SAFETY ARRANGEMENT OF AN ELEVATOR

• US 20150053508A1
• Filed: 11/05/2014
• Published: 02/26/2015
• Est. Priority Date: 05/31/2012
• Status: Active Grant

• Current Assignee: Kone Corporation
• Original Assignee: Kone Corporation
• Inventors: Kattainen, Ari, Raassina, Pasi, Saarikoski, Tapio, Stolt, Lauri, Kallioniemi, Antti, Nakari, Arto
• Granted Patent: US 9,776,829 B2
• Time in Patent Office: Days
• US Class Current: 187/289
• CPC Class Codes: B66B 1/30 effective on driving gear , e.g. acting on power electronics, on inverter or rectifier controlled motor
• CPC Class Codes: B66B 1/308 with AC powered elevator drive
• CPC Class Codes: B66B 1/32 effective on braking devices , e.g. acting on electrically controlled brakes brake control H02P, lift brakes per se B66B5/02
• CPC Class Codes: B66B 13/22 Operation of door or gate contacts
• CPC Class Codes: B66B 5/00 Applications of checking, fault-correcting, or safety devices in elevators
• CPC Class Codes: B66B 5/0031 for safety reasons
• CPC Class Codes: B66B 5/02 responsive to abnormal operating conditions
• CPC Class Codes: B66B 5/06 electrical

Abstract

A safety arrangement of an elevator, which includes sensors configured to indicate functions that are critical from the viewpoint of the safety of the elevator, and also a safety circuit, with which the data formed by the sensors indicating the safety of the elevator is read. The safety arrangement includes a drive device for driving the hoisting machine of the elevator. The drive device includes a DC bus, and also a motor bridge connected to the DC bus for the electricity supply of the elevator motor. The motor bridge includes high-side and low-side switches for supplying electric power from the DC bus to the elevator motor when driving with the elevator motor, and also from the elevator motor to the DC bus when braking with the elevator motor. The drive device also includes a control circuit of the motor bridge, with which control circuit the operation of the motor bridge is controlled by producing control pulses in the control poles of the high-side and low-side switches of the motor bridge, an input circuit for a safety signal, which safety signal can be disconnected/connected from outside the drive device, and also drive prevention logic, which is connected to the input circuit and is configured to prevent the passage of control pulses to the control poles of the high-side and/or low-side switches of the motor bridge when the safety signal is disconnected. The signal conductor of the safety signal is wired from the safety signal to the drive device, and the safety circuit comprises means for disconnecting/connecting the safety signal. The safety circuit is arranged to bring the elevator into a state preventing a run by disconnecting the safety signal, and the safety circuit is arranged to remove the state preventing a run by connecting the safety signal.

Claims

1. A safety arrangement of an elevator, comprising:

sensors configured to indicate functions that are critical from the viewpoint of the safety of the elevator;

an electronic supervision unit, which comprises an input for the data formed by the sensors indicating the safety of the elevator; and

a drive device for driving the hoisting machine of the elevator, which drive device comprises;

a DC bus;

a motor bridge connected to the DC bus for the electricity supply of the elevator motor, which motor bridge comprises high-side and low-side switches for supplying electric power from the DC bus to the elevator motor when driving with the elevator motor, and also from the elevator motor to the DC bus when braking with the elevator motor;

a control circuit of the motor bridge, with which control circuit the operation of the motor bridge is controlled by producing control pulses in the control poles of the high-side and low-side switches of the motor bridge;

an input circuit for a safety signal, which safety signal can be disconnected/connected from outside the drive device; and

drive prevention logic, which is connected to the input circuit and is configured to prevent the passage of control pulses to the control poles of the high-side and/or low-side switches of the motor bridge when the safety signal is disconnected,

wherein;

the signal conductor of the safety signal is wired from the electronic supervision unit to the drive device;

the electronic supervision unit comprises a mechanism configured to disconnect/connect the safety signal;

the electronic supervision unit is arranged to bring the elevator into a state preventing a run by disconnecting the safety signal; and

the electronic supervision unit is arranged to remove the state preventing a run by connecting the safety signal.

2. The safety arrangement according to claim 1, wherein:

a data transfer bus is formed between the electronic supervision unit and the drive device;

the drive device comprises an input for the measuring data of a sensor measuring the state of motion of the elevator; and

the electronic supervision unit is arranged to receive measuring data from the sensor measuring the state of motion of the elevator via the data transfer bus between the electronic supervision unit and the drive device.

4. The safety arrangement according to claim 1, wherein the drive device comprises:

a brake controller, which comprises a switch for supplying electric power to the control coil of an electromagnetic brake;

a brake control circuit, with which the operation of the brake controller is controlled by producing control pulses in the control pole of the switch of the brake controller; and

brake drop-out logic, which is connected to the input circuit and is configured to prevent passage of the control pulses to the control pole of the switch of the brake controller when the safety signal is disconnected.

5. The safety arrangement according to claim 4, wherein

the brake controller is connected to the DC bus;

and

the switch is configured to supply electric power from the DC bus to the control coil of an electromagnetic brake.

6. The safety arrangement according to claim 1, wherein the drive prevention logic is configured to allow passage of the control pulses to the control poles of the switches of the motor bridge when the safety signal is connected.

7. The safety arrangement according to claim 4, wherein the brake drop-out logic is configured to allow passage of the control pulses to the control pole of the switch of the brake controller when the safety signal is connected.

8. The safety arrangement according to claim 4, wherein:

the drive device comprises indicator logic for forming a signal permitting startup of a run;

the indicator logic is configured to activate the signal permitting startup of a run when both the drive prevention logic and the brake drop-out logic are in a state preventing the passage of control pulses;

the indicator logic is configured to disconnect the signal permitting startup of a run if at least either one of the drive prevention logic and the brake drop-out logic is in a state permitting the passage of control pulses; and

the drive device comprises an output for indicating the signal permitting startup of a run to a supervision logic external to the drive device.

9. The safety arrangement according to claim 8, wherein:

the signal permitting startup of a run is conducted from the drive device to the electronic supervision unit;

the electronic supervision unit is configured to read the status of the signal permitting startup of a run when the safety signal is disconnected; and

the electronic supervision unit is arranged to prevent a run with the elevator, if the signal permitting startup of a run does not activate when the safety signal is disconnected.

10. The safety arrangement according to claim 1, wherein:

the signal path of the control pulses to the control poles of the high-side and/or low-side switches of the motor bridge travels via the drive prevention logic; and

the electricity supply to the drive prevention logic is arranged via the signal path of the safety signal.

11. The safety arrangement according to claim 1, wherein the signal path of the control pulses from the control circuit of the motor bridge to the drive prevention logic is arranged via an isolator.

12. The safety arrangement according to claim 4, wherein:

the signal path of the control pulses travels to the control pole of the switch of the brake controller travels via the brake drop-out logic; and

the electricity supply to the brake drop-out logic is arranged via the signal path of the safety signal.

13. The safety arrangement according to claim 4, wherein the signal path of the control pulses from the brake control circuit to the brake drop-out logic is arranged via an isolator.

14. The safety arrangement according to claim 11, wherein the isolator is a digital isolator.

15. The safety arrangement according to claim 1, wherein:

the drive prevention logic comprises a bipolar or multipolar signal switch, via which the control pulses travel to the control pole of a switch of the motor bridge; and

at least one pole of the signal switch is connected to the input circuit in such a way that the signal path of the control pulses through the signal switch breaks when the safety signal is disconnected.

16. The safety arrangement according to claim 15, wherein the signal switch is fitted in connection with the control pole of each high-side switch of the motor bridge and/or in connection with the control pole of each low-side switch of the motor bridge.

17. The safety arrangement according to claim 4, wherein:

the brake drop-out logic comprises a bipolar or multipolar signal switch, via which the control pulses travel to the control pole of the switch of the brake controller; and

at least one pole of the signal switch is connected to the input circuit in such a way that the signal path of the control pulses through the signal switch breaks when the safety signal is disconnected.

18. The safety arrangement according to claim 10, wherein the electricity supply occurring via the signal path of the safety signal is configured to be disconnected by disconnecting the safety signal.

19. The safety arrangement according to claim 1, wherein the drive device comprises a rectifier connected between the AC electricity source and the DC bus.

20. The safety arrangement according to claim 1, wherein the drive device is implemented without a single mechanical contactor.

21. The safety arrangement according to claim 1, wherein:

the safety comprises an emergency drive device, which is connected to the DC bus of the drive device;

the emergency drive device comprises a secondary power source, via which electric power can be supplied to the DC bus (2A, 2B) during a malfunction of the primary power source of the elevator system; and

both the emergency drive device and the drive device are implemented without any mechanical contactors.

3. A safety arrangement of an elevator, comprising:

a safety circuit, which comprises mechanical safety switches fitted in series with each other, which safety switches are configured to indicate functions that are critical from the viewpoint of the safety of the elevator; and

a drive device for driving the hoisting machine of the elevator;

elevator, which drive device comprises;

a DC bus;

a motor bridge connected to the DC bus for the electricity supply of the elevator motor, which motor bridge comprises high-side and low-side switches for supplying electric power from the DC bus to the elevator motor when driving with the elevator motor, and also from the elevator motor to the DC bus when braking with the elevator motor;

a control circuit of the motor bridge, with which control circuit the operation of the motor bridge is controlled by producing control pulses in the control poles of the high-side and low-side switches of the motor bridge;

an input circuit for a safety signal, which safety signal can be disconnected/connected from outside the drive device; and

drive prevention logic, which is connected to the input circuit and is configured to prevent the passage of control pulses to the control poles of the high-side and/or low-side switches of the motor bridge when the safety signal is disconnected,

wherein;

the signal conductor of the safety signal is wired from the safety circuit to the drive device;

the safety circuit comprises a mechanism configured to disconnect/connect the safety signal; and

the safety signal is configured to be disconnected by opening a safety switch in the safety circuit.