EP1307894A1 - Safety switch for safely switching off an electric consumer, especially an electrically driven machine - Google Patents

Safety switch for safely switching off an electric consumer, especially an electrically driven machine

Info

Publication number
EP1307894A1
EP1307894A1 EP01962887A EP01962887A EP1307894A1 EP 1307894 A1 EP1307894 A1 EP 1307894A1 EP 01962887 A EP01962887 A EP 01962887A EP 01962887 A EP01962887 A EP 01962887A EP 1307894 A1 EP1307894 A1 EP 1307894A1
Authority
EP
European Patent Office
Prior art keywords
switching device
unit
signal
safety switching
switch
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
EP01962887A
Other languages
German (de)
French (fr)
Other versions
EP1307894B1 (en
Inventor
Rolf Dickhoff
Winfried GRÄF
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Pilz GmbH and Co KG
Original Assignee
Pilz GmbH and Co KG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Pilz GmbH and Co KG filed Critical Pilz GmbH and Co KG
Publication of EP1307894A1 publication Critical patent/EP1307894A1/en
Application granted granted Critical
Publication of EP1307894B1 publication Critical patent/EP1307894B1/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
    • H01H47/00—Circuit arrangements not adapted to a particular application of the relay and designed to obtain desired operating characteristics or to provide energising current
    • H01H47/002—Monitoring or fail-safe circuits
    • H01H47/004—Monitoring or fail-safe circuits using plural redundant serial connected relay operated contacts in controlled circuit
    • H01H47/005—Safety control circuits therefor, e.g. chain of relays mutually monitoring each other

