JP7690386B2 - Elevator control program rewriting system and elevator control program rewriting method - Google Patents

Description

The present invention relates to an elevator control program rewriting system and an elevator control program rewriting method.

In order to improve or add new functions to an elevator's control functions, the elevator's control program may need to be rewritten. Conventionally, to rewrite such a control program, a maintenance worker would go to the building where the elevator was installed and directly rewrite the elevator's control program.

Meanwhile, Patent Document 1 discloses a technology that allows an elevator's control program to be updated remotely without a maintenance worker having to visit the elevator. Patent Document 1 discloses that the monitoring center acquires video and audio from inside the elevator, and then remotely rewrites the control program after confirming that no one is inside the elevator.

JP 2007-34712 A

In this way, in Patent Document 1, the elevator control program can be updated remotely without stopping the elevator's operation. Furthermore, in Patent Document 1, the control program is rewritten only after it is confirmed that no one is inside the elevator car, ensuring safety when the control program is rewritten.

However, when rewriting the control program, the program may be corrupted due to some cause, such as a momentary stop, resulting in a system failure. When updating the control program in the hall terminal devices installed on each floor of the elevator, if the update of the control program does not go well for some reason, it takes a lot of time to identify the faulty terminal from among the multiple hall terminal devices.

The present invention provides an elevator control program rewriting system and elevator control program rewriting method that suppresses system failures when a control program rewrite fails and makes it easy to identify the hall terminal device where the control program rewrite failed.

In order to solve the above problems and achieve the object of the present invention, the elevator control program rewriting system of the present invention comprises a plurality of hall terminal devices installed at each landing floor, and a unit control unit having a hall terminal control unit that controls the hall terminal devices. The hall terminal devices have an input/output unit that inputs information from users and presents information to users. The hall terminal devices also have a communication control unit that controls communication with the unit control unit, and an input/output control unit that controls the input/output unit and receives specific data from the communication control unit when the control program of the communication control unit is rewritten. The hall terminal devices also have a communication path disconnection unit that disconnects the communication path with the unit control unit if an abnormality occurs when the control program of the communication control unit is rewritten, based on the specific data received by the input/output control unit.

The elevator control program rewriting method of the present invention includes a step of transmitting a control program rewrite command from a car control unit having a hall terminal device that controls the hall terminal device to a hall terminal device installed on a landing floor. It also includes a step of rewriting the control program of a communication control unit in the hall terminal device that controls communication with the car control unit. It also includes a step of receiving specific data sent from the communication control unit by an input/output control unit that controls an input/output unit that inputs information from users and presents information to users when rewriting the control program in the communication control unit. It also includes a step of disconnecting the communication path to the car control unit if an abnormality occurs when rewriting the control program of the communication control unit based on the specific data received by the input/output control unit.

This invention makes it possible to prevent system failures when a control program rewrite fails, and to easily identify the hall terminal device where the control program rewrite failed.

1 is a schematic configuration diagram of an elevator system according to an embodiment of the present invention. 13 is a table showing the usage information analyzed and stored in the usage information analysis unit 35. A block diagram showing the configuration of a control system of the hall terminal device 6. A diagram showing the control flow of the elevator control unit 3 when rewriting the elevator control program. A diagram showing the control flow in the hall terminal control unit 60 when rewriting the elevator control program. Fig. 6A is a control flow showing a method of determining an abnormality when the control program of the communication control unit 67 is rewritten. Fig. 6B is a control flow showing a method of determining an abnormality when the control program of the input/output control unit 69 is rewritten.

Below, an example of an elevator control program rewriting system and elevator control program rewriting method according to an embodiment of the present invention will be described with reference to the drawings. Note that the present invention is not limited to the following example. In each of the drawings described below, common components are given the same reference numerals.

<Elevator system configuration>
First, an elevator system according to an embodiment of the present invention will be described with reference to the drawings. Fig. 1 is a schematic configuration diagram of an elevator system 1 according to an embodiment of the present invention (hereinafter, referred to as this embodiment). The elevator system 1 shown in Fig. 1 includes an elevator control program rewriting system of the present invention. The elevator control program rewriting system of the present invention may include the entire elevator system shown in Fig. 1, or may be configured from a part of the elevator system shown in Fig. 1.

As shown in FIG. 1, the elevator system 1 of this embodiment is composed of an elevator management unit 2 and an elevator 10 managed by the elevator management unit 2.

