DE102012107716B3 - Magnetic safety switch for non-contact cooperation with actuator, transmits security code in code portions that are smaller than full data block length of security code in sections between actuator and switch - Google Patents

Magnetic safety switch for non-contact cooperation with actuator, transmits security code in code portions that are smaller than full data block length of security code in sections between actuator and switch

Info

Publication number
DE102012107716B3
DE102012107716B3 DE201210107716 DE102012107716A DE102012107716B3 DE 102012107716 B3 DE102012107716 B3 DE 102012107716B3 DE 201210107716 DE201210107716 DE 201210107716 DE 102012107716 A DE102012107716 A DE 102012107716A DE 102012107716 B3 DE102012107716 B3 DE 102012107716B3
Authority
DE
Germany
Prior art keywords
safety switch
actuator
computer
safety
input
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
DE201210107716
Other languages
German (de)
Inventor
Klaus Wehmeyer
Marcus Scholz
Georg Zwirkowski
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Bernstein AG
Original Assignee
Bernstein AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Bernstein AG filed Critical Bernstein AG
Priority to DE201210107716 priority Critical patent/DE102012107716B3/en
Application granted granted Critical
Publication of DE102012107716B3 publication Critical patent/DE102012107716B3/en
Application status is Active legal-status Critical
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00Safety arrangements
    • G05B9/02Safety arrangements electric
    • G05B9/03Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/04Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/042Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
    • G05B19/0428Safety, monitoring

Abstract

The switch (1) comprises control output (4,5) that generates a disabling signal, if the distance (D) between safety switch and actuator (9) is set above or below predetermined limit value, such that switch is established with in range of wireless data communication to share a security code with a predetermined burst length. The security code in code portions that are smaller than full data block length of security code is transmitted in sections between actuator and switch.

Description

  • The invention relates to a non-contact safety switch according to claim 1.
  • A non-contact safety switch is z. B. from the DE 198 40 620 C1 known. The safety switch is designed to interact with an actuator. With the arrangement of safety switch and actuator z. B. monitored whether a protective door of a machine is open or closed. For safety reasons, as the safety door is normally not permitted to operate the machine, the safety switch can be used to switch off the machine via the switch output of the safety switch, if the safety door is opened as a result of the distance between the safety switch and the actuator being too large is or is opened.
  • From the DE 102 22 186 C1 shows a safety switch with a detection device for an actuator, which is coupled to a switching device and a transmitting element for emitting electromagnetic signals and an evaluation circuit which generates a switching signal for activating the switching device in response to electrical signals induced on a receiving element, wherein the evaluation circuit an integrator coupled to a timer for detecting the amount of electrical energy induced in the receiver during a period subsequent to emitting, and comparing means providing the switch signal when the amount of energy exceeds or falls below a predetermined threshold.
  • From the DE 691 08 261 T2 For example, there is a remote control device capable of responding to a plurality of types of security codes. The remote control device is intended for automatic garage door openers. A safety switching device is not apparent from this document.
  • The invention has for its object to provide a contrast improved safety switch, which has a reduced access time.
  • This object is achieved by the safety switch specified in claim 1.
  • The safety switch according to the invention has at least one software-controlled control circuit. The software-controlled control circuit has at least one computer which executes the software and thereby realizes the functions of the safety switch described below. The calculator can z. B. be executed as a microprocessor, microcontroller, ASIC or FPGA. If several computers are present in the safety switch, they can also be formed from various of the aforementioned components. The introduction of a software-controlled control circuit of the safety switch has the advantage that a safety switch can be provided with extended functionality that was previously practically impossible without such a software control or only with impractical effort was feasible. In particular, the safety switch can be designed to be configurable with respect to its functions, so that it can be adapted by a user with regard to the functions to be performed to a desired application. In addition, the software-controlled control circuit allows the provision of diagnostic functions with which errors z. B. can be determined easily and conveniently by means of a diagnostic device.
  • According to an advantageous embodiment, the invention relates to a non-contact safety switch, which is adapted for non-contact cooperation with an actuator, wherein the safety switch is adapted to generate at a switching output of the safety switch, a shutdown signal when the distance between the safety switch and the actuator a predetermined Limit above or below, characterized in that
    • a) the safety switch has at least one switch-off input,
    • b) the safety switch can be cascaded with further safety switches by connecting a switching output of a safety switch to a switch-off input of a downstream safety switch,
    • c) the safety switch has at least one logic gate formed as an electronic hardware component, wherein the switch output of the safety switch is connected to the output of the logic gate, and wherein a first input of the logic gate with a software-controlled control circuit of the safety switch, which for carrying out a data communication with the actuator is set up, connected and a second input of the logic gate, bypassing the software-controlled control circuit is connected to the turn-off input of the safety switch, wherein the logic gate is adapted to receive a cutoff signal at the turn-off independently of the signal applied to the first input immediately to the switching output of the safety switch to generate the shutdown signal.
  • This embodiment has the advantage that a purely hardware-induced rapid shutdown of all switching outputs of the cascade of safety switches is ensured. Even the last switching output in the cascade can be practical be switched off without delay. By means of the hardware-implemented logic gate, shutdown signals can be passed on directly from one safety switch to the next, without having to wait for appropriate processing in the software and corresponding software shutdown signals. As a result, a larger number of safety switches can be cascaded, z. For example, up to 32 safety switches. Nevertheless, the turnaround time of a shutdown signal from the first to the last safety switch is extremely low. So z. B. a worst-case response time of 20 milliseconds are respected. Compared to another hardware connection of switching signals, z. B. by relays or the like, the aforementioned safety switch has the advantage that no external wiring is required and can be dispensed in particular relays and the like. Rather, an emergency shutdown when cascading safety switches can be ensured by the logic gates integrated in the respective safety switch.
  • The shutdown signal can z. B. OFF signal, d. H. a signal that turns off a device connected to the switch output. The shutdown signal can z. Example, an interruption of the power supply of the connected device, a digital signal with a low level or other interruption of an electrical signal.
  • According to an advantageous embodiment, the logic gate is a logic gate with two inputs and one output. In the case of positive logic, the logic gate may be implemented as an AND gate, in the case of negative logic as an OR gate.
  • The safety switch can also have other switching outputs, as well as other turn-off inputs, in each case one of said logic gates can be provided to ensure the rapid shutdown in case of cascading safety switches.
  • According to an advantageous embodiment, the safety switch has a diagnostic interface. This has the advantage that by means of a diagnostic device, for. B. via a serial data protocol, with the safety switch diagnostic information can be exchanged and this particular error messages and defect identifications can be read and displayed. Parameterization of the safety switch can also be carried out via the diagnostic interface, ie. H. parameters of the safety switch can be set to set its functions as desired.
  • According to an advantageous embodiment, the safety switch can be configured with regard to its function via the diagnostic interface. In particular, different functions provided by the software in the safety switch can be activated or deactivated via the diagnostic interface. In addition, certain function parameters of the functions can be set to desired values via the diagnostic interface, such as: B. Response times to certain input signals.
  • According to an advantageous embodiment, the safety switch has at least one diagnostic input and at least one diagnostic output as a diagnostic interface, the diagnostic output for transmitting non-safety-related internal status information of the safety switch to an external device and the diagnostic input for receiving and forwarding non-safety-related status information via the diagnostic input are received, is set to a software-controlled control circuit of the safety switch. This has the advantage that separate connections for the diagnostic input and the diagnostic output are available, so that in case of cascading several safety switches and the diagnostic interfaces can be cascaded in such a way that a diagnostic output of a safety switch can be connected to a diagnostic input of a downstream safety switch , The software-controlled control circuit of the safety switch can then be set up to output all or part of the data received at the diagnostic input to the diagnostic output of the safety switch again, especially if the data is not for the safety switch itself, but for another, eg. B. downstream safety switch are determined.
  • According to an advantageous embodiment, the safety switch and the actuator have unique codes, which are associated with each other, wherein the safety switch is set up so that it cooperates only with a correspondingly coded actuator in terms of its full function. If no assigned actuator is detected with matching the safety switch coding, the safety switch z. B. leave the switch output permanently in the off state or then shut down. The codes can z. B. be executed such that in the actuator a security code is stored and in the safety switch a target security code of an associated safety switch actuator is stored. It can also be provided that the safety code is stored in the safety switch and the desired safety code of a safety switch belonging to the actuator is stored in the actuator. If it is detected that the security code and the target security code match, then the safety switch and the actuator will fit together and can perform their full function.
  • The check as to whether the security code matches the target security code can optionally be carried out in the safety switch or in the actuator. Depending on the type of execution either the security code is transmitted from the actuator to the safety switch and there compared with a stored in the safety switch desired security code, or the security code is transmitted from the safety switch to the actuator and compared in the actuator with a stored in the actuator target security code. If the comparison shows that the security code matches the target security code, then the security switch and actuator continue their wireless data communication and can begin their full function. If the actuator performs the comparison, he can then tell the result of the comparison in the sense of a good / bad signal the safety switch.
  • The invention relates to a non-contact safety switch, which is adapted for non-contact cooperation with an actuator, wherein the safety switch is adapted to generate at a switching output of the safety switch, a shutdown signal when the distance between the safety switch and the actuator over a predetermined limit or falls below, in particular a safety switch of the type described above, wherein the safety switch is adapted to exchange with the located in the range of the wireless data communication actuator a security code with a specific data block length, the security code in code sections that are smaller than the full data block length of the security code, is transmitted in sections between the actuator and the safety switch.
  • This has the advantage that the safety switch and / or the actuator can detect more quickly whether the actuator located within range of the wireless data communication is an actuator assigned to the safety switch or not. It can thus be decided more quickly by the safety switch and / or the actuator, if the communication between the safety switch and the actuator can be canceled and the safety switch, if necessary, goes into a safe state in which the shutdown signal is generated at the switching output. This can reduce the access time. For example, given a given data block length of 32 bits for the security code, this code can be transmitted in code sections of 4 bits each.
  • The transmission of the code sections from the actuator to the safety switch may e.g. B. be configured such that the safety switch each queries a particular section of code with a specific section number from the actuator, the actuator transmits the requested code section to the safety switch and the safety switch then compares this code section with a desired code portion of the stored in the safety switch desired security codes. In the case of the reverse transfer direction of the code sections, i. H. a transmission from the safety switch to the actuator, the actuator can each interrogate a certain section of code with a specific section number from the safety switch, the safety switch transmit the requested code section to the actuator and the actuator then this code section with a desired code section of the setpoint stored in the actuator Compare Security Codes According to an advantageous embodiment, transmission intervals in the wireless data communication are respectively provided between the code sections of the security code. This has the advantage that the element (safety switch or actuator) which performs the comparison of the corresponding code section with a desired code section has sufficient processing time for this comparison.
  • According to an advantageous embodiment, it is provided that the security switch is set up to check a security code transmitted by the operator after each transmitted code section for compliance with a corresponding code section of a target security code stored in the security switch and to stop further data transmission of the security code, as soon as a code section transmitted by the actuator does not coincide with the corresponding code section of the desired safety code, and in this case at the switch output of the safety switch, to generate the switch-off signal. If the code comparison is carried out by the actuator, it can be provided in an advantageous embodiment that the operator checks a safety code transmitted by the safety switch after each transmitted code section for compliance with a corresponding code section of a desired safety code stored in the actuator, and the further data transmission of the security code as soon as a code section transmitted by the security switch does not coincide with the corresponding code section of the target security code. As a result of the termination of data transmission, the safety switch detects an error and can then generate the shutdown signal at the switching output.
  • According to an advantageous embodiment, the safety switch is set up in the case a faulty transmission of a code section to perform one or possibly several repeated transmissions of the code section, as long as a predetermined maximum transmission time for the transmission of the security code is not exceeded. This can increase availability without compromising the security of the system, especially in environments with interference overlays. If the code comparison is performed by the actuator, such a repeat function can be realized in the actuator.
  • According to an advantageous embodiment, the invention relates to a non-contact safety switch, which is adapted for non-contact cooperation with an actuator, wherein the safety switch is adapted to generate at a switching output of the safety switch, a shutdown signal when the distance between the safety switch and the actuator a predetermined Limit exceeds or falls below, in particular a safety switch of the type described above, wherein the safety switch has a redundantly constructed software controlled control circuit having at least two computers, which are adapted to exchange data with each other during operation of the safety switch, only a first of the two computers is connected to a communication unit of the safety switch, which is set up for wireless data communication with the actuator, wherein the first computer is adapted to to exchange data with the actuator via the communication unit, wherein the first computer is adapted to forward at least a portion of the data received from the operator to the second computer and the second computer is adapted to perform a security check of that received from the operator and to the second one Computer to carry forwarded data independently of the first computer.
  • In this way, a so-called serial redundancy in the safety switch can be realized, which has the advantage that the relevant safety regulations for such safety switches can be met with little circuit and software effort. The safety switch has a redundant design without each of the two computers having to be connected directly to the communication unit. Rather, it is sufficient to connect only the first computer with the communication unit. The second computer can then be supplied with data received via the communication unit by being forwarded by the first computer via a data communication connection formed between the first and the second computer to the second computer. About this internal data communication connection z. For example, a security code may be provided by the operator to both computers so that both in the first computer and in the second computer the security code from the actuator is independently checked for compliance with a desired security code stored in the security switch become. The internal data communication connection between the first and the second computer has the further advantage that during the operation of the security switch, a cross-communication between the computers can take place, over which the computers can monitor each other. It can, for. B. give certain communication times at which data must be exchanged. As a result, the first computer can monitor the second computer and vice versa, both for correctness of the exchanged data and for the correct timing of the software execution.
  • According to an advantageous embodiment, the second computer is set up to carry out the security check of the security code received from the operator and forwarded to the second computer on the basis of a setpoint security code stored independently of the first computer in the second computer or a memory associated with the second computer , In particular, a memory allocated exclusively to the second computer can be used for storing the desired security code which is used for the security check by the second computer. This has the advantage that the storage means for storing the desired security code can be designed to be redundant.
  • According to an advantageous embodiment, the safety switch has a first switching output, to which only a shutdown signal can be generated by the first computer, and a second switching output, to which a shutdown signal can be generated only by the second computer independently of the first computer. As a result, the safety switch can be formed completely two-channel, wherein the two channels can be operated independently. Of course, the safety switch can be formed in the manner described above with more than two channels.
  • According to an advantageous embodiment, the safety switch has a first turn-off input, which is connected to the first computer and a second turn-off input, which is connected to the second computer independently of the first turn-off input. As a result, the safety switch can also be designed with two channels in terms of the turn-off inputs.
  • According to an advantageous embodiment, the first and the second computer are set up to switch off the switching output or the switching outputs of the safety switch as soon as an internal error in the data communication between the first and the second computer, an error in the data communication with the actuator or too large Distance between the actuator and the safety switch has been detected. The safety switch then goes into the so-called safe state in which the switching output or the switching outputs are switched off and thus corresponding, connected to the switching outputs machines are also switched off.
  • The invention will be explained in more detail by means of embodiments using drawings.
  • Show it:
  • 1 A safety switch with an associated actuator in a first embodiment and
  • 2 - Two safety switches with associated actuators in a second embodiment.
  • The 1 shows a schematic representation of a safety switch 1 and an actuator 9 with one between the safety switch 1 and the actuator 9 formed wireless data communication link 8th , The actuator 9 becomes contactless with respect to the safety switch 1 operated. For example, the safety switch 1 be attached to a shut-off fence of a machine, and the actuator 9 at a z. B. for purposes of maintenance of the machine to open the gate of Absperrzauns. Here are the safety switch 1 and the actuator 9 To install at positions that their distance D from each other when the door is relatively low, so small that the actuator 9 within reach of the data communication with the safety switch 1 is located so that over the data communication link 8th Data between the actuator 9 and the safety switch 1 can be exchanged. Will the actuator 9 then from the safety switch 1 moved, z. B. by opening the door, the distance D increases so far that no data communication over the data communication link 8th more is possible. This can be done by the safety switch 1 recognize that a safety-relevant shutdown state is present, namely the open door of the security fence, and can deliver appropriate shutdown signals to his subsequently explained switching outputs.
  • The safety switch 1 according to the exemplary illustration of the 1 six external electrical connections, namely a first turn-off input 3 , a second disconnect input 2 , a first switching output 5 , a second switching output 4 , a diagnostic input 6 and a diagnostic output 7 , The safety switch 1 has z. B. a common connector for the connections 2 . 3 . 4 . 5 . 6 . 7 on, which can then be contacted via an external plug. The safety switch 1 may possibly have other external electrical connections for the power supply of the safety switch. Alternatively, the safety switch 1 for power supply also be equipped with a built-in battery or a rechargeable battery, or be supplied with electrical energy wirelessly.
  • The safety switch 1 has one with the first disconnect input 3 connected first input circuit 20 on. The first input circuit 20 is the output side with a first computer 21 connected. The first computer 21 receives input signals from the first disconnect input 3 and processes these according to predetermined functions, possibly taking into account further signals received via other signal paths, and outputs an output signal determined therefrom to a first input of a first logic gate 23 from. The output of the first input circuit 20 is via a bypass signal path 25 who is the first calculator 21 bypasses, in addition directly to a second input of the first logic gate 23 connected. The first logic gate 23 can z. B. be designed as an AND gate. The output of the first logic gate 23 is on a first output circuit 24 led, which is present in this respect, internal logic signal of the safety switch 1 in one at the first switching output 5 to be issued switching signal converts and the first switching output 5 emits. The first output circuit 24 can z. B. include a power switching transistor with which comparatively large loads can be switched on and off.
  • The second disconnection input 2 is via a second input circuit 10 with a second computer 11 connected. The second computer 11 receives input signals from the second disconnect input 2 and processes them according to predetermined functions, possibly taking into account further signals received via other signal paths, and outputs an output signal determined therefrom to a first input of a second logic gate 13 from. The output of the second input circuit 10 is about a second computer 11 immediate bypass signal path 15 with a second input of the second logic gate 13 connected. The output of the second logic gate 13 is with a second output circuit 14 connected. The second output circuit 14 is the output side with the second switching output 4 connected. The second input circuit 10 can in the same way as the first input circuit 20 be educated. The second computer 11 can work in the same way as the first computer 21 be educated. The second logic gate 13 can be done in the same way as the first logic gate 23 be educated. The second output circuit 14 can be the same as the first output circuit 24 be educated.
  • The calculator 11 . 21 can have internal volatile and non-volatile memory. In addition, the calculator can 11 . 12 associated with each external, external volatile or non-volatile memory 12 . 22 be connected. The non-volatile memory can z. B. be designed as EEPROM or flash memory. In particular, a desired security code can be stored in the nonvolatile memory, which is provided with a signal from the actuator 9 received security code is compared.
  • Between the first computer 21 and the second computer 11 is an internal data communication connection 31 formed, z. B. in that respective serial interface ports of the computer 11 . 21 are interconnected, or in that different port connections of the computer are connected to each other, so that a parallel interface is realized. Via the data communication connection 31 Control the computers 11 . 21 each other and exchange data with each other, such. B. a received from the actuator security code.
  • The first computer 21 is also with a communication unit 30 connected. About the communication unit 30 The first computer can bidirectionally over the data transmission path 8th Data with the actuator 9 change. For this purpose, the actuator points 9 z. B. one as a counterpart to the communication unit 30 trained communication unit 90 on. The communication unit 90 is with a calculator 91 of the actuator 9 connected. The computer 91 may also have internal volatile or nonvolatile memory, and / or external nonvolatile and / or volatile memory 92 , In particular, the security code which serves for the detection, whether the actuator is stored in the non-volatile memory 9 the safety switch 1 assigned.
  • The actuator 9 may optionally have external electrical connections for powering the actuator. Alternatively, the actuator 9 for power supply also be equipped with a built-in battery or a rechargeable battery, or be supplied with electrical energy wirelessly.
  • The communication units 30 . 90 can basically be designed in any way that a wireless or contactless data communication over the data transmission link 8th allowed. The communication can z. B. by optical signals, eg. B. in the visible or non-visible region of the light, via electromagnetic waves or pure magnetic fields. Suitable is z. B. a radio communication between the communication units 30 . 90 ,
  • The diagnostic input 6 is via a signal path 60 both to the first computer 21 as well as to the second computer 11 introduced so that both computers 11 . 21 via the diagnostic input 6 can receive input data. The diagnostic output 7 is via a signal path 70 but only with the first computer 21 connected, leaving only the first computer 21 Data about the diagnostic output 7 can spend. If from the second computer 11 generated data via the diagnostic output 7 are to be output, these are from the second computer 11 via the internal data communication connection 31 to the first computer 21 transferred to. The first computer 21 can then read the data via the diagnostic output 7 submit.
  • To further increase safety and redundancy, both the input circuits 10 . 20 as well as the output circuits 14 . 24 from the computers 11 . 21 be monitored. It can, for. B. a crosswise monitoring be provided such that the second computer 11 via a signal path 16 the first input circuit 20 and via a signal path 27 the first output circuit 24 supervised. The first computer 21 then monitors over a signal path 26 the second input circuit 10 as well as via a signal path 17 the second output circuit 14 ,
  • The 2 shows by means of two safety switches 100 . 200 the cascading of safety switches according to the invention. The safety switches 100 . 200 can be designed in the same way as the safety switch 1 according to 1 , To simplify the illustration is in the 2 reproduced an embodiment in which the safety switch 100 . 200 are reproduced in a single channel, ie with a respective turn-off input 120 . 220 and a respective switching output 140 . 240 , This is at the turn-off input 120 of the first safety switch 100 receive an input signal, e.g. B. a turn-on signal for a machine to be switched 300 , The switching output 140 of the first safety switch 100 is with the turn-off input 220 of the second safety switch 200 connected. The switching output 240 of the second safety switch is with the on or off machine 300 connected. In this case, therefore, the safety switches 100 . 200 cascaded arranged. In principle, more than the illustrated two safety switches can be cascaded in the manner described.
  • Both safety switches 100 . 200 are provided with the previously described rapid shutdown, ie they have respective bypass signal paths 106 . 206 on, through which the respective computers 102 . 202 to be bypassed. This can be a respective output signal of the input circuits 101 . 201 directly to an input of a logic gate 104 . 204 and logic gate 104 . 204 to a respective output circuit 105 . 205 are discharged, wherein the output circuits 105 . 205 again with the respective switching outputs 140 . 240 are connected. Incidentally, the structure corresponds to the safety switch 100 . 200 the safety switch described above 1 , The respective computer 102 . 202 can with an external memory 103 . 203 be connected. In addition, the respective computer 102 . 202 the safety switch 100 . 200 with a respective communication unit 107 . 207 connected. About the communication unit 107 . 207 can the respective safety switch 100 . 200 via a non-contact data communication link 108 . 208 with an associated actuator 110 . 210 communicate. The actuators 110 . 210 can also be like the previously explained actuator 9 be constructed, ie with a respective communication unit 111 . 211 , a computer connected to it 112 . 212 as well as possibly with one with the computer 112 . 212 connected external memory 113 . 213 ,
  • Is through one of the safety switches 100 . 200 the chain of safety switches issued a shutdown signal to the respective switching output, so this is the software function of the computer 102 . 202 over the respective bypass signal paths 106 . 206 as well as the logic gates 104 . 204 directly to the machine to be switched off 300 transferred, so that the machine can be switched off virtually instantaneously.

Claims (14)

  1. Non-contact safety switch ( 1 . 100 . 200 ) for non-contact interaction with an actuator ( 9 . 110 . 210 ), the safety switch ( 1 . 100 . 200 ) is adapted to a switching output ( 4 . 5 . 140 . 240 ) of the safety switch ( 1 . 100 . 200 ) to generate a shutdown signal when the distance (D) between the safety switch ( 1 . 100 . 200 ) and the actuator ( 9 . 110 . 210 ) exceeds or falls below a predetermined limit, characterized in that the safety switch ( 1 . 100 . 200 ) is set up with the actuator (within reach of wireless data communication) ( 9 . 110 . 210 ) exchanging a security code with a specific data block length, wherein the security code in sections of code which are smaller than the full data block length of the security code, in sections between the actuator ( 9 . 110 . 210 ) and the safety switch ( 1 . 100 . 200 ) is transmitted.
  2. Safety switch ( 1 . 100 . 200 ) according to claim 1, characterized in that between the code sections of the security code each transmission pauses are provided in the wireless data communication.
  3. Safety switch ( 1 . 100 . 200 ) according to claim 1 or 2, characterized in that the safety switch ( 1 . 100 . 200 ) is adapted to receive a signal from the operator ( 9 . 110 . 210 ) transmitted code after each transmitted code section to coincide with a corresponding code portion of a target security code in the safety switch ( 1 . 100 . 200 ) and to stop further data transmission of the security code as soon as 9 . 110 . 210 ) is not coincident with the corresponding code section of the desired security code, and in this case at the switching output ( 4 . 5 . 140 . 240 ) of the safety switch ( 1 . 100 . 200 ) to generate the shutdown signal.
  4. Safety switch ( 1 . 100 . 200 ) according to claim 3, characterized in that the safety switch ( 1 . 100 . 200 ) is adapted to carry out in the event of a faulty transmission of a code section one or possibly several repeated transmissions of the code section, as long as a predetermined maximum transmission time for the transmission of the security code is not exceeded.
  5. Safety switch ( 1 . 100 . 200 ) according to one of the preceding claims, characterized in that a) the safety switch ( 1 . 100 . 200 ) at least one Shutdown input ( 2 . 3 . 120 . 220 ), b) the safety switch ( 1 . 100 . 200 ) with additional safety switches ( 1 . 100 . 200 ) can be cascaded by a switching output ( 4 . 5 . 140 . 240 ) of a safety switch ( 1 . 100 . 200 ) with a turn-off input ( 2 . 3 . 120 . 220 ) of a downstream safety switch ( 1 . 100 . 200 ), c) the safety switch ( 1 . 100 . 200 ) at least one designed as an electronic hardware component logic gate ( 13 . 23 . 104 . 204 ), wherein the switching output ( 4 . 5 . 140 . 240 ) of the safety switch ( 1 . 100 . 200 ) with the output of the logic gate ( 13 . 23 . 104 . 204 ), and wherein a first input of the logic gate ( 13 . 23 . 104 . 204 ) with a software-controlled control circuit ( 11 . 21 . 102 . 202 ) of the safety switch ( 1 . 100 . 200 ) used to perform data communication with the actuator ( 9 . 110 . 210 ) is connected, and a second input of the logic gate ( 13 . 23 . 104 . 204 ) bypassing the software controlled control circuit ( 11 . 21 . 102 . 202 ) with the turn-off input ( 2 . 3 . 120 . 220 ) of the safety switch ( 1 . 100 . 200 ), the logic gate ( 13 . 23 . 104 . 204 ) is set up, upon receipt of a shutdown signal at the turn-off input ( 2 . 3 . 120 . 220 ) regardless of the signal present at the first input immediately at the switching output ( 4 . 5 . 140 . 240 ) of the safety switch ( 1 . 100 . 200 ) to generate the shutdown signal.
  6. Safety switch ( 1 . 100 . 200 ) according to claim 5, characterized in that in one embodiment of the logic gate ( 13 . 23 . 104 . 204 ) in positive logic the logic gate ( 13 . 23 . 104 . 204 ) as an AND gate and in an execution of the logic gate ( 13 . 23 . 104 . 204 ) in negative logic the logic gate ( 13 . 23 . 104 . 204 ) is formed as an OR gate.
  7. Safety switch ( 1 . 100 . 200 ) according to one of the preceding claims, characterized in that the safety switch ( 1 . 100 . 200 ) a diagnostic interface ( 6 . 7 ) having.
  8. Safety switch ( 1 . 100 . 200 ) according to claim 7, characterized in that the safety switch ( 1 . 100 . 200 ) as a diagnostic interface ( 6 . 7 ) at least one diagnostic input ( 6 ) and at least one diagnostic output ( 7 ), the diagnostic output ( 7 ) for transmission of non-safety-related internal status information of the safety switch ( 1 . 100 . 200 ) to an external device and the diagnostic input ( 6 ) for receiving and forwarding non-safety-related status information that is sent via the diagnostic input ( 6 ) to a software controlled control circuit ( 11 . 21 . 102 . 202 ) of the safety switch ( 1 . 100 . 200 ) is set up.
  9. Safety switch ( 1 . 100 . 200 ) according to claim 7 or 8, characterized in that the safety switch ( 1 . 100 . 200 ) via the diagnostic interface ( 6 . 7 ) is configurable in terms of its function.
  10. Safety switch ( 1 . 100 . 200 ) according to one of the preceding claims, characterized in that the safety switch ( 1 . 100 . 200 ) a redundantly constructed software-controlled control circuit ( 11 . 21 . 102 . 202 ) comprising at least two computers ( 11 . 21 . 102 . 202 ), which are adapted to operate during operation of the safety switch ( 1 . 100 . 200 ) exchange data with each other, whereby only a first of the two computers ( 11 . 21 . 102 . 202 ) with a communication unit ( 30 . 107 . 207 ) of the safety switch ( 1 . 100 . 200 ) for wireless data communication with the actuator ( 9 . 110 . 210 ), the first computer ( 21 . 107 . 207 ) is set up to communicate with the actuator via the communication unit ( 9 . 110 . 210 ), whereby the first computer ( 21 . 107 . 207 ) is adapted to at least a part of the by the actuator ( 9 . 110 . 210 ) received data to the second computer ( 11 ) and the second computer ( 11 ) is set up to perform a safety check by the operator ( 9 . 110 . 210 ) and to the second computer ( 11 ) forwarded data independently of the first computer ( 21 . 107 . 207 ).
  11. Safety switch ( 1 . 100 . 200 ) according to claim 10, characterized in that the second computer ( 11 ) is set up to perform the safety check of the 9 . 110 . 210 ) and to the second computer ( 11 ) forwarded security codes by means of an independent in the second computer ( 11 ) or an associated, the second computer ( 11 ) associated memory ( 12 ) stored desired security code.
  12. Safety switch ( 1 . 100 . 200 ) according to one of claims 10 to 11, characterized in that the safety switch ( 1 . 100 . 200 ) a first switching output ( 5 . 140 . 240 ), on which only from the first computer ( 21 . 107 . 207 ) a shutdown signal is generated, and a second switching output ( 4 ), on which only from the second computer ( 11 ) independent of the first computer ( 21 . 107 . 207 ) A shutdown signal can be generated.
  13. Safety switch ( 1 . 100 . 200 ) according to one of claims 10 to 12, characterized in that the safety switch ( 1 . 100 . 200 ) a first turn-off input ( 3 . 120 . 220 ) associated with the first computer ( 21 . 107 . 207 ) and a second shutdown input ( 2 ), which is independent of the first shutdown input ( 3 . 120 . 220 ) with the second computer ( 11 ) connected is.
  14. Safety switch ( 1 . 100 . 200 ) according to one of claims 10 to 13, characterized in that the first and the second computer ( 11 . 12 . 102 202 ) are adapted to the switching output ( 4 . 5 . 140 . 240 ) or the switching outputs of the safety switch ( 1 . 100 . 200 ) as soon as an internal error in the data communication between the first and the second computer ( 11 . 12 . 102 . 202 ), an error in the data communication with the actuator ( 9 . 110 . 210 ) or too large a distance between the actuator ( 9 . 110 . 210 ) and the safety switch ( 1 . 100 . 200 ) was detected.
DE201210107716 2012-08-22 2012-08-22 Magnetic safety switch for non-contact cooperation with actuator, transmits security code in code portions that are smaller than full data block length of security code in sections between actuator and switch Active DE102012107716B3 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
DE201210107716 DE102012107716B3 (en) 2012-08-22 2012-08-22 Magnetic safety switch for non-contact cooperation with actuator, transmits security code in code portions that are smaller than full data block length of security code in sections between actuator and switch

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE201210107716 DE102012107716B3 (en) 2012-08-22 2012-08-22 Magnetic safety switch for non-contact cooperation with actuator, transmits security code in code portions that are smaller than full data block length of security code in sections between actuator and switch

Publications (1)

Publication Number Publication Date
DE102012107716B3 true DE102012107716B3 (en) 2013-09-26

Family

ID=49112470

Family Applications (1)

Application Number Title Priority Date Filing Date
DE201210107716 Active DE102012107716B3 (en) 2012-08-22 2012-08-22 Magnetic safety switch for non-contact cooperation with actuator, transmits security code in code portions that are smaller than full data block length of security code in sections between actuator and switch

Country Status (1)

Country Link
DE (1) DE102012107716B3 (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE69108261T2 (en) * 1990-12-13 1995-07-06 Chamberlain Group Inc Remote control system with a key-operated transmitter and a fixed code transmitter.
DE19840620C1 (en) * 1998-09-05 2000-04-27 Steute Schaltgeraete Gmbh & Co Non-contact safety switch
DE10222186C1 (en) * 2002-05-18 2003-10-09 Schmersal K A Gmbh & Co Safety switch has comparator providing switch signal if energy induced in receiver element during period following electromagnetic signal emission exceeds/falls below predefined threshold

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE69108261T2 (en) * 1990-12-13 1995-07-06 Chamberlain Group Inc Remote control system with a key-operated transmitter and a fixed code transmitter.
DE19840620C1 (en) * 1998-09-05 2000-04-27 Steute Schaltgeraete Gmbh & Co Non-contact safety switch
DE10222186C1 (en) * 2002-05-18 2003-10-09 Schmersal K A Gmbh & Co Safety switch has comparator providing switch signal if energy induced in receiver element during period following electromagnetic signal emission exceeds/falls below predefined threshold

Similar Documents

Publication Publication Date Title
US6678586B2 (en) Vehicle built-in electronic control apparatus
EP1407860A2 (en) Robot controller with wireless communication between a robot and a portable teaching operating part
US7130171B2 (en) Apparatus for fail-safely disconnecting an electrical load; in particular in industrial production plants
US8355837B2 (en) System and method for testing the integrity of a vehicle testing/diagnostic system
US7610119B2 (en) Safety controller and system using same
US6957115B1 (en) Security-related bus automation system
JP4893931B2 (en) Safety controller
EP2147338B1 (en) Optoelectronic sensor for securing a hazardous area
US7948391B2 (en) Signaling device for a safety circuit
WO2005000727A1 (en) Safety system for an elevator structure
EP1277378A1 (en) Safety switching device module arrangement
JP4729561B2 (en) Safety circuit and safety switch applied thereto
EP0972389A2 (en) Security control system, method for the operation thereof
US20100286845A1 (en) Fail-safe system for autonomous vehicle
WO2000079353A1 (en) Control system for controlling security-critical processes
US7750497B2 (en) Power feed control circuit for on-vehicle electronic control apparatuses
JP2011008642A (en) Safety device and power converter
US8125109B2 (en) Modular safety switching system and method
DE102004020995C5 (en) Signaling device for a safety circuit
CN102341288B (en) Door control system for railroad vehicle
US20100168877A1 (en) Electronic system with component redundancy, and control chain for a motor implementing such system
US7555353B2 (en) Input device of safety unit
WO2005003869A1 (en) Device and method for automatically controlling a technical system operation
US6285096B1 (en) Safety switch arrangement
EP1620768A1 (en) Method and device for controlling a safety-critical process

Legal Events

Date Code Title Description
R012 Request for examination validly filed
R016 Response to examination communication
R016 Response to examination communication
R018 Grant decision by examination section/examining division
R020 Patent grant now final

Effective date: 20131228

R082 Change of representative

Representative=s name: GRAMM, LINS & PARTNER PATENT- UND RECHTSANWAEL, DE