Definitions

  • Safety switching device for safely switching off an electrical consumer, in particular an electrically driven machine
  • the present invention relates to a safety switching device for safely switching off an electrical consumer, in particular an electrically driven machine, with a fail-safe switch-off unit and a signaling unit to which an external control signal can be fed together, the switch-off unit failing the electrical load as a function of a defined signal state of the control signal switches off, the signaling unit generating an external signal as a function of the defined signal state, and the switch-off unit having a first delay element, with the aid of which the switching off of the consumer is delayed by a first period of time.
  • a safety switching device has been driven by the applicant of the present invention for some time.
  • Safety switching devices of the type mentioned at the outset are used primarily in the industrial sector to carry out shutdown processes in a fail-safe manner.
  • "fail-safe” means that the switching device at least fulfills safety category 3 of the European standard EN 954-1.
  • devices of this type are used in response to the actuation of an EMERGENCY STOP button or the opening of a protective door to shut down or otherwise convert a machine system from which there is a danger into a safe state.
  • To carry out maintenance or repair work it is usually necessary to completely or at least partially switch off a machine or machine system in a fail-safe manner.
  • the known safety switching device has the first delay element, with the aid of which the shutdown process, i.e. interrupting the power supply by the first period of time. Before this period of time has elapsed, the signaling unit generates a change in state of the external signal, which causes the control unit of the machine to put it into the idle state.
  • the signaling unit essentially contains two mutually redundant relays which, in contrast to the relays of the switch-off unit, drop off without delay when their control circuit is de-energized. In contrast, the relays of the switch-off unit are delayed on release.
  • the signaling unit like the known safety switching device as a whole, is thus designed to be fail-safe, and thus supplies a fail-safe signal. As already mentioned above, such a safety switching device is complex and expensive.
  • This object is achieved in the safety switching device mentioned at the outset in that the signaling unit is a non-fail-safe unit which provides a non-fail-safe signaling signal at an output of the switching device.
  • the solution according to the invention is based on the knowledge that the generation of the alarm signal is a sub-process which, taken on its own and, in contrast to the overall process of switching off the machine, is not immediately critical to safety. A malfunction in the generation of the alarm signal is caught at the latest after the end of the first period by the interruption of the power supply. As a result, it is possible to place lower demands on the fault safety of the signaling unit without reducing the fault safety of the safety switching device according to the invention as a whole. If you do not build the alarm unit consistently fail-safe, the effort is considerably reduced, so that the safety switching device according to the invention can be manufactured overall more simply and therefore more cost-effectively.
  • the safety switching device In contrast to completely dispensing with the signaling unit, the safety switching device according to the invention has the advantage that the machine to be switched off can generally be shut down in a controlled manner before it is switched off. This avoids difficulties when starting up again.
  • the signaling unit deactivates the signaling signal without delay when the defined signal state occurs.
  • the measure has the advantage that the operational control of the machine has a maximum time available to shut down the machine in a controlled manner. Conversely, the first period of time can be dimensioned very small, which overall enables the safety switching device to react quickly.
  • control signal contains an operating voltage of the switching device, the defined signal state corresponding to a loss of the operating voltage.
  • the safety switching device has a logical OR link which links the operating voltage with a shutdown signal of a triggering element which is supplied from the outside, the defined signal state corresponding to a loss of the operating voltage or an actuation of the triggering element.
  • the signaling unit has a second delay element, with the aid of which the generation of the signaling signal is delayed by a second period when the switching device is switched on.
  • This measure has the advantage that the supply voltage for the machine is already stable before the signaling unit provides the external signal and thus prompts the operational control of the machine to start it up.
  • This advantageous timing can be achieved without additional external circuitry and timing elements, which simplifies the application and installation of the safety switching device according to the invention.
  • the shutdown unit has at least two mutually redundant switching means which are arranged in series with one another.
  • the switching means have at least one positively driven auxiliary contact which is integrated in a monitoring circuit.
  • the shutdown unit and the signaling unit are arranged in a common switchgear housing.
  • This measure has the advantage that the safety switching device according to the invention is available as a compact component, which considerably simplifies its installation in a machine system to be monitored. It is particularly advantageous that the control of the time sequences between the switch-off unit and the signaling unit is carried out inside the device, as a result of which errors during installation and undesired manipulations are avoided.
  • Figure 1 is a schematic representation of a generic safety switching device from which the present invention is based.
  • Fig. 2 is a schematic representation of an embodiment of the safety switching device according to the invention.
  • FIG. 3 shows a first exemplary embodiment for the construction of the signaling unit in the safety switching device according to FIG. 2;
  • Fig. 6 is a schematic representation of a second embodiment of the safety switching device according to the invention.
  • a generic safety switching device is designated in its entirety with the reference number 10.
  • the safety switching device 10 is installed in a compact device housing 12 which has numerous connecting terminals which are accessible from the outside.
  • the connection terminals are designed as screw terminals and are designated in FIG. 1 in the manner customary for such switching devices.
  • connection terminals AI and A2 form an input via which the safety switching device 10 is supplied with an internal operating voltage U B.
  • the operating voltage U B first comes to a series circuit 16 when it is switched on, which is built up from the auxiliary contacts of four relays Kl, K2, K4 and K5 and the control circuit of a relay K3 which is delayed on release is.
