Digital Isolator STO Control for Selective High-Side PWM Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Elevator systems face challenges in achieving safe torque off (STO) operation, particularly in ensuring compliance with safety integrity levels (SIL) without complex monitoring and testing of actuator status, especially in traditional schemes that block pulse width modulation (PWM) signals.

Innovation Solution

A digital isolator is used to selectively block PWM signals between a digital signal processor and an inverter, ensuring that the motor does not rotate during STO operations, simplifying monitoring and testing for SIL compliance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional PWM signal blocking schemes are used for safe torque off operation, then motor rotation can be prevented, but monitoring and testing complexity increases significantly

Engineering Contradiction:
Improvesafe torque off operationVSAvoidmonitoring and testing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

A digital isolator is introduced as an intermediary component between the control system and inverter. This isolator actively monitors PWM signal transmission and can selectively block high-side PWM signals when STO conditions are detected, providing both safety function and simplified monitoring capability in a single integrated component

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If complex monitoring and testing schemes are implemented for SIL compliance, then safety integrity level is ensured, but system complexity and cost increase

Engineering Contradiction:
ImproveSIL complianceVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The digital isolator performs multiple functions simultaneously: it provides galvanic isolation between control and power circuits, actively monitors PWM signal integrity, enables selective blocking of high-side signals for STO operation, and provides simplified compliance monitoring. This multi-functionality achieves SIL 3 compliance without requiring separate complex monitoring and testing subsystems

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If all PWM signals are blocked for safe torque off, then motor rotation is prevented, but control flexibility is reduced

Engineering Contradiction:
Improvemotor rotation preventionVSAvoidcontrol flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

Instead of uniformly blocking all PWM signals, the digital isolator selectively blocks only the high-side PWM signals when STO conditions are detected, while allowing low-side PWM signals to pass through. This localized blocking approach prevents motor rotation (since high-side switching is essential for motor operation) while maintaining the ability to differentiate between signal types and preserve low-side control functionality

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS20250320084A1Safe torque off using digital isolator
Publication Date: 2025.10.16 OTIS ELEVATOR CO
  • US20250320084A1 patent drawing
  • US20250320084A1 patent drawing
  • US20250320084A1 patent drawing

AI summary

A control system for safe torque off (STO) operation is provided, including a motor, a digital signal processor (DSP) which outputs three-phase low side pulse width modulation (PWM) signals and three-phase high side PWM signals, an inverter receptive of the three-phase low side PWM signals and the three-phase high side PWM signals, the inverter being configured to combine the three-phase low side PWM signals and the three-phase high side PWM signals into a three-phase high-voltage output to control the motor, and a digital isolator electrically interposed between the DSP and the inverter and configured to selectively block at least a portion of the three-phase high side PWM signals from being received by the inverter.