Abstract: An elevator safety system (1) configured for monitoring an elevator system (2) comprises at least one safety node (12) and an evaluator (19). The at least one safety node (12) is configured for monitoring at least one component of the elevator system (2) and/or of the elevator safety system (1) and providing signals representing the current status of the at least one monitored component. The evaluator (19) configured for receiving the signals from the at least one safety node (12); and for determining a safety status of the elevator system (2) and/or of the elevator safety system (1) from a combination of the received signals.

Abstract: Elevator safety and safety related information needs to be sent reliably to safety controlling systems. Existing elevator communication devices may be used for transmitting this information by processing the received safety and safety related information and processing it before sending it over the communication bus from the elevator car or floor equipment to the controlling devices. A separate communication unit may be used for receiving and processing safety and safety related data packets before they are transmitted over a common bus used for safety and safety non-critical submission.

Abstract: A passenger transport system sensor network has a master unit, a signal-transferring apparatus, and a plurality of sensor nodes each having at least one sensor sensing a physical measurement variable and transferring the sensed variable to the master unit via the signal-transferring apparatus. A sensor-identifying module in the master unit determines the identity of the sensors from information, stored in a database, of: a first information type about reference measurement results to be typically provided by a particular sensor under already known conditions; a second information type about the identity of a sensor node containing the particular sensor, the sensor node having a plurality of different sensors or a plurality of identical sensors in different configurations; and/or a third information type about a configuration of a sensor node holding the particular sensor, which configuration was defined in advance. Sensor identities and installation locations can be determined in an automated manner.

Abstract: Provided is an elevator safety system including: a plurality of communication controllers configured to communicate, over a network, signals including a safety control signal; a control device connected to a first communication controller, which is one of the plurality of communication controllers, and configured to execute operation control of the elevator, in which each of the plurality of communication controllers includes an error ratio measurement instrument configured to measure an error ratio of the network, based on a bit error of data that is received over the network, and in which the control device is configured to execute the operation control by switching the operation state of the elevator in accordance with the error ratio measured by the error ratio measurement instrument that is included in the first communication controller.

Abstract: Elevator safety and safety related information needs to be sent reliably to safety controlling systems. Existing elevator communication devices may be used for transmitting this information by processing the received safety and safety related information and processing it before sending it over the communication bus from the elevator car or floor equipment to the controlling devices. A separate communication unit may be used for receiving and processing safety and safety related data packets before they are transmitted over a common bus used for safety and safety non-critical submission.

Abstract: An elevator control system is configured to control an elevator car constructed and arranged to move along a hoistway defined by a stationary structure. The elevator system may include a communication pathway and a hoistway control system supported by the stationary structure and configured to send a continuous brake command signal over the pathway. A car control system is carried by the elevator car and is configured to receive the continuous brake command signal and initiate a brake Ustop mode upon a loss of the brake command signal, and independent of the hoistway control system.

Abstract: A safety circuit for an elevator system includes a first circuit having a plurality of switching contacts and a second circuit having a plurality of switching contacts. The switching contacts of the first circuit are connected in series, and the switching contacts of the second circuit are connected in parallel. Each switching contact of the first circuit is associated with a different switching contact of the second circuit. The switching contacts that are associated with each other are in opposite switching states.

Abstract: A method for commissioning an elevator system, the system having a control unit, a bus, and a plurality of bus nodes, which nodes are connected with the control unit through the bus, wherein the method includes the following steps: for each bus node, node-specific data are registered by the control unit; for each bus node, the registered node-specific data are compared with a participant list; and for each deviation between the participant list and the registered node-specific data, a message is issued for an operator.

Abstract: An adjustable brake controller of an elevator brake including a DC bus, first terminals for connecting the brake controller to a first magnetizing coil, second terminals for connecting the brake controller to a second magnetizing coil, a first controllable power switch coupled between the first terminals and the DC bus, the first controllable power switch being configured to supply electric power from the DC bus to the first magnetic coil responsive to a first control signal, a second controllable power switch coupled between the second terminals and the DC bus, the second controllable power switch being configured to supply electric power from the DC bus to the second magnetizing coil responsive to a second control signal, and a controller configured to generate the first and the second control signals for controlling the first and second power switches, respectively, with a brake open mode and a brake holding mode.

Abstract: A safety chain circuit includes a plurality of protection devices connected between a first chain end and a second chain end, and an amplifier. The amplifier includes a first device switch and a second device switch connected between an input and an output, a first enabling switch connected between the second chain end and a second enabling switch, and a first control switch and a second control switch. The first enabling switch selectively enables the first control switch to control the first device switch. The second enabling switch selectively enables the second control switch to control the second device switch. The first control switch, when enabled, selectively controls the first device switch in response to receiving a first control signal. The second control switch, when enabled, selectively controls the second device switch in response to receiving a second control signal.

Abstract: A safety system for use in a drive system includes first and second safety sensors that provide respective first and second sensor signals indicative of a safety condition of the drive system. The safety system includes a safety device that processes the first and second sensor signals to determine a safety state of the drive system, and that controls a unit of the drive system based on the safety state. The safety device includes a multi-core processor having first and second processing cores. In some embodiments, the first and second processing cores receive and process the respective first and second sensor signals in parallel to determine the safety state. In other embodiments, each of the first and second processing cores receive both the first and second sensor signals, and each of the first and second processing cores process both the first and second sensor signals to determine the safety state.

Abstract: A method for synchronizing distributed generation power sources during an islanding event may include synchronizing a first one of the islanded local power sources to a master local reference, and synchronizing a second one of the islanded local power sources to the master local reference. In-rush current may be controlled by energizing the local load sequentially in stages when a utility grid is connected to the point of common connection. The local loads may also be selectively energized in response to the amount of available local power generating capacity in an islanding situation. A method for controlling a system having local loads and local power sources may include evaluating the power available from local power sources, adaptively controlling the local loads in response to the power available from the local power sources, and operating the local loads and local power sources as an independent system during an islanding event.

Abstract: An elevator safety control device realizing suppression in increase in cost and labor hour of installation and maintenance without deteriorating safety of normal safety control functions even when a plurality of safety control functions are provided. The elevator safety control device includes an independence assurance unit assuring independence of a safety control function. The independence assurance unit assures independence of each of the safety control functions by monitoring whether or not the safety control function accesses a memory other than a permitted region. When the independence assurance unit detects an access to the memory other than the permitted region by a predetermined safety control function, the elevator safety control device stops a car.

Abstract: According to the present invention, when a parking floor is set as a remote-hall-operating-panel-installed floor, the parking floor can be canceled. As a result of this, during the movement of a passenger from a remote hall operating panel to an elevator hall, it is possible to prevent a car from being on standby at a remote-hall-operating-panel-installed floor. Therefore, because a car to which a remote hall registration has been assigned can effectively use the moving time of the passenger and hence it is possible to improve the operation efficiency of the whole group supervisory control system. Furthermore, it is possible to reduce useless runs and hence to reduce power consumption.

Abstract: A method and control device for monitoring travel movements of an elevator car utilize an electronic control device positioned at the car. Travel movements of the elevator car are travels, speeds or accelerations of the car. At least individual travel movements are subject to redundant detection for the purpose of monitoring. Either the travels or the speeds are redundantly detected and the accelerations singularly detected, or alternatively the accelerations are redundantly detected and the travels or the speeds are singularly detected, or preferably the travels or the speeds and the accelerations are redundantly detected. The electronic control device is preferably arranged at the support rollers of the elevator car.

Abstract: An elevator has a control unit, a bus, a first microprocessor and at least a second microprocessor, which microprocessors are associated with a bus junction and which are connected by the bus with the control unit. The control unit communicates an instruction by the bus to the second microprocessor to interrupt a signal transmission to the first microprocessor so that the first microprocessor transmits a status message to the control unit.

Abstract: Systems and methods are provided that may he useful for testing braking systems for use in, for example, an aircraft. A system is disclosed that allows for built in testing. For example, a method if provided comprising sending, from a brake controller, a test command set to at least one of an electromechanical actuator (EMAC) and a brake servo valve (BSV) in response to a landing gear retraction, receiving, at the brake controller, feedback from the at least one of the EMAC and the BSV in response to the test command set, and comparing, at the brake controller, the feedback with a predetermined signature.

Abstract: In an elevator device, a car is raised and lowered by a plurality of hoisting machines respectively including hoisting machine brakes. Each of the hoisting machine brakes has a braking force large enough to stop the car by itself. Each of a plurality of brake control sections respectively for controlling the corresponding hoisting machine brakes includes a plurality of calculation sections. The calculation sections can detect a failure of the calculation sections by comparing own results of calculations and cause a corresponding one of the hoisting machine brakes to perform a braking operation upon detection of the failure of the calculation sections.

Abstract: A fail-safe power control apparatus for supplying power between an energy source and the motor of a transport system. The power control apparatus includes a power supply circuit, which has at least one converter containing controllable change-over switches, and the power control apparatus has a controller for controlling the converter change-over switches, a data transfer bus, at least two controllers adapted to communicate with each other, and a control arrangement for controlling a first braking device, and possibly a control arrangement for controlling a second braking device.

Abstract: A fail-safe power control apparatus for supplying power between an energy source (4) and the motor (5) of a transport system is provided. The power control apparatus comprises a power supply circuit (6), which comprises at least one converter (7, 8) containing change-over switches (32). The power control apparatus comprises a control arrangement (24) for controlling the converter change-over switches, a data transfer bus (10), at least two controllers (1, 2) adapted to communicate with each other, and a control arrangement (11) for controlling a first braking device, and possibly a control arrangement (43) for controlling a second braking device.

Abstract: In an elevator device, a car is raised and lowered by a plurality of hoisting machines respectively including hoisting machine brakes. Each of the hoisting machine brakes has a braking force large enough to stop the car by itself. Each of a plurality of brake control sections respectively for controlling the corresponding hoisting machine brakes includes a plurality of calculation sections. The calculation sections can detect a failure of the calculation sections by comparing own results of calculations and cause a corresponding one of the hoisting machine brakes to perform a braking operation upon detection of the failure of the calculation sections.

Abstract: In an elevator control apparatus, calculations regarding the control of an elevator are performed in a duplexed system including first and second processing portions. A first clock signal from a first clock is input to the first processing portion. A second clock signal from a second clock is input to the second processing portion. The first and second clock signals are input to a clock abnormality detecting circuit. The clock abnormality detecting circuit counts the numbers of pulses of the first and second clock signals, and detects abnormalities in the first and second clock signals from a difference between the numbers of the pulses.

Abstract: An elevator control device has: a processing portion for controlling an operation of an elevator based on a clock signal; and a detection portion for comparing the number of edges of the clock signal counted within a preset period of time with the preset number of edges to detect a condition of the clock signal to issue an instruction related to the operation of the elevator to the processing portion in accordance with the detection results.

Abstract: An improved lift system door control or safety circuit utilizes locking devices for the lift shaft doors and lock sensors to monitor the status of the locking devices. The lock sensors are coupled to a lift drive unit control through a data bus, which need not be especially designed as a safety data bus. The lock sensors are repeatedly interrogated at short term intervals. The status of the doors is interrogated on a longer time interval, and such data is also passed to the drive unit control by the data bus. The interrogations are used to determine the operating condition of the locking sensors as well as whether communications or transmission errors are present.

Abstract: In a method for monitoring a stationary condition of a drive device, a monitoring device provides the drive device with a temporally varying monitoring signal which, when a sensor device connected to the drive device functions properly, modulates a sensor output signal of the sensor device in accordance with the monitoring input signal. The monitoring device receives the sensor signal and monitors it for the presence of a corresponding signal component. In the absence of such a signal component, the monitoring device controls a safety device which converts the drive device into a safe state. When the drive device is controlled by means of at least two phase-shifted current regulators, it is possible for the monitoring device to monitor an output signal of at least one of the current regulators for constancy and to control the safety device when the output signal of the at least one current regulator changes.

Abstract: A safety monitoring device is provided for a lift car which can be moved in a lift shaft by a traction drive via a lift control system and whose instantaneous position can be registered by a position registering device which supplies two position signals, produced independently of each other, in a predetermined time pattern, having two-channel evaluation of the position signals by means of a microprocessor in each case for location-dependent, instantaneous determination of the speed of the lift car and for comparison with a predefined movement profile, it being possible for a trigger signal that can be output via a safety relay stage to be generated if a predetermined instantaneous speed desired value is exceeded.

Abstract: Signals sent from detectors through input units are inputted to respective microcomputers. Microcomputers are synchronized with each other by an external clock, and execute input processing and arithmetic operation processing. In addition, a common memory is connected to each of the microcomputers, which read out/write data from/to the common memory through respective buses. In such a manner, each of the microcomputers adopts a simple hardware configuration having the external clock and the common memory which are common to the microcomputers.

Abstract: In accordance with a preferred embodiment of the present invention, an electronic safety system for elevators for preventing unsafe elevator operation has a central controller which monitors a variety of sensors, contacts, and switches over an electronic safety bus. A plurality of bus nodes are distributed throughout the elevator system and are in constant communication with the central controller over the safety bus. The bus nodes interface with sensors, switches, contacts, detectors, components, and other safety equipment of the elevator system at each location and provide status information back to the controller. The controller consists of a microprocessor board with an input/output port in communication with the safety bus and bus nodes. Upon sensing an unsafe condition, the controller sends control signals to an elevator control system and a drive and brake system to arrest the elevator car in a safe manner.

Abstract: The elevator control system includes a plurality of car controllers which control respective operations of a plurality of elevator cars, and at least one column of hall terminals. Each hall terminal in a column of hall terminals controls input/output operations relevant to present running display units for the elevator cars, a hall call button unit and arrival notice unit provided at a floor of the building associated with the hall call terminal. A communication relay system relays communication between the plurality of car controllers and the plurality of hall terminals. The communication relay system includes a plurality of slave communication units, each of which corresponds to a column of hall terminals and receives/transmits data from/to the corresponding column of hall terminals. A master communication unit receives/transmits data from/to the plurality of car controllers and the slave communication units.

Abstract: An apparatus and method for controlling a plurality of elevator groups each of which has at least a pair of elevator cars. The apparatus includes a master car controller for collecting data from and controlling a plurality of hall calls, cage calls and motors to thereby manage a respective group of elevator cars, and at least one slave car controller for receiving and internally backing up an allocation command and control command value from the master car controller to thereby control the hall calls, the cage calls and the motors in accordance therewith, thereby enhancing the operating stability of the elevator system.

Abstract: An elevator control data intercommunication programmer including a main board equipped with master and slave CPUs for controlling the operation of the elevator, EEPROMs for providing operation data to the CPUs, a DSP for controlling vector operation of the elevator's motor, and a data communication port for data communication with an external microprocessor unit. Through the data communication port, data can be programmed in the EEPROMs, so that the elevator operation data (parameters) in the memory of a failed CPU can be copied to another CPU for replacement.

Abstract: A transfer switch system includes a controller which sends separately timed restart signals over a communications network to an addressable relay associated with each load in order to sequentially restart the loads following a transfer. When the loads are elevators, the controller sends a prepare to transfer signal to each elevator through the associated addressable relay directing the elevator to park at a floor with its doors open and delays making a discretionary transfer until all elevators send a reply message over the network that they are appropriately parked. A message from the utility directing a reduction in use of their power can be sent to the controller over the communications network through an additional remote station. The controller can then transfer to the alternate power source and/or send messages to selected loads to shut down.

Abstract: A LAN elevator network includes (a) a pair of redundant car buses for exchanging signals with car control system elements, (b) a pair of redundant group buses for exchanging signals with the redundant car buses through a car-group bridge, and (c) a pair of redundant building buses, which exchange messages with a building controller, through a group-building bridge. Communication among all nodes on the car bus, group bus, and building bus occurs using a single protocol. Each communications element on a bus communicates with the bus using a communications coprocessor including a transmitter and a receiver.