CN103941718A - Detection system for two-out-of-two fault safe output structure - Google Patents
Detection system for two-out-of-two fault safe output structure Download PDFInfo
- Publication number
- CN103941718A CN103941718A CN201410050090.5A CN201410050090A CN103941718A CN 103941718 A CN103941718 A CN 103941718A CN 201410050090 A CN201410050090 A CN 201410050090A CN 103941718 A CN103941718 A CN 103941718A
- Authority
- CN
- China
- Prior art keywords
- microprocessor
- output
- driving circuit
- back production
- circuit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Safety Devices In Control Systems (AREA)
- Testing Electric Properties And Detecting Electric Faults (AREA)
Abstract
Disclosed is a detection system for a two-out-of-two fault safe output structure. The detection system includes a first microprocessor, a second microprocessor, an output circuit, an output driving circuit, an output driving recovery circuit, and a safety controller. The safety controller is connected with a power-supply anode and the output driving circuit. The output driving circuit controls on-off of the output circuit. The output driving recovery circuit recovers the output driving circuit so that two paths of recovery signals are obtained. The first microprocessor and the second microprocessor control on-off of the output driving circuit and receive the recovery signals and vote to output a first feedback control signal to the safety controller. The safety controller receives the first feedback control signal and controls on-off the safety controller. The detection system for the two-out-of-two fault safe output structure realizes testing of switching capacity of the output driving circuit through performing recovery on the output driving circuit; and through detection of connection points of a safety relay and an output relay, error output resulted from mixed lines is prevented.
Description
Technical field
the present invention relates to robotization safety control technology field, relate in particular to a kind of two and get two failure safe export structure detection systems.
Background technology
The current safety control system overwhelming majority is computer control system, once system cisco unity malfunction is likely exported dangerous control signal to controlled device, thereby causes casualties and property loss.Therefore the field such as railway, nuclear power, petrochemical industry all inevitably can relate to the problem of Safety output, and the accurate reliability of Safety output directly plays conclusive effect for whole control system.
Current, failure safe is exported common structure has 2 to get 2,3 and get 2 structures, generally only uses combined fault safety technique, and safety practice is relatively single, lacks multi-ensuring.
In prior art, there is the hidden danger of swinging cross output in on-the-spot opertaing device, be circuit series-parallel connection make the mistake output safeguard function very weak, once circuit swinging cross is just risky if any output, causes and does not answer relay picked up to pick up, cause misoperation, if this misoperation occurs in track switch, will cause track switch to misroute moving, consequence is very serious.
In prior art, having defect in context of detection, is all that self processor completes to the back production of output, the mistake collection that can not avoid the system mistake of microprocessor self to cause.The design of simultaneously self circuit being carried out to self-inspection lacks again real-time, can not find the existence of fault the very first time.
So at present in the urgent need to a kind of safe enough and can carry out two of real-time self-inspection to self circuit and get two failure safe export structure and detection methods thereof.
Summary of the invention
?the invention provides a kind of two and get two failure safe export structure detection systems, it is characterized in that, comprise that first microprocessor, the second microprocessor, output circuit, output driving circuit, output drive back production circuit and safety governor;
Described safety governor connects a positive source and described output driving circuit, and described output driving circuit and described output circuit are connected and control the break-make of described output circuit; Described first microprocessor, the second microprocessor connect respectively described output driving circuit and control the break-make of described output driving circuit;
Described output drives back production circuit to connect described output driving circuit and described output driving circuit back production is obtained to two-way back production signal, described output drives back production circuit that described two-way back production signal is sent to respectively to described first microprocessor, the second microprocessor, described first microprocessor, the second microprocessor receive respectively described back production signal extremely described safety governor of voting output one first feedback control signal, and described safety governor receives described the first feedback control signal and controls self conducting or disconnection.
Preferably, described output circuit comprises an output relay, and described output driving circuit comprises output winding negative pole driving circuit, the anodal driving circuit of output winding;
Described coil negative pole driving circuit, the anodal driving circuit of output winding connect respectively coil negative pole, the positive pole of described output relay, described first microprocessor, the second microprocessor connect respectively the anodal driving circuit of described output winding, output winding negative pole driving circuit and export a control signal to the anodal driving circuit of described output winding, output winding negative pole driving circuit respectively, and the anodal driving circuit of described output winding, output winding negative pole driving circuit receive described control signal and carry out conducting or disconnection.
