CN116954133A - Function safety monitoring system, method, device and medium - Google Patents
Function safety monitoring system, method, device and medium Download PDFInfo
- Publication number
- CN116954133A CN116954133A CN202310960247.7A CN202310960247A CN116954133A CN 116954133 A CN116954133 A CN 116954133A CN 202310960247 A CN202310960247 A CN 202310960247A CN 116954133 A CN116954133 A CN 116954133A
- Authority
- CN
- China
- Prior art keywords
- safety
- data frame
- command word
- functional
- controller
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 52
- 238000012544 monitoring process Methods 0.000 title claims abstract description 47
- 231100000279 safety data Toxicity 0.000 claims abstract description 139
- 238000004891 communication Methods 0.000 claims abstract description 82
- 230000002159 abnormal effect Effects 0.000 claims abstract description 57
- 230000005856 abnormality Effects 0.000 claims abstract description 18
- 238000012360 testing method Methods 0.000 claims description 40
- 230000006870 function Effects 0.000 claims description 33
- 230000008569 process Effects 0.000 claims description 16
- 238000004590 computer program Methods 0.000 claims description 14
- 238000001514 detection method Methods 0.000 claims description 12
- 238000012806 monitoring device Methods 0.000 claims description 8
- 238000003780 insertion Methods 0.000 claims description 7
- 230000037431 insertion Effects 0.000 claims description 7
- 230000001960 triggered effect Effects 0.000 abstract description 4
- 238000012545 processing Methods 0.000 description 19
- 238000013507 mapping Methods 0.000 description 10
- 230000005540 biological transmission Effects 0.000 description 8
- 238000010586 diagram Methods 0.000 description 8
- 230000003993 interaction Effects 0.000 description 8
- 238000005516 engineering process Methods 0.000 description 4
- 230000009471 action Effects 0.000 description 3
- 230000006978 adaptation Effects 0.000 description 2
- 238000013473 artificial intelligence Methods 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 2
- 238000002790 cross-validation Methods 0.000 description 2
- 238000009877 rendering Methods 0.000 description 2
- 230000004044 response Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 230000009977 dual effect Effects 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 230000005055 memory storage Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
- 230000001052 transient effect Effects 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B19/00—Programme-control systems
- G05B19/02—Programme-control systems electric
- G05B19/04—Programme control other than numerical control, i.e. in sequence controllers or logic controllers
- G05B19/042—Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
- G05B19/0428—Safety, monitoring
-
- G—PHYSICS
- G05—CONTROLLING; REGULATING
- G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
- G05B2219/00—Program-control systems
- G05B2219/20—Pc systems
- G05B2219/24—Pc safety
- G05B2219/24024—Safety, surveillance
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02P—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
- Y02P90/00—Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
- Y02P90/02—Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Automation & Control Theory (AREA)
- Safety Devices In Control Systems (AREA)
Abstract
The invention discloses a functional safety monitoring system, a method, a device and a medium, which relate to the technical field of industrial Ethernet communication, and in order to monitor whether abnormal communication occurs in functional safety, a communication card component is needed to decompose a data frame set received from a controller, a safety data frame is decomposed from the data frame set, the safety data frame is transmitted to a functional safety controller, the functional safety controller judges whether the safety data frame is abnormal or not, and if the safety data frame is judged to be normal, the functional safety corresponding to the safety data frame is triggered; if the safety data frame is judged to be abnormal, the control prompt module carries out corresponding prompt on the abnormality, further timely judges whether the communication is abnormal or not, and if the communication is abnormal, the user is prompted timely through the corresponding prompt, so that the user can conveniently maintain the abnormality timely after seeing the prompt, and safety accidents caused by long-time non-triggering of functional safety are avoided.
Description
Technical Field
The present invention relates to the field of industrial ethernet communications technologies, and in particular, to a functional security monitoring system, method, apparatus, and medium.
Background
Along with the improvement of the complexity of the industrial system, the danger sources are continuously increased, and part of motion control systems are applied to safety systems in order to adapt to the field security. At present, the function safety controller triggers the function safety through communication and becomes a functional part of the market, namely, the function safety controller receives safety data such as Safety Torque Off (STO) of a motor, safety brake control (Safety Brake Control, SBC), safety Stop 1 (Safe Stop 1, SS1), safety Stop 2 (Safe Stop 2, SS2), safety operation Stop (Safe Operation Stop), safety Limit Speed (SLS) and the like through communication, and triggers the function safety corresponding to the safety data. However, when communication abnormality occurs, the communication can enter an unsafe state, at this time, accurate safety data cannot be transmitted through the communication, and then various functional safety cannot be triggered through the functional safety controller, and the long-time failure to trigger the functional safety is dangerous in some occasions, but no system in the prior art can monitor the communication abnormality in time.
Disclosure of Invention
The invention aims to provide a functional safety monitoring system, a method, a device and a medium, which timely judge whether communication is abnormal or not, and prompt a user timely through corresponding prompt if the communication is abnormal, so that the user can conveniently and timely maintain the abnormality after seeing the prompt, and safety accidents caused by long-time non-triggering of functional safety are avoided.
In order to solve the above technical problems, the present invention provides a functional safety monitoring system, including:
the communication card component is used for receiving the data frame set transmitted by the controller, decomposing a safety data frame from the data frame set and transmitting the safety data frame to the functional safety controller;
the functional safety controller is used for receiving the safety data frame transmitted by the communication card component, judging whether the safety data frame is abnormal or not, and if the safety data frame is abnormal, controlling the prompting module to correspondingly prompt the abnormality; and if the safety data frame is normal, triggering the function safety corresponding to the safety data frame.
Optionally, the communication card component is further configured to decompose a motor control data frame from the data frame set;
further comprises:
and the frequency converter controller is used for receiving the motor control data frame and the safety data frame, sending the safety data frame to the functional safety controller and controlling the motor based on the motor control data frame.
Optionally, the communication card component is specifically configured to map, after receiving the data frame set transmitted by the controller, the secure data frame in the data frame set in the process data of CoE through a preset security configuration file, and transmit the mapped secure data frame to the functional security controller.
Optionally, determining whether the secure data frame is abnormal includes:
decomposing the safety data frame to obtain a safety data packet corresponding to the safety data frame;
determining a command word corresponding to the secure data packet;
and judging whether the safety data frame is abnormal or not according to the command word.
Optionally, determining whether the secure data frame is abnormal according to the command word includes:
determining a standard command word;
judging whether the command word is identical to the standard command word;
if the command word is different from the standard command word, judging that the safety data frame is abnormal;
and if the command word is the same as the standard command word, judging that the safety data frame is normal.
Optionally, the functional safety controller is further configured to output a motor safety torque shutdown signal after the safety data frame is abnormal, so that the motor is shutdown after receiving the motor safety torque shutdown signal.
Optionally, the method further comprises:
the communication insertion component is used for transmitting detection signals to the functional safety controller;
the functional safety controller is further configured to:
when receiving a test safety data frame transmitted by a communication card component, decomposing the test safety data frame to obtain a test safety data packet corresponding to the test safety data frame;
determining a test command word corresponding to the test security data packet, wherein the test command word is identical to a standard command word;
when the detection signal is received, the test command word is adjusted;
judging whether the adjusted test command word is identical with the standard command word;
if the adjusted test command word is the same as the standard command word, judging that the functional safety controller fails, and controlling the prompting module to perform corresponding prompting.
In order to solve the technical problem, the invention also provides a functional safety monitoring method, which is applied to a functional safety controller in a functional safety monitoring system, and the functional safety monitoring system further comprises: a communication card section; the method comprises the following steps:
the safety data frame transmitted by the communication card component is received, whether the safety data frame is abnormal or not is judged, and the safety data frame is obtained by decomposing the communication card component from the data frame set after the communication card component receives the data frame set transmitted by the controller;
if the safety data frame is abnormal, a control prompt module correspondingly prompts the abnormality;
and if the safety data frame is normal, triggering the function safety corresponding to the safety data frame.
In order to solve the technical problem, the invention also provides a functional safety monitoring device, which comprises:
a memory for storing a computer program;
and a processor for implementing the steps of the functional safety monitoring method as described above when executing the computer program.
To solve the above technical problem, the present invention further provides a computer readable storage medium for storing a computer program, where the computer program implements the functional safety monitoring method described above when executed by a processor.
The invention aims to provide a functional safety monitoring system, a method, a device and a medium, which are used for decomposing a data frame set received from a controller through a communication card component in order to monitor whether abnormal communication occurs in functional safety, decomposing a safety data frame from the data frame set, transmitting the safety data frame to a functional safety controller, judging whether the safety data frame is abnormal or not by the functional safety controller, and triggering functional safety corresponding to the safety data frame if the safety data frame is normal; if the safety data frame is judged to be abnormal, the control prompt module carries out corresponding prompt on the abnormality, further timely judges whether the communication is abnormal or not, and if the communication is abnormal, the user is prompted timely through the corresponding prompt, so that the user can conveniently maintain the abnormality timely after seeing the prompt, and safety accidents caused by long-time non-triggering of functional safety are avoided.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required in the prior art and the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a schematic diagram of a functional safety monitoring system according to the present invention;
FIG. 2 is a schematic diagram of another functional safety monitoring system according to the present invention;
FIG. 3 is a schematic diagram of a dual channel data network architecture provided by the present invention;
FIG. 4 is a schematic diagram of a fault monitoring flow provided by the present invention;
fig. 5 is a schematic structural diagram of a functional safety monitoring device provided by the present invention.
Detailed Description
The core of the invention is to provide a functional safety monitoring system, method, device and medium, which can timely judge whether the communication is abnormal or not, and prompt the user timely through corresponding prompt if the communication is abnormal, so that the user can conveniently and timely maintain the abnormality after seeing the prompt, and the safety accident caused by long-time non-triggering of functional safety is avoided.
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention, and it is apparent that the described embodiments are some embodiments of the present invention, but not all embodiments of the present invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
Referring to fig. 1, fig. 1 is a schematic structural diagram of a functional safety monitoring system according to the present invention. The system comprises:
a communication card part 1 for receiving the data frame set transmitted by the controller, decomposing the safety data frame from the data frame set, and transmitting the safety data frame to the functional safety controller 2;
in the present invention, the communication card unit 1 is used for receiving the data frame set transmitted by the controller, decomposing the received data frame set to obtain a safety data frame, and transmitting the safety data frame to the functional safety controller 2, so that the functional safety controller 2 can judge whether the safety data frame is normal or not.
In practical application, the controller may be a PLC (Programmable Logic Controller ).
The functional safety controller 2 is used for receiving the safety data frame transmitted by the communication card component 1, judging whether the safety data frame is abnormal, and if the safety data frame is abnormal, controlling the prompt module to correspondingly prompt the abnormality; and if the safety data frame is normal, triggering the function safety corresponding to the safety data frame.
In the invention, the function safety controller 2 is used for judging whether the safety data frame is abnormal after receiving the safety data frame transmitted by the communication card component 1, and if the safety data frame is abnormal, controlling the prompt module to correspondingly prompt the abnormality; if the safety data frame is normal, triggering the function corresponding to the safety data frame to judge whether the safety data frame is abnormal or not timely and accurately, and timely sending a prompt under the condition that the safety data frame is abnormal, thereby facilitating the faster maintenance of the abnormality of a user, avoiding danger caused by long-time non-triggering of the function and improving the reliability and safety of the scheme.
In order to monitor whether the communication of the function safety is abnormal, the communication card component 1 is required to decompose the data frame set received from the controller, decompose the safety data frame from the data frame set, and transmit the safety data frame to the function safety controller 2, the function safety controller 2 can judge whether the safety data frame is abnormal, and if the safety data frame is judged to be normal, the function safety corresponding to the safety data frame is triggered; if the safety data frame is judged to be abnormal, the control prompt module carries out corresponding prompt on the abnormality, further timely judges whether the communication is abnormal or not, and if the communication is abnormal, the user is prompted timely through the corresponding prompt, so that the user can conveniently maintain the abnormality timely after seeing the prompt, and safety accidents caused by long-time non-triggering of functional safety are avoided.
Based on the above embodiments:
referring to fig. 2, fig. 2 is a schematic structural diagram of another functional safety monitoring system according to the present invention. As an alternative embodiment, the communication card part 1 is further configured to decompose a motor control data frame from the set of data frames;
further comprises:
and the frequency converter controller is used for receiving the motor control data frame and the safety data frame, sending the safety data frame to the functional safety controller 2 and controlling the motor based on the motor control data frame.
In the invention, the functional safety monitoring system also comprises a frequency converter controller, and because the communication card component 1 can decompose the safety data frame from the data frame set and can decompose the motor control data frame from the data frame set, the frequency converter controller can also receive the motor control data frame and the safety data frame and send the safety data frame to the functional safety controller 2, and the motor is controlled based on the motor control data frame, the cost of the system can be reduced and the aesthetic degree of the appearance can be improved by transmitting the safety data frame through the frequency converter controller.
The communication card unit 1 includes two mapping processing channels, a first mapping channel is a black channel, and transmits unsafe data (motor control data frame) for controlling the motor and monitoring motor status data. The first mapping channel adopts CoE function in EtherCAT technology to map and transfer data; the second mapping channel is used for transmitting Safety data and is used for transmitting function Safety related instructions, and the communication function adopts a function Safety protocol FSoE (Fail Safe over EtherCAT) of EtherCAT technology group (EtherCAT Technology Group, ETG), namely, FSoE data packets (Safety PDU) are mapped in the process data of CoE through a Safety configuration file; the frequency converter controller receives the first channel data, analyzes and processes the data to perform various operations and monitoring on the motor, receives the second channel data, processes the data and forwards the data to the functional safety controller 2; the functional safety controller 2 receives the second channel data from the frequency converter forwarding data and performs analysis processing on the data in response to various safety states.
It should be further noted that, the functional security controller 2 includes two CPUs, the software is divided into three identical layers, the adaptation layer (ESAL) decomposes or combines the security PDU, the FSoE protocol stack processing layer processes the data frame, the security application layer (SAPL) completes the application function by using the security data, the software of each layer in the two CPUs independently runs and performs data cross-validation on the adaptation layer (ESAL) and the security application layer (SAPL), on the basis of this cross-validation, in order to further detect the fault state of the security data, add the detection of the command word of the received security data frame, and when the detection is in the non-security state, jump to the STO state to complete the function of immediate response to the fault state.
It should be noted that, the functional safety Controller 2 is formed by a dual-core CPU, as shown in fig. 3, software in the Controller 1 is formed by a keyboard input unit, a data interaction unit, a functional safety control unit and a fault processing unit, and software in the Controller 2 is formed by a nixie tube display unit, a data interaction unit, a functional safety control unit and a fault processing unit. Wherein the keyboard input unit includes a setting of functional safety specific functional parameters, a selection of local terminal triggers or remote communication triggers, and the like, and in addition, a fault code insertion function is added for verifying the present design function. The data interaction unit of the software in the Controller 1 comprises data interaction with the frequency converter Controller and data interaction with the Controller 2; the data interaction unit of the software in the Controller 2 comprises data interaction with the Controller 1 and data interaction with the nixie tube display unit. The nixie tube display unit is used for visualizing the function selection process and displaying the function safety state. The functional security control unit is used for verifying and processing the received security command, and belongs to the above-mentioned security application layer (SAPL). The fault handling unit is used to verify various fault conditions and perform fault jumps of the STO, including verification of communication fault conditions. The whole process is as follows: under the normal communication state, when the PLC sends a safety instruction, the safety instruction is transmitted to the communication card component 1 through the mapping of CoE and then is forwarded to the functional safety device by the frequency converter controller, and the functional safety controller 2 recognizes the instruction type, monitors in real time and jumps to the corresponding state.
