Elevating Safety: The Critical Role of FMEA in Elevator and Escalator Engineering

Elevators and escalators form the circulatory system of modern buildings, moving millions of people daily through offices, hotels, airports, and transit hubs. With such high usage, any malfunction can have serious consequences—ranging from passenger entrapment and injury to catastrophic failures. To manage this risk, engineers have long relied on Failure Mode and Effects Analysis (FMEA), a structured, proactive method that identifies potential failure points before they cause harm. This article explores how FMEA is applied to enhance the safety, reliability, and regulatory compliance of vertical transportation systems.

What Is FMEA? A Foundational Overview

Originally developed by the U.S. military in the 1950s and later adopted by NASA and the automotive industry, FMEA is a systematic technique for analyzing each component of a system to determine how it might fail, what the consequences would be, and how to prevent or mitigate those failures. The core process involves five steps:

  1. Identify each component or function – Break the system into its smallest functional units.
  2. List potential failure modes – Ask “What could go wrong?” for each part.
  3. Determine effects and severity – Rate the consequence of the failure (e.g., minor inconvenience vs. fatal injury).
  4. Identify causes and occurrence likelihood – Estimate how often a failure might happen.
  5. Evaluate detection controls – Assess whether existing safeguards (sensors, alarms, inspections) would catch the failure before it hurts anyone.

These factors are combined into a Risk Priority Number (RPN), which guides teams to act first on the highest-risk items. The output is a living document that drives design changes, maintenance schedules, and part selection.

Applying FMEA to Elevator Systems

Elevators are complex assemblies of mechanical, electrical, and electronic subsystems. A comprehensive FMEA examines every layer, from the hoistway to the car interior. Below are key subsystems and typical failure modes engineers evaluate.

1. Braking Systems

The elevator brake engages when the car stops at a floor or during an emergency overspeed condition. A common failure mode is brake pad wear leading to reduced stopping force. If undetected, this could cause door-opening zone creep or, in extreme cases, uncontrolled car movement. FMEA helps engineers specify dual-shoe brakes with wear sensors that trigger an alarm before performance degrades. Another failure mode—brake coil burnout—is addressed by using redundant coils and thermal overload protection.

2. Governor and Safety Gear

The overspeed governor is a mechanical device that activates safeties if the car exceeds a speed threshold. During FMEA, engineers consider failure modes like governor rope breakage or governor sheave jam. Each has a severity rating of 9 or 10 (near-catastrophic). To reduce the RPN, designs include dual governors for high-rise systems and regular test cycles. The safety gear itself—cam-style or wedge—must be analyzed for improper gap adjustments or contamination by debris.

3. Door Systems

Door malfunctions are the most frequent cause of elevator service calls. FMEA covers power-operated doors, clutches, and sensor edges. A critical failure is door contact bridge failure, which can allow the elevator to move with doors open. Mitigation includes redundant contact circuits, door zone locking, and weekly inspection protocols. Similarly, photocell blockage (by dirt or misalignment) is addressed by self-checking diagnostics and automatic recalibration routines.

4. Hoist Ropes and Compensation Means

Rope degradation due to wear, corrosion, or broken wires is a well-known risk. FMEA assigns a high occurrence rating to this failure mode in older installations. Controls include periodic magnetic flux testing and mandatory rope replacement based on fatigue cycles. Modern traction elevators also use belted steel cords; FMEA for these includes delamination or elongation failure. Detection is provided by encoder feedback and tension monitoring systems.

5. Controller and Software Logic

Modern elevators rely heavily on programmable logic controllers and microprocessors. FMEA in this domain explores software faults, such as incorrect floor-leveling algorithms or failure to respond to fire recall signals. Engineers use techniques like FMEDA (Failure Modes, Effects, and Diagnostic Analysis) to quantify the safety integrity level. Redundant controllers with dissimilar software—a form of diverse redundancy—lower the occurrence rating.

FMEA for Escalators: Unique Challenges

Escalators present different failure modes because of their continuous, moving nature. Key areas of focus include:

1. Step and Track System

Step failure (broken tread, missing step, or step-leveling deviation) can cause passenger trips or falls. FMEA identifies step roller wear as a high-occurrence, moderate-severity mode. Detection is achieved via step sag sensors and gap monitoring devices. The track system itself must be analyzed for misalignment; even a 2 mm deviation can accelerate bearing failure.

2. Handrail Drive and Speed Synchronization

A handrail that moves slower than the steps creates a drag hazard; one that moves faster can push passengers forward. FMEA lists handrail belt slip or tension loss as failure modes. Mitigation includes handrail speed sensors that trigger emergency stop if deviation exceeds 5%. The drive system (chain or belt) is also scrutinized for breakage—detected by proximity switches on tension arms.

3. Comb and Skirt Panels

The comb at the entry/exit point must remain in perfect alignment. A broken comb tooth can entangle clothing or footwear. FMEA captures this as a severity 7 event. Detection is by comb impact switches; some modern units use electric comb sensors that initiate soft stop if deflection occurs. Skirt panel insertion (between moving steps and stationary side panels) is another critical failure mode addressed by skirt brushes and contactless safety edges.

4. Emergency Stop and Braking Systems

Escalator brakes are electromagnetic and must stop the unit within a defined distance under full load. FMEA explores brake lining wear, air gap drift, and control circuit failure. Periodic load testing is a recommended control, and redundant brake systems are becoming standard in new installations.

Integrating FMEA with International Safety Standards

FMEA is not a standalone exercise; it aligns directly with regulatory frameworks. The EN 81 series (European elevator standard) and ASME A17.1 (American Standard for Elevators and Escalators) require a documented risk assessment for new designs. FMEA provides the structured evidence that engineers have systematically considered hazards. For example, EN 81-20/50 mandates a Safety Integrity Level (SIL) analysis for programmable electronics. FMEA feeds into SIL determination by quantifying failure rates and diagnostic coverage. Compliance also hinges on regular updates—when a component is substituted, the FMEA must be revised to ensure the new part does not introduce unknown risks.

Standard bodies such as the ISO 9000 family and ANSI also reference FMEA as a core quality tool. For elevator-specific guidance, the Elevator Safety Handbook and publications from the National Elevator Industry Inc. offer practical FMEA templates.

Tangible Benefits Beyond Safety

While accident prevention is the primary goal, FMEA delivers measurable operational and financial advantages:

  • Reduced Unplanned Downtime: By predicting component fatigue, maintenance can be scheduled during off-hours, preventing the disruption of building traffic. In a 40-story office tower, a single elevator outage can cost $2,500–$5,000 per hour in lost productivity.
  • Lower Lifecycle Costs: FMEA-driven design choices favor more robust components, such as stainless steel door locks vs. brass, which last three times longer in humid environments.
  • Insurance Premium Reductions: Insurance providers often offer reduced rates for buildings with documented FMEA programs, recognizing the lower risk profile.
  • User Trust and Brand Reputation: Buildings with frequent lift failures develop a negative reputation. Proactive FMEA helps maintain high availability and passenger confidence.

Implementing FMEA: Practical Steps for Engineering Teams

To get real value from FMEA, organizations must embed it in their engineering lifecycle. Here is a proven approach:

  1. Assemble a Cross-Functional Team: Include design engineers, field technicians, maintenance supervisors, and a safety officer. The field perspective is invaluable—they see failures that never make it into design documents.
  2. Define the Scope: Begin with a new product or a critical subsystem (e.g., elevator door system). Use a boundary diagram to show interfaces with other subsystems.
  3. Use a Standard Template: Adopt the AIAG-VDA format, which provides columns for function, failure mode, effect, cause, current controls, RPN, and recommended actions.
  4. Iterate and Update: FMEA is not a one-time document. After each product revision or field incident, revisit the relevant failure modes. Some companies link their FMEA to maintenance logs so root causes are continuously fed back.
  5. Train the Team: Provide hands-on workshops using real elevator examples. For instance, a common training scenario is a “door zone failure” where the car moves with doors open—the team walks through the FMEA to see where controls fail.

Software tools like Isograph or Reliasoft can streamline the process, but even a spreadsheet-based FMEA is effective for small teams.

Hypothetical Case Study: Reducing Brake Failure Risk

Consider a mid-sized elevator manufacturer evaluating a new brake design. The initial FMEA identifies a failure mode: brake shoe bonding failure—the friction material delaminates from the shoe, leaving no braking force. Severity is rated 9 (potential of free fall), occurrence is 3 (bonding quality has had past issues in high-temperature tests), and detection is rated 4 (current production tests catch only gross defects). The RPN = 9 × 3 × 4 = 108, above the company’s threshold of 70.

Recommended actions include: (a) specifying high-temperature adhesive with 30% greater peel strength, (b) adding a 100% ultrasonic bond inspection to production, and (c) installing a brake wear sensor that alerts the controller if braking distance increases by more than 5%. After implementation, occurrence drops to 1 and detection to 1 (new inspection catches every defect, and sensors detect degradation early). New RPN = 9 × 1 × 1 = 9. The brake design is approved, and field data over two years shows zero failures.

Common Pitfalls and How to Avoid Them

FMEA is a high-value tool, but only if applied correctly. Watch out for these errors:

  • Overly High Severity Ratings: Teams sometimes inflate severity because they imagine worst-case scenarios without considering existing safeguards. Use clear definitions (e.g., severity 9–10 only for failures that could cause loss of life).
  • Using FMEA as a Paperwork Exercise: If the team views it as a bureaucratic checkbox, they will not invest mental effort. Leaders must emphasize that FMEA directly informs design decisions and budget allocations.
  • Incomplete Team Representation: Component engineers may miss operational realities. Always include a service technician who can describe failures they have seen in the field.
  • Ignoring Human Factors: Some failures stem from installation errors or maintenance mistakes. FMEA should include “human error” as a cause, with controls like torque markings and step-by-step wiring diagrams.

The Future of FMEA in Vertical Transportation

As elevators and escalators become smarter with IoT sensors and predictive analytics, FMEA is evolving. Engineers now combine FMEA with Fault Tree Analysis (FTA) for complex systems. Digital twins allow virtual testing of failure modes without physical prototypes. However, the core principle remains unchanged: anticipating failure before it occurs. The buildings of tomorrow—with super-tall skyscrapers and high-speed double-deck elevators—will rely even more heavily on FMEA to ensure that their millions of daily journeys are safe and reliable.

For engineers seeking a deeper dive, resources such as the FMEA Information Center and SAE ARP5580 provide detailed application guidance. The next time you step into an elevator, you can trust that an FMEA has already considered every conceivable way that ride could differ from the smooth, safe experience you expect.

“FMEA turns reactive maintenance into proactive engineering. In elevators, where a single failure can have catastrophic results, that forward-looking mindset is not optional—it is essential.”