Patent Description:
In elevator systems with a limited amount of free space in the top or bottom part of an elevator shaft, many elevator maintenance operations for components in the elevator shaft are made by operating from inside an elevator car. The maintenance may be performed, for example, through an opened car roof, flooring or walls or through open car doors. In elevator solutions having a limited amount of headroom above the elevator car at the topmost floor, a permanent and inherent refuge space is located at least partially inside the elevator car, and on the top of car there may not be any free space providing the refuge space. Furthermore, on the bottom of the elevator shaft there may not be free space providing a refuge space. In these situations, it may be crucial to ensure safety of the maintenance operations performed by the maintenance personnel.

<CIT> discloses an elevator car that has a floor to be opened partially by a floor element. An unlocking unit allows a locking unit to be unlocked or released if the elevator car has reached an end position in a region of a lowermost floor.

<CIT> discloses a solution that comprises an elevator shaft with a reduced shaft pit or reduced shaft top.

<CIT> discloses a solution that relates to an elevator where maintenance work is done mainly in an elevator shaft and in particular in a headroom part of the elevator shaft.

<CIT> discloses a solution to ensure that access to an elevator shaft interior by way of a maintenance opening is secure.

It is an object to provide a system for controlling a locking state of at least one service access from inside the elevator car to the elevator shaft based on a service access zone of a plurality of service access zones at which the elevator car is located. The objective is achieved by the features of the independent claims. Additional embodiments are described in the dependent claims.

According to a first aspect, there is provided a system for controlling a service access associated with an elevator car. The system comprises means for dividing an elevator shaft into a plurality of service access zones; and means for controlling a locking state of at least one service access, provided from inside the elevator car to the elevator shaft, based on a service access zone of the plurality of service access zones at which the elevator car is located.

In an example embodiment, the means for controlling the locking state of the at least one service access are configured to disable opening of the at least one service access in at least one service access zone of the plurality of service access zones.

In an example embodiment, the means for controlling the locking state of the at least one service access comprises a mechanical locking mechanism comprising a first mechanical element associated with the service access and a second mechanical element associated with the elevator shaft; and wherein the first and second mechanical elements are configured to act together to disable opening of the service access in the at least one service access zone of the plurality of service access zones.

In an example embodiment, at least one service access zone corresponds to a length and position of the second mechanical element along the elevator shaft.

In an example embodiment, the first mechanical element comprises at least one lever, safety catch, sleeve, valve, or arm.

In an example embodiment, the second mechanical element comprises a ramp or a tumbler plate.

In an example embodiment, the means for controlling the locking state of the at least one service access comprises an electrical lock coupled to each service access and controlled based on location of the elevator car in the elevator shaft.

In an example embodiment, the means for dividing the elevator shaft into the plurality of service access zones comprises at least one switch coupled to the elevator shaft and configured to indicate borders of the plurality of service access zones.

In an example embodiment, the means for dividing the elevator shaft into the plurality of service access zones comprises a computer device configured to store at least one threshold value associated with location information of borders of the plurality of service access zones.

In an example embodiment, the system further comprises means for detecting that at least one service access is open; and means for disabling movement of the elevator car to a service access zone in which opening of the respective service access is configured to be disabled.

In an example embodiment, the plurality of service access zones comprises an elevator car roof service access disabled zone in which an elevator car roof service access is disabled when the elevator car is located in a top part in the elevator shaft; and an elevator car roof service access enabled zone in which the elevator car roof service access is enabled when the elevator car is located in other parts of the elevator shaft.

In an example embodiment, the plurality of service access zones comprises a middle service access zone in which an elevator car roof service access is enabled and an elevator car floor service access is disabled when the elevator car is located in a middle part in the elevator shaft; a top service access zone in which the elevator car roof service access is disabled, and the elevator car floor service access is disabled when the elevator car is located in a top part in the elevator shaft; a bottom service access zone in which the elevator car roof service access is enabled, and the elevator car floor service access is disabled when the elevator car is located in a bottom part in the elevator shaft; and a close to bottom floor service access zone in which the elevator car roof service access is enabled and the elevator car floor service access is enabled when the elevator car is located close to a bottom part of the elevator shaft.

In an example embodiment, the system further comprises means for preventing driving of the elevator car within a predetermined distance from a counterweight of the elevator car when an elevator car wall service access is in use.

According to a second aspect, there is provided an elevator system comprising a system of the first aspect.

According to a third aspect, there is provided a method for controlling a service access associated with an elevator car. The method comprises providing means for dividing an elevator shaft into a plurality of service access zones; dividing the elevator shaft into a plurality of service access zones; providing means for controlling a locking state of at least one service access, provided from inside the elevator car to the elevator shaft; and controlling the locking state of at least one service access, provided from inside the elevator car to the elevator shaft, based on a service access zone of the plurality of service access zones at which the elevator car is located.

The above discussed means may be implemented, for example, using at least one processor, at least one processor and at least one memory connected to the at least one processor, or at least one processor, at least one memory connected to the at least one processor and an input/output interface connected to the at least one processor.

<FIG> illustrates a system <NUM> for controlling at least one service access associated with an elevator car based on a service access zone of an elevator shaft according to an example embodiment.

The system <NUM> comprises means for dividing an elevator shaft into a plurality of service access zones, and means for controlling a locking state of the at least one service access, provided from inside the elevator car to the elevator shaft, based on a service access zone of the plurality of service access zones at which the elevator car is located. The means may be partially or completely implemented, for example, by at least one processor <NUM> and at least memory <NUM> connected to the at least one processor <NUM>. The at least one processor <NUM> may comprise one or more general purpose processors, microprocessors, digital signal processors, microcontrollers, and the like, programmed according to the teachings of the example embodiments, as will be appreciated by those skilled in the computer and/or software art(s). The at least one memory <NUM> may be, for example, a hard disk, optical disk, magneto-optical disk, RAM, and the like. One or more databases can store the information used to implement example embodiments described herein. The databases can be organized using data structures (e.g., records, tables, arrays, fields, graphs, trees, lists, and the like) included in one or more memories or storage devices listed herein. The methods described with respect to the example embodiments can include appropriate data structures for storing data collected and/or generated by the methods of the devices and subsystems of the example embodiments in one or more databases.

In another example embodiment, the means for diving and means for controlling may be at least partially implemented using mechanical and/or electro-mechanical element or components. In an example embodiment, the system <NUM> may further comprise locking means. The locking means may comprise, for example, at least one electrical lock configured on at least one service access in an elevator car. In an example embodiment, the electrical lock may be controlled based on location of the elevator car in the elevator shaft. For example, the electrical lock may be configured to prevent the use of a service access when the elevator car is located in a service access zone in which the service access is configured to be disabled. The service access may provide access from inside the elevator car to the elevator shaft. The service access may be located, for example, in an elevator car roof, elevator car wall and/or in elevator car floor. The locking means may be controllable, for example, by the at least one processor <NUM>.

In an example embodiment, the locking means may comprise a mechanical locking mechanism. The mechanical locking mechanism may comprise a first locking element associated with at least one service access. The mechanical locking mechanism may further comprise a second locking element associated with the elevator shaft. The locking means may be configured to disable and enable opening of the at least one service access in the elevator car. In an example embodiment, the first and second mechanical elements may be configured to act together to disable opening of the service access in the at least one service access zone of the plurality of service access zones.

In an example embodiment, the locking means may comprise at least one component configured to divide the elevator shaft into the plurality of service access zones. In an example embodiment, the elevator shaft may be divided into the plurality of service access zones with the mechanical locking mechanism such that at least one service access zone corresponds to a length and position of the second mechanical element along the elevator shaft. The first and the second mechanical elements may engage when the elevator car is in a first service access zone, and the first and the second mechanical elements may disengage when the elevator car is outside the first service access zone or in a second service access zone.

In an example embodiment, the locking means comprise at least one switch. The at least one switch may be used to divide the elevator shaft into the plurality of service access zones such that at least one service access zone is located above the switch and at least one service access zone below the switch. Hence, a switch level may indicate a border of two service access zones in the elevator shaft. The at least one electrical lock may be configured to lock or unlock the at least one service access in response to the elevator car moving from one service access zone to another service access zone. The electrical lock may be configured to lock and unlock the service access, for example, in response to receiving a control signal from the at least one switch. The switch may be for example, a bi-stabile limit switch or an electrical sensor.

In an example embodiment, the system <NUM> may comprise a service limit device configured to ensure that the elevator car cannot move to a restricted service access zone when at least one service access in open. In the restricted service access zone, opening of the respective service access may be configured to be disabled by the locking means. The service limit device may comprise service limit switches configured to stop the elevator car when it is too close to a top or bottom of the elevator shaft while the elevator is in an inspection drive mode.

In an example embodiment, the at least one electrical lock may be controlled by a computer device. The at least one electrical lock may be controlled based on location information of the elevator car in the elevator shaft. The location information of the elevator car may be received by the computer device. The location information may be received, for example, from a car position encoder. The location information may comprise, for example, absolute location feedback of the elevator car. The computer device may be configured to divide the elevator shaft into the plurality of service access zones. In an example embodiment, the computer device may be configured to store at least one threshold value associated with location information of borders of the plurality of service access zones.

When the system <NUM> is configured to implement some functionality, some component and/or components of the system <NUM>, for example, the at least one processor <NUM> and/or the memory <NUM>, may be configured to implement this functionality. Furthermore, when the at least one processor <NUM> is configured to implement some functionality, this functionality may be implemented using program code <NUM> comprised, for example, in the at least one memory <NUM>.

<FIG> illustrates a service access in an elevator car according to an example embodiment. The elevator car <NUM> may comprise one or more service accesses <NUM>, <NUM>, <NUM> provided from inside the elevator car <NUM> towards an elevator shaft.

The elevator car <NUM> may comprise a service access <NUM> located on the elevator car roof. The service access <NUM> may be opened from inside the elevator car <NUM> by opening a car ceiling <NUM> and car roof panels. A maintenance person <NUM> may work on shaft components <NUM> and landing door components <NUM> via the service access <NUM>. Alternatively, the landing door components may be serviced via car doors <NUM>. The maintenance person <NUM> may engage an inspection drive unit <NUM> to the elevator car <NUM> in order to perform inspection drives while at least one of the service accesses may be open. One service access <NUM> may be located on the elevator car floor such that the maintenance person <NUM> may have access to pit components. The maintenance person <NUM> may engage an inspection drive unit <NUM> to the elevator car <NUM> in order to perform an inspection drive while at least one of the service accesses is open. However, there may be a risk of injury if the maintenance person opens one service access and the elevator moves for some reason and there is not sufficient clearance between the elevator car and the shaft or shaft equipment.

An example of clearances of an elevator system between elevator components and an elevator shaft <NUM> is illustrated in <FIG>. On top of the elevator shaft <NUM> there need to be clearances between highest components on car roof and the top of the elevator shaft <NUM> to eliminate a risk of crushing. For example, it may be that at least a <NUM> clearance D is needed between a car balustrade and a top of elevator shaft ceiling for head protection. The car balustrade may be, for example, a separate balustrade located on the car roof. Alternatively, elevator car walls may function as the balustrades when the maintenance is performed through an opened car roof from inside the elevator car <NUM>. For body protection, it may be that at least <NUM> clearances A, B, C are needed between car top components F, H and the top of the shaft ceiling. The clearance for head protection may be measured from the highest point of the top of the elevator shaft such that there is enough space for the head protection. The body protection may be measured from the lowest point of the top of the elevator shaft. The needed clearances A, B, C, D may be measured when the elevator car is in its top-most position in the elevator shaft <NUM>.

<FIG> illustrates an elevator shaft <NUM> divided into a plurality of service access zones <NUM>, <NUM>, <NUM>, <NUM> according to an example embodiment.

The elevator shaft <NUM> may have a low headroom space in a top portion of the elevator shaft <NUM>. In an example embodiment, the plurality of service access zones <NUM>, <NUM>, <NUM>, <NUM> may comprise a middle service access zone <NUM> in which the elevator car roof service access is enabled and an elevator car floor service access is disabled when the elevator car is located in a middle part in the elevator shaft <NUM>. The plurality of service access zones <NUM>, <NUM>, <NUM>, <NUM> may further comprise a top service access zone <NUM> in which the elevator car roof service access is disabled and the elevator car floor service access is disabled when the elevator car is located in a top part in the elevator shaft <NUM>. The plurality of service access zones <NUM>, <NUM>, <NUM>, <NUM> may further comprise a bottom service access zone <NUM> in which the elevator car roof service access is enabled and the elevator car floor service access is disabled when the elevator car is located in a bottom part in the elevator shaft <NUM>. The plurality of service access zones <NUM>, <NUM>, <NUM>, <NUM> may further comprise a close to bottom floor service access zone <NUM> in which the elevator car roof service access is enabled and the elevator car floor service access is enabled when the elevator car is located close to a bottom part of the elevator shaft.

The top service access zone <NUM> may be associated with sufficient clearances A, B, D such that there is enough head space between a car balustrade (or car walls) and highest components of the elevator car <NUM> and the top ceiling <NUM> of the elevator shaft <NUM>.

The plurality of service access zones <NUM>, <NUM>, <NUM>, <NUM> may be associated with at least one electrical limit device <NUM>, <NUM> on top and/or bottom part of the shaft <NUM>. The electrical limit devices <NUM>, <NUM> may comprise, for example, one or more electrical or mechanical switches, such as bi-stabile limit switches. The one or more switches may be coupled to a control system configured to control a locking state of at least one service access in the elevator car <NUM> based on the inputs from the at least one switch. For example, opening of the elevator car roof service access may be disabled in response to the elevator car moving at the position of the at least one switch located at a border of the top service access zone <NUM>. The opening of the elevator car roof service access may be disabled, for example, with an electrical lock associated with the elevator car roof service access and controlled based on location of the elevator car <NUM>.

The plurality of service access zones <NUM>, <NUM>, <NUM>, <NUM> may be associated with at least one mechanical limit device <NUM>, <NUM> on top and/or bottom part of the shaft <NUM>. References <NUM> and <NUM> may illustrate starting points for the at least one mechanical limit device <NUM>, <NUM>. The at least one mechanical limit device <NUM>, <NUM> may be configured to disable movement of the elevator car <NUM> to a service access zone in which opening of the respective service access is configured to be disabled.

For example, if the elevator car floor service access is opened at the close to bottom service access zone <NUM>, the mechanical limit device <NUM> at the bottom part of the shaft <NUM> may be triggered and the mechanical limit device <NUM> may prevent movement of the elevator car <NUM> to the bottom service access zone <NUM>. Similarly, if the elevator car roof service access is opened at a zone in which the elevator car roof service access is enabled, the mechanical limit device <NUM> at the top part of the shaft <NUM> may be triggered and the mechanical limit device <NUM> may prevent movement of the elevator car <NUM> to the top service access zone <NUM><NUM> while the elevator car roof service access is open.

<FIG> illustrates an elevator shaft divided into a plurality of service access zones according to an another example embodiment.

As illustrated in <FIG>, the system may comprise means <NUM>, <NUM> for preventing driving of the elevator car <NUM> within a predetermined distance from a counterweight <NUM> of the elevator car <NUM> when an elevator car wall service access <NUM> is in use. As illustrated in <FIG>, a service access <NUM> may be arranged in a wall of the elevator car <NUM>, i.e. on a side facing or close to a counterweight <NUM>. This may lead to a situation that, if the service access <NUM> is open, i.e. in use, an inspection drive should be prevented in in an area where the elevator car <NUM> meets the counterweight <NUM>. For the prevention, mechanical limit devices <NUM>, <NUM>, that may be similar to the mechanical limit devices <NUM>, <NUM>, may be arranged, for example, in a guide rail. For example, if the service access <NUM> is opened in a bottom or top part of the elevator shaft <NUM>, and the elevator car <NUM> is then driven in an inspection drive mode, the mechanical limit devices <NUM>, <NUM> will stop the elevator car <NUM> before it travels too close to the counterweight <NUM>. This prevention is similar to the prevention that may be implemented when the driving of the elevator car may be prevented to a top part of the elevator shaft <NUM> when an elevator car roof service access is in use and/or to a bottom part of the elevator shaft <NUM> when an elevator car floor service access is in use.

<FIG> illustrate operations of a system for controlling a locking state of a service access in an elevator car based on a service access zone of an elevator shaft <NUM> according to an example embodiment.

Maintenance of components located in the headroom space of the elevator shaft may be performed safely with the above described system. First, as illustrated in <FIG>, an elevator car <NUM> may be driven to a second top landing <NUM>. The second top landing <NUM> may be located in a zone <NUM> in which elevator car roof service access is enabled. A maintenance person may enter the elevator car <NUM> in the second top landing <NUM>, and open elevator car roof service access <NUM>. Opening of the elevator car roof service access <NUM> may be enabled because the elevator car is located in the middle service access zone <NUM>, as illustrated in <FIG>. The elevator car roof service access may comprise a car ceiling and elevator car roof panels. Once the elevator car roof is open, the maintenance person may proceed to engage an inspection drive mode and drive the elevator car <NUM> with the inspection drive from inside the elevator car <NUM>. Above the zone <NUM> in which elevator car roof service access is enabled, there may be a zone <NUM> in which in which opening of the elevator car roof service access <NUM> may be configured to be disabled. Hence, when the elevator car <NUM> moves up, a service limit switch may stop the elevator car <NUM> before the elevator car <NUM> reaches the zone <NUM> with the car roof service access <NUM> open, as illustrated in <FIG>.

Alternatively, location of the elevator car <NUM> may be monitored, for example, with a car positioning device, and the elevator car <NUM> may be stopped before accessing the zone <NUM> based on the location information of the elevator car <NUM>. In an example embodiment, the location of the elevator car <NUM> may be compared to threshold values associated with location information of borders of the service access zones <NUM>, <NUM>. If the elevator car <NUM> car is passing a service access limit, there can be additional pre-triggered service limit device that stops car before the zone <NUM>. The service limit device may be triggered in response to opening of the elevator car roof service access <NUM>.

<FIG> illustrates a mechanical locking mechanism <NUM>, <NUM> of an elevator car roof service access <NUM> when opening of the elevator car roof service access <NUM> is disabled according to an example embodiment.

The mechanical locking mechanism <NUM>, <NUM> may be configured to disable opening of the elevator car roof service access <NUM> in at least one service access zone. The mechanical locking mechanism <NUM>, <NUM> may comprise a first mechanical element <NUM> associated with the elevator car roof service access <NUM>. The first mechanical element <NUM> may be, for example, a lever, a safety catch, a sleeve, a valve, or an arm. In an example embodiment, the first mechanical element <NUM> may comprise a plurality of levers, safety catches, sleeves, valves, arms, or a combination thereof. In <FIG>, the first mechanical element <NUM> may be coupled to the elevator car roof service access <NUM>. In an another example embodiment, the first mechanical element <NUM> may be coupled to an elevator car floor service access or an elevator car door service access.

The mechanical locking mechanism may comprise a second mechanical element <NUM> associated with an elevator shaft <NUM>. The second mechanical element <NUM> may be, for example a ramp. The ramp may be fixed, for example, to elevator shaft structures or mechanics. The ramp may be fixed, for example, to a guiderail, a bracket, an elevator shaft wall or a landing door railing system. The length of the ramp may be adjusted according to a height of headroom and/or unsafe car position zone. The unsafe car position zone may be, for example, a top service access zone, a middle service access zone, or a bottom service access zone, depending on which service access is configured to be disabled by the mechanical locking mechanism. In the unsafe car position zone there may be only little clearance <NUM> between the car top and shaft ceiling. In other words, at least one service access zone may correspond to the length and position of the second mechanical element <NUM> along the elevator shaft <NUM>. In an embodiment, a tumbler plate may be used instead of the ramp.

The first and the second mechanical elements <NUM>, <NUM> may be configured to act together to disable opening of the service access <NUM> in the at least one service access zone. In an example embodiment, when the elevator car <NUM> moves to the service access zone starting from the lower end of the second mechanical element <NUM>, the second mechanical element <NUM>, for example, the ramp, may cause the first mechanical element <NUM>, for example, the safety catch, to move towards the elevator car roof service access such that the safety catch disables opening the elevator car roof service access <NUM>. The elevator car roof service access <NUM> may be kept locked by the first mechanical element <NUM> as long as the elevator car <NUM> is positioned in the service access zone associated with the second mechanical element <NUM>. When the elevator car <NUM> moves downwards and outside the service access zone, the safety catch may have space to move away and again enable the use of the elevator car roof service access <NUM>. Outside the service access zone, the clearance <NUM> between the elevator car top and the shaft ceiling may be sufficient to enable safe maintenance work. Hence, opening of the elevator car roof service access <NUM> may be enabled, as illustrated in <FIG>.

<FIG> illustrate a mechanical locking mechanism of a service access when opening the service access is disabled and enabled according to another example embodiment.

The locking mechanism in <FIG> is similar to the mechanical locking mechanism described in <FIG>. The mechanical locking mechanism <NUM>, <NUM> comprises a second mechanical element <NUM>, which may be a ramp attached, for example, to a guiderail located in the elevator shaft <NUM>. The mechanical locking mechanism may further comprise a first mechanical element <NUM> which may be a different kind of implementation of a safety catch compared to the safety catch illustrated in <FIG>. The principle of the mechanical locking mechanism <NUM>, <NUM> is similar as described above: the length and position of the second mechanical element <NUM> may define a service access zone in which a clearance <NUM> may not be sufficient for safe maintenance work. Hence, the second mechanical element <NUM> may be configured to act together with the first mechanical element <NUM> coupled to the elevator car roof service access <NUM> to disable opening the elevator car roof service access <NUM> when the elevator car <NUM> arrives at the position of the second mechanical element <NUM>. The length of the second mechanical element <NUM> may be adjusted so that at the bottom end of the second mechanical element <NUM>, the clearance <NUM> between the elevator car top and the shaft ceiling is sufficient to provide a sufficient refuge space.

<FIG> illustrates a closer illustration of the mechanical locking mechanism <NUM>, <NUM> illustrated in <FIG> when opening of the service access <NUM> is disabled according to an example embodiment. <FIG> illustrates the same mechanical locking mechanism <NUM>, <NUM> when the opening of the service access <NUM> is enabled.

The first mechanical element <NUM> may comprise a lever 600A and a safety catch 600B. The lever 600A may turn if at least one elevator car roof panel <NUM> is opened. The lever 600A may be used, for example, for mechanically blocking the car roof service access from opening, as illustrated in <FIG>, or for operating an electrical safety control switch for monitoring car roof panel movement. Monitoring the car roof panel movements may be used to, for example, a person detection on roof, or roof opening monitoring. The separate safety catch 600B may disable or enable the movement of the lever 600A. The lever 600A may, for example, rotate around a hinge coupled to the elevator car <NUM>. In an example embodiment, a mechanical sleeve may be used to control the movement of the lever 600A instead of the safety catch. Further, the second mechanical element <NUM> may be attached, for example, on a wall of the elevator shaft <NUM>. An upper end of the second mechanical element <NUM> starts from a ceiling <NUM> or from close to the ceiling <NUM> of the elevator shaft <NUM>. A lower end of the second mechanical element <NUM> may end at a border of two service access zones, wherein in the upper service access zone opening of the elevator car roof <NUM> is disabled and in the lower service access zone opening of the elevator car roof <NUM> is enabled.

<FIG> illustrates a closer illustration of another mechanical locking mechanism of a service access when opening the service access is disabled according to an example embodiment. The mechanical locking mechanism may comprise a similar second mechanical element <NUM>, such as a ramp coupled to an elevator shaft structure <NUM>, as already described earlier. The second mechanical element <NUM> may be positioned to extend upwards from the lower border of the top service access zone in which opening of the elevator car roof service access <NUM> is configured to be disabled.

The mechanical locking mechanism may comprise a first mechanical element that comprises two parts 900A, 900B. The first mechanical element may comprise, for example, two levers 900A, 900B fixedly coupled to each other and hinged to the elevator car roof frame. The first mechanical element may be mounted to a top part of the elevator car <NUM>, for example, to an elevator car roof frame. The first mechanical element may be configured to rotate in response to opening of at least one elevator car roof panel <NUM>. When the elevator car <NUM> is positioned to face the second mechanical element <NUM>, movement of the first mechanical element is prevented as the second lever 900B positioned closed to the second mechanical element <NUM> does not have space to rotate. When the elevator car <NUM> moves outside of the service access zone defined by the second mechanical element <NUM>, the first mechanical element now has room to rotate and allow opening of the at least one elevator car roof panel <NUM>. <FIG> illustrates a close-up of the mechanical locking mechanism 900A, 900B, <NUM> when opening of the elevator car roof panel <NUM> is enabled.

<FIG> illustrates a closer illustration of the mechanical locking mechanism illustrated in <FIG> according to an embodiment. The second mechanical element <NUM> of the mechanical locking mechanism may be coupled on the elevator shaft structure <NUM>, for example, extending upwards from the lower border of the top service access zone.

The first mechanical element <NUM> may be a safety catch configured to move in a horizontal direction. In an embodiment, when the elevator car <NUM> moves upwards, the ramp may cause the safety catch to be pushed inwards such that it disables opening of the elevator car roof. When the first mechanical element <NUM> is not facing the ramp anymore, the safety catch may move outwards such that it does not any more block opening of the elevator car roof service access <NUM>.

<FIG> illustrate a cross-section as seen from above of a mechanical locking mechanism of a service access <NUM> in an elevator car where a tumbler plate or a ramp <NUM>, <NUM> that is fixedly connected to a guide rail <NUM>, <NUM> moves a spring-loaded safety catch <NUM>, <NUM>, <NUM>, <NUM>.

Even if various example embodiments have been discussed above in view of an elevator car roof service access and a refuge space on the top of the elevator car, the same solutions and principles apply also for other safety areas in the elevator shaft and for other service accesses, for example, in a wall or floor of the elevator car. Further, in addition to refuge spaces above or below the elevator car, the refuge space may be associated also with respect to a counterweight of the elevator car.

<FIG> illustrates a method for controlling service access associated with an elevator car according to an example embodiment.

Claim 1:
A system (<NUM>) for controlling a service access associated with an elevator car, characterized in that the system comprises:
means for dividing (<NUM>, <NUM>) an elevator shaft into a plurality of service access zones (<NUM>, <NUM>, <NUM>, <NUM>); and
means for controlling (<NUM>, <NUM>) a locking state of at least one service access (<NUM>, <NUM>), provided from inside the elevator car (<NUM>, <NUM>, <NUM>, <NUM>, <NUM>, <NUM>, <NUM>) to the elevator shaft (<NUM>, <NUM>, <NUM>, <NUM>, <NUM>, <NUM>), based on a service access zone of the plurality of service access zones (<NUM>, <NUM>, <NUM>, <NUM>) at which the elevator car (<NUM>, <NUM>, <NUM>, <NUM>, <NUM>, <NUM>, <NUM>) is located.