, a bridging control, by means of which the bridging of the safety interrupter can be controlled, is provided with a bridging request signal, in a possible further development, recurringly or cyclically. A bridging request is, for example, a bus message or a telegram that is delivered to the elevator system via a bus network. The bridging control is, for example, integrated into the safety control device or into a main elevator system control. In general, the method can provide for the activation and / or deactivation of the bridging of the safety interrupter to take place via the elevator system control. In such a case, the safety control device and the main elevator system control are coupled to one another for control signal transmission.Based on the override request signal, a first response signal is provided by the override controller if the detected safety brake trigger control status characterizes an activated mode of the safety brake triggering device. In other words, the first response signal is provided if the safety control device has not sent a control signal to the safety brake triggering device to deactivate the restraint device and consequently trigger the safety brake device. The override controller thus returns the first response signal as long as the restraint device is maintained in the activated state by the safety control device, even if the safety brake trigger element of the safety brake triggering device has been moved to the braking position due to the non-critical situation.

[0022] After detecting that the non-critical situation no longer exists, the safety breaker is bypassed based on the first response signal. This creates an additional safety level for controlling the elevator system, as it is specifically intended that the safety breaker is not bypassed if the first response signal is not received and / or a different response signal is received by the safety control device. However, if the first response signal is detected ordetected, although the safety brake release control status indicates a deactivated mode of the restraint device of the safety brake release device, a false positive first response signal is present and the elevator system is shut down, for example by the safety control device specifically controlling the safety interrupter to interrupt the safety circuit on the basis of the false positive first response signal.

[0023] In another possible embodiment, a second response signal is provided if the detected safety brake trigger control status characterizes a deactivated mode of the safety brake trigger device, i.e., if the safety control device has sent the required control signal to the safety brake trigger device to deactivate the restraint device and thus trigger the safety brake trigger device. The override control thus returns the second response signal as long as the restraint device is held in the deactivated state by the safety control device, even if the safety brake trigger element of the safety brake trigger device has been moved to the braking position due to the non-critical situation.After detecting that the non-critical situation no longer exists, one or more of the following steps is / are executed based on the second response signal: In one of these steps, the safety interrupter is specifically activated to interrupt the safety circuit. In another of these steps, the override is deactivated, if activated. Another possible step is to prevent further adjustment attempts. Alternatively or additionally, in another possible step, activation of the override is prevented. This ensures even safer operation of the elevator system, especially when executing the procedure.

[0024] In another possible embodiment, the bridging request signal is provided to the bridging controller on a recurring basis. This allows any potential signal delay to be bridged.

[0025] In a further aspect of the present invention, a safety control device for an elevator system is proposed, which is designed to carry out the method described above.

[0026] In a further aspect of the present invention, an elevator installation with such a safety control device is proposed, and in a still further aspect of the present invention, a computer program is proposed which has instructions which, when executed by the safety control device, cause the latter to control the elevator installation according to the method described above, wherein a further aspect of the proposed invention relates to a storage medium on which the computer program is stored.

[0027] In general, features of the various exemplary aspects and / or embodiments described herein may be combined with one another unless clearly excluded in the context of the disclosure.

[0028] In the following part of the description, reference is made to the figures, which are shown to illustrate specific aspects and embodiments of the present invention. It is understood that other aspects may be utilized and structural or logical changes to the illustrated embodiments are possible without departing from the scope of the present invention. The following description of the figures is therefore not to be considered limiting.

[0029] This shows

[0030] Fig. 1 is a schematic and simplified view of an exemplary elevator installation control system having a safety control device designed to carry out a method for controlling an elevator installation;

[0031] Fig. 2 shows an exemplary safety brake release device of the elevator system;

[0032] Fig. 3 is a three-dimensional view of an exemplary safety braking device; and

[0033] Fig. 4 is a schematic flow diagram of a method for controlling an elevator installation by means of a safety control device according to the present disclosure.

[0034] Fig. 1 shows a schematic and simplified view of an elevator system control 1 having a safety control device 2 (PESSRAL). The elevator system is not shown in the figures. The safety control device 2 has a safety brake release device 3 shown in Fig. 2 and a safety brake device 30 shown in Fig. 3. The elevator system is, for example, a passenger elevator system. The safety control device 2 is designed to execute a method for controlling the elevator system.

[0035] Fig. 2 shows an exemplary safety brake release device 3. This has a safety brake release element 4, which, according to the present example, has a first brake release part 7 and a second brake release part 8, which are pivotally mounted at their first ends 7a, 8a on a common pivot axis 9. A retaining device 10 in the form of a retaining electromagnet is attached to one of the brake release parts 7, 8, in this case to the first brake release part designated 7, specifically at a second end 7b. A magnetic or at least magnetizable holding plate 11 corresponding to the electromagnet is attached to the other of the brake release parts 7, 8, in this case to the second brake release part 8 or at its second end 8b.2, arrow 12 illustrates how the first brake release part 7 is pivoted about the pivot axis 9 relative to the second brake release part 8, thereby triggering the safety brake release device 3. The first brake release part 7 is driven toward the braking position 6 by the spring device 13, as a spring 14 of the spring device 13 is released.

[0036] As a result, a safety brake element 31 shown in Fig. 3, in the embodiment shown in Fig. 3, a safety brake wedge, is applied to a guide rail 40 of the elevator system in order to brake a car (not shown) of the elevator system that is firmly connected to the top of the safety brake device 30 and / or to fix it in its current position on the guide rail 40. The second end 8b of the second brake release part 8 and an actuator 15 of the safety brake release device 3 are connected to one another, so that the safety brake release element 4 can be set into the release position with the aid of the actuator 15 together with the safety brake device 30 or the two safety brake elements 31, in which position the safety brake elements 31 are mounted at a distance from the guide rail 40.3 also shows a switch 33, which serves to read the position of the safety brake device 30 into the safety control device 2, and a so-called catch lever 35, which is connected to the safety brake triggering element 4 of the safety brake triggering device 3 and which serves to adjust the safety brake elements 31 into the braking position. Adjusting the safety brake triggering element 4 together with the safety brake device 30 or the two safety brake elements 31 from the braking position 6 to the release position 5 is carried out as follows: By means of the actuator 15, the second brake triggering part 8 is pivoted in the direction of the first brake triggering part 7 located in the braking position 6, and the restraint device 10 is activated or energized.As soon as the brake release parts 7, 8 are coupled to one another by means of the activated restraint device 10, both brake release parts 7, 8 are pivoted in the same movement toward the release position 5 by means of the actuator 15, whereby the spring 14 of the spring device 13 is tensioned. This releases the safety brake elements 31 from the guide rail 40. In the release position 5 of the safety brake release device 3, both brake release parts 7, 8 are arranged in their respective starting positions, so that travel with the car is released by the safety brake release device 3, since the car is not braked by the safety brake device 30.

[0037] In the method for controlling an elevator system by means of a safety control device, which is illustrated by way of example in Fig. 4 in the form of a schematic flow diagram, a first step a) determines whether the safety brake triggering element 4 has been moved from the release position 5 to the braking position 6 due to a predefined non-critical situation in the elevator system, as a result of which the elevator car is braked and / or held on the guide rail 4 by means of a safety braking device 30 or by means of its two safety braking elements 31. One such non-critical situation could be that the safety brake triggering element 4 has become at least partially detached from the activated restraint device 10 in an unintentional manner, in this example the first brake triggering part 7.A further possible situation is that an operating voltage by means of which the safety brake release device 3 is supplied fails and / or fluctuates, or that the safety brake release device 3 is automatically or manually switched to a passive operating mode.

[0038] All situations that qualify as non-critical situations have in common that the safety brake triggering device 3 has triggered despite the activated, i.e., energized, restraint device 10. Therefore, in a second step b), a safety brake triggering control status of a safety brake triggering control output 16 of the safety control triggering device 3 is detected and stored in a non-volatile or power failure-safe manner. The safety brake triggering control output 16 is coupled to the safety brake triggering element 4 or the restraint device 10 for controlling the latter, as shown in Fig. 1. Furthermore, in step b), at the time of adjustment of the safety brake triggering device 3, a breaker control status of a breaker interface 17 of the safety control triggering device 3 is detected and stored in a power failure-safe manner.

[0039] The breaker interface 17 is coupled to a safety breaker 18 (also called a safety interlock switch) of the elevator system. The safety breaker 18 is configured to interrupt or open a safety circuit 19 when the safety breaker 18 is in the interrupted position, and to close the safety circuit 19 when the safety breaker 18 is in the closed position. When the safety circuit 19 is interrupted, the elevator system is shut down as intended; travel with the elevator car, regardless of direction, is blocked. In this case, at the time the safety brake trigger element 4 is adjusted to its braking position in step b), a position of the elevator car is stored in a power failure-proof manner.

[0040] If the non-critical situation which led to the triggering of the safety brake triggering device 3 or to the adjustment of the safety brake triggering element 4 in its braking position no longer applies, for example due to a restart of the safety control device 3, a switching of the safety control device to active mode, or a restoration of a stable operating power supply for the safety control device 3, this is detected. As soon as this is / has been detected, in a step c) of the method at least some of the previously stored information, at least the stored safety brake triggering control status and the stored interrupter control status, are evaluated. If the evaluation shows that the safety brake triggering control status indicates a non-triggered operating state of the safety brake triggering device 3 orthe restraint device 10 and the breaker control status characterizes a safety breaker 18 moved to its interruption position, further steps of the method are carried out.

[0041] In the present example, a bridging request signal is provided to a bridging controller 20, by means of which a bridging 21 of the safety interrupter 18 can be controlled. In particular, the bridging request signal is provided cyclically, i.e., repeatedly over time, in particular continuously or continuously. Based on the bridging request signal, a first response signal is provided by the bridging controller 20 if the detected safety brake triggering control status characterizes an activated mode of the safety brake triggering device 3 or the restraint device 10.

[0042] After detecting that the non-critical situation no longer exists, the bypass 21 of the safety interrupter 18 is activated, in this case depending on the first response signal. If a different, second response signal is provided in response to the bypass request signal, after detecting that the non-critical situation no longer exists, the safety interrupter 18 is specifically controlled to interrupt the safety circuit 19 and the bypass 21 is deactivated, if it is activated, or the activation of the bypass 21 is prevented.

[0043] A first adjustment attempt is then made by means of the actuator 15 to move the safety brake triggering element 4 with the connected safety brake device 30 from the braking position 6 to the release position 5. If the safety brake element is slightly drawn between a brake element counterbearing of the safety brake device 30 and the guide rail 40 and thus becomes distorted, for example due to vibrations caused by passenger movements, the actuator 15 may not provide sufficient force during the adjustment attempt to overcome the unwanted distortion between the at least one safety brake element 31 and the guide rail 40, so that the adjustment of the safety brake triggering element 4 with the safety brake device 30 remains unsuccessful. In such a case, a release request signal is provided in a further optional step, here when the first response signal is present.Depending on the release request signal, the elevator car is moved along a predetermined release travel distance in the lifting direction of the elevator system, after which a further, second adjustment attempt is made by means of the actuator 15 to move the safety brake release element 4 or the safety brake device 30 to the release position 5. If the second response signal is present, it can be provided that the first and / or second adjustment attempt is / are prevented.

[0044] In this case, it is also provided that, based on the stored car position, a reset travel distance beginning at the detected position of the car is specified for performing a reset travel with the car. After the safety brake release element 4 or the safety brake device 30 has been successfully moved to the release position 5, the car is then moved along the reset travel distance, with the bypass 21 of the safety interrupter 18 being deactivated at the latest when the car has completed the specified reset travel distance. The bypass 21 is deactivated immediately and as quickly as possible if, during the reset travel, a movement of the car counter to the lifting direction of the elevator system is detected. In other words, only an upward movement of the car is permitted for the reset travel.The reset travel distance is specified, for example, so that it ends at the defined stop of the elevator system that is closest to the car in the lifting direction of the elevator system. In this way, the bypass 21 is deactivated when the car has reached said stop, so that passengers can safely exit the car, even if the subsequent deactivation of the bypass 21 should again lead to an interrupted safety circuit 19. After the reset travel has been completed, the bypass 21 can be deactivated and the safety breaker 18 can be specifically controlled to interrupt the safety circuit 19, for example, if an operating parameter of the elevator system is detected during the reset travel that indicates that overriding or switching the elevator system to normal operation could be prevented. In such a case, the elevator system can be specifically shut down for safety reasons.

[0045] In general, the method can provide for the activation and / or deactivation of the bypass 21 to be carried out by means of an elevator control system 22, which is indicated in Fig. 1. The safety control triggering device 3 and the elevator control system 22 are then coupled to one another for control signal transmission. Furthermore, Fig. 1 shows further elements of the elevator system or its control system, namely a controller 23, a frequency converter 24, a main power supply 25, and an uninterruptible power supply 26. Reference symbol I iste

[0046] 1 elevator control system

[0047] 2 Safety control device

[0048] 3 Safety brake release device

[0049] 4 Safety brake release element

[0050] 5 Release position

[0051] 6 Brake position

[0052] 7 first brake release part

[0053] 7a first brake release part end

[0054] 7b second brake release part end

[0055] 8 Brake release part

[0056] 8a first brake release part end

[0057] 8b second brake release part end

[0058] 9 Swivel axis

[0059] 10 Restraint device

[0060] 11 Holding plate

[0061] 12 Arrow

[0062] 13 Spring device

[0063] 14 spring

[0064] 15 Actuator

[0065] 16 Safety brake release control output

[0066] 17 Breaker interface

[0067] 18 safety breakers

[0068] 19 Safety circuit

[0069] 20 Bridging control

[0070] 21 Bridging

[0071] 22 Elevator control system

[0072] 23 controllers

[0073] 24 frequency converters

[0074] 25 Main energy supply

[0075] 26 uninterruptible power supplies

[0076] 30 Safety braking device

[0077] 31 Safety brake device

[0078] 33 switches

[0079] 35 catch lever

[0080] 40 guide rail

Claims

Claims 1. A method for controlling an elevator installation by means of a safety control device (2), the method comprising the following steps: Determining that a safety brake release element (4) of a safety brake release device (3) of the elevator system has been moved from a release position (5) to a braking position (6) due to a predefined non-critical situation of the elevator system, whereby a car of the elevator system is braked and / or held via a safety brake device (30) connected to the safety brake release element (4), at the time of the adjustment of the safety brake release element (4) to the braking position (6): storing, in a voltage failure-safe manner, a safety brake release control status of a safety brake release control output (16) of the safety brake release device (3), which is coupled to the safety brake release device (3) for controlling a restraint device (10) of the safety brake release device (3), an interrupter status of an interrupter interface (17) of the safety brake release device (3),which is coupled to a safety interrupter (18) of the elevator installation, which is designed to interrupt a safety circuit (19) of the elevator installation after it is detected that the non-critical situation no longer exists: evaluating the previously stored information by means of the safety control device (2), and if the evaluation shows that the safety brake triggering control status characterizes an operating status of the safety brake triggering device (3) that is not triggered by a safety function and the interrupter control status characterizes a safety interrupter (18) that is set to its interruption position: automatically activating a bridging device (21) of the safety interrupter (18), by means of an actuator (15) directly connected to the safety brake release element (4): undertaking an adjustment attempt to move the safety brake release element (4) and the safety brake device (30) connected thereto from the braking position (6) into the release position (5).

2. Method according to claim 1, further comprising at least one of the following steps: a release request signal is provided if the adjustment attempt has not led to the adjustment of the safety brake release element (4) into its release position (5), depending on the release request signal, the elevator car is moved by a predetermined release travel distance in the lifting direction of the elevator system, a further adjustment attempt is made to adjust the safety brake release element (4) into its release position (5) by means of the actuator (15).

3. Method according to at least one of claims 1 or 2, wherein at least one of the following situations is / are predefined as a non-critical situation: Triggering of the safety brake release element (4) and the associated safety brake device (30) when the restraint device (10) is activated by vibrations of the lift system caused by normal operation, Failure of an operating voltage of the safety control triggering device (3), fluctuation of the operating voltage of the safety control triggering device (3), switching of the safety control triggering device (3) into a passive operating mode.

4. Method according to at least one of the preceding claims, further comprising at least one of the following steps: at the time of adjusting the safety brake triggering element (4) into the braking position (6), a position of the car is stored in a voltage failure-safe manner, a reset travel distance starting at the detected position of the car is specified for carrying out a reset travel with the car, After successfully adjusting the safety brake release element (4) and the associated safety brake device (30) into the release position (5), the car is moved along the reset travel distance, and the bridging (21) of the safety breaker (18) is deactivated when the car has completed the specified reset travel distance.

5. Method according to claim 4, wherein the bridging (21) of the safety breaker (18) is immediately deactivated when a movement of the car opposite to the lifting direction of the elevator system is detected.

6. Method according to at least one of claims 4 or 5, wherein the reset travel distance is specified such that it ends at that of defined stops of the elevator system which is located closest to the car in the lifting direction of the elevator system.

7. Method according to at least one of claims 4 to 6, wherein after completion of the reset travel, the bridging (21) of the safety interrupter (18) is deactivated, and the safety interrupter (18) is specifically controlled to interrupt the safety circuit (19).

8. Method according to at least one of the preceding claims, further comprising at least one of the following steps: a bridging control (20), by means of which the bridging (21) of the safety breaker (18) can be controlled, is provided with a bridging request signal, a first response signal is provided by the bridging control (20) on the basis of the bridging request signal if the detected safety brake triggering control status characterizes an activated mode of the safety brake triggering device (3), after detecting that the non-critical situation no longer exists, the bridging (21) of the safety breaker (18) is activated based on the first response signal.

9. The method according to claim 8, further comprising at least one of the following steps: a second response signal is provided if the detected safety brake triggering control status characterizes a deactivated mode of the restraint device (10) of the safety brake triggering device, after detecting that the non-critical situation no longer exists, one or more of the following steps is / are carried out based on the second response signal: the safety interrupter (18) is specifically controlled to interrupt the safety circuit (19), if the bypass (21) is activated, it is deactivated, a further adjustment attempt is prevented, and the activation of the bypass (21) is prevented.

10. The method according to at least one of claims 8 or 9, wherein the bridging request signal is provided to the bridging controller (20) in a time-recurring manner.

11. Safety control device (2) for an elevator installation, wherein the safety control device (21) is configured to carry out the method according to at least one of claims 1 to 10.

12. Lift system with a safety control device (2) designed according to claim 11.

13. Computer program comprising instructions which, when executed by the safety control device (3), cause the safety control device (3) to control the elevator installation according to the method according to one of claims 1 to 10.

14. Storage medium on which the computer program executed according to claim 13 is stored.

Images