← Study Guides/Elevator Safety Systems

🛡️Elevator Systems · 6 min read

Elevator Safety Systems

Every safety device, when it activates, and why it's fail-safe

Elevator safety is a layered system — multiple independent devices each designed to prevent a specific failure mode. The EIAT tests whether you know what each device does, when it activates, and the cause-and-effect chain that connects them. Understanding the fail-safe design principle is the key to answering these questions correctly.

The Fail-Safe Principle

All critical elevator safety devices are designed to be fail-safe: the safe condition is the default state. Power is removed → device activates. Spring is released → device engages. This means a power failure or component failure automatically results in the safest possible outcome, not a dangerous one.

The brake is the most visible example: springs constantly push the brake ON. Power holds it OFF. Lose power = brake automatically applies. This design choice is deliberate and appears in almost every elevator safety component.

Governor & Car Safety (Overspeed Protection)

The governor is mounted at the top of the hoistway (or machine room) and has a sheave. A continuous governor rope runs from the governor sheave down to the car safety device, around a tension sheave in the pit, and back up to the governor — a closed loop that always moves with the car.

Inside the governor, flyweights are connected to the sheave. As the car accelerates, the governor rope spins the sheave faster, and centrifugal force pushes the flyweights outward. At approximately 115–120% of rated speed (the tripping speed), the flyweights trigger a latch.

The latch grabs the governor rope, stopping it. Now the car continues moving downward while the governor rope is stationary — this relative movement pulls the car safety's activating lever.

The car safety clamps its jaws onto the guide rails, bringing the car to a stop. Two types: instantaneous safety (abrupt stop, used on elevators below ~150 FPM), and progressive safety (gradual stop with controlled deceleration, required above ~150 FPM).

After any safety activation, a mechanic must manually reset the safety device and the governor before the elevator can return to service.

The Brake

Located on the machine, the brake is an electromagnetic friction device. Springs always push the brake shoes against a brake drum or disc — the brake is ON at rest.

When the motor controller sends power to run the elevator, it simultaneously energizes the brake coil. The magnetic field overcomes the spring force and lifts the brake shoes — now the motor can turn.

Power loss at any point: brake coil de-energizes → springs apply → car stops. This is also how the car holds position at a floor without running the motor continuously.

Buffers

Buffers sit in the pit, one directly below the car's lowest travel point and one below the counterweight's lowest travel point.

Spring buffers: compressed by the car or CWT, storing energy like a spring. For lower-speed elevators (under 200 FPM). Energy is returned as the spring re-extends.

Oil buffers: a hydraulic cylinder with a metered orifice. The car pushes the plunger down, and oil is forced through the orifice at a controlled rate, absorbing energy gradually. Required above 200 FPM. Must be fully extended before the elevator can return to service.

Door Interlocks

Every hoistway door — at every floor — has a mechanical interlock (physical lock) and an electrical contact wired in series in the safety circuit.

Series wiring is critical: all contacts must be closed for the circuit to be complete. One open door anywhere in the building opens the circuit and the elevator cannot move.

The car doors also have contacts in this circuit. The order: car doors must close first, then they mechanically engage (via a vane/clutch mechanism) the hoistway doors and pull them closed, closing the hoistway interlock last.

Terminal & Final Limit Switches

Terminal stopping switches are mounted in the hoistway near the top and bottom extremes of normal travel. If the controller fails to stop the car at a terminal landing, these switches cut power to the motor and brake, stopping the car before it hits the buffer.

Final limit switches are a second, independent set of switches beyond the terminal switches — a backup to the backup.

Pit stop switch: a red mushroom-head switch in the pit. When pressed by a mechanic working in the pit, it disables the elevator entirely. Car top inspection switch: same function for mechanics riding on top of the car.

Key Takeaways

✓Governor → grabs rope → rope activates car safety → safety clamps guide rails. Three steps, in order.
✓The brake is spring-applied, electrically released. Power off = brake on. Always.
✓Door interlocks are in series — ONE open door stops the entire elevator.
✓Spring buffers: under 200 FPM. Oil buffers: required above 200 FPM.
✓Fail-safe means the safe state is the default. Ask: "what happens if power fails?" — that's the safe state.
✓After a safety activation, the elevator must be manually reset by a mechanic.

Key Terms

Governor

Centrifugal overspeed detector; grabs the governor rope to trigger the car safety.

Governor rope

Continuous rope loop between governor and car safety device.

Tripping speed

Speed at which the governor activates (~115–120% of rated speed).

Instantaneous safety

Abrupt-stopping safety device for slow elevators.

Progressive safety

Gradual-stopping safety for higher-speed elevators.

Spring buffer

Energy-absorbing spring in the pit for lower-speed elevators.

Oil buffer

Hydraulic energy absorber in the pit; required above 200 FPM.

Door interlock

Mechanical lock + electrical contact on each hoistway door.

Terminal stopping switch

Limit switch that cuts motor power if the car overruns the top or bottom landing.

Fail-safe

Design where loss of power or component failure results in the safe state.

Pit stop switch

Emergency stop switch in the pit for mechanic protection.

Inspection mode

Slow-speed (max 150 FPM) maintenance mode for technicians.

Ready to test what you just read?

Head back to your study workspace to take a timed practice quiz.

Practice Quizzes →

← Counterweights & Load Balancing Basic Electrical Math & Circuit Theory →