CN113110019B - Universal multifunctional double-circuit redundant output circuit - Google Patents
Universal multifunctional double-circuit redundant output circuit Download PDFInfo
- Publication number
- CN113110019B CN113110019B CN202110419158.2A CN202110419158A CN113110019B CN 113110019 B CN113110019 B CN 113110019B CN 202110419158 A CN202110419158 A CN 202110419158A CN 113110019 B CN113110019 B CN 113110019B
- Authority
- CN
- China
- Prior art keywords
- output
- safety
- controller
- module
- signal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B9/00—Safety arrangements
- G05B9/02—Safety arrangements electric
- G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The invention provides a universal multifunctional double-path redundant output circuit, which comprises: the input end of the first circuit protection module is connected with the output end of the first controller, the output end of the first circuit protection module is connected with the input end of the first safety output module, the output end of the first safety output module is connected with the input end of the first feedback mutual inspection module, and the output end of the first feedback mutual inspection module is connected with the input end of the second controller; the input end of the second feedback mutual detection module is connected with the input end of the second controller, the output end of the second feedback mutual detection module is connected with the input end of the second safety output module, the output end of the second safety output module is connected with the input end of the second circuit protection module, and the output end of the second circuit protection module is connected with the input end of the first main controller.
Description
Technical Field
The invention relates to the technical field of electronic circuits, in particular to a universal multifunctional double-path redundant output circuit.
Background
Compared with a redundancy structure, when the common output signal fails, the whole link of the system is in a failure mode, and the existing redundancy output circuit technology simultaneously outputs multiple paths of signals, and the rear end judges the multiple paths of signals so as to reduce the error probability.
Disclosure of Invention
The object of the present invention is to solve at least one of the technical drawbacks mentioned.
Therefore, the invention aims to provide a universal multifunctional two-way redundant output circuit.
In order to achieve the above object, an embodiment of the present invention provides a universal multifunctional dual-path redundant output circuit, including: the circuit comprises a first circuit protection module, a second circuit protection module, a first safety output module, a second safety output module, a first controller, a second controller, a first feedback mutual inspection module and a second feedback mutual inspection module, wherein the input end of the first circuit protection module is connected with the output end of the first controller, the output end of the first circuit protection module is connected with the input end of the first safety output module, the output end of the first safety output module is connected with the input end of the first feedback mutual inspection module, and the output end of the first feedback mutual inspection module is connected with the input end of the second controller; the output end of the second feedback mutual inspection module is connected with the input end of the first controller, the input end of the second feedback mutual inspection module is connected with the output end of the second safety output module, the input end of the second safety output module is connected with the output end of the second circuit protection module, and the input end of the second circuit protection module is connected with the output end of the second controller; the first controller and the second controller are in two-way communication;
the first circuit protection module and the second circuit protection module each include: the optical switch comprises an AND gate device, an optocoupler, a first resistor and a second resistor, wherein the input end of the AND gate device is respectively connected with a corresponding controller, the output end of the AND gate device is connected with one end of the first resistor, the other end of the first resistor is connected with the optocoupler, and the output end of the optocoupler is connected with the second resistor;
the first controller and the second controller respectively output a signal at the same time, the signal is isolated by the corresponding circuit protection module, the isolated signal is converted into a required level by a TTL level through the corresponding safety output module, and finally, the cross mutual detection is carried out through the corresponding feedback mutual detection module, so that the signal correctness is verified.
Furthermore, the first safety output module and the second safety output module both adopt a forced guide rail type safety relay.
Further, when the first controller and the second controller respectively detect the safety output signal of the other party, the two parties can carry out information interaction, and if two paths of signals are detected within a certain time, the safety signal is considered to be effective; when the two signals are not detected, the safety signal is considered to be invalid; and when one of the two paths of signals is effective and the other path of signals is ineffective within a period of time, the safety function is considered to be invalid.
Further, the signal output by one controller is subjected to input detection and returns to the other controller for cross mutual detection.
Further, when the controller does not output a signal, the detection terminal is divided into the following cases:
if the two input signals detect the signal of the output port within a certain time, the safety output function is considered to be invalid;
if the two input signals only detect the signal of one output port within a certain time, the other link of the controller is considered to be damaged;
if the signals of the output port are not detected by the two input signals within a certain time, the safety output function is considered to be effective.
