The invention relates to a monitoring unit for an elevator system and to a method for operating said monitoring unit.
An elevator system substantially comprises an elevator car, an elevator shaft, in which the elevator car moves, and a drive unit for moving the elevator car.
It is known from WO2005/000727A1 that elevator systems comprise a safety circuit in which a plurality of safety components, such as safety contacts and switches, are arranged in series connection. The contacts monitor whether a shaft door or the car door is open, for example. The elevator car can only be moved when the safety circuit and all of the safety contacts integrated therein are closed. Some of the safety elements are actuated by the doors. Other safety elements, such as an over travel switch, are actuated or triggered by the elevator car. The safety circuit is connected to the drive or the brake unit of an elevator system in order to interrupt the travel operation if the safety circuit is opened.
WO2005/000727A1 further discloses elevator systems that are equipped with a safety bus system instead of the above-mentioned safety circuit, which safety bus system typically comprises a control unit, a safety bus and one or more bus nodes.
Not only is the safety of individuals transported by the elevator system important, but so is the safety of individuals who are in the elevator shaft for maintenance purposes, for example.
WO2003008316A1 discloses that, for safety reasons, modern-day elevator systems are designed in such a way that a protective space in the form of a shaft pit is provided at the bottom of the shaft in order to ensure that maintenance personnel in the shaft are not endangered when the elevator car travels to the lowermost position in the shaft.
Additionally, a protective space is usually provided at the upper end of the shaft (called the shaft head) so that maintenance personnel carrying out maintenance on the roof of the car are not endangered when the car travels to the uppermost position in the shaft.
An elevator system having a protective space at the lower and upper end of the shaft is several meters longer than the actual floor height of the building in which the elevator operates. This applies to various types of elevator arrangements, such as cable elevators, hydraulic elevators and linear motor elevators.
In order to prevent or reduce the size of the above-mentioned protective spaces, the elevator system disclosed in WO2003008316A1 comprises, in addition to and independently of the usual sensors and control means that are provided for the normal operation of an elevator system, a detection device that detects whether an individual is in a critical zone of the shaft, in particular inside the shaft pit or the shaft head. Detection can be carried out by means of any sensors, e.g., photoelectric sensors. Said detection device is connected to the drive unit of the elevator system in such a way that the elevator system can be transferred into a specific operating state if an individual is in or about to enter the critical zone.
The detection device and the specific control device are designed in terms of safety to prevent the elevator car traveling into the critical zone under any circumstances, if an individual is therein. The design in terms of safety requires, for example, that important components be redundant, that important functions of the control device be executed in parallel with one another and the results thereof be compared, and that data be transmitted over parallel lines. The design of the elevator system in terms of safety is therefore associated with considerable complexity.
It should be further noted that elevator systems are typically constructed in a modular manner. Modules are therefore prefabricated and often stored intermediately for elevator systems that are to be produced in the future. Storing said modules often involves high complexity, as, for example, individual modules have to be checked and configured before use.
The problem addressed by the present invention is therefore that of overcoming the disadvantages of the prior art and specifying an improved monitoring unit for an elevator system. Furthermore, a method for operating said monitoring unit is specified.
It should be possible to store the monitoring unit over a long period of time after manufacture and complete assembly without compromising the readiness thereof for use.
It should also be possible to remove the monitoring unit from storage after a long storage period and use said unit without further checking.
In particular, it should be prevented that the user has to configure the monitoring unit correspondingly for storage and, after removal from storage, for use in an elevator system.
Accordingly, it should also be prevented that the monitoring unit is provided with device parts that are to be manually actuated in order to configure the monitoring unit.
The complexity of storing and managing the prefabricated monitoring units for the elevator system should therefore be reduced to a minimum.
This problem is solved by a monitoring unit, which is used to monitor an elevator system, that comprises a circuit assembly which has a power supply unit that is provided for dispensing a grid-dependent first operating voltage and at least one processor-controlled first monitoring module that is used to actively and/or passively ascertain state data of the elevator system. The monitoring unit can, for example, read and store the present state data of the elevator system or sensor data. Alternatively, the monitoring unit can actively input test signals into the elevator system and register and evaluate response signals corresponding thereto. Preferably, a first monitoring module for emitting a test signal and a second monitoring module for receiving the response signal are provided.
According to the invention, the monitoring device comprises an energy storage unit, which is used to dispense a grid-independent second operating voltage, and a first switching device, by means of which the first operating voltage can be supplied to the at least one monitoring module during a normal operation and the second operating voltage can be supplied to the at least one first monitoring module in the event of a power outage. Furthermore, a non-volatile data storage unit, which is used to store a variable operating parameter, and a second switching device are provided, by means of which parts of the circuit assembly can be deactivated. The at least one first monitoring module is designed to actuate the second switching device on the basis of the stored operating parameter, which has a first value before the monitoring unit is started up and which has a second value after the monitoring unit has been started up.
The energy storage unit is an autonomous energy source, such as a battery, an accumulator, an ultracapacitor or a supercapacitor (supercap for short). It is essential that the energy storage unit be able to store electrical energy over a long period of time with virtually no loss. An autonomous energy storage unit may also be an accumulator that is powered by light energy, for example by means of solar cells.
By setting the operating parameter to the first or second value, the operating behavior of the monitoring device can be determined. The monitoring unit can therefore be fitted with an energy storage unit during manufacture and be put into storage without manually actuating a switch for deactivating the second operating voltage, optionally a battery voltage. As the consumption of energy from the energy storage unit is automatically restricted by the monitoring unit, the monitoring unit can be stored over a very long period of time without the energy storage unit having to be checked or replaced when the monitoring unit is removed from storage. In this way, managing the stored monitoring units is significantly simplified. A monitoring unit that is removed from an elevator system can also be provided again with the first value of the operating parameter and put back into storage without removing the energy storage unit.
It is particularly advantageous that the monitoring unit does not have to be provided with switching devices in order to protect the energy storage unit from premature discharge. Switching devices that can be actuated manually comprise a relatively high failure rate in comparison with semiconductor circuits, and therefore a significant improvement in this regard is also achieved using the solution according to the invention. Instead, the monitoring unit is provided with automatically controllable semiconductor components that do not show any signs of wear even after a long period of operation.
The monitoring module or monitoring modules provided on the monitoring unit may be formed advantageously by programmed microcontrollers that preferably comprise a processor unit, a volatile main memory, the non-voltage data storage unit and interface units. Furthermore, the microcontroller may comprise additional modules, such as timer units and transducer modules.
An operating program is preferably stored in the first monitoring module, according to which program the value of the operating parameter can be read out preferably periodically and the second switching device can be actuated on the basis of the read-out operating parameter.
The first value of the operating parameter is preferably an initialization value that is implanted in the monitoring unit during manufacture, for example. This first value may preferably also be implanted in a monitoring unit that is removed from an elevator system and, together with the energy storage unit, is put back into storage. The first initialization value may have, for example, the format of a network address, an invalid network address preferably being selected for the first initialization value.
The second value of the operating parameter is a value that is different from the first value. If an elevator system comprises a plurality of monitoring units and said units communicate with a computer and comprise corresponding communication addresses or network addresses, the corresponding network address can be stored as the second value of the operating parameter. The monitoring unit can be programmed correspondingly, i.e., the first or second value of the operating parameter can be implanted, by a connected computer.
Preferably, this address is implanted in all of the intelligent modules, i.e., in all of the monitoring modules, that are provided on the monitoring unit. In addition to the main address, individual subaddresses can be allocated to the monitoring modules for individually addressing said modules.
If the above-mentioned operating parameter is tracked in each monitoring module and corresponding operating programs are available for this purpose, each of the monitoring modules can monitor this operating parameter and carry out appropriate deactivation processes. For this purpose, a second switching device may be associated with each monitoring module, which device is actuated when the first value of the operating parameter is present in order to completely or partially deactivate the relevant monitoring module if the grid-dependent first operating voltage fails.
If the monitoring module is not completely deactivated, it can advantageously be provided that said module is repeatedly put into a sleep mode and, after a period of, for example, a few seconds or minutes, is transferred into a complete or partial operating state in order to carry out control measures, such as checking the value of the operating parameter. For this purpose, the monitoring module comprises a timer unit that counts one sleep period at a time. Monitoring units designed in this way are therefore also active for a short time during storage, but only require minimal energy for a very short period of time. The operation life of the energy storage unit is only marginally reduced by this energy consumption.
The second switching device can advantageously be integrated in the monitoring module. Alternatively, the second switching device may also be constructed so as to be discrete. For example, the second switching device comprises a switching transistor that is controlled by one of the monitoring modules.
The circuit arrangement can therefore be partially disconnected from the power supply in order to save energy. Furthermore, complete disconnection from the energy storage unit can be provided by the second switching device, e.g., a switching transistor, completely disconnecting the energy storage unit from the circuit arrangement. If the first value of the operating parameter is present, the second switching device is opened and interrupts, for example, a connecting line of the energy storage unit. If the second value of the operating parameter is present, the second switching device is closed, in contrast, such that the energy storage unit is connected to the circuit arrangement or to the change-over switch that connects either the first or the second operating voltage to the monitoring modules.
The monitoring units can monitor the state of at least one part of the elevator system and can determine and register corresponding state data and transmit said data to a central computer.
The elevator system comprises a drive unit by means of which an elevator car arranged in an elevator shaft can be moved and which is controlled in a safe manner by a control device in such a way, for example, that
a) the elevator car can be moved to at least two access points of the elevator shaft in normal operation, at which points doors are provided, which are controlled by the control device and with at least one of which a door lock is associated, by means of which lock the associated door can be unlocked and opened even in the case of a power outage; and
b) the elevator car does not move or moves only to a limited extent if an individual is in the elevator shaft.
A monitoring unit and a monitoring sensor are associated with at least one of the doors, by means of which sensor changes in state, such as the door being unlocked or opened, are detected. When the elevator system is entirely or partially out of order, the monitoring unit equipped with an energy storage unit can be switched into autonomous operation and recorded during the autonomous operation on the basis of state data corresponding to the monitoring sensor. This state data is read out from all the monitoring units and evaluated by a safeguard unit or a superordinate computer after the elevator system has been started up, whereupon the elevator system is prevented from being put into the normal operation if a change in state of one of the monitored doors has been detected.
This makes it possible to safely monitor an individual's access into the elevator shaft and prevent the transition of the elevator system into normal operation if an event has been detected that indicates that an individual may have entered the elevator shaft. As soon as a critical change in state is detected or recognized by the safeguard unit, this is signaled to a control computer, for example. Alternatively, the control unit may intervene directly in the elevator system and, for example, interrupt the power supply or put the drive unit out of operation. The safeguard unit may, for example, be integrated as a software module in the control computer or be formed as a separate module that interacts with the control computer or other parts of the elevator system.
The safeguard unit can thus communicate with the installed monitoring units and can also implant the communication address or network address in said units as the operating parameter when starting up the units. If one of the monitoring units is removed from the elevator system, in contrast, the safeguard unit can reset the operating parameter to the first value, which was assigned during manufacture.
The device according to the invention is described by way of example in the following in preferred embodiments with reference to the drawings, in which:
In the present embodiment, the safeguard unit 1 is a stand-alone computer system that communicates with a system computer 1000. However, the safeguard unit 1 may also be integrated in the system computer 1000 as a software module or hardware module. The safeguard unit 1 can, as shown in
The safeguard unit 1 and/or the system computer 1000 may also be connected to external computer units, e.g., a host computer, wirelessly or via a wired connection.
In the present embodiment, the monitoring sensors 11A, 11B are formed as switching contacts that are each mechanically coupled to a door lock 31A, 31B that can be actuated by maintenance personnel by means of a tool, as shown in
The switch unit 13 is supplied with a switching voltage us by the power supply unit 12, by means of which switching voltage the switch unit 13 is activated and the power supply unit 12 is connected to the monitoring modules 15, 16 as soon as the first operating voltage is present. If there is a power outage, the switching voltage us is dispensed with and the switch unit 13 returns into the rest position, in which the energy storage unit 14 is connected to the monitoring modules 15, 16 if the switch 19 shown is closed. Due to the identical configuration of the monitoring units 10A, 10B, reference is made in the following only to the first monitoring unit 10A, which comprises at least the process-controlled first monitoring module 15.
In the rest position of the switch unit 13, the energy storage unit 14, which is connected on one side to ground, remains constantly connected to the circuit assembly of the monitoring unit 10A when the switch 19 is closed. If the monitoring unit 10A is removed from the elevator system 3 in this state, the energy storage unit 14 would remain permanently connected to the relevant circuit assembly. Said energy storage unit would also remain permanently connected to the circuit assembly after the monitoring unit 10A is manufactured and the energy storage unit 14 is inserted. This insertion or removal of the monitoring unit 10A is shown symbolically in
According to the invention, it is therefore provided that the monitoring unit 10A comprising an incorporated energy storage unit 14 can be put into storage and the consumption of energy from the energy storage unit 14 is automatically interrupted or reduced during this period by actuating the switch 19 shown by way of example or a switching unit corresponding therewith. It is therefore not necessary for a user to intervene manually in order to prepare the monitoring unit 10A for storage or to configure said unit after storage.
In the embodiment in
In order to prepare storage of the monitoring unit 10A, i.e., during manufacture or before removal of the monitoring unit 10A from the elevator system 3, the first value of the operating parameter is stored in the data storage unit 151. After the monitoring unit 10A is removed from storage and installed in the elevator system 3, this first value is overwritten by the second value. This can be carried out by a superordinate computer, e.g., the safeguard unit 1, or by the monitoring module 15 itself. If the monitoring module 15 detects, for example, that installation in the elevator system 3 has occurred and the grid-dependent first operating voltage is present, the first value of the operating parameter can be overwritten by the second value, the presence of which causes the switch 19 to close and remain closed if the grid-dependent first operating voltage drops.
The first value of the operating parameter is preferably an initialization value ID0, which is implanted in all the monitoring units 10A during production. The second value ID1 of the operating parameter (or ID2 for the second monitoring unit 10B) is preferably a network address associated with the monitoring unit 10A that is assigned inside the elevator system only once and is unambiguous in this area.
I.e., the switch 19 is automatically closed as a result of the integration of the monitoring unit 10A into the elevator system 3. The switch 19 is a switching transistor, for example, that is discretely arranged on the monitoring unit 10A or is integrated in the monitoring module 15. If the switch 19 is integrated in the monitoring module 15, parts of the monitoring module 15 that are not necessary for reactivating the monitoring module 15 are preferably deactivated. If a plurality of monitoring modules 15, 16 are provided, the solution according to the invention is implemented optionally identically in both monitoring modules 15, 16. In principle, the monitoring unit 10A may also comprise a plurality of switches 19, by means of which the various regions of the circuit arrangement are supplied with power. The second switching device according to the invention therefore comprises one or more discrete or integrated switching transistors.
In
As stated above, an autonomous energy storage unit 14 may also be an accumulator that is powered by light energy, for example by means of solar cells. In a preferred embodiment, any modules of an electrical system, such as circuit boards, can therefore also be provided with said autonomous energy storage unit 14. If these modules are put into storage in deep sleep mode M3, it is provided for said modules to be exposed to artificial or natural light and the accumulator 14 to therefore be regularly charged.
In preferred embodiments, the solution according to the invention can also be designed to be particularly advantageous for automatic storage management and storage control. In this case, it can be provided for the monitoring units 10A, 10B, or any desired modules, to switch preferably regularly from the deep sleep mode M3 into a report mode M4 and wirelessly transmit status messages or status reports to a storage computer L1. For example, it is provided for the monitoring units 10A, 10B to switch into report mode M4 and report their status at intervals that can preferably be selected, e.g., weekly or monthly. This status report can contain the report on a test that has previously been carried out. Additionally, the monitoring units 10A, 10B revert back into deep sleep mode M3, optionally after confirmation of receipt from the storage computer L1. If all of the modules in storage are formed according to the invention, an inventory list for the entire storage facility can therefore be automatically created. Said inventory list can be compared with the updated stock ledger. If a status report reports the defect of a module, said module can be removed from storage and repaired. Due to the large time intervals, the energy required to operate the modules in report mode M4 is virtually negligible.
In order to communicate with the storage computer L1 and optionally to carry out tests internally, the corresponding switching units are activated and provided with the second operating voltage. Of course, an interface is provided for wireless communication with a sending unit and preferably a receiving unit. Furthermore, a communication protocol can be implemented that allocates each module a time slot for transmission. The status reports can therefore be delivered at time intervals, controlled by a timer. Alternatively, time frames can be opened at time intervals, in which time frames the monitoring units 10A or any desired modules can be addressed and queried. As mentioned, time intervals are preferably provided in the range of days, weeks or months.
The monitoring units 10A and 10B according to the invention can perform any monitoring functions in an elevator system 3 that is in operation or is inactive due to a power outage. It will be shown in the following, by way of example, that the access point to the elevator shaft 35 can be monitored by means of the monitoring units 10A and 10B.
For this purpose, a monitoring signal is generated in each monitoring unit 10A, 10B from
At least during autonomous operation of the monitoring units 10A, 10B or in battery mode M2 during a power outage, the monitoring sensors or the switching contacts 11A, 11B are monitored in order to record a change in state or an actuation of the relevant door lock 31A, 31B. Monitoring is preferably also carried out in grid mode M1. If actuation of one of the switching contacts 11A, 11B is detected while in battery mode M2, the elevator system is preferably deactivated.
After the power outage has ended, the elevator system 3 is powered again with energy from the central power supply unit 2. An operating voltage is again supplied to the local power supply units 12 in the monitoring units 10A, 10B, which in turn subsequently generate the switching voltage us and activate the switch unit 13. The state data collected in the monitoring units 10A, 10B or status messages already derived therefrom can then subsequently be retrieved by the safeguard unit 1 and further processed. The safeguard unit 1 determines, on the basis of the state data from the second monitoring unit 10B, that the associated door lock 31B has been actuated and that an individual may be in the elevator shaft 35 (see
The monitoring module 15 is, for example, a microcontroller having lowest power consumption in the operating state (preferably <100 μA) and in the idle state (preferably <500 nA), short delay times when transferring from the idle state into the operating state (preferably <1 μs), and all of the essential functions for signal processing. For example, a microcontroller is used, as is described in the documentation “MSP Low-Power Microcontrollers” from Texas Instruments Incorporated, dated 2015.
The monitoring module 15 shown in
An operating program BP and preferably a filter program FP are stored in the main memory 152. The values of the operating parameter can be read out from the data storage unit 151 by means of the operating program BP. The switch or switching transistor 19 is controlled by the output port 1541 on the basis of the read-out value ID0 or ID1. In the present state, the second value ID1 is stored, in the presence of which value the switch 19 is closed and the monitoring unit 10A goes into battery mode M2 as soon as the grid-dependent first operating voltage fails. The state of the switch unit 13 shows that the power has actually failed and the monitoring module 15 is being supplied with power from the energy storage unit 14.
Via an additional output port op and an amplifier 18, a monitoring signal sTX, which is generated in the monitoring module 15, can be transmitted to an input port ip of the monitoring module 15 via the switching contact 11A.
Between two pulses of the monitoring signals sTX1 and sTX2, the monitoring module 15 can also be put into an idle state in which the power consumption is minimal and only circuit parts that are necessary for the transition from the idle state into the operating state are operated. For example, external stimuli or wake-up signals are monitored. Advantageously, a wake-up signal may also be generated inside the monitoring module 15 by a timer 156, 157, for example. Said sleep mode differs from deep sleep mode M3 in that more circuit modules remain in an active mode. For example, the watchdog 156 that is not required in deep sleep mode M3 remains active.
In this embodiment of the monitoring units 10A, both the monitoring units 15, 16 transition into deep sleep mode M3. For this purpose, the operating parameter can be stored and monitored in each of the monitoring modules 15, 16. However, the operating states M1, M2 and M3 can also be centrally controlled only by one of the process-controlled monitoring modules 15, 16.
In accordance with the provisions of the patent statutes, the present invention has been described in what is considered to represent its preferred embodiment. However, it should be noted that the invention can be practiced otherwise than as specifically illustrated and described without departing from its spirit or scope.
Number | Date | Country | Kind |
---|---|---|---|
15194347 | Nov 2015 | EP | regional |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/EP2016/077195 | 11/10/2016 | WO | 00 |
Publishing Document | Publishing Date | Country | Kind |
---|---|---|---|
WO2017/081113 | 5/18/2017 | WO | A |
Number | Name | Date | Kind |
---|---|---|---|
6998995 | Nakajima | Feb 2006 | B2 |
20030052544 | Yamamoto | Mar 2003 | A1 |
20130240301 | Saarelainen | Sep 2013 | A1 |
20140209415 | Hall | Jul 2014 | A1 |
Number | Date | Country |
---|---|---|
1290647 | Apr 2001 | CN |
1291584 | Apr 2001 | CN |
1324323 | Nov 2001 | CN |
201842552 | May 2011 | CN |
2716588 | Apr 2014 | EP |
H03207282 | Sep 1991 | JP |
03008316 | Jan 2003 | WO |
2005000727 | Jan 2005 | WO |
2014124779 | Aug 2014 | WO |
Number | Date | Country | |
---|---|---|---|
20180354747 A1 | Dec 2018 | US |