Preferably, described output drives back production circuit to comprise that anodal back production circuit and the negative pole of driving drives back production circuit, described anodal driving back production circuit connects the anodal driving circuit of described output winding and anodal driving circuit back production obtains an anodal back production signal to described output winding, and described negative pole drives back production circuit to connect described output winding negative pole driving circuit and back production obtains a negative pole back production signal to described output winding negative pole driving circuit.
Preferably, described first microprocessor, the second microprocessor sends respectively the first detection level signal, second detects level signal to the anodal driving circuit of described output winding, output winding negative pole driving circuit, the described anodal back production circuit that drives, negative pole drives back production circuit respectively to the anodal driving circuit of described output winding, output winding negative pole driving circuit carries out back production and obtains positive level back production signal, negative level back production signal, described first microprocessor, the second microprocessor is according to described negative level back production signal, positive level back production signal voting output one second feedback control signal is to described safety governor, described safety governor receives described the second feedback control signal and controls self conducting or disconnection.
Preferably, it also comprises a pulse signal generator, described pulse signal generator is connected with described first microprocessor, the second microprocessor respectively, and described pulse signal generator sends self-inspection pulse signal in real time to described first microprocessor, the second microprocessor respectively;
Described first microprocessor receives described self-inspection pulse signal and exports the first quick short pulse signal to the anodal driving circuit of described output winding, described the second microprocessor receives described self-inspection pulse signal and exports the second quick short pulse signal to described output winding negative pole driving circuit, the anodal driving circuit of described output winding, output winding negative pole driving circuit is at the described first quick short pulse signal, under the driving of the second quick short pulse signal, produce the first quick short pulse feedback signal, the second quick short pulse feedback signal, described negative pole drives back production circuit, the second quick short pulse feedback signal described in the back production of anodal driving back production circuit difference, the first quick short pulse feedback signal is also exported to described first microprocessor, the second microprocessor, described first microprocessor, the second microprocessor is according to the described second quick short pulse feedback signal, the first quick short pulse feedback signal voting output the 3rd feedback control signal are to described safety governor, described safety governor receives described the 3rd feedback control signal and controls self conducting or disconnection.
Preferably, described safety governor comprises a safety relay, described safety relay is connected described pulse signal generator with a tip node of output relay, another contact of described safety relay connects described first microprocessor by contact back production circuit respectively, the second microprocessor, the other end contact of described output relay connects described first microprocessor by contact back production circuit respectively, the second microprocessor, described first microprocessor, the second microprocessor contact state that back production obtains according to each contact back production circuit voting output the 4th feedback control signal is to described safety governor.
Preferably, described positive electric drive circuit and negative electricity driving circuit are respectively optical relay, and described optical relay comprises metal-oxide-semiconductor and photodiode, and described photodiode is by described first microprocessor or the second microprocessor driven.
Preferably, described each back production testing circuit comprises photodiode and phototriode, and described phototriode is connected with described first microprocessor or the second microprocessor and outputs signal to described first microprocessor or the second microprocessor.
Preferably, described safety relay is gravitation type relay.
Provided by the invention two get two failure safe export structure detection systems gets on the basis of two failure safes outputs can realize two, carry out back production by the coil two ends to output relay, realize the test to the anodal driving circuit of output winding, negative pole driving circuit switching capability, improved greatly the reliability of output; By the contact of safety relay and output relay is detected, avoid the mistake causing because of swinging cross to export simultaneously, swinging cross is had to good safeguard function.
Certainly, implement arbitrary product of the present invention and might not need to reach above-described all advantages simultaneously.
Brief description of the drawings
Fig. 1 two gets two failure safe export structure detection system structural representations for what the embodiment of the present invention provided;
Fig. 2 two gets two failure safe export structure detection system Static Detection sequential charts for what the embodiment of the present invention provided;
Fig. 3 two gets two failure safe export structure detection system dynamic pulse schematic diagram for what the embodiment of the present invention provided;
Fig. 4 two gets two failure safe export structure detection system detection of dynamic sequential charts for what the embodiment of the present invention provided.
Specific embodiment
The embodiment of the present invention provides a kind of two to get two failure safe export structure detection systems, and it comprises that first microprocessor, the second microprocessor, output circuit, output driving circuit, output drive back production circuit and safety governor;
Described safety governor connects a positive source and described output driving circuit, and described output driving circuit and described output circuit are connected and control the break-make of described output circuit; Described first microprocessor, the second microprocessor connect respectively described output driving circuit and control the break-make of described output driving circuit;
Described output drives back production circuit to connect described output driving circuit and described output driving circuit back production is obtained to two-way back production signal, described output drives back production circuit that described two-way back production signal is sent to respectively to described first microprocessor, the second microprocessor, described first microprocessor, the second microprocessor receive respectively described back production signal extremely described safety governor of voting output one first feedback control signal, and described safety governor receives described the first feedback control signal and controls self conducting or disconnection.
As shown in Figure 1, described output circuit comprises an output relay, and described output driving circuit comprises output winding negative pole driving circuit, the anodal driving circuit of output winding;
Described coil negative pole driving circuit, the anodal driving circuit of output winding connect respectively coil negative pole, the positive pole of described output relay, described first microprocessor, the second microprocessor connect respectively the anodal driving circuit of described output winding, output winding negative pole driving circuit and export a control signal to the anodal driving circuit of described output winding, output winding negative pole driving circuit respectively, and the anodal driving circuit of described output winding, output winding negative pole driving circuit receive described control signal and carry out conducting or disconnection.
In the present embodiment, described output drives back production circuit to comprise that anodal back production circuit and the negative pole of driving drives back production circuit, described anodal driving back production circuit connects the anodal driving circuit of described output winding and anodal driving circuit back production obtains an anodal back production signal to described output winding, and described negative pole drives back production circuit to connect described output winding negative pole driving circuit and back production obtains a negative pole back production signal to described output winding negative pole driving circuit.
Described first microprocessor, the second microprocessor sends respectively the first detection level signal, second detects level signal to the anodal driving circuit of described output winding, output winding negative pole driving circuit, the described anodal back production circuit that drives, negative pole drives back production circuit respectively to the anodal driving circuit of described output winding, output winding negative pole driving circuit carries out back production and obtains positive level back production signal, negative level back production signal, described first microprocessor, the second microprocessor is according to described negative level back production signal, positive level back production signal voting output one second feedback control signal is to described safety governor, described safety governor receives described the second feedback control signal and controls self conducting or disconnection.
In the present embodiment, safety governor comprises a safety relay, the anodal driving circuit of safety coil and safety coil negative pole driving circuit, as shown in Figure 1, first microprocessor is microprocessor A, the second microprocessor is microprocessor B, the positive electric drive circuit of output relay and output relay negative electricity driving circuit are optical relay U2 and optical relay U4, and optical relay comprises light emitting diode and metal-oxide-semiconductor, in the time that system need to be exported, microprocessor A and microprocessor B output one control signal to the anodal driving circuit of safety coil, safety coil negative pole driving circuit, the coil of safety relay obtains electric, safety relay obtains after electric and picks up at coil, microprocessor A simultaneously, microprocessor B respectively two another control signals controls respectively optical relay U2, the lumination of light emitting diode of U5, make optical relay U2, the metal-oxide-semiconductor conducting of U5, now, positive electricity can arrive relay coil by the metal-oxide-semiconductor of safety relay contact and optical relay U2, relay coil is obtained electric, relay energized.
In the present embodiment, safety relay K2 is gravitation type relay, in the time of gravitation type relay dead electricity, relies on the gravity failure to the safe side side of self.
In the present embodiment, when microprocessor A, microprocessor B detect that any signal in anodal back production signal, negative pole back production signal is when wrong, the coil losing electricity that microprocessor A and microprocessor B control safety relay disconnects safety relay and enters safe condition.As microprocessor A and microprocessor B do not detect the mistake of anodal back production signal, negative pole back production signal, it is in running order that the coil that microprocessor and A microprocessor B control safety relay obtains the electric safety relay that makes.
The present embodiment relay coil state back production microprocessor A and the inspection mutually of microprocessor B intersection, the mistake collection of avoiding the system mistake of microprocessor self to cause.
The detection system that the present embodiment provides also comprises a pulse signal generator, described pulse signal generator is connected with microprocessor A, microprocessor B respectively, and described pulse signal generator sends self-inspection pulse signal in real time to microprocessor A, microprocessor B respectively;
Microprocessor A receives described self-inspection pulse signal and exports the first quick short pulse signal to the anodal driving circuit of described output winding, microprocessor B receives described self-inspection pulse signal and exports the second quick short pulse signal to described output winding negative pole driving circuit, the anodal driving circuit of described output winding, output winding negative pole driving circuit is at the described first quick short pulse signal, under the driving of the second quick short pulse signal, produce the first quick short pulse feedback signal, the second quick short pulse feedback signal, described negative pole drives back production circuit, the second quick short pulse feedback signal described in the back production of anodal driving back production circuit difference, the first quick short pulse feedback signal is also exported to microprocessor A, microprocessor B, microprocessor A, microprocessor B is according to the described second quick short pulse feedback signal, the first quick short pulse feedback signal voting output the 3rd feedback control signal are to described safety governor, described safety governor receives described the 3rd feedback control signal and controls self conducting or disconnection.
Described safety governor comprises a safety relay, described safety relay is connected described pulse signal generator with a tip node of output relay, another contact of described safety relay connects microprocessor A, microprocessor B by contact back production circuit respectively, the other end contact of described output relay connects microprocessor A, microprocessor B by contact back production circuit respectively, and microprocessor A, the microprocessor B contact state that back production obtains according to each contact back production circuit voting output the 4th feedback control signal is to described safety governor.
Microprocessor A and microprocessor B be the contact state of back production safety relay respectively, arbitrary contact state and safety relay output are inconsistent, single microprocessor just can control system enter safe state, microprocessor A and microprocessor B also forward and backward contact state of back production output relay all simultaneously, arbitrary contact state and relay output are inconsistent, and single microprocessor just can control system enter safe state.
Dynamic pulse signal generator Φ 1 provided by the invention can produce 4 kinds of signals, PHI1, PHI2, PHI1R, PHI2R, wherein PHI1 and PHI2 signal dutyfactor are 25%, both spend in phase phasic difference 180, and PHI1R and PHI2R signal dutyfactor are 50%, and both spend in phase phasic difference 180, PHI1R is identical with PHI1 phase place, and PHI2R is identical with PHI2 phase place;
Pulse signal PHI1R is connected with microprocessor B with microprocessor A respectively, pulse signal PHI2R is connected with microprocessor B with microprocessor A respectively, in the time that microprocessor detects that the amplitude of PHI1R and PHI2R exceedes certain limit with the amplitude deviation of expection storage, system enters safe condition.
In the forward and backward contact back production of safety relay and output relay, all seal in dynamic pulse signal, pulse signal PHI1 seals in front contact, pulse signal PHI2 seals in back contact, when microprocessor back production to Chang Weigao open a way, often for low be short circuit, normal signal should be an encoded radio, the encoded radio difference of front and back contact, avoids the mistake causing because of swinging cross to export, and swinging cross is had to good safeguard function.
In the present embodiment, self-inspection pulse signal can be PHI1R, also can be PHI2R, in the present embodiment, PHI1R and PHI2R signal dutyfactor are 50%, pulse signal PHI1R is connected with microprocessor B with microprocessor A respectively, pulse signal PHI2R is connected with microprocessor B with microprocessor A respectively, in the time that microprocessor detects that the amplitude of PHI1R and PHI2R exceedes certain limit with the amplitude deviation of expection storage, enters safe condition by the coil losing electricity of controlling safety relay.Certainly the signal for microprocessor A and microprocessor B self-inspection that the present embodiment also provides is not defined as pulse signal, can be the signal of other kinds yet, and as sine wave signal, serrated signal etc., the present embodiment is only of the present invention one embodiment preferably.
