<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Elevators: The Machine You Ride Every Day and Never See on ErrorZap</title><link>https://errorzap.com/elevators/</link><description>Recent content in Elevators: The Machine You Ride Every Day and Never See on ErrorZap</description><image><title>ErrorZap</title><url>https://errorzap.com/og.png</url><link>https://errorzap.com/og.png</link></image><generator>Hugo</generator><language>en-US</language><copyright>ErrorZap</copyright><lastBuildDate>Sat, 26 Sep 2026 17:09:00 -0600</lastBuildDate><atom:link href="https://errorzap.com/elevators/index.xml" rel="self" type="application/rss+xml"/><item><title>Myth Check</title><link>https://errorzap.com/elevators/myths/</link><pubDate>Sat, 26 Sep 2026 17:09:00 -0600</pubDate><guid>https://errorzap.com/elevators/myths/</guid><description>Elevator folklore, checked: does the door close button work, can a car free-fall, will you run out of air, why there&amp;#39;s no 13th floor, the mirror trick, and the real origin of elevator music.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 09 · MYTH CHECK</span><p>Tap a claim to open the verdict. Everything here links to a source at the bottom.</p></div>
<div class="el-myths">
  <details class="el-myth v-sort-of">
    <summary>
      <span class="el-myth-claim">“The door close button doesn&#39;t do anything”</span>
      <span class="el-verdict">≈ Sort of</span>
    </summary>
    <p>On a lot of elevators installed since the Americans with Disabilities Act (1990), the door close button won&rsquo;t shorten the minimum door-open time, so for regular riders it can feel like a placebo. In 2016 the head of the elevator industry&rsquo;s trade group told The New York Times the close-door feature had &ldquo;faded into obsolescence&rdquo; after the ADA, and the internet ran with &ldquo;it&rsquo;s all a placebo.&rdquo; That&rsquo;s an exaggeration: plenty of buttons still work once the minimum open time has passed, and the button is definitely wired up: in <strong>firefighter service</strong> and <strong>independent service</strong> mode it becomes a real, working control.</p>
  </details>
  <details class="el-myth v-busted">
    <summary>
      <span class="el-myth-claim">“If the cable snaps, the car free-falls to the bottom”</span>
      <span class="el-verdict">✗ Busted</span>
    </summary>
    <p>Traction elevators hang from several ropes, and together they&rsquo;re rated for many times the car&rsquo;s full load. Even if they all failed, the overspeed governor and rail-gripping safeties are designed to stop the car. The famous exception is Betty Lou Oliver&rsquo;s 1945 fall at the Empire State Building, and that took a B-25 bomber hitting the building. See Floor 2.</p>
  </details>
  <details class="el-myth v-busted">
    <summary>
      <span class="el-myth-claim">“Jump right before it hits the bottom and you&#39;ll be fine”</span>
      <span class="el-verdict">✗ Busted</span>
    </summary>
    <p>You&rsquo;d still be moving at nearly the speed of the car. A human jump changes your speed by a few miles per hour, which is nothing next to a real fall. Luckily, the previous myth makes this one moot.</p>
  </details>
  <details class="el-myth v-busted">
    <summary>
      <span class="el-myth-claim">“You&#39;ll run out of air if you&#39;re stuck”</span>
      <span class="el-verdict">✗ Busted</span>
    </summary>
    <p>Cars aren&rsquo;t airtight. There are gaps around the doors and vents in the car. The real risks when you&rsquo;re stuck are trying to climb out, and medical problems that can&rsquo;t wait. Stay put and press the alarm.</p>
  </details>
  <details class="el-myth v-busted">
    <summary>
      <span class="el-myth-claim">“Pressing the call button over and over makes it come faster”</span>
      <span class="el-verdict">✗ Busted</span>
    </summary>
    <p>The call is registered the first time. The button lights up to tell you so. Pressing it again just makes you feel better. Destination dispatch works the same way: enter your floor once.</p>
  </details>
  <details class="el-myth v-true">
    <summary>
      <span class="el-myth-claim">“Most buildings skip the 13th floor”</span>
      <span class="el-verdict">✓ True</span>
    </summary>
    <p>The floor exists. It&rsquo;s just labeled 14, or M, or 12A. The often-repeated figure, attributed to Otis, is that around 85% of its button panels skip the number 13.</p>
  </details>
  <details class="el-myth v-sort-of">
    <summary>
      <span class="el-myth-claim">“Mirrors make the wait feel shorter”</span>
      <span class="el-verdict">≈ Sort of</span>
    </summary>
    <p>The classic story is that building managers answered complaints about slow elevators by installing mirrors, and the complaints dropped, because people had something to look at. It&rsquo;s a staple of queueing-psychology lessons. The exact origin story is hard to pin down, but the idea behind it (occupied time feels shorter) is well established.</p>
  </details>
  <details class="el-myth v-true">
    <summary>
      <span class="el-myth-claim">“Elevator music is a real brand”</span>
      <span class="el-verdict">✓ True</span>
    </summary>
    <p>Muzak goes back to 1934 and Major General George Owen Squier, who blended &ldquo;music&rdquo; and &ldquo;Kodak&rdquo; into the name. Muzak later sold &ldquo;Stimulus Progression,&rdquo; timed blocks of instrumental music meant to keep workers moving. Elevators were just one of many places it played.</p>
  </details>
  <details class="el-myth v-busted">
    <summary>
      <span class="el-myth-claim">“Holding &#34;door close&#34; and a floor button makes the car go express”</span>
      <span class="el-verdict">✗ Busted</span>
    </summary>
    <p>That&rsquo;s internet folklore. Express or &ldquo;independent&rdquo; service is a real mode, but it&rsquo;s switched on with a key, not a button combo, so the car ignores hall calls only when building staff set it that way. See Floor 5.</p>
  </details>
  <details class="el-myth v-true">
    <summary>
      <span class="el-myth-claim">“Elevators are one of the safest ways to get around”</span>
      <span class="el-verdict">✓ True</span>
    </summary>
    <p>With something like 20 million elevators and escalators running worldwide, and multiple fail-safe systems in every car, serious elevator accidents are rare, and the typical &ldquo;incident&rdquo; is a car that stops short or a door that misbehaves, not a plunge. We couldn&rsquo;t find a single primary safety-agency rate we&rsquo;d trust enough to quote, so no fake-precise statistic here.</p>
  </details>
</div>

<h2 id="the-one-thats-actually-useful">The one that&rsquo;s actually useful</h2>
<p>If an elevator stops between floors: stay inside, press the alarm or call
button, and wait for the voice. Don&rsquo;t pry the doors and don&rsquo;t climb out. The car
is the safest place in the building, and the people coming to get you do this
all the time.</p>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://computer.rip/2023-03-13-the-door-close-button.html">computer.rip: the door close button (quotes and corrects the 2016 New York Times story)</a></li>
<li><a href="https://people.com/plane-crashed-into-empire-state-building-sending-woman-into-record-free-fall-11773102">People: Betty Lou Oliver and the longest elevator fall survived</a></li>
<li><a href="https://www.brousselevators.com/post/what-to-do-stuck-in-elevator">Brouss Elevators: what to do if you're stuck in an elevator</a></li>
<li><a href="https://www.rd.com/article/why-skyscrapers-dont-have-13th-floors/">Reader's Digest: why buildings skip the 13th floor</a></li>
<li><a href="https://6sigma.com/on-queueing-and-elevator-mirrors/">6sigma: on queueing and elevator mirrors</a></li>
<li><a href="https://www.historylink.org/File/10072">HistoryLink: Muzak</a></li>
<li><a href="https://www.statista.com/statistics/1201896/elevators-escalators-operation-worldwide/">Statista: elevators and escalators in operation worldwide</a></li>
</ol>
]]></content:encoded></item><item><title>Speed Freaks and Sideways Cars</title><link>https://errorzap.com/elevators/wild-machines/</link><pubDate>Sat, 26 Sep 2026 17:08:00 -0600</pubDate><guid>https://errorzap.com/elevators/wild-machines/</guid><description>The record-holders and the weird ones: Hitachi&amp;#39;s 21 m/s Guinness elevator, Shanghai Tower, two cars sharing one shaft, TK Elevator&amp;#39;s ropeless MULTI, KONE&amp;#39;s carbon-fiber UltraRope, and Germany&amp;#39;s surviving paternosters.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 08 · THE WILD ONES</span><p>The fastest elevator on record climbs 440 meters in about 42 seconds, then comes back down at half speed, on purpose.</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>The Guinness record belongs to a <strong>Hitachi</strong> elevator in the Guangzhou CTF Finance Centre: <strong>21 m/s (47 mph) going up</strong>, certified in 2019.</li>
<li>Before that, <strong>Mitsubishi Electric&rsquo;s</strong> Shanghai Tower cars held the title at <strong>20.5 m/s</strong>.</li>
<li>The CTF record car goes <em>down</em> at 10 m/s. Hitachi also engineered cabin pressure control against the ear-popping.</li>
<li><strong>TWIN</strong> puts two independent cars in one shaft. <strong>MULTI</strong> throws out the rope entirely and uses linear motors, so cabins can move sideways.</li>
<li><strong>UltraRope</strong> swaps steel for carbon fiber so a single elevator run can approach a kilometer.</li>
<li>And a few hundred <strong>paternosters</strong>, open cabins on a loop that never stop, still run in Germany.</li>
</ul>

<figure class="el-fig el-speed">
  <figcaption><b>CHART</b>How fast is fast? Top rated speeds, in meters per second.</figcaption>
  <div class="el-speed-row hl">
    <span>Guangzhou CTF (Hitachi)</span>
    <i><b style="--w: 100%"></b></i>
    <strong>21 <small>m/s</small></strong>
    <small class="n">Guinness record, 2019. Ascending only: it descends at 10 m/s.</small>
  </div>
  <div class="el-speed-row">
    <span>Shanghai Tower (Mitsubishi)</span>
    <i><b style="--w: 97.61904761904762%"></b></i>
    <strong>20.5 <small>m/s</small></strong>
    <small class="n">The previous Guinness record, 2016.</small>
  </div>
  <div class="el-speed-row">
    <span>Usain Bolt, top speed</span>
    <i><b style="--w: 58.57142857142858%"></b></i>
    <strong>12.3 <small>m/s</small></strong>
    <small class="n">His recorded top speed in a 100 m race, for scale.</small>
  </div>
  <div class="el-speed-row">
    <span>Burj Khalifa (Otis double-deck)</span>
    <i><b style="--w: 47.61904761904761%"></b></i>
    <strong>10 <small>m/s</small></strong>
    <small class="n">Tallest building, not the fastest elevator.</small>
  </div>
  <div class="el-speed-row">
    <span>Typical hydraulic</span>
    <i><b style="--w: 3.571428571428571%"></b></i>
    <strong>0.75 <small>m/s</small></strong>
    <small class="n">Rough typical value for a low-rise hydraulic car.</small>
  </div>
</figure>