  • the auxiliary contacts of relays Kl, K2, K4 and K5 are normally closed contacts, which are closed in the idle state.
  • the operating voltage U B then reaches the control circuits of the relays K1, K2, K4 and K5 already mentioned via the working contacts 18, 20 of the relay K3.
  • Their working contacts 24, 26, 28, 30 form two output circuits of the safety switching device 10, which are accessible via the terminals 32, 33 and 34, 35.
  • relays K1, K2, K4 and K5 When the relays K1, K2, K4 and K5 are energized, their auxiliary contacts in the series circuit 16 open, and the normally open contacts 24, 26, 28, 30 close. Furthermore, the two further auxiliary contacts 36, 38 are closed, which then the current flow through the control circuits of the relays K1, K2, K4 and K5 maintained regardless of the operating position of relay K3. The relay K3 drops out after the predetermined release delay time has elapsed.
  • the working contacts 24, 26, 28, 30 in the two output circuits of the safety switching device 10 are closed, so that a machine connected to the safety switching device 10 (not shown here) is switched on. If the operating voltage U B at the input terminals AI, A2 is removed, all contacts fall back into their rest position shown in FIG. 1. As a result, the current path between terminals 32 and 33 is interrupted almost simultaneously. In contrast, the current path between terminals 34 and 35 is interrupted with a delay time which corresponds to the release time of relays K4 and K5.
  • a machine to be switched off is supplied via the current path between terminals 34 and 35, while the signaling signal is carried via the current path between terminals 32 and 33.
  • the signaling signal is carried via the current path between terminals 32 and 33.
  • FIG. 2 an exemplary embodiment of a safety switching device according to the invention is designated in its entirety by reference number 40.
  • the same reference numerals designate the same elements as in FIG. 1.
  • the safety switching device 40 in its output circuit between the terminals 34 and 35 in turn has the working contacts 24, 26 of the two relays K1 and K2 arranged in series.
  • input circuits of the relays K1 and K2 are initially supplied via the normally open contacts 18, 20 of the relay K3. After the relays K1 and K2 are energized, the relay K3 drops out with a delay time, and the input circuits of the relays K1 and K2 are supplied via the auxiliary contacts 36 and 38 which are closed at this time.
  • the structure of the safety switching device 40 corresponds to that of the safety switching device 10 ,
  • the reference numbers 44, 46 denote two capacitances which are connected in parallel to the control circuit of the relays K1 and K2. When switched on, the two capacitors 44, 46 charge up. If the operating voltage U B on the input side is removed, the two capacitors 44, 46 are discharged via the control circuits of the relays K1 and K2. Only after the discharge, the relays K1 and K2 drop out and open their work contacts 24, 26. As a result, the machine 42 is switched off with a delay time T 1 which corresponds to the discharge time of the capacitors 44, 46.
  • the capacitors 44, 46 are thus first delay elements in the sense of the present invention.
  • the components of the safety switching device 40 described so far form a shutdown unit, which in its entirety is referred to below with the reference number 48.
  • the shutdown unit 48 is constructed in a manner known per se with two channels of redundancy, which means fault safety in the sense the European standard EN 954-1 is achieved.
  • each of the two relays K1, K2 has a positively driven auxiliary contact 50, 52 which is coupled to the relay K3 in such a way that the safety switching device 40 cannot be put into operation if one of the working contacts 24, 26 is fused.
  • the auxiliary contacts 50, 52 are thus integrated in a monitoring circuit.
  • the safety switching device 40 has a non-fail-safe signaling unit 54 which provides a non-fail-safe signal 58 at an output terminal 56.
  • the signal 58 can thus be supplied to a control unit 60 for the machine 42 in a simple manner.
  • the output terminal 56 for generating the signal 58 is connected directly to the operating voltage U B.
  • Preferred exemplary embodiments for the reporting unit 54 are, however, described with reference to the following figures.
  • the reporting unit 54 contains an amplifier circuit consisting of two transistors T1 and T2 and a number of resistors R1 to R6.
  • the signal 58 is tapped through the resistor R6 at the collector of the transistor T2, which in the circuit shown has the consequence that the signal 58 corresponds approximately to the operating voltage U B in the active state, while in the deactivated state it has a voltage-free, high-resistance state ,
  • the switching of the signaling unit 54 is increased by an additional capacitance 62. complements, which has the consequence that the message signal 58 only assumes its active signal state after the capacitance 62 has largely been charged. As a result, the provision of the message signal 58 is delayed by a second time period determined by the capacitance 62 when the safety switching device 40 is switched on.
  • FIG. 5 shows the time sequences for the safety switching device 40 again graphically.
  • the operating voltage U B of the safety switching device 40 is switched on.
  • the contacts 24, 26 of the relays K1 and K2 attract almost simultaneously, so that the supply voltage U v reaches the machine 42.
  • the signal 58 assumes its active state only after the second time period T 2 , which corresponds approximately to the charging time of the capacitance 62.
  • the signal 58 returns almost simultaneously to its deactivated, high-resistance state.
  • the normally open contacts 24, 26 of the relays K1, K2 remain closed until the capacitors 44, 46 are discharged.
  • the machine 42 is only disconnected from its power supply U v after the period x has elapsed.
  • the control unit 60 of the machine 42 therefore has enough time to shut down the machine 42 in a controlled manner before the supply voltage U v is disconnected.
  • a further exemplary embodiment of a safety switching device according to the invention is designated in its entirety by the reference number 70.
  • the safety switching device 70 differs from the safety switching device 40 from FIG. 2 primarily by a logical AND combination, which is designated in FIG. 6 with the reference number 72.
  • the output of the AND link 72 is fed to the message unit 54.
  • the AND link 72 receives the switch-off signal of a triggering element 74, which in this case is two-channel, which here is, for example, a two-channel EMERGENCY STOP button.
  • the AND link 72 receives a signal derived from the operating voltage U B.
  • the defined signal state, in the presence of which the safety switching device 70 initiates the switch-off process for the machine 42 thus corresponds to both a loss of the operating voltage U B and an actuation of the trigger element 74 or even both.