Further, when the controller outputs the safety signal, the detection end is divided into the following conditions:
if the signals of the output port are not detected by the two input signals within a certain time, the safety output function is considered to be invalid;
if the two input signals only detect the signal of one output port within a certain time, the other link of the controller is considered to be damaged;
if the two input signals detect the signal of the output port within a certain time, the safety output function is considered to be effective, and the safety function is continuously output.
According to the universal multifunctional two-way redundant output circuit disclosed by the embodiment of the invention, a novel mode is used for realizing safety function output, and the universal multifunctional two-way redundant output circuit is used as a safety function output circuit of a low-cost safety controller, and a redundant mode is adopted, so that the condition that the danger is caused if a signal fails in common output detection is greatly avoided. And measures such as overvoltage protection, signal isolation and the like are carried out on the signal output link, so that the circuit is not invalid when executing the safety function. And the two main control chips carry out cross mutual detection, and when one path of signal works abnormally, the other chip immediately detects and takes corresponding measures. The invention can greatly reduce the potential safety hazard of single-path output, the chip mutual inspection mechanism ensures that the master control chip detects the problem while any path of input signals is damaged, and the circuit reports errors to the upper layer and outputs signals while the circuit works normally.
Additional aspects and advantages of the invention will be set forth in part in the description which follows and, in part, will be obvious from the description, or may be learned by practice of the invention.
Drawings
The above and/or additional aspects and advantages of the present invention will become apparent and readily appreciated from the following description of the embodiments, taken in conjunction with the accompanying drawings of which:
FIG. 1 is a schematic diagram of a universal multifunctional two-way redundant output circuit according to an embodiment of the present invention;
FIG. 2 is a circuit diagram of a first circuit protection module and a second circuit protection module according to one embodiment of the present invention;
FIG. 3 is a circuit diagram of a first security output module and a second security output module according to an embodiment of the present invention;
fig. 4 is a circuit diagram of a first circuit protection module and a second circuit protection module according to another embodiment of the present invention.
Detailed Description
Reference will now be made in detail to embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like or similar reference numerals refer to the same or similar elements or elements having the same or similar function throughout. The embodiments described below with reference to the accompanying drawings are illustrative and intended to explain the present invention and should not be construed as limiting the present invention.
As shown in fig. 1, the general multifunctional two-way redundant output circuit according to the embodiment of the present invention includes: the system comprises a first circuit protection module ISO _ S, a second circuit protection module ISO _ M, a first Safety output module Safety _ Out _ S, a second Safety output module Safety _ Out _ M, a first controller MCU _ S, a second controller MCU _ M, a first FEEDBACK mutual inspection module FEEDBACK _ S and a second FEEDBACK mutual inspection module FEEDBACK _ M, wherein the input end of the first circuit protection module ISO _ S is connected with the output end of the first controller MCU _ S, the output end of the first circuit protection module ISO _ S is connected with the input end of the first Safety output module Safety _ Out _ S, the output end of the first Safety output module Safety _ Out _ S is connected with the input end of the first FEEDBACK mutual inspection module FEEDBACK _ S, and the output end of the first FEEDBACK mutual inspection module FEEDBACK _ S is connected with the input end of the second controller MCU _ M; the output end of the second FEEDBACK mutual inspection module FEEDBACK _ M is connected with the input end of the first controller MCU _ S, the input end of the second FEEDBACK mutual inspection module FEEDBACK _ M is connected with the output end of the second Safety output module Safety _ Out _ M, the input end of the second Safety output module Safety _ Out _ M is connected with the output end of the second circuit protection module ISO _ M, and the input end of the second circuit protection module ISO _ M is connected with the output end of the second controller MCU _ M; the first controller MCU _ S and the second controller MCU _ M are in two-way communication.
When the controller is to output a safety signal, the MCU _ S and the MCU _ M simultaneously output a signal. The signals are isolated through an ISO module, the isolated signals are converted into required levels through a TTL level through a safety output module, and finally cross mutual detection is carried out through a feedback mutual detection module to verify the correctness of the signals.
The first circuit protection module and the second circuit protection module each include: the device comprises an AND gate device, an optical coupler, a first resistor and a second resistor, wherein the input end of the AND gate device is connected with a corresponding controller, the output end of the AND gate device is connected with one end of the first resistor, the other end of the first resistor is connected with the optical coupler, and the output end of the optical coupler is further connected with the second resistor.
Referring to fig. 2, D1 is an and gate device, D2 is an optocoupler, and R1 and R2 are resistors. When the circuit protection module adopts an AND gate device between the output module and the MCU, the purpose is to enhance the output capability of the chip and control the enabling of the safety output function through a CTRL pin. R1 is a current-limiting resistor to prevent the circuit from being burnt out due to overlarge output signal current. The rear end of the output signal is connected with an optical coupler, when a voltage exists between 1 and 2 of D2, a diode in the optical coupler is conducted, and therefore pins 3 and 4 at the rear end are conducted. The device has an isolation effect, and even if the peripheral is damaged, the normal work of the controller cannot be influenced.
As shown in fig. 3, the first safety output module and the second safety output module both use a forced guide type safety relay. K1 is a forced guide rail type safety relay and is provided with two paths of normally open signals and two paths of normally closed signals. R3 is resistance. After the Out signal is output to the K1 relay, the NO pin of the K1 relay is closed, the Safety _ Out _ A and the Safety _ Out _ B are conducted, and the voltage can be configured through the resistance value of the R3. At the same time, NC11 and NC12 are off, and the Safety _ Check signal is off. The Safety Check is used as a detection signal of the Safety output signal of the main controller and provides a feedback function.
Each set of security inputs has two outputs, ending in _ S and _ M, respectively. The signal output by the first controller MCU _ S is ended with _ S, the signal output by the second controller MCU _ M is ended with _ M, and the two main controllers carry out real-time cross mutual detection. When the first controller and the second controller respectively detect the safety output signals of the other party, the two parties can carry out information interaction, and if the two signals are detected within a certain time, the safety signals are considered to be effective; when the two signals are not detected, the safety signal is considered to be invalid; and when one of the two paths of signals is effective and the other path of signals is ineffective within a period of time, the safety function is considered to be invalid.
The output signals are subjected to input detection and return to another main control chip for cross mutual detection. And if the safety signal is output by the MCU _ S, the safety signal is finally returned to the MCU _ M end for detection. When the safety controller does not output signals, the detection end has the following conditions:
if the two input signals detect the signal of the output port within a certain time, the safety output function is considered to be invalid;
if the two input signals only detect the signal of one output port within a certain time, the other link of the safety controller is considered to be damaged;
if the signals of the output port are not detected by the two input signals within a certain time, the safety output function is considered to be effective.
When the safety controller outputs a safety signal, the detection end has the following conditions:
if the signals of the output port are not detected by the two input signals within a certain time, the safety output function is considered to be invalid
If the two input signals only detect the signal of one output port within a certain time, the other link of the safety controller is considered to be damaged;
if the two input signals detect the signal of the output port within a certain time, the safety output function is considered to be effective, and the safety function is continuously output.
When the IN signal is a large negative voltage, GND is higher than the OUT signal. At this time, the D1 diode between GND and OUT is turned on, and the OUT signal is clamped near the GND signal, thereby protecting the back-end device.
The ISO module uses an isolated chip, including but not limited to an optocoupler device, as shown in fig. 3. U12 is the opto-coupler device, and R3, R4 are the resistance, and B device is not gate BUFFER. After an OUT signal of the safety input module enters the ISO isolation module, the OUT signal firstly passes through the optical coupler of the U12 so as to achieve signal isolation. The function of R3 is to limit current, thereby protecting the U12 device. After the signal is isolated by the U12, the signal is pulled up to VCC through the R4 resistor, and when the optical coupler is conducted, the signal entering the B device is VCC or GND. The signal passes through a B NOT gate device and finally enters the MCU.
According to the universal multifunctional two-way redundant output circuit disclosed by the embodiment of the invention, a novel mode is used for realizing safety function output, and the universal multifunctional two-way redundant output circuit is used as a safety function output circuit of a low-cost safety controller, and a redundant mode is adopted, so that the condition that the danger is caused if a signal fails in common output detection is greatly avoided. And measures such as overvoltage protection, signal isolation and the like are carried out on the signal output link, so that the circuit is not invalid when executing the safety function. And the two main control chips carry out cross mutual detection, and when one path of signal works abnormally, the other chip immediately detects and takes corresponding measures. The invention can greatly reduce the potential safety hazard of single-path output, the chip mutual inspection mechanism ensures that the master control chip detects the problem while any path of input signals is damaged, and the circuit reports errors to the upper layer and outputs signals while the circuit works normally.