<h2 id="the-speed-war">The speed war</h2>
<p>Hitachi&rsquo;s CTF elevator goes from the ground floor to the hotel lobby on the
95th floor, <strong>440 meters, in about 42 seconds</strong>. Hitachi&rsquo;s spec sheet lists
its rated speed as 1,260 m/min going up and 600 m/min going down. To keep that
comfortable, the car has a capsule-shaped body borrowed from high-speed-rail
design, active guides that damp vibration, and <strong>pressure control</strong> to fight
blocked ears. The brakes use special heat-resistant friction material, because
stopping a car from 47 mph turns a lot of motion into heat.</p>
<p>Mitsubishi&rsquo;s Shanghai Tower cars set the Guinness record at 20.5 m/s in 2016,
one of several elevator records the tower collected that year. Hitachi&rsquo;s certificate came
in 2019. If you&rsquo;ve seen &ldquo;world&rsquo;s fastest elevator&rdquo; attached to both buildings,
that&rsquo;s why.</p>
<h2 id="two-cars-one-shaft">Two cars, one shaft</h2>
<p>TK Elevator&rsquo;s <strong>TWIN</strong> runs two completely independent cars in the same shaft,
each with its own motor, controller, and safeties. The upper car serves upper
floors, the lower car serves lower ones, and the dispatch system has one extra
hard rule: <strong>they never meet</strong>. If they get too close, drives cut out and the
safety gear can engage. TK says the payoff is more capacity from the same
building footprint, plus parking one car when traffic is light.</p>

<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="gyq3AMKtWHI" aria-label="Play video: TWIN by TK Elevator: two independent cars, one shaft">
    <img src="https://i.ytimg.com/vi/gyq3AMKtWHI/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>TWIN by TK Elevator: two independent cars, one shaft</b><span>TK Elevator</span><small>An animated look at how the two cars share the shaft and keep their distance.</small>
    <a href="https://www.youtube.com/watch?v=gyq3AMKtWHI" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>
<script>
document.addEventListener('click', e => {
  const b = e.target.closest('.el-yt-play'); if (!b) return;
  const f = document.createElement('iframe');
  f.src = 'https://www.youtube-nocookie.com/embed/' + b.dataset.yt + '?autoplay=1&rel=0';
  f.title = b.getAttribute('aria-label'); f.allow = 'autoplay; encrypted-media; picture-in-picture'; f.allowFullscreen = true;
  f.className = 'el-yt-frame'; b.replaceWith(f);
});
</script>

<h2 id="multi-no-rope-and-it-goes-sideways">MULTI: no rope, and it goes sideways</h2>
<p><strong>MULTI</strong> is the elevator from science fiction. There&rsquo;s no rope. Each cabin
rides on <strong>linear motors</strong>, the same basic idea as a maglev train, which means
several cabins can share a loop of shafts, and a rotating section of rail can
send a cabin <strong>horizontally</strong> into the next shaft. TK Elevator installed it in
2017 in its elevator test tower in Rottweil, Germany.</p>
<p>The honest status check: as of 2024, Wikipedia&rsquo;s entry lists no MULTI
installations outside test sites, so it&rsquo;s still a test-tower story, not
something you&rsquo;ll ride at the office. Ropeless
doesn&rsquo;t mean brakeless either. The design literature leans hard on layered
braking and dense sensors.</p>

<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="vzWcBr8QJD0" aria-label="Play video: MULTI: the world&#39;s first ropeless elevator">
    <img src="https://i.ytimg.com/vi/vzWcBr8QJD0/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>MULTI: the world&#39;s first ropeless elevator</b><span>Tomorrow&#39;s World Today</span><small>Inside the Rottweil test tower with the linear-motor cabins.</small>
    <a href="https://www.youtube.com/watch?v=vzWcBr8QJD0" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>

<h2 id="carbon-fiber-rope">Carbon-fiber rope</h2>
<p>In a really tall building, the steel rope itself becomes the problem. At some
point most of what the motor lifts is <em>rope</em>, not people. That&rsquo;s why supertall
towers use <strong>sky lobbies</strong>, where you change elevators partway up. KONE&rsquo;s
<strong>UltraRope</strong>, launched in 2013, replaces steel with a carbon-fiber core. KONE
says it&rsquo;s a small fraction of the weight of equivalent steel rope, and that it
makes single elevator runs of around a kilometer practical, roughly double the
old limit. It was chosen for the planned Jeddah Tower in Saudi Arabia, a kilometer-class
building designed around 58 elevators and all-digital destination dispatch.</p>
<h2 id="the-elevator-that-never-stops">The elevator that never stops</h2>
<p>A <strong>paternoster</strong> is a chain of open cabins going up one side and down the
other in a continuous loop, about as fast as a slow walk. There are no doors and
no buttons. You step on, and you step off at your floor. West Germany banned new
ones in 1974, but Germans love the survivors. A few hundred still run there,
with more in the UK and Central Europe, and preservation campaigns have fought
off attempts to shut them down.</p>
<div class="el-callout teal"><b>Yes, you can ride over the top</b><p>The most-asked paternoster question: what happens if you stay on past the top floor? The cabin shifts sideways across the top of the loop and starts down the other side. It's perfectly safe, and the cabin stays upright.</p></div>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://www.hitachi.com/en/press/articles/2019/09/0927/">Hitachi: Guangzhou CTF elevator wins Guinness World Records title as the world's fastest (2019)</a></li>
<li><a href="https://mitsubishielevator.com/uploads/files/pdf/2016-12-09_MELCO-Guinness.pdf">Mitsubishi Electric: Shanghai Tower Guinness World Records (2016, PDF)</a></li>
<li><a href="https://www.otis.com/documents/256045/10848749/Skyrise-brochure--jan-2017-.pdf/07d77263-38b1-5d10-5f3b-e05957410f4b?t=1612419063693">Otis: SkyRise brochure (Burj Khalifa double-decks at 10 m/s, PDF)</a></li>
<li><a href="https://en.wikipedia.org/wiki/Usain_Bolt">Wikipedia: Usain Bolt (top speed)</a></li>
<li><a href="https://en.wikipedia.org/wiki/TK_Elevator_MULTI">Wikipedia: TK Elevator MULTI</a></li>
<li><a href="https://www.enr.com/articles/512-ultrarope-lightweight-elevator-system-can-double-the-maximum-run-to-1-kilometer-says-kone">ENR: UltraRope can double the maximum run to 1 kilometer, says KONE</a></li>
<li><a href="https://elevatorworld.com/article/the-elevator-designs-of-jeddah-tower/">Elevator World: the elevator designs of Jeddah Tower</a></li>
<li><a href="https://99percentinvisible.org/article/paternoster-lifts-cyclic-chain-elevators-no-buttons-doors-stops/">99% Invisible: paternoster lifts</a></li>
<li><a href="https://www.elevators.com/germans-fight-to-keep-paternoster-elevators/">Nationwide Lifts: Germans fight to keep paternoster elevators</a></li>
</ol>
]]></content:encoded></item><item><title>The Phone in the Elevator</title><link>https://errorzap.com/elevators/the-phone/</link><pubDate>Sat, 26 Sep 2026 17:07:00 -0600</pubDate><guid>https://errorzap.com/elevators/the-phone/</guid><description>That little stainless steel phone panel is one of the last things in most buildings still running on a copper POTS line. What the codes require, why the copper is disappearing, and how cellular and IP communicators are taking over.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 07 · THE PHONE</span><p>Find the oldest phone line in a modern office building and there's a decent chance it's the one in the elevator.</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>Elevator codes require a <strong>two-way emergency communication</strong> device in every car. Press the button and you have to reach a real person who can send help.</li>
<li>For decades, that meant an <strong>analog phone on a copper POTS line</strong>, usually one line per elevator bank, auto-dialing a monitoring company.</li>
<li>Carriers are retiring copper. AT&amp;T has said it plans to get out of most traditional landline service <strong>by 2029</strong>.</li>
<li>The replacements are <strong>cellular communicators</strong> (often LTE, with battery backup and the antenna outside the steel shaft) or <strong>IP-based</strong> systems.</li>
<li>The 2019 edition of the elevator code added a <strong>text or video</strong> requirement, so riders who are deaf, hard of hearing, or can&rsquo;t speak can communicate too.</li>
</ul>
<figure class="el-fig el-phone">
  <figcaption><b>FIG. 7</b>The elevator phone, then and now. Same red button, very different path out of the building.</figcaption>
  <svg viewBox="0 0 360 430" role="img" aria-labelledby="el-phone-t">
    <title id="el-phone-t">Two columns. Then: car phone, down a traveling cable, to a copper POTS pair, to the phone company central office, which is crossed out as being retired. Now: car phone and screen, to a battery-backed communicator, out through an antenna outside the shaft over LTE, to a staffed 24/7 monitoring center.</title>
    <rect width="360" height="430" class="bg"/>
    <text x="14" y="26" class="lbl">THEN · COPPER</text>
    <text x="192" y="26" class="lbl new">NOW · CELLULAR / IP</text>
    <g class="node"><rect x="10" y="40" width="160" height="54" rx="8"/><text x="22" y="63">CAR PHONE</text><text x="22" y="81" class="sub">push the button</text></g>
    <g class="node"><rect x="10" y="126" width="160" height="54" rx="8"/><text x="22" y="149">TRAVELING</text><text x="22" y="167" class="sub">cable down the shaft</text></g>
    <g class="node old"><rect x="10" y="212" width="160" height="54" rx="8"/><text x="22" y="235">POTS LINE</text><text x="22" y="253" class="sub">copper pair</text></g>
    <g class="node old"><rect x="10" y="298" width="160" height="54" rx="8"/><text x="22" y="321">CENTRAL OFFICE</text><text x="22" y="339" class="sub">phone company</text></g>
    <path d="M90 94V126M90 180V212M90 266V298" class="wire old"/>
    <path d="M128 304l30 42M158 304l-30 42" class="x"/>
    <text x="14" y="376" class="warn">being retired by</text>
    <text x="14" y="392" class="warn">the carriers</text>

    <g class="node"><rect x="190" y="40" width="160" height="54" rx="8"/><text x="202" y="63">CAR PHONE</text><text x="202" y="81" class="sub">plus a text screen</text></g>
    <g class="node new"><rect x="190" y="126" width="160" height="54" rx="8"/><text x="202" y="149">COMMUNICATOR</text><text x="202" y="167" class="sub">battery backed</text></g>
    <g class="ant"><path d="M270 180v34M258 196l12-10 12 10"/></g>
    <text x="290" y="204" class="sub">antenna</text>
    <text x="290" y="220" class="sub">outside</text>
    <text x="290" y="236" class="sub">the shaft</text>
    <path d="M270 214C270 250 270 262 270 298" class="wire air"/>
    <text x="202" y="266" class="sub">LTE</text>
    <g class="node new"><rect x="190" y="298" width="160" height="54" rx="8"/><text x="202" y="321">24/7 MONITORING</text><text x="202" y="339" class="sub">a human answers</text></g>
    <path d="M270 94V126" class="wire"/>
    <circle r="4" class="pkt"><animateMotion dur="2.6s" repeatCount="indefinite" path="M270 94V180V298"/></circle>
    <text x="192" y="376" class="sub">Code also wants a light</text>
    <text x="192" y="392" class="sub">that shows help is coming,</text>
    <text x="192" y="408" class="sub">plus text or video for</text>
    <text x="192" y="424" class="sub">riders who can't hear.</text>
  </svg>
</figure>

