How Elevators Work and Their Safety Systems

01 Two Thousand Years of Vertical Transport

The elevator is older than most people realize. The Roman architect Vitruvius recorded that Archimedes built a primitive hoist around 236 BC — a platform raised by ropes wound around a drum. The Colosseum, completed in 80 AD, had roughly 25 such elevators, each powered by up to eight men and capable of lifting 600 pounds of animals to the arena floor. For nearly two millennia, the fundamental mechanism barely changed: a cab suspended on hemp rope, pulled by human, animal, or later steam power, with no protection if the rope broke.

The arrival of the Industrial Revolution in the mid-19th century transformed the elevator from a novelty into a necessity. Coal mines and factories needed reliable vertical transport for heavy materials. William Armstrong invented the hydraulic crane in 1846, using Pascal's law — the principle that pressure applied to a confined fluid is transmitted equally in all directions — to multiply force and raise loads with water pressure. Henry Waterman invented the standing rope control in 1850. But the breakthrough that made passenger elevators viable came in 1852, when Elisha Otis invented the safety elevator, preventing the cab from falling if the cable broke. His dramatic demonstration at the 1854 New York exposition — standing in an elevated cab while an axman cut the only supporting rope — became the founding myth of an entire industry. The first passenger elevator was installed at 488 Broadway on March 23, 1857.

02 Traction vs. Hydraulic: The Two Dominant Systems

Modern elevators fall into two broad families: traction and hydraulic. Each uses a fundamentally different physical principle to move the cab, and each has distinct advantages, limitations, and safety profiles.

Traction elevators are the workhorses of mid-rise and high-rise buildings. An electric motor turns a sheave — a grooved pulley — that grips steel ropes. One end of the ropes attaches to the elevator cab, the other to a counterweight. The counterweight typically equals the weight of the cab plus 40–50% of the rated load, so the motor only needs to lift the net difference. This is why a traction elevator motor does not need to be powerful enough to lift the full weight of a loaded cab — it only overcomes the imbalance. The sheave's grooves create friction (traction) between the rope and the pulley, preventing slippage. Traction systems serve buildings from 5 to 100+ stories and can achieve speeds exceeding 10 meters per second — the elevators in the Burj Khalifa travel at 10 m/s, while Shanghai Tower's elevators reach 20.5 m/s.

Hydraulic elevators use a different principle entirely. A hydraulic pump pushes fluid — usually oil — into a cylinder, driving a piston upward. The piston directly lifts the cab, either from below or through a roped system where the cylinder is in a side machine room. These systems are simpler, cheaper to install, and ideal for low-rise buildings (typically 2–6 stories). They cannot achieve high speeds — typically 0.15 to 0.5 m/s — but they are extremely reliable and require less overhead space. The tradeoff: hydraulic systems use more energy on the upward trip (the pump must pressurize fluid to lift the full cab weight), and fluid handling poses environmental concerns.

03 The Safety Stack: Redundancy Upon Redundancy

Elevators are among the most heavily regulated and redundantly safeguarded machines in everyday use. The modern safety stack operates at multiple levels — if any single system fails, another is designed to catch the cab before catastrophe. This layered philosophy is why elevators carry approximately 18 billion passengers per year in the U.S. alone, with roughly 27 fatal incidents — a rate of about 0.00000015% per trip.

The first layer is the steel rope system itself. Traction elevators use multiple steel ropes (typically 4–8), each independently capable of holding the full rated load. A single rope can support 12 times the elevator's maximum weight. The ropes are inspected regularly and replaced long before they reach their service limit. Redundancy is built into the very physics: the sheave grips the ropes through friction, so even if the motor fails, the cab cannot free-fall because the rope-sheave friction holds it in place.

The second layer is the overspeed governor, a mechanical device invented by Elisha Otis himself. A centrifugal governor spins as the elevator moves. If the cab exceeds a preset speed — typically 15–25% above rated speed — the governor's flyweights swing outward, tripping a mechanical switch that cuts power to the motor and simultaneously tensions a rope that activates the safety brakes. This is a purely mechanical, gravity-independent system. It requires no electricity, no software, and no human intervention to operate.

The third layer is the emergency brake, or "safety gear." When the overspeed governor trips, it pulls a wedge-shaped jaw against the elevator guide rails. The harder the cab pulls downward, the tighter the wedge grips — converting kinetic energy into friction and heat. Modern progressive safety brakes decelerate the cab smoothly rather than abruptly, applying controlled force to bring the cab to a stop within a few meters. This prevents the jarring deceleration that could itself injure passengers.

04 Buffers, Counterweights, and the Physics of Controlled Descent

Even if every brake fails — and in practice, they never all fail — one final mechanical safeguard remains: buffers installed at the bottom of the elevator shaft. These energy-absorbing devices sit beneath the lowest possible position of the cab and counterweight. They come in several types: spring buffers for low-speed elevators (up to 1 m/s), which compress to absorb kinetic energy; and hydraulic oil buffers for faster elevators, which force oil through small orifices to create progressive resistance, decelerating the cab at a survivable rate.

The counterweight itself is a safety feature. By balancing the cab's weight plus 40–50% of the rated load, the counterweight ensures that an ascending empty cab and a descending full cab both have similar energy profiles. This means the motor always works against a predictable load, and in a free-fall scenario, the counterweight's inertia naturally opposes the cab's downward motion — the heavier the cab, the more the counterweight resists. The system is self-limiting: the maximum uncontrolled speed of a traction elevator is bounded by the equilibrium between gravity and the sheave-rope friction, typically around 4–6 m/s even with total brake failure.

05 Door Systems and the Most Common Accident Class

While catastrophic cab falls are vanishingly rare, the majority of elevator accidents involve doors. Modern elevator doors are governed by multiple interlocking systems: the cab cannot move unless all doors are fully closed and locked, and the doors cannot open unless the cab is properly aligned with the landing. This interlock is enforced by both mechanical and electrical means — the door must physically lock, and a separate electrical circuit must confirm the lock.

Door sensors detect obstructions: infrared curtains, mechanical bumpers, and touch-sensitive edges. If any sensor detects an obstruction during closing, the doors reopen automatically. Modern infrared door curtains create a virtual screen across the opening, detecting a passenger's hand, a leash, or even a small pet at multiple heights without physical contact. The ASME A17.1 code — the governing standard for elevator safety in North America — requires at least two independent means of detecting obstructions and reopening doors.

The most common serious accident type is "landing misalignment" — when a passenger steps into what they believe is the elevator but is actually the shaft, because the cab is not present or not level with the floor. This is prevented by the door interlock system and by the requirement for illuminated level indicators, but it remains the dominant risk category, especially for elderly passengers or those with mobility impairments.

06 Smart Elevators and the AI Coordination Layer

The latest frontier in elevator technology is not mechanical but computational. Modern "smart elevator" systems use destination dispatch algorithms — passengers select their floor on a keypad before boarding, and an AI system groups passengers by destination, assigning each to the elevator that minimizes total travel time across all passengers in the building. This can reduce waiting times by 30–50% and energy consumption by similar margins. The system optimizes not just individual trips but the collective flow of hundreds or thousands of passengers through a building simultaneously.

Predictive maintenance is the other AI-driven frontier. Sensors on every critical component — ropes, sheaves, bearings, brakes, motors — stream vibration, temperature, and acoustic data to machine learning models that can detect wear patterns weeks or months before failure. Instead of inspecting ropes on a calendar schedule, the system flags degradation when the vibration signature begins to change. This shifts maintenance from reactive to predictive, reducing downtime and catching problems earlier than visual inspection alone.

The Burj Khalifa, the world's tallest building, uses 57 elevators with destination dispatch and smart coordination. The Shanghai Tower uses elevators that travel at 20.5 m/s — fast enough that engineers had to design specially pressurized cabs to prevent the ear discomfort passengers would experience from rapid pressure changes. These systems represent the convergence of mechanical engineering, materials science, control theory, and machine learning into a single, coordinated vertical transportation network.

07 The Statistics of Safety

The safety record of modern elevators is extraordinary by any standard of comparison. In the United States, elevators make approximately 18 billion passenger trips per year. According to data from the U.S. Bureau of Labor Statistics and the Consumer Product Safety Commission, annual elevator-related fatalities have declined steadily — from approximately 27 in 2001 to about 11 in recent years. The fatality rate per trip is roughly one death per 1.5 billion trips. For comparison, the lifetime odds of dying in an elevator are approximately 1 in 10 million — compared to 1 in 98 for car crashes and 1 in 6,000 for falls down stairs.

The vast majority of elevator fatalities involve workers — maintenance personnel, construction workers, and people who enter the shaft — rather than passengers riding inside a cab. When a passenger fatality does occur, it is almost always the result of a door system malfunction or a passenger bypassing safety interlocks, not a cab falling down the shaft. The popular image of the falling elevator — perpetuated by films and action sequences — is statistically almost nonexistent in real life. The redundant mechanical safety systems designed by Otis and refined over 170 years work. They work so well that most people ride elevators every day without ever thinking about the engineering beneath their feet.