The basic principle.

A safety circuit or safety-related control arrangement establishes protective conditions needed for intended operation. Conventional systems often use chains of contacts; other designs incorporate suitable safety electronics.

The normal motion programme and the protective arrangement have related but distinct roles. A requested journey does not override a missing protective condition.

A monitored condition changes.

A worked-through example

The installation responds according to its designed protective function. The resulting stop or inhibited start is a symptom to investigate, not a reason to defeat the condition.

Follow the relationship.

  1. Protective devicesRepresent specified equipment conditions.
  2. Safety arrangementEvaluates the intended protective path.
  3. Motion permissionAllows or inhibits relevant functions.
Conceptual relationships; arrangements vary by installation.

Connect it to the lift.

Not every sensor is safety-rated, and a standard software input is not automatically equivalent to an engineered safety function. Design, diagnostics and the complete architecture determine the function provided.

A closer look

Safety functions have defined boundaries. An indication that one circuit is healthy is not a declaration that every mechanical and electrical condition in the lift has been verified.

Check your understanding

Can ordinary movement logic simply ignore a missing safety permission to complete a call?

Reveal the explanation

No. Normal calls remain subject to the installation’s protective conditions.

Further reading.

Otis: lift safety systems