Landscapes

  • Safety Devices In Control Systems (AREA)
  • Electronic Switches (AREA)
  • Keying Circuit Devices (AREA)
  • Control Of Electric Motors In General (AREA)
  • Pinball Game Machines (AREA)
  • Relay Circuits (AREA)
  • Driving Mechanisms And Operating Circuits Of Arc-Extinguishing High-Tension Switches (AREA)

Abstract

The present invention relates to a safety switching device for safely switching off an electrical load such as an electrically driven machine. The safety switching device has a failsafe disconnection unit and a non-failsafe signaling unit, both of which are supplied with an external control signal. The disconnection unit fail-safely switches off the electrical load as a function of the control signal but with a first delay. The signaling unit produces an external reporting signal as a function of the control signal in a non-delayed and non-failsafe manner.

Description

Sicherheitsschaltgerät zum sicheren Abschalten eines elektrischen Verbrauchers, insbesondere einer elektrisch angetriebenen Maschine Safety switching device for safely switching off an electrical consumer, in particular an electrically driven machine
Die vorliegende Erfindung betrifft ein Sicherheitsschaltgerät zum sicheren Abschalten eines elektrischen Verbrauchers, insbesondere einer elektrisch angetriebenen Maschine, mit einer fehlersicheren Abschalteinheit sowie einer Meldeeinheit, denen ein externes Steuersignal gemeinsam zuführbar ist, wobei die Abschalteinheit den elektrischen Verbraucher in Abhängigkeit von einem definierten Signalzustand des Steuersignals fehlersicher abschaltet, wobei die Meldeeinheit in Abhängigkeit von dem definierten Signalzustand ein externes Meldesignal erzeugt, und wobei die Abschalteinheit ein erstes Verzögerungselement aufweist, mit dessen Hilfe das Abschalten des Verbrauchers um eine erste Zeitspanne verzögert wird. Ein derartiges Sicherheitsschaltgerät wird von der Anmelderin der vorliegenden Erfindung bereits seit einiger Zeit ertrieben.The present invention relates to a safety switching device for safely switching off an electrical consumer, in particular an electrically driven machine, with a fail-safe switch-off unit and a signaling unit to which an external control signal can be fed together, the switch-off unit failing the electrical load as a function of a defined signal state of the control signal switches off, the signaling unit generating an external signal as a function of the defined signal state, and the switch-off unit having a first delay element, with the aid of which the switching off of the consumer is delayed by a first period of time. Such a safety switching device has been driven by the applicant of the present invention for some time.
Sicherheitsschaltgeräte der eingangs genannten Art werden vor allem im industriellen Bereich verwendet, um Absσhaltvorgänge auf fehlersichere Art und Weise durchzuführen. "Fehlersicher" bedeutet dabei in diesem Zusammenhang, daß das Schaltgerät zumindest die Sicherheitskategorie 3 der europäischen Norm EN 954-1 erfüllt. Beispielsweise werden derartige Geräte verwendet, um in Reaktion auf die Betätigung eines NOT-AUS-Tasters oder das Öffnen einer Schutztür eine Maschinenanlage, von der eine Gefahr ausgeht, stillzusetzen oder anderweitig in einen gefahrlosen Zustand zu überführen. Auch zum Durchführen von Wartungs- oder Instandsetzungsarbeiten ist es in der Regel notwendig, eine Maschine oder Maschinenanlage ganz oder zumindest teilweise fehlersicher abzuschalten. Da eine Fehlfunktion oder ein Versagen des Sicherheitsschaltgerätes in einer solchen Situation eine unmittelbare Gefahr für Menschen zur Folge hat, werden hinsichtlich der Fehlersicherheit derartiger Schaltgeräte sehr hohe Anforderungen gestellt. Dies führt zu einem sehr großen Aufwand verbunden mit hohen Kosten bei der Entwicklung und Fertigung von Sicherheitsschaltgeräten.Safety switching devices of the type mentioned at the outset are used primarily in the industrial sector to carry out shutdown processes