[Elevator Management Department 2]
The elevator management unit 2 (corresponding to the remote terminal of the present invention) is provided in a management center located at a remote location away from the building in which the elevator 10 is installed. The elevator management unit 2 includes a terminal rewriting unit 22 and an abnormality display unit 21. The terminal rewriting unit 22 is connected to a terminal program storage unit 36 of the car control unit 3 described later via a communication unit (not shown). The terminal rewriting unit 22 transmits a control program for the hall terminal device 6 described later to the car control unit 3 that controls the entire elevator 10, and also transmits a rewrite command for the control program. In this embodiment, when it becomes necessary to rewrite (update) the control program in the hall terminal device 6, the terminal rewriting unit 22 transmits a new control program to the terminal program storage unit 36 of the car control unit 3.

The control program is sent from the terminal rewriting unit 22, for example, when the manager performs operations related to rewriting the control program via an operation unit (not shown). Alternatively, the control program may be sent from the terminal rewriting unit 22 based on a command from a personal terminal such as a smartphone or tablet terminal that is configured to be able to communicate with the elevator management unit 2 via a communication unit (not shown).

The abnormality display unit 21 is a monitor consisting of, for example, an LCD (Liquid Crystal Display) or the like, and displays the results of processing performed by the elevator control program rewrite system. In this embodiment, the abnormality display unit 21 is connected to an abnormality detection unit 31 of the elevator control unit 3, which will be described later, via a communication unit (not shown), and displays the location of the abnormality detected by the abnormality detection unit 31. Specifically, if an abnormality occurs when rewriting the control program of the hall terminal device 6, the hall terminal device 6 identified as having an abnormality among the multiple hall terminal devices 6-1, 6-2, ... is displayed on the abnormality display unit 21. This makes it possible to identify the hall terminal device 6 in which the abnormality has occurred and notify the manager or maintenance staff.

[Elevator]
The elevator 10 includes a car control unit 3, a car 4, a hoist 5, and hall terminal devices 6 (6-1, 6-2, ...). In the following description, when referring to one of the multiple hall terminal devices 6-1, 6-2, ..., it will be referred to as hall terminal device 6.

<Unit control unit>
Under the management of an elevator management unit 2 provided in a management center, the elevator control unit 3 controls the car 4, the hoist 5, and a plurality of hall terminal devices 6-1, 6-2, ... for each elevator control unit 3. The elevator control unit 3 includes an abnormality detection unit 31, a terminal program storage unit 36, a car control unit 32, a motor control unit 33, a hall terminal control unit 34, and a usage information analysis unit 35.

The abnormality detection unit 31 detects abnormalities in the car control unit 32, the motor control unit 33, and the hall terminal control unit 34, and transmits the detected abnormality signal to the abnormality display unit 21 of the elevator management unit 2. In this embodiment, if an abnormality is detected during rewriting of the control program in the hall terminal device 6, the abnormality signal is transmitted to the abnormality display unit 21 of the elevator management unit 2.

The terminal program storage unit 36 stores a new control program based on the control program of the hall terminal device 6 and the rewrite command sent from the terminal rewrite unit 22 of the elevator management unit 2. The control program stored in the terminal program storage unit 36 is sent from the hall terminal control unit 34 to each of the hall terminal devices 6-1, 6-2, ... at a predetermined timing.

The car control unit 32 controls the opening and closing of the car door in the car 4 and the display on the display unit (not shown) in the car 4. In addition, when a car call is made by an operation button (not shown) installed in the car 4, it acquires a car call signal.

The motor control unit 33 controls the hoist 5 to raise and lower the car 4 based on car calls issued by an operating button installed in the car 4 or hall calls issued by the hall button 61 (Figure 3) of the hall terminal device 6.

The hall terminal control unit 34 receives hall call signals issued by operating hall buttons 61 on hall terminal devices 6 installed on each hall floor. The hall terminal control unit 34 also extracts control programs stored in the terminal program storage unit 36 at a predetermined timing, and transmits the extracted control programs to a predetermined hall terminal device 6.

The usage information analysis unit 35 analyzes the usage information of each landing floor from the average number of calls made by each hall terminal device 6-1, 6-2, etc. installed at each landing floor. FIG. 2 is a table showing the usage information analyzed and stored by the usage information analysis unit 35. As shown in FIG. 2, the table showing the usage information records the average number of calls made for each working day from Monday to Sunday and for each landing floor. Furthermore, the table showing the usage information records an item for the number of days (number of non-working days) when the car 4 did not stop at that landing floor.

In this embodiment, when rewriting the control program of the hall terminal device 6, the usage information shown in FIG. 2 is referenced. Then, on the day of the week when the control program is updated, the control program is updated in order starting with the hall terminal device 6 with the lowest average number of calls. This method of rewriting the elevator control program will be described in detail later.