In the description herein, references to the description of the term "one embodiment," "some embodiments," "an example," "a specific example," or "some examples," etc., mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the invention. In this specification, the schematic representations of the terms used above do not necessarily refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.
Although embodiments of the present invention have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting the present invention, and that variations, modifications, substitutions and alterations can be made in the above embodiments by those of ordinary skill in the art without departing from the principle and spirit of the present invention. The scope of the invention is defined by the appended claims and equivalents thereof.
Claims (5)
1. A universal multifunctional two-way redundant output circuit, comprising: the circuit comprises a first circuit protection module, a second circuit protection module, a first safety output module, a second safety output module, a first controller, a second controller, a first feedback mutual inspection module and a second feedback mutual inspection module, wherein the input end of the first circuit protection module is connected with the output end of the first controller, the output end of the first circuit protection module is connected with the input end of the first safety output module, the output end of the first safety output module is connected with the input end of the first feedback mutual inspection module, and the output end of the first feedback mutual inspection module is connected with the input end of the second controller; the output end of the second feedback mutual inspection module is connected with the input end of the first controller, the input end of the second feedback mutual inspection module is connected with the output end of the second safety output module, the input end of the second safety output module is connected with the output end of the second circuit protection module, and the input end of the second circuit protection module is connected with the output end of the second controller; the first controller and the second controller are in two-way communication;
wherein the first circuit protection module and the second circuit protection module each include: the circuit comprises an AND gate device, an optical coupler, a first resistor and a second resistor, wherein the input end of the AND gate device is respectively connected with a corresponding controller, the output end of the AND gate device is connected with one end of the first resistor, the other end of the first resistor is connected with the optical coupler, and the output end of the optical coupler is connected with the second resistor;
the first controller and the second controller respectively output a signal at the same time, the signal is isolated by the corresponding circuit protection module, the isolated signal is converted into a required level by a TTL level through the corresponding safety output module, and finally, the cross mutual detection is carried out through the corresponding feedback mutual detection module to verify the correctness of the signal;
when the first controller and the second controller respectively detect the safety output signals of the other party, the two parties can carry out information interaction, and if two paths of signals are detected within a certain time, the safety signals are considered to be effective; when the two signals are not detected, the safety signal is considered to be invalid; when one of the two signals is effective and the other one is ineffective within a period of time, the safety function is considered to be invalid.
2. The universal multifunctional dual-way redundant output circuit according to claim 1, wherein the first safety output module and the second safety output module each employ a forced guideway safety relay.
3. The universal multi-function dual redundant output circuit of claim 1 wherein signals output by one controller are subjected to input detection and returned to the other controller for cross-checking.
4. The universal multifunctional dual-path redundancy output circuit as claimed in claim 1, wherein when the controller does not output a signal, the detection terminal is divided into the following conditions:
if the two input signals detect the signal of the output port within a certain time, the safety output function is considered to be invalid;
if the two input signals only detect the signal of one output port within a certain time, the other link of the controller is considered to be damaged;
if the signals of the output port are not detected by the two input signals within a certain time, the safety output function is considered to be effective.
5. The universal multifunctional dual-path redundancy output circuit as claimed in claim 1, wherein when the controller outputs the safety signal, the detection terminal is divided into the following conditions:
if the signals of the output port are not detected by the two input signals within a certain time, the safety output function is considered to be invalid;
if the two input signals only detect the signal of one output port within a certain time, the other link of the controller is considered to be damaged;
if the two input signals detect the signal of the output port within a certain time, the safety output function is considered to be effective, and the safety function is continuously output.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110419158.2A CN113110019B (en) | 2021-04-19 | 2021-04-19 | Universal multifunctional double-circuit redundant output circuit |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110419158.2A CN113110019B (en) | 2021-04-19 | 2021-04-19 | Universal multifunctional double-circuit redundant output circuit |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113110019A CN113110019A (en) | 2021-07-13 |
| CN113110019B true CN113110019B (en) | 2023-01-10 |
Family
ID=76718405
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110419158.2A Active CN113110019B (en) | 2021-04-19 | 2021-04-19 | Universal multifunctional double-circuit redundant output circuit |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113110019B (en) |
Family Cites Families (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN201317379Y (en) * | 2008-11-10 | 2009-09-30 | 南京恩瑞特实业有限公司 | Urban track traffic signal system security computer |
| CN204156508U (en) * | 2014-08-21 | 2015-02-11 | 中国电子器材深圳有限公司 | Short-circuit protection circuit of lithium battery |
| RU157512U1 (en) * | 2015-05-05 | 2015-12-10 | Общество с ограниченной ответственностью "Исследовательский центр "Бреслер" | COMPLETE COMBINED RELAY PROTECTION AND AUTOMATION DEVICE ON AC VARIABLE CURRENT FOR CONNECTIONS OF 6-35 kV ELECTRICAL DISTRIBUTION DEVICE |
| CN105388958B (en) * | 2015-12-24 | 2017-04-19 | 上海辰竹仪表有限公司 | Safe control device for cutting off equipment power supply circuit |
| CN109656127B (en) * | 2018-12-31 | 2022-03-01 | 河南嘉晨智能控制股份有限公司 | Drive redundancy design method suitable for electric forklift controller |
| CN209282813U (en) * | 2019-01-24 | 2019-08-20 | 深圳天之行电器有限公司 | Monitor the safety relay of safety return circuit output |
| CN209282129U (en) * | 2019-01-24 | 2019-08-20 | 深圳天之行电器有限公司 | Monitor the binary channels safety relay of safety device |
| CN109755923B (en) * | 2019-02-20 | 2021-01-19 | 广州视源电子科技股份有限公司 | Protection circuit, method and equipment of power supply device |
| CN110492441B (en) * | 2019-08-20 | 2021-12-31 | 大连海事大学 | DC/DC converter configured with fault detection circuit and fault detection method |
| CN212114763U (en) * | 2020-05-09 | 2020-12-08 | 鞍山拜尔自控有限公司 | Protection device for control circuit of electric actuator |
| CN112034812A (en) * | 2020-06-28 | 2020-12-04 | 天津中德应用技术大学 | Railway controller internal component fault self-diagnosis system and method |
-
2021
- 2021-04-19 CN CN202110419158.2A patent/CN113110019B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN113110019A (en) | 2021-07-13 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US5357518A (en) | Network interface | |
| CA1181531A (en) | Interconnect fault detector for lsi logic chips | |
| CN101523835A (en) | Device for sensing a fault current in a field bus system | |
| US7719255B2 (en) | Safe input circuit with one-channel peripheral connection for the input of a bus participant | |
| WO2022142528A1 (en) | Functionally safe switching value output module and diagnostic processing method | |
| US4270715A (en) | Railway control signal interlocking systems | |
| JP2984003B2 (en) | Method of generating position information of an elevator car in an elevator shaft and apparatus for implementing the method | |
| EP0241270A1 (en) | Self-testing monitoring circuit | |
| US11372796B2 (en) | Bus subscriber and method for operating a bus subscriber | |
| US5777834A (en) | Safety switch arrangement | |
| US5550804A (en) | Data bus system | |
| CN113110019B (en) | Universal multifunctional double-circuit redundant output circuit | |
| US5977662A (en) | Electronic switching device and circuits with a plurality of such switching devices | |
| JPS61114629A (en) | Driver disconnecting circuit of common bus transmission system | |
| CN112140887B (en) | Shutdown circuit for vehicle fault and vehicle with shutdown circuit | |
| CN202296784U (en) | Safety protection system for escalator and moving sidewalk | |
| JPH0816421A (en) | Electronic device with simplex/duplex switching input/ output port, and fault tolerance system | |
| JP3630824B2 (en) | Auxiliary relay drive circuit | |
| CN115277373B (en) | Automatic driving drive-by-wire redundant system based on vehicle-road coordination | |
| JPH05189325A (en) | Double system electronic computer | |
| JP3060784B2 (en) | Control device disconnection detection device | |
| JPH05204509A (en) | Small-sized fail safe interface and boating module including said interface | |
| JP2885575B2 (en) | Auxiliary relay drive circuit | |
| CN112622981A (en) | Medium-low speed magnetic levitation turnout position indicating circuit | |
| US5446399A (en) | Method and structure for a fault-free input configuration control mechanism |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20221202 Address after: 215123 1-a1f, creative industry park, No. 328, Xinghu street, Suzhou Industrial Park, Suzhou City, Jiangsu Province Applicant after: SUZHOU KONUO ROBOT Co.,Ltd. Address before: No. b801-004, 8th floor, Xueyan complex building, Tsinghua University, Haidian District, Beijing 100084 Applicant before: ROKAE, Inc. |
|
| TA01 | Transfer of patent application right | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |