公开(公告)号：US07412293B2

公开(公告)日：2008-08-12

申请号：US11104895

申请日：2005-04-13

Applicant: Franz Dold ,  Irina Hippenmeyer ,  Craig Kendall ,  Jim O'Laughlin

Inventor： Franz Dold ,  Irina Hippenmeyer ,  Craig Kendall ,  Jim O'Laughlin

IPC: G05B9/02 ,  G05B19/18 ,  G05B11/01 ,  G06F17/00

CPC classification number: G05B19/0425 ,  G05B19/058 ,  G05B2219/1179 ,  G05B2219/1183 ,  G05B2219/1195 ,  G05B2219/14007

Abstract: The invention relates to a method for process control, wherein at least one process device to be controlled is controlled by at least one process module and by at least one safety module, in that process signals not relevant to safety are transmitted to a local control unit associated with the process device by the process module and safety signals relating to the process safety are transmitted by the safety module, wherein the process signals and the safety signals are logically linked to one another in the control unit and the result of the logical link is made available at a control output of the control unit to which the process device to be controlled is connected.The invention moreover relates to a system for process control, in particular for the carrying out of the method in accordance with the invention.

Abstract translation: 本发明涉及一种用于过程控制的方法，其中待控制的至少一个过程装置由至少一个处理模块和至少一个安全模块控制，在该过程中与安全无关的信号被传送到本地控制单元 由过程模块与过程设备相关联并且与安全模块相关的安全信号由安全模块传输，其中过程信号和安全信号在控制单元中彼此逻辑链接，逻辑链路的结果为 在要被控制的处理装置连接到的控制单元的控制输出端处可用。 本发明还涉及一种用于过程控制的系统，特别是用于执行根据本发明的方法。

公开(公告)号：US20080082212A1

公开(公告)日：2008-04-03

申请号：US11658612

申请日：2005-07-22

Applicant: Satoshi Kato ,  Tsutomu Araki

Inventor： Satoshi Kato ,  Tsutomu Araki

IPC: G06F19/00

CPC classification number: G05B9/03 ,  G05B19/058 ,  G05B2219/1184 ,  G05B2219/1186 ,  G05B2219/1189 ,  G05B2219/1195 ,  G05B2219/14007 ,  G05B2219/14054 ,  G05B2219/14116 ,  G05B2219/14126 ,  G05B2219/24173 ,  G05B2219/24184 ,  G05B2219/24186 ,  G05B2219/24196

Abstract: While a microcomputer 100A is executing a self-diagnosis (A), second diagnosis pulse output means 110B of a B-system microcomputer 100B is not used utterly. Further, during this time, the B-system microcomputer 100B does not execute a processing relating to at least the self-diagnosis (A) utterly. By shifting the timings for the A-system and the B-system to output the diagnosis pulses, independencies can be secured between respective diagnosis processing (self-diagnoses (A) and (B)). Thus, the independencies between the A-system and the B-system can be verified briefly by the self-diagnosis (A) on the A-system side. Further, first diagnosis pulse group are outputted parallel and simultaneously from first diagnosis pulse output means 110A. Thus, since cyclic control is not required for respective external input devices, it can be done to verify the independencies between the A-system and the B-system within a short period of time.

Abstract translation: 在微型计算机100A执行自诊断（A）的情况下，不完全使用B系统微计算机100B的第二诊断脉冲输出单元110B。 此外，在此期间，B系统微计算机100B完全不执行与至少自诊断（A）有关的处理。 通过移动A系统和B系统的定时输出诊断脉冲，可以在各自的诊断处理（自诊断（A）和（B））之间确保独立性。 因此，A系统和B系统之间的独立性可以通过A系统侧的自我诊断（A）进行简单的验证。 此外，第一诊断脉冲组从第一诊断脉冲输出装置110A并行输出。因此，由于对于各个外部输入装置不需要循环控制，因此可以进行A系统和B系统之间的独立性的验证 系统在短时间内。

公开(公告)号：US20170098938A1

公开(公告)日：2017-04-06

申请号：US15279938

申请日：2016-09-29

Applicant: SICK AG

Inventor： Adrian SCHWARZ ,  Shinde GEETA ,  Victor KOK HENG PHAY

IPC: H02J4/00 ,  H02J1/06

CPC classification number: H02J4/00 ,  G05B9/02 ,  G05B2219/1195 ,  H02J1/06

Abstract: A cascade of safety switches includes safety switches for the monitoring of accesses of an automation system, at least one connection unit for the arrangement between two safety switches, and a terminator for the termination of the cascade of safety switches. Each safety switch has a first conductor and a second conductor. The first conductor includes conductor cores for transmitting signals and for receiving voltage. The second conductor includes conductor cores for receiving signals and for forwarding the voltage. The connection unit has a first circuit and a second circuit. The first circuit is provided for receiving the signals of a subsequent safety switch and for forwarding the signals of the subsequent safety switch to an upstream safety switch and the second circuit is provided for connecting the connection unit to a voltage source and to a conductor core for receiving the voltage of the subsequent safety switch.

公开(公告)号：US08072889B2

公开(公告)日：2011-12-06

申请号：US11658612

申请日：2005-07-22

Applicant: Satoshi Kato ,  Tsutomu Araki

Inventor： Satoshi Kato ,  Tsutomu Araki

IPC: H04L12/26

CPC classification number: G05B9/03 ,  G05B19/058 ,  G05B2219/1184 ,  G05B2219/1186 ,  G05B2219/1189 ,  G05B2219/1195 ,  G05B2219/14007 ,  G05B2219/14054 ,  G05B2219/14116 ,  G05B2219/14126 ,  G05B2219/24173 ,  G05B2219/24184 ,  G05B2219/24186 ,  G05B2219/24196

Abstract: While a microcomputer is executing a self-diagnosis (A), second diagnosis pulse output means of a B-system microcomputer is not used utterly. Further, during this time, the B-system microcomputer 100B does not execute a processing relating to at least the self-diagnosis (A) utterly. By shifting the timings for the A-system and the B-system to output the diagnosis pulses, independencies can be secured between respective diagnosis processing (self-diagnoses (A) and (B)). Thus, the independencies between the A-system and the B-system can be verified briefly by the self-diagnosis (A) on the A-system side. Further, first diagnosis pulse group are outputted parallel and simultaneously from first diagnosis pulse output means. Thus, since cyclic control is not required for respective external input devices, it can be done to verify the independencies between the A-system and the B-system within a short period of time.

Abstract translation: 当微型计算机执行自诊断（A）时，不完全使用B系统微计算机的第二诊断脉冲输出装置。 此外，在此期间，B系统微计算机100B完全不执行与至少自诊断（A）有关的处理。 通过移动A系统和B系统的定时输出诊断脉冲，可以在各自的诊断处理（自诊断（A）和（B））之间确保独立性。 因此，A系统和B系统之间的独立性可以通过A系统侧的自我诊断（A）进行简单的验证。 此外，第一诊断脉冲组从第一诊断脉冲输出装置并行输出。 因此，由于对于各个外部输入装置不需要循环控制，因此可以在短时间内验证A系统与B系统之间的独立性。

公开(公告)号：US20050234567A1

公开(公告)日：2005-10-20

申请号：US11104895

申请日：2005-04-13

Applicant: Franz Dold ,  Irina Hippenmeyer ,  Craig Kendall ,  Jim O'Laughlin

Inventor： Franz Dold ,  Irina Hippenmeyer ,  Craig Kendall ,  Jim O'Laughlin

IPC: G05B9/02 ,  G05B19/042 ,  G05B19/05 ,  G05B15/00

CPC classification number: G05B19/0425 ,  G05B19/058 ,  G05B2219/1179 ,  G05B2219/1183 ,  G05B2219/1195 ,  G05B2219/14007

Abstract: The invention relates to a method for process control, wherein at least one process device to be controlled is controlled by at least one process module and by at least one safety module, in that process signals not relevant to safety are transmitted to a local control unit associated with the process device by the process module and safety signals relating to the process safety are transmitted by the safety module, wherein the process signals and the safety signals are logically linked to one another in the control unit and the result of the logical link is made available at a control output of the control unit to which the process device to be controlled is connected. The invention moreover relates to a system for process control, in particular for the carrying out of the method in accordance with the invention.

Abstract translation: 本发明涉及一种用于过程控制的方法，其中待控制的至少一个过程装置由至少一个处理模块和至少一个安全模块控制，在该过程中与安全无关的信号被传送到本地控制单元 由过程模块与过程设备相关联并且与安全模块相关的安全信号由安全模块传输，其中过程信号和安全信号在控制单元中彼此逻辑链接，逻辑链路的结果为 在要被控制的处理装置连接到的控制单元的控制输出端处可用。 本发明还涉及一种用于过程控制的系统，特别是用于执行根据本发明的方法。

公开(公告)号：US20180101156A1

公开(公告)日：2018-04-12

申请号：US15287180

申请日：2016-10-06

Applicant: Honeywell International Inc.

Inventor： Dinesh Kumar KN ,  Sai Krishnan Jagannathan

IPC: G05B19/042 ,  G05B23/02

CPC classification number: G05B19/0425 ,  G05B23/0213 ,  G05B2219/1195 ,  G05B2219/32021 ,  Y02P70/161 ,  Y02P90/205

Abstract: An apparatus includes one or more channels. Each channel includes circuitry configured to receive an input current from a universal input/output (UIO) and provide an output to a field device in a hazardous or potentially hazardous zone, the circuitry further configured to limit energy to the field device by limiting at least one of a voltage, a current, or a power of the output. Each channel also includes terminals configured to connect the circuitry to one or more cables coupling the field device to the apparatus. Each channel is configured to provide an intrinsically safe barrier between the field device and a controller that controls operation of the field device.

公开(公告)号：US08306680B2

公开(公告)日：2012-11-06

申请号：US13347129

申请日：2012-01-10

Applicant: Hans Schwenkel ,  Christoph Weishaar

Inventor： Hans Schwenkel ,  Christoph Weishaar

IPC: G05B19/05 ,  G05B9/02 ,  B61L7/06

CPC classification number: G05B19/058 ,  B61L27/0005 ,  G05B2219/1181 ,  G05B2219/1194 ,  G05B2219/1195

Abstract: An arrangement for controlling an automated system, having a number of sensors and actuators, in particular for controlling a railroad system. A programmable control unit runs a user program to process input data from the sensors and to generate control commands for the actuators. The sensors and the actuators are connected to a remote I/O unit, which is connected to the control unit via a communication network. The control unit and the I/O unit interchange data messages in order to transmit the input data and the control commands. The arrangement has a remote disconnection unit, which is coupled to the remote I/O unit independently from the input data and control commands. The control unit is designed to integrate specific verification data for the disconnection unit into the data messages for the I/O unit. The disconnection unit is designed to deactivate the I/O unit depending on the specific verification data.

Abstract translation: 用于控制具有多个传感器和致动器的自动化系统的装置，特别是用于控制铁路系统。 可编程控制单元运行用户程序来处理来自传感器的输入数据并产生用于致动器的控制命令。 传感器和执行器连接到通过通信网络连接到控制单元的远程I / O单元。 控制单元和I / O单元交换数据消息，以便传输输入数据和控制命令。 该装置具有远程断开单元，其独立于输入数据和控制命令耦合到远程I / O单元。 控制单元被设计为将断开单元的特定验证数据集成到I / O单元的数据消息中。 断开单元被设计为根据具体的验证数据去激活I / O单元。

公开(公告)号：US20120173054A1

公开(公告)日：2012-07-05

申请号：US13347129

申请日：2012-01-10

Applicant: Hans SCHWENKEL ,  Christoph Weishaar

Inventor： Hans SCHWENKEL ,  Christoph Weishaar

IPC: G05D1/02 ,  G05B13/00

CPC classification number: G05B19/058 ,  B61L27/0005 ,  G05B2219/1181 ,  G05B2219/1194 ,  G05B2219/1195

Abstract: An arrangement for controlling an automated system, having a number of sensors and actuators, in particular for controlling a railroad system. A programmable control unit runs a user program to process input data from the sensors and to generate control commands for the actuators. The sensors and the actuators are connected to a remote I/O unit, which is connected to the control unit via a communication network. The control unit and the I/O unit interchange data messages in order to transmit the input data and the control commands. The arrangement has a remote disconnection unit, which is coupled to the remote I/O unit independently from the input data and control commands. The control unit is designed to integrate specific verification data for the disconnection unit into the data messages for the I/O unit. The disconnection unit is designed to deactivate the I/O unit depending on the specific verification data.

