Elevator Safety Software Update with Manual Activation Backup

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for updating safety-related software in people conveyor systems, such as elevator systems, require hardware replacement, which is inefficient and costly, and do not ensure safe operational conditions during the update process.

Innovation Solution

A method that allows safety-related software updates to be performed without replacing hardware, using a software update server to provide updates via a data network, with a safety unit configured to store and activate the updates only after manual confirmation by a service person, ensuring the system remains in a safe state during the process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If hardware replacement is used to update safety-related software, then software updates can be performed, but the update process is inefficient and costly

Engineering Contradiction:
Improvesoftware update efficiencyVSAvoidupdate cost
Core Design Contradiction:
ProductivityVSEase of manufacture

Solution Approach 1:

The patent implements software updates by copying new software versions to a backup memory location rather than replacing hardware. The control unit downloads updated safety-related software to a second memory unit while the original software remains in a first memory unit, allowing efficient software updates without hardware replacement or system downtime.

Inventive Principle:
Principle #26Copying

2Speed

If software updates are performed automatically, then update speed increases, but system safety during update process cannot be ensured

Engineering Contradiction:
Improveupdate speedVSAvoidoperational safety during update
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent performs preliminary actions by downloading and storing updated software in a backup memory unit before activating it. The control unit downloads the updated software to a second memory unit while continuing to operate with the original software in the first memory unit, ensuring system safety is maintained throughout the update process.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent creates a safety buffer by maintaining two separate memory units - one with the original operational software and another with the updated software. This dual-memory configuration acts as a cushion, allowing the system to switch between versions if needed and ensuring that update failures do not compromise system safety or operational continuity.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

3Reliability

If manual confirmation is required for software activation, then system safety is ensured, but update process time increases

Engineering Contradiction:
Improvesystem safetyVSAvoidupdate process time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the software update process into distinct phases: downloading updated software to backup memory, obtaining manual confirmation, and then activating the update. This segmentation allows automated preparation work to be completed while maintaining safety through required manual confirmation before the critical activation step, balancing efficiency and safety.

Inventive Principle:
Principle #1Segmentation

4Productivity

If the system continues operating during software download, then productivity is maintained, but the risk of operational errors increases

Engineering Contradiction:
Improveoperational continuityVSAvoiderror risk during update
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces a backup memory unit as an intermediary that receives and stores updated software while the system continues to operate with the original software. This intermediary memory unit acts as a buffer, allowing the system to maintain normal operations while preparing for the update, thereby maintaining productivity without compromising reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3295263B1Method to update safety related software
Publication Date: 2023.08.23 OTIS ELEVATOR CO
  • EP3295263B1 patent drawingFigure 1
  • EP3295263B1 patent drawingFigure 2
  • EP3295263B1 patent drawingFigure 3

AI summary

The present disclosure relates to a method (200) of updating safety-related software in a people conveyor system, particularly in an elevator system (10), the method comprising: the steps of providing an updated version of the safety-related software (210); storing (230) the updated version of the safety-related software in a safety unit (60) of the people conveyor system; activating (240) the updated version of the safety-related software, the step of activating including operating a software update activation switch permanently associated with the people conveyor system; and in case of successful activation of the updated version of the safety-related software, controlling the operation of the people conveyor system based on the updated version of the safety-related software (290).