Note that, in fig. 3, a Controller3 is a software structure of the communication card unit 1, and is composed of an Application layer (APL), an EtherCAT communication layer (EtherCAT Communication Layer, ECL), and a CANopen protocol stack (CANopen over EtherCAT, coE), and a Controller3 is a software structure of the inverter Controller, and is composed of an Application layer (APL).
As an alternative embodiment, the communication card unit 1 is specifically configured to map, after receiving the data frame set transmitted by the controller, the security data frames in the data frame set into the process data of CoE through a preset security configuration file, and transmit the mapped security data frames to the functional security controller 2.
In the invention, after the communication card component 1 receives the data frame set transmitted by the controller, the safety data frames in the data frame set are mapped in the process data of CoE through the preset safety configuration file, and the mapped safety data frames are transmitted to the functional safety controller 2, so that the transmission of the safety data frames is completed, and the accuracy of the transmission of the safety data frames is improved.
As an alternative embodiment, determining whether the secure data frame is abnormal includes:
decomposing the safety data frame to obtain a safety data packet corresponding to the safety data frame;
determining a command word corresponding to the security data packet;
and judging whether the safety data frame is abnormal or not according to the command word.
In the invention, the process of judging whether the safety data frame is abnormal is specifically as follows: the method comprises the steps of firstly decomposing the safety data frame to obtain a safety data packet corresponding to the safety data frame, then determining a command word corresponding to the safety data packet, and finally judging whether the safety data frame is abnormal according to the command word, so that the integrity of a judging process is ensured.
As an alternative embodiment, determining whether the secure data frame is abnormal according to the command word includes:
determining a standard command word;
judging whether the command word is the same as the standard command word;
if the command word is different from the standard command word, judging that the safety data frame is abnormal;
if the command word is the same as the standard command word, the security data frame is judged to be normal.
In the invention, the specific process for judging whether the safety data frame is abnormal according to the command word is as follows: determining a standard command word, judging whether the command word is identical to the standard command word, if the command word is not identical to the standard command word, judging that the safety data frame is abnormal, and if the command word is identical to the standard command word, judging that the safety data frame is normal, and accurately judging whether the safety data frame is abnormal.
As an alternative embodiment, the functional safety controller 2 is further configured to output a motor safety torque shutdown signal after the safety data frame is abnormal, so that the motor is turned off after receiving the motor safety torque shutdown signal.
In the invention, the functional safety controller 2 can also output the motor safety torque turn-off signal after judging that the safety data frame is abnormal, so that the motor is turned off after receiving the motor safety torque turn-off signal, the danger that the motor is not triggered for a long time due to the fact that the motor is not successfully overhauled for a long time is avoided, and the safety of the scheme is improved.
As an alternative embodiment, further comprising:
a communication plug-in component for transmitting detection signals to the functional safety controller 2;
the functional safety controller 2 is further configured to:
when receiving the test safety data frame transmitted by the communication card component, decomposing the test safety data frame to obtain a test safety data packet corresponding to the test safety data frame;
determining a test command word corresponding to the test security data packet, wherein the test command word is identical to the standard command word;
when the detection signal is received, the test command word is adjusted;
judging whether the adjusted test command word is identical with the standard command word;
if the adjusted test command word is the same as the standard command word, the functional safety controller 2 is judged to have faults, and the prompt module is controlled to carry out corresponding prompt.
In the invention, when the functional safety controller 2 receives a test safety data frame transmitted by a communication card component, the test safety data frame is decomposed to obtain a test safety data packet corresponding to the test safety data frame, and then a test command word corresponding to the test safety data packet is determined, wherein the test command word is identical to a standard command word, in order to verify the fault detection capability of the functional safety controller 2, a communication insertion component is newly added in the system, the communication insertion component transmits a detection signal to the functional safety controller 2, and when the functional safety controller 2 receives the detection signal, the test command word is adjusted, and whether the adjusted test command word is identical to the standard command word is judged, if the adjusted test command word is identical to the standard command word, namely, if the detection signal does not play a role, the functional safety controller 2 is judged to have a fault, and a prompt module is controlled to perform corresponding prompt, so that the abnormal judgment function of the functional safety controller 2 is detected, and the accuracy of a scheme is improved.
It should be noted that, the function code is set to insert the communication fault code of the communication plug-in component. The fault types include disordered transmission information sequence, transmission information loss, transmission information dislocation, additional increase of transmission information, transmission information damage and transmission information delay, and the requirements are that corresponding error information can be displayed and the STO state can be jumped according to communication faults. The fault insertion flow is shown in fig. 4, the communication is normal initially, the rest functions are normal, the function code insertion communication fault is set, the frequency converter immediately enters the STO state, and the communication display is abnormal. It is known that when a communication fails, the command word of the transmitted safety data frame will change, and the communication state will jump to an unsafe fault state, the functional safety controller 2 will receive this data, trigger the STO according to the fault state of the safety data frame, and complete the monitoring of the communication fault state.
In order to solve the technical problem, the present invention further provides a functional safety monitoring method, which is applied to the functional safety controller 2 in the functional safety monitoring system, and the functional safety monitoring system further comprises: a communication card section 1; the method comprises the following steps:
receiving a safety data frame transmitted by the communication card component 1, judging whether the safety data frame is abnormal or not, and decomposing the safety data frame from the data frame set after the communication card component 1 receives the data frame set transmitted by the controller;
if the safety data frame is abnormal, the control prompt module correspondingly prompts the abnormality;
and if the safety data frame is normal, triggering the function safety corresponding to the safety data frame.
The functional safety monitoring method provided in this embodiment corresponds to the above method, and therefore has the same beneficial effects as the above system, so the embodiments of the functional safety monitoring method part are referred to the description of the embodiments of the system part, and are not repeated here.
It should be noted that, the PLC (controller) sends a control instruction and a security instruction, which respectively correspond to the first mapping processing channel data and the second mapping processing channel data, and the communication card unit 1 identifies and decomposes the two mapping processing channel data, and obviously, the communication card unit 1 must possess a function of analyzing protocol frames, which belongs to data link layer processing; the frequency converter controller responds according to the received first mapping processing channel data, drives the motor to act, returns corresponding state information and finally transmits the state information to the upper computer for monitoring, and for the second mapping processing channel data, the frequency converter controller only forwards the data without processing, and forwards the data to the driving interface part, so that the functional safety controller 2 receives the data.
Referring to fig. 5, fig. 5 is a schematic structural diagram of a functional safety monitoring device according to the present invention.
The device comprises:
a memory 20 for storing a computer program;
a processor 21 for implementing the steps of the functional safety monitoring method as described above when executing a computer program.
The functional safety monitoring device provided in this embodiment may include, but is not limited to, a smart phone, a tablet computer, a notebook computer, a desktop computer, or the like.
Processor 21 may include one or more processing cores, such as a 4-core processor, an 8-core processor, etc. The processor 21 may be implemented in hardware in at least one of a digital signal processor (Digital Signal Processor, DSP), a Field programmable gate array (Field-Programmable Gate Array, FPGA), a programmable logic array (Programmable Logic Array, PLA). The processor 21 may also comprise a main processor, which is a processor for processing data in an awake state, also called central processor (Central Processing Unit, CPU), and a coprocessor; a coprocessor is a low-power processor for processing data in a standby state. In some embodiments, the processor 21 may be integrated with an image processor (Graphics Processing Unit, GPU) for taking care of rendering and rendering of the content that the display screen is required to display. In some embodiments, the processor 21 may also include an artificial intelligence (Artificial Intelligence, AI) processor for processing computing operations related to machine learning.
Memory 20 may include one or more computer-readable storage media, which may be non-transitory. Memory 20 may also include high-speed random access memory, as well as non-volatile memory, such as one or more magnetic disk storage devices, flash memory storage devices. In this embodiment, the memory 20 is at least used for storing a computer program 201, which, when loaded and executed by the processor 21, is capable of implementing the relevant steps of the functional safety monitoring method disclosed in any of the foregoing embodiments. In addition, the resources stored in the memory 20 may further include an operating system 202, data 203, and the like, where the storage manner may be transient storage or permanent storage. The operating system 202 may include Windows, unix, linux, among others. The data 203 may include, but is not limited to, functional safety monitoring methods, and the like.
In some embodiments, the functional safety monitoring device may further include a display 22, an input/output interface 23, a communication interface 24, a power supply 25, and a communication bus 26.
Those skilled in the art will appreciate that the configuration shown in fig. 5 is not limiting of the functional safety monitoring device and may include more or fewer components than shown.
The present embodiment aims to provide a functional safety monitoring device, in which a memory 20 is used to store a computer program, and a processor 21 is used to implement the steps of the functional safety monitoring method when executing the computer program, so that the monitoring process is more efficient and accurate.
The invention also provides a corresponding embodiment of the computer readable storage medium, which is used for storing a computer program, and the computer program realizes the functional safety monitoring method when being executed by a processor.
It will be appreciated that the methods of the above embodiments, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored on a computer readable storage medium. Based on this understanding, the technical solution of the present invention may be embodied essentially or in part or in whole or in part in the form of a software product stored in a storage medium for performing all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing program codes.
The computer readable storage medium provided in this embodiment corresponds to the above method, and therefore has the same beneficial effects as the above method, so that the embodiments of the computer readable storage medium portion are referred to the description of the embodiments of the method portion, and are not repeated here.
It should be noted that in this specification, relational terms such as first and second, and the like are used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Moreover, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises an element.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims (10)
1. A functional safety monitoring system, comprising:
the communication card component is used for receiving the data frame set transmitted by the controller, decomposing a safety data frame from the data frame set and transmitting the safety data frame to the functional safety controller;
the functional safety controller is used for receiving the safety data frame transmitted by the communication card component, judging whether the safety data frame is abnormal or not, and if the safety data frame is abnormal, controlling the prompting module to correspondingly prompt the abnormality; and if the safety data frame is normal, triggering the function safety corresponding to the safety data frame.
2. The functional safety monitoring system of claim 1 wherein the communication card means is further for decomposing a motor control data frame from the set of data frames;
further comprises:
and the frequency converter controller is used for receiving the motor control data frame and the safety data frame, sending the safety data frame to the functional safety controller and controlling the motor based on the motor control data frame.
3. The functional safety monitoring system according to claim 1, wherein the communication card unit is specifically configured to map, after receiving the data frame set transmitted by the controller, the safety data frames in the data frame set into the process data of CoE through a preset safety profile, and transmit the mapped safety data frames to the functional safety controller.
4. The functional safety monitoring system of claim 1, wherein determining whether the safety data frame is abnormal comprises:
decomposing the safety data frame to obtain a safety data packet corresponding to the safety data frame;
determining a command word corresponding to the secure data packet;
and judging whether the safety data frame is abnormal or not according to the command word.
5. The functional safety monitoring system of claim 4, wherein determining whether an anomaly has occurred in the safety data frame based on the command word comprises:
determining a standard command word;
judging whether the command word is identical to the standard command word;
if the command word is different from the standard command word, judging that the safety data frame is abnormal;
and if the command word is the same as the standard command word, judging that the safety data frame is normal.
6. The functional safety monitoring system of claim 1 wherein the functional safety controller is further configured to output a motor safety torque shutdown signal after the safety data frame is abnormal, such that the motor shuts down after receiving the motor safety torque shutdown signal.
7. The functional safety monitoring system of any one of claims 1 to 6, further comprising:
the communication insertion component is used for transmitting detection signals to the functional safety controller;
the functional safety controller is further configured to:
when receiving a test safety data frame transmitted by a communication card component, decomposing the test safety data frame to obtain a test safety data packet corresponding to the test safety data frame;
determining a test command word corresponding to the test security data packet, wherein the test command word is identical to a standard command word;
when the detection signal is received, the test command word is adjusted;
judging whether the adjusted test command word is identical with the standard command word;
if the adjusted test command word is the same as the standard command word, judging that the functional safety controller fails, and controlling the prompting module to perform corresponding prompting.
8. A functional safety monitoring method, characterized in that the functional safety monitoring method is applied to a functional safety controller in a functional safety monitoring system, the functional safety monitoring system further comprises: a communication card section; the method comprises the following steps:
the safety data frame transmitted by the communication card component is received, whether the safety data frame is abnormal or not is judged, and the safety data frame is obtained by decomposing the communication card component from the data frame set after the communication card component receives the data frame set transmitted by the controller;
if the safety data frame is abnormal, a control prompt module correspondingly prompts the abnormality;
and if the safety data frame is normal, triggering the function safety corresponding to the safety data frame.
9. A functional safety monitoring device, comprising:
a memory for storing a computer program;
a processor for implementing the steps of the functional safety monitoring method according to claim 8 when executing said computer program.
10. A computer readable storage medium storing a computer program which, when executed by a processor, implements the functional safety monitoring method of claim 8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310960247.7A CN116954133A (en) | 2023-07-31 | 2023-07-31 | Function safety monitoring system, method, device and medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310960247.7A CN116954133A (en) | 2023-07-31 | 2023-07-31 | Function safety monitoring system, method, device and medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116954133A true CN116954133A (en) | 2023-10-27 |
Family
ID=88451095
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310960247.7A Pending CN116954133A (en) | 2023-07-31 | 2023-07-31 | Function safety monitoring system, method, device and medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116954133A (en) |
-
2023
- 2023-07-31 CN CN202310960247.7A patent/CN116954133A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8285402B2 (en) | Method and system for safety monitored terminal block | |
| WO2023125852A1 (en) | Remote diagnosis method and apparatus, and electronic device and storage medium | |
| CN104570721B (en) | Redundant manipulator master slave mode determines method | |
| CN112714173B (en) | Platform door controller cloud platform system and control method | |
| CN112668012B (en) | Method and system for verifying safety of automatic driving human-computer interface | |
| EP3982268B1 (en) | Chassis simulation method and apparatus, server, storage medium and program product | |
| CN110493052B (en) | Security computer platform communication architecture compatible with different communication protocols | |
| CN108983695A (en) | A kind of master-slave switching method and device based on Complex Programmable Logic Devices | |
| CN115794313A (en) | Virtual machine debugging method, system, electronic equipment and storage medium | |
| CN101388258B (en) | Nuclear power generating set and alarm information control method and system thereof | |
| CN110370288A (en) | Robot security's control method, device, equipment and storage medium | |
| CN116954133A (en) | Function safety monitoring system, method, device and medium | |
| CN104793609A (en) | Self-adaptive optical electronic control system self-checking and fault diagnosis expert system | |
| CN109032867A (en) | A kind of method for diagnosing faults, device and equipment | |
| CN109634203B (en) | Control system for controlling IO terminal based on numerical control controller and corresponding method | |
| CN109557453A (en) | A kind of more main control chip identifying processing method and system | |
| CN104007944A (en) | Debugging printing method and system | |
| CN114626047A (en) | Verification method, device and equipment based on man-machine interaction | |
| KR102163762B1 (en) | Method for processing error in autonomous drive controller | |
| CN108648298A (en) | Message treatment method and device, storage medium, electronic equipment | |
| CN106598803A (en) | Method for remotely monitoring operation of host system | |
| WO2019214221A1 (en) | Communication method between laser and external device, and laser system | |
| CN114104037B (en) | Vehicle-mounted signal equipment redundancy equipment, method, device and medium | |
| CN116142296B (en) | Fault detection method, device and equipment for rear wheel steering system and storage medium | |
| CN113885401B (en) | Analog quantity output method, device and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |