Apparatus for controlling safety-critical processes
원문보기
IPC분류정보
국가/구분
United States(US) Patent
등록
국제특허분류(IPC7판)
G06F-011/00
G05B-019/048
출원번호
US-0072558
(2002-02-08)
우선권정보
DE-0039567 (1999-08-20)
발명자
/ 주소
Rupp, Roland
Wohnhaas, Klaus
Schwenkel, Hans
출원인 / 주소
Pilz GmbH & Co.
대리인 / 주소
Harness, Dickey & Pierce, P.L.C.
인용정보
피인용 횟수 :
19인용 특허 :
4
초록▼
The present invention relates to an apparatus for controlling safety-critical processes. The apparatus includes at least one safe control unit for controlling the safety-critical processes and at least two safe signal units which are connected via I/O channels to the safety-critical processes. The s
The present invention relates to an apparatus for controlling safety-critical processes. The apparatus includes at least one safe control unit for controlling the safety-critical processes and at least two safe signal units which are connected via I/O channels to the safety-critical processes. The safe control unit and the safe signal units are connected to a common fieldbus. The safe signal units communicate with the safe control unit, but not with one another, when the apparatus is in the control mode. The safe signal units have an evaluator for evaluating a fault message which is broadcasted across the fieldbus, as well as a switching device which autonomously change the safety-critical process to a safe state when a fault message which is evaluated as being relevant occurs.
대표청구항▼
1. An apparatus for controlling safety-critical processes, said apparatus comprising:a safe control unit for controlling said safety-critical processes,a plurality of safe signal units each of which having I/O channels for connecting said safe signal units to said safety critical processes, and each
1. An apparatus for controlling safety-critical processes, said apparatus comprising:a safe control unit for controlling said safety-critical processes,a plurality of safe signal units each of which having I/O channels for connecting said safe signal units to said safety critical processes, and each of said signal units being allocated to at least one defined group of signal units, anda fieldbus, wherein said safe control unit and said safe signal units are connected to said fieldbus for communication, and wherein said safe signal units communicate with said safe control unit, but not with one another during faultless control mode,wherein each safe signal unit further comprises:a transmitter for broadcasting a fault message via said fieldbus, when a fault is detected by said signal unit,an evaluator for evaluating any fault message broadcasted by another unit across said fieldbus as to its relevance with respect to the safety critical processes connected, anda switching device which autonomously changes, via said I/O channels, said safety-critical processes connected to a safe state when said evaluator evaluates said fault message as being relevant,wherein said evaluator evaluates said fault message for its relevance to said group to which said respective signal unit is allocated. 2. The apparatus of claim 1, wherein groups that are affected by a fault are coded in said fault message. 3. An apparatus for controlling safety-critical processes, said apparatus comprising:a safe control unit for controlling said safety-critical processes,at least two safe signal units having I/O channels which are connected to said safety-critical processes, anda fieldbus, said safe control unit and said safe signal units being connected to said fieldbus for communication,wherein said safe signal units communicate with said safe control unit, but not with one another, when said apparatus is in a faultless control mode, andwherein said safe signal units each comprise an evaluator for evaluating any general fault message broadcasted across said fieldbus, as well as a switching device which autonomously changes at least one of said safety-critical processes to a safe state when a general fault message broadcasted is evaluated as being relevant. 4. The apparatus of claim 3, wherein said signal units each have a transmitter for broadcasting general fault messages across said fieldbus. 5. The apparatus of claim 3, wherein said signal units are each allocated to at least one defined group of signal units, and said evaluator evaluates said general fault message for a relevance with respect to the associated group. 6. The apparatus of claim 5, wherein groups that are affected by a fault are coded in said fault message. 7. The apparatus of claim 3, wherein said fieldbus provides a bus protocol for organizing said communication, said bus protocol assigning different transmission priorities to said signal units, and wherein said general fault messages are always broadcasted with the highest priority, irrespective of the transmission priority assigned to their sender. 8. The apparatus of claim 3, wherein said evaluator evaluates said fault messages without sending an acknowledgment message. 9. The apparatus of claim 3, wherein said signal units further comprise a time monitor for monitoring a timely occurrence of an expected event, said time monitor initiating the broadcast of said fault message when said expected event is not timely detected. 10. The apparatus of claim 9, wherein said expected event is a reception of an acknowledgment message. 11. The apparatus of claim 9, wherein said expected event is a reception of a test message which is sent cyclically. 12. The apparatus of claim 9, wherein said expected event is a transmission window. 13. The apparatus of claim 3, wherein said fieldbus is a CAN bus. 14. The apparatus of claim 3, comprising at least two safe control units for controlling safety-critical processes, said at least two safe control units be ing connected to a plurality of safe signal units via said common fieldbus. 15. The apparatus of claim 14, further comprising an administration unit for co-ordinating said at least two safe control units. 16. The apparatus of claim 14, wherein at least one signal unit is associated jointly with said at least two safe control units, wherein a first one of said safe control units communicates directly with said signal unit, while a second one of said safe control units communicates with said signal unit via said first control unit.
연구과제 타임라인
LOADING...
LOADING...
LOADING...
LOADING...
LOADING...
이 특허에 인용된 특허 (4)
Thorsten Behr DE; Karsten Meyer-Grafe DE, Control and data transmission installation and a process for the transmission of safety-related data.
Vandesteeg, Kerry W.; Vasko, David A.; Lenner, Joseph A.; Hall, Kenwood H., Safety network for industrial controller providing redundant connections on single media.
Fletcher, Bryan Henry; Graves, James Andrew; Williams, Quay Isaac Gene; Allen, David Peter, Continuous equipment operation in an automated control environment.
Law, Gary Keith; Burr, Kent Allan; Sherriff, Godfrey Roland, Method for intercontroller communications in a safety instrumented system or a process control system.
Muneta, Yasuo; Nakamura, Toshiyuki; Nakayama, Teruyuki, Safety unit, controller system, connection method of controllers, control method of the controller system and monitor method of the controller system.
Muneta,Yasuo; Nakamura,Toshiyuki; Nakayama,Teruyuki, Safety unit, controller system, connection method of controllers, control method of the controller system and monitor method of the controller system.
Nakayama,Teruyuki; Nakamura,Toshiyuki; Muneta,Yasuo, Slave units and network system as well as slave unit processing method and device information collecting method.
※ AI-Helper는 부적절한 답변을 할 수 있습니다.