Abstract translation: 用于控制具有多个传感器和致动器的自动化系统的装置，特别是用于控制铁路系统。 可编程控制单元运行用户程序来处理来自传感器的输入数据并产生用于致动器的控制命令。 传感器和执行器连接到通过通信网络连接到控制单元的远程I / O单元。 控制单元和I / O单元交换数据消息，以便传输输入数据和控制命令。 该装置具有远程断开单元，其独立于输入数据和控制命令耦合到远程I / O单元。 控制单元被设计为将断开单元的特定验证数据集成到I / O单元的数据消息中。 断开单元被设计为根据具体的验证数据去激活I / O单元。

公开(公告)号：US07050860B2

公开(公告)日：2006-05-23

申请号：US10481515

申请日：2002-06-21

Applicant: Yasuo Muneta ,  Toshiyuki Nakamura

Inventor： Yasuo Muneta ,  Toshiyuki Nakamura

IPC: G05B19/18

CPC classification number: G05B9/02 ,  G05B19/058 ,  G05B2219/1179 ,  G05B2219/1195

Abstract: The safe PLC1 and the safe slaves 2 are connected with each other via the safe network 3. The safe PLC has the function of transmitting a request of safety information by broadcast message to the safe slaves. The safe slaves are each provided with a safety information transmission function for transmitting safety information indicative of whether the safe slave is in a safe condition or not; and a changing function for changing a priority of a transmission frame which carries the safety information. As a result, when the safe slaves send back safe responses at once in response to the broadcast message, safety information (danger) with a higher priority is transmitted ahead of others to the safe PLC.

Abstract translation: 安全PLC 1和安全从站2通过安全网络3相互连接。 安全PLC具有通过广播消息将安全信息请求发送到安全从站的功能。 安全从站分别具有用于发送表示安全从站是否处于安全状态的安全信息的安全信息传输功能; 以及用于改变携带安全信息的传输帧的优先级的改变功能。 结果，当安全从站响应广播消息一次性发回安全响应时，具有较高优先级的安全信息（危险）先于其他人发送到安全PLC。

公开(公告)号：US20040210323A1

公开(公告)日：2004-10-21

申请号：US10481515

申请日：2004-06-07

Inventor： Yasuo Muneta ,  Toshiyuki Nakamura

IPC: G05B019/18 ,  G05B011/01 ,  G05B009/02

CPC classification number: G05B9/02 ,  G05B19/058 ,  G05B2219/1179 ,  G05B2219/1195

Abstract: The safe PLC1 and the safe slaves 2 are connected with each other via the safe network 3. The safe PLC has the function of transmitting a request of safety information by broadcast message to the safe slaves. The safe slaves are each provided with a safety information transmission function for transmitting safety information indicative of whether the safe slave is in a safe condition or not; and a changing means for changing a priority of a transmission frame which carries the safety information. As a result, when the safe slaves send back safe responses at once in response to the broadcast message, safety information (danger) with a higher priority is transmitted ahead of others to the safe PLC.

Abstract translation: 安全PLC1和安全从站2通过安全网络3相互连接。安全PLC具有通过广播消息向安全从站发送安全信息请求的功能。 安全从站分别具有用于发送表示安全从站是否处于安全状态的安全信息的安全信息传输功能; 以及用于改变携带安全信息的传输帧的优先级的改变装置。 结果，当安全从站响应广播消息一次性发回安全响应时，具有较高优先级的安全信息（危险）先于其他人发送到安全PLC。