Elevator Safety Verification After Configuration Changes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing elevator safety systems face challenges in ensuring proper functioning after electronic changes, such as software updates, without requiring manual intervention, especially when configuration parameters are altered remotely.

Innovation Solution

A method is introduced to verify configuration parameter changes by putting the elevator system into an out-of-service mode, conducting functional tests, and ensuring the processor outputs appropriate safety actions before returning to in-service mode, which can be done automatically or with remote verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If configuration parameters are changed remotely or manually in the elevator safety system, then the system can be updated or adapted to new requirements, but the reliability of the safety system may be compromised if the changes are incorrect

Engineering Contradiction:
Improveconfiguration parameter change capabilityVSAvoidsafety system proper functioning
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary functional tests after configuration parameter changes are detected. The elevator system is automatically put into out-of-service mode and executes test sequences to verify that the safety system still functions correctly with the new parameters before allowing normal operation to resume.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system continuously monitors configuration parameters and automatically detects when changes occur. Upon detection, it triggers a feedback loop that initiates functional tests and verifies system response, ensuring that parameter changes do not compromise safety functionality before the system returns to service.

Inventive Principle:
Principle #23Feedback

2Reliability

If manual verification of safety system functionality is performed after configuration changes, then reliability can be ensured, but the complexity and time required for maintenance increases

Engineering Contradiction:
Improvesafety system verificationVSAvoidverification process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The elevator safety system automatically performs functional tests and verification procedures after configuration parameter changes. The system autonomously detects parameter changes, initiates test sequences, evaluates results, and manages the out-of-service mode transitions without requiring manual intervention from maintenance personnel.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system executes preliminary functional tests automatically upon detecting configuration changes, verifying safety functionality before the elevator is permitted to return to service. This automated preliminary verification eliminates the need for complex manual testing procedures.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the elevator system remains in out-of-service mode for manual testing after configuration changes, then safety can be verified, but productivity and system availability decrease

Engineering Contradiction:
Improvesafety action verificationVSAvoidelevator system availability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system automatically executes functional tests and verifies safety actions without requiring maintenance personnel presence or manual intervention. The automated testing process efficiently validates safety functionality and promptly transitions the system back to in-service mode, minimizing downtime and maintaining productivity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system implements periodic functional tests automatically triggered by configuration parameter changes. These structured test sequences efficiently verify safety functionality and enable quick system recovery, balancing thorough verification with minimal disruption to elevator availability.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentEP4389665B1Verifying configuration parameter changes in an elevator safety system
Publication Date: 2025.07.02 OTIS ELEVATOR CO
  • EP4389665B1 patent drawingFigure 1
  • EP4389665B1 patent drawingFigure 2

AI summary

A method of verifying configuration parameter changes in an elevator safety system comprises: detecting (100) a change in one or more of the configuration parameters stored in the memory; putting (102) the elevator system into an out-of-service mode; carrying out (104) a functional test of the elevator safety system to verify an appropriate safety action; and then putting (108) the elevator system back into an in-service mode.