<Riding car>
The car 4 is disposed in a hoistway that vertically passes through each floor of the building, and has a hollow cubic shape for carrying people and luggage. The car 4 is connected to a counterweight (not shown) via a main rope 51, and moves up and down in the hoistway when the hoist 5 is driven. In addition, a car door provided on the car 4, and a display unit and in-car buttons (not shown) installed inside the car 4 are controlled by a car control unit 32 of the car control unit 3.

The hoist 5 is installed, for example, in a machine room provided at the top of the elevator shaft. The hoist 5 has a sheave (not shown) around which a main rope 51 is wound, connecting the car 4 and a counterweight (not shown). The hoist 5 is driven to rotate under the control of the motor control unit 33, thereby raising and lowering the car 5 in the elevator shaft.

Hall terminal equipment
The hall terminal devices 6-1, 6-2, ... are installed in each hall of the landing floor. Each of the hall terminal devices 6-1, 6-2, ... is connected to the hall terminal control unit 34 of the elevator control unit 3 and is controlled by the hall terminal control unit 34.

Figure 3 is a block diagram showing the configuration of the control system of the hall terminal device 6. Since the multiple hall terminal devices 6-1, 6-2, etc. have the same configuration, Figure 3 explains the configuration of one hall terminal device 6 as a representative.

As shown in FIG. 3, the hall terminal device 6 includes a hall terminal control unit 60 and an input/output unit 72 consisting of a display 62 and hall buttons 61.

The hall terminal control unit 60 includes a communication path disconnection unit 63, a communication disconnection determination unit 64, a communication control unit 67, an input/output control unit 69, an input/output disconnection determination unit 68, and an input/output disconnection unit 70. The hall terminal control unit 60 further includes a first program storage unit 65, a second program storage unit 66, and a maintenance/normal mode discrimination unit 71.

The communication path disconnection unit 63 disconnects the communication path that transmits and receives signals to and from the hall terminal control unit 60 at a predetermined timing. In this embodiment, if the rewriting of the control program in the communication control unit 67 or the input/output control unit 69 fails, the communication path disconnection unit 63 disconnects the communication path based on a signal from the communication control unit 67 or a signal from the communication disconnection determination unit 64.

The communication disconnection determination unit 64 determines whether or not to disconnect the communication path with the unit control unit 3 based on whether or not there is an abnormality in the communication control unit 67, specifically, whether or not an abnormality occurs when the control program is rewritten in the communication control unit 67. The communication disconnection determination unit 64 then transmits the determination result to the communication path disconnection unit 63. In this embodiment, the occurrence of an abnormality when the control program is rewritten in the communication control unit 67 is detected by the input/output control unit 69. The communication disconnection determination unit 64 then determines whether to disconnect the communication path based on the abnormality signal detected in the input/output control unit 69.

The communication control unit 67 is connected to the hall terminal control unit 34 via the communication path disconnection unit 63, and controls communication related to sending and receiving signals between the hall terminal control unit 34 and the input/output control unit 69 in the hall terminal internal control unit 60. In this embodiment, at a predetermined timing, the existing control program in the communication control unit 67 is rewritten by a new control program stored in the first program storage unit 65. The method of rewriting the control program in the communication control unit 67 will be described in detail later.

The input/output control unit 69 is connected to an input/output unit 72, which is composed of a hall button 61 and a display 62, via an input/output disconnection unit 70, and controls and processes input signals from the hall button 61 and output signals to the display 62. In this embodiment, at a predetermined timing, the existing control program in the input/output control unit 69 is rewritten by a new control program stored in the second program storage unit 66. The method of rewriting the control program in the input/output control unit 69 will be described in detail later.

The I/O disconnection determination unit 68 determines whether to disconnect the I/O path between the I/O unit 72 and the I/O control unit 69 based on whether there is an abnormality in the I/O control unit 69, specifically, whether an abnormality occurs when the control program is rewritten in the I/O control unit 69. The I/O disconnection determination unit 68 then transmits the determination result to the I/O disconnection unit 70. In this embodiment, the occurrence of an abnormality when the control program is rewritten in the I/O control unit 69 is detected by the communication control unit 67. The I/O disconnection determination unit 68 then determines whether to disconnect the I/O path based on the abnormality signal detected in the communication control unit 67.

The I/O disconnection unit 70 determines whether to enable or disable the I/O in the I/O unit 72 based on signals sent from the I/O control unit 69, the I/O disconnection determination unit 68, and the maintenance/normal mode discrimination unit 71. If the I/O disconnection unit 70 determines that the I/O with the I/O unit 72 is to be disabled, it disconnects the transmission/reception path with the I/O unit 72 based on the determination result. The timing of the I/O disconnection unit 70 disconnecting the transmission/reception path with the I/O unit 72 will be described in detail later.

The maintenance/normal mode discrimination unit 71 determines whether the set mode in the unit control unit 3 is the maintenance mode or the normal mode based on a signal from the communication control unit 67. The maintenance mode is the mode set when a maintenance person inspects the elevator 10 or the elevator system 1. The normal mode is the normal mode in which the elevator car 4 rises and falls in response to hall calls and car calls from users. In this embodiment, when the control program is rewritten, the discrimination result in the maintenance/normal mode discrimination unit 71 is sent to the input/output separation unit 70 under the control of the communication control unit 67 at a specified timing.

The first program storage unit 65 stores a new control program for the communication control unit 67 that is sent from the hall terminal control unit 34 via a communication unit (not shown) of the hall terminal control unit 60. The control program sent from the hall terminal control unit 34 to the hall terminal control unit 60 is temporarily stored in the first program storage unit 65. Then, at a predetermined timing, the control program of the communication control unit 67 is rewritten by the control program stored in the first program storage unit 65.

The second program storage unit 66 stores a new control program for the input/output control unit 69 that is sent from the hall terminal control unit 34 via a communication unit (not shown) of the hall terminal control unit 60. The control program for the input/output control unit 69 that is sent from the hall terminal control unit 34 to the hall terminal control unit 60 is temporarily stored in the second program storage unit 66. Then, at a predetermined timing, the control program for the input/output control unit 69 is rewritten by the control program stored in the second program storage unit 66.

The input/output unit 72 includes a hall button 61 and a display 62. The input/output unit 72 is connected to the input/output control unit 69 via the input/output disconnection unit 70 of the hall terminal control unit 60. The input/output unit 72 is controlled by the input/output control unit 69. The hall button 61 receives input of hall call operations from users. The display 62 also displays the floor at which the elevator car 4 is stopped, etc.

The above-mentioned elevator management unit 2, elevator control unit 3, car control unit 32, motor control unit 33, hall terminal control unit 34, hall terminal internal control unit 60, communication control unit 67, and input/output control unit 69 are each controlled and processed under the control of a control processing unit (not shown). Each control processing unit includes, for example, a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), and non-volatile storage, each connected to a bus.

The CPU reads out from the ROM the program code of the software that realizes each function configured in each part, expands it into the RAM, and executes it. Note that the control processing unit may be equipped with a processing device such as an MPU (Micro-Processing Unit) instead of a CPU. Variables, parameters, etc. that arise during the calculation process are temporarily written to the RAM.

For example, a hard disk drive (HDD), a solid state drive (SSD), a flexible disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a non-volatile memory card, etc. can be used as non-volatile storage. In addition to the operating system (OS) and various parameters, programs for operating the control processing unit, etc. are recorded in this non-volatile storage. The programs may be stored in a ROM.

The program is stored in the form of computer-readable program code, and the CPU sequentially executes operations according to the program code. In other words, the ROM or non-volatile storage is used as an example of a computer-readable non-transient recording medium that stores a program executed by a computer. In this embodiment, in the hall terminal control unit 60, the control programs stored in the ROM or non-volatile storage provided in the communication control unit 67 and the input/output control unit 69 are rewritten to the control programs stored in the first program storage unit 65 or the second program storage unit 66, respectively.

<How to rewrite the elevator control program>
Next, a method for rewriting an elevator control program in this embodiment will be described.

Figure 4 shows the control flow of the elevator control unit 3 when the elevator control program is rewritten. Also, Figure 5 shows the control flow in the hall terminal control unit 60 when the elevator control program is rewritten.

<Control flow in unit control unit 3>
First, the control flow of the elevator control unit 3 when rewriting the elevator control program will be described with reference to FIG.

First, the hall terminal control unit 34 extracts from the usage information analysis unit 35 the terminals with the lowest usage status among the hall terminal devices 6-1, 6-2, etc. whose control programs have not yet been rewritten (step S1). In step S1, the table stored in the usage information analysis unit 35 shown in FIG. 2 is referenced to extract the day of the week on which the control program of the hall terminal device 6 will be rewritten and the hall terminal device 6 with the lowest average number of calls on that day from among the hall terminal devices 6 whose control programs have not yet been rewritten. For example, if the day of the week on which the control program will be rewritten is Wednesday and the control program has not yet been rewritten in all of the hall terminal devices 6-1, 6-2, etc., the hall terminal device 6 on the landing floor with the lowest number of calls from a3 times, b2 times, etc. is extracted as the target for rewriting.

Next, the hall terminal control unit 34 sends a control program rewrite command to the communication control unit 67 of the hall terminal device 6 extracted in step S1 (step S2). At this time, if the new control program for the communication control unit 67 has not been sent to the hall terminal device 6, the hall terminal control unit 34 reads out the new control program for the communication control unit 67 stored in the terminal program storage unit 36 and sends it to the hall terminal device 6. The new control program to be rewritten that has been sent to the hall terminal device 6 is stored in the first program storage unit 65.

In addition, in a stage prior to step S2, the hall terminal control unit 34 may transmit a new control program stored in the terminal program storage unit 36 to the hall terminal device 6, and the new control program may already be stored in the first program storage unit 65. In this case, in step S2, the hall terminal control unit 34 transmits only a command to rewrite the control program to the communication control unit 67 of the hall terminal device 6.

After step S2, the control program of the communication control unit 67 is rewritten in the hall terminal control unit 60. While the control program of the communication control unit 67 is being rewritten in the hall terminal control unit 60, the abnormality detection unit 31 receives a signal via the hall terminal control unit 34 notifying the presence or absence of an abnormality in the hall terminal control unit 60. Based on this signal, the abnormality detection unit 31 determines whether an abnormality occurred when the control program of the communication control unit 67 was rewritten (step S3).

If the answer in step S3 is "YES", that is, if it is determined that an abnormality has occurred, the abnormality detection unit 31 sends an abnormality signal to the abnormality display unit 21 of the elevator management unit 2 (step S7). In the elevator management unit 2, the abnormality display unit 21 displays information identifying the hall terminal device 6 in which the abnormality has occurred and information regarding the location of the abnormality (communication control unit 67) based on the received signal.

If the answer in step S3 is "NO," i.e., if it is determined that no abnormality has occurred, the hall terminal control unit 34 sends a command to rewrite the control program to the input/output control unit 69 of the hall terminal device 6 extracted in step S1 (step S4).

At this time, if the new control program for the input/output control unit 69 has not been sent to the hall terminal device 6, the hall terminal control unit 34 reads out the new control program for the input/output control unit 69 stored in the terminal program storage unit 36 and sends it to the hall terminal device 6. The new control program sent to the hall terminal device 6 is stored in the second program storage unit 66.

In addition, in a stage prior to step S4, the hall terminal control unit 34 may transmit a new control program stored in the terminal program storage unit 36 to the hall terminal device 6, and the new control program may already be stored in the second program storage unit 66. In this case, in step S2, the hall terminal control unit 34 transmits only a command to rewrite the control program to the input/output control unit 69 of the hall terminal device 6.

After step S4, the control program of the input/output control unit 69 is rewritten in the hall terminal control unit 60. While the control program of the input/output control unit 69 is being rewritten in the hall terminal control unit 60, the abnormality detection unit 31 receives a signal notifying the presence or absence of an abnormality in the input/output control unit 69 via the hall terminal control unit 34. Then, based on this signal, the abnormality detection unit 31 determines whether an abnormality occurred when the control program of the input/output control unit 69 was rewritten (step S5).

If the result of step S5 is "YES", i.e., if it is determined that an abnormality has occurred, the abnormality detection unit 31 sends an abnormality signal to the abnormality display unit 21 of the elevator management unit 2. In the elevator management unit 2, the abnormality display unit 21 displays information identifying the hall terminal device 6 in which the abnormality has occurred and information regarding the location of the abnormality (input/output control unit 69) based on the received signal (step S7).

If step S5 returns "NO," i.e., if it is determined that no abnormality has occurred, the hall terminal control unit 34 determines whether or not rewriting of the control program has been completed in all hall terminal devices 6-1, 6-2, etc., installed in the elevator 10. If step S6 returns "NO," i.e., if there is a hall terminal device 6 for which rewriting of the control program has not yet been completed, steps S1 to S7 are repeated.

On the other hand, if the answer in step S6 is "YES," i.e., if it is determined that the rewriting of the control program has been completed successfully in all hall terminal devices 6-1, 6-2, etc., the control program rewriting process is terminated.

The control flow shown in FIG. 4 can be started by operation from the management center 2 connected to the elevator control unit 3 via a communication unit (not shown) or from a personal terminal. Therefore, a command to rewrite the control program can be sent from a remote location. In this embodiment, the information from the usage information analysis unit 35 is used to rewrite the control program starting from the hall terminal device 6 that has been used the least number of times on that day of the week. This allows the control program to be rewritten more safely without stopping elevator operation.

<Control flow in the control unit in the hall terminal>
First, the control flow of the hall terminal control unit 60 when rewriting the elevator control program will be described with reference to FIG.

First, the communication control unit 67 determines whether or not a signal regarding rewriting the control program has been received from the hall terminal control unit 34 of the machine control unit 3 (step S11).

If the answer in step S11 is "NO," i.e., if a signal for rewriting the control program has not been received, normal processing is performed (step S12). Normal processing is normal processing related to the operation of the elevator 10, and includes processing for responding to hall calls input from the hall button 61 and processing for outputting information on the stopping floor of the car 4 to the display 62.

If the result of step S11 is "YES", that is, if a signal regarding rewriting of the control program has been received, the communication control unit 67 rewrites the control program (step S13). The communication control unit 67 rewrites the control program by reading a new control program stored in the first program storage unit 65 and rewriting the existing control program stored in the communication control unit 67 with the new control program that has been read.

Next, the input/output control unit 69 monitors and determines whether or not an abnormality has occurred in the communication control unit 67 during and after the control program in the communication control unit 67 is rewritten (step S14). The method of determining an abnormality by the input/output control unit 69 during the rewriting of the control program in the communication control unit 67 in step S14 will be described in detail later.

If the result of step S14 is "YES", that is, if the input/output control unit 69 determines that an abnormality has occurred in the communication control unit 67, the determination result is sent to the communication disconnection determination unit 64 and the input/output disconnection unit 70. The communication disconnection determination unit 64 determines to disconnect the communication based on the determination result of step S14, and the communication path disconnection unit 63 disconnects the communication path based on the determination result of the communication disconnection determination unit 64 (step S15).

In addition, based on the result of the determination in step S14, the input/output disconnection unit 70 sends a signal to the display 62 to notify the occurrence of an abnormality, and then disconnects the transmission/reception path with only the output turned "ON" (step S16). As a result, input from the hall button 61 is not possible, but the display 62 can display an indication of the occurrence of an abnormality.

On the other hand, if the result of step S14 is "NO," i.e., if the I/O control unit 69 determines that no abnormality has occurred in the communication control unit 67, then the I/O control unit 69 rewrites the control program (step S17). The I/O control unit 69 rewrites the control program by reading a new control program stored in the second program storage unit 66 and rewriting the existing control program stored in the I/O control unit 69 with the new control program that has been read.

Next, the communication control unit 67 monitors and determines whether or not an abnormality has occurred in the I/O control unit 69 during and after the control program in the I/O control unit 69 is rewritten (step S18). The method of determining whether or not an abnormality has occurred during the rewriting of the control program in the I/O control unit 69 by the communication control unit 67 in step S18 will be described in detail later.

If the result of step S18 is "NO," i.e., if the communication control unit 67 determines that no abnormality has occurred in the input/output control unit 69, the process of rewriting the control program in the hall terminal device 6 ends.

If the answer is "YES" in step S18, that is, if the communication control unit 67 determines that an abnormality has occurred in the input/output control unit 69, the maintenance/normal mode discrimination unit 71 determines whether or not the system is in maintenance mode (step S19).

If the answer in step S19 is "YES," i.e., if it is determined that the device is in maintenance mode, the input/output disconnection unit 70 disconnects the transmission/reception path between the hall button 61 and the display 62 with the output turned "ON" (step S21). By turning the output "ON," the illumination and display of the hall button 61 and the display 62 are maintained in the state they were in when the control program was rewritten. This allows the maintenance staff to check which hall terminal device 6 has an abnormality.

On the other hand, if the answer is "NO" in step S19, i.e., if it is determined that the elevator is not in maintenance mode, the input/output disconnection unit 70 disconnects the transmission/reception path between the hall button 61 and the display 62 with the input/output turned "OFF" (step S20). By turning the input/output to the "OFF" state, the illumination and display of the hall button 61 and the display 62 are turned off. Therefore, even if a user presses the hall button 61 at the landing floor where the corresponding hall terminal device 6 is installed, the hall button 61 does not light up, and nothing is displayed on the display 62. This allows the user to know that the elevator 10 is broken.

The above steps complete the process of rewriting the control program in the hall terminal device 6. In this embodiment, in step S16, the input/output disconnection unit 70 is configured to disconnect the input/output path by turning on only the output, but it may also be configured to perform steps similar to steps S19, S20, and S21 after step S16. Furthermore, if it is determined in step S18 that an abnormality has occurred, the communication path may be disconnected in the same manner as step S15.

<Method of determining abnormality when rewriting control program>
Next, a method of determining an abnormality when the control program is rewritten will be described. Fig. 6A is a control flow showing a method of determining an abnormality when the control program of the communication control unit 67 is rewritten. Fig. 6B is a control flow showing a method of determining an abnormality when the control program of the input/output control unit 69 is rewritten.

First, a method for determining an abnormality when the control program of the communication control unit 67 is rewritten will be described with reference to FIG. 6A. The flow shown in FIG. 6A is the control flow performed in step S14 of FIG. 5.

When rewriting of the control program of the communication control unit 67 is initiated in step S13 of FIG. 5, the communication control unit 67 starts transmitting specific data to the input/output control unit 69 (step S31). This specific data is configured to be transmitted from the communication control unit 67 to the input/output control unit 69 at regular intervals, for example.

The input/output control unit 69 determines whether specific data has been received within a predetermined period (step S32). This predetermined period is determined by the time required for the communication control unit 67 to rewrite the control program.

If the result of step S32 is "NO," i.e., if it is determined that the specific data has not been received within the specified period, the input/output control unit 69 determines that an abnormality has occurred in the communication control unit 67 (step S33). In this way, in step S33, if the specific data has not been received within the specified period, it is determined that an abnormality has occurred when the control program was rewritten.

On the other hand, if the result of step S32 is "YES," i.e., if it is determined that specific data has been received within the specified period, the input/output control unit 69 determines that the control program of the communication control unit 67 has been rewritten normally (step S34). Thus, in step S34, if specific data has been received within the specified period, it is determined that the control program has been rewritten normally.

As described above, when the control program of the communication control unit 67 is rewritten, the input/output control unit 69 receives specific data from the communication control unit 67, thereby making it possible to constantly monitor whether the rewriting is normal or not.

Next, a method for determining an abnormality when the control program of the input/output control unit 69 is rewritten will be described with reference to FIG. 6B. The flow shown in FIG. 6B is the control flow performed in step S18 in FIG. 5.

When rewriting of the control program of the input/output control unit 69 starts in step S17 of FIG. 5, the input/output control unit 69 starts sending specific data to the communication control unit 67 (step S41). This specific data is configured to be sent from the input/output control unit 69 to the communication control unit 67 at regular intervals, for example.

The communication control unit 67 determines whether specific data has been received within a predetermined period of time (step S42). This predetermined period of time is determined by the time required for the input/output control unit 69 to rewrite the control program.

If the result of step S42 is "NO," that is, if it is determined that the specific data has not been received within the specified period, the communication control unit 67 determines that an abnormality has occurred in the input/output control unit 69 (step S43). Thus, in step S43, if the specific data has not been received within the specified period, it is determined that an abnormality has occurred when the control program was rewritten.

On the other hand, if the result of step S42 is "YES," that is, if it is determined that specific data has been received within the specified period, the communications control unit 67 determines that the control program of the input/output control unit 69 has been rewritten normally (step S44). Thus, in step S44, if specific data has been received within the specified period, it is determined that the control program has been rewritten normally.

As described above, when the control program of the input/output control unit 69 is rewritten, the communication control unit 67 receives specific data from the input/output control unit 69, thereby making it possible to constantly monitor whether the rewriting is normal or not.

In this embodiment, as described above, the control programs of the communication control unit 67 and the input/output control unit 69 of the hall terminal device 6 can be rewritten by remote operation. This eliminates the need for maintenance personnel to visit the site to perform the work, thereby improving work efficiency.

In addition, in this embodiment, the elevator control unit 3 rewrites the control program starting with the hall terminal device 6 that is used least frequently on that day of the week, based on information from the usage information analysis unit 35. This allows the control program to be rewritten more safely, even when the control program is rewritten while the elevator 10 is operating in normal mode.

Furthermore, in this embodiment, when the control programs of the communication control unit 67 and the input/output control unit 69 are rewritten, they can monitor and determine whether the rewriting of the control programs has been performed normally. If an abnormality occurs when the control program is rewritten in the communication control unit 67, the communication path between the hall terminal device 6 and the unit control unit 3 can be disconnected. This allows the unit control unit 3 to determine which hall terminal device 6 has not had its control program rewritten normally, and prevents the entire system from malfunctioning due to a hall terminal device 6 with an abnormality.

The above-mentioned embodiment has been described in detail to clearly explain the present invention, and is not necessarily limited to having all of the configurations described. For example, it is possible to replace part of the configuration of the embodiment with another configuration, and it is also possible to add another configuration to the configuration of the embodiment. It is also possible to add, delete, or replace part of the configuration of the embodiment with another configuration.

1...Elevator system, 2...Elevator management unit, 3...Unit control unit, 5...Hoisting machine, 6...Hall terminal device, 10...Elevator, 21...Abnormality display unit, 22...Terminal rewriting unit, 31...Abnormality detection unit, 32...Cage control unit, 33...Motor control unit, 34...Hall terminal control unit, 35...Usage information analysis unit, 36...Terminal program storage unit, 51...Main rope, 60...Hall terminal internal control unit, 61...Hall button, 62...Display unit, 63...Communication path disconnection unit, 64...Communication disconnection determination unit, 65...First program storage unit, 66...Second program storage unit, 67...Communication control unit, 68...Input/output disconnection determination unit, 69...Input/output control unit, 70...Input/output disconnection unit, 71...Maintenance/normal mode discrimination unit, 72...Input/output unit

Claims (8)

In an elevator control program rewriting system for rewriting a control program in a hall terminal device,
A plurality of hall terminal devices installed on each landing floor;
A hall terminal control unit having a hall terminal control unit for controlling the hall terminal device,
The hall terminal device is
an input/output unit for inputting information from a user and presenting the information to the user;
A communication control unit that controls communication with the unit control unit;
an input/output control unit that controls the input/output unit and receives specific data for determining whether or not the control program should be rewritten from the communication control unit when the control program of the communication control unit is to be rewritten;
and a communication path disconnecting unit that disconnects the communication path between the communication control unit and the elevator control unit when it is determined that an abnormality has occurred during rewriting of the control program of the communication control unit based on the specific data received by the input/output control unit. the communication control unit receives specific data from the input/output control unit when rewriting a control program of the input/output control unit;
The elevator control program rewriting system according to claim 1, wherein the hall terminal device is provided with an input/output disconnection unit that disconnects an input/output path between the input/output unit and the hall terminal device when it is determined that an abnormality has occurred when rewriting the control program of the input/output control unit based on the specific data received by the communication control unit. 3. The elevator control program rewriting system according to claim 2, wherein the rewriting of the control programs in the communication control unit and the input/output control unit is performed based on commands transmitted from a remote terminal located away from the car control unit to the hall terminal device side via the hall terminal control unit of the car control unit. The hall terminal device is
a first program storage unit for storing a new control program for rewriting the control program in the communication control unit;
a second program storage unit that stores a new control program for rewriting the control program in the input/output control unit;
4. The elevator control program rewriting system according to claim 3, wherein rewriting of the control programs in the communication control unit and the input/output control unit is performed after new control programs are stored in the first program storage unit and the second program storage unit, respectively. The machine control unit includes a usage information analysis unit that analyzes usage information of the plurality of hall terminal devices and stores the usage information,
The elevator control program rewriting system according to claim 1, wherein the hall terminal control unit transmits a control program rewrite command to a hall terminal device among a plurality of hall terminal devices, in order of least frequently used hall terminal device, based on information from the usage information analysis unit. The input/output separation unit includes:
In the maintenance mode, if an abnormality occurs during rewriting of the control program of the input/output control unit, the input/output path is disconnected with only the output of the input/output unit turned on,
4. The elevator control program rewriting system according to claim 3, wherein, in a normal mode, if an abnormality occurs during rewriting of the control program of the input/output control unit, the input/output path is disconnected with the input/output in the input/output unit turned off. In an elevator control program rewriting method for rewriting a control program in a hall terminal device,
a step of transmitting a control program rewrite command from a car control unit having a hall terminal device that controls the hall terminal device to the hall terminal device installed on the landing floor;
rewriting a control program of a communication control unit that controls communication between the hall terminal device and the machine control unit;
an input/output control unit that controls an input/output unit that inputs information from a user and presents information to the user when the control program is rewritten in the communication control unit receives specific data for determining whether or not the control program should be rewritten , the specific data being transmitted from the communication control unit;
when it is determined based on the specific data received by the input/output control unit that an abnormality has occurred during rewriting of the control program of the communication control unit, disconnecting a communication path between the communication control unit and the unit control unit;
The elevator control program rewriting method includes the steps of: When the control program in the input/output control unit is rewritten, the communication control unit
receiving specific data transmitted from the input/output control unit;
when it is determined based on the specific data received by the communication control unit that an abnormality has occurred during rewriting of the control program of the input/output control unit, disconnecting an input/output path between the input/output unit and the communication control unit;
The elevator control program rewriting method according to claim 7, further comprising:

Images