The content of the invention
The object of the present invention is to provide a kind of emergency stop control system with multiple protective mechanism, solve in the prior art
Element manipulation is unreliable, loop state is difficult to control, and security management and control is not stringent, and there are the problem of security risk.
It is a further object of the present invention to provide a kind of emergency stop control method with multiple protective mechanism, solves existing skill
Art protection mechanism is single, safe class is low, lacks safety interlock protection, because the factors such as component reliability difference trigger output by mistake
Problem.
The technical solution adopted in the present invention is a kind of emergency stop control system with multiple protective mechanism, including redundancy
Power supply circuit, emergency stop control circuit, DQ emergency stops control circuit and AQ emergency stop control circuits;Wherein, redundant power supply circuit respectively with
Emergency stop control circuit, DQ emergency stops control circuit and the connection of AQ emergency stops control circuit;Emergency stop control circuit is controlled with DQ emergency stops respectively
Circuit is connected with the output control circuit in AQ emergency stop control circuits.
Another technical solution of the present invention is a kind of emergency stop control method with multiple protective mechanism, according to
In the following manner is controlled:
Mode 1) control flow of pressing scram button is,
System electrification and normal operation, press scram button, while perform following software instruction and hardware control logic, instead
Feedback emergent stop signal gives digital data acquisition module DI, and it is defeated to digital quantity output module DQ, analog quantity that controller receives emergent stop signal
Go out the clearing of module AQ output orders, until emergency stop feedback is invalid;Digital output is cut off to be returned with disconnecting relay group X03 coil sides
Road, digital output disconnecting relay group X03 switch-sides because disconnecting relay coil must not electricity and disconnect;It is defeated to cut off digital quantity
Go out and switch side loop with disconnecting relay group X03, digital output disconnecting relay group X03 switch-sides must not be electric, performs list
First attonity;Proportional amplifier AM01, AM02 current supply circuit is cut off, proportional amplifier AM01, AM02 must not be electric, output zero,
Equipment ratio control valve YV01, YV02, YV03, YV04 attonity;The circuit of emergency stop instruction at the same time must electrically connect, emergency stop indicator light
H01 is lighted;
Mode 2) control flow that resets scram button is system electrification and be in scram button down state, reset quilt
The scram button pressed, system are detected whether to press emergency stop reset button S01, operated when having been carried out resetting, system automatically
Recover normal;When not carrying out reset operation, system is still within emergency stop state, and flow 1) realizes emergency stop in the manner previously described
Protection.
The invention has the advantages that protected by supporting redundant power supply power supply, software interlocks defencive function and multiple hardware
Circuit is protected, realizes the multiple security protection to equipment, solves that traditional emergency stop control system protection mechanism is single, safe class
The problems such as low, shortage safety interlock protection, the mistake because of the initiation of the factors such as component reliability difference export, realizes to equipment, sets
Preparation controller, the protection of Operation and Maintenance personnel.
Embodiment
The present invention is described in detail with reference to the accompanying drawings and detailed description.
The emergency stop control system of the present invention integrally includes redundant power supply circuit, emergency stop control circuit, DQ emergency stop control circuits
And AQ emergency stop control circuits;Wherein, redundant power supply circuit respectively with emergency stop control circuit, DQ emergency stops control circuit and AQ emergency stop controls
Circuit connection processed, realizes the power supply to above three control circuit;Emergency stop control circuit respectively with DQ emergency stops control circuit and AQ
Output control circuit connection in emergency stop control circuit, the common multiple security protection realized to equipment.
Redundant power supply circuit includes harmonics unit, DC power source unit, redundant power administrative unit and direct current protecting
Unit, harmonics unit and DC power source unit exchange input side connection, the DC output side of DC power source unit and superfluous
The input side connection of remaining Power Management Unit, the outlet side of redundant power administrative unit are connected with direct current protecting unit.
With reference to Fig. 1, the structure of redundant power supply circuit embodiments is, including AC circuit breaker QF01 and QF02 (the two members
Device cannot directly be known as harmonics unit, when harmonics work(can be achieved in two component designs in current supply circuit
Can, it is harmonics unit that ordinary circumstance, which calls the circuit comprising this part in the following text,.Because protected inside the two components containing overcurrent
Protection circuit, when operating current exceedes permissible value, such as short circuit etc., AC circuit breaker disconnects automatically according to autoprotection mechanism
Power supply, realizes protection), alternating current 220V single-phase electricity is connected to the input side of AC circuit breaker QF01, another way alternating current 220V list all the way
Mutually electricity is connected to the input side of AC circuit breaker QF02;The outlet side of AC circuit breaker QF01 exchanges input with DC power supply G01's
Side is connected, and the outlet side of AC circuit breaker QF02 is connected (ibid, when the two direct currents with the input side that exchanges of DC power supply G02
Power supply G01, G02, which are designed, in circuit, realizes that AC-DC conversion is called in the following text comprising this for DC circuit power supply below, ordinary circumstance
Partial circuit is DC power source unit);The DC output side of DC power supply G01, G02 respectively with redundant power management module
The input side of RG01 is connected, and (ibid, the circuit comprising multiple DC power supplies and redundant power management module is frequently referred to redundant power
Administrative unit because two conventional DC power supplies are directly in parallel, because the voltage of two power supplys can not possibly be definitely it is equal, will
There can be discharge and recharge each other, or a power supply short circuit damages and causes another power supply to damage at the same time, and add redundant electric
Source control module, when one of damage, another power supply still can work normally, thus improve control system it is long when
Between the stability that works);The direct current 24V output terminals of redundant power management module RG01 and the input side phase of dc circuit breaker QF03
Even, the outlet side of dc circuit breaker QF03 is connected with direct current 24V terminal blocks X01A, the direct current of redundant power management module RG01
GND output terminals and direct current GND terminal row X01B be connected (it is ibid, similar with harmonics unit principle, be known as under normal circumstances straight
Flow protection location).
Emergency stop control circuit includes redundant power supply unit, emergency stop control input side management unit and emergency stop control output side pipe
Unit is managed, redundant power supply unit is connected with the power supply interface of safety relay EK01, emergency stop control input side management unit and peace
The emergency stop input and reseting interface connection of all relay EK01, emergency stop control outlet side administrative unit and safety relay EK01
The normally opened contact of outlet side is connected with normally-closed contact interface.
Redundant power supply unit provides safe power supply guarantee to emergency stop control system, and any D. C. power source breakdown all the way is equal
Do not influence system power supply, it is ensured that the uninterrupted operation of control system, harmonics unit and direct current protecting unit provide for system
Overcurrent and short-circuit protection, are that key components escort in system.
With reference to Fig. 2, the structure of emergency stop control circuit embodiment is that redundant power supply unit includes safety relay EK01, peace
The A1 ends of all relay EK01 are connected with No. 1 terminal of direct current 24V terminal blocks X01A, the A2 ends of safety relay EK01 and direct current
No. 1 terminal of GND terminal row X01B is connected;
Emergency stop control input side management unit, contains multiple double-channel signals input scram button electricity of diverse location
Road, emergency stop manual reset circuit, and automatic reset circuit etc..
The S10 ends and S11 ends of safety relay EK01 be connected afterwards with positioned at control cabinet panel scram button ESD01 11
End is connected, positioned at 12 ends of the scram button ESD01 of control cabinet panel and the 11 end phases of the scram button ESD02 positioned at operation console
Even, it is connected positioned at 12 ends of the scram button ESD02 of operation console with 11 ends of the scram button ESD03 positioned at escape way, position
It is connected in 12 ends of the scram button ESD03 of escape way with emergency stop with the 1A ends of terminal block X02, safety relay EK01's
S12 ends are connected with emergency stop with the 1B ends of terminal block X02;
The S21 ends of safety relay EK01 are connected with 21 ends of the scram button ESD01 positioned at control cabinet panel, positioned at control
22 ends of the scram button ESD01 of cabinet panel processed are connected with 21 ends of the scram button positioned at operation console, positioned at the urgency of operation console
22 ends for stopping button ESD02 are connected with 21 ends of the scram button ESD03 positioned at escape way, and the emergency stop positioned at escape way is pressed
22 ends of button ESD03 are connected with emergency stop with the 2A ends of terminal block X02, S22 ends and the emergency stop terminal block of safety relay EK01
The 2B ends of X02 are connected;
Emergency stop is spare interface with terminal block X02, can also extend more scram buttons according to the needs of control system,
Realization controls more, when that need not extend, the 1A ends and 1B ends of short circuit emergency stop terminal block X02, while short circuit urgency dead end
The 2A ends and 2B ends of son row X02, forms the emergency stop control loop of closure;
The S33 ends of safety relay EK01 are connected with 13 ends of emergency stop reset button S01, and the 14 of emergency stop reset button S01
End is connected with the S34 ends of safety relay EK01;When control system needs to automatically reset, it is necessary to short circuit after scram button recovery
The S35 ends of safety relay EK01 and S33 ends;
As it can be seen that above-mentioned emergency stop control input side management unit is by designing multiple scram buttons of diverse location, it is ensured that
System is more controlled, meets operation, safeguards and make an inspection tour the requirement of management.Inputted by the double-channel signal for designing scram button,
So that system possesses intersection wiring monitoring function, reach 4 grades of highest safe class are any when any one scram button
One input channel is effective, and equal feasible system emergency stop control, system is caused when thoroughly having evaded single channel signal input fault
Risk out of control.By designing emergency stop reset button circuit, system remains to processing emergency stop shape after system emergency stop button is reset
State, emergency stop can be released until pressing emergency stop reset button, resetted by mistake so as to evade scram button in traditional exigency stop system
System is caused to restart risk out of control afterwards.In addition, the series connection output of double normally opened contacts (powering-off state) may insure system
Reliable disconnection after scram button takes, even if one of contact is uncontrolled or adhesion still is able to carry out reliably working.
Emergency stop controls outlet side administrative unit, contains the output that the double normally opened contacts (powering-off state) in 8 tunnels are composed in series and connects
The output interface of double normally-closed contact (powering-off state) parallel connections of mouth and 1 tunnel,
13 ends of safety relay EK01 are connected with No. 1 terminal of direct current 24V terminal blocks X01A, safety relay EK01's
14 ends are connected with the DI0.1 ends of digital data acquisition module DI;23 ends of safety relay EK01 are with direct current GND terminal row X01B's
No. 1 terminal is connected, No. 1 relay A2 end of 24 ends of safety relay EK01 with digital output with disconnecting relay group X03
It is connected;33 ends of safety relay EK01 are connected with No. 1 terminal of direct current 24V terminal blocks X01A, and the 34 of safety relay EK01
End is connected with digital output with the A1 ends of power relay PK01;43 ends of safety relay EK01 and direct current 24V terminal blocks
No. 1 terminal of X01A is connected, and 44 ends of safety relay EK01 are connected with analog output with the A1 ends of power relay PK02;
91 ends of safety relay EK01 are connected with No. 1 terminal of direct current 24V terminal blocks X01A, 92 ends of safety relay EK01 and urgency
1 end for stopping indicator light H01 is connected;2 ends of emergency stop indicator light H01 are connected with No. 4 terminals of direct current GND terminal row X01B.
Emergency stop controls outlet side administrative unit to realize soft emergency stop protection function by designing emergency stop feedback circuit.Work as emergency stop
After button is pressed, the contact between 13 ends and 14 ends of safety relay EK01 disconnects, the digital data acquisition module DI in system
Blackout is collected, so that decision-making system have issued stop command, it is defeated that system controller removes all switching values and proportional quantities
Go out instruction, stop at current state, realize the soft emergency stop protection function of system.By design digital output module DQ isolation after
The emergency stop control circuit of electric appliance group coil sides, is realized after scram button is pressed, cut-out digital quantity output module DQ isolation relays
The control loop of device group coil sides, it is ensured that the contact of digital output module DQ disconnecting relay group switch-sides is not attracted, so that
Cut-out output electric signal, it is ensured that controlled unit realizes emergency stop hard logic defencive function without output.By designing digital output
The emergency stop control circuit of module DQ disconnecting relay group switch-sides, is realized after scram button is pressed, and cuts off digital output mould
The control loop of block DQ disconnecting relay group switch-sides, it is ensured that the contact of digital output module DQ disconnecting relay group switch-sides
Even if actuation still cannot export, so as to cut off output electric signal, it is ensured that controlled unit realizes multiple hard logic and protect without output
Protective function.By the emergency stop control circuit of the proportional amplifier feeder ear of design simulation amount output module AQ drivings, realize when anxious
Stop after button presses, cut off the current supply circuit of proportional amplifier feeder ear, proportional amplifier non-output signal because of power down, it is ensured that
Controlled unit realizes emergency stop hard logic defencive function without output.By designing emergency stop indicator light circuit, scram button is worked as in realization
After pressing, emergency stop indicator light is lighted, to operating personnel to prompt.
With reference to Fig. 3, the structure of DQ emergency stop control circuit embodiments is, including digital output module DQ, digital output
With disconnecting relay group X03, digital output power relay PK01 and facility switching control valve XV01, XV02,
Four output channels of digital output module DQ and digital output No. 1 relay in disconnecting relay group X03
Device, No. 2 relays, No. 3 relays, the A1 ends of No. 4 relays correspond to connection, and digital output is with 1 in disconnecting relay group X03
Number relay, No. 2 relays, No. 3 relays, the A2 ends of No. 4 relays are sequentially interconnected in as common GND end;Digital output
By the use of No. 1 relay in disconnecting relay group X03, No. 2 relays, No. 3 relays, No. 4 relays 13 ends be sequentially interconnected in as
Public direct-current 24V feeder ears;Because each road output loop connection mode is identical, in being described below only with digital output isolate after
Illustrated exemplified by No. 1 relay, No. 2 relays in electric appliance group X03,
The DQ0.0 ends of digital output module DQ, DQ0.1 ends are respectively with digital output with 1 in disconnecting relay group X03
A1 ends, the A1 ends of No. 2 relays of number relay are connected, digital output No. 1 relay in disconnecting relay group X03, No. 2
The A2 ends of relay are connected with 24 ends of safety relay EK01 at the same time;Digital output with No. 1 in disconnecting relay group X03 after
14 ends of electric appliance, 14 ends of No. 2 relays are connected with 3 ends of facility switching control valve XV01 and 2 ends respectively, digital output
With No. 1 relay in disconnecting relay group X03, No. 2 relays 13 ends at the same time with digital output power relay PK01
14 ends be connected;1 end of facility switching control valve XV01,1 end of facility switching control valve XV02 at the same time with direct current GND ends
No. 2 terminals of son row X01B are connected, and PE ends, the PE ends of facility switching control valve XV02 of facility switching control valve XV01 is same
When be connected with No. 1 terminal of PE terminal blocks;Digital output is with the A1 ends of power relay PK01 with safety relay EK01's
34 ends are connected, and digital output is connected with the A2 ends of power relay PK01 with 24 ends of safety relay EK01, and digital quantity is defeated
Go out and be connected with 13 ends of power relay PK01 with No. 2 terminals of direct current 24V terminal blocks X01A.
DQ emergency stops control circuit realizes digital output module DQ and executing agency by designing disconnecting relay circuit
Both sides are played the role of insulation blocking by the electrical isolation of facility switching control valve XV01, XV02.By designing numeral
Output power relay PK01 circuits are measured, realize the another first class of protection to executing agency's output, even if digital output is used
Disconnecting relay group X03 failure systems remain to effectively controlled.
With reference to Fig. 4, the structure of AQ emergency stop control circuit embodiments is, including analog output module AQ, digital output
Module DQ, analog output power relay PK02, proportional amplifier AM01, AM02 and equipment ratio control valve
YV01, YV02, YV03, YV04,
Each output channel of analog output module AQ is connected with the input terminal of proportional amplifier AM01, AM02;Cause
Each road output loop connection mode is identical, is illustrated below by taking the connection relation of proportional amplifier AM01 as an example,
The a2-c2 terminals of proportional amplifier AM01 be connected with the a2-c2 terminals of proportional amplifier AM02 after at the same time with simulation
Amount output is connected with 14 ends of power relay PK02, the a18 ends and c18 ends of proportional amplifier AM01 respectively with digital output
DQ0.4 terminals, the DQ0.5 terminals of module DQ, which corresponds to, to be connected;The a4-c4 terminals of proportional amplifier AM01 and proportional amplifier AM02
A4-c4 terminals be connected afterwards at the same time with direct current GND terminal row X01B No. 3 terminals be connected;The a28 of proportional amplifier AM01,
0 end with analog output module AQ, 0M ends, 1 end, 1M ends are corresponding connected respectively for a24, c28, c24 terminal, proportional amplifier
3,2,1 end of a6, a8, a10 terminal of AM01 respectively with equipment ratio control valve YV01 is connected;Proportional amplifier AM01's
3,2,1 end of c6, c8, c10 terminal respectively with equipment ratio control valve YV02 is connected;The PE of equipment ratio control valve YV01
End, the PE ends of equipment ratio control valve YV02 are connected with No. 2 terminals of PE terminal blocks at the same time;Analog output power relay
The A1 ends of device PK02 are connected with 44 ends of safety relay EK01, analog output the A2 ends of power relay PK02 and direct current
No. 5 terminals of GND terminal row X01B are connected, 13 ends and direct current 24V terminal block of the analog output with power relay PK02
No. 3 terminals of X01A are connected.
AQ emergency stops control circuit enables output control circuit by design proportion amplifier AM01, AM02, works as system requirements
When proportional quantities exports, enable signal is sent by digital output module DQ, proportional amplifier is activated, when system Non-scale amount is defeated
Digital output module DQ output orders are removed when going out demand, realize effective management and control of comparative example amplifier AM01, AM02, this
The positive lock to executing agency and output, avoid because of the small letter such as temperature drift when kind control method realizes system normal operation
Number output and cause system by mistake export.By design simulation amount output power relay PK02 circuits, realize to performing
Mechanism output another first class of protection, even if the enable signal deactivation system of proportional amplifier AM01, AM02 remain to effectively it is controlled.
The present invention has the emergency stop control method of multiple protective mechanism, is controlled in the following way:
Mode 1) reference Fig. 5, pressing the control flow of scram button is,
System electrification and normal operation, press scram button, while perform following software instruction and hardware control logic, instead
Feedback emergent stop signal gives digital data acquisition module DI, and it is defeated to digital quantity output module DQ, analog quantity that controller receives emergent stop signal
Go out the clearing of module AQ output orders, until emergency stop feedback is invalid;Digital output is cut off to be returned with disconnecting relay group X03 coil sides
Road, digital output disconnecting relay group X03 switch-sides because disconnecting relay coil must not electricity and disconnect;It is defeated to cut off digital quantity
Go out and switch side loop with disconnecting relay group X03, digital output disconnecting relay group X03 switch-sides must not be electric, performs list
First attonity;Proportional amplifier AM01, AM02 current supply circuit is cut off, proportional amplifier AM01, AM02 must not be electric, output zero,
Equipment ratio control valve YV01, YV02, YV03, YV04 attonity;The circuit of emergency stop instruction at the same time must electrically connect, emergency stop indicator light
H01 is lighted.
Mode 2) with reference to Fig. 6, resetting the control flow of scram button is, system electrification and presses shape in scram button
State, resets the scram button being pressed, and system detects whether to press emergency stop reset button S01 automatically, when having been carried out resetting
Operation, system recover normal;When not carrying out reset operation, system is still within emergency stop state, and according to side shown in foregoing Fig. 5
Formula 1) flow realizes emergency stop protection.