Elevator Safety System Malfunction Severity Assessment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Elevator systems face challenges in distinguishing between severe and less severe malfunctions, leading to unnecessary interruptions or safety risks, as existing safety systems lack the ability to assess combined malfunctions effectively.
Innovation Solution
An elevator safety system comprising safety nodes and an evaluator that monitors components, distinguishes between severe and less severe malfunctions by using a virtual multi-dimensional matrix to assess signal combinations, and reacts accordingly, allowing continued operation for less severe issues while ensuring safety by stopping the elevator when necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the elevator safety system stops operation immediately upon detecting any malfunction, then passenger safety is ensured, but service interruptions increase unnecessarily for less severe malfunctions
Solution Approach 1:
The safety system segments malfunctions into different severity levels (severe vs. less severe) and applies different response strategies to each segment. The evaluator classifies malfunctions based on their individual severity and combined effect, allowing the system to maintain operation for less severe issues while stopping for severe ones, thus resolving the contradiction between safety and service continuity
Solution Approach 2:
The safety system dynamically adjusts its response based on the current operational context and the specific combination of malfunctions detected. Rather than a static stop-or-continue decision, the evaluator continuously assesses the safety status and adjusts the operational mode accordingly, enabling the system to optimize both safety and productivity in real-time
2Productivity
If the elevator safety system continues operation upon detecting less severe malfunctions, then service continuity is maintained, but safety risks may increase if multiple malfunctions combine to create dangerous situations
Solution Approach 1:
The evaluator continuously monitors the safety status by receiving signals from multiple safety nodes and reassesses the situation as new malfunctions occur or existing ones resolve. This feedback mechanism allows the system to detect when less severe malfunctions combine to create a dangerous situation and switch from continue-operation mode to stop-operation mode, thereby maintaining safety assurance while enabling service continuity when appropriate
Solution Approach 2:
The system performs preliminary assessment of malfunction severity and potential combinations before making the decision to continue or stop operation. By evaluating the safety status in advance and considering the interactions between multiple malfunctions, the system can proactively prevent dangerous situations while maintaining service continuity for acceptable conditions
3Device complexity
If the safety system evaluates each malfunction individually, then the evaluation process is simple, but it fails to detect dangerous situations arising from combinations of malfunctions
Solution Approach 1:
The evaluator merges the assessment of multiple malfunction signals by considering their combinations and interactions. Rather than evaluating each signal in isolation, the system combines the information from multiple safety nodes to assess the overall safety status, accurately detecting dangerous situations that arise from malfunction combinations while maintaining a manageable evaluation process
Data Source
AI summary
An elevator safety system (1) configured for monitoring an elevator system (2) comprises at least one safety node (12) and an evaluator (19). The at least one safety node (12) is configured for monitoring at least one component of the elevator system (2) and/or of the elevator safety system (1) and providing signals representing the current status of the at least one monitored component. The evaluator (19) configured for receiving the signals from the at least one safety node (12); and for determining a safety status of the elevator system (2) and/or of the elevator safety system (1) from a combination of the received signals.