<h2 id="what-the-code-actually-asks-for">What the code actually asks for</h2>
<p>In North America, ASME A17.1 section 2.27 covers emergency communication. The
basics, in plain English:</p>
<ul>
<li>A button in the car that starts a <strong>two-way voice</strong> call, with no handset to
pick up and nothing to dial.</li>
<li>The call goes to <strong>authorized personnel</strong> who can respond around the clock,
typically a monitoring service.</li>
<li>A <strong>visual signal</strong> in the car that lights up when the call is acknowledged,
so a rider who can&rsquo;t hear knows help was reached.</li>
<li>Since <strong>A17.1-2019</strong>, per the National Elevator Industry Inc., the code
spells out requirements aimed at riders who are deaf, hard of hearing, or
speech impaired, which in practice means a <strong>two-way text or video display</strong>
in the car for buildings that fall under that edition.</li>
</ul>
<p>The ADA standards add that the system can&rsquo;t rely on voice alone.</p>
<h2 id="why-the-copper-matters">Why the copper matters</h2>
<p>A POTS line is a very simple, very reliable thing. The phone company feeds it
power from the central office, so it keeps working when the building&rsquo;s power is
out. It has a dial tone you can test, and old elevator phones were designed
around exactly that behavior.</p>
<p>That copper is going away. In late 2024 AT&amp;T said it planned to eliminate
traditional landline service in 20 of its 21 states by 2029, and other carriers
are shrinking their copper networks too. According to emergency-phone vendor
Kings III, an FCC change that took effect in March 2026 means carriers no longer
need the agency&rsquo;s approval before retiring copper, just 90 days&rsquo; notice to
customers. So building owners are
facing a forced upgrade on one of the most safety-critical phone lines they
have.</p>
<h2 id="whats-replacing-it">What&rsquo;s replacing it</h2>
<ul>
<li><strong>Cellular communicators.</strong> A box that presents a phone-line interface to
the elevator phone and connects over LTE instead. Since steel and concrete
shafts kill cell signal, the antenna usually goes on top of the car, in the
machine room, or outside the hoistway, and the unit carries a <strong>battery</strong>
because it no longer gets power from the phone company. Many are sold as
&ldquo;dual path,&rdquo; with a second connection for backup.</li>
<li><strong>VoIP / IP systems.</strong> The elevator phone rides the building network. That
works, but now the phone depends on the building&rsquo;s power, switches, and
internet, so battery backup and network design matter a lot more.</li>
<li><strong>Car displays.</strong> To meet the newer text and video rules, the car gets a
small screen, and the monitoring center can type or show video back.</li>
</ul>
<div class="el-callout"><b>Why ErrorZap cares</b><p>This is the kind of thing that breaks quietly. An analog adapter that doesn't pass the elevator phone's signaling cleanly, a cellular unit mounted where there's no signal, or a battery nobody has tested all look fine until someone actually presses the button. If you manage a building's phone lines, find out where the elevator lines are, what they're really connected to, and when someone last made a test call.</p></div>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://nationalelevatorindustry.org/elevator-emergency-communications/">NEII: elevator emergency communications and A17.1-2019 requirement 2.27.1</a></li>
<li><a href="https://up.codes/s/emergency-operation-and-signaling-devices">UpCodes: ASME A17.1 Section 2.27</a></li>
<li><a href="https://www.kingsiii.com/elevator-code/">Kings III: what the latest elevator code says about emergency phones</a></li>
<li><a href="https://www.usatoday.com/story/money/2024/12/04/att-eliminate-traditional-landline-copper-phone-service-2029/76765766007/">USA Today: AT&amp;T to eliminate most traditional landline service by 2029</a></li>
<li><a href="https://www.kingsiii.com/pots-emergency-phone-replacement/">Kings III: POTS emergency phone replacement</a></li>
<li><a href="https://dataremote.com/solutions/elevator-emergency-communication">DataRemote: elevator emergency communication</a></li>
<li><a href="https://www.access-board.gov/ada/">U.S. Access Board: ADA Accessibility Standards (section 407, elevators)</a></li>
</ol>
]]></content:encoded></item><item><title>Your Elevator Is Online Now</title><link>https://errorzap.com/elevators/cloud/</link><pubDate>Sat, 26 Sep 2026 17:06:00 -0600</pubDate><guid>https://errorzap.com/elevators/cloud/</guid><description>Elevators now stream door cycles, vibration, and fault codes to cloud platforms that predict failures before they happen. How the big four do it, what the dashboards show, robots calling cars through APIs, and the honest cybersecurity picture.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 06 · THE CLOUD</span><p>Somewhere there's a dashboard that knew your office elevator's door was getting sticky before anyone in the building noticed.</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>All the big makers sell <strong>connected service</strong>: an edge gateway reads the controller and sensors and streams data to the maker&rsquo;s cloud.</li>
<li>The pitch is <strong>predictive maintenance</strong>: catch a door that&rsquo;s slowing down or a brake switch that&rsquo;s drifting before it strands someone.</li>
<li>Elevators also expose <strong>APIs</strong> now, so delivery robots and building apps can call cars.</li>
<li>The core safety systems still work <strong>locally</strong>. If the cloud goes down, the car should lose features, not safety.</li>
<li>We couldn&rsquo;t find a publicly documented ransomware attack that stopped passenger elevators. Security folks still treat these gateways as <strong>operational technology</strong> that belongs on its own segmented network.</li>
</ul>
<h2 id="the-big-fours-platforms">The big four&rsquo;s platforms</h2>
<ul>
<li><strong>Otis ONE.</strong> Launched in 2019 as Otis&rsquo;s IoT service platform. It combines
decades of remote elevator monitoring with cloud analytics and machine
learning, and gives building owners a live view of their equipment. Otis has
talked publicly about a cloud data lake taking in data from controllers,
drives, and doors across its fleet.</li>
<li><strong>KONE 24/7 Connected Services.</strong> Built with IBM&rsquo;s Watson IoT platform after a
2016 partnership. KONE and IBM material describes monitoring hundreds of
parameters per unit across a very large connected fleet.</li>
<li><strong>Schindler Ahead.</strong> An on-site gateway called the <strong>Ahead Cube</strong> connects the
elevator, with a technical operations center and apps on top. Schindler says
it can push updates to the gateway&rsquo;s apps over the air, which is a different
thing from updating the safety-rated controller firmware.</li>
<li><strong>TK Elevator MAX.</strong> A cloud predictive-maintenance platform running on
Microsoft Azure. TK Elevator cites well over 100,000 connected units and
claims large cuts in downtime and breakdowns. Those are the company&rsquo;s own
numbers.</li>
</ul>

<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="_cpOYy4ji9g" aria-label="Play video: Digital transformation and predictive maintenance at Otis">
    <img src="https://i.ytimg.com/vi/_cpOYy4ji9g/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>Digital transformation and predictive maintenance at Otis</b><span>CXOTalk #767</span><small>Otis&rsquo;s digital leadership on how they collect data from controllers, drives, and doors, and what they do with it.</small>
    <a href="https://www.youtube.com/watch?v=_cpOYy4ji9g" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>
<script>
document.addEventListener('click', e => {
  const b = e.target.closest('.el-yt-play'); if (!b) return;
  const f = document.createElement('iframe');
  f.src = 'https://www.youtube-nocookie.com/embed/' + b.dataset.yt + '?autoplay=1&rel=0';
  f.title = b.getAttribute('aria-label'); f.allow = 'autoplay; encrypted-media; picture-in-picture'; f.allowFullscreen = true;
  f.className = 'el-yt-frame'; b.replaceWith(f);
});
</script>