The present embodiment, is sent and is detected level signal and detect the detection for Jing Tai by microprocessor A and microprocessor B, Static Detection sequential as shown in Figure 2,
Output relay state description:
1, output relay dead electricity, test period is opened the anodal driving circuit of output winding, output winding negative pole driving circuit successively, and retaking of a year or grade is to correct state;
2, output relay obtains electricly, and the contact back production of the anodal back production of the back production of output relay negative pole, output relay and output relay is correct;
3, the anodal driving circuit of output winding and output winding negative pole driving circuit are not exported, but back production detects the anodal driving circuit output of output winding.
Error reason:
The anodal driving circuit normality of-output winding
-anodal back production the circuit that drives can only detect enabled state
4, the anodal driving circuit of output winding and output winding negative pole driving circuit are not exported, and have output but back production detects the anodal driving circuit of output winding and output winding negative pole driving circuit, and output relay does not have adhesive;
Error reason:
The anodal driving circuit of-output winding and output winding negative pole driving circuit are normally closed, and anodal back production circuit and the negative pole of driving drives back production electric circuit inspection on off state
-anodal back production circuit and the negative pole of driving drives back production circuit only to detect the state of the anodal driving circuit of output winding and output winding negative pole driving circuit
5, the test level of the anodal driving circuit of output winding has an output, but there is no corresponding feedback.
Error reason:
The anodal driving circuit of-output winding can not switch
-the anodal back production circuit that drives can not identification switch state.
6, output relay should adhesive, and retaking of a year or grade only detects the conducting of an output winding negative pole driving circuit, and output relay falls;
Error reason: the anodal driving circuit of output winding lost efficacy
7, do not output control signals to the anodal driving circuit of output winding, output winding negative pole driving circuit, have output but back production detects output relay, the retaking of a year or grade of output relay contact detects excited state
Error reason: the anodal driving circuit of output winding and output winding negative pole driving circuit are normally closed.(optical relay adhesion)
8, output relay should adhesive, there is no adhesive but back production detects relay.
Error reason:
-lack 24V power supply
-or the anodal driving circuit of output winding can not closure with output winding negative pole driving circuit.
9, the anodal driving circuit of output winding and output winding negative pole driving circuit are not exported, and output retaking of a year or grade is correct, but the contact retaking of a year or grade of output relay is born.
Error reason:
-output relay contact keeps adhesion
The power lead of-output relay contact back production opens circuit
Detection of dynamic is refered in particular to output relay and is picked up the detection under state; Output relay (being mainly mechanical relay) coil obtains under electricity condition, and contact picks up.Because the mechanical relay life-span is long less than optical relay, this just requires mechanical relay in the time of optical relay self-inspection necessarily can not pick up (if now picked up, the one, affect the mechanical relay life-span, the 2nd, may cause misoperation).The detection principle of optical relay is: the response time of optical relay is than fast many of mechanical relay, in the time of optical relay conducting, mechanical relay is conducting not, can make only (4ms left and right) output self-test signal within the blink of the response time faster than mechanical relay of output system, and now mechanical relay can not move, the intersection back production signal that at this moment detects optical relay just can judge the state of optical relay.
When detection of dynamic, microprocessor A and microprocessor B synchronously export dynamic pulse at rising edge and the negative edge of outside PHI1R, and as shown in Figure 3, detection of dynamic sequential chart as shown in Figure 4 for dynamic pulse schematic diagram;
Detection of dynamic sequential relay status is described:
1, output relay obtains electricly, and the anodal driving circuit of output winding and output winding negative pole driving circuit are periodically exported dynamic pulse simultaneously, and two ends back production and the back production of output relay contact of output relay coil are correct;
2, the anodal driving circuit of output winding is exported effective driving pulse, but the anodal back production circuit that drives does not have back production to arrive corresponding feedback (output winding negative pole driving circuit in like manner);
Error reason:
The anodal driving circuit of-output winding can not switch
-output winding negative pole driving circuit can not identification switch state.
3, the anodal driving circuit of output winding and output winding negative pole driving circuit are all exported effective driving pulse, but all there is no corresponding feedback;
Error reason:
-lack 24V power supply
-or the anodal driving circuit of output winding can not closure with output winding negative pole driving circuit.
4, two input back production circuit all detect output switch maintenance conducting normality, output relay adhesive;
Error reason:
The anodal driving circuit of-output winding and output winding negative pole driving circuit normally closed (optical relay adhesion), input back production is on off state
-input back production has only detected on off state
Provided by the invention two get two failure safe export structure detection systems gets on the basis of two failure safes outputs can realize two, by back production is carried out in the two ends of output relay, realize the test to output driving circuit switching capability, improved greatly the reliability of output; By the contact of safety relay and output relay is detected, avoid the mistake causing because of swinging cross to export simultaneously, swinging cross is had to good safeguard function.
The disclosed preferred embodiment of the present invention is just for helping to set forth the present invention above.Preferred embodiment does not have all details of detailed descriptionthe, and also not limiting this invention is only described embodiment.Obviously,, according to the content of this instructions, can make many modifications and variations.These embodiment are chosen and specifically described to this instructions, is in order to explain better principle of the present invention and practical application, thereby under making, technical field technician can understand and utilize the present invention well.The present invention is only subject to the restriction of claims and four corner and equivalent.
Claims (9)
1. two get two failure safe export structure detection systems, it is characterized in that, comprise first micro-place
Reason device, the second microprocessor, output circuit, output driving circuit, output drive back production circuit and safety governor;
Described safety governor connects a positive source and described output driving circuit, and described output driving circuit and described output circuit are connected and control the break-make of described output circuit; Described first microprocessor, the second microprocessor connect respectively described output driving circuit and control the break-make of described output driving circuit;
Described output drives back production circuit to connect described output driving circuit and described output driving circuit back production is obtained to two-way back production signal, described output drives back production circuit that described two-way back production signal is sent to respectively to described first microprocessor, the second microprocessor, described first microprocessor, the second microprocessor receive respectively described back production signal extremely described safety governor of voting output one first feedback control signal, and described safety governor receives described the first feedback control signal and controls self conducting or disconnection.
2. as claimed in claim 1 two get two fault export structure detection systems, it is characterized in that, described output circuit comprises an output relay, and described output driving circuit comprises output winding negative pole driving circuit, the anodal driving circuit of output winding;
Described coil negative pole driving circuit, the anodal driving circuit of output winding connect respectively coil negative pole, the positive pole of described output relay, described first microprocessor, the second microprocessor connect respectively the anodal driving circuit of described output winding, output winding negative pole driving circuit and export a control signal to the anodal driving circuit of described output winding, output winding negative pole driving circuit respectively, and the anodal driving circuit of described output winding, output winding negative pole driving circuit receive described control signal and carry out conducting or disconnection.
3. as claimed in claim 2 two get two fault export structure detection systems, it is characterized in that, described output drives back production circuit to comprise that anodal back production circuit and the negative pole of driving drives back production circuit, described anodal driving back production circuit connects the anodal driving circuit of described output winding and anodal driving circuit back production obtains an anodal back production signal to described output winding, and described negative pole drives back production circuit to connect described output winding negative pole driving circuit and back production obtains a negative pole back production signal to described output winding negative pole driving circuit.
4. as claimed in claim 3 two get two failure safe output systems, it is characterized in that, described first microprocessor, the second microprocessor sends respectively the first detection level signal, second detects level signal to the anodal driving circuit of described output winding, output winding negative pole driving circuit, the described anodal back production circuit that drives, negative pole drives back production circuit respectively to the anodal driving circuit of described output winding, output winding negative pole driving circuit carries out back production and obtains positive level back production signal, negative level back production signal, described first microprocessor, the second microprocessor is according to described negative level back production signal, positive level back production signal voting output one second feedback control signal is to described safety governor, described safety governor receives described the second feedback control signal and controls self conducting or disconnection.
5. as claimed in claim 4 two get two failure safe output systems, it is characterized in that, it also comprises a pulse signal generator, described pulse signal generator is connected with described first microprocessor, the second microprocessor respectively, and described pulse signal generator sends self-inspection pulse signal in real time to described first microprocessor, the second microprocessor respectively;
Described first microprocessor receives described self-inspection pulse signal and exports the first quick short pulse signal to the anodal driving circuit of described output winding, described the second microprocessor receives described self-inspection pulse signal and exports the second quick short pulse signal to described output winding negative pole driving circuit, the anodal driving circuit of described output winding, output winding negative pole driving circuit is at the described first quick short pulse signal, under the driving of the second quick short pulse signal, produce the first quick short pulse feedback signal, the second quick short pulse feedback signal, described negative pole drives back production circuit, the second quick short pulse feedback signal described in the back production of anodal driving back production circuit difference, the first quick short pulse feedback signal is also exported to described first microprocessor, the second microprocessor, described first microprocessor, the second microprocessor is according to the described second quick short pulse feedback signal, the first quick short pulse feedback signal voting output the 3rd feedback control signal are to described safety governor, described safety governor receives described the 3rd feedback control signal and controls self conducting or disconnection.
6. as claimed in claim 5 two get two failure safe output systems, it is characterized in that, described safety governor comprises a safety relay, described safety relay is connected described pulse signal generator with a tip node of output relay, another contact of described safety relay connects described first microprocessor by contact back production circuit respectively, the second microprocessor, the other end contact of described output relay connects described first microprocessor by contact back production circuit respectively, the second microprocessor, described first microprocessor, the second microprocessor contact state that back production obtains according to each contact back production circuit voting output the 4th feedback control signal is to described safety governor.
7. as described in any one in claim 1-6, two get two failure safe output systems, it is characterized in that, described positive electric drive circuit and negative electricity driving circuit are respectively optical relay, described optical relay comprises metal-oxide-semiconductor and photodiode, and described photodiode is by described first microprocessor or the second microprocessor driven.
8. as described in any one in claim 1-6, two get two failure safe output systems, it is characterized in that, described each back production testing circuit comprises photodiode and phototriode, and described phototriode is connected with described first microprocessor or the second microprocessor and outputs signal to described first microprocessor or the second microprocessor.
9. as described in any one in claim 6, two get two failure safe output systems, it is characterized in that, described safety relay is gravitation type relay.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410050090.5A CN103941718B (en) | 2014-02-13 | 2014-02-13 | A kind of two take two failure safe export structure detecting systems |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410050090.5A CN103941718B (en) | 2014-02-13 | 2014-02-13 | A kind of two take two failure safe export structure detecting systems |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103941718A true CN103941718A (en) | 2014-07-23 |
| CN103941718B CN103941718B (en) | 2017-07-11 |
Family
ID=51189426
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410050090.5A Active CN103941718B (en) | 2014-02-13 | 2014-02-13 | A kind of two take two failure safe export structure detecting systems |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103941718B (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104386091A (en) * | 2014-09-23 | 2015-03-04 | 浙江众合机电股份有限公司 | Rail traffic safety control circuit and system |
| CN105446251A (en) * | 2016-01-18 | 2016-03-30 | 株洲南车时代电气股份有限公司 | A safety digital quantity input system and a signal processing method thereof |
| CN105652771A (en) * | 2016-03-07 | 2016-06-08 | 株洲南车时代电气股份有限公司 | Safety on-off output system |
| CN108693805A (en) * | 2016-06-14 | 2018-10-23 | 浙江众合科技股份有限公司 | A kind of fail-safe computer output control system |
| CN112631256A (en) * | 2020-12-29 | 2021-04-09 | 浙江中控技术股份有限公司 | Switching value output module with safe function and diagnosis processing method |
| CN112748688A (en) * | 2020-12-30 | 2021-05-04 | 卡斯柯信号有限公司 | Vehicle-mounted system output control circuit based on safety relay and method thereof |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101694574A (en) * | 2009-10-15 | 2010-04-14 | 北京全路通信信号研究设计院 | Double-port controlled driving circuit |
| CN101913369A (en) * | 2010-07-23 | 2010-12-15 | 上海亨钧科技有限公司 | Signal execution unit of computer interlock system and working method thereof |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN103297008A (en) * | 2013-05-16 | 2013-09-11 | 中国铁道科学研究院 | Isolated-type double-break-output intelligent drive board and drive method |
-
2014
- 2014-02-13 CN CN201410050090.5A patent/CN103941718B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101694574A (en) * | 2009-10-15 | 2010-04-14 | 北京全路通信信号研究设计院 | Double-port controlled driving circuit |
| CN101913369A (en) * | 2010-07-23 | 2010-12-15 | 上海亨钧科技有限公司 | Signal execution unit of computer interlock system and working method thereof |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN103297008A (en) * | 2013-05-16 | 2013-09-11 | 中国铁道科学研究院 | Isolated-type double-break-output intelligent drive board and drive method |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104386091A (en) * | 2014-09-23 | 2015-03-04 | 浙江众合机电股份有限公司 | Rail traffic safety control circuit and system |
| CN104386091B (en) * | 2014-09-23 | 2016-06-22 | 浙江众合科技股份有限公司 | A kind of track traffic safety control circuit and system |
| CN105946902A (en) * | 2014-09-23 | 2016-09-21 | 浙江众合科技股份有限公司 | Static output and static dynamic pulse detection track traffic safety output system |
| CN105446251A (en) * | 2016-01-18 | 2016-03-30 | 株洲南车时代电气股份有限公司 | A safety digital quantity input system and a signal processing method thereof |
| CN105446251B (en) * | 2016-01-18 | 2018-08-24 | 湖南中车时代通信信号有限公司 | A kind of secure digital amount input system and its signal processing method |
| CN105652771A (en) * | 2016-03-07 | 2016-06-08 | 株洲南车时代电气股份有限公司 | Safety on-off output system |
| CN108693805A (en) * | 2016-06-14 | 2018-10-23 | 浙江众合科技股份有限公司 | A kind of fail-safe computer output control system |
| CN112631256A (en) * | 2020-12-29 | 2021-04-09 | 浙江中控技术股份有限公司 | Switching value output module with safe function and diagnosis processing method |
| CN112631256B (en) * | 2020-12-29 | 2022-03-18 | 浙江中控技术股份有限公司 | Switching value output module with safe function and diagnosis processing method |
| CN112748688A (en) * | 2020-12-30 | 2021-05-04 | 卡斯柯信号有限公司 | Vehicle-mounted system output control circuit based on safety relay and method thereof |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103941718B (en) | 2017-07-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103941718A (en) | Detection system for two-out-of-two fault safe output structure | |
| CN103605073B (en) | Based on the self checking method of the relay circuit of single-phase grid-connected inversion system | |
| WO2012026447A1 (en) | Collector box for photovoltaic power generation | |
| CN106124980A (en) | The electrokinetic cell major loop relay fault detecting circuit of a kind of electric automobile and detection method thereof | |
| EP2256777A2 (en) | Movable contact failure detecting device | |
| CN104440923B (en) | A kind of emergent stop signal control system for robot and robot thereof | |
| CN203572931U (en) | Detection feedback circuit | |
| CN102866353A (en) | Device and method for state detection of main loop relay of direct-current power supply system | |
| CN103680274A (en) | Automatic detection method and device for connection wire of electrical experimental facility | |
| CN203038470U (en) | Dual-computer hot-standby traffic signal lamp control system | |
| CN103713232A (en) | Intelligent alarm capable of preventing battery reverse polarity | |
| CN104359196A (en) | Data-center-based multiple-connection air conditioner control system and implementation method | |
| CN205469115U (en) | Point switch control system | |
| CN103746447B (en) | A kind of redundant AC power automatic switching method | |
| CN103669252B (en) | A kind of gate automatically | |
| CN104375034A (en) | On-board equipment on-off output channel online self-checking system of subway signal system | |
| CN202049376U (en) | Universal ship monitoring and alarming system | |
| CN201466672U (en) | Power-fail protection circuit and system of entire automobile controller of electric automobile | |
| CN107785870B (en) | Current transformer and secondary side open circuit protection device thereof | |
| CN203325410U (en) | Novel LED display screen | |
| CN105652191B (en) | A kind of safety return circuit condition monitoring system | |
| CN201955666U (en) | Universal ship-monitoring alarm system | |
| CN106594503A (en) | Safety protection control device of automatic assembly machine based on safety relay | |
| CN203572905U (en) | Automatic monitoring device for train power supply failure | |
| CN204179643U (en) | A kind of three-phase variable frequency motor phase-lacking protective device with self-checking function |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |