CN103941718B - A kind of two take two failure safe export structure detecting systems - Google Patents
A kind of two take two failure safe export structure detecting systems Download PDFInfo
- Publication number
- CN103941718B CN103941718B CN201410050090.5A CN201410050090A CN103941718B CN 103941718 B CN103941718 B CN 103941718B CN 201410050090 A CN201410050090 A CN 201410050090A CN 103941718 B CN103941718 B CN 103941718B
- Authority
- CN
- China
- Prior art keywords
- output
- microprocessor
- circuit
- back production
- drive circuit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Safety Devices In Control Systems (AREA)
- Testing Electric Properties And Detecting Electric Faults (AREA)
Abstract
A kind of two take two failure safe export structure detecting systems, and it includes including first microprocessor, the second microprocessor, output circuit, output driving circuit, output driving back production circuit and safety governor；The safety governor connects a positive source and the output driving circuit, the output driving circuit controls the break-make of the output circuit, the output driving back production circuit obtains two-way back production signal to the output driving circuit back production, the first microprocessor, the second microprocessor control the break-make of the output driving circuit and receive the back production signal and decide by vote one first feedback control signal of output to the safety governor, and the safety governor receives first feedback control signal and controls itself to be turned on or off.The present invention realizes the test to output driving circuit switching capability by carrying out back production to output driving circuit；Detected with the contact of output relay by safety relay simultaneously, it is to avoid the mistake output caused by swinging cross.
Description
Technical field
The present invention relates to automate safety control technology field, more particularly to a kind of two take the inspection of two failure safe export structures
Examining system.
Background technology
The current safety control system overwhelming majority is computer control system, once system cisco unity malfunction, has
May be to the dangerous control signal of controlled device output, so as to cause casualties and property loss.Therefore railway, nuclear power, stone
The fields such as change are all inevitably related to the problem of Safety output, and the accurate reliability of Safety output is for whole control system
Directly play conclusive effect.
Currently, the common structure of failure safe output has 2 to take 2,3 and takes 2 structures, generally only use the safe skill of combined fault
Art, safety measure is relatively single, lacks multi-ensuring.
In the prior art, there is the hidden danger of swinging cross output, i.e. circuit series-parallel connection and cause mistake output in live control device
Safeguard function is very weak, once circuit swinging cross, just risky if any output, causes not answer relay picked up to pick up, and causes
Misoperation, if this misoperation occurs in track switch, will result in track switch and misroutes dynamic, and consequence is very serious.
In the prior art, in context of detection existing defects, the back production to exporting all is that its own processor is completed, it is impossible to avoided
Gathered by mistake caused by the system mistake of microprocessor itself.Real-time is lacked again to the design that itself circuit carries out self-inspection simultaneously,
The presence of failure can not be found the very first time.
So at present in the urgent need to a kind of safe enough and itself circuit can be carried out the two of real-time self-inspection take two failures peace
Full export structure and its detection method.
The content of the invention
Two failure safe export structure detecting systems are taken the invention provides a kind of two, it is characterised in that micro- including first
Processor, the second microprocessor, output circuit, output driving circuit, output driving back production circuit and safety governor；
The safety governor connects a positive source and the output driving circuit, the output driving circuit with it is described
Output circuit is connected and controls the break-make of the output circuit；The first microprocessor, the second microprocessor connect institute respectively
State output driving circuit and control the break-make of the output driving circuit；
The output driving back production circuit connects the output driving circuit and the output driving circuit back production is obtained
The two-way back production signal is respectively sent to first microprocessor by two-way back production signal, the output driving back production circuit
Device, the second microprocessor, the first microprocessor, the second microprocessor receive the back production signal and decide by vote output one respectively
To the safety governor, the safety governor receives first feedback control signal and controls first feedback control signal
Itself is turned on or off.
It is preferred that the output circuit includes an output relay, the output driving circuit includes output winding negative pole
Drive circuit, output winding positive pole drive circuit；
The coil negative pole drive circuit, output winding positive pole drive circuit connect the coil of the output relay respectively
Negative pole, positive pole, the first microprocessor, the second microprocessor connect the output winding positive pole drive circuit, output respectively
Coil negative pole drive circuit and respectively to the output winding positive pole drive circuit, output winding negative pole drive circuit output one control
Signal processed, the output winding positive pole drive circuit, output winding negative pole drive circuit receive the control signal and perform conducting
Or disconnect.
It is preferred that the output driving back production circuit includes that positive pole drives back production circuit to drive back production circuit, institute with negative pole
Stating positive pole drives back production circuit to connect the output winding positive pole drive circuit and returned to the output winding positive pole drive circuit
Adopt and obtain a positive pole back production signal, the negative pole drives back production circuit to connect the output winding negative pole drive circuit and to described
Output winding negative pole drive circuit back production obtains a negative pole back production signal.
It is preferred that the first microprocessor, the second microprocessor send the first detection level signal, the second detection respectively
Level signal to the output winding positive pole drive circuit, output winding negative pole drive circuit, the positive pole drive back production circuit,
Negative pole drives back production circuit to carry out back production to the output winding positive pole drive circuit, output winding negative pole drive circuit respectively and obtains
To positive level back production signal, negative level back production signal, the first microprocessor, the second microprocessor are returned according to the negative level
The number of accepting and believing, positive level back production signal voting one second feedback control signal of output to the safety governor, the security control
Device receives second feedback control signal and controls itself to be turned on or off.
It is preferred that its also include a pulse signal generator, the pulse signal generator respectively with described first micro- place
Reason device, the connection of the second microprocessor, the pulse signal generator is respectively to the first microprocessor, the second microprocessor reality
When send self-inspection pulse signal；
The first microprocessor receives the self-inspection pulse signal and the first quick short pulse signal of output is to described defeated
Go out coil electrode drive circuit, second microprocessor receives the self-inspection pulse signal and exports the second quick short pulse letter
Number to the output winding negative pole drive circuit, the output winding positive pole drive circuit, output winding negative pole drive circuit exist
Under the first quick short pulse signal, the driving of the second quick short pulse signal produce the first quick short pulse feedback signal,
Second quick short pulse feedback signal, the negative pole drives back production circuit, positive pole to drive second described in the difference back production of back production circuit
Quick short pulse feedback signal, the first quick short pulse feedback signal are simultaneously exported to the first microprocessor, the second microprocessor
Device, the first microprocessor, the second microprocessor are according to the described second quick short pulse feedback signal, the first quick short pulse
Feedback signal simultaneously decides by vote the 3rd feedback control signal of output to the safety governor, and the safety governor receives the described 3rd
Feedback control signal simultaneously controls itself to be turned on or off.
It is preferred that the safety governor includes a safety relay, the safety relay and the one of output relay
Tip node connects the pulse signal generator, and another contact of the safety relay is connected by contact back production circuit respectively
The first microprocessor, the second microprocessor, another tip node of the output relay pass through contact back production circuit respectively
The first microprocessor, the second microprocessor are connected, the first microprocessor, the second microprocessor are according to each contact back production
The contact state voting that circuit back production is obtained exports the 4th feedback control signal to the safety governor.
It is preferred that the output relay includes positive electric drive circuit and negative electricity drive circuit, the positive electric drive circuit
Optical relay is respectively with negative electricity drive circuit, the optical relay includes metal-oxide-semiconductor and photodiode, the photodiode
By the first microprocessor or the second microprocessor driven.
It is preferred that the positive pole drives back production circuit and negative pole to drive back production circuit including photodiode and photosensitive three
Pole pipe, the phototriode is connected with the first microprocessor or the second microprocessor and to output signal to described first micro-
Processor or the second microprocessor.
It is preferred that the safety relay is gravitation type relay.
What the present invention was provided two takes two failure safe export structure detecting systems to take two failure safes defeated that can realize two
On the basis of going out, back production is carried out by the coil two ends to output relay, realize to output winding positive pole drive circuit, bear
The test of pole drive circuit switching capability, greatly improves the reliability of output；Simultaneously by safety relay and output
The contact of relay is detected, it is to avoid the mistake output caused by swinging cross, there is good safeguard function to swinging cross.
Certainly, implement any product of the invention to it is not absolutely required to while reaching all the above advantage.
Brief description of the drawings
Fig. 1 takes two failure safe export structure detecting system structural representations for provided in an embodiment of the present invention two；
Fig. 2 takes two failure safe export structure detecting system Static Detection timing diagrams for provided in an embodiment of the present invention two；
Fig. 3 takes two failure safe export structure detecting system dynamic pulse schematic diagrames for provided in an embodiment of the present invention two；
Fig. 4 takes two failure safe export structure detecting system dynamic detection timing diagrams for provided in an embodiment of the present invention two.
Specific embodiment
The embodiment of the invention provides a kind of two and take two failure safe export structure detecting systems, it includes the first microprocessor
Device, the second microprocessor, output circuit, output driving circuit, output driving back production circuit and safety governor；
The safety governor connects a positive source and the output driving circuit, the output driving circuit with it is described
Output circuit is connected and controls the break-make of the output circuit；The first microprocessor, the second microprocessor connect institute respectively
State output driving circuit and control the break-make of the output driving circuit；
The output driving back production circuit connects the output driving circuit and the output driving circuit back production is obtained
The two-way back production signal is respectively sent to first microprocessor by two-way back production signal, the output driving back production circuit
Device, the second microprocessor, the first microprocessor, the second microprocessor receive the back production signal and decide by vote output one respectively
To the safety governor, the safety governor receives first feedback control signal and controls first feedback control signal
Itself is turned on or off.
As shown in figure 1, the output circuit includes an output relay, the output driving circuit is negative including output winding
Pole drive circuit, output winding positive pole drive circuit；
The coil negative pole drive circuit, output winding positive pole drive circuit connect the coil of the output relay respectively
Negative pole, positive pole, the first microprocessor, the second microprocessor connect the output winding positive pole drive circuit, output respectively
Coil negative pole drive circuit and respectively to the output winding positive pole drive circuit, output winding negative pole drive circuit output one control
Signal processed, the output winding positive pole drive circuit, output winding negative pole drive circuit receive the control signal and perform conducting
Or disconnect.
In the present embodiment, the output driving back production circuit includes that positive pole drives back production circuit to drive back production electricity with negative pole
Road, the positive pole drives back production circuit to connect the output winding positive pole drive circuit and drives electricity to the output winding positive pole
Road back production obtains a positive pole back production signal, and the negative pole driving back production circuit connection output winding negative pole drive circuit is simultaneously right
The output winding negative pole drive circuit back production obtains a negative pole back production signal.
The first microprocessor, the second microprocessor send the first detection level signal, the second detection level letter respectively
Number to the output winding positive pole drive circuit, output winding negative pole drive circuit, the positive pole drives back production circuit, negative pole to drive
Dynamic back production circuit carries out back production and obtains positive electricity to the output winding positive pole drive circuit, output winding negative pole drive circuit respectively
Flat back production signal, negative level back production signal, the first microprocessor, the second microprocessor are believed according to the negative level back production
Number, positive level back production signal voting output one second feedback control signal to the safety governor, the safety governor connects
Receive second feedback control signal and control itself to be turned on or off.
In the present embodiment, safety governor includes a safety relay, safety coil positive pole drive circuit and safety line
Circle negative pole drive circuit, as shown in figure 1, first microprocessor is microprocessor A, the second microprocessor is microprocessor B, output
Relay includes positive electric drive circuit and negative electricity drive circuit, positive electric drive circuit and negative electricity drive circuit be optical relay U2 with
Optical relay U4, optical relay includes light emitting diode and metal-oxide-semiconductor；When system needs to be exported, microprocessor A and Wei Chu
Reason device B exports a control signal to safety coil positive pole drive circuit, safety coil negative pole drive circuit, the line of safety relay
Enclose electric, safety relay coil obtain it is electric after pick up, while microprocessor A, microprocessor B distinguish two another control signals
The lumination of light emitting diode of control optical relay U2, U5, turns on the metal-oxide-semiconductor of optical relay U2, U5 respectively, now, positive electricity meeting
Relay coil is reached by the metal-oxide-semiconductor of safety relay contact and optical relay U2, obtains relay coil electric, relay
Pick up.
In the present embodiment, safety relay K2 is gravitation type relay, in gravitation type relay dead electricity, by the gravity of itself
Failure to the safe side side.
In the present embodiment, appointing in microprocessor A, microprocessor B detect positive pole back production signal, negative pole back production signal
When a signal of anticipating is wrong, the coil losing electricity of microprocessor A and microprocessor B control safety relays disconnects safety relay
Into safe condition.As microprocessor A and microprocessor B is not detected by positive pole back production signal, the mistake of negative pole back production signal, then
The coil of microprocessor and A microprocessors B control safety relay is obtained and electric makes safety relay in running order.
The present embodiment relay coil state back production microprocessor A and microprocessor B intersect mutually inspection, it is to avoid microprocessor is certainly
Gathered by mistake caused by the system mistake of body.
The present embodiment provide detecting system also include a pulse signal generator, the pulse signal generator respectively with
Microprocessor A, microprocessor B are connected, and the pulse signal generator sends certainly in real time to microprocessor A, microprocessor B respectively
Inspection pulse signal；
Microprocessor A receive the self-inspection pulse signal and the first quick short pulse signal of output to the output winding just
Pole drive circuit, microprocessor B receives the self-inspection pulse signal and exports the second quick short pulse signal to the output line
Circle negative pole drive circuit, the output winding positive pole drive circuit, output winding negative pole drive circuit are quick short described first
The first quick short pulse feedback signal, the second quick short pulse are produced under pulse signal, the driving of the second quick short pulse signal
Feedback signal, the negative pole drives back production circuit, positive pole to drive the second quick short pulse feedback described in the difference back production of back production circuit
Signal, the first quick short pulse feedback signal are simultaneously exported to microprocessor A, microprocessor B, microprocessor A, microprocessor B roots
According to the described second quick short pulse feedback signal, the first quick short pulse feedback signal and decide by vote output the 3rd feedback control signal
To the safety governor, the safety governor receives the 3rd feedback control signal and controls itself to be turned on or off.
The safety governor includes a safety relay, and the safety relay connects with a tip node of output relay
The pulse signal generator is connect, another contact of the safety relay connects microprocessor by contact back production circuit respectively
A, microprocessor B, another tip node of the output relay connect microprocessor A, Wei Chu by contact back production circuit respectively
Contact state voting the 4th feedback of output that reason device B, microprocessor A, microprocessor B are obtained according to each contact back production circuit back production
Control signal is to the safety governor.
Microprocessor A and microprocessor B distinguish the contact state of back production safety relay, any contact state and safety after
Electrical equipment output is inconsistent, and just energy control system enters safe state to single microprocessor, and microprocessor A and microprocessor B is simultaneously
All forward and backward contact states of back production output relay, any contact state exports inconsistent with relay, and single microprocessor is just
Energy control system enters safe state.
The dynamic pulse signal generator Φ 1 that the present invention is provided can produce 4 kinds of signals, PHI1, PHI2, PHI1R,
PHI2R, wherein PHI1 and PHI2 signal dutyfactors are 25%, both phases difference 180 degree, PHI1R and PHI2R signal duties
Than being 50%, both phases difference 180 degree, PHI1R is identical with PHI1 phases, and PHI2R is identical with PHI2 phases；
Pulse signal PHI1R is connected with microprocessor A and microprocessor B respectively, pulse signal PHI2R respectively with microprocessor
Device A is connected with microprocessor B, when amplitude and the expected amplitude deviation for storing that microprocessor detects PHI1R and PHI2R exceed
When certain limit, system enters safe condition.
Dynamic pulse signal, pulse signal are sealed in safety relay and the forward and backward contact back production of output relay
PHI1 seals in front contact, and pulse signal PHI2 seals in back contact, when microprocessor back production to Chang Weigao is open circuit, is often low i.e. short
Road, normal signal should be an encoded radio, and the encoded radio of front and rear contact is different, it is to avoid the mistake output caused by swinging cross,
There is good safeguard function to swinging cross.
In the present embodiment, self-inspection pulse signal can be PHI1R, or PHI2R, in the present embodiment PHI1R and
PHI2R signal dutyfactors are 50%, and pulse signal PHI1R is connected with microprocessor A and microprocessor B respectively, pulse signal
PHI2R is connected with microprocessor A and microprocessor B respectively, when microprocessor detects amplitude and the expection of PHI1R and PHI2R
When the amplitude deviation of storage exceedes certain limit, safe condition is entered by controlling the coil losing electricity of safety relay.When
What right the present embodiment was also provided is not limited to pulse signal for microprocessor A and the signal of microprocessor B self-inspections, it is also possible to
It is other kinds of signal, such as sine wave signal, serrated signal, the present embodiment are only of the invention one preferably embodiment party
Formula.
The present embodiment, sends detection level signal and is detected as Jing Tai detections by microprocessor A and microprocessor B, static
Detection sequential as shown in Fig. 2
Output relay state description：
1st, output relay dead electricity, test period opens output winding positive pole drive circuit, output winding negative pole and drives successively
Dynamic circuit, and retaking of a year or grade is to correct state；
2nd, output relay obtains electric, the back production of output relay negative pole, the back production of output relay positive pole and output relay
Contact back production is correct；
3rd, output winding positive pole drive circuit and output winding negative pole drive circuit are not exported, but back production detect it is defeated
Go out coil electrode drive circuit output
Error reason：
- output winding positive pole drive circuit normality
- positive pole driving back production circuit can only detect enabled state
4th, output winding positive pole drive circuit and output winding negative pole drive circuit are not exported, but back production detect it is defeated
Go out coil electrode drive circuit has output with output winding negative pole drive circuit, and output relay does not have adhesive；
Error reason：
- output winding positive pole drive circuit is normally closed with output winding negative pole drive circuit, and positive pole drives back production circuit and bears
Pole drives back production electric circuit inspection on off state
- positive pole drive back production circuit and negative pole driving back production circuit only have detected output winding positive pole drive circuit with it is defeated
Go out the state of coil negative pole drive circuit
5th, the test level of output winding positive pole drive circuit has an output, but without corresponding feedback.
Error reason:
- output winding positive pole drive circuit can not be switched
- positive pole drives back production circuit to be unable to identification switch state.
6th, output relay should adhesive, retaking of a year or grade only detects the conducting of output winding negative pole drive circuit, output after
Electrical equipment falls；
Error reason：Output winding positive pole drive circuit fails
7th, output winding positive pole drive circuit, output winding negative pole drive circuit are not output control signals to, but is returned
Adopt and detect output relay and have output, output relay contact retaking of a year or grade detects excited state
Error reason：Output winding positive pole drive circuit is normally closed with output winding negative pole drive circuit.(optical relay glues
Even)
8th, output relay should adhesive, but back production detects relay and does not have adhesive.
Error reason：
- lack 24V power supplys
- or output winding positive pole drive circuit can not be closed with output winding negative pole drive circuit.
9th, output winding positive pole drive circuit and output winding negative pole drive circuit are not exported, and output retaking of a year or grade is correct, but
It is that the contact retaking of a year or grade of output relay is negative.
Error reason：
- output relay contact keeps adhesion
The power line open circuit of-output relay contact back production
Dynamic detection refers in particular to the detection that output relay is picked up under state；Output relay (mainly mechanical relay) line
Enclose under electricity condition, contact is picked up.Because the mechanical relay life-span is long without optical relay, this is required in optical relay self-inspection
When mechanical relay can not necessarily pick up (if now picked up, one be influence the mechanical relay life-span, two is to be likely to result in malfunction
Make).The Cleaning Principle of optical relay is：The response time of optical relay is more much faster than mechanical relay, when optical relay is led
When logical, mechanical relay is not turned on simultaneously, can make output system only in the of short duration time for being faster than the response time of mechanical relay
Interior (4ms or so) exports self-test signal, and now mechanical relay will not be acted, and at this moment detects that the intersection of optical relay is returned
The number of accepting and believing can just be judged to the state of optical relay.
Rising edges and trailing edge synchronism output dynamic of the microprocessor A and microprocessor B in outside PHI1R during dynamic detection
Pulse, dynamic pulse schematic diagram are as shown in figure 3, dynamic detection timing diagram is as shown in Figure 4；
Dynamic detection sequential relay status are described：
1st, output relay obtains electric, and output winding positive pole drive circuit and output winding negative pole drive circuit are while periodically
Output dynamic pulse, the two ends back production and output relay contact back production of output relay coil is correct；
2nd, output winding positive pole drive circuit exports effective driving pulse, but positive pole driving back production circuit does not have back production to arrive
Corresponding feedback (output winding negative pole drive circuit is similarly)；
Error reason:
- output winding positive pole drive circuit can not be switched
- output winding negative pole drive circuit is unable to identification switch state.
3rd, output winding positive pole drive circuit and output winding negative pole drive circuit export effective driving pulse, but all
There is no corresponding feedback；
Error reason：
- lack 24V power supplys
- or output winding positive pole drive circuit can not be closed with output winding negative pole drive circuit.
4th, two input back production circuits all detect that output switch is held on normality, output relay adhesive；
Error reason：
- output winding positive pole drive circuit is normally closed (optical relay adhesion) with output winding negative pole drive circuit, is input into back
Adopt on off state
- input back production only have detected on off state
What the present invention was provided two takes two failure safe export structure detecting systems to take two failure safes defeated that can realize two
On the basis of going out, back production is carried out by the two ends to output relay, realize the test to output driving circuit switching capability, pole
The big reliability that improve output；Detected with the contact of output relay by safety relay simultaneously, it is to avoid because
The mistake output that swinging cross is caused, there is good safeguard function to swinging cross.
Present invention disclosed above preferred embodiment is only intended to help and illustrates the present invention.Preferred embodiment is not detailed
All of details is described, it is only described specific embodiment that the invention is not limited yet.Obviously, according to the content of this specification,
Can make many modifications and variations.This specification is chosen and specifically describes these embodiments, is to preferably explain the present invention
Principle and practical application so that skilled artisan can be best understood by and utilize the present invention.The present invention is only
Limited by claims and its four corner and equivalent.
Claims (4)
1. one kind two takes two failure safe export structure detecting systems, it is characterised in that including first microprocessor, second micro- place
Reason device, output circuit, output driving circuit, output driving back production circuit and safety governor；
The safety governor connects a positive source and the output driving circuit, the output driving circuit and the output
Circuit is connected and controls the break-make of the output circuit；The first microprocessor, the second microprocessor connect described defeated respectively
Go out drive circuit and control the break-make of the output driving circuit；
The output driving back production circuit connects the output driving circuit and obtains two-way to the output driving circuit back production
The two-way back production signal is respectively sent to the first microprocessor, by back production signal, the output driving back production circuit
Two microprocessors, the first microprocessor, the second microprocessor receive the back production signal and decide by vote output one first respectively
To the safety governor, the safety governor receives first feedback control signal and controls itself feedback control signal
It is turned on or off；
The output circuit includes an output relay, and the output driving circuit includes output winding negative pole drive circuit, defeated
Go out coil electrode drive circuit；
The output winding negative pole drive circuit, output winding positive pole drive circuit connect the coil of the output relay respectively
Negative pole, positive pole, the first microprocessor, the second microprocessor connect the output winding positive pole drive circuit, output respectively
Coil negative pole drive circuit and respectively to the output winding positive pole drive circuit, output winding negative pole drive circuit output one control
Signal processed, the output winding positive pole drive circuit, output winding negative pole drive circuit receive the control signal and perform conducting