<h2 id="what-the-sensors-actually-watch">What the sensors actually watch</h2>
<p>Past the controller&rsquo;s own fault codes, connected elevators track things like
<strong>door cycles and door timing</strong> (doors open and close hundreds of times a day,
so they wear fast), trip counts, motor and bearing temperature, machine vibration, brake
switch timing, and in some systems rope or belt condition. A door that takes a
little longer to close each week is exactly the kind of drift a model can flag
before it turns into a stuck car on a Friday night.</p>
<h2 id="robots-take-the-elevator">Robots take the elevator</h2>
<p>Once an elevator has an API, it doesn&rsquo;t care whether a human or a robot is
calling it. Otis markets robot integration through its dispatch system, and
Schindler publishes a REST-style integration API that supports robots and
credentials like QR codes, faces, and phones. Hotel and hospital delivery robots
that ride elevators by themselves already work this way. Some of them just push
the buttons with an arm.</p>
<h2 id="the-honest-security-picture">The honest security picture</h2>
<p>Here&rsquo;s what we could and couldn&rsquo;t find:</p>
<ul>
<li><strong>Safety stays local.</strong> The safety chain, governor, and brakes don&rsquo;t depend on
the network (Floor 2). A cloud outage should degrade monitoring and fancy
dispatch features, not make a car unsafe.</li>
<li><strong>Lots of the installed base is offline</strong>, or reaches its maker only through
a modem or VPN. We didn&rsquo;t find a reliable public count of how many US elevators
are connected.</li>
<li><strong>No confirmed public case</strong> of ransomware shutting down passenger elevators
at a major maker turned up. The closest public material is training and
research. The DFRWS 2023 forensics challenge, &ldquo;Troubled Elevator,&rdquo; was built
around a malfunctioning bank elevator controller with network captures and
memory dumps to analyze.</li>
<li><strong>The advice from the industry</strong> is the same as for any operational
technology: authenticate remote sessions, keep the elevator gateway off the
general office network, and never expose controller engineering ports to
the internet.</li>
</ul>
<div class="el-callout teal"><b>For the IT person in the building</b><p>If your building has connected elevators, ask the maintenance company three things. What network is the gateway on? Does it phone home over the building's internet or its own cellular link? Who patches it? The answer to the last one is often "not you," and that's worth knowing before something else on that network needs fixing.</p></div>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://www.prnewswire.com/news-releases/otis-launches-otis-one-iot-service-solution-for-the-worlds-largest-elevator-service-network-300643104.html">PR Newswire: Otis launches Otis ONE (2019)</a></li>
<li><a href="https://www.otis.com/en/us/products-services/otis-signature-service/otis-one">Otis: Otis ONE</a></li>
<li><a href="https://www.altoros.com/blog/kone-monitors-1-1m-elevators-and-escalators-with-ibm-bluemix-and-watson-iot/">Altoros: KONE and IBM Watson IoT</a></li>
<li><a href="https://www.schindler.com/en/services/digital.html">Schindler: digital services and Ahead</a></li>
<li><a href="https://www.tkelevator.com/us-en/service/max-digital-services/">TK Elevator: MAX</a></li>
<li><a href="https://www.schindler.co.th/content/dam/website/jsg/docs/schindler-built-in-api.pdf/_jcr_content/renditions/original./schindler-built-in-api.pdf">Schindler: BuilT-In integration API (PDF)</a></li>
<li><a href="https://dfrws.org/dfrws-2023-challenge/">DFRWS 2023 forensic challenge: Troubled Elevator</a></li>
<li><a href="https://www.kebamerica.com/blog/remote-monitoring-for-elevators">KEB America: remote monitoring for elevators</a></li>
</ol>
]]></content:encoded></item><item><title>Secret Menus: Modes, Keys, and Tech Tools</title><link>https://errorzap.com/elevators/secret-menus/</link><pubDate>Sat, 26 Sep 2026 17:05:00 -0600</pubDate><guid>https://errorzap.com/elevators/secret-menus/</guid><description>Most of an elevator&amp;#39;s software isn&amp;#39;t clever dispatch. It&amp;#39;s a state machine full of special modes: fire recall, firefighter control, inspection, earthquake, emergency power. Plus the keys and service tools that unlock them, and who&amp;#39;s allowed to have them.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 05 · MODES</span><p>The dispatch AI gets the headlines. Most of the code is a very careful answer to one question: what mode am I in right now, and what am I allowed to do in it?</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>A modern controller is a <strong>state machine</strong>. Normal service is just one state out of many.</li>
<li><strong>Fire Phase I</strong> recalls every car to a safe floor. <strong>Fire Phase II</strong> hands one car to a firefighter with a key, and the controls change behavior.</li>
<li><strong>Inspection</strong> mode lets mechanics ride the car top at a crawl. <strong>Earthquake</strong> and <strong>emergency power</strong> modes decide who moves and when.</li>
<li>The <strong>firefighter&rsquo;s key</strong> was standardized in many places so any fire crew could use any building&rsquo;s elevators. Security researchers have pointed out the obvious downside.</li>
<li>The <strong>service tools</strong> that read fault codes and change parameters are often proprietary, which has turned elevators into a right-to-repair fight.</li>
</ul>
<figure class="el-fig el-modes" data-el-modes>
  <figcaption><b>FIG. 5</b>Turn the key. Every one of these is a separate operating mode the controller software has to get exactly right.</figcaption>
  <div class="el-modes-ui">
    <div class="el-keyswitch" role="tablist" aria-label="Elevator operating modes">
      <button role="tab" aria-selected="true" data-m="0">Normal</button>
      <button role="tab" data-m="1">Fire Phase I</button>
      <button role="tab" data-m="2">Fire Phase II</button>
      <button role="tab" data-m="3">Independent</button>
      <button role="tab" data-m="4">Inspection</button>
      <button role="tab" data-m="5">Earthquake</button>
      <button role="tab" data-m="6">Emergency power</button>
      <button role="tab" data-m="7">Hospital / Code Blue</button>
    </div>
    <div class="el-modes-screen" role="tabpanel" aria-live="polite">
      <div class="el-lcd"><span data-code>MODE 00</span><span data-dir>▲▼</span></div>
      <h4 data-title>Normal passenger service</h4>
      <p data-body></p>
      <ul data-list></ul>
    </div>
  </div>
</figure>
<script>
(() => {
  const M = [
    ['00','▲▼','Normal passenger service','The group supervisor hands out hall calls, doors run on timers, and the light curtain reopens the doors when something crosses the beam.',['Hall calls: accepted','Door close button: usually ignored (see Floor 9)','Parks cars where it expects demand next']],
    ['F1','▼','Fire Phase I: recall','A smoke detector trips, or someone turns the lobby key. Every car in the bank cancels its calls and runs to the recall floor, and the doors stay open for firefighters. If smoke is at the main floor, the cars go to an alternate floor instead.',['Hall calls: dead','Car buttons: dead','Light curtain: often ignored, because smoke can block the beam']],
    ['F2','☞','Fire Phase II: firefighter control','A firefighter turns the key inside the car. The car only moves when they tell it to, and the doors only open while they hold the button. Let go early and the doors close again, so smoke stays out.',['Constant-pressure door open','Door close button: suddenly works','Call cancel button to change your mind']],
    ['IS','■','Independent service','Takes one car out of the group for movers, VIPs, or staff. It ignores hall calls, and the doors wait until someone presses a button.',['Hall calls: skipped','Doors: stay open until told','Common key-switch in the car panel']],
    ['IN','⇕','Inspection / access','Mechanic mode. Slow speed, and the car moves only while you hold a button on the car top or at the controller. This is how techs ride the hoistway to check rails, ropes, and switches.',['Speed: creeping, code limited','Constant-pressure run buttons','Stop switches everywhere']],
    ['EQ','⌇','Earthquake operation','Seismic sensors or a counterweight derailment switch trip. Cars stop at the nearest floor, open, and stay put or run slow until someone checks them.',['Nearest-floor stop','Reduced speed or out of service','Required in seismic zones']],
    ['EP','⚡','Emergency power','The building is on the generator, which can’t move every car at once. The supervisor brings cars down one at a time, then picks which ones stay running.',['Sequenced lowering','Selected cars stay in service','Rescue devices level cars on battery in some designs']],
    ['HS','✚','Hospital emergency / Code Blue','A priority call steals the nearest car, dumps its hall calls, and runs it express to the calling floor for a patient or a crash cart.',['Express to the call','Other riders ride along or get off','Key or card to go back to normal']]
  ];
  document.querySelectorAll('[data-el-modes]').forEach(root => {
    const q = s => root.querySelector(s);
    const show = i => {
      const [c, d, t, b, l] = M[i];
      q('[data-code]').textContent = 'MODE ' + c; q('[data-dir]').textContent = d;
      q('[data-title]').textContent = t; q('[data-body]').textContent = b;
      q('[data-list]').innerHTML = l.map(x => '<li>' + x + '</li>').join('');
      root.querySelectorAll('[data-m]').forEach(btn => btn.setAttribute('aria-selected', btn.dataset.m == i));
    };
    root.addEventListener('click', e => { const b = e.target.closest('[data-m]'); if (b) show(+b.dataset.m); });
    show(0);
  });
})();
</script>

<h2 id="fire-service-up-close">Fire service, up close</h2>
<p>Fire codes treat elevators as something to <strong>take out of public use</strong> during a
fire, not an escape route. Shafts can fill with smoke, power can fail, and water
from sprinklers and hoses gets everywhere. So:</p>
<ul>
<li><strong>Phase I (recall).</strong> Triggered by a smoke detector in a lobby, machine room,
or shaft, or by a key switch at the fire recall floor. Cars cancel every call,
head for the designated floor (or an alternate floor if the smoke is <em>at</em> the
main floor), open, and park. The light-curtain door sensors are typically
switched off in this mode, because smoke can block the beam and hold the door
open forever.</li>
<li><strong>Phase II (firefighter operation).</strong> A firefighter gets in and turns the
in-car key. Now the car answers only its own buttons. The doors open only while
the firefighter holds the button, and if they let go early the doors close
again, so a firefighter can peek at a smoky floor and back out. Here, finally,
the door close button does exactly what it says.</li>
</ul>
<p>Some newer high-rises go further with <strong>occupant evacuation operation</strong>, where
protected elevators help empty the building under tightly controlled
conditions. Codes and local adoption vary, so it&rsquo;s not everywhere.</p>
<h2 id="the-key-problem">The key problem</h2>
<p>For firefighters to use Phase II, they need a key that works. In many
jurisdictions that means a <strong>standardized fire service key</strong>, so a crew doesn&rsquo;t
need a ring of hundreds. Security researchers Deviant Ollam and Howard Payne
spent a DEF CON 22 talk walking through elevator terminology, modes, and
controls, and the tension is easy to see. A key every firefighter can carry is a
key other people can get too. We&rsquo;re not going to describe the key. The public
talk is the right place to go for the security side.</p>

<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="oHf1vD5_b5I" aria-label="Play video: Elevator Hacking: From the Pit to the Penthouse">
    <img src="https://i.ytimg.com/vi/oHf1vD5_b5I/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>Elevator Hacking: From the Pit to the Penthouse</b><span>DEF CON 22 · Deviant Ollam &amp; Howard Payne</span><small>A security-conference view of elevator modes, keys, and controls. Great for understanding why buildings lock these things down.</small>
    <a href="https://www.youtube.com/watch?v=oHf1vD5_b5I" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>
<script>
document.addEventListener('click', e => {
  const b = e.target.closest('.el-yt-play'); if (!b) return;
  const f = document.createElement('iframe');
  f.src = 'https://www.youtube-nocookie.com/embed/' + b.dataset.yt + '?autoplay=1&rel=0';
  f.title = b.getAttribute('aria-label'); f.allow = 'autoplay; encrypted-media; picture-in-picture'; f.allowFullscreen = true;
  f.className = 'el-yt-frame'; b.replaceWith(f);
});
</script>

<h2 id="tech-tools-and-the-right-to-repair-fight">Tech tools and the right-to-repair fight</h2>
<p>On older equipment, a skilled mechanic could fix almost anything with a meter
and a wiring diagram. On a lot of newer proprietary controllers, you can&rsquo;t even
<em>read the fault log</em> without the manufacturer&rsquo;s service tool. Depending on the
brand, that&rsquo;s a handheld unit, a laptop app, or a key-card, and independent
elevator companies say they either can&rsquo;t get one or can only lease one on the
manufacturer&rsquo;s terms.</p>
<p>Elevator World and independent contractors describe the same pattern as the
car and tractor right-to-repair fights. Building owners who want to switch
maintenance companies can find the new company locked out of their own
equipment. The counter-move is <strong>open-architecture controllers</strong> from
independent makers, sold on the promise that any licensed mechanic can service
them with published tools. That&rsquo;s also why &ldquo;modernization&rdquo; jobs so often replace
the whole controller.</p>
<div class="el-callout"><b>The status code rabbit hole</b><p>Schindler training material that circulates online lists elevator status codes from 00 to 99: out of service, passenger travel, fire, earthquake, hospital, learning travel, several flavors of inspection, persistent breakdown, and more. It's a good picture of how much of "elevator software" is modes and interlocks rather than clever scheduling.</p></div>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://up.codes/s/emergency-operation-and-signaling-devices">UpCodes: ASME A17.1 Section 2.27, emergency operation and signaling devices</a></li>
<li><a href="https://media.defcon.org/DEF%20CON%2022/DEF%20CON%2022%20presentations/DEF%20CON%2022%20-%20Deviant-Ollam-and-Howard-Payne-Elevator%20Hacking-From-the-Pit-to-the-Penthouse.pdf">DEF CON 22: Ollam &amp; Payne, Elevator Hacking (slides, PDF)</a></li>
<li><a href="https://elevatorworld.com/article/the-right-to-repair/">Elevator World: The Right to Repair</a></li>
<li><a href="https://elevatorblueprint.com/blog/oem-vs-independent-elevator-company/">Elevator Blueprint: OEM vs. independent elevator companies</a></li></ol>
]]></content:encoded></item><item><title>The Dispatch Game</title><link>https://errorzap.com/elevators/dispatch/</link><pubDate>Sat, 26 Sep 2026 17:04:00 -0600</pubDate><guid>https://errorzap.com/elevators/dispatch/</guid><description>Every elevator bank runs a scheduler. How collective control works, why destination dispatch took the buttons out of the car, what the big makers say their algorithms do, and a live simulator that races the two approaches.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 04 · DISPATCH</span><p>Pressing "up" doesn't call <em>an</em> elevator. It files a request with a scheduler that's juggling every car in the bank and guessing what everyone else is about to do.</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>The classic rule is <strong>collective control</strong>: a car answers every call in its direction of travel, then turns around. If you&rsquo;ve studied disk scheduling, it&rsquo;s basically the SCAN algorithm.</li>
<li>Banks of cars add a <strong>group supervisor</strong> that assigns each hall call to the car with the best estimated arrival time, and switches strategy for morning rush, lunch, and evening.</li>
<li><strong>Destination dispatch</strong> asks for your floor <em>in the lobby</em>, then groups people going to the same floors into the same car. Schindler invented the first practical one, the Miconic 10, in 1990 and introduced it in 1992.</li>
<li>Modern makers advertise fuzzy logic, neural-network traffic prediction, genetic algorithms, and machine-learning tuning. Some of that is well documented, and some of it is brochure language.</li>
<li>Below, you can race the two approaches yourself.</li>
</ul>
<h2 id="classic-up-down-and-hope">Classic: up, down, and hope</h2>
<p>With plain up/down buttons, the system knows <em>that</em> you want to go up, but not
<em>where</em>. So a car stops for you, everyone piles in, and then everyone presses a
different floor. In a morning rush, a car leaving the lobby with 12 people can
easily end up stopping at 8 or 9 floors, and its round trip gets long. The next
person waiting in the lobby pays for every one of those stops.</p>
<h2 id="destination-dispatch-tell-it-where-first">Destination dispatch: tell it where first</h2>
<p>Destination dispatch moves the floor buttons into the lobby. You type 14 on a
kiosk (or badge in, or tap your phone), and the screen tells you which car to
take. The computer now knows every rider&rsquo;s destination <em>before</em> they board, so it
can send the three people going to 14 and the two going to 15 together, and put
the people going to 6 in a different car.</p>
<p>Each car makes fewer stops, so it gets back to the lobby sooner, and waits get
shorter. That&rsquo;s why many of these buildings have no floor buttons inside the
car at all. It&rsquo;s also why you shouldn&rsquo;t follow your friend into Car B if the
kiosk told you Car D. Car B doesn&rsquo;t know you exist.</p>
<figure class="el-fig el-sim" data-el-sim>
  <figcaption><b>FIG. 4 · LIVE</b>Two identical towers, same four cars, same people arriving at the same moments. The only difference is the software deciding who rides where.</figcaption>
  <div class="el-sim-controls">
    <label>Morning rush <input type="range" min="10" max="45" value="28" data-rate> <output data-rate-out>28</output> people/min</label>
    <button type="button" data-pause>Pause</button>
    <button type="button" data-reset>Reset</button>
    <span class="el-sim-clock" data-clock>07:58:00</span>
  </div>
  <div class="el-sim-towers">
    <div class="el-sim-tower" data-tower="0">
      <h4>Classic <small>up/down buttons, pick your floor inside</small></h4>
      <div class="el-sim-shafts"></div>
      <div class="el-sim-lobby"><span>Lobby line</span><b data-q>0</b></div>
      <div class="el-sim-stats">
        <div><span>Avg wait</span><b data-wait>–</b></div>
        <div><span>Lobby → desk</span><b data-trip>–</b></div>
        <div><span>Stops per trip</span><b data-stops>–</b></div>
        <div><span>Delivered</span><b data-done>0</b></div>
      </div>
    </div>
    <div class="el-sim-tower" data-tower="1">
      <h4>Destination dispatch <small>type your floor in the lobby, get a car</small></h4>
      <div class="el-sim-shafts"></div>
      <div class="el-sim-lobby"><span>Lobby line</span><b data-q>0</b></div>
      <div class="el-sim-stats">
        <div><span>Avg wait</span><b data-wait>–</b></div>
        <div><span>Lobby → desk</span><b data-trip>–</b></div>
        <div><span>Stops per trip</span><b data-stops>–</b></div>
        <div><span>Delivered</span><b data-done>0</b></div>
      </div>
    </div>
  </div>
  <p class="el-sim-note">A toy model, not any company's algorithm: 16 floors, 4 cars of 12 people, 2 s per floor, 8 s per stop, and everyone starting in the lobby. The destination tower groups riders so each car makes at most 4 stops. Real group controllers also juggle lunch rushes, people going between floors, energy use, and hundreds of tuning knobs. Above about 22 people a minute, the classic tower's line starts growing and doesn't stop. Drag the slider down to 10 and you'll see the flip side: in light traffic, destination dispatch can make you wait a little <em>longer</em>, because it holds cars to group riders.</p>
</figure>
<script>
 
function elSimEngine(o) {
  const FLOORS = 16, CAP = 12, FLOOR_T = 2, STOP_T = 8, DWELL = 6, MAXSTOPS = 4;
  let rng, t, nextArr, towers;
  const mulberry = a => () => { a |= 0; a = a + 0x6D2B79F5 | 0; let x = Math.imul(a ^ a >>> 15, 1 | a); x = x + Math.imul(x ^ x >>> 7, 61 | x) ^ x; return ((x ^ x >>> 14) >>> 0) / 4294967296; };
  const mkCar = () => ({ pos: 0, state: 'lobby', timer: DWELL, riders: [], stops: [], next: [] });
  function reset() {
    rng = mulberry(o.seed || 42); t = 0; nextArr = 0;
    towers = [0, 1].map(i => ({ dd: i === 1, cars: Array.from({ length: o.cars || 4 }, mkCar), queue: [], waits: [], trips: [], stops: [], done: 0 }));
  }
  function etaLobby(c) {
    if (c.state === 'lobby') return 0;
    if (c.state === 'down') return c.pos * FLOOR_T;
    const top = c.stops.length ? c.stops[c.stops.length - 1] : c.pos;
    return (top - c.pos) * FLOOR_T + c.stops.length * STOP_T + top * FLOOR_T;
  }
  
  function assign(tw, p) {
    let best = null, bestCost = Infinity;
    for (const c of tw.cars) {
      if (c.next.length >= CAP) continue;
      const floors = new Set(c.next.map(g => g.dest));
      const has = floors.has(p.dest);
      if (!has && floors.size >= MAXSTOPS) continue;
      const cost = etaLobby(c) + (has ? 0 : STOP_T + floors.size * 3);
      if (cost < bestCost) { bestCost = cost; best = c; }
    }
    p.car = best;
    if (best) best.next.push(p);
  }
  function arrive() {
    const dest = 1 + Math.floor(rng() * (FLOORS - 1));
    towers.forEach(tw => { const p = { dest, t0: t }; tw.queue.push(p); if (tw.dd) assign(tw, p); });
  }
  function step(tw, dt) {
    if (tw.dd) tw.queue.forEach(p => { if (!p.car) assign(tw, p); });
    tw.cars.forEach((c, i) => {
      if (c.state === 'lobby') {
        const wasEmpty = !c.riders.length;
        if (tw.dd) {
          c.next.forEach(p => { if (!p.on) { p.on = true; c.riders.push(p); tw.waits.push(t - p.t0); tw.queue.splice(tw.queue.indexOf(p), 1); } });
        } else if (!tw.cars.some((o2, j) => j < i && o2.state === 'lobby' && o2.riders.length < CAP)) {
          while (tw.queue.length && c.riders.length < CAP) { const p = tw.queue.shift(); c.riders.push(p); tw.waits.push(t - p.t0); }
        }
        if (wasEmpty && c.riders.length) c.timer = DWELL;
        c.timer = Math.max(0, c.timer - dt);
        if (c.riders.length && (c.timer === 0 || c.riders.length >= CAP)) {
          c.stops = [...new Set(c.riders.map(r => r.dest))].sort((a, b) => a - b);
          c.next = []; tw.stops.push(c.stops.length); c.state = 'up';
        }
      } else if (c.state === 'up') {
        c.pos = Math.min(c.stops[0], c.pos + dt / FLOOR_T);
        if (c.pos === c.stops[0]) { c.state = 'doors'; c.timer = STOP_T; }
      } else if (c.state === 'doors') {
        c.timer -= dt;
        if (c.timer <= 0) {
          const f = c.stops.shift();
          c.riders = c.riders.filter(r => { if (r.dest !== f) return true; tw.trips.push(t - r.t0); tw.done++; return false; });
          c.state = c.stops.length ? 'up' : 'down';
        }
      } else {
        c.pos = Math.max(0, c.pos - dt / FLOOR_T);
        if (c.pos === 0) { c.state = 'lobby'; c.timer = DWELL; }
      }
    });
  }
  function advance(dt, perMin) {
    const rate = perMin / 60;
    while (dt > 0) {
      const h = Math.min(dt, 0.1); dt -= h; t += h;
      while (t >= nextArr) { arrive(); nextArr += -Math.log(1 - rng()) / rate; }
      towers.forEach(tw => step(tw, h));
    }
  }
  const avg = a => a.length ? a.slice(-200).reduce((x, y) => x + y, 0) / Math.min(a.length, 200) : null;
  reset();
  return { reset, advance, avg, FLOORS, CAP, get t() { return t; }, get towers() { return towers; } };
}
 
(() => {
  const SPEEDUP = 6;
  document.querySelectorAll('[data-el-sim]').forEach(root => {
    const reduce = matchMedia('(prefers-reduced-motion: reduce)').matches;
    const rateIn = root.querySelector('[data-rate]'), rateOut = root.querySelector('[data-rate-out]');
    const sim = elSimEngine({ seed: 42 });
    const els = [...root.querySelectorAll('[data-tower]')];
    let carEls = [], paused = reduce, last = null;
    const fmt = s => s == null ? '–' : (s < 60 ? Math.round(s) + ' s' : Math.floor(s / 60) + 'm ' + String(Math.round(s % 60)).padStart(2, '0') + 's');
    function build() {
      carEls = els.map((el, ti) => {
        const shafts = el.querySelector('.el-sim-shafts'); shafts.innerHTML = '';
        return sim.towers[ti].cars.map((c, i) => {
          const s = document.createElement('div'); s.className = 'el-sim-shaft';
          const d = document.createElement('div'); d.className = 'el-sim-car';
          d.innerHTML = '<b>' + 'ABCD'[i] + '</b><i></i>';
          s.appendChild(d); shafts.appendChild(s); return d;
        });
      });
    }
    function draw() {
      sim.towers.forEach((tw, ti) => {
        tw.cars.forEach((c, i) => {
          const d = carEls[ti][i];
          d.style.bottom = (c.pos / (sim.FLOORS - 1) * 100) + '%';
          d.querySelector('i').textContent = c.riders.length || '';
          d.classList.toggle('open', c.state === 'lobby' || c.state === 'doors');
          d.classList.toggle('full', c.riders.length >= sim.CAP);
        });
        const q = els[ti];
        q.querySelector('[data-q]').textContent = tw.queue.length;
        q.querySelector('[data-wait]').textContent = fmt(sim.avg(tw.waits));
        q.querySelector('[data-trip]').textContent = fmt(sim.avg(tw.trips));
        const sp = sim.avg(tw.stops); q.querySelector('[data-stops]').textContent = sp == null ? '–' : sp.toFixed(1);
        q.querySelector('[data-done]').textContent = tw.done;
      });
      const clock = 7 * 3600 + 58 * 60 + Math.floor(sim.t);
      root.querySelector('[data-clock]').textContent = [clock / 3600, clock / 60 % 60, clock % 60].map(v => String(Math.floor(v)).padStart(2, '0')).join(':');
    }
    function tick(now) {
      if (last == null) last = now;
      const dt = Math.min(0.25, (now - last) / 1000) * SPEEDUP; last = now;
      if (!paused) { sim.advance(dt, +rateIn.value); draw(); }
      requestAnimationFrame(tick);
    }
    rateIn.addEventListener('input', () => { rateOut.textContent = rateIn.value; });
    root.querySelector('[data-pause]').textContent = paused ? 'Play' : 'Pause';
    root.querySelector('[data-pause]').addEventListener('click', e => { paused = !paused; e.target.textContent = paused ? 'Play' : 'Pause'; });
    root.querySelector('[data-reset]').addEventListener('click', () => { sim.reset(); build(); draw(); });
    build(); draw();
    new IntersectionObserver((es, io) => es.forEach(e => { if (e.isIntersecting) { io.disconnect(); requestAnimationFrame(tick); } })).observe(root);
  });
})();
</script>

<h2 id="what-the-big-makers-say-theyre-doing">What the big makers say they&rsquo;re doing</h2>
<p>Group control algorithms are proprietary, so what we have is what the
manufacturers choose to publish. Treat the fancier claims as marketing unless
there&rsquo;s detail behind them.</p>
<ul>
<li><strong>Mitsubishi Electric ΣAI-2200C.</strong> The best-documented. The brochure
describes fuzzy logic and expert-system rules, neural-network traffic
prediction, a &ldquo;Dynamic Rule-set Optimizer&rdquo; that simulates competing strategies
every few minutes and picks the winner, &ldquo;psychological&rdquo; waiting-time scoring,
and an energy-saving mode that prefers the cheaper move (like a heavy car
going <em>down</em>) when several cars could arrive at about the same time.</li>
<li><strong>Otis Compass 360 / Compass Infinity.</strong> Destination management with
&ldquo;SmartGrouping.&rdquo; Otis says Compass Infinity uses machine learning to tune the
hundreds of dispatch parameters that would otherwise be set by hand and go
stale as a building&rsquo;s traffic changes.</li>
<li><strong>KONE Destination.</strong> KONE&rsquo;s brochure language lists traffic forecasting,
fuzzy logic, and genetic algorithms. That&rsquo;s a vendor claim. Nobody outside
KONE has published the internals.</li>
<li><strong>Schindler PORT.</strong> The descendant of the 1992 Miconic 10. It adds identity:
your badge can carry your default floor, access rights, and accessibility
needs, like extra door time.</li>
<li><strong>TK Elevator TWIN.</strong> Two cars in one shaft, so the scheduler also has to
keep them from ever meeting. More on Floor 8.</li>
</ul>

<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="66X4nQPE4bQ" aria-label="Play video: Introducing Compass 360">
    <img src="https://i.ytimg.com/vi/66X4nQPE4bQ/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>Introducing Compass 360</b><span>Otis Elevator Co.</span><small>Otis&rsquo;s pitch for its destination dispatch system, with a look at the touchscreen side.</small>
    <a href="https://www.youtube.com/watch?v=66X4nQPE4bQ" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>
<script>
document.addEventListener('click', e => {
  const b = e.target.closest('.el-yt-play'); if (!b) return;
  const f = document.createElement('iframe');
  f.src = 'https://www.youtube-nocookie.com/embed/' + b.dataset.yt + '?autoplay=1&rel=0';
  f.title = b.getAttribute('aria-label'); f.allow = 'autoplay; encrypted-media; picture-in-picture'; f.allowFullscreen = true;
  f.className = 'el-yt-frame'; b.replaceWith(f);
});
</script>

<h2 id="the-access-control-twist">The access-control twist</h2>
<p>Once the elevator knows who you are, it becomes part of building security.
Access control integrator AMAG describes two patterns. In one, the elevator asks
the badge system, in real time, &ldquo;may this person go to floor 12?&rdquo; In the other,
the cardholder database is copied into the elevator system, which decides
locally. Either way, your floor choice is now tied to your badge. That&rsquo;s handy
for tenants, and it&rsquo;s one more system for the building&rsquo;s IT people to think
about.</p>
<div class="el-callout teal"><b>Play it yourself</b><p><a href="https://play.elevatorsaga.com/">Elevator Saga</a> is a free browser game where you write the JavaScript that dispatches the elevators. Its API uses the same ideas real group controllers worry about: destination queues, load factor, and what to do with an idle car. It's harder than it looks.</p></div>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://en.wikipedia.org/wiki/Destination_dispatch">Wikipedia: Destination dispatch</a></li>
<li><a href="https://www.schindler.sa/en/elevators/destination-control/port-elevator.html">Schindler: Miconic 10 (1992) and PORT</a></li>
<li><a href="https://mitsubishielevator.com/uploads/files/pdf/elevators/2200c_Brochure.pdf">Mitsubishi Electric: ΣAI-2200C group control brochure (PDF)</a></li>
<li><a href="https://www.otis.com/en/us/products-services/products/compass-360">Otis: Compass 360</a></li>
<li><a href="https://www.kone.me/en/Images/brochure-kone-destination_tcm103-18639.pdf">KONE: Destination brochure (PDF)</a></li>
<li><a href="https://www.schindler.com/en/elevators/destination-control/port-elevator.html">Schindler: PORT destination control</a></li>
<li><a href="https://www.amag.com/wp-content/uploads/2023/12/AMAG-1520_WhitePapers_ElevatorDispatch_v1.pdf">AMAG: destination dispatch and access control white paper (PDF)</a></li>
<li><a href="https://play.elevatorsaga.com/documentation.html">Elevator Saga: documentation</a></li>
</ol>
]]></content:encoded></item><item><title>From Relay Rooms to Circuit Boards</title><link>https://errorzap.com/elevators/the-brain/</link><pubDate>Sat, 26 Sep 2026 17:03:00 -0600</pubDate><guid>https://errorzap.com/elevators/the-brain/</guid><description>Elevator control went from human operators to rooms of clicking relays to microprocessors and variable-frequency drives. What each generation decided, how the modern stack is wired, and what a technician sees when they plug in.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 03 · THE CONTROLLER</span><p>For most of the 20th century, the elevator's program was a wiring diagram. You could hear it think.</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>Early electric elevators had a <strong>human operator</strong> running a lever. Automation didn&rsquo;t take over until the 1940s and &rsquo;50s.</li>
<li>For about 90 years, smooth speed control came from <strong>Ward Leonard motor-generator sets</strong>: a motor spinning a DC generator whose output drove the hoist motor.</li>
<li>Logic lived in <strong>walls of relays</strong>. Floor selectors, timers, and interlocks were all mechanical and electrical, and techs debugged them by ear.</li>
<li>Microprocessor controllers arrived in the 1980s, and <strong>variable-frequency drives</strong> replaced the motor-generators.</li>
<li>A modern elevator is a small network: car controllers, a group supervisor, a drive, door operators, and fixtures, talking over <strong>CAN bus, serial links, and Ethernet</strong>.</li>
</ul>
<figure class="el-fig el-timeline"><figcaption><b>TIMELINE</b>A century of elevator brains</figcaption>
  <ol>
    <li><time>1880</time><b>First electric elevator</b><p>Werner von Siemens shows an electric elevator in Mannheim, Germany.</p></li>
    <li><time>1891</time><b>Ward Leonard control patented</b><p>A constant-speed motor spins a DC generator; varying the generator&rsquo;s field gives smooth, stepless speed. Elevators use it for roughly 90 years.</p></li>
    <li><time>1920s–40s</time><b>Relay logic grows up</b><p>Automatic &ldquo;collective&rdquo; controls answer calls in order without an operator, built entirely from relays, timers, and mechanical floor selectors.</p></li>
    <li><time>1945</time><b>New York&rsquo;s elevator strike</b><p>About 15,000 elevator operators and building workers walk out, stranding much of Manhattan. Building owners start shopping for automatic elevators in earnest.</p></li>
    <li><time>1980s</time><b>Microprocessors move in</b><p>Solid-state controllers replace relay racks. Thyristor and then AC variable-frequency drives replace motor-generator sets.</p></li>
    <li><time>1996</time><b>The machine room disappears</b><p>Flat permanent-magnet motors fit inside the shaft, and the controller moves to a closet.</p></li>
    <li><time>2010s–now</time><b>The elevator joins the network</b><p>Controllers get Ethernet, remote monitoring gateways, and cloud dashboards. See Floor 6.</p></li>
  </ol>
</figure>

<h2 id="when-you-could-hear-it-think">When you could hear it think</h2>
<p>Walk into an old machine room and the controller is a steel cabinet, or a whole
wall, of relays. Each floor has relays that latch when you press its button.
A mechanical <strong>floor selector</strong>, basically a scale model of the shaft driven by
the machine, tracks where the car is and trips contacts to slow it down at the
right place. Timers are dashpots and thermal relays. When a call gets answered,
you hear a cascade of clacks.</p>
<p>Troubleshooting meant a meter, the wiring diagram, and a good ear. The upside:
everything was visible, and a skilled mechanic could fix almost anything with
parts off the shelf.</p>
<div class="el-videos">

<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="TJM1rwMyhjQ" aria-label="Play video: Old relay elevator controller: complete run-through">
    <img src="https://i.ytimg.com/vi/TJM1rwMyhjQ/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>Old relay elevator controller: complete run-through</b><span>mrmattandmrchay</span><small>A British relay controller that&rsquo;s still in service, explained circuit by circuit.</small>
    <a href="https://www.youtube.com/watch?v=TJM1rwMyhjQ" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>
<script>
document.addEventListener('click', e => {
  const b = e.target.closest('.el-yt-play'); if (!b) return;
  const f = document.createElement('iframe');
  f.src = 'https://www.youtube-nocookie.com/embed/' + b.dataset.yt + '?autoplay=1&rel=0';
  f.title = b.getAttribute('aria-label'); f.allow = 'autoplay; encrypted-media; picture-in-picture'; f.allowFullscreen = true;
  f.className = 'el-yt-frame'; b.replaceWith(f);
});
</script>


<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="Ia4RV3JYWGg" aria-label="Play video: 1971 vintage Otis with relay logic controllers in action">
    <img src="https://i.ytimg.com/vi/Ia4RV3JYWGg/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>1971 vintage Otis with relay logic controllers in action</b><span>JimLiElevators</span><small>Watch the relays move as calls come in.</small>
    <a href="https://www.youtube.com/watch?v=Ia4RV3JYWGg" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>

</div>
<h2 id="the-modern-stack">The modern stack</h2>
<p>Today the same job is split into layers, and each layer is its own computer.</p>
<figure class="el-fig el-stack">
  <figcaption><b>FIG. 3</b>Who decides what. Commands flow down the stack. The cloud only watches, and the safety chain can overrule everyone.</figcaption>
  <svg viewBox="0 0 360 540" role="img" aria-labelledby="el-stack-t">
    <title id="el-stack-t">Layered diagram: hall buttons and destination kiosks feed a group supervisor, which assigns calls to car controllers, which command the drive and the motor and brake. A cloud box receives a one-way dashed data line from a car controller. A hardwired safety chain box can cut power to the motor and brake.</title>
    <defs><marker id="el-ah" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="7" markerHeight="7" orient="auto"><path d="M0 0L10 5L0 10z" class="ah"/></marker></defs>
    <rect width="360" height="540" class="bg"/>
    <g class="box in"><rect x="10" y="14" width="165" height="56" rx="8"/><text x="22" y="38">HALL BUTTONS</text><text x="22" y="56" class="sub">up / down</text></g>
    <g class="box in"><rect x="185" y="14" width="165" height="56" rx="8"/><text x="197" y="38">DEST. KIOSK</text><text x="197" y="56" class="sub">badge, phone, keypad</text></g>
    <g class="box brain"><rect x="10" y="108" width="220" height="60" rx="8"/><text x="22" y="133">GROUP SUPERVISOR</text><text x="22" y="153" class="sub">who gets which call</text></g>
    <g class="box cloud"><rect x="246" y="108" width="104" height="60" rx="28"/><text x="266" y="133">CLOUD</text><text x="266" y="153" class="sub">watches</text></g>
    <g class="box"><rect x="10" y="206" width="165" height="60" rx="8"/><text x="22" y="231">CAR CTRL A</text><text x="22" y="251" class="sub">doors, leveling</text></g>
    <g class="box"><rect x="185" y="206" width="165" height="60" rx="8"/><text x="197" y="231">CAR CTRL B</text><text x="197" y="251" class="sub">one per car</text></g>
    <g class="box"><rect x="10" y="304" width="165" height="56" rx="8"/><text x="22" y="328">VVVF DRIVE</text><text x="22" y="346" class="sub">speed, torque, regen</text></g>
    <g class="box"><rect x="10" y="398" width="165" height="56" rx="8"/><text x="22" y="422">MOTOR + BRAKE</text><text x="22" y="440" class="sub">spring-applied brake</text></g>
    <g class="box safe"><rect x="185" y="304" width="165" height="222" rx="8"/><text x="197" y="328">SAFETY CHAIN</text><text x="197" y="352" class="sub">door locks</text><text x="197" y="370" class="sub">governor switch</text><text x="197" y="388" class="sub">pit + car-top stops</text><text x="197" y="406" class="sub">final limits</text><text x="197" y="438" class="sub">one series loop:</text><text x="197" y="456" class="sub">any open contact</text><text x="197" y="474" class="sub">= no power,</text><text x="197" y="492" class="sub">brake drops</text></g>
    <g class="flow">
      <path d="M92 70V108" marker-end="url(#el-ah)"/><path d="M230 70L180 108" marker-end="url(#el-ah)"/>
      <path d="M92 168V206" marker-end="url(#el-ah)"/><path d="M190 168L250 206" marker-end="url(#el-ah)"/>
      <path d="M92 266V304" marker-end="url(#el-ah)"/><path d="M92 360V398" marker-end="url(#el-ah)"/>
    </g>
    <path d="M320 206V168" class="tap" marker-end="url(#el-ah)"/>
    <path d="M185 426H177" class="kill" marker-end="url(#el-ah)"/>
    <text x="10" y="484" class="sub killtxt">← the safety chain can</text>
    <text x="10" y="502" class="sub killtxt">cut power at any time</text>
    <circle r="4" class="pkt"><animateMotion dur="3.4s" repeatCount="indefinite" path="M92 70V108V168V206V266V304V360V398"/></circle>
    <circle r="4" class="pkt"><animateMotion dur="2.8s" begin="1.2s" repeatCount="indefinite" path="M230 70L180 108L190 168L250 206"/></circle>
    <circle r="3.5" class="pkt2"><animateMotion dur="2.2s" repeatCount="indefinite" path="M320 206V168"/></circle>
  </svg>
</figure>

<ul>
<li><strong>Car controller.</strong> One per car. Runs the doors, leveling, direction,
special modes (Floor 5), fault handling, and the speed profile sent to the drive.</li>
<li><strong>Group supervisor.</strong> Owns the bank. Decides which car answers which call,
parks idle cars, and switches strategies for morning rush, lunch, and
evening (Floor 4).</li>
<li><strong>Drive.</strong> A variable-voltage, variable-frequency (VVVF) inverter that
synthesizes three-phase power for the motor. It follows jerk-limited
&ldquo;S-curve&rdquo; speed profiles, which is why a good elevator starts and stops
without that stomach lurch. An encoder closes the speed loop.</li>
<li><strong>Position.</strong> Absolute encoders and landing-system magnets or tape in the
shaft. After installation, the car does a slow <strong>learning trip</strong> to map
every floor height into memory.</li>
<li><strong>Buses.</strong> CAN bus, RS-485, and proprietary serial links to car panels, hall
fixtures, door operators, and load-weighing sensors. Ethernet between cars
and the group computer.</li>
</ul>
<p>Open-architecture controller makers publish enough to show how this is
organized. MCE&rsquo;s Motion series, for example, splits the car into operation
control, motion control, and power control boards, with CAN ports where a
handheld tool plugs in and Ethernet for a PC monitoring app.</p>
<h2 id="what-the-technician-sees">What the technician sees</h2>
<p>On a modern controller, the &ldquo;machine room&rdquo; is a small screen or a handheld
tool. Typical menus include live car status (position, speed, direction, door
state, safety chain inputs), a <strong>fault log</strong> with codes and timestamps, drive
parameters (contract speed, acceleration, jerk, encoder counts, motor
nameplate), hoistway learning, mode overrides for inspection and testing, raw
I/O monitoring, and group screens showing every hall call and car assignment.</p>
<p>Some tools are physical keys to the kingdom. This video shows a technician
restoring a Mitsubishi controller board&rsquo;s program with the manufacturer&rsquo;s
service card, a rare look at OEM maintenance software.</p>

<figure class="el-yt">
  <button type="button" class="el-yt-play" data-yt="jdjjbWRdus4" aria-label="Play video: Restoring a Mitsubishi elevator board&#39;s program with the service tool">
    <img src="https://i.ytimg.com/vi/jdjjbWRdus4/hqdefault.jpg" alt="" loading="lazy" width="480" height="360">
    <span class="el-yt-btn" aria-hidden="true">▶</span>
  </button>
  <figcaption><b>Restoring a Mitsubishi elevator board&#39;s program with the service tool</b><span>Elevator Vip</span><small>Firmware as a physical object: the board, the card, the procedure.</small>
    <a href="https://www.youtube.com/watch?v=jdjjbWRdus4" rel="noopener" target="_blank">Watch on YouTube ↗</a></figcaption>
</figure>

<p>Who gets those tools is a live fight. More on that on Floor 5.</p>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://en.wikipedia.org/wiki/Ward_Leonard_control">Wikipedia: Ward Leonard control</a></li>
<li><a href="https://en.wikipedia.org/wiki/Elevator">Wikipedia: Elevator (history, Siemens 1880)</a></li>
<li><a href="https://en.wikipedia.org/wiki/Elevator_Strikes">Wikipedia: Elevator Strikes (New York, 1945)</a></li>
<li><a href="https://www.kone.com/en/news-and-insights/stories/making-room-for-more-since-1996.aspx">KONE: MonoSpace and EcoDisc, 1996</a></li>
<li><a href="https://www.kebamerica.com/blog/regenerative-drives-for-elevator-applications/">KEB America: regenerative drives for elevators</a></li>
<li><a href="https://www.nidec-elevator.com/">Nidec Elevator / MCE: Motion controller documentation</a></li>
</ol>
]]></content:encoded></item><item><title>Why It Can't Just Drop</title><link>https://errorzap.com/elevators/cant-fall/</link><pubDate>Sat, 26 Sep 2026 17:02:00 -0600</pubDate><guid>https://errorzap.com/elevators/cant-fall/</guid><description>Movie elevators plunge when a cable snaps. Real ones have a stack of mechanical, fail-safe systems that make free fall nearly impossible. Here&amp;#39;s the chain, from Otis&amp;#39;s 1854 stunt to modern unintended-movement protection.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 02 · SAFETY</span><p>The elevator wasn't the breakthrough. People had hoists for centuries. The breakthrough was a brake that works when everything else has already failed.</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>In 1854, Elisha Otis stood on a platform in New York&rsquo;s Crystal Palace, had the hoist rope <strong>cut with an axe</strong>, and a spring-loaded catch grabbed the notched guide rails. He dropped a few inches.</li>
<li>Today&rsquo;s version is a chain: an <strong>overspeed governor</strong> notices the car going too fast, cuts power, then pulls a lever that jams <strong>safety wedges</strong> against the rails.</li>
<li>The motor brake is <strong>spring-applied and electrically released</strong>. Cut the power and it clamps by itself.</li>
<li>Doors are part of the safety loop. The car can&rsquo;t run with a landing door unlocked, and a landing door can&rsquo;t be opened unless the car is there.</li>
<li>Newer codes add <strong>unintended car movement protection (UCMP)</strong>: if the car creeps away from a floor with the doors open, a separate brake has to stop it within about four feet.</li>
</ul>
<h2 id="the-stunt-that-sold-skyscrapers">The stunt that sold skyscrapers</h2>
<p>Otis&rsquo;s safety wasn&rsquo;t an instant hit. Elevator World&rsquo;s history notes he sold
only a handful of elevators in the year after the Crystal Palace show, and the
first safety elevator built to carry <em>passengers</em> didn&rsquo;t go into service until
1857, in the E.V. Haughwout Building in Manhattan. But the idea stuck, and it&rsquo;s
still the foundation: assume the rope is gone, and stop the car anyway.</p>
<figure class="el-fig el-safety">
  <figcaption><b>FIG. 2</b>The overspeed chain. Every step is mechanical or fail-safe electrical; none of it waits for software to agree.</figcaption>
  <ol class="el-chain">
    <li><span>01</span><b>Car overspeeds</b><p>Something goes wrong and the car is moving faster than it should. It doesn't matter whether that's a brake, a drive, or a rope.</p></li>
    <li><span>02</span><b>Governor wakes up</b><p>A wheel spun by its own loop of rope flings weights outward as speed rises. Past the trip speed, often around 115% of rated speed, a switch cuts motor and brake power.</p></li>
    <li><span>03</span><b>Governor grabs its rope</b><p>If the car still hasn't slowed, the governor jaws clamp that little rope. The car keeps moving, the rope doesn't, and that yanks a lever on the car.</p></li>
    <li><span>04</span><b>Safeties bite the rails</b><p>Hardened wedges or rollers under the car jam against the steel guide rails and stop it within a controlled distance. The same idea Otis demonstrated in 1854, just much better.</p></li>
    <li><span>05</span><b>Buffers, last resort</b><p>Spring or oil buffers in the pit soak up whatever energy is left if a car or counterweight runs past the end of the line.</p></li>
  </ol>
  <svg class="el-gov" viewBox="0 0 220 140" role="img" aria-label="Animated governor wheel with flyweights that swing outward as it spins">
    <rect width="220" height="140" class="bg"/>
    <g class="el-gov-spin" style="transform-origin:110px 70px">
      <circle cx="110" cy="70" r="46" class="wheel"/>
      <circle cx="110" cy="70" r="6" class="hub"/>
      <g class="el-fly"><rect x="72" y="62" width="22" height="16" rx="3" class="weight"/><rect x="126" y="62" width="22" height="16" rx="3" class="weight"/></g>
    </g>
    <line x1="64" y1="70" x2="64" y2="140" class="grope"/><line x1="156" y1="70" x2="156" y2="140" class="grope"/>
    <text x="8" y="16" class="lbl sm">GOVERNOR</text>
  </svg>
</figure>

<h2 id="why-the-software-doesnt-get-a-vote">Why the software doesn&rsquo;t get a vote</h2>
<p>Modern controllers are full of computers, but the core safety devices are
designed to <strong>fail safe without them</strong>. The governor is a spinning wheel with
flyweights. The safeties are steel wedges. The machine brake is a spring
held open by an electromagnet, so a power cut <em>applies</em> the brake.</p>
<p>Electrically, all the critical switches (door locks, the governor switch, pit
stop switches, final limit switches at the top and bottom of the shaft) sit in
one long series loop called the <strong>safety chain</strong>. Open any one of them and power
to the motor and brake drops. The software can watch the chain, and newer
electronic safety boards are certified to strict functional-safety levels, but
it can&rsquo;t wish a broken chain closed.</p>
<h2 id="the-door-problem-and-ucmp">The door problem and UCMP</h2>
<p>For decades the scariest accidents weren&rsquo;t falls. They were cars that <strong>moved
with the doors open</strong>, from a brake that slipped or a control fault, catching
someone half in and half out. Codes on both sides of the Atlantic now require
<strong>unintended car movement protection</strong>. ASME A17.1 in North America and EN 81-20
in Europe both call for detecting that movement and stopping the car within a
short distance, about 1.2 meters (48 inches) in the North American rule, using
a brake that doesn&rsquo;t depend on the thing that just failed.</p>
<p>Many older traction elevators are being retrofitted with <strong>rope grippers</strong> or
dual brakes to meet this, on deadlines set by local code.</p>
<h2 id="the-one-famous-fall">The one famous fall</h2>
<p>Real free falls are so rare that the most famous one needed a B-25 bomber. On
July 28, 1945, an Army plane lost in fog hit the Empire State Building. Debris
cut the cables on the elevator that operator <strong>Betty Lou Oliver</strong> was in, and it
fell about 75 stories. She survived, and Guinness still lists it as the longest
survived elevator fall. Accounts credit the pile of coiled cable in the pit and
the air cushion in the shaft for slowing the car.</p>
<div class="el-callout"><b>If you're ever stuck</b><p>Stay in the car. It's the safest place in the building. Press the call or alarm button, wait for the voice, and don't try to pry the doors. Cars aren't airtight, so you won't run out of air. Most stuck-elevator injuries happen when people climb out.</p></div>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://elevatorworld.com/article/elisha-otis-at-crystal-palace-part-2/">Elevator World: Elisha Otis at the Crystal Palace, Part 2</a></li>
<li><a href="https://www.invent.org/inductees/elisha-graves-otis">National Inventors Hall of Fame: Elisha Graves Otis</a></li>
<li><a href="https://www.firgelliauto.com/blogs/mechanisms/elevator-safety-gear">FIRGELLI: how elevator safety gear works</a></li>
<li><a href="https://www.hydrasafebrakellc.com/post/understanding-the-code-update-on-unintended-car-motion">HydraSafe: understanding the code update on unintended car motion</a></li>
<li><a href="https://elevatorworld.com/article/the-importance-of-checking-the-compatibility-of-all-systems-and-subsystems-in-ucmp/">Elevator World: compatibility of systems and subsystems in UCMP</a></li>
<li><a href="https://www.asme.org/getmedia/7e091034-92c0-4d43-a2a0-3978a2fdb4d6/a17-1_2022_toc.pdf">ASME A17.1-2022 table of contents</a></li>
<li><a href="https://people.com/plane-crashed-into-empire-state-building-sending-woman-into-record-free-fall-11773102">People: Betty Lou Oliver still holds the record for the longest elevator fall survived</a></li>
<li><a href="https://www.brousselevators.com/post/what-to-do-stuck-in-elevator">Brouss Elevators: what to do if you're stuck (elevators aren't airtight)</a></li>
</ol>
]]></content:encoded></item><item><title>It's a Seesaw on a Rope</title><link>https://errorzap.com/elevators/how-it-works/</link><pubDate>Sat, 26 Sep 2026 17:01:00 -0600</pubDate><guid>https://errorzap.com/elevators/how-it-works/</guid><description>Most elevators aren&amp;#39;t lifting you so much as balancing you. How traction elevators, counterweights, hydraulic jacks, and machine-room-less designs actually move a car.</description><content:encoded><![CDATA[<div class="ez-dossier-lede"><span>ELEVATORS · FLOOR 01 · THE MACHINE</span><p>The motor in a traction elevator isn't hauling your whole weight up the building. It's tipping a balance that's already almost level.</p></div>
<h2 id="the-short-version">The short version</h2>
<ul>
<li>Most mid- and high-rise elevators are <strong>traction</strong> elevators: steel ropes or flat belts run over a grooved wheel (the <strong>sheave</strong>), with the car on one side and a <strong>counterweight</strong> on the other.</li>
<li>The counterweight usually weighs about as much as the empty car <strong>plus 40 to 50% of its rated load</strong>. So the motor only moves the <em>difference</em>.</li>
<li>Short buildings often use <strong>hydraulic</strong> elevators instead: a pump pushes oil into a cylinder and a piston shoves the car up. Cheap, simple, slow.</li>
<li>Since 1996, many traction elevators have had <strong>no machine room at all</strong>. A flat motor bolted inside the shaft does the work.</li>
<li>Fun consequence of the seesaw: an <strong>empty car going up</strong> is actually the light side winning. The motor has to hold it back, and a modern drive turns that braking into electricity.</li>
</ul>
<figure class="el-fig el-shaft">
  <figcaption><b>FIG. 1</b>The seesaw in the shaft: the car and the counterweight hang from the same ropes, so the motor only lifts the difference.</figcaption>
  <svg viewBox="110 6 300 404" role="img" aria-labelledby="el-shaft-t">
    <title id="el-shaft-t">Animated traction elevator: a motor turns a grooved sheave at the top of the shaft; ropes run down to the car on one side and a counterweight on the other, which move in opposite directions.</title>
    <rect x="110" y="6" width="300" height="404" class="bg"/>
    <rect x="120" y="14" width="280" height="64" rx="6" class="room"/>
    <text x="132" y="34" class="lbl">MACHINE</text>
    <g class="el-sheave-spin" style="transform-origin:260px 56px">
      <circle cx="260" cy="56" r="20" class="sheave"/>
      <path d="M260 38v36M242 56h36M247 43l26 26M273 43l-26 26" class="spoke"/>
    </g>
    <rect x="300" y="18" width="72" height="22" rx="4" class="motor"/>
    <text x="310" y="34" class="lbl">MOTOR</text>
    <path d="M300 29H268" class="rope"/>
    <rect x="150" y="80" width="220" height="320" class="shaft"/>
    <line x1="176" y1="80" x2="176" y2="400" class="rail"/>
    <line x1="274" y1="80" x2="274" y2="400" class="rail"/>
    <line x1="310" y1="80" x2="310" y2="400" class="rail"/>
    <line x1="346" y1="80" x2="346" y2="400" class="rail"/>
    <clipPath id="el-shaft-clip"><rect x="150" y="56" width="220" height="344"/></clipPath>
    <line x1="280" y1="56" x2="328" y2="56" class="rope"/>
    <g clip-path="url(#el-shaft-clip)">
      <g class="el-car-move">
        <line x1="240" y1="-140" x2="240" y2="180" class="rope"/>
        <rect x="182" y="180" width="86" height="92" rx="4" class="car"/>
        <rect x="196" y="194" width="58" height="62" rx="2" class="door"/>
        <line x1="225" y1="194" x2="225" y2="256" class="doorline"/>
        <text x="207" y="231" class="lbl">CAR</text>
      </g>
      <g class="el-cwt-move">
        <line x1="328" y1="-140" x2="328" y2="200" class="rope"/>
        <rect x="314" y="200" width="28" height="80" rx="2" class="cwt"/>
        <text x="333" y="206" class="lbl vert" transform="rotate(90 333 206)">WEIGHT</text>
      </g>
    </g>
    <rect x="196" y="392" width="22" height="8" class="buffer"/><rect x="316" y="392" width="22" height="8" class="buffer"/>
  </svg>
  <ul class="el-fig-notes">
    <li><b>Counterweight</b> ≈ the empty car plus 40–50% of its rated load.</li>
    <li><b>Traction</b> is friction: the ropes just drape over the grooved sheave.</li>
    <li><b>Pit buffers</b> (red, at the bottom) catch anything that overruns.</li>
  </ul>
</figure>

<h2 id="traction-friction-does-the-lifting">Traction: friction does the lifting</h2>
<p>Nothing is tied to the motor. The ropes just drape over the sheave, and friction
in the grooves grips them. Turn the sheave one way and the car rises while the
counterweight falls. Turn it the other way and they swap. That&rsquo;s where the name
&ldquo;traction&rdquo; comes from.</p>
<p>The counterweight is the whole trick. With it sized at roughly an empty car plus
40 to 50% of capacity, a half-full car is almost perfectly balanced, and the
motor barely works. The worst cases are the extremes. A packed car going up
means the motor lifts the difference. An empty car going up means the
counterweight is <em>heavier</em> and wants to fall, so the motor acts as a brake.</p>
<p>In old buildings that braking energy went into big resistor banks and became
heat, which is one reason old machine rooms were so hot. Modern <strong>regenerative
drives</strong> push it back into the building&rsquo;s electrical system instead.</p>
<p>Tall buildings add two more details. <strong>Roping ratios</strong> like 2:1 loop the rope
through pulleys on the car, trading speed for pulling force, like a block and
tackle. And <strong>compensation chains</strong> hang under the car and counterweight so the
weight of the ropes themselves doesn&rsquo;t pile up on one side as the car travels.</p>
<h2 id="hydraulic-the-car-on-a-stick">Hydraulic: the car on a stick</h2>
<p>For two to six stops, a lot of buildings skip all that and use a <strong>hydraulic</strong>
elevator. A pump pushes oil into a cylinder, a piston (the &ldquo;jack&rdquo;) pushes the
car up, and a valve lets the oil back out to lower it. Gravity does the downhill
work. Classic installs bury the cylinder in a hole under the pit. &ldquo;Holeless&rdquo;
versions stand the jacks up beside the car.</p>
<p>They&rsquo;re cheap and simple, but slow (roughly walking speed to jogging speed), and
the pump motor works hard on every up-trip, since there&rsquo;s no counterweight
helping.</p>
<h2 id="geared-gearless-and-the-machine-room-that-disappeared">Geared, gearless, and the machine room that disappeared</h2>
<p>Older traction elevators used a <strong>geared</strong> machine: a fast motor turning a worm
gear that turned the sheave. Rugged, but it wears, leaks oil, and loses energy
in the gearbox.</p>
<p><strong>Gearless</strong> machines bolt the sheave straight to a big slow motor. Smoother,
faster, and the standard for high-rise work.</p>
<p>Then in 1996 KONE shipped the <strong>MonoSpace</strong>, the first machine-room-less (MRL)
elevator, powered by a flat, disc-shaped gearless motor called the <strong>EcoDisc</strong>.
KONE says the idea came to one of its engineers, Harri Hakala, <em>while jogging</em>.
The motor got thin enough to mount on the guide rails inside the shaft, and the
penthouse full of iron went away. Every major maker followed.</p>
<p>Otis went a different direction with <strong>Gen2</strong>: instead of round steel ropes, it
uses flat <strong>polyurethane-coated steel belts</strong>. They bend around a much smaller
sheave, so the machine can shrink too, and there&rsquo;s no metal-on-metal contact to
grease.</p>
<div class="el-callout"><b>Seen in the wild</b><p>If an elevator has no machine room door on the roof, there's a good chance the motor is sitting at the top of the shaft and the controller is in a locked closet next to the top-floor landing. That little closet is the whole brain. Floor 3 opens it up.</p></div>
<h2 id="sources">Sources</h2>
<ol class="ez-sources">
<li><a href="https://en.wikipedia.org/wiki/Elevator">Wikipedia: Elevator (traction design, counterweight sizing, hydraulic types)</a></li>
<li><a href="https://www.kone.com/en/news-and-insights/stories/making-room-for-more-since-1996.aspx">KONE: Making room for more since 1996 (MonoSpace, EcoDisc, the jogging idea)</a></li>
<li><a href="https://www.otis.com/en/us/products-services/products/gen2-premier">Otis: Gen2 Premier (coated steel belts)</a></li>
<li><a href="https://www.tkelevator.com/us-en/company/insights/traction-conventional-vs-traction-mrl.html">TK Elevator: conventional traction vs. machine-room-less</a></li>
<li><a href="https://www.kebamerica.com/blog/regenerative-drives-for-elevator-applications/">KEB America: regenerative drives for elevator applications</a></li>
</ol>
]]></content:encoded></item></channel></rss>