EP0031046A2 - Device for data secure control and supervision of electric equipments - Google Patents
Device for data secure control and supervision of electric equipments Download PDFInfo
- Publication number
- EP0031046A2 EP0031046A2 EP80107434A EP80107434A EP0031046A2 EP 0031046 A2 EP0031046 A2 EP 0031046A2 EP 80107434 A EP80107434 A EP 80107434A EP 80107434 A EP80107434 A EP 80107434A EP 0031046 A2 EP0031046 A2 EP 0031046A2
- Authority
- EP
- European Patent Office
- Prior art keywords
- consumers
- commands
- transmission
- switching
- operating
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000005540 biological transmission Effects 0.000 claims abstract description 28
- 230000001960 triggered effect Effects 0.000 claims abstract 2
- 239000013307 optical fiber Substances 0.000 claims description 11
- 238000012544 monitoring process Methods 0.000 claims description 9
- 238000011156 evaluation Methods 0.000 claims 1
- 230000006870 function Effects 0.000 abstract description 3
- 230000001143 conditioned effect Effects 0.000 abstract 1
- 238000012806 monitoring device Methods 0.000 description 10
- 238000012360 testing method Methods 0.000 description 9
- 230000006399 behavior Effects 0.000 description 5
- 238000001208 nuclear magnetic resonance pulse sequence Methods 0.000 description 5
- 230000003287 optical effect Effects 0.000 description 5
- 238000011990 functional testing Methods 0.000 description 4
- 230000011664 signaling Effects 0.000 description 4
- 238000000034 method Methods 0.000 description 3
- 230000008569 process Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 2
- 238000006243 chemical reaction Methods 0.000 description 2
- 230000008878 coupling Effects 0.000 description 2
- 238000010168 coupling process Methods 0.000 description 2
- 238000005859 coupling reaction Methods 0.000 description 2
- 230000006378 damage Effects 0.000 description 2
- 230000007547 defect Effects 0.000 description 2
- 238000001514 detection method Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 238000012546 transfer Methods 0.000 description 2
- 208000027418 Wounds and injury Diseases 0.000 description 1
- 238000007792 addition Methods 0.000 description 1
- 230000000903 blocking effect Effects 0.000 description 1
- 230000002950 deficient Effects 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000005611 electricity Effects 0.000 description 1
- 239000000835 fiber Substances 0.000 description 1
- 208000014674 injury Diseases 0.000 description 1
- 230000004807 localization Effects 0.000 description 1
- 239000000463 material Substances 0.000 description 1
- 238000005259 measurement Methods 0.000 description 1
- 230000015654 memory Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 238000012031 short term test Methods 0.000 description 1
- 238000013024 troubleshooting Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G08—SIGNALLING
- G08G—TRAFFIC CONTROL SYSTEMS
- G08G1/00—Traffic control systems for road vehicles
- G08G1/097—Supervising of traffic control systems, e.g. by giving an alarm if two crossing streets have green light simultaneously
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B61—RAILWAYS
- B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
- B61L7/00—Remote control of local operating means for points, signals, or track-mounted scotch-blocks
- B61L7/06—Remote control of local operating means for points, signals, or track-mounted scotch-blocks using electrical transmission
- B61L7/08—Circuitry
- B61L7/088—Common line wire control using series of coded pulses
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B61—RAILWAYS
- B61L—GUIDING RAILWAY TRAFFIC; ENSURING THE SAFETY OF RAILWAY TRAFFIC
- B61L7/00—Remote control of local operating means for points, signals, or track-mounted scotch-blocks
- B61L7/06—Remote control of local operating means for points, signals, or track-mounted scotch-blocks using electrical transmission
- B61L7/08—Circuitry
- B61L7/10—Circuitry for light signals, e.g. for supervision, back-signalling
-
- G—PHYSICS
- G08—SIGNALLING
- G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
- G08B29/00—Checking or monitoring of signalling or alarm systems; Prevention or correction of operating errors, e.g. preventing unauthorised operation
- G08B29/02—Monitoring continuously signalling or alarm systems
- G08B29/04—Monitoring of the detection circuits
Definitions
- the invention relates to a device according to the preamble of claim 1.
- the monitoring process can be carried out continuously over dedicated lines, as is the case, for example, with the monitoring of traffic light systems in the railroad sector, or it can be carried out cyclically or sporadically in successive time intervals, which allow a sufficiently short error detection time to be achieved.
- a control and monitoring device for motor vehicles operated by a microprocessor in which the individual consumers, preferably the lighting devices of a vehicle, are monitored by briefly switching off the consumers that are operationally switched on and briefly switching on the consumers that are switched off.
- the time spans for the short-term reversal of the consumers are chosen so that the monitoring devices can respond to the determination of the respective consumer current, but the human eye cannot yet follow the switching on and off of the consumers in the reversal periods.
- the known control and monitoring device even if only with a limited number of consumers to be monitored, enables extraordinarily rapid fault detection in the event of a fault.
- a message board is provided for the fault display, on which each fault identified can be optically localized. This optical localization is the starting point for subsequent troubleshooting.
- the object of the present invention is to provide a device according to the preamble of claim 1 which, despite the use of relatively unsafe switching elements, is sufficiently safe both in the control point and in the local operating points in the signaling sense.
- the invention solves this task by applying the features specified in the characterizing part of the main claim. Particularly advantageous additions and embodiments of the device according to the invention are specified in the subclaims.
- the drawing shows in the left part the command transmitter KS and the message receiver ME of a control center, in the right part the command receiver KE and the message transmitter MS for several electrical consumers arranged spatially adjacent to one another at a certain operating location; the electrical consumers are symbolized by signal lamps L1 to L4.
- the command transmitter KS and the message receiver ME of the control station are controlled, for example, by a secure microcomputer, not shown, to whose data and address bus DB and AB an input register ER for commands and an output register AR for messages are connected.
- the input register ER of the command transmitter is addressed by the address bus AB of the computer; it takes the data from the data bus DB into the register.
- This register can have a width of 5 bytes, corresponding to 40 bits.
- the conversion of the bits stored in the register into a serial telegram is started.
- the data are read out from the input register ER into a parallel / series converter PSK for the commands and fed from this to an encoder CK for the commands.
- the pulse sequence supplied by the parallel / series converter PSK is converted into a for the Transfer appropriate form implemented. This is done, for example, by the encoder CK converting the bits read out from the parallel / series converter PSK into a pulse train with a changing pulse / pause ratio, depending on their respective binary state.
- a counter ZS1 is connected to the output of the encoder CK; by counting the pulses emitted by the encoder, this counter is able to recognize the beginning and the end of a pulse telegram complete for the command. It blocks the encoder after the output of a complete command telegram and thus ensures that no further telegram can be output without new input information.
- the commands are transmitted from the command transmitter to the message receiver via an optical fiber LWK for the commands.
- the pulse sequences emitted by the encoder CK with different pulse-pause ratios are converted into short light pulses with a corresponding pulse spacing in a transmission module SK and fed into the optical waveguide.
- the light pulses received via the optical waveguide LWK are converted back into electrical pulses, the pulse pause ratio of which corresponds to the pulse pause ratio of the pulses emitted by the encoder CK to the transmitter module SK.
- a downstream decoder DK for the commands converts the supplied pulse sequence back into the bit sequence extracted from the parallel series converter PSK with the associated binary status values "high” and “low” and feeds it to a series / parallel converter SPK for the commands.
- a counter ZE1 assigned to the message receiver ME delivers a transfer pulse to an output register AS downstream of the series / parallel converter SPK, which then takes over the bit sequence stored in the series / parallel converter SPK and makes it available for the execution of the command.
- each bit of the bit sequence transmitted via the optical waveguide LWK is assigned to a specific consumer of the operating location and that the respective binary signal state of this bit identifies the respective desired operating state of the associated consumer.
- switches T1 to T4 are connected to the outputs of the output register AS and are used to switch the consumers L1 to L4 on and off.
- the respective switching state of the consumers L1 to L4 is determined by monitors U1 to U4 connected directly or indirectly to their current path and is sent to a message transmitter MS for issuing status messages.
- the monitors are advantageously designed as threshold switches, which respond to an inadmissibly low and an inadmissibly high consumer current and which issue a status message for the relevant consumer which is different from the status message given in the case of a proper consumer current.
- the status messages of the monitors U1 to U4 are fed as a bit pattern to a parallel / series converter PSM for the messages.
- this parallel / series converter emits a pulse train to an encoder CM for the messages which, when all the consumers in the operating location are in the correct operating state, with the exception of a few test bits and a monitoring bit for the switching element of the pulse train forwarded by the parallel / series converter PSK of the command transmitter KS. to the local encoder CK. corresponds.
- the encoder CM for the messages has the same structure as the encoder CK for the commands.
- a counter ZS2 connected to the output of the encoder CM responds as soon as the encoder CM has forwarded a complete message telegram to a transmission module SM connected downstream of it and then blocks the output of further signals by applying blocking potential until commands are received again by the command receiver .
- the switching means for synchronizing command reception and message delivery are not shown in the drawing because they have nothing to do with the essentials of the invention.
- the synchronization is carried out by recovering the constant switching frequency for the parallel / series converter PSK selected on the transmission side from the clock pulse sequence of the commands received via the fiber optic cable LWK with a different pulse / pause ratio.
- the pulse sequence supplied by the encoder CM of the message transmitter is converted in a transmission module SM into short light pulses with a corresponding pulse spacing and transmitted via an optical fiber LWM for the status messages to the message receiver ME of the control center.
- a signaling module EM is connected to the optical waveguide LWM, which converts the received light pulses into electrical pulses with different pulse intervals in accordance with the receiver module EK of the command receiver.
- a downstream one Decoder DM for the messages converts these pulses into corresponding binary signals with the signal states "high” and "low”.
- the bit pattern emitted by the decoder DM reaches a series / parallel converter SPM for the messages and is buffered there.
- a counter ZE2 connected to the output of the receiver module EM, which counts the incoming pulses, responds after receipt of a complete pulse telegram and outputs an accept pulse for the output register AR, which then accepts the bit sequence stored in the series / parallel converter SPM .
- the received data on the data bus are called up as required from the output register AR.
- the correct execution of the commands can be determined by comparing the data stored in the output register AR with the sent commands.
- the commands sent are to be stored in temporary memories (not shown) until the corresponding feedback has been received.
- the transmission path from the control point to the consumers and back and the functional behavior of the consumers can be monitored.
- the control point In order to achieve the required security in the control and monitoring of the consumers, it is not only necessary to recognize any faults or any misconduct on the part of the consumer, but it must also be possible for the control point to target the consumers in the event of a fault individual locations. This can be done, for example, by switching off some or all of the consumers to the one individual locations.
- a switching element R which can be acted upon by certain control commands from the control point is provided at each operating location and becomes effective if the control commands are not present for a specified period of time. It then permanently switches off those consumers of the operating location in question according to a predetermined switching routine, the current-carrying state of which could represent a hazard. In addition, the switching element switches on a consumer, the current-carrying state of which signals a moment of danger and which thus leads to relaxation of the dangerous situation at the operating location.
- control commands to act on the switching element are formed by cyclically changing reversing commands.
- the time between two successive control commands is determined by the permissible error disclosure time, which in turn determines the time interval for the treatment of the consumers of an operating location by the safe microcomputer of the control center. If the rerouting commands are omitted, for example as a result of a transmission disturbance or if they are deliberately suppressed by the control unit, the switching element acts on the consumers of the operating location concerned in accordance with the predetermined switching routine.
- the respective switching state of the switching element can be recognized by corresponding status messages in the control unit, which triggers a fault signal in the absence of changing status messages in the successive transmission cycles.
- the switching element R is symbolically indicated as a relay circuit and the switching means controlled by it as relay contacts R1 to R4.
- the arrangement is such that the switching contacts assume the switching position shown, as long as changeover signals for the switching element are received from transmission cycle to transmission cycle. If these control commands fail, the switch contacts R1 to R4 change their position.
- the consumers L1 and L2 are switched off by opening the switch contacts R1 and R2;
- the consumers L3 and L4 are energized via the contacts R3 and R4, regardless of whether the switches T3 and T4 are closed or not.
- the switching element can also be designed in a different technology than in relay technology; Accordingly, other corresponding switching means are then to be used instead of the switching contacts shown.
- the consumers are designed as signal lamps of a light signal.
- the lamps L3 and L4 should be assigned to the stop concept of the signal;
- the lamps L1 and L2 stand for a large number of signal lamps for representing driving terms.
- the switching element can become effective and thus the switching of the switching means controlled by it can be brought into effect by deliberately suppressing the reversal commands for the switching element located in the faulty consumers. So, for example, if for some reason a light signal is incorrectly displayed on a light signal, although this should not be the case, it is in the tax by comparing the no longer corresponding commands with the retransmitted messages. Safe access to the switching element means that the incorrectly activated signal term is switched off and the one STOP signaling danger is switched on. This process also takes place if the transmission path via the optical fiber or one or more of the elements of the command transmitter or the command receiver are defective.
- the loads arranged at the associated operating location are controlled in a switching state in accordance with the emergency or fault program previously defined for the operating location concerned, which precludes personal or material hazards due to incorrectly transmitted or evaluated commands.
- the retransmitted status messages can not only determine the correct operating state of the two lamp threads . but also carry out a functional test of the lamp thread monitors for the changeover from main to secondary thread.
- both threads will initially draw electricity; As soon as a lamp thread monitor switched into the current path of the main thread has responded, it switches off the secondary thread that was already switched on in the first test phase, the monitor switched into the current path of the secondary thread sending a corresponding status message to the control point.
- the monitoring devices In order to check the functional behavior of the monitoring devices, they are first controlled into one and then into the other switching position by assigned commands, regardless of the switching state they assume.
- the control of the monitoring devices is shown in the drawing by dashed lines between the output register AS of the command receiver and the monitoring devices U1 to U4 indicated. From the status messages of the monitoring devices transmitted to the control unit during this test process, the correct or incorrect operating behavior of the monitoring devices including that of the switching element R can be recognized by comparison with the target states of the monitoring devices specified by the control unit.
- the illustrated embodiment relates to the application of the invention in a light signal system.
- the invention can of course also be used advantageously in other telecontrol systems in which a safe access to the consumers is required in the event of a fault.
Landscapes
- Engineering & Computer Science (AREA)
- Mechanical Engineering (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Selective Calling Equipment (AREA)
- Radar Systems Or Details Thereof (AREA)
- Road Signs Or Road Markings (AREA)
- Control Of Combustion (AREA)
- Remote Monitoring And Control Of Power-Distribution Networks (AREA)
Abstract
Description
Die Erfindung bezieht sich auf eine Einrichtung nach dem Oberbegriff des Patentanspruches 1.The invention relates to a device according to the preamble of claim 1.
Zum Überwachen elektrischer Verbraucher ist es bekannt, die Stromaufnahme der Verbraucher zu messen und die aufgenommenen Meßwerte mit vorgegebenen Sollwerten zu vergleichen. Der Überwachungsvorgang kann dabei über Standleitungen ständig vor sich gehen, wie es beispielsweise bei der Überwachung von Lichtsignalanlagen im Eisenbahnwesen der Fall ist, oder er kann zyklisch oder sporadisch in aufeinanderfolgenden Zeitabständen durchgeführt werden, die eine genügend kleine Fehleraufdeckzeit erreichbar werden lassen.For monitoring electrical consumers, it is known to measure the current consumption of the consumers and to compare the measured values recorded with predetermined target values. The monitoring process can be carried out continuously over dedicated lines, as is the case, for example, with the monitoring of traffic light systems in the railroad sector, or it can be carried out cyclically or sporadically in successive time intervals, which allow a sufficiently short error detection time to be achieved.
Um Fehler, die bei der Messung der Stromaufnahme der elektrischen Verbraucher beispielsweise durch Nebenschlüsse zu den Schaltern auftreten könnten, zu erkennen und um Übertragungsstörungen zu erfassen, die beispielsweise durch Einkoppeln elektrischer Signale in den Übertragungsweg zwischen den Verbrauchern und der Steuerstelle entstehen und in der Steuerstelle einen bestimmten Betriebszustand der Verbraucher vortäuschen könnten,ist es bekannt, durch kurzzeitiges Invertieren der Steuerkommandos auf der Verbraucherseite bestimmte Reaktionen auszulösen und den kurzzeitigen Zustandswechsel der Überwachungsmeldungen auszuwerten. Eine derartige Anlage zum Steuern und Überwachen elektrischer Verbraucher ist beispielsweise in der Zeitschrift Electronics vom 30. August 1979 beschrieben. Dort wird eine durch einen Mikroprozessor betriebene Steuer- und Überwachungseinrichtung für Kraftfahrzeuge vorgestellt, bei der die einzelnen Verbraucher, vorzügsweise die Beleuchtungseinrichtungen eines Fahrzeugs, dadurch überwacht werden, daß die betriebsmäßig jeweils angeschalteten Verbraucher kurzzeitig abgeschaltet und die jeweils abgeschalteten Verbraucher kurzzeitig angeschaltet werden. Die Zeitspannen für das kurzzeitige Umsteuern der Verbraucher sind dabei so gewählt, daß zwar die Überwächungseinrichtungen zum Feststellen des jeweiligen Verbraucherstromes ansprechen können, das menschliche Auge aber dem An- bzw. Abschalten der Verbraucher in den Umsteuerperioden noch nicht folgen kann. Die bekannte Steuerungs- und Überwachungseinrichtung macht, wenn auch bei nur einer begrenzten Anzahl von zu überwachenden Verbrauchern, eine außerordentlich rasche Fehlererkennung im Störungsfalle möglich. Für die Störungsanzeige ist ein Meldetableau vorgesehen, an dem jede festgestellte Störung optisch zu lokalisieren Jst. Diese optische Lokalisierung ist Ausgangspunkt einer späteren Störungsbeseitigung.In order to identify errors that could occur in the measurement of the current consumption of the electrical consumers, for example by shunts to the switches, and to detect transmission interference, for example by coupling electrical signals arise in the transmission path between the consumers and the control center and could pretend a certain operating state of the consumers in the control center, it is known to trigger certain reactions by briefly inverting the control commands on the consumer side and to evaluate the short-term change of state of the monitoring messages. Such a system for controlling and monitoring electrical consumers is described, for example, in the electronics magazine of August 30, 1979. There, a control and monitoring device for motor vehicles operated by a microprocessor is presented, in which the individual consumers, preferably the lighting devices of a vehicle, are monitored by briefly switching off the consumers that are operationally switched on and briefly switching on the consumers that are switched off. The time spans for the short-term reversal of the consumers are chosen so that the monitoring devices can respond to the determination of the respective consumer current, but the human eye cannot yet follow the switching on and off of the consumers in the reversal periods. The known control and monitoring device, even if only with a limited number of consumers to be monitored, enables extraordinarily rapid fault detection in the event of a fault. A message board is provided for the fault display, on which each fault identified can be optically localized. This optical localization is the starting point for subsequent troubleshooting.
Je weiter die zu steuernden und zu überwachenden Verbraucher von einer Steuerstelle entfernt sind, umso größer wird die Gefahr von Übertragungsfehlern, und zwar sowohl in Kommando- als auch in Melderichtung. Diese Übertragungsfehler lassen sich nach dem heutigen Stand der Technik dadurch vermeiden, daß als Übertragungsmedium zwischen Steuerstelle und elektrischen Verbrauchern Lichtwellenleiter..verwendet werden. Wenn auch bei diesen Lichtwellenleitern Übertragungsstörungen durch Einkoppeln von Störgrößen mit Sicherheit ausgeschlossen werden können, so muß doch mit Bauteilausfällen in den angeschlossenen Sende- und Empfangsbausteinen gerechnet werden. Diese Bauteilausfälle sind bei Verwendung elektronischer Schaltmittel nicht so leicht feststellbar wie z.B. bei Verwendung spezieller Relais mit zwangsgeführten Kontakten, deren Schaltzustand sich gleichzeitig in verschiedenen Stromkreisen mehrfach überwachen läßt. Da sich Bauteildefekte prinzipiell nicht ausschließen lassen muß durch besondere Maßnahmen - mindestens bei solchen Anwendungsgebieten, bei denen unerkannte Fehlinformationen durch Bauteildefekte zu Personen- oder Sachgefährdungen führen können - ein fail-safe-Verhalten der mit diesen Bauteilen arbeitenden Schaltungen erreicht werden, d.h. unvermeidbare Bauteildefekte dürfen weder in den Sende- noch in den Empfangsbausteinen der Anlage und den ihnen nachgeschalteten Schaltkreisen zu einem gefährlichen Betriebszustand führen.The further the consumers to be controlled and monitored are from a control point, the more The risk of transmission errors increases, both in the command and in the signaling direction. According to the current state of the art, these transmission errors can be avoided by using optical fibers as the transmission medium between the control point and electrical consumers. If transmission interference can also be ruled out with these optical fibers by coupling interference variables, component failures in the connected transmit and receive modules must be expected. These component failures are not as easy to determine when using electronic switching means as, for example, when using special relays with positively driven contacts, the switching status of which can be monitored several times simultaneously in different circuits. Since component defects cannot be ruled out in principle, special measures - at least in those areas of application in which undetected incorrect information can lead to personal injury or property damage - can result in the fail-safe behavior of the circuits working with these components, i.e. unavoidable component defects may be achieved lead to a dangerous operating state neither in the transmitter nor in the receiver modules of the system and the downstream circuits.
Aufgabe der vorliegenden Erfindung ist es, eine Einrichtung nach dem Oberbegriff des Patentanspruches 1 zu schaffen, die trotz Verwendung relativ unsicherer Schaltelemente sowohl in der Steuerstelle als auch in den örtlichen Betriebsstellen in signaltechnischem Sinne ausreichend sicher ist.The object of the present invention is to provide a device according to the preamble of claim 1 which, despite the use of relatively unsafe switching elements, is sufficiently safe both in the control point and in the local operating points in the signaling sense.
Die Erfindung löst diese.Aufgabe durch Anwendung der im Kennzeichen des Hauptanspruches angegebenen Merkmale. Besonders vorteilhafte Ergänzungen und Ausführungsformen der erfindungsgemäßen Einrichtung sind in den Unteransprüchen angegeben.The invention solves this task by applying the features specified in the characterizing part of the main claim. Particularly advantageous additions and embodiments of the device according to the invention are specified in the subclaims.
Die Erfindung ist nachstehend an Hand eines in der Zeichnung dargestellten Ausführungsbeispieles näher erläutert.The invention is explained below with reference to an embodiment shown in the drawing.
Die Zeichnung zeigt im linken Teil den Kommandosender KS und den Meldungsempfänger ME einer Steuerstelle,im rechten Teil den Kommandoempfänger KE und den Meldungssender MS für mehrere an einem bestimmten Betriebsort räumlich benachbart angeordnete elektrische Verbraucher; die elektrischen Verbraucher werden durch Signallampen L1 bis L4 symbolisiert. Gesteuert werden der Kommandosender KS und der Meldungsempfänger ME der Steuerstelle z.B. von einem nicht weiter dargestellten sicheren Mikrocomputer, an dessen Daten- und Adreßbus DB und AB ein Eingaberegister ER für Kommandos und ein Ausgaberegister AR für Meldungen angeschlossen sind. Zur Kommandoübernahme wird das Eingaberegister ER des Kommandosenders durch den Adreßbus AB des Rechners adressiert; es übernimmt dabei die Daten vom Datenbus DB in das Register. Dieses Register kann z.B. eine Breite von 5 Bytes entsprechend 40 Bit haben. Nach dem Einschreiben des 5. Bytes in das Eingaberegister ER wird die Umwandlung der im Register eingespeicherten Bits in ein serielles Telegramm gestartet. Dazu werden die Daten aus dem Eingaberegister ER in einen Parallel/Serien-Umformer PSK für die Kommandos ausgelesen und von diesem einem Kodierer CK für die Kommandos zugeführt. In diesem Kodierer CK wird die vom Parallel/Serien-Umformer PSK gelieferte Impulsfolge in eine für die Übertragung geeignete Form umgesetzt. Dies geschieht z.B. dadurch, daß der Kodierer CK die aus dem Parallel/ Serien-Umformer PSK ausgelesenenBits abhängig von ihrem jeweiligen binären Zustand in eine Impulsfolge mit wechselndem Impuls/Pausen-Verhältnis umsetzt. An den Ausgang des Kodierers CK ist ein Zähler ZS1 angeschlossen; dieser Zähler ist durch Zählen der vom Kodierer abgegebenen Impulse in der Lage, den Anfang und das Ende eines für die Kommandogabe vollständigen Impulstelegrammes zu erkennen. Er sperrt den Kodierer nach der Ausgabe eines vollständigen Kommandotelegrammes und stellt damit sicher, daß ohne neue Eingangsinformation kein weiteres Telegramm ausgegeben werden kann.The drawing shows in the left part the command transmitter KS and the message receiver ME of a control center, in the right part the command receiver KE and the message transmitter MS for several electrical consumers arranged spatially adjacent to one another at a certain operating location; the electrical consumers are symbolized by signal lamps L1 to L4. The command transmitter KS and the message receiver ME of the control station are controlled, for example, by a secure microcomputer, not shown, to whose data and address bus DB and AB an input register ER for commands and an output register AR for messages are connected. To take command, the input register ER of the command transmitter is addressed by the address bus AB of the computer; it takes the data from the data bus DB into the register. This register can have a width of 5 bytes, corresponding to 40 bits. After the 5th byte has been written into the input register ER, the conversion of the bits stored in the register into a serial telegram is started. For this purpose, the data are read out from the input register ER into a parallel / series converter PSK for the commands and fed from this to an encoder CK for the commands. In this encoder CK, the pulse sequence supplied by the parallel / series converter PSK is converted into a for the Transfer appropriate form implemented. This is done, for example, by the encoder CK converting the bits read out from the parallel / series converter PSK into a pulse train with a changing pulse / pause ratio, depending on their respective binary state. A counter ZS1 is connected to the output of the encoder CK; by counting the pulses emitted by the encoder, this counter is able to recognize the beginning and the end of a pulse telegram complete for the command. It blocks the encoder after the output of a complete command telegram and thus ensures that no further telegram can be output without new input information.
Die Übertragung der Kommandos vom Kommandosender zum Meldungsempfänger erfolgt über einen Lichtwellenleiter LWK für die Kommandos. Hierzu werden die vom Kodierer CK abgegebenen Impulsfolgen mit unterschiedlichem Impulspausenverhältnis in einem Sendebaustein SK in kurze Lichtimpulse mit entsprechendem Impulsabstand umgesetzt und in den Lichtwellenleiter eingespeist. In einem Empfangsbaustein EK am Betriebsort der zu steuernden und zu überwachenden Verbraucher werden die über den Lichtwellenleiter LWK empfangenen Lichtimpulse wieder in elektrische Impulse umgewandelt, deren Impulspausenverhältnis dem Impulspausenverhältnis der vom Kodierer CK an den Sendebaustein SK abgegebenen Impulse entspricht. Ein nachgeschalteter Dekodierer DK für die Kommandos setzt die zugeführte Impulsfolge wieder in die aus dem Parallellserien-Umformer PSK entnommene Bitfolge mit den zugehörigen binären Zustandswerten "high" und "low" um und führt sie einem Serien/Parallel-Umformer SPK für die Kommandos zu. Sobald ein dem Meldungsempfänger ME zugeordneter Zähler ZE1 eine der Anzahl der zu übertragenden Bits entsprechende Schaltstellung erreicht hat, liefert dieser einen Übergabeimpuls an ein dem Serien/Parallel-Umformer SPK nachgeschaltetes Ausgaberegister AS, das daraufhin die im Serien/Parallel-Umformer SPK gespeicherte Bitfolge übernimmt und für die Ausführung des Kommandos bereitstellt..The commands are transmitted from the command transmitter to the message receiver via an optical fiber LWK for the commands. For this purpose, the pulse sequences emitted by the encoder CK with different pulse-pause ratios are converted into short light pulses with a corresponding pulse spacing in a transmission module SK and fed into the optical waveguide. In a receiving module EK at the operating location of the consumers to be controlled and monitored, the light pulses received via the optical waveguide LWK are converted back into electrical pulses, the pulse pause ratio of which corresponds to the pulse pause ratio of the pulses emitted by the encoder CK to the transmitter module SK. A downstream decoder DK for the commands converts the supplied pulse sequence back into the bit sequence extracted from the parallel series converter PSK with the associated binary status values "high" and "low" and feeds it to a series / parallel converter SPK for the commands. As soon as a counter ZE1 assigned to the message receiver ME has a switch position corresponding to the number of bits to be transmitted is sufficient, it delivers a transfer pulse to an output register AS downstream of the series / parallel converter SPK, which then takes over the bit sequence stored in the series / parallel converter SPK and makes it available for the execution of the command.
In dem dargestellten Ausführungsbeispiel ist davon ausgegangen, daß jedes Bit der über den Lichtwellenleiter LWK übertragenen Bitfolge einem bestimmten Verbraucher des Betriebsortes zugeordnet ist und daß der jeweilige binäre Signalzustand dieses Bits den jeweiligen Soll-Betriebszustand des zugehörigen Verbrauchers kennzeichnet. Aus diesem Grunde sind an die Ausgänge des Ausgaberegisters AS Schalter T1 bis T4 angeschlossen, die zum An- und Abschalten der Verbraucher L1 bis L4 dienen. Der jeweilige Schaltzustand der Verbraucher L1 bis L4 wird durch unmittelbar oder mittelbar in ihren Strompfad geschaltete Überwacher U1 bis U4 festgestellt und zur Abgabe von Zustandsmeldungen an einen Meldungssender MS gegeben. Die Überwacher sind vorteilhaft als Schwellwertschalter ausgebildet, die bei einem unzulässig niedrigen und bei einem unzulässig hohen Verbraucherstrom ansprechen und eine diesbezügliche Zustandsmeldung für die betreffenden Verbraucher ausgeben, die verschieden ist von der bei ordnungsgerechtem Verbraucherstrom abgegebenen Zustandsmeldung.In the exemplary embodiment shown, it is assumed that each bit of the bit sequence transmitted via the optical waveguide LWK is assigned to a specific consumer of the operating location and that the respective binary signal state of this bit identifies the respective desired operating state of the associated consumer. For this reason, switches T1 to T4 are connected to the outputs of the output register AS and are used to switch the consumers L1 to L4 on and off. The respective switching state of the consumers L1 to L4 is determined by monitors U1 to U4 connected directly or indirectly to their current path and is sent to a message transmitter MS for issuing status messages. The monitors are advantageously designed as threshold switches, which respond to an inadmissibly low and an inadmissibly high consumer current and which issue a status message for the relevant consumer which is different from the status message given in the case of a proper consumer current.
Im Meldungssender werden die Zustandsmeldungen der Überwacher U1 bis U4 als Bitmuster einem Parallel/Serien-Umformer PSM für die Meldungen zugeführt. Dieser ParalleljSerien-Umformer gibt an seinen Ausgang eine Impulsfolge an einen Kodierer CM für die Meldungen ab, die bei ordnungsgerechtem Betriebszustand aller Verbraucher des Betriebsortes mit Ausnahme einiger Prüfbits und eines Überwachungsbits für das Schaltglied der vom Parallel/Serien-Umformer PSK des Kommandosenders KS.an den dortigen Kodierer CK weitergeleiteten Impulsfolge. entspricht. Der Kodierer CM für die Meldungen ist entsprechend aufgebaut wie der Kodierer CK für die Kommandos. Er formt die ihm vom Parallel/Serien-Umformer PSM zugeführte Impulsfolge in eine Impulsfolge mit einem Impuls/Pausen-Verhältnis um, das dem binären Signalzustand des vom Parallel/Serien-Umformer übernommenen Bitmusters entspricht. Ein an den Ausgang des Kodierers CM ange-schlossener Zähler ZS2 spricht an, sobald der Kodierer CM ein vollständiges Meldetelegramm an einen ihm nachgeschalteten Sendebaustein SM weitergegeben hat und sperrt dann durch Anlegen von Sperrpotential die Ausgabe weiterer Signale bis zum erneuten Empfang von Kommandos durch den Kommandoempfänger. Die Schaltmittel zum Synchronisieren von Kommandoempfang und Meldungsabgabe sind in der Zeichnung nicht weiter dargestellt, weil sie mit dem Erfindungswesentlichen nichts zu tun haben. Die Synchronisierung erfolgt durch Rückgewinnung der sendeseitig gewählten konstanten Fortschaltfrequenz für den Parallel/Serien-Umformer PSK aus der über den Lichtwellenleiter LWK empfangenen Taktimpulsfolge der Kommandos mit unterschiedlichem Impuls/Pausen-Verhältnis.In the message transmitter, the status messages of the monitors U1 to U4 are fed as a bit pattern to a parallel / series converter PSM for the messages. At its output, this parallel / series converter emits a pulse train to an encoder CM for the messages which, when all the consumers in the operating location are in the correct operating state, with the exception of a few test bits and a monitoring bit for the switching element of the pulse train forwarded by the parallel / series converter PSK of the command transmitter KS. to the local encoder CK. corresponds. The encoder CM for the messages has the same structure as the encoder CK for the commands. It converts the pulse train supplied to it by the parallel / series converter PSM into a pulse train with a pulse / pause ratio that corresponds to the binary signal state of the bit pattern adopted by the parallel / series converter. A counter ZS2 connected to the output of the encoder CM responds as soon as the encoder CM has forwarded a complete message telegram to a transmission module SM connected downstream of it and then blocks the output of further signals by applying blocking potential until commands are received again by the command receiver . The switching means for synchronizing command reception and message delivery are not shown in the drawing because they have nothing to do with the essentials of the invention. The synchronization is carried out by recovering the constant switching frequency for the parallel / series converter PSK selected on the transmission side from the clock pulse sequence of the commands received via the fiber optic cable LWK with a different pulse / pause ratio.
Die vom Kodierer CM des Meldungssenders gelieferte Impulsfolge wird in einem Sendebaustein SM in kurze Lichtimpulse mit entsprechendem Impulsabstand umgesetzt und über einen Lichtwellenleiter LWM für die Zustandsmeldungen an den Meldungsempfänger ME der Steuerstelle übertragen. Dort ist an den Lichtwellenleiter LWM ein Meldebaustein EM angeschlossen, der entsprechend dem Empfängerbaustein EK des Kommandoempfängers die empfangenen Lichtimpulse umsetzt in elektrische Impulse mit unterschiedlichem Impulsabstand. Ein nachgeschalteter Dekodierer DM für die Meldungen setzt diese Impulse in entsprechende binäre Signale mit den.Signalzuständen "high" und "low" um. Das vom Dekodierer DM abgegebene Bitmuster gelangt auf einen Serien/Parallel-Umformer SPM für die Meldungen und wird dort zwischengespeichert. Ein an den Ausgang des Empfängerbausteines EM angeschlossener Zähler ZE2, der die einlaufenden Impulse zählt, spricht nach danEmpfang eines vollständigen Impulstelegrammes an und gibt an seinem Ausgang einen Übernahmeimpuls für das Ausgaberegister AR ab, das daraufhin die im Serien/Parallel-Umformer SPM gespeicherte Bitfolge übernimmt. Aus dem Ausgaberegister AR werden die empfangenen Daten auf dem Datenbus bedarfsweise abgerufen.The pulse sequence supplied by the encoder CM of the message transmitter is converted in a transmission module SM into short light pulses with a corresponding pulse spacing and transmitted via an optical fiber LWM for the status messages to the message receiver ME of the control center. There, a signaling module EM is connected to the optical waveguide LWM, which converts the received light pulses into electrical pulses with different pulse intervals in accordance with the receiver module EK of the command receiver. A downstream one Decoder DM for the messages converts these pulses into corresponding binary signals with the signal states "high" and "low". The bit pattern emitted by the decoder DM reaches a series / parallel converter SPM for the messages and is buffered there. A counter ZE2 connected to the output of the receiver module EM, which counts the incoming pulses, responds after receipt of a complete pulse telegram and outputs an accept pulse for the output register AR, which then accepts the bit sequence stored in the series / parallel converter SPM . The received data on the data bus are called up as required from the output register AR.
Durch Vergleich der im Ausgaberegister AR gespeicherten Daten mit den ausgesandten Kommandos ist die ordnungsgerechteAusführung der Kommandos feststellbar. Hierzu sind die ausgesandten Kommandos in nicht dargestellten Zwischenspeichern so lange abzuspeichern bis die entsprechenden Rückmeldungen vorliegen.The correct execution of the commands can be determined by comparing the data stored in the output register AR with the sent commands. For this purpose, the commands sent are to be stored in temporary memories (not shown) until the corresponding feedback has been received.
Durch das Auslösen kurzzeitiger Steuerkommandos für einen einzelnen oder alle Verbraucher eines Betriebsortes lassen sich der Übertragungsweg von der Steuerstelle zu den Verbrauchern und zurück und das Funktionsverhalten der Verbraucher überwachen. Um die geforderte Sicherheit bei der Steuerung und Überwachung der Verbraucher zu erreichen, ist es aber nicht nur erforderlich, irgendwelche Störungen oder irgendwelche Fehlverhalten der Verbraucher zu erkennen, sondern es muß die Möglichkeit bestehen, von der Steuerstelle her gerade im Störungsfall gezielt auf die Verbraucher der einzelnen Betriebsorte einzuwirken. Dies kann z.B. durch Abschalten einiger oder aller Verbraucher an den einzelnen Betriebsorten geschehen.By triggering short-term control commands for an individual or all consumers at an operating location, the transmission path from the control point to the consumers and back and the functional behavior of the consumers can be monitored. In order to achieve the required security in the control and monitoring of the consumers, it is not only necessary to recognize any faults or any misconduct on the part of the consumer, but it must also be possible for the control point to target the consumers in the event of a fault individual locations. This can be done, for example, by switching off some or all of the consumers to the one individual locations.
Um die Verbraucher der einzelnen Betriebsorte auch und gerade im Störungsfall sicher ansprechen zu können, ist an jedem Betriebsort ein durch bestimmte Steuerkommandos der Steuerstelle beaufschlagbares Schaltglied R vorgesehen, das beim Ausbleiben der Steuerkommandos über eine vorgesehen Zeitspanne hinaus wirksam wird. Es schaltet dann nach einer vorgegebenen Schaltroutine diejenigen Verbraucher des betreffenden Betriebsortes bleibend ab, deren stromführender Zustand eine Gefährdung darstellen könnte. Zusätzlich schaltet das Schaltglied einen Verbraucher an, dessen stromführender Zustand ein Gefahrenmoment signalisiert und der damit am Betriebsort zur Entspannung der Gefahrensituation führt.In order to be able to address the consumers of the individual operating locations reliably and precisely in the event of a fault, a switching element R which can be acted upon by certain control commands from the control point is provided at each operating location and becomes effective if the control commands are not present for a specified period of time. It then permanently switches off those consumers of the operating location in question according to a predetermined switching routine, the current-carrying state of which could represent a hazard. In addition, the switching element switches on a consumer, the current-carrying state of which signals a moment of danger and which thus leads to relaxation of the dangerous situation at the operating location.
Nach der Erfindung ist vorgesehen, daß die Steuerkommandos zum Beaufschlagen des Schaltgliedes durch zyklisch wechselnde Umsteuerkommandos gebildet sind. Die Zeit zwischen zwei aufeinanderfolgenden Steuerkommandos ist durch die zulässige Fehleroffenbarungszeit bestimmt, die ihrerseits den zeitlichen Abstand für die Behandlung der Verbraucher eines Betriebsortes durch den sicheren Mikrocomputer der Steuerstelle bestimmt. Bleiben die Umsteuerkommandos beispielsweise infolge einer Übertragungsstörung aus oder werden sie bewußt von der Steuerstelle her unterdrückt, so wirkt das Schaltglied gemäß der vorbestimmten Schaltroutine auf die Verbraucher des betroffenen Betriebsortes ein. Der jeweilige Schaltzustand des Schaltgliedes ist durch entsprechende Zustandsmeldungen in der Steuerstelle erkennbar, die beim Ausbleiben wechselnder Zustandsmeldungen in den aufeinanderfolgenden Übertragungszyklen ein Störungssignal auslöst.According to the invention it is provided that the control commands to act on the switching element are formed by cyclically changing reversing commands. The time between two successive control commands is determined by the permissible error disclosure time, which in turn determines the time interval for the treatment of the consumers of an operating location by the safe microcomputer of the control center. If the rerouting commands are omitted, for example as a result of a transmission disturbance or if they are deliberately suppressed by the control unit, the switching element acts on the consumers of the operating location concerned in accordance with the predetermined switching routine. The respective switching state of the switching element can be recognized by corresponding status messages in the control unit, which triggers a fault signal in the absence of changing status messages in the successive transmission cycles.
In Figur 1 sind das Schaltglied R symbolisch als Relaisschaltung und die von ihm gesteuerten Schaltmittel als Relaiskontakte R1 bis R4 angedeutet.Die Anordnung ist dabei so getroffen, daß die Schaltkontakte die dargestellte Schaltstellung einnehmen, solange von Ubertragungszyklus zu Übertragungszyklus Umsteuersignale für das Schaltglied empfangen werden. Bei Ausfall dieser Steuerkommandos wechseln die Schaltkontakte R1 bis R4 ihre Lage. Dadurch werden die Verbraucher L1-und L2 durch Öffnen der Schaltkontakte R1 und R2 abgeschaltet; gleichzeitig werden über die Kontakte R3 und R4 die .Verbraucher L3 und L4 an Spannung gelegt, und zwar unabhängig davon, ob die Schalter T3 und T4 geschlossen sind oder nicht. Das Schaltglied kann auch in einer anderen Technik als in Relaistechnik ausgebildet sein; ent- .sprechend sind dann anstelle der dargestellten Schaltkontakte andere entsprechende Schaltmittel einzusetzen.In Figure 1, the switching element R is symbolically indicated as a relay circuit and the switching means controlled by it as relay contacts R1 to R4. The arrangement is such that the switching contacts assume the switching position shown, as long as changeover signals for the switching element are received from transmission cycle to transmission cycle. If these control commands fail, the switch contacts R1 to R4 change their position. As a result, the consumers L1 and L2 are switched off by opening the switch contacts R1 and R2; At the same time, the consumers L3 and L4 are energized via the contacts R3 and R4, regardless of whether the switches T3 and T4 are closed or not. The switching element can also be designed in a different technology than in relay technology; Accordingly, other corresponding switching means are then to be used instead of the switching contacts shown.
Bei dem dargestellten Ausführungsbeispiel sind die Verbraucher als Signallampen eines Lichtsignales ausgebildet. Die Lampen L3 und L4 sollen dem Haltbegriff des Signales zugeordnet sein; die Lampen L1 und L2 stehen für eine Vielzahl von Signallampen zum Darstellen von Fahrtbegriffen.In the illustrated embodiment, the consumers are designed as signal lamps of a light signal. The lamps L3 and L4 should be assigned to the stop concept of the signal; The lamps L1 and L2 stand for a large number of signal lamps for representing driving terms.
Bei einer beliebigen Störung, die von der Steuerstelle her als bedenklich eingestuft werden muß, kann durch bewußtes Unterdrücken der Umsteuerkommandos für das bei den gestörten Verbrauchern befindliche Schaltglied das Wirksamwerden dieses Schaltgliedes und damit das Umsteuern der von ihm gesteuerten Schaltmittel herbeigeführt werden. Wenn also beispielsweise aus irgendeinem Grunde an einem Lichtsignal fälschlicherweise ein Fahrtsignalbegriff angezeigt wird, obwohl dies nicht der Fall sein dürfte, so ist dies in der Steuerstelle durch Vergleich der einander nicht mehr entsprechenden Kommandos mit den rückübertragenen Meldungen erkennbar. Durch den sicheren Zugriff auf das Schaltglied wird der fälschlich angeschaltete Signalbegriff abgeschaltet und der eine.Gefahr signalisierende HALTBegriff angeschaltet. Dieser Vorgang läuft auch dann ab, wenn der Übertragungsweg über den Lichtwellenleiter oder eines oder mehrere der Elemente des Kommandosenders oder des Kommandoempfängers defekt sind. Sobald die Umsteuerkommandos für das Schaltglied längere Zeit ausbleiben, werden die am zugehörigen Betriebsort angeordneten Verbraucher nach Maßgabe des für den betreffenden Betriebsort zuvor festgelegten Not- oder Störungsprogrammes in einen Schaltzustand gesteuert, der eine Personen- oder Sachgefährdung durch fehlerhaft übertragene oder ausgewertete Kommandos ausschließt.In the event of any fault, which must be classified as questionable by the control point, the switching element can become effective and thus the switching of the switching means controlled by it can be brought into effect by deliberately suppressing the reversal commands for the switching element located in the faulty consumers. So, for example, if for some reason a light signal is incorrectly displayed on a light signal, although this should not be the case, it is in the tax by comparing the no longer corresponding commands with the retransmitted messages. Safe access to the switching element means that the incorrectly activated signal term is switched off and the one STOP signaling danger is switched on. This process also takes place if the transmission path via the optical fiber or one or more of the elements of the command transmitter or the command receiver are defective. As soon as the reversing commands for the switching element are not available for a longer period of time, the loads arranged at the associated operating location are controlled in a switching state in accordance with the emergency or fault program previously defined for the operating location concerned, which precludes personal or material hazards due to incorrectly transmitted or evaluated commands.
Zur Funktionsprüfung der Fernwirkanlage und der elektrischen Verbraucher an den einzelnen Betriebsorten ist es nun in bekannter Weise möglich, von der Steuerstelle her kurzzeitige Prüfkommandos auszugeben, die an dem jeweils aufgeschalteten Betriebsort die dort angeordneten Verbraucher umsteuert. Dabei ist es ohne weiteres möglich, sämtliche angeschalteten Verbraucher gleichzeitig kurzzeitig abzuschalten und die entsprechenden Rückmeldungen in der Steuerstelle auszuwerten. Meist ist es jedoch nicht möglich, alle bislang abgeschalteten Verbraucher kurzzeitig gemeinsam anzuschalten, weil dies zu unzulässigen Einbrüchen der Versorgungsspannungen führen könnte. Mit dieser Gefahr ist insbesondere bei der Anschaltung von Signallampen zu rechnen, weil diese im Augenblick des Anschaltens einen weit über ihrem Nennstrom liegenden Kaltstrom ziehen. Aus diesem Grunde wird man den Prüfvorgang in mehrere . zeitlich aufeinanderfolgende Abschnitte für jeweils nur einige der Verbraucher aufgliedern. Wenn man das Prüfprogramm so aufgliedert, daß während einer ersten Prüfphase zunächst nur der Nebenfaden und in einer weiteren Prüfphase Haupt- und Nebenfaden einer Signallampe kurzzeitig gemeinsam angeschaltet werden, dann läßt sich durch die rückübertragenen Zustandsmeldungen nicht nur der ordnungsgemäße Betriebszustand der beiden Lampenfäden feststellen.sondern auch eine Funktionsprüfung der Lampenfadenüberwacher für die Umschaltung von Hauptauf Nebenfaden herbeiführen. In der zweiten Prüfphase werden zunächst einmal beide Fäden Strom ziehen; sobald ein in den Strompfad des Hauptfadens geschalteter Lampenfadenüberwacher angesprochen hat, schaltet dieser den in der ersten Prüfphase bereits angeschalteten Nebenfaden wieder ab, wobei der in den Strompfad des Nebenfadens geschaltete Überwacher eine entsprechende Zustandsmeldung an die Steuerstelle abgibt.To test the function of the telecontrol system and the electrical consumers at the individual operating locations, it is now possible, in a known manner, to issue short-term test commands from the control point which reverses the consumers arranged there at the operating location that is switched on. It is easily possible to briefly switch off all connected consumers at the same time and to evaluate the corresponding feedback in the control center. However, it is usually not possible to briefly switch on all previously switched off consumers because this could lead to unacceptable drops in the supply voltages. This risk is particularly to be expected when switching on signal lamps, because at the moment they are switched on they draw a cold current that is far above their nominal current. For this reason, the testing process is divided into several. successive sections for each just break down some of the consumers. If you break down the test program so that during a first test phase only the secondary thread and in a further test phase main and secondary thread of a signal lamp are briefly switched on together, then the retransmitted status messages can not only determine the correct operating state of the two lamp threads . but also carry out a functional test of the lamp thread monitors for the changeover from main to secondary thread. In the second test phase, both threads will initially draw electricity; As soon as a lamp thread monitor switched into the current path of the main thread has responded, it switches off the secondary thread that was already switched on in the first test phase, the monitor switched into the current path of the secondary thread sending a corresponding status message to the control point.
In Anwendung der Erfindung ist nicht nur eine Funktionsprüfung der Verbraucher, sondern auch eine Funktionsprüfung der Überwachungseinrichtungen möglich und vorgesehen. Diese Funktionsprüfung ist nicht gekoppelt mit dem vorstehend näher erläuterten Prüfprogramm zum Testen des Funktionsverhaltens der Verbraucher. Sie dient aber ebenso wie dieses Prüfprogramm dazu, die Betriebssicherheit der Fernwirkanlage zu erhöhen.In application of the invention, not only a functional test of the consumers, but also a functional test of the monitoring devices is possible and provided. This functional test is not coupled with the test program for testing the functional behavior of the consumers, which was explained in more detail above. Like this test program, however, it serves to increase the operational safety of the telecontrol system.
Zum Überprüfen des Funktionsverhaltens der Überwachungseinrichtungen werden diese unabhängig von dem von ihnen jeweils eingenommenen Schaltzustand durch zugeordnete Kommandos erst in die eine und dann in die andere Schaltstellung gesteuert. Die Ansteuerung der Überwachungseinrichtungen ist in der Zeichnung durch gestrichelte Linien zwischen dem Ausgaberegister AS des Kommandoempfängers und den Überwachungseinrichtungen U1 bis U4 angedeutet. Aus den während dieses Prüfvorganges an die Steuerstelle übertragenen Zustandsmeldungen der Überwachungseinrichtungen ist,das ordnungsgerechte bzw. das nicht ordnungsgerechte Funktionsverhalten der überwachungseinrichtungen einschließlich dem des Schaltgliedes R durch Vergleich mit den von der Steuerstelle jeweils vorgegebenen Soll-Zuständen der Überwachungseinrichtungen erkennbar.In order to check the functional behavior of the monitoring devices, they are first controlled into one and then into the other switching position by assigned commands, regardless of the switching state they assume. The control of the monitoring devices is shown in the drawing by dashed lines between the output register AS of the command receiver and the monitoring devices U1 to U4 indicated. From the status messages of the monitoring devices transmitted to the control unit during this test process, the correct or incorrect operating behavior of the monitoring devices including that of the switching element R can be recognized by comparison with the target states of the monitoring devices specified by the control unit.
Bei dem vorstehend beschriebenen Ausführungsbeispiel war vereinfachend angenommen worden, daß von den beiden Sendebausteinen bei ordnungsgerechter Funktionsweise der Fernwirkanlage gleichartige Kommandos und Meldungen ausgegeben wurden. Vorteilhafter ist es jedoch, entweder die Kommandos oder die Meldungen im zugehörigen Sender und im zugehörigen Empfänger zu invertieren und so eine Rückmeldung zu erzwingen, die verschieden ist vom zugehörigen Kommando.In the case of the exemplary embodiment described above, it was assumed in a simplistic manner that the two transmitter modules issued the same commands and messages if the telecontrol system functions properly. However, it is more advantageous to invert either the commands or the messages in the associated transmitter and in the associated receiver and thus to force a response that is different from the associated command.
Das dargestellte Ausführungsbeispiel bezieht sich auf die Anwendung der Erfindung bei einer Lichtsignalanlage. Die Erfindung kann selbstverständlich auch bei anderen Fernwirkanlagen vorteilhaft angewendet werden, bei denen im Störungsfall ein sicherer Zugriff zu den Verbrauchern gefordert ist.The illustrated embodiment relates to the application of the invention in a light signal system. The invention can of course also be used advantageously in other telecontrol systems in which a safe access to the consumers is required in the event of a fault.
Claims (10)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
AT80107434T ATE13164T1 (en) | 1979-12-21 | 1980-11-27 | EQUIPMENT FOR SECURE CONTROL AND MONITORING OF ELECTRICAL CONSUMERS BY SIGNAL TECHNOLOGY. |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE2951932A DE2951932C2 (en) | 1979-12-21 | 1979-12-21 | Device for signaling safe control and monitoring |
DE2951932 | 1979-12-21 |
Publications (4)
Publication Number | Publication Date |
---|---|
EP0031046A2 true EP0031046A2 (en) | 1981-07-01 |
EP0031046A3 EP0031046A3 (en) | 1982-08-11 |
EP0031046B1 EP0031046B1 (en) | 1985-05-08 |
EP0031046B2 EP0031046B2 (en) | 1990-06-27 |
Family
ID=6089365
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP80107434A Expired - Lifetime EP0031046B2 (en) | 1979-12-21 | 1980-11-27 | Device for data secure control and supervision of electric equipments |
Country Status (5)
Country | Link |
---|---|
US (1) | US4356485A (en) |
EP (1) | EP0031046B2 (en) |
AT (1) | ATE13164T1 (en) |
DE (2) | DE2951932C2 (en) |
ZA (1) | ZA807974B (en) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE3223779A1 (en) * | 1982-06-23 | 1984-01-05 | Licentia Patent-Verwaltungs-Gmbh, 6000 Frankfurt | Error-protected light-signal control device with fewer wires |
EP0137964A2 (en) * | 1983-10-17 | 1985-04-24 | Stührenberg, Rolf | Device for signal safety in light sign arrangements |
DE3424967A1 (en) * | 1984-07-06 | 1986-01-16 | Siemens AG, 1000 Berlin und 8000 München | Circuit for detecting conductor contacting in light signals |
DE3643226A1 (en) * | 1986-12-18 | 1988-06-30 | Standard Elektrik Lorenz Ag | Device for operating a plurality of electrical loads in a reliable manner in signalling terms |
DE3805949A1 (en) * | 1988-02-25 | 1989-09-07 | Siemens Ag | DEVICE FOR THE PARTIAL SHUTDOWN OF A ROAD SIGNAL SYSTEM |
Families Citing this family (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE3022058C2 (en) * | 1980-06-12 | 1985-12-19 | Siemens AG, 1000 Berlin und 8000 München | Device for the safe control of a switching element in terms of signaling |
DE3022077A1 (en) * | 1980-06-12 | 1981-12-17 | Siemens Ag | Supervising remote controlled switching of load - by alternating signal which if disturbed causes trip to safe state |
DE3127088C2 (en) * | 1981-07-09 | 1985-09-12 | Trützschler GmbH & Co KG, 4050 Mönchengladbach | Device for the transmission of signals in a power-driven textile machine |
US4581700A (en) * | 1981-08-07 | 1986-04-08 | Sab Harmon Industries, Inc. | Processing system for grade crossing warning |
US4614944A (en) * | 1982-09-30 | 1986-09-30 | Teleplex Corporation | Telemetry system for distributed equipment controls and equipment monitors |
DE3347610A1 (en) * | 1983-12-30 | 1985-07-18 | Signalbau Huber - Designa GmbH, 8000 München | Light signalling system with decentralised lamp control |
US4675861A (en) * | 1984-11-28 | 1987-06-23 | Adc Telecommunications, Inc. | Fiber optic multiplexer |
DE3538484A1 (en) * | 1985-10-25 | 1987-05-07 | Siemens Ag | METHOD FOR CHECKING PROTECTIVE COMMAND TRANSMISSION SYSTEMS IN ONLINE OPERATION |
US4907160A (en) * | 1986-01-09 | 1990-03-06 | Econolite Control Products, Inc. | Intersection monitor |
SE461084B (en) * | 1988-05-06 | 1990-01-08 | Bengt J Sterner | DEVICE FOR CHECKING THE CONDITION OF A REMOTE-CONTROLLED BODY E X V A DRIVE DRIVE TO A RAILWAY OR SIGNAL LAMP AT A RAILWAY SAVE |
WO1989012345A1 (en) * | 1988-06-08 | 1989-12-14 | The South East Queensland Electricity Board | Controller and a network controller system |
US5450403A (en) * | 1993-03-02 | 1995-09-12 | The Furukawa Electric Co., Ltd. | Method and apparatus for multiplex transmission |
JP2000209418A (en) * | 1999-01-11 | 2000-07-28 | Matsushita Electric Ind Co Ltd | Image communication apparatus |
WO2002069526A1 (en) * | 2001-02-26 | 2002-09-06 | Entrekin David A | Coded optical interface and method of operation |
WO2016018936A1 (en) | 2014-07-28 | 2016-02-04 | Econolite Group, Inc. | Self-configuring traffic signal controller |
CN113534712B (en) * | 2021-07-14 | 2022-07-05 | 卡斯柯信号有限公司 | Comprehensive calibration stand of railway signal centralized monitoring equipment |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE1106848B (en) * | 1960-04-01 | 1961-05-18 | Licentia Gmbh | Procedure for remote control with feedback |
DE1516696A1 (en) * | 1966-03-31 | 1969-08-28 | Siemens Ag | Road traffic signaling system with testing and reporting devices for reporting back to a common center any faults occurring at individual intersections |
US3566399A (en) * | 1968-02-27 | 1971-02-23 | Gulf & Western Syst Co | Control station monitoring system for remote stations |
DE2723660A1 (en) * | 1977-05-25 | 1978-11-30 | Siemens Ag | Traffic light control system - has central monitor point for state of street lights, with light guiding cables connecting them together |
GB2005114A (en) * | 1977-10-03 | 1979-04-11 | Motorola Inc | Base station feedback reporting system |
DE2946169A1 (en) * | 1979-11-15 | 1981-05-21 | Wörl-Alarm August Wörl, 8035 Gauting | Alarm with central control station - uses channel with interrogation signals incorporating address and instruction for checking state of individual |
Family Cites Families (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
FI43449B (en) * | 1968-02-12 | 1970-12-31 | Nokia Oy Ab | |
US3577187A (en) * | 1968-09-03 | 1971-05-04 | Gen Electric | Digital information transfer system having integrity check |
DE2143500A1 (en) * | 1971-08-31 | 1973-03-15 | Licentia Gmbh | PROCEDURE AND CIRCUIT FOR LOOP TESTING OF A REMOTE CONTROL SYSTEM |
JPS5225077B2 (en) * | 1972-03-16 | 1977-07-05 | ||
US3803974A (en) * | 1972-11-03 | 1974-04-16 | Wahl W Corp | Fire control system |
US3902156A (en) * | 1974-10-07 | 1975-08-26 | Gulf & Western Industries | Multi-channel ac conflict monitor |
JPS53113401A (en) * | 1977-03-16 | 1978-10-03 | Hitachi Ltd | Light communication system |
US4161650A (en) * | 1978-04-06 | 1979-07-17 | Lockheed Aircraft Corporation | Self-powered fiber optic interconnect system |
-
1979
- 1979-12-21 DE DE2951932A patent/DE2951932C2/en not_active Expired
-
1980
- 1980-11-25 US US06/210,308 patent/US4356485A/en not_active Expired - Lifetime
- 1980-11-27 AT AT80107434T patent/ATE13164T1/en not_active IP Right Cessation
- 1980-11-27 DE DE8080107434T patent/DE3070628D1/en not_active Expired
- 1980-11-27 EP EP80107434A patent/EP0031046B2/en not_active Expired - Lifetime
- 1980-12-19 ZA ZA00807974A patent/ZA807974B/en unknown
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE1106848B (en) * | 1960-04-01 | 1961-05-18 | Licentia Gmbh | Procedure for remote control with feedback |
DE1516696A1 (en) * | 1966-03-31 | 1969-08-28 | Siemens Ag | Road traffic signaling system with testing and reporting devices for reporting back to a common center any faults occurring at individual intersections |
US3566399A (en) * | 1968-02-27 | 1971-02-23 | Gulf & Western Syst Co | Control station monitoring system for remote stations |
DE2723660A1 (en) * | 1977-05-25 | 1978-11-30 | Siemens Ag | Traffic light control system - has central monitor point for state of street lights, with light guiding cables connecting them together |
GB2005114A (en) * | 1977-10-03 | 1979-04-11 | Motorola Inc | Base station feedback reporting system |
DE2946169A1 (en) * | 1979-11-15 | 1981-05-21 | Wörl-Alarm August Wörl, 8035 Gauting | Alarm with central control station - uses channel with interrogation signals incorporating address and instruction for checking state of individual |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE3223779A1 (en) * | 1982-06-23 | 1984-01-05 | Licentia Patent-Verwaltungs-Gmbh, 6000 Frankfurt | Error-protected light-signal control device with fewer wires |
EP0137964A2 (en) * | 1983-10-17 | 1985-04-24 | Stührenberg, Rolf | Device for signal safety in light sign arrangements |
EP0137964A3 (en) * | 1983-10-17 | 1987-09-23 | Stührenberg, Rolf | Device for signal safety in light sign arrangements |
DE3424967A1 (en) * | 1984-07-06 | 1986-01-16 | Siemens AG, 1000 Berlin und 8000 München | Circuit for detecting conductor contacting in light signals |
DE3643226A1 (en) * | 1986-12-18 | 1988-06-30 | Standard Elektrik Lorenz Ag | Device for operating a plurality of electrical loads in a reliable manner in signalling terms |
AT398501B (en) * | 1986-12-18 | 1994-12-27 | Alcatel Nv | DEVICE FOR SIGNAL-SAFE OPERATION OF SEVERAL ELECTRICAL CONSUMERS |
DE3805949A1 (en) * | 1988-02-25 | 1989-09-07 | Siemens Ag | DEVICE FOR THE PARTIAL SHUTDOWN OF A ROAD SIGNAL SYSTEM |
Also Published As
Publication number | Publication date |
---|---|
DE2951932C2 (en) | 1983-08-18 |
ZA807974B (en) | 1982-01-27 |
ATE13164T1 (en) | 1985-05-15 |
DE2951932A1 (en) | 1981-07-02 |
EP0031046A3 (en) | 1982-08-11 |
US4356485A (en) | 1982-10-26 |
EP0031046B2 (en) | 1990-06-27 |
EP0031046B1 (en) | 1985-05-08 |
DE3070628D1 (en) | 1985-06-13 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP0031046B1 (en) | Device for data secure control and supervision of electric equipments | |
DE19643092C2 (en) | Field data bus system | |
DE2701924C3 (en) | Control device for rail-bound vehicles | |
EP0486501B1 (en) | Device for monitoring the functions of a plurality of control units in a motor vehicle | |
EP0007579B1 (en) | Circuit arrangement for monitoring the state of signalling systems, especially traffic light signalling systems | |
DE2527593C2 (en) | Method and device for remote monitoring and fault location of pulse regenerators | |
DE2701925C3 (en) | Vehicle control with two on-board computers | |
EP0004909A1 (en) | Annunciator of danger | |
DE2651314B1 (en) | Safety output circuit for a data processing system which emits binary signals | |
AT398501B (en) | DEVICE FOR SIGNAL-SAFE OPERATION OF SEVERAL ELECTRICAL CONSUMERS | |
DE102009050692B4 (en) | Security communication system for signaling system states | |
DE2400604B2 (en) | Electronic error display system | |
EP0077450A2 (en) | Security output circuit for a data processing equipment emitting binary signal pairs | |
DE3739227C2 (en) | ||
DE2034487C3 (en) | Circuit arrangement for the detection and evaluation of malfunctions in a communication system | |
EP0222682B1 (en) | Signal transmission system for a comparison protection device | |
DE3207397C2 (en) | Method for monitoring the functionality of a digital transmission link | |
DE19516906A1 (en) | Monitoring lamps supplied in parallel | |
DE1516696C3 (en) | Road traffic signal system | |
DE2365092C3 (en) | Electronic circuit for frequency and phase monitoring of clock pulses | |
DE2758552B2 (en) | Fail-safe data transmission device | |
DE2831960C2 (en) | Safety device for the receiving-side evaluation circuit of a data transmission system with information that is mutually exclusive | |
EP0622734B1 (en) | Interface | |
DE2402911C3 (en) | Circuit for the operation of a test circuit for light signals, especially in the railway sector | |
DE2808403C2 (en) | Circuit for triggering a fault signal |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
AK | Designated contracting states |
Designated state(s): AT BE CH DE FR GB IT NL SE |
|
17P | Request for examination filed |
Effective date: 19811028 |
|
PUAL | Search report despatched |
Free format text: ORIGINAL CODE: 0009013 |
|
AK | Designated contracting states |
Designated state(s): AT BE CH DE FR GB IT NL SE |
|
ITF | It: translation for a ep patent filed |
Owner name: STUDIO JAUMANN |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
AK | Designated contracting states |
Designated state(s): AT BE CH DE FR GB IT LI NL SE |
|
REF | Corresponds to: |
Ref document number: 13164 Country of ref document: AT Date of ref document: 19850515 Kind code of ref document: T |
|
REF | Corresponds to: |
Ref document number: 3070628 Country of ref document: DE Date of ref document: 19850613 |
|
ET | Fr: translation filed | ||
PLBI | Opposition filed |
Free format text: ORIGINAL CODE: 0009260 |
|
26 | Opposition filed |
Opponent name: STANDARD ELEKTRIK LORENZ AG Effective date: 19860201 Opponent name: TELEFONAKTIEBOLAGET L M ERICSSON Effective date: 19860201 |
|
NLR1 | Nl: opposition has been filed with the epo |
Opponent name: STANDARD ELEKTRIK LORENZ AG Opponent name: TELEFONAKTIEBOLAGET L M ERICSSON |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 19900126 Year of fee payment: 10 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: CH Payment date: 19900222 Year of fee payment: 10 |
|
PUAH | Patent maintained in amended form |
Free format text: ORIGINAL CODE: 0009272 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: PATENT MAINTAINED AS AMENDED |
|
27A | Patent maintained in amended form |
Effective date: 19900627 |
|
AK | Designated contracting states |
Kind code of ref document: B2 Designated state(s): AT BE CH DE FR GB IT NL SE |
|
NLR2 | Nl: decision of opposition | ||
ET3 | Fr: translation filed ** decision concerning opposition | ||
NLR3 | Nl: receipt of modified translations in the netherlands language after an opposition procedure | ||
ITF | It: translation for a ep patent filed |
Owner name: STUDIO JAUMANN |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: GB Payment date: 19901018 Year of fee payment: 11 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: AT Payment date: 19901031 Year of fee payment: 11 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: SE Payment date: 19901121 Year of fee payment: 11 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: BE Payment date: 19901122 Year of fee payment: 11 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: FR Payment date: 19901127 Year of fee payment: 11 |
|
ITTA | It: last paid annual fee | ||
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LI Effective date: 19901130 Ref country code: CH Effective date: 19901130 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: NL Payment date: 19901130 Year of fee payment: 11 |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PL |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: DE Effective date: 19910801 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: GB Effective date: 19911127 Ref country code: AT Effective date: 19911127 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: SE Effective date: 19911128 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: BE Effective date: 19911130 |
|
BERE | Be: lapsed |
Owner name: SIEMENS A.G. BERLIN UND MUNCHEN Effective date: 19911130 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: NL Effective date: 19920601 |
|
NLV4 | Nl: lapsed or anulled due to non-payment of the annual fee | ||
GBPC | Gb: european patent ceased through non-payment of renewal fee | ||
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: FR Effective date: 19920731 |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: ST |
|
EUG | Se: european patent has lapsed |
Ref document number: 80107434.5 Effective date: 19920604 |
|
APAC | Appeal dossier modified |
Free format text: ORIGINAL CODE: EPIDOS NOAPO |
|
APAC | Appeal dossier modified |
Free format text: ORIGINAL CODE: EPIDOS NOAPO |
|
APAH | Appeal reference modified |
Free format text: ORIGINAL CODE: EPIDOSCREFNO |