Interaction with the elevator control cabinet primarily relies on a precise signal exchange system, establishing a real-time status transmission channel between the two. The elevator dedicated power supply must collect its own core parameters (such as output voltage, current, battery capacity, and grid power supply status) in real time and transmit this data to the elevator control cabinet via standardized interfaces (such as RS485 communication and dry contact signal interfaces). Simultaneously, the control cabinet must also provide feedback to the elevator dedicated power supply regarding the elevator's operating status (such as car position, door switch status, and drive system operating mode) and fault signals (such as door lock anomalies, overload, and short circuit). To prevent signal distortion caused by electromagnetic interference in the elevator machine room, shielded cables must be used for the transmission line, and signal filtering modules must be added at the interface to ensure accurate status information received by both parties, laying the foundation for subsequent fault diagnosis and power-off instructions.
The coordinated fault diagnosis mechanism is key to achieving precise power-off, requiring data comparison and logic verification between the two parties to prevent false triggering. When the elevator control cabinet detects a fault (such as a drive motor overload or door operator control anomaly), it first sends the fault type and severity to the dedicated power supply. The dedicated power supply then performs a secondary verification based on its own monitored power supply status (such as overvoltage, undervoltage, or network disconnection). For example, if the control cabinet reports "abnormal grid voltage," the dedicated power supply must simultaneously verify whether the input grid voltage has actually exceeded the threshold. If the two data match, it is considered a genuine fault. If the data differs (such as a false alarm from the control cabinet), a retry mechanism is activated to collect data again for comparison, preventing unnecessary power outages caused by a single device misjudgment. This "double verification" logic effectively filters out errors caused by interference signals or device misdetection, ensuring that the power outage process is triggered only when a genuine fault occurs.
The priority level design of the power-off command should be based on the urgency of the elevator fault and its operating status to avoid the safety risks caused by blanket power outages. Elevator faults are categorized as emergency faults (such as short circuits, leakage, occupants trapped in the car and unable to level) and general faults (such as minor overloads or individual sensor malfunctions). The linkage system must prioritize power outages for different faults. In the event of an emergency, upon receiving an "emergency power-off" command from the control cabinet, the elevator's dedicated power supply must immediately shut off power to non-emergency circuits (such as the drive motor and door operator power circuits), leaving only emergency circuits (such as car lighting, communications, and emergency leveling drive) active. For general faults, if the elevator is within its normal operating floor range, the linkage system will first allow the elevator to complete leveling and door opening. After passengers have safely departed, the dedicated power supply will shut off the relevant circuits according to the control cabinet's command. This hierarchical power-off strategy ensures safety during faults while preventing sudden power outages that could cause the car to suspend or passengers to be trapped, achieving a balanced balance of safety and user-friendliness.
The hardware-level linkage interface module design must ensure rapid execution of power-off commands and circuit safety. The elevator's dedicated power supply requires a linkage control module with built-in relays or contactors to receive power-off commands from the control cabinet and execute circuit switching. The control cabinet must be equipped with a corresponding command output module to ensure that commands are transmitted to the power supply within milliseconds. Furthermore, to prevent circuit conflicts between the elevator's dedicated power supply and the control cabinet (e.g., simultaneous access to emergency power and grid power), an interlock circuit must be designed at the interface. For example, when the dedicated power supply is supplying power to the emergency circuit, the interlock circuit cuts off the grid's power supply to that circuit. Conversely, when the grid is operating normally, the emergency power supply circuit is also locked to prevent a short circuit caused by the parallel connection of the two power supplies. This hardware interlock mechanism physically ensures the safety of power outages and power switching, preventing circuit failures caused by command delays or logic vulnerabilities.
Maintaining status and information synchronization after an emergency power outage must ensure the convenience of subsequent rescue and troubleshooting. After a power outage, the elevator's dedicated power supply must continuously transmit its emergency power status (such as remaining battery capacity and estimated emergency power duration) to the control cabinet. This allows the control cabinet to monitor the remaining power supply time in real time, providing a reference for rescue personnel to formulate a rescue plan. Simultaneously, the control cabinet must provide feedback to the dedicated power supply regarding the elevator's status after the power outage (such as the final car position and whether the doors are locked). If an "emergency power shortage" occurs, the dedicated power supply can proactively send a "low battery warning" to the control cabinet, prompting the control cabinet to prioritize necessary emergency operations (such as initiating the backup leveling program). Furthermore, both systems must synchronously record log information, including the time of fault occurrence, the execution of power-off commands, and changes in circuit status. Once the fault is corrected, data export can be used to trace the cause of the fault, providing a basis for subsequent system optimization.
The coordinated power restoration logic during fault recovery must adhere to the principle of "detection before power supply" to avoid secondary faults caused by immediate power restoration. After the fault is corrected, the elevator control cabinet will first perform a self-test of the elevator system (e.g., checking whether the door operator, drive motor, and sensors are functioning normally). If the self-test passes, it will send a "power restoration request" to the dedicated power supply. Upon receiving the request, the elevator dedicated power supply will first check its own power supply status (e.g., whether the battery is recharged and whether the grid input is stable). If the power restoration conditions are met, it will send a "power restoration allowed" signal to the control cabinet and gradually restore power in a "control circuit first, then power circuit" order: first, powering the control cabinet's control circuits. After the control cabinet completes system initialization, power to the drive motors, door operator, and other power circuits will be restored. This phased power restoration method prevents damage to recently restored equipment due to sudden high current surges, ensuring a smooth and safe power restoration process.
Redundant design and regular self-tests in the linkage system are crucial measures to ensure long-term reliable operation. To prevent power outages caused by a single linkage channel failure, redundant signal transmission channels (such as a primary RS485 communication channel and a backup dry contact signal) must be configured. If the primary channel fails, the system automatically switches to the backup channel. Furthermore, the elevator's dedicated power supply and control cabinet must regularly (e.g., daily) perform linkage function self-tests, simulating common faults (such as grid outages and motor overloads) to test whether they can accurately exchange signals and execute power-off commands. The self-test results should be recorded. If any linkage anomalies (such as signal delays or command execution failures) are detected, an alarm is immediately issued to alert maintenance personnel to conduct troubleshooting and repairs. This redundant design and regular self-tests significantly reduce the linkage system's failure rate, ensuring accurate power outages in the event of a real fault, thus ensuring safe elevator operation.
