DE202016101441U1 - System with a mobile key device - Google Patents

Abstract

System with a mobile key device (2) for reading and writing data from at least one external device (3) of a system (4), the data comprising at least identification data for the device to be checked (3) and wherein the mobile key device (2) a first transmitting / receiving unit (5), by means of which the data can be transmitted wirelessly between the device (3) to the key device (2), characterized in that the key device (2) has a first memory (6), the key device (2) has at least one first secure channel (7), with a first evaluation unit (8) and the first transmitting / receiving unit (5), and at least one second channel (12), with a second evaluation unit (13) and a second transmitting / receiving unit (10) by means of the data wirelessly between the device (3) to the key device (2) are transferable, wherein the data is at least one of the transceiver units transferable.

Description

The present invention relates to a system with a mobile key device for reading and writing data according to the preamble of claim 1.

The DE 10 2010 011 766 A1 discloses a monitoring device for at least one state with a transponder, a receiver and an evaluation circuit.

An object of the invention is to provide an improved system with a mobile key device for reading and writing data. Another object is to provide more versatile uses for the key device and to allow use in safety-related devices.

The object is achieved according to claim 1 by a system having a mobile key device for reading and writing data from at least one external device of a system, the data comprising at least identification data for the device to be checked and wherein the mobile key device is a first transceiver unit by means of which the data can be transmitted wirelessly between the device and the key device, the key device having a first memory, the key device having at least one first secure channel with a first evaluation unit, and the first transmitting / receiving unit and at least one second channel with a second evaluation unit and a second transmitting / receiving unit, by means of which data can be transferred wirelessly between the device and the key device, the data being transferable to at least one of the transmitting / receiving units.

The system may, for example, be a security system, for example a security system according to machine safety, for example according to US Pat Standard EN / ISO 1384-1 or the Standard EN / IEC 62061 which, for example, provides the framework for functional safety of safety-related electrical control systems and their subsystems on machines.

The first secure channel with the first evaluation unit may for example have self-checking structures. For example, the first evaluation unit has a two-channel structure, which check each other.

The key device according to the invention can be designed very simply. It is, for example, a handy key device that can easily be carried or carried by a person. Optionally, the key device has controls and optionally at least one display element.

Furthermore, the key device has the evaluation units. The evaluation units are formed for example by a microcontroller. Furthermore, the key device has the memory to store data on the key device. Optionally, a second memory is provided which is connected to the second evaluation unit. This makes it possible to store data redundantly and to compare the data mutually.

The first evaluation unit and the second evaluation unit can optionally form a two-channel evaluation unit, an interface being provided between the evaluation units in order to carry out a cross-comparison of data between the evaluation units. As a result, a security of the key device can be increased.

The plant may, for example, be an industrial plant for the production of products. For example, this is part of a production plant for automobiles. The system can also be part of a machine or a system with several machines. The system has a safety area that must not be entered by persons when the system is active, as the person may be endangered by parts of the system. For example, the plant is one or more robots whose hazardous area of action lies within the safety area.

The at least one external device is arranged, for example, within the security area. The device or devices are, for example, arranged stationary, so that they can not be removed. But they can also be mobile devices. The device is integrated in the system, for example.

The device contains at least data for identification, which can be retrieved wirelessly from the key device via the first transceiver or the second transceiver. The first transceiver unit or the second transceiver unit is preferably a radio transceiver unit.

The device may be, for example, a valve, an actuator, a sensor or another electrical or electronic device.

A first type of respective data, which is exemplified below, is preferably transmitted with the first transceiver unit.

This data may be, for example, control data for the device transmitted from the key device to the device.

For example, the data may include machine control commands such as shutdown commands or control commands.

The data may also be identification data or authorization data for a user or a person.

The data may also be key data, for example, to keep a machine in a non-activated state and to avoid an unsafe start of the machine.

A second type of respective data, which will be exemplified below, is preferably transmitted with the second transceiver unit.

In addition to the identification data, device status data and / or device data is transmitted to the key device. This can be operating data, process data or similar data. For example, the data is device status data, error messages, or performance data, such as device downtime. For example, these are pressure values of a valve.

But it can also be confirmation data or protocol data of the device, which are transmitted to the key device.

Further, the data may also be maintenance data or production data transmitted from the device to the key device.

According to the invention, the key device is carried by the person to reach the devices. For example, while the person is carrying the key device, the system may be disabled.

The transfer of data between the key device and the device can be done automatically. Ie. if the person has approached the device at a certain minimum distance, the data of the device is automatically read from the key device.

The person carrying the key device may optionally, with the key device itself, transmit data from the device or transmit the data to the device. For this purpose, it can be provided, for example, that an action, for example an actuation of a key on the key device, must be performed by the person, for example. This ensures that the data of the device is not transmitted automatically by the key device, but always an active action of the person is necessary to transmit the data.

For example, the device may be very simple to provide the data. In the simplest case, the device additionally requires a memory and a device, for example a transmitting / receiving unit for providing data.

There are usually a variety of devices available. Especially with large systems or large security areas, or large systems with a plurality of security areas more devices are available. It can be provided that the key device transmits at least data from a device. However, it is also provided in particular that a key device transmits data from several devices. In particular, it is provided that the key device transmits data from several devices in a certain order.

The communication between the key device and the device can be unidirectional or bidirectional. In the simplest case, simply reading the data of the device is sufficient. However, it may also be provided that data is written to the device by the key device.

In a development of the invention, the first transceiver has a low range and the second transceiver has a high range.

The low range is for example 0 to 1 m, in particular 0 to 500 mm, in particular 0 to 250 mm.

The high range is for example 0 to 10 m, in particular 0 to 5 m or in particular 0 to 2 m.

This ensures that only data from the device can be transmitted by the first transmitting / receiving unit when a certain distance to the device is reached. This ensures that certain already explained data can only be transferred if it is ensured that the key device is at a minimum distance to the device. This is useful, for example, when the operator himself should be in the vicinity of the device, for example, to observe an effect of a performed action or a command executed.

As a result, data can not be automatically transmitted by the first transceiver even if the key device is too far away from the device.

However, a data transmission can be carried out via the second transceiver unit, ie with a high range, a greater distance to the unit than with the first transceiver unit.

As a result, a data transmission can always be carried out via the second transceiver unit before this is possible with the first transceiver unit when the person with the key unit approaches the unit. As a result, for example, a data transmission of the first transmitting / receiving unit can be prepared by a data transmission of the second transmitting / receiving unit.

In a further development of the invention, the first channel is designed for transmitting and receiving secure data and the second channel is designed for transmitting and receiving non-secure data.

A first type of respective secure data, which is exemplified below, is preferably transmitted with the first transceiver unit.

This data may be, for example, control data for the device transmitted from the key device to the device.

For example, the data may include machine control commands such as shutdown commands or control commands.

The data may also be identification data or authorization data for a user or a person.

The data may also be key data, for example, to keep a machine in a non-activated state and avoid an unsafe start of the machine.

A second type of respective non-secure data, which is explained below by way of example, is preferably transmitted with the second transceiver unit.

In addition to the identification data, device status data and / or device data is transmitted to the key device. This can be operating data, process data or similar data. For example, the device status information is error messages or operational behavior data such as device downtime. For example, these are pressure values of a valve.

But it can also be confirmation data or protocol data of the device, which are transmitted to the key device.

Further, the data may also be maintenance data or production data transmitted from the device to the key device.

In a development of the invention, the first and second transceiver units are each an RFID transceiver unit.

An RFID transmitting / receiving unit has an antenna arrangement for communication with the device, which has, for example, an RFID transponder, wherein the RFID transponder comprises at least one coil for interacting with the antenna arrangement of the RFID transceiver unit.

Radio Frequency Identification (RFID) transceivers are used in transceiver systems to automatically and non-contactly identify and / or locate radio frequency RFID transponders. An RFID system typically includes first the RFID transponder (also referred to as a "tag" or "radio tag") that includes an antenna and is located on or in the device. As a rule, it comprises a characteristic identification data code which can be interrogated via the antenna arrangement by the RFID receiving unit or the RFID reader of the RFID system (also referred to as "transceiver"). For this purpose, the RFID transceiver unit comprises the antenna arrangement and a transceiver circuit (eg the EM405 chip from EM Microelectronics) for reading out this identifier from the RFID transponder. For reading out the identifier from the RFID transponder, the RFID transceiver unit typically generates alternating magnetic fields in order to transmit signals to the RFID transponder. The RFID transponder is designed, after receipt of a corresponding signal from the RFID transceiver unit, to return data, in particular the identifier, a comprehensive signal in response to the RFID transceiver unit, which evaluates it with the evaluation unit and further processes it.

In RFID systems, the RFID transceiver unit generates alternating magnetic fields which are not only intended to transmit the data but can also serve to power the RFID transponder.

An RFID system thus has the advantage that the RFID transponder does not require its own power supply and can therefore be used flexibly. The RFID transponder derives its energy via radio waves or radio waves from the RFID transceiver unit. The RFID transponder is addressed via the antenna arrangement of the RFID transceiver unit and responds to the RFID transceiver unit with information stored in the RFID transponder. The information transmitted by the transponder of the RFID system is received by the antenna arrangement and can then be evaluated in the evaluation unit. The stored information on the transponder contains at least one identifier, namely the identification data, which identifies the RFID transponder.

Since the RFID transponder is detected by radio waves, the system is very robust against environmental influences. Therefore, the RFID transceiver can be used with the RFID transponder in very harsh environments, such as in industrial environments where lubricants are used and, for example, a high level of contamination can occur.

Since the identification of the RFID transponder is carried out via radio waves, in contrast to an optical solution, no line of sight between the key device and the device is necessary. Therefore, the key device and the device can be completely encapsulated to protect them from harmful environmental influences.

In a development of the invention, the external device has at least one RFID transponder.

In a further development of the invention, the data of the key device can be transferred to a key station.

The key station is arranged, for example, outside a security area. The key station receives the at least one key device in a recording. The recording may be, for example, a tray or a slot. The key station is designed to read out the key device and to evaluate the data of the key device in an evaluation unit, or to forward it to a system.

In a further development of the invention, it is provided that the key device or devices can only be removed from authorized persons from the key station. For example, authorized persons, such as operators or service personnel, must log on to the key station using an electronic identity card or other means of identification to obtain a key device. When the key device is removed, a start identifier is sent, for example, from the key station to the key device.

The key devices can also be assigned to specific persons, so that a specific key device can only be picked up or taken by a specific person.

In a development of the invention, the key station can be connected to an ERP system.

An enterprise resource planning system (ERP) describes a system that has the entrepreneurial task of planning and allocating resources such as capital, personnel, operating resources, materials, information and communication technology, IT systems in a timely manner and according to the purpose of the business Taxes. The aim is to ensure an efficient operational value-added process and a constantly optimized management of the business and operational processes.

One of the core functions of ERP systems in manufacturing companies is, for example, material requirements planning, which must ensure that all materials required for the manufacture of the products and components are available in the right place, at the right time and in the right quantity.

An ERP system is a complex system, such as a variety of inter-communicating application software or IT systems used to support resource planning throughout the enterprise. Complex ERP systems are often divided into sub-systems, such as application modules, that can be combined with each other depending on the needs of the enterprise.

In a further development of the invention, the data has a time specification. This ensures that the data originated in the device. This allows the data to be sorted one after the other and evaluated accordingly.

Furthermore, an access area to the device is optionally provided. The access area is a spatially limited access area with an access station, such as a gate or a door. Only through this access area is the security area of the system accessible. It can also be arranged several access areas. Especially with very large systems with, for example, multiple security areas, this can be useful.

The access station may for example comprise electronic means, such as an electronic door switch, whereby it is possible to check whether the access area has been opened.

The invention will be explained below with regard to further advantages and features with reference to the accompanying drawings with reference to embodiments. The figures of the drawing show in:

1 a system with a mobile key device;

2 a system and a system with several mobile key devices.

In the following figures, identical parts are provided with identical reference numerals.

1 shows a system 1 with a mobile key device 2 for reading and writing data from at least one external device 3 a plant 4 , wherein the data at least identification data for the device to be checked 3 and wherein the mobile key device 2 a first transceiver unit 5 by means of which the data is wirelessly between the device 3 to the key device 2 are transferable, the key device 2 a first memory 6 has, the key device 2 at least one first secure channel 7 comprising a first evaluation unit 8th , and the first transceiver unit 5 and at least one second channel 12 comprising a second evaluation unit 13 and a second transceiver unit 10 using the data wirelessly between the device 3 to the key device 2 are transferable, the data least with one of the transceiver units 5 . 10 are transferable.

It is, for example, a handy key device 2 that can easily be carried or carried by a person. Optionally, the key device points 2 Operating elements and optionally at least one display element.

The evaluation units 8th and 13 are formed for example by a microcontroller. The memory 6 is intended to store data on the key device. Optionally, there is a second memory 11 provided with the second evaluation 13 connected is. This makes it possible to store data redundantly.

At the plant 4 can it according to 2 For example, to act an industrial plant for the production of products. For example, this is part of a production plant for automobiles. The system can also be part of a machine or a system with several machines. The attachment 4 has a security area that is not accessible to people 18 may be entered when the plant is active, as the person 18 can be endangered by parts of the plant. For example, the system is one or more robots 20 whose dangerous area of influence lies within the safety area.

Next is optionally an access area 21 to the devices 3 in the plant 4 intended. The access area 21 is a spatially limited access area 21 with an access station, for example a gate or a door. Only through this access area 21 is the security area of the plant 4 accessible. It can also have multiple access areas 21 be arranged. Especially for very large plants 4 This can be useful with, for example, several security areas.

The access station may for example comprise electronic means, such as an electronic door switch, whereby it is possible to check whether the access area 21 was opened.

The at least one external device 3 is located, for example, within the security area. The device or devices 3 For example, they are arranged stationary so that they can not be removed. It can also be mobile devices 3 act. The device 3 is for example in the plant 4 integrated.

The device 3 according to 1 contains at least data for identification via the first transceiver 5 or the second transceiver unit 10 can be retrieved wirelessly from the key device. At the first transceiver unit 5 or the second transceiver unit 10 it is preferably a radio transmitting / receiving unit.

At the device 3 it may be, for example, a valve, an actuator, a sensor or other electrical or electronic device.

A first type of respective data is preferably with the first transceiver unit 5 transfer. For example, these data may be control data for the device 3 act by the key device 2 to the device 3 be transmitted.

A second type of respective data is preferably with the second transceiver unit 10 transfer. In addition to the data for identification, device status information and / or device data is sent to the key device 2 transfer.

According to 2 becomes the key device of the person 18 carried along to the devices 3 to reach. While the person 18 the key device 2 With it, the plant can 4 for example, be disabled.

Transferring data between the key device 2 and the device 3 can be done automatically. Ie. if the person is 18 the device 3 has approached a certain minimum distance, the data of the device 3 automatically from the key device 2 read.

The person 18 that is the key device 2 It can be optional with the key device 2 even from the device 3 transfer the data or the data to the device 3 transfer. For this purpose, for example, be provided that of the person 18 For example, an action, such as pressing a key on the key device 2 must be performed. This ensures that the data of the device 3 through the key device 2 not automatically transmitted, but always an active action of the person 18 necessary to transfer the data.

Usually are according to 2 a variety of devices 3 available. Especially with large systems 4 or large security areas or large facilities 4 with a plurality of security areas are multiple devices 3 available. It can be provided that the key device at least data from a device 3 transfers. However, it is also provided in particular that a key device 2 from several devices 3 Transfers data. In particular, it is provided that the key device 2 from several devices 3 transmits data in a specific order.

The communication between the key device 2 and the device 3 can take place unidirectionally or bidirectionally. In the simplest case, simply reading the data of the device is sufficient 3 , However, it may also be provided that of the key device 2 Data in the device 3 to be written.

According to 1 indicates the first transmitting / receiving unit 5 a low range and the second transceiver 10 a high range.

As a result, by the first transmitting / receiving unit 5 not automatically transmit data when the key device 2 too far away from the device 3 located.

However, via the second transceiver unit 10 a data transmission to be made, with a long range so a greater distance to the device 3 as in the first transceiver unit 5 ,

This can be done via the second transceiver unit 10 before a data transmission be performed before this with the first transceiver unit 5 is possible if the person 18 according to 2 with the key device 2 the device 3 approaches.

According to 1 is the first channel 7 trained to send and receive secure data, and the second channel 12 trained to send and receive non-secure data.

A first type of respective secure data is preferably with the first transceiver unit 5 transfer.

For example, these data may be control data for the device 3 act by the key device 2 to the device 3 be transmitted. For example, the data may include machine control commands such as shutdown commands or control commands. The data may also be identification data or authorization data for a user or a person 18 act.

The data may also be key data, for example to keep a machine in a non-activated state and to avoid an unsafe start of the machine.

A second type of respective non-secure data is preferably with the second transceiver unit 10 transfer.

In addition to the data for identification, device status information and / or device data is sent to the key device 2 transfer. This can be operating data, process data or similar data. For example, the device status information is error messages or operational behavior data such as device downtime. For example, these are pressure values of a valve.

It can also be confirmation data or protocol data of the device 3 act on the key device 2 be transmitted. Furthermore, the data may also be maintenance data or production data generated by the device 3 to the key device 2 be transmitted.

According to 1 is the first transmitting / receiving unit 5 and the second transceiver unit 10 one RFID transmitting / receiving unit each 15 , According to 1 assigns the external device 3 in each case at least one RFID transponder 16 on.

According to 2 are the data of the key device 2 to a key station 17 transferable. The key station 17 For example, it is located outside a security area. The key station 17 takes that at least one key device 2 in a recording. The recording may be, for example, a tray or a slot. The key station 17 is designed to be the key device 2 read out and the data of the key device 2 evaluate in an evaluation or forward to a system.

According to 2 It is envisaged that the key device (s) 2 only by authorized persons 18 from the key station 17 can be removed. For example, the authorized persons must 18 such as operators or service people, using an electronic identity card or other means of identification at the key station 17 log in to a key device 2 to obtain. When removing the key device 2 for example, from the key station 17 a start identifier to the key device 2 Posted.

The key devices 2 can also be used by certain people 18 be assigned so that a particular key device 2 only from a specific person 18 can be taken or taken. According to 2 is the key station 17 with an ERP system 19 connectable.

LIST OF REFERENCE NUMBERS

1

 system

2

 key device

3

 external device

4

 investment

5

 first transmitting / receiving unit

6

 first memory

7

 first safe channel

8th

 first evaluation unit

10

 second transmitting / receiving unit

11

 second memory

12

 second channel

13

 second evaluation unit

15

 RFID transmitter / receiver units

16

 RFID transponder

17

 key station

18

 person

19

 ERP system

20

 robot

21

 access area

QUOTES INCLUDE IN THE DESCRIPTION

This list of the documents listed by the applicant has been generated automatically and is included solely for the better information of the reader. The list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions.

Cited patent literature

• DE 102010011766 A1 [0002]

Cited non-patent literature

• Standard EN / ISO 1384-1 [0005]
• Standard EN / IEC 62061 [0005]

Claims (9)

System with a mobile key device ( 2 ) for reading and writing data from at least one external device ( 3 ) of a plant ( 4 ), where the data contains at least identification data for the device to be checked ( 3 ) and wherein the mobile key device ( 2 ) a first transceiver unit ( 5 ) by means of which the data is transmitted wirelessly between the device ( 3 ) to the key device ( 2 ) are transferable, characterized in that the key device ( 2 ) a first memory ( 6 ), the key device ( 2 ) at least one first secure channel ( 7 ), with a first evaluation unit ( 8th ) and the first transceiver unit ( 5 ), and at least one second channel ( 12 ), with a second evaluation unit ( 13 ) and a second transceiver unit ( 10 ) by means of the data wirelessly between the device ( 3 ) to the key device ( 2 ) are transferable, wherein the data are transferable at least with one of the transmitting / receiving units. System according to claim 1, characterized in that the first transceiver unit ( 5 ) has a low range and the second transceiver unit ( 10 ) has a high range. System according to at least one of the preceding claims, characterized in that the first secure channel ( 7 ) is configured to send and receive secure data and the second channel ( 12 ) is configured to send and receive non-secure data. System according to at least one of the preceding claims, characterized in that the first transceiver unit ( 5 ) and the second transceiver unit ( 10 ) in each case an RFID transceiver unit ( 15 ). System according to at least one of the preceding claims, characterized in that the external device ( 3 ) at least one RFID transponder ( 16 ) having. System according to at least one of the preceding claims, characterized in that the data of the key device ( 2 ) to a key station ( 17 ) are transferable. System according to at least one of the preceding claims, characterized in that the key device ( 2 ) a key station ( 17 ) and only authorized persons ( 18 ) from the key station ( 17 ) is removable. System according to at least one of claims 6 to 7, characterized in that the key station ( 17 ) with an ERP system ( 19 ) is connectable. System according to at least one of the preceding claims, characterized in that the data have a time indication.

Images