JP2001058769A - Elevator control device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To primarily diagnose whether a microcomputer control substrate itself is in failure or not at site by adding a self-diagnosis function to a microcomputer control part of an elevator, to reduce required time when diagnosing within a factory, in particular, and to automatically restore the microcomputer control substrate. SOLUTION: When control software is executed, a CPU 1 is set in a self diagnosis mode, variation 18 of a car location detection part pulse data, a safety circuit on/off signal 19 and a door opening/closing state signal 20 are inputted to determine whether an elevator is in failure and in a stop state or not. When the determination is YES and when a diagnosis count is 1, failure data is extracted from an external storing device 7 and whether a failure is a heavier one than the failure data or not is determined. When the failure is determined to be light, a failure portion is separated, a diagnosis count is cleared and a self diagnosis completion signal 21 is outputted to a reset circuit 22. When the diagnosis count is zero, data required to be backed up in a storing device is stored in the external storing device 7.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an elevator control device, and more particularly, to a microcomputer control unit which stops when a microcomputer stops.
The present invention relates to an elevator control device that performs a self-diagnosis of a microcomputer control unit automatically or according to an external command, saves a diagnosis result in a storage device after the diagnosis, or transfers the result to a monitoring device, and automatically recovers the control device.

[0002]

2. Description of the Related Art The construction of an elevator control device will be described with reference to FIG. The inside of the sequence control unit 43 for controlling the operation of the elevator alone has a C of about 16 to 32 bits.
A PU 1 is mainly composed of a read-only storage element ROM or flash ROM 2 for storing programs, and a readable and writable storage element RAM 3 for data storage.

A storage element RAM 4 for data communication readable and writable with a plurality of CPUs, an electrically erasable storage element EEPROM 5 for storing specification data for each property, and a calendar IC 6 for time control (in the IC, date, date, The I / O port 13 for inputting and outputting the protection logic signal of the elevator, etc., are connected by a common bus 49 such as a multi-bus so as to be accessible from a plurality of CPUs. .

The control unit having a CPU for accessing the common bus 49 includes a motor control unit 44 for controlling the motor and speed of the elevator, a transmission control unit 45 for transmitting data, a car position detecting unit 46, Depending on the options, a group management control unit 47 for operating a plurality of elevators optimally and efficiently, a monitoring panel control unit 48 for displaying the operating status of the elevators in the building and centrally managing them in one place in the building, There is a remote maintenance control unit 10 for the maintenance company to collectively manage the operation, failure, maintenance information, etc. of the existing elevators in the maintenance company.

In addition to the configuration described above, a common bus 49
A maintenance interface 8 for allowing maintenance personnel to check the status of the elevator by a maintenance tool 9 on site, storing program data to be transferred to each control unit, and storing control information of each control unit. And an external storage device 7 such as a memory card for connection.

In general, a memory card compatible with a personal computer or the like is used as the external storage device 7 in consideration of severe dust, portability, and device compatibility depending on the installation environment of the elevator. .

In FIG. 5, all components except the maintenance tool 9 are mounted on a microcomputer control board 65, thereby constituting a microcomputer control unit.

The motor control unit 44 shown in FIG. 5 is configured as shown in FIG. That is, the motor control CPU 50
Uses a 16-bit to 32-bit CPU,
The local bus 56 of the CPU 50 has a read-only element ROM or flash ROM 51 for storing a program, a storage element RAM 52 for executing a program, an I / O 53 for inputting / outputting an elevator protection logic signal and the like, and digitally operating analog data for sensors and speed control. A / D converter 55 required to perform the operation, and D / A converter 5 required to perform an analog operation on digital data required for speed control
4.

The configuration of the transmission control unit 45 shown in FIG. 5 is configured as shown in FIG.

The transmission control unit 45 is composed of a transmission control CPU 57 of about 8 bits and a plurality of transmission drivers 58. Similarly, the transmission driver 58, the remote slave CPU (1) 59S1, and the slave CPU ( 2)
59S2, slave CPU (n) 59Sn, slave C
The I / O port (1) 60S1 from the PU, the I / O port (2) 60S2, and the I / O port (n) 60Sn. Here, n is the number of remote stations.

The structure of the car position detector 46 shown in FIG. 5 is as shown in FIG. The car position detecting section 46 includes a car position detecting CPU 61 of about 8 bits, a pulse input section 62 for receiving a car position by a pulse signal, and an electrically erasable car position data storage element EEPROM 63. I have.

The group management control unit 47, the monitoring panel control unit 48, and the remote maintenance control unit 10 include a sequence control unit 43.
It is realized by the same configuration as described above.

Generally, when a failure occurs in any of these control devices, the CPU 1 of the sequence control unit 43 processes the data of the I / O unit 13 on the common bus 49, and as a result,
The abnormal mode is stored in the RAM 4 of the common bus 49 as error data. Further, the motor control unit 44 has a common bus 49.
Is processed in the I / O unit 53, and as a result, the abnormal mode is stored as error data in the RAM 4 on the common bus 49.

In the transmission control unit 45, the slave CPU (1) 59S1 on the remote side and the slave CPU (2) 59S
2. Check the consistency of transmission / reception data with the slave CPU (n) 59Sn, and store it as error data in the RAM 4 on the common bus 49 when a transmission error occurs.

The car position detector 46 compares the pulse data read from the EEPROM 63 by the CPU 61 with the input signal from the pulse input unit 62 at the time of start-up, and an error is stored in the RAM 4 on the common bus 49 when a pulse shift occurs. Save the data.

[0016] These error data are transmitted from the maintenance interface 8 by the maintenance staff using the maintenance tool 9 at the site.
Read error data of M4, remote maintenance control unit 1
By reading the data in the RAM 4 from a remote place by a remote control device connected to the remote controller 0, a problem on the control device is solved and a countermeasure against a problem on the site is established.

[0017]

However, in this case, since the microcomputer control board is incorporated in the elevator control device, it is not easy to analyze a defect inside the microcomputer control board. Further, if any one port fails in transmission control, it is not possible to specify which port failed.

Further, in the case of an accidental failure, the failure is solved by simply replacing the local microcomputer control board, and the microcomputer control board is brought back without clarifying the cause.
Analysis is performed by the quality control department of the factory, and as a result, there is a case where the substrate has no problem. In this way, if all the failed microcomputer control boards are replaced and the quality control department analyzes each time, the amount of analysis becomes enormous, and the time and cost required for the analysis become enormous. .

As described above, in a control device using a conventional microcomputer, self-diagnosis inside the microcomputer control board cannot be easily performed at the time of a failure at the site. There is a problem that the investigation of the substrate becomes loose and a problem that it takes a lot of time to identify a defective portion of the substrate returned to the factory.

An object of the present invention is to determine whether the cause of a failure on site is a microcomputer control board constituting a microcomputer control unit, and thereby to perform a primary diagnosis of a failed microcomputer control board on site. Therefore, it is an object of the present invention to provide an elevator control device in which a quality control department of a factory can narrow down a failure analysis work on a microcomputer control board and, even in the event of a failure, does not affect passenger service by automatic recovery.

[0021]

According to a first aspect of the present invention, there is provided an elevator control device having a microcomputer control unit for controlling operation of an elevator car, wherein the signal capable of outputting a self-diagnosis signal to the microcomputer control unit is provided. Supply means;
Mutual diagnostic means capable of reading / writing a storage element by at least a plurality of microcomputers constituting a motor control unit and a transmission control unit, updating a clock, checking transmission / reception input / output signals, and diagnosing pulse consistency, and the microcomputer control Unit via a communication line, outputs a self-diagnosis command to the microcomputer control unit when the elevator stops, and the microcomputer control unit performs the mutual diagnosis based on a self-diagnosis signal from the signal supply unit. Remote control means for automatically recovering after performing self-diagnosis together with the means.

According to the first aspect of the present invention, the self-diagnosis of the microcomputer control unit can be performed by the remote control means at the time of failure stop, thereby automatically restoring the microcomputer control board constituting the microcomputer control unit. It is possible to provide an elevator control device that does not affect passenger service.

According to a second aspect of the present invention, there is provided an elevator control apparatus having a microcomputer control section for controlling operation of an elevator car, wherein a signal supply means capable of outputting a self-diagnosis signal to the microcomputer control section, and at least a motor Mutual diagnostic means that can read and write storage elements by multiple microcomputers that make up the control unit and transmission control unit, update the clock, check transmission / reception input / output signals, and diagnose pulse integrity, and at the time of elevator failure stop A self-diagnosis command is output to the microcomputer control unit, and the microcomputer control unit performs a self-diagnosis together with the mutual diagnosis unit based on a self-diagnosis signal from the signal supply unit. If there is no serious effect on operation, only the microcomputer control unit that has the fault location is electrically disconnected and And maintenance tools for automatic recovery by substituting normal operable storage area a failure in a part can be substituted in the event of the device, which is an elevator controller with.

According to the second aspect of the present invention, there is provided an elevator control apparatus capable of performing a self-diagnosis of the microcomputer control unit by using a maintenance tool when the elevator stops, and automatically recovering after the self-diagnosis. Can be provided.

[0025]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a schematic configuration of the elevator control device according to the present embodiment. The same parts as those of the conventional example shown in FIG. The CPU 1 constituting the microcomputer control unit includes a pulse data change amount 18 from a car position detecting unit (not shown), an on / off signal 19 from a safety circuit (not shown), and a door opening / closing state signal 20 from a door opening / closing state detector (not shown). Is input, and a signal supply unit is provided so that the CPU 1 performs a self-diagnosis based on these signals.

Further, a reset circuit 22 is connected to the CPU 1, and when a self-diagnosis completion signal 21 is inputted from the CPU 1, a reset signal 23 is given to the CPU 1.

Further, a signal output circuit 16 for outputting an elevator status output signal 17 from the I / O 13 and an elevator status output signal 1 of the signal output circuit 16 are provided to the I / O 13.
7 and the elevator status input signal 15 to the I / O 13
Is provided with a mutual diagnosis means consisting of a signal input circuit 14 for inputting the signal to the input terminal. This mutual diagnosis means can read / write the storage element by at least a plurality of microcomputers constituting the motor control unit and the transmission control unit, update the clock, check the transmission / reception input / output signals, and diagnose the pulse consistency.

Further, the CPU 1 has a failure signal 24 indicating whether the elevator car is stopped running or has failed and is stopped.
Is input as an interrupt.

The remote control means comprises a remote maintenance control unit 10, a public line 11, and a central monitoring unit 12. When the elevator stops operating, the microcomputer control unit, that is, the CPU
The CPU 1 outputs a self-diagnosis command to the CPU 1 and automatically recovers after performing self-diagnosis in addition to the diagnosis by the mutual diagnosis means.

The common bus 49 is provided with a maintenance tool 9 via a maintenance interface 8. The maintenance tool 9 outputs a self-diagnosis command to the microcomputer control unit, that is, the CPU 1 when the elevator stops. CPU
1 performs a self-diagnosis, and as a result, in the case of a failure again, if there is no serious effect on the operation of the elevator, only the microcomputer control unit at the failure location is electrically disconnected, and a part of the storage element is The automatic recovery is performed by substituting a normally operable storage area that can be substituted when a failure occurs.

Next, the operation of the above-described embodiment will be described. This will be described with reference to the flowchart of FIG.
In FIG. 3, the control software is initialized (S
1) The control software is executed (S2). In this state, the CPU 1 of the control unit enters the self-diagnosis mode, and responds to the 1 / O signal such as the car position detection unit pulse data change amount 18, the safety circuit ON / OFF signal 19, and the door open / close state signal 20 shown in FIG. Then, it is determined whether the elevator has failed and is in a stopped state by interrupt processing for a predetermined time (S4).

This self-diagnosis mode is always performed only when the elevator is in failure and in a stopped state, because if performed while the elevator is running, there is a danger that the control system will run away due to rewriting of data at the time of self-diagnosis. To do. When the elevator is out of order and stopped, the interruption is terminated (S5). The failure signal 24 is output from the maintenance tool 9 or the central monitoring device 7, and issues an external interrupt signal to the CPU 1 only when the elevator has failed and stopped.

When the CPU 1 receives the failure signal 24 as an interrupt signal, it performs processing in a self-diagnosis mode. That is, when the maintenance person issues a command of the self-diagnosis mode to the microcomputer control board from the maintenance tool 9 via the maintenance interface 8 in the elevator stopped state, the CPU 1 executes the self-diagnosis mode.

By issuing a command in the self-diagnosis mode from the central monitoring device 12, the remote maintenance control unit 10 transmits the CP in the same manner as the maintenance tool 9 through the public line 11.
It is possible to cause U1 to perform processing in the self-diagnosis mode.

Further, apart from these configurations, the fault signal 24
Is used as an interrupt signal of the CPU 1 so that the CPU 1 can automatically perform the process in the self-diagnosis mode when a failure occurs.

In the self-diagnosis mode processing, if the diagnosis count is 1 (S6), the failure data is extracted from the external storage device 7 (S27), and it is determined whether or not the failure data is a more serious failure (S28). . If it is determined that the failure is severe, the failure is determined to be permanent (S32).

If it is determined that the failure is minor, the failure location is separated and the diagnostic count is cleared (S29, S30),
The self-diagnosis completion signal (self-diagnosis end signal) 21 is output to the reset circuit 22. The reset circuit 22 returns a one-shot reset signal 23 to the CPU 1 in response to this signal, whereby the CPU 1 returns to its original state (S31).

If the diagnostic count is 0 in step S6, the CPU 1
2. Data that needs to be backed up in the RAM 3 and the RAM 4 is saved (evacuated) to the external storage device 7 (S7).

Next, a write / read check of an empty area (empty area) of the ROM or flash ROM 2 is performed (S8), and the result is stored in a storage element (RAM3, RAM3).
4) write / read check, calendar IC 6 time update check, pulse data deviation check (pulse data consistency check), I / O1
The abnormality check and the transmission check of the input data 3 are continuously and repeatedly performed within a predetermined time.

The write / read check of the memory (storage element) is performed for data 0, 1, 2, 4, 8, 10, 20, 40,
80, 100, 200, 400, 800, 1000, 2
000, 4,000, 8000, and each bit is turned on / off one bit at a time, and the data is returned and the data at the same address is read again for confirmation (S9, S10).

The write / read check of the I / O 13
Similarly to the conventional check method, the elevator status input signal 15 is transmitted to the CP via the signal input circuit 14 and the I / O 13.
It is calculated in U1, and it is confirmed whether the elevator state input signal 15 is in an abnormal state. All states of the elevator state input signal 15 are stored in the external storage device 7 (S1
1).

The elevator status output signal 17 obtained via the I / O 13 and the signal output circuit 16 is output to the I / O 13 via the signal input circuit 14. The output elevator state output signal 17 has a circuit configuration that can be read back by the signal input circuit 14, and confirms that output data can be read correctly at the time of input. Further, all states of the elevator state output signal 17 are stored in the external storage device 7.
To save.

Here, the transmission check function of the mutual diagnosis means will be described with reference to FIGS. In FIG. 2, the master CPU 25 is a remote slave CPU.
(1) 31, slave CPU (2) 34,... Slave C
The n-bit data is sent to each CPU of the PU (n) 37 via the n-bit register 29, and only the 1-bit station is connected for transmission, and the 0-bit station is disconnected from transmission.

Transmission connection / disconnection is performed by slave CPU.
(1) 31, slave CPU (2) 34, slave CP
The transmission signal 42 can be connected and disconnected by disabling the slave CPU transmission permission signal 40 and the slave CPU reception permission signal 41 that are individually output from the U (n) 37 when connecting and disabling each station. Becomes

On the slave side, in addition to the input / output ports required for elevator control, an output port and an input port for self-diagnosis are prepared about 8 bits each. Slave CPU
(1) 31 is an output port (1) 32 and an input port (1)
33, slave CPU (2) 34 is output port (2) 3
5, input port (2) 36, slave CPU (n) 37
Is connected to the output port (n) 38 and the input port (n) 39 in a loop-back manner.

If the transmission line is not disconnected, the connected port confirms whether the output data can be read back from the master CPU 25 at the input port, and confirms whether the transmission is normally performed.

Therefore, the transmission check is performed by transmitting the connection connection / disconnection data, and the slave CPU is determined in steps S12 to S17 in the flowchart of FIG.
And transmission.

A state of redundant bits such as an overflow error, a parity error, and a framing error of transmission data at the time of transmission is diagnosed by a transmission check (S18), and an external storage of which station is connected and which error has occurred is performed. It is stored in the device 7 (S19).

Next, in the pulse data consistency check, when a pulse shift occurs, the value of the shift of the pulse data is stored in the external storage device 7 (S20).

This process is repeated for a predetermined period of time or a predetermined number of times, and the diagnostic result is stored in the external storage device 7.
Use to check the diagnostic results.

The diagnosis result is sent to the remote maintenance control unit 10 and transmitted to the central monitoring device 12 via the public line 11. The diagnostic results are sequentially written to the external storage device 7 at the end of each item such as a RAM check and a transmission check.
Month / day / hour / minute / second / day of the week, normal / abnormal judgment, comparison result between regular address and abnormal address, comparison result between regular data and abnormal data, etc. are written (S21).

After completing the self-diagnosis, the CPU 1 first returns the saved data from the external storage device 7 to the RAM 4 and the EEPROM 5 on the common bus 49. The self-diagnosis data stored in the external storage device 7 is transferred to the area of the RAM 4 on the common bus 49 for mutual communication with the remote maintenance control unit 10 (S22). The self-diagnosis data is transferred to the maintenance tool 9 via the maintenance interface 8 or the central monitoring device 1 via the remote maintenance control unit 10 and the public line 11.
2 (S23). Therefore, the maintenance tool 9 or the central monitoring device 12 can make a primary diagnosis as to whether or not the microcomputer control board itself is faulty. After transferring the self-diagnosis data to the maintenance tool 9, the central monitoring device 12, etc., the self-diagnosis mode issued by the maintenance tool 9 or the remote maintenance control unit 10 is cleared (S24), and the self-diagnosis completion signal 21 is reset by the reset circuit. The reset circuit 22 outputs a one-shot reset signal 23 to C (S25).
By returning to PU1, CPU 1 recovers itself.

[0053]

According to the present invention, by adding a self-diagnosis function to the microcomputer control unit of the elevator, it is possible to perform a primary diagnosis on-site as to whether or not the microcomputer control board itself constituting the microcomputer control unit is faulty. Thus, it is possible to reduce the time required for diagnosis in a factory, to reduce the time required for finding the location of a failure on a failed board, and to provide an elevator control device capable of automatic recovery.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a schematic configuration of an embodiment of an elevator control device according to the present invention.

FIG. 2 is a block diagram illustrating a schematic configuration of a transmission control unit in the elevator control device of FIG. 1;

FIG. 3 is a flowchart for explaining the operation of the elevator control device of FIG. 1;

FIG. 4 is a flowchart for explaining the operation of the elevator control device of FIG. 1;

FIG. 5 is a configuration diagram showing a configuration of a car position detection unit of a microcomputer control unit of an elevator according to the related art.

FIG. 6 is a configuration diagram showing a configuration of a car position detection unit of a microcomputer control unit of an elevator according to a conventional technique.

FIG. 7 is a configuration diagram showing a configuration of a car position detection unit of a microcomputer control unit of an elevator according to a conventional technique.

FIG. 8 is a configuration diagram showing a configuration of a car position detection unit of a microcomputer control unit of an elevator according to a conventional technique.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... CPU 2 ... ROM or flash ROM 3, 4 ... RAM 5 ... EEPROM 6 ... Calendar IC 7 ... External storage device 8 ... Maintenance interface 9 ... Maintenance tool 10 ... Remote maintenance control unit 11 ... Public line 12 ... Central monitoring device 13 ... I / O 14 ... Signal input circuit 15 ... Elevator status input signal 16 ... Signal output circuit 17 ... Elevator status output signal 18 ... Cage position detector pulse data change amount 19 ... Safety circuit on / off signal 20 ... Door opening / closing status signal 21 ... Self-diagnosis completion signal 22 ... Reset circuit 23 ... CPU reset signal 24 ... Failure signal 25 ... Master CPU 26 ... Master CPU transmission permission signal 27 ... Master CPU reception permission signal 28 ... Transmission driver 29 ... N bit register 30 ... Transmission disconnection signal 31 ... Slave CPU (1) 32 ... Output port ( ) 33 ... input port (1) 34 ... slave CPU (2) 35 ... output port (2) 36 ... input port (2) 37 ... slave CPU (n) 38 ... output port (n) 39 ... input port (n) 40 ... Slave CPU transmission permission signal 41 ... Slave CPU reception permission signal 42 ... Transmission signal

Claims (4)

[Claims] 1. An elevator control device having a microcomputer control unit for controlling operation of an elevator car, comprising: a signal supply unit capable of outputting a self-diagnosis signal to the microcomputer control unit; and at least a motor control unit and a transmission control unit. Mutual diagnostic means capable of reading / writing a memory element by a plurality of microcomputers, updating a clock, checking transmission / reception input / output signals, and diagnosing pulse consistency, connected to the microcomputer control unit via a communication line. Automatically outputting a self-diagnosis command to the microcomputer control unit when the elevator stops and automatically performing self-diagnosis together with the mutual diagnosis unit based on the self-diagnosis signal from the signal supply unit. An elevator control device comprising: a remote control means for restoring. 2. An elevator control device having a microcomputer control unit for controlling operation of an elevator car, comprising: a signal supply unit capable of outputting a self-diagnosis signal to the microcomputer control unit; and at least a motor control unit and a transmission control unit. Mutual diagnostic means capable of reading and writing storage elements by a plurality of microcomputers, updating clocks, checking transmission / reception input / output signals, and diagnosing pulse consistency, and for the microcomputer control unit at the time of elevator failure stop A self-diagnosis command is output, and the microcomputer control unit performs a self-diagnosis together with the mutual diagnosis unit based on the self-diagnosis signal from the signal supply unit. If not, only the microcomputer control unit that has the fault location is electrically disconnected, and a failure occurs in a part of the storage element. And a maintenance tool for automatically recovering by substituting a normally operable storage area that can be substituted in the event of an elevator control device. 3. The elevator control device according to claim 1, wherein the self-diagnosis result is stored in an external storage device. 4. The elevator control device according to claim 1, wherein the self-diagnosis result is transferred to a monitoring device.