Or disconnect；
The output driving back production circuit includes that positive pole drives back production circuit to drive back production circuit, the positive pole to drive back with negative pole
Circuit is adopted to connect the output winding positive pole drive circuit and obtain a positive pole to the output winding positive pole drive circuit back production
Back production signal, the negative pole drives back production circuit to connect the output winding negative pole drive circuit and to the output winding negative pole
Drive circuit back production obtains a negative pole back production signal；
The first microprocessor, the second microprocessor send the first detection level signal, the second detection level signal extremely respectively
The output winding positive pole drive circuit, output winding negative pole drive circuit, the positive pole drive back production circuit, negative pole to drive back
Adopt circuit the output winding positive pole drive circuit, output winding negative pole drive circuit are carried out respectively back production obtain positive level return
The number of accepting and believing, negative level back production signal, the first microprocessor, the second microprocessor according to the negative level back production signal, just
Level back production signal voting one second feedback control signal of output to the safety governor, the safety governor receives described
Second feedback control signal simultaneously controls itself to be turned on or off；
Described a kind of two take two failure safe export structure detecting systems also includes a pulse signal generator, the pulse signal
Generator is connected with the first microprocessor, the second microprocessor respectively, and the pulse signal generator is respectively to described
One microprocessor, the second microprocessor send self-inspection pulse signal in real time,
The first microprocessor receives the self-inspection pulse signal and exports the first quick short pulse signal to the output line
Circle positive pole drive circuit, second microprocessor receives the self-inspection pulse signal and exports the second quick short pulse signal extremely
The output winding negative pole drive circuit, the output winding positive pole drive circuit, output winding negative pole drive circuit are described
The first quick short pulse feedback signal, second are produced under first quick short pulse signal, the driving of the second quick short pulse signal
Quick short pulse feedback signal, it is second quick that the negative pole drives back production circuit, positive pole to drive described in the difference back production of back production circuit
Short pulse feedback signal, the first quick short pulse feedback signal are simultaneously exported to the first microprocessor, the second microprocessor, institute
First microprocessor, the second microprocessor are stated according to the described second quick short pulse feedback signal, the first quick short pulse feedback
Signal simultaneously decides by vote the 3rd feedback control signal of output to the safety governor, and the safety governor receives the 3rd feedback
Control signal simultaneously controls itself to be turned on or off；
The safety governor includes a safety relay, and the safety relay is connected institute with a tip node of output relay
Pulse signal generator is stated, another contact of the safety relay connects first micro- place by contact back production circuit respectively
Reason device, the second microprocessor, another tip node of the output relay connect described first by contact back production circuit respectively
Microprocessor, the second microprocessor, the first microprocessor, the second microprocessor are obtained according to each contact back production circuit back production
Contact state voting the 4th feedback control signal of output to the safety governor.
2. as claimed in claim 12 two failure safe export structure detecting systems are taken, it is characterised in that the output relay
Device includes positive electric drive circuit and negative electricity drive circuit, and the positive electric drive circuit is respectively light relay with negative electricity drive circuit
Device, the optical relay includes metal-oxide-semiconductor and photodiode, and the photodiode passes through the first microprocessor or second
Microprocessor driven.
3. as claimed in claim 12 two failure safe export structure detecting systems are taken, it is characterised in that the positive pole drives
Back production circuit and negative pole drive the back production circuit to include photodiode and phototriode, the phototriode and described the
One microprocessor or the second microprocessor are connected and output signal to the first microprocessor or the second microprocessor.
4. as claimed in claim 12 two failure safe export structure detecting systems are taken, it is characterised in that the safety relay
Device is gravitation type relay.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410050090.5A CN103941718B (en) | 2014-02-13 | 2014-02-13 | A kind of two take two failure safe export structure detecting systems |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410050090.5A CN103941718B (en) | 2014-02-13 | 2014-02-13 | A kind of two take two failure safe export structure detecting systems |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103941718A CN103941718A (en) | 2014-07-23 |
| CN103941718B true CN103941718B (en) | 2017-07-11 |
Family
ID=51189426
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410050090.5A Active CN103941718B (en) | 2014-02-13 | 2014-02-13 | A kind of two take two failure safe export structure detecting systems |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103941718B (en) |
Families Citing this family (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105946902B (en) * | 2014-09-23 | 2017-10-10 | 浙江众合科技股份有限公司 | A kind of Static output adds the track traffic Safety output system of static dynamic pulse detection |
| CN105446251B (en) * | 2016-01-18 | 2018-08-24 | 湖南中车时代通信信号有限公司 | A kind of secure digital amount input system and its signal processing method |
| CN105652771A (en) * | 2016-03-07 | 2016-06-08 | 株洲南车时代电气股份有限公司 | Safety on-off output system |
| CN108693805B (en) * | 2016-06-14 | 2020-12-11 | 浙江众合科技股份有限公司 | Safety computer output control system |
| CN112631256B (en) * | 2020-12-29 | 2022-03-18 | 浙江中控技术股份有限公司 | Switching value output module with safe function and diagnosis processing method |
| CN112748688B (en) * | 2020-12-30 | 2022-06-24 | 卡斯柯信号有限公司 | Vehicle-mounted system output control circuit based on safety relay and method thereof |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101694574A (en) * | 2009-10-15 | 2010-04-14 | 北京全路通信信号研究设计院 | Double-port controlled driving circuit |
| CN101913369A (en) * | 2010-07-23 | 2010-12-15 | 上海亨钧科技有限公司 | Signal execution unit of computer interlock system and working method thereof |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN103297008A (en) * | 2013-05-16 | 2013-09-11 | 中国铁道科学研究院 | Isolated-type double-break-output intelligent drive board and drive method |
-
2014
- 2014-02-13 CN CN201410050090.5A patent/CN103941718B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101694574A (en) * | 2009-10-15 | 2010-04-14 | 北京全路通信信号研究设计院 | Double-port controlled driving circuit |
| CN101913369A (en) * | 2010-07-23 | 2010-12-15 | 上海亨钧科技有限公司 | Signal execution unit of computer interlock system and working method thereof |
| CN102789166A (en) * | 2011-05-16 | 2012-11-21 | 铁道部运输局 | Safety control device based on double 2-vote-2 safety redundant system, and system |
| CN103297008A (en) * | 2013-05-16 | 2013-09-11 | 中国铁道科学研究院 | Isolated-type double-break-output intelligent drive board and drive method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103941718A (en) | 2014-07-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103941718B (en) | A kind of two take two failure safe export structure detecting systems | |
| CN103680274B (en) | A kind of connection wire of electrical experimental facility automatic testing method and device | |
| CN205229338U (en) | Take redundant silicon controlled rectifier change of current valve system emission of light detection loop | |
| CN102866353A (en) | Device and method for state detection of main loop relay of direct-current power supply system | |
| CN103675591B (en) | A kind of electrokinetic cell output bus multipoint insulation fault detection circuit | |
| CN202362430U (en) | Relay failure detection device of grid-connected inverter | |
| CN104466918B (en) | A kind of energy-storage battery reverse polarity protection circuit and recognition methods | |
| CN203038470U (en) | Dual-computer hot-standby traffic signal lamp control system | |
| CN206099897U (en) | Photovoltaic power plant with trouble recognition function | |
| CN104359196A (en) | Data-center-based multiple-connection air conditioner control system and implementation method | |
| CN103713232A (en) | Intelligent alarm capable of preventing battery reverse polarity | |
| CN207503869U (en) | For the low-voltage combination switch of reactive power compensator | |
| CN205506966U (en) | System for detect priming sytem behavior | |
| CN113049950A (en) | Relay detection device and method and charging pile | |
| CN107785870B (en) | Current transformer and secondary side open circuit protection device thereof | |
| CN104198926A (en) | Anti-trip loop test device for breaker and control method thereof | |
| CN107765118B (en) | Testing device and method for reverse recovery period protection unit of light-operated converter valve | |
| CN202916408U (en) | Main loop relay state detecting device of direct current power supply system | |
| CN104941103A (en) | Power module detection device for ship fire control system | |
| CN205488401U (en) | Battery leakage detecting system based on battery management system | |
| CN106152922A (en) | Rotor of large turbo-type generator hub of a spool point location judgment means and location of the core method thereof | |
| CN203849356U (en) | Voltage transformer secondary wire connection inspection device | |
| CN203967824U (en) | The automatic switch-over circuit of distribution power automation terminal and duplicate supply | |
| CN205176699U (en) | Distribution data acquisition device | |
| CN203117357U (en) | LED (light emitting diode) polarity detecting device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |