← Back
Home › Systems › Energy, industry and public infrastructure

elevator-control

elevator and escalator group control and safety: destination-dispatch optimisation, drive motion profiles, EN 81 safety chain, remote monitoring

KONE, Otis, Schindler PORT, TK Elevator

SystemTechniques · 32Primitives · 90 elevator-control Deterministic simulation testingdistributed · medium: Run the whole system in one thread under a seeded scheduler with simulated network, disk and clock, so every failure replays from its seed.›Primary-backup replicationdistributed · medium: One node orders all writes and ships them to standbys; the acknowledgement rule (none, one, all) sets what a crash loses, and an external arbiter decides who takes over.›Safety-critical coding standardsembedded · medium: Which rule sets (MISRA C, CERT C, JPL Power of Ten, Rust lint subsets) apply when software must not fail, what they forbid, and how to enforce them in CI.›Safety monitor architectureembedded · medium: Independent doer/checker safety monitor that forces a safe state when the main channel misbehavesAssignment problem (Hungarian / Jon…graphs · medium: Optimal one-to-one matching of rows to columns in O(n³) by growing a matching along shortest augmenting paths over dual potentials.›Discrete event simulationnumerics · medium: Simulation driven by a time-ordered event queue with deterministic, reproducible replayGenetic algorithmsoptimization · medium: Population search with selection, crossover and mutation for black-box optimizationRedundancy votingembedded · low: N-modular redundancy and MooN voting (2oo3, TMR) with discrepancy detectionWatchdog timerembedded · low: A hardware down-counter that resets the chip unless software proves, in time and in a plausible pattern, that it is still healthy.›Fixed-rate control loopembedded · low: Run a controller at an exact period using absolute deadlines and a fixed dt, so jitter never accumulates and the math stays valid.›PID controllerrobotics · low: Drive a measured value to a setpoint with three terms on the error: proportional, integral, derivative. The default feedback loop for motors, heaters, drones and gimbals.›Hdr histogramdata-structures · low: Log-linear bucketed histograms with bounded relative error for latency percentilesReal time fieldbusembedded · low: Deterministic cyclic fieldbuses (EtherCAT, PROFINET IRT): on-the-fly frames, distributed clocksTime triggered schedulingembedded · low: Static cyclic schedules where every task and message has a precomputed time slotStatechartsgraphics · low: State machines with nesting, parallel regions, history and entry/exit actions, so UI and animation logic stays linear in size instead of exploding.›Process supervisionhardware-os · low: A parent process starts services, reaps their exits and restarts them under a delay and burst-limit policy, then stops them with SIGTERM before SIGKILL.›Mqtt protocolnetworking · low: MQTT pub/sub: topics, QoS 0/1/2, retained messages, sessions and keepaliveVelocity motion profilesrobotics · low: Trapezoidal and S-curve (jerk-limited) velocity profiles for point-to-point movesMutual TLSsecurity · low: TLS where the client also proves a certificate key, so every connection carries a verified, rotatable machine identity.›Graceful drainingsystems · low: On a termination signal, stop taking new work, finish in-flight work until a deadline, tell clients to reconnect elsewhere, then exit; clients resume from a token.›Hierarchical state machinesystems · low: Nest states so a substate inherits its parent's reactions and only overrides what differs, with ordered entry and exit actions along the path.›Cooperative schedulingconcurrency · low: Green threads/coroutines yielding at await points on a user-space schedulerRecord replaydistributed · low: Record every nondeterministic input (time, randomness, I/O, model and tool outputs, per-tick player input) and re-execute deterministically for debugging, replays and state rebuild+ 25 more techniques+ 74 more primitives

Similar systems

Share the most building blocks with this one.