DE202020101512U1 - Control unit for an elevator system - Google Patents

Abstract

Control unit (1) for an elevator system,
which has a car that can be moved along an elevator shaft between floors and a drive unit (2) for moving the car between the floors,
wherein the control unit (1), which comprises at least one interface (51, 52, 53, 54, 55, 56), via the at least one interface (51, 52, 53, 54, 55, 56) for interaction with, in particular The safety circuit (3) laid through the elevator shaft is formed, which is formed by a large number of safety switches (4) connected in series, which, depending on the safety-relevant operating conditions of the elevator system, switch between an open state that interrupts travel and a closed state that enables travel are switchable, the safety circuit (3) comprising at least one safety switch for monitoring the closed state of the car and / or landing door (41, 42), with intermediate taps (6, 21, 22, 23, 24) arranged in the safety circuit (3), 25) for tapping an intermediate voltage,
with a fuse element (7), in particular a main contactor (8) or a functional unit of the drive unit, which can be controlled by the safety circuit (3) in such a way that an error state of the fuse element (7) is activated by the interrupted safety circuit (3) to prevent the To switch off the drive unit (2), in particular to disconnect the supply voltage from the drive unit (2), and that an active state of the safety element (7) is activated by the closed safety circuit (3) in order to operate the drive unit (2) for realizing the driving operation, in particular to connect the drive unit (2) to the supply voltage,
wherein the control unit (1) has monitoring means (9) for measuring and evaluating intermediate voltages and engagement means (11), the engagement means (11) being in operative connection with the safety circuit (3) to the effect that at least one separating element (12, 31, 32, 33, 34, 35), which can be switched between a closed and an open switch position, the safety circuit (3) can be interrupted and / or at least one safety switch (4) can be bridged, the monitoring means (9) and the intervention means (11) are set up and designed to carry out a test action in order to detect at least one intermediate voltage as a function of a switching position of the at least one separating element (12, 31, 32, 33, 34, 35),
characterized,
that the engagement means (11) are designed and set up in such a way that a first separating element (31), in particular by means of a second interface (52), is in series with the safety switches (41, 41, 42) is arranged, wherein the safety switches (41, 42) used to monitor the closed state of the car and / or landing door and the first separating element (31) can be bridged by at least one further separating element (12), in particular on the entrance side with a first Interface (51) and is connected on the output side to a fourth interface (54).

Description

The invention relates to a control unit for an elevator installation according to the preamble of claim 1.

The invention also relates to an elevator installation with a control unit according to the invention.

It is generally known from the prior art that a safety circuit is used to monitor an elevator installation, which is laid along the elevator shaft and is formed by a plurality of safety switches connected in series. Each safety switch of the safety circuit has an open and a closed state and monitors a safety-relevant operating variable of the elevator system. Thus, for example when performing maintenance work by the security personnel, a security switch arranged in the security circuit is put into the open state, and the security circuit is thus interrupted. Since the safety circuit is in operative connection with a safety element, which in turn can influence the operating state of the drive unit of the elevator system, it is ensured that if the safety circuit is interrupted, the car of the elevator system cannot be moved (moved). For this purpose, the safety circuit is often connected to the control input of a power contactor (main contactor), with the power contactor being triggered when the safety circuit is interrupted and the supply voltage is disconnected from the drive unit.

It is also known from the prior art that the closed state of car doors and / or landing doors of the elevator system is monitored by a safety switch in each case in order to prevent the car from moving when the car door or landing door is open or not completely closed , as this represents a great potential for injury to passengers.

However, it is generally known that the safety switches arranged in the safety circuit for monitoring the closed state of the car and / or floor doors can be bridged by a switching group in order to initiate the opening of the doors as soon as the car arrives at a stop position (on a floor) can without the drive unit being deactivated for safety reasons due to the interruption of the safety circuit. This means that the travel times for the passengers can be shortened, at least subjectively. Furthermore, bypassing the safety switch arranged to monitor the closed state of the car and / or landing doors also enables the car to be moved advantageously in a holding position during the entry and exit of passengers, since a step between the load changes acting on the car can form the floor of the car and the floor of the floor in the holding position. However, these additional vector groups are complex to implement, which leads to high costs. Furthermore, if the switching groups malfunction, for example due to defective components, dangerous situations can arise for the passengers, since the safety circuit is bridged at least in sections by the switching groups.

For this reason, it is the object of the present invention to provide a control unit which is operatively connected to the safety circuit in such a way that, on the one hand, the required functionality can be provided and, on the other hand, the disadvantages known from the prior art can be overcome. It is therefore a particular object of the present invention to provide a control unit which is designed so that the open or closed state of the car and / or landing doors can not only be detected, but also the safety circuit can be influenced in such a way that a method of the Car is also possible with an open safety switch. Nevertheless, it should be possible to interrupt the safety circuit even in the event of a fault.

Furthermore, the task consists in specifying an elevator installation which comprises such a control unit according to the invention.

The object is achieved with regard to the control unit for an elevator with the features of claim 1, d. H. in that the engagement means are designed and set up in such a way that a first separating element, in particular by means of a second interface, is arranged in series with the safety switches, which are arranged in the safety circle to monitor the closed state of the car and / or floor doors, the The safety switch used to monitor the closed state of the car and / or landing doors and the first separating element by at least one further separating element, preferably two, in particular a second separating element and a third separating element, connected in series or anti-series, more preferably four, in particular in pairs, in series or Back-to-back interconnected separating elements can be bridged, which is / are connected in particular on the input and output side to a first interface and a fourth interface.

With regard to the elevator system, the object is achieved with the features of claim 13.

Advantageous further developments of the invention are specified in the subclaims.

All combinations of at least two of the features disclosed in the description, the claims and / or the figures fall within the scope of the invention.

The invention is based on the idea that the engagement means are designed and are in operative connection with the safety circuit via at least one interface in such a way that a separating element, in particular a first separating element, via an interface, in particular via a first interface, in particular on the output side and, in Row is arranged to the safety switches of the safety circuit, which are provided for monitoring the closed state of the car and / or landing doors. Furthermore, the intervention means also include at least one further separating element, which is in operative connection with the safety circuit via further interfaces, in particular via the first and fourth interfaces, the safety switches provided for monitoring the closed state of the doors and the first separating element through this connectable path , which comprises the further separating element, can be bridged.

In a further development, it is provided in this context that, for reasons of redundancy ((n-1) security), two or four separating elements are provided for the further separating element or the first separating element, which are arranged either in series with one another or in anti-series in order to form a separating element. In addition, an embodiment is particularly preferred in which two separating elements are connected directly to one another in series, with two separating elements also being arranged antiserially to the two first separating elements in order to ensure the functionality with regard to the blocking capability of the separating element through the paired arrangement in a safety circuit to ensure an alternating voltage as the supply voltage, which has a positive and negative half-cycle due to the AC component. Alternatively, a pair of switches can also be formed by two isolating elements connected in reverse series, in which case two pairs of switches are then preferably electrically connected to one another in series in order to form (n-1) security.

Such a configuration advantageously makes it possible that the safety switches provided for monitoring the closed car and / or landing doors in the safety circuit can be temporarily bypassed in order, for example, to initiate the opening of the doors before the car has reached the stop position, without the switchover the corresponding safety switch from the closed to the open state leads to an interruption of the safety circuit. This advantageously makes it possible to shorten the waiting time for passengers in the car.

Furthermore, the control unit according to the invention also enables a step that forms between the landing floor and the car floor in a holding position of the car, which is caused by a load change caused by passengers getting on and off, can advantageously be compensated for by controlling the drive unit. Additional control devices are therefore advantageously superfluous, which would otherwise be required to bridge the safety circuit and / or to control the drive unit in order to compensate for the step by moving the car.

In a further development, it is provided within the scope of the present invention that in the active state of the fuse element, i.e. in particular the main contactor, the correct operating state of the elevator system, in particular a maintenance bridge electrically contacted in the safety circuit and / or a fault-related short circuit and / or the closed state, by at least one test action the car and / or landing doors, can be detected.

In other words, it is provided in a further development that the control unit enables test actions to be carried out in the active state of the safety element, that is to say in particular at the same time as the car is moved. Here, the fuse element must not change to the error state or the safety circuit must not be influenced and / or interrupted by the test actions in such a way that this is recognized and / or detected by the fuse element so that the error state is not activated. Nevertheless, it should be possible for the correct operating condition of the elevator system to be checked and / or recorded through the at least one test action by evaluating the detected intermediate voltages depending on the switching positions of the isolating elements in order to detect maintenance bridges left behind in the safety circuit and / or short circuits that in particular due to defective components or to recognize the open state of the car and / or landing doors.

For this purpose, it is provided within the scope of the present development that the separating element is set up and controllable in such a way that the safety circuit for less than 5 msec, preferably less than 2.5 msec, more preferably less than 1, 3 msec can be interrupted, wherein the security element is not designed and / or set up to detect such a short interruption.

In connection with the preferred design of the fuse element as a main contactor, this means that the supply voltage is connected to the drive unit via the switchable power contacts of the main contactor, the control input of the main contactor being in operative connection with the safety circuit. Since the control input of the main contactor includes a time delay element, this means that the main contactor remains in the closed state when the test actions are carried out. On the one hand, the comparatively short control time of a contactor (low switching dynamics) and existing line inductances and / or capacitive effects in the safety circuit are advantageously used according to the invention, which prevent the dynamic control of the contactor. In addition, a specially provided delay element, in particular a capacitor, can also be arranged at the control input.

Furthermore, the advanced checking and / or analysis of the safety circuit in the closed state of the main contactor enables the disadvantageous switching noises of the main contactor to be avoided, which is particularly advantageous when the control is used in elevator systems in office and / or residential areas.

Alternatively, in this context, the safety element can also be designed as an integrated component and / or as a functional unit of the drive unit, the drive unit comprising a converter with a control monitoring input for receiving and / or making electrical contact with the safety circuit. The control input advantageously enables the safety circuit to be monitored, with the fault status being triggered directly in the converter in the event of a definable voltage level, such as a drop in the supply voltage due to an open safety switch. In this context, it can also be advantageously provided that a delay element, in particular a capacitor, is additionally arranged at the control monitoring input, in order thus to implement an adaptation in the detection speed of the functional unit directly in the hardware. In this case, aging processes in the capacitor advantageously lead to a shortening of the delay times, which is why no safety-relevant problems arise due to the defeat of the protection concept.

In the context of the present invention, a “test action” is understood to mean the generation and / or creation of a specific switch position by means of the at least one isolating element by the intervention means and the detection of at least one intermediate voltage at at least one intermediate voltage tap in the safety circuit by the monitoring means.

The expression “in the active state” of the safety element is understood to mean an operating state of the elevator system in which the elevator system is in a ready-to-run operating state, i.e. the elevator car can be moved between the individual floors depending on the passenger's specifications (travel mode).

A maintenance bridge can be a permanently installed circuit that can be activated by the service staff during maintenance work in order to activate a bypass for bridging safety switches (individual safety switches and / or groups of safety switches) of the safety circuit, whereby the separated part of the safety circuit is preferably separated from the safety circuit at least on the input side by opening a contact element. Alternatively, a maintenance bridge can also be formed by a conductor, in particular a conductive wire, which is brought into operative connection with the safety circuit in order to bridge the safety switch.

Monitoring the safety circuit in the active state of the safety element enables the control unit to be improved, since an analysis of the safety circuit can now be carried out not only when the elevator system is at a standstill and / or in a resting phase, but also at any point in time, i.e. in particular also during regular travel of the Elevator system. In this way, the number of tests (test which is composed of at least one test action) can be increased significantly, which is why impermissible situations and / or faulty short circuits can be detected earlier.

In a preferred embodiment, the separating elements are designed and controlled by appropriate driver circuits so that a switching frequency between 0.5 kHz to 30 kHz, preferably 0.5 kHz to 16 kHz, more preferably 0.5 kHz to 9 kHz, very particularly preferably 0.5 kHz to 2 kHz can be operated . This prematurely enables the use of standardized separating elements and corresponding driver circuits, which leads to low costs. Furthermore, appropriately designed separating elements enable the interruption and / or disconnection of the safety circuit for such short periods of time that this is not detected by the safety element, and nevertheless at least one checking action can be carried out.

In a further development, it is also provided in this context that the separating element, which is provided and / or arranged in the engagement means, is designed as a switchable semiconductor component. In this context, an advantageous embodiment of the semiconductor component as a MOSFET, IGBT and / or thyristor is particularly preferred, since these switch technologies can be operated with low loss at a high switching frequency. This enables the separating element to be implemented cost-effectively, since standardized components and / or circuit concepts that have already been tried and tested can be used.

It is particularly advantageous to mention in this context that high switching speeds can be achieved with modern semiconductor components, so that despite the (very brief) interruption of the safety circuit when carrying out a test action, the fuse element, in particular the power contactor or main contactor, due to component-related inertia and / or existing line inductances in the wiring and / or supply line does not switch to the error state. This not only makes it possible to carry out the corresponding test action in the active state of the safety element and thus in normal driving operation of the elevator system, but also enables the number of corresponding test and / or test measurements (sequence of different test actions) to be increased, since it is no longer necessary for the Elevator is in a resting phase when performing the test and / or test measurements, that is, no passenger is currently being transported.

In a further development, it is provided that the intervention means for interrupting a safety circuit designed as a DC voltage circuit and for bridging one of the safety switches or a group of safety switches comprise at least two or preferably three switchable isolating elements or semiconductor components, which are preferably designed as bipolar transistors, MOSFETs, IGBTs and / or thyristors are, wherein to turn off the thyristors are preferably used from the prior art quenching circuits.

Alternatively, a combination of the semiconductor components mentioned is also conceivable. In this context, for reasons of redundancy, provision can also be made that at least three or preferably five switchable semiconductor components, in particular MOSFETs, IGBTs and / or thyristors, are used to ensure the functionality of the safety circuit, i.e. to ensure that the safety circuit is interrupted double the safety switches that are permanently assigned to the safety circuit and are thus designed to interrupt the safety circuit.

In connection with the monitoring and bridging of the safety switch according to the invention for monitoring the closed state of the car and / or landing door, this means that at least two separating elements are required to interrupt the safety circuit by opening the first separating element, with a second Separating element, the safety switch for monitoring the closed state of the car and / or landing doors and the first separating element can be bridged. Furthermore, for reasons of redundancy, the second separating element can also be formed from two separating elements connected in series with one another.

This advantageously enables (n-1) security to be implemented, in order to still enable the safety circuit to be interrupted, in particular in the event of a defect in a separating element and a possible permanently closed switch position of the corresponding separating element. In a further development, however, it is also conceivable that the engagement means comprise a total of ten semiconductor components in order to use the control unit according to the invention for both DC voltage-based and AC voltage-based safety circuits. With regard to the design of the engagement means according to the invention, this means that the first separating element is formed by two separating elements (in particular MOSFETs) connected in anti-series and the second separating element is formed by four separating elements in total, with two separating elements being connected in series and anti-series to one another.

Furthermore, an embodiment of the present invention is also preferred in which the control unit is designed to interact with a safety circuit with an alternating voltage as the supply voltage. Here, the engagement means advantageously comprise at least three, preferably five, switchable isolating elements or semiconductor components, the isolating elements or semiconductor components designed to interrupt the safety circuit being arranged twice, in particular antiserially to one another, in order to completely block and avoid the positive and negative half-waves of the supply voltage that an unwanted current path is created, in particular via an anti-parallel body diode of a MOSFET. In this context, the self-extinguishing property of a thyristor can advantageously be used in connection with supply voltages designed as alternating voltage.

With regard to the inventive design of the engagement means for interrupting and / or Bridging the safety circuit in some areas means that a total of 3 separating elements or semiconductor elements are required.

Furthermore, it can also be provided in this context that, for reasons of redundancy, i.e. to increase security or to ensure (n-1) security, additional separating elements or semiconductor components are provided, in particular to break the separating elements or To arrange semiconductor components twice, that is to say in series with one another. According to the statements on the DC voltage circuit, a safe interruption of the safety circuit can still be implemented in the event of failure of a semiconductor element and a permanently closed state. In other words, it is provided in this context that the control unit or the engagement means comprise a total of ten semiconductor components, the control unit comprising no more than 20 separating elements or semiconductor elements, preferably less than 16 separating elements or semiconductor elements, more preferably less than 11 separating elements or semiconductor elements should.

In addition, a further preferred embodiment of the present invention advantageously provides that at least five intermediate voltages are detected and evaluated by the monitoring means, with a total of four intermediate voltages, preferably three intermediate voltages, being evaluated to detect the closed state of the car and / or landing doors

For this purpose, the intermediate voltages are connected to intermediate taps of the safety circuit in order to record a measured value of the supply voltage as a function of the position of the corresponding intermediate tap. A measured value can either output a voltage or no voltage. This advantageously enables the position of an open safety switch to be localized in the safety circuit and / or, in general, to check or record the operating state of the elevator system. Thus, electrically contacted maintenance bridges can be detected in the safety circuit and / or a fault-related short circuit in the safety circuit, in particular due to a defective safety switch or defective separating element, and / or the open state of a car and / or landing door can be detected.

In a further development, it should be mentioned in this context that by detecting the open state of a car and / or landing door, the control unit can also detect a loss of the lift system's ability to drive, in which case emergency systems such as a mechanical brake can be activated to avoid further damage. Thus, with a corresponding development of the control unit according to the invention, control devices in this regard are also superfluous.

In addition, a further development of the invention provides for the control unit to be designed and set up in such a way that the safety circuit is in operative connection with the monitoring and / or intervention means via a total of six interfaces. In this case, a bypass to safety switches of the safety circuit can be switched via an interface either by the control unit or by the intervention means in order to bypass them. Alternatively, the safety circuit can also be formed in sections by means of an interface pair in order to completely interrupt the safety circuit by separating elements arranged in the section. Furthermore, it is also conceivable that an interface is only used to form an intermediate tap for voltage measurement. With regard to the design of the engagement means according to the invention, this means that a total of four interfaces are required in order to bring the control unit into operative connection with the safety circuit for the functionality according to the invention.

In addition, a further preferred embodiment of the control unit provides that the monitoring means are designed and set up so that a first intermediate voltage SR1_out can be measured in order to detect the voltage potential at a first intermediate tap, which is in the safety circuit on the positive contact pin or positive Connection of the fuse element is arranged, so in particular the voltage detected at the control input of the main contactor.

Furthermore, it is additionally or alternatively provided that a second intermediate voltage ACD1 can be detected in order to detect the voltage at a second intermediate tap which is arranged and / or on the negative contact pin / connection of the at least one safety switch for monitoring the closed state of the car door that a third intermediate voltage SCD1 can be detected in order to detect the voltage at a third intermediate tap, the third intermediate tap between the at least one safety switch for monitoring the closed state of the at least one landing door and the at least one safety switch for monitoring the closed state of the at least one car door is arranged.

In the context of the present inventive training of the engagement means can by the detection and evaluation of the intermediate voltage SR1_out the functionality of the isolating element is checked, which is provided in the safety circuit for bridging the safety switch monitoring the closed state of the car and / or landing door. For this purpose, the separating element is briefly opened in an operating state that bridges the safety circuit (in sections) (i.e. whenever the car approaches a stopping position and the doors are already to be opened) and it is checked whether SR1_out is not outputting any voltage. If this is not the case, either a defective separating element can be detected, which is causing a short circuit, or it can be detected that the car and / or landing door is not open and thus everything needed to monitor the closed state of the car and / or or landing door provided safety switches are closed or defective (short circuit).

Therefore, if a voltage can be measured with SR1_out, the first isolating element, which is arranged in series with the safety switches monitoring the closed state of the car and / or landing doors, is briefly opened in order to measure the intermediate voltage ACD1. If a voltage can be detected here, the corresponding safety switches are either closed or defective. If no voltage is measured, a defective separating element can be detected, which is arranged in the parallel (i.e. in the bridging) path.

In addition, it is also provided in this context that a fourth intermediate voltage OC_out is detected at a fourth intermediate tap, the fourth intermediate tap being arranged in the safety circuit on the output side to the upper pair of interfaces, in particular directly at the fifth interface.

Finally, the monitoring means can also be designed so that a fifth intermediate voltage OC_in can be detected at a fifth intermediate tap of the safety circuit, the fifth intermediate tap being arranged on the input side to the upper pair of interfaces, in particular at the sixth interface.

In a further development or in addition, the fourth intermediate tap can also be provided on the positive contact pin / connection of the safety switch arranged first in the safety circuit, whereby the fifth intermediate tap together with the one safety switch or the group of safety switches by a coupled one, in particular by contacting a, preferably permanently installed, maintenance bridge Switch is disconnected from the safety circuit.

The term positive contact pin / positive connection / positive contacting pin is understood to mean the connection of the safety switch or fuse element which is arranged closer to the supply voltage. Thus, the negative contacting pin / negative connection / negative contact pin of a safety switch is the connection of the fuse element that faces away from the supply voltage in the safety circuit, that is, is at the negative potential and is therefore arranged closer to the fuse element or in particular to the main contactor.

The detection and evaluation of the intermediate voltages defined above advantageously enables the state of the intermediate circuit and thus the safety-relevant operating state of the elevator system to be detected, whereby a maintenance bridge contacted in the safety circuit and / or a fault-related short circuit can advantageously also be detected while the safety element is active.

In addition, it is provided in a further development that the engagement means are designed and set up in such a way that the first intermediate tap can be connected to the second intermediate tap by a first separating element. Furthermore, it is provided in a further development that the first can be connected to the fourth intermediate tap by a second separating element, preferably via two separating elements connected in series or antiserially to one another, more preferably via four, in particular in pairs, serially or antiserially connected separating elements. Furthermore, it is also preferably provided if the fourth and fifth intermediate tap can be connected to one another by a third separating element, preferably via two separating elements connected in series or antiserially, more preferably via four, in particular in pairs, serially or antiserially connected separating elements. By connecting or disconnecting the isolating elements and thus connecting a parallel path and / or interrupting the safety circuit at different points, the safety circuit can advantageously be influenced in such a way that the state of the safety circuit can be analyzed by detecting the intermediate voltages, whereby it is advantageous it becomes possible that safety switches bridged by maintenance bridges and / or fault-related short circuits can be detected.

Furthermore, a preferred embodiment of the control unit according to the invention comprises monitoring and intervention means which are designed and set up in such a way that a test of several test actions or a fixed sequence of test actions for monitoring the operating state of the elevator system, in particular for detecting maintenance bridges electrically contacted in the safety circuit and / or a fault-related short circuit is / are carried out every 60 seconds, preferably every 30 seconds, more preferably every 10 seconds. In the context of the present invention, the number of measurements for checking the separating elements for their functionality can advantageously be reduced, since it has been customary to date, for example due to aging and / or wear effects when using mechanical switches, such as preferably relays the functionality could only be checked every 24 hours. This has the advantageous effect that malfunctions can be detected much earlier.

In a further development, the monitoring and intervention means are designed in such a way that a corresponding sequence of predefined test actions for monitoring the operating state of the elevator system, in particular for detecting maintenance bridges with electrical contact in the safety circuit and / or a fault-related short circuit, maximum 1sec, preferably 500msec, more preferably 250msec, completely particularly preferably 100 msec. In this context, it is provided within the scope of the invention that the sequence of the predefined test actions is combined in such a way that the safety circuit is not interrupted longer than for the value defined above. In connection with safety circuits with an alternating voltage, the positive and / or negative zero crossing of the supply voltage is used to generate the pauses, the first test action being started in particular in response to the detection of a positive and / or negative zero crossing.

In addition, a development of the present control unit comprises a counter unit, the output value, counter value and / or sensor output signal of which can be started in response to the result of a test action, for example a missing voltage at an intermediate tap. Furthermore, the further developed control unit also comprises communication means which are designed and / or set up to transmit a sensor output signal, wherein the sensor output signal can be influenced either indirectly or directly by the counter unit or can be derived therefrom. The effect that emerges from this development is based on the implementation of a temporary driving operation, that is to say only permitted for a certain period of time, in particular with a limited driving speed of the car, in particular in order to move to intermediate positions.

In the context of the present invention, protection is also claimed in particular for the use of the control unit according to the invention for operating an elevator system and for monitoring the operating state of the elevator system, in particular for detecting maintenance bridges with inadmissible contact in the safety circuit of the elevator system and / or a fault-related short circuit and / or the closed one State of the car and / or landing doors.

Furthermore, the present invention also claims protection for a system comprising an elevator installation and the control unit according to the invention.

Further advantages, features and details of the invention emerge from the following description of preferred exemplary embodiments and with reference to the drawings.

• 1: eine schematische Darstellung einer bevorzugten Ausführungsform der erfindungsgemäßen Steuereinheit für eine Aufzugsanlage,
• 2: eine schematische Darstellung von Schaltzuständen, die bei einem Test umfassend mehrere Prüfaktionen von der erfindungsgemäßen Steuereinheit 1 durchgeführt werden,
• 3: eine schematische Darstellung von Schaltzuständen, die bei einem weiteren, mehrere Prüfaktionen umfassenden Test ausgeführt werden, und
• 4: eine weitere schematische Darstellung eines weiteren Tests, der im Betrieb der Aufzugsanlage bei geschlossenen Fahrkorb- und Etagentüren ausgeführt wird.

These show in:

• 1 : a schematic representation of a preferred embodiment of the control unit according to the invention for an elevator system,
• 2 : a schematic representation of switching states, which in a test comprising several test actions by the control unit according to the invention 1 be performed,
• 3 : a schematic representation of switching states that are carried out during a further test comprising several test actions, and
• 4th : Another schematic representation of another test that is carried out when the elevator system is in operation with the car and landing doors closed.

The 1 shows the schematic structure of a preferred embodiment of a control unit according to the invention 1 . The illustrated control unit 1 is to interact with a safety circuit 3 formed by a large number of safety switches connected in series 4th is trained. The safety switches 4th are interconnected depending on the safety-relevant operating conditions of the elevator system between an open state that prohibits travel and a closed state that enables travel.

The safety circuit 3 is from a supply voltage on the input side 10 fed, which can be designed either as an alternating voltage or as a direct voltage, the in 1 embodiment shown is a DC voltage.

The safety circuit 3 stands on the output side with a fuse element 7th in operative connection, the present as the main contactor 8th is designed, the control input with the safety circuit 3 connected is. As soon as the safety circuit 3 interrupted and at the control input of the main contactor 8th if there is no voltage, this opens Main contactor 8th and disconnects via the power contacts of the main contactor 8th connected drive unit 2 from their energy supply. This ensures that there is an open safety circuit 3 does not move the car because the drive unit 2 is not ready to drive without power supply or without supply voltage.

In addition, in the safety circuit 3 , in particular for carrying out maintenance and / or repair work, maintenance bridges 5 be integrated to individual safety switches 4th or groups of safety switches 4th by connecting a parallel path.

A corresponding maintenance bridge 5 is in the 1 realized by a permanently installed circuit that is activated by pressing a switch 17th a bypass to the safety circuit 3 switches on, the all safety switches of a first group of safety switches, not shown in detail 18th bridged.

A safety switch (not shown) of the first group of safety switches 18th monitors a safety gear (not shown) in order to fix the car mechanically in the elevator shaft in the event of a fault. By breaking the safety circuit 3 ensures that the drive unit 2 is disconnected from the power supply. To reset the safety gear, the opened safety switch must first be bridged by the maintenance bridge implemented by the permanently installed circuit 5 is switched on. Since in this operating state all fuse switches of the first group 18th are bridged, this leads to a safety-relevant critical operating state of the elevator system. In order to interrupt a journey anyway, all separating elements are in the safety circuit 3 opened, whereby the fuse element is still advantageous 7th can be put into the fault state to the drive unit 2 switch off.

Next to the safety switches of the first group 18th includes the safety circuit 3 also other safety switches 41 , 42 that monitor the closed state of the at least one car door and the closed state of the at least one landing door. For the sake of clarity, the 1 only one safety switch is shown for the corresponding functionality in relation to all landing doors and all car doors of the elevator system. Nevertheless, it can be seen from the illustration that the safety circuit 3 is interrupted by opening a door (car door or landing door) in order to prevent the car from moving when the door is open.

Furthermore, the illustrated control unit comprises 1 Monitoring means 9 for measuring and evaluating intermediate voltages at various intermediate taps 6th of the safety circuit 3 are tapped and means of intervention 11 that is so with the safety circuit 3 are in operative connection that by means of at least one separating element 12th the safety circuit 3 can be interrupted and / or individual safety switches 4th or groups of safety switches 4th by closing a partition 12th can be bridged. This is what the separating elements are for 12th designed so that they can be switched between a closed and an open switch position.

Controlling the separating elements 12th and the evaluation of the intermediate voltages takes place with two, not in the 1 shown microcontroller. The corresponding measurement and control signal flows are shown in the 1 by means of small arrows on the dividing elements 12th as well as the interim taps 6th sketched schematically.

The monitoring means are advantageous 9 and the engagement means 11 set up and designed to carry out a test action. In the context of the present invention, a test action is understood to mean that, depending on a switching position of the at least one separating element 12th at least one intermediate voltage is detected, wherein a sequence of several test actions can also be carried out to determine the operating state of the elevator system.

The acquisition and evaluation of intermediate voltages depending on the different switching positions of the isolating elements 12th (Test action) advantageously enables electrically contacted maintenance bridges 5 and / or a fault-related short circuit in the safety circuit 3 capture. In this way, the proper operating condition of the elevator system can be checked.

The monitoring means are advantageous according to the invention 9 and the engagement means 11 designed so that in the active state of the fuse element 7th , so if the main contactor 8th is in the closed switching position, at least one test action can be carried out in order to monitor the proper operating state of the elevator system and in particular in the safety circuit 3 electrically contacted maintenance bridges 5 and / or to detect a fault-related short circuit.

The control unit shown is also available 1 over six interfaces 51 , 52 , 53 , 54 , 55 , 56 in operative connection with the safety circuit 3 the elevator system. This is done by the upper pair of interfaces 19th that through the fifth interface 55 and the sixth interface 56 is trained, the safety circuit 3 formed in sections, in which by the control unit 1 trained section of the safety circuit 3 to interrupt the safety circuit 3 trained separating elements 12th are arranged.

The one in the 1 illustrated control unit 1 comprises a total of five dividing elements 12th that are used as switchable semiconductor components 13th in the preferred embodiment of a field effect transistor (MOSFET) 14th are trained. As the illustrated control unit 1 for interaction with the safety circuit fed by a direct voltage 3 it does not include any anti-series connected MOSFETs 14th . However, for redundancy reasons, there are sometimes two MOSFETs 14th arranged in series to one another in the event of a fault in a MOSFET 14th the separation of the safety circuit 3 still to enable.

The control unit also includes a lower pair of interfaces 20th that through the first interface 51 and the fourth interface 54 is trained, and that with the safety circuit 3 is operatively connected in such a way that the safety switches provided for monitoring the closed state of the car and landing doors 41 , 42 can be bridged by separating elements that are in a closed switching position.

In addition, the monitoring means are used to carry out the at least one test action 9 designed so that a total of five intermediate voltages can be recorded.

So it is initially possible that at a first intermediate tap 21 a first intermediate voltage SR1_out is detected, which is the voltage at the positive contacting pin of the fuse element 7th acts. In the present case, the control voltage of the main contactor is used on the input side 8th detected, whereby the operational status of the elevator system can always be determined.

Furthermore, a second intermediate voltage is ACD1 at a second intermediate tap 22nd detected, the second intermediate tap 22nd on the negative contacting pin of the at least one safety switch 42 is arranged, which monitors the closed state of the car door.

A third intermediate voltage SCD1 is applied to a third intermediate tap 23 detected between the at least one safety switch 41 to monitor the closed state of the landing door and the at least one safety switch 42 is arranged to monitor the closed state of the at least one car door.

There is also a fourth intermediate tap 24 provided for contacting a fourth intermediate voltage OC_out, the fourth intermediate tap 24 on the output side to the upper pair of interfaces 19th , i.e. directly at the fifth interface 55 is arranged.

A fifth intermediate voltage OC_in is applied to a fifth intermediate tap 25th of the safety circuit 3 measured, the fifth intermediate tap 25th on the input side to the upper pair of interfaces 19th , i.e. at the sixth interface 56 is arranged.

It is also derived from the control unit circuit shown 1 can also be seen that the first intermediate tap 21 with the second intermediate tap 22nd via a first separating element 31 can be connected, this separator as a MOSFET 14th is trained.

It can also be seen that the first interface 51 with the fourth interface 54 via a second separating element 32 and a third separator 33 is connected, the second separating element 32 and the third separator 33 are interconnected in series.

In addition, the fourth intermediate tap 24 who is at the potential of the fifth interface 55 lies, with the fifth intermediate tap 25th (the sixth interface 56 ) via a fourth separating element 34 and a fifth separator 35 be connected, the fourth separating element 34 and the fifth separator 35 are connected in series to one another.

Furthermore, the illustrated control unit comprises 1 a purely schematically shown counter unit 15th which can be controlled in response to the result of a test action. In addition, the control unit 1 Means of communication 16 on, depending on a sensor output signal of the counter unit 15th and / or a detected intermediate voltage to transmit a control variable to a communication partner (not shown) in order, for example, to enable the elevator system to run for a limited time at reduced travel speed and / or changed stopping positions (end positions) of the elevator car in the elevator system.

When the elevator system is in operation, the control unit according to the invention 1 carried out a sequence of test actions in order to monitor the operating status of the elevator system. The is advantageous for the timing of the test actions positive zero crossing of the supply voltage 10 recorded and used to start a test action.

The as MOSFETs 14th realized separating elements 12th allow the safety circuit to be interrupted advantageously according to the invention due to the high switching speed 3 for such a short period of time that this does not trigger the main contactor 8th leads.

The 2 shows to illustrate the of the control unit according to the invention 1 executed test actions a section of the monitoring means 9 and the engagement means 11 , with four test actions with the corresponding switch position of the fourth separating element 34 and the fifth separator 35 are shown.

In a first test action shown in area A, the intervention means 9 the fourth separator 34 and the fifth separator 35 closed and then the two intermediate voltages OC_in at the fourth intermediate tap 24 and OC_out at the fifth intermediate tap 25th detected. The measurement result is then compared with empirical values, for a proper operating state of the safety circuit 3 and / or the elevator installation the intermediate voltage OC_in and the intermediate voltage OC_out a positive one from the supply voltage 10 must have a dependent measured value.

In the second test action shown in area B, the fifth separating element is then used 35 opened and the two intermediate voltages recorded and evaluated again. The measurement results are now checked to determine whether no voltage was measured at the intermediate voltage OC_out, with OC_in still having to have a voltage value. If this is not the case, an error is generated

In the third test action shown in area C, the fourth separating element 34 and the fifth separator 35 opened, whereby again only the intermediate voltage OC_in may have a voltage value in the following voltage measurement.

Finally, in the fourth test action shown in area D, only the fourth separating element is used 34 opened and the two intermediate voltages OC_in and OC_out recorded again and evaluated to determine whether a voltage value was recorded only for the upper intermediate voltage OC_in.

If the detected intermediate voltages do not correspond to the empirical value, either a short circuit of the fourth isolating element can occur 34 or the fifth separating element 35 are recorded. Alternatively, the activation of the 2 maintenance bridge shown 5 or - if no voltage value is measured at all - a missing supply voltage or a defect in the measuring device can be detected. Further, in 1 Maintenance facilities that are not shown in detail ("inspection control") may be the cause of the non-measurable voltages.

The sequence of four test actions described above by way of example illustrates the configuration of the control unit according to the invention 1 . Because by opening the fourth separating element 34 or the fifth separating element 35 the safety circuit 3 is interrupted, it is important that a corresponding switch position is implemented for a very short time. This ensures that despite the interruption of the safety circuit 3 the fuse element 7th which is not in the 2 is shown remains in the active state. For this purpose, it can make sense to insert artificial pauses between the individual test actions, which in particular prevent dynamic effects and / or the formation of ripples in the safety circuit. It is essential that the separating elements are in a switch position during a break 12th is realized in which the safety circuit 3 is not interrupted.

The 3 shows a further test comprising several test actions, which is carried out in the context of the control unit according to the invention 1 is carried out. According to the 2 known representation, a corresponding circuit diagram is shown in areas A to D for each test action, which shows the open or closed state of the safety switch 41 , 42 in the safety circuit 3 shows and also the realized switching position of the separating elements integrated in the test 31 , 32 , 33 maps.

The test actions shown are always carried out when the safety switch is bridged 41 , 42 comes, which monitor the closed state of the at least one car door and the at least one landing door. Thus, a corresponding switch position is always present before a stop position of the car is reached when approaching a floor, in order to enable the car and / or floor door to be opened before the stop position is reached. In addition, pauses are inserted between the individual test actions in order to avoid the interruption of the safety circuit 3 to trigger the fault condition of the fuse element 7th or the main contactor 8th leads. During a break, the switching position of the separating elements shown in area A is used in the present test action 32 , 33 understood, as this does not lead to an interruption of the safety circuit 3 comes.

In the switching state shown in area A, that of the switching position when bridging the safety switch 41 , 42 the safety switches 41 , 42 of the safety circuit 3 through the second separating element 32 and the third separator 33 bridged. The intermediate voltage SR1_out is then recorded and evaluated to determine whether a voltage is present.

During the second test action shown in area B, the third separating element is activated for a very short time 33 and the first separator 31 opened in order to then re-evaluate the intermediate voltage SR1_out to determine whether there is now no voltage at the corresponding first intermediate tap 21 is applied.

In a third test, which is shown in area C, all separating elements are now 31 , 32 , 33 put into the open switching state in order to check again whether there is actually no voltage at the first intermediate tap 21 (Intermediate voltage SR1_out) can be detected.

Finally, the last test action follows, with the third separating element 33 closed again and the intermediate voltage SR1_out is checked again for absence of voltage.

Furthermore, in the context of this test action or another test action, the second intermediate voltage ACD1 can additionally or alternatively be applied to the second intermediate tap 22nd and / or also the third intermediate voltage SCD1 at the third intermediate tap 23 can be recorded and evaluated. This advantageously enables that depending on the switching position of the first separating element 31 the open or closed state of the landing and / or car door can be detected.

In the 4th Another test is shown, which is characterized by two test actions. The corresponding test actions are always carried out when the two safety switches 41 , 42 not because of the dividing elements arranged in parallel 32 , 33 be bridged.

In this test, the first separator is the first 31 closed, and it is checked whether at the first intermediate tap 21 (Intermediate voltage SR1_out) a voltage in the safety circuit 3 is applied (compare area A).

The first separator is then used for a short period of time 31 opened and the intermediate circuit voltage SR1_out recorded again and evaluated to determine whether it is now voltage-free. If this is not the case, a malfunction in the circuit can be detected and the safety circuit can be interrupted 3 by opening all dividing elements 12th will be realized.

As a result, the present invention enables the optimization and further development of control units known from the prior art in a surprisingly simple manner, in order to monitor the closed state of the car and / or landing door in a particularly inexpensive manner and to influence the safety circuit so that despite an open car - and / or landing door it is possible to operate the elevator system.

List of reference symbols

1

Control unit

2

Drive unit

3

Safety circuit

4th

Safety switches

5

Maintenance bridge

6th

Intermediate taps

7th

Fuse element

8th

Main contactor

9

Monitoring means

10

Supply voltage

11

Means of intervention

12th

Separator

13th

switchable semiconductor component

14th

MOSFET

15th

Counter unit

16

Means of communication

17th

Switch button

18th

first group of safety switches

19th

upper pair of interfaces

20th

lower pair of interfaces

21

first intermediate tap

22nd

second intermediate tap

23

third intermediate tap

24

fourth intermediate tap

25th

fifth intermediate tap

31

first separator

32

second separator

33

third separator

34

fourth separator

35

fifth separator

41

Floor door safety switch

42

Car door safety switch

51

first interface

52

second interface

53

third interface

54

fourth interface

55

fifth interface

56

sixth interface

Claims (13)

Control unit (1) for an elevator system which has a car that can be moved along an elevator shaft between floors and a drive unit (2) for moving the car between floors, wherein the control unit (1), the at least one interface (51, 52, 53, 54, 55, 56), via which at least one interface (51, 52, 53, 54, 55, 56) is designed to interact with a safety circuit (3), in particular laid through the elevator shaft, which is provided by a large number of in A series of interconnected safety switches (4) is formed, which can be switched between an open state that interrupts travel and a closed state that enables travel, depending on the safety-relevant operating conditions of the elevator system, the safety circuit (3) having at least one safety switch for monitoring the closed state of the Car and / or landing door (41, 42) includes, with interposed in the safety circuit (3) hen tapping (6, 21, 22, 23, 24, 25) for tapping an intermediate voltage, with a fuse element (7), in particular a main contactor (8) or a functional unit of the drive unit, which can be controlled by the safety circuit (3) to the effect that the interrupted safety circuit (3) activates a fault state of the fuse element (7) in order to switch off the drive unit (2), in particular to disconnect the supply voltage from the drive unit (2), and that the closed safety circuit (3) creates an active state of the fuse element (7) is activated to operate the drive unit (2) for realizing the driving operation, in particular to connect the drive unit (2) to the supply voltage, the control unit (1) monitoring means (9) for measuring and evaluating intermediate voltages and intervention means ( 11), the engagement means (11) being in operative connection with the safety circuit (3) to the effect that by means of few At least one separating element (12, 31, 32, 33, 34, 35) which can be switched between a closed and an open switching position, the safety circuit (3) can be interrupted and / or at least one safety switch (4) can be bridged, the monitoring means ( 9) and the engagement means (11) are set up and designed for performing a test action to detect at least one intermediate voltage as a function of a switching position of the at least one separating element (12, 31, 32, 33, 34, 35), characterized in that the engagement means (11) are designed and set up in such a way that a first separating element (31), in particular by means of a second interface (52), in series with the safety switches (41, 42 ) is arranged, the safety switches (41, 42) used to monitor the closed state of the car and / or landing door and the he ste separating element (31) can be bridged by at least one further separating element (12) which, in particular, is connected on the input side to a first interface (51) and on the output side to a fourth interface (54). Control unit after Claim 1 , characterized in that the separating element (12, 31, 32, 33, 34, 35), in particular the first separating element (31) and / or the further separating element (32, 33), are designed to the effect that the safety circuit ( 3) can be interrupted for less than 5 msec, preferably less than 2.5 msec, more preferably less than 1.3 msec, in order in the active state of the fuse element (7), in particular the main contactor (8) or the functional unit of the drive unit (2) at least one test action to detect the proper operating state of the elevator system, in particular a fault-related short circuit. Control unit according to one of the Claims 1 to 2 , characterized in that the separating element (12, 31, 32, 33, 34, 35) is designed in such a way that it operates with a switching frequency between 0.5 kHz to 30 kHz, preferably 0.5 kHz to 16 kHz, more preferably 0.5 kHz to 9 kHz , very particularly preferably 0.5 kHz to 2 kHz can be operated. Control unit according to one of the Claims 1 to 3 , characterized in that the separating element (12, 31, 32, 33, 34, 35) is designed as a switchable semiconductor component (13), in particular as a bipolar transistor, MOSFET (14), IGBT and / or thyristor. Control unit according to one of the Claims 1 to 4th , characterized in that the engagement means (11) for interrupting a safety circuit (3) designed as a DC voltage circuit and for bridging the safety switches (41, 42) at least two separating elements (12, 31, 32, 33, 34, 35), preferably switchable semiconductor components (13), more preferably MOSFETs (14), IGBTs and / or thyristors. Control unit according to one of the Claims 1 to 4th , characterized in that the engagement means (11) for interrupting a safety circuit (3) designed as an alternating voltage circuit and for bridging the safety switches (41, 42) at least three separating elements (12, 31, 32, 33, 34, 35), preferably switchable semiconductor components (13), more preferably MOSFETs (14), IGBTs and / or thyristors. Control unit according to one of the Claims 1 to 6th , characterized in that the monitoring means (9) are designed in such a way that at least five intermediate voltages are detected and / or evaluated. Control unit after Claim 1 to 7th , characterized in that the control unit (1) has at least six interfaces (51, 52, 53, 54, 55, 56) for interacting with the safety circuit (3), whereby a fifth and sixth interface ( 55, 56) at least one separating element (12), preferably two, in particular a fourth separating element (34) and a fifth separating element (35), more preferably four, in particular in pairs, serially or antiserially connected separating elements (12) in the safety circuit (3) can be switched on and / or integrated in order to interrupt the safety circuit (3) when the switch position is open. Control unit according to one of the Claims 1 to 8th , characterized in that the monitoring means (9) are designed and set up in such a way that a first intermediate voltage SR1_out for contacting a first intermediate tap (21), which is arranged on the positive contacting pin of the fuse element (7), in particular on the control input of the main contactor (8) is measurable and / or that a second intermediate voltage ACD1 for contacting a second intermediate tap (22), which is arranged on the negative contacting pin of the at least one safety switch (42) for monitoring the car door, can be measured and / or that a third intermediate voltage SCD1 for Contacting a third intermediate tap (23), which is arranged between the at least one safety switch (41) for monitoring the at least one landing door and the at least one safety switch (42) for monitoring the at least one car door, can be measured and / or that a fourth intermediate voltage OC_out to contact a fourth Intermediate tap (24), which is arranged on the output side to the upper interface pair (19), in particular at the fifth interface (55), is measurable and / or that a fifth intermediate voltage OC_in for contacting a fifth intermediate tap (25), the input side to the upper interface pair (19), in particular at the sixth interface (56), is arranged, can be measured. Control unit after Claim 9 , characterized in that the engagement means (11) are designed and set up so that the first intermediate tap (21) can be connected to the second intermediate tap (22) via a first separating element (31) and / or that the first intermediate tap (21) with the fourth intermediate tap (24) can be connected via a second separating element (32), preferably via two serially or anti-serially connected separating elements, more preferably via four serially or anti-serially connected separating elements, and / or that the fourth intermediate tap (24) can be connected to the fifth intermediate tap (25) can be connected via a fourth separating element (34), preferably via two serially or antiserially interconnected separating elements, more preferably via four serially or antiserially interconnected separating elements. Control unit according to one of the Claims 1 to 10 , characterized in that the monitoring (9) and intervention means (11) are designed in such a way that every 60 seconds, preferably every 30 seconds, more preferably every 10 seconds, a test comprising a fixed sequence of test actions for monitoring the operating state of the elevator system, in particular for recording by maintenance bridges (5) electrically contacted in the safety circuit (3) and / or a fault-related short circuit, and / or that the monitoring (9) and intervention means (11) are designed so that a test comprising a fixed sequence of test actions for Monitoring the operating state of the elevator system, in particular for detecting maintenance bridges (5) electrically contacted in the safety circuit (3) and / or a fault-related short circuit, lasts a maximum of 1sec, preferably 500msec, more preferably 250msec, very particularly preferably 100msec. Control unit according to one of the Claims 1 to 11 , characterized by a counter unit (15) which can be controlled in response to a result of a test action, and communication means (16) which are designed to transmit a sensor output signal that can be influenced by the counter unit (15), in particular for a limited To enable the elevator system to travel at a reduced speed of the elevator car. Elevator installation, comprising a control unit (1) which, according to one of the Claims 1 to 12th is trained.

Images