Automatic rescue operation in an elevator system

Automatic elevator safety system (1) including:

• an elevator safety circuit (17) configured for monitoring the operation of an elevator system (2) comprising at least one elevator car (6) traveling along a hoistway (4) and an elevator control (13) configured for controlling the movement of the elevator car (6);
• and
• an external server (22);
• wherein at least one of the elevator control (13) and the elevator safety circuit (17) is configured for sending data comprising information about the current state of the elevator system (2) to the external server (22), in particular in case a safety issue has been detected;
• wherein the external server (22) is configured for
• (A) receiving the data sent by the at least one elevator safety circuit (17);
• (B) analyzing the received data;
• and
• (C) depending on the result of the analysis, sending commands to the elevator system (2), wherein the commands include instructing the elevator system (2):
• (a) to ignore the safety issue and to resume normal operation of the elevator system (2);
• (b) to operate the elevator system (2) in a restricted rescue mode;
• or
• (c) to stop operating the elevator system (2);
• wherein the external server is configured for analyzing the received data based on a model of the elevator system;
• wherein the model is implemented on the external server (22);
• wherein the model is configured for transferring the elevator system (2) from its current state, via at least one intermediate state, into a state allowing normal operation or into a state allowing a restricted rescue operation of the elevator system (2);
• wherein the server (22) is configured for repeating steps (A) to (C) in a loop for checking whether the elevator system (2) has reached a desired intermediate state of the at least one intermediate state before sending the next command to the elevator system (2).