in a fail-safe manner. In this context, "fail-safe" means that the switching device at least fulfills safety category 3 of the European standard EN 954-1. For example, devices of this type are used in response to the actuation of an EMERGENCY STOP button or the opening of a protective door to shut down or otherwise convert a machine system from which there is a danger into a safe state. To carry out maintenance or repair work, it is usually necessary to completely or at least partially switch off a machine or machine system in a fail-safe manner. Since a malfunction or a failure of the safety switching device in such a situation results in an immediate danger to people, very high demands are made with regard to the fail-safety of such switching devices. This leads to a great deal of effort combined with high costs in the development and manufacture of safety switching devices.
In manchen Anwendungsfällen besteht das Bedürfnis, die Maschine oder Maschinenanlage vor dem eigentlichen Abschalten, d.h. dem Entfernen der Versorgungsspannung, kontrolliert herunterzufahren. Dabei wird die Maschine von der Maschinensteuerung kontrolliert in einen definierten Ruhezustand überführt. Dies ist vor allem dann von Vorteil, wenn die Wiederinbetriebnahme der Maschine nach einem abrupten Abschalten mitten im Betriebs- ablauf mit Schwierigkeiten verbunden ist. Des weiteren werden durch ein kontrolliertes Herunterfahren vor dem eigentlichen Abschalten unkontrollierte Maschinenbewegungen, beispielsweise infolge von Trägheitskräften, vermieden.In some applications, there is a need to shut down the machine or machine system in a controlled manner before actually switching it off, ie removing the supply voltage. The machine control transfers the machine to a defined idle state in a controlled manner. This is particularly advantageous when restarting the machine after an abrupt shutdown in the middle of the process is difficult. In addition, uncontrolled machine movements, for example as a result of inertial forces, are avoided by a controlled shutdown before the actual shutdown.
Um ein kontrolliertes Herunterfahren einer Maschine vor dem eigentlichen Abschalten zu ermöglichen, weist das bekannte Sicherheitsschaltgerät das erste Verzögerungselement auf, mit dessen Hilfe der Abschaltvorgang, d.h. das Unterbrechen der Stromversorgung, um die erste Zeitspanne verzögert wird. Vor Ablauf dieser Zeitspanne erzeugt die Meldeeinheit einen Zu- standswechsel des externen Meldesignals, wodurch die Steuereinheit der Maschine veranlaßt wird, diese in den Ruhezustand zu versetzen.In order to enable a controlled shutdown of a machine before the actual shutdown, the known safety switching device has the first delay element, with the aid of which the shutdown process, i.e. interrupting the power supply by the first period of time. Before this period of time has elapsed, the signaling unit generates a change in state of the external signal, which causes the control unit of the machine to put it into the idle state.
Bei dem bekannten Sicherheitsschaltgerät beinhaltet die Meldeeinheit im wesentlichen zwei zueinander redundante Relais, die im Gegensatz zu den Relais der Abschalteinheit unverzögert abfallen, wenn ihr Steuerkreis stromlos wird. Die Relais der Abschalteinheit sind demgegenüber rückfallverzögert. Die Meldeeinheit ist damit, ebenso wie das bekannte Sicherheitsschaltgerät insgesamt, fehlersicher aufgebaut, und liefert somit ein fehlersicheres Meldesignal. Wie bereits zuvor erwähnt, ist ein solches Sicherheitsschaltgerät jedoch aufwendig und kostenintensiv.In the known safety switching device, the signaling unit essentially contains two mutually redundant relays which, in contrast to the relays of the switch-off unit, drop off without delay when their control circuit is de-energized. In contrast, the relays of the switch-off unit are delayed on release. The signaling unit, like the known safety switching device as a whole, is thus designed to be fail-safe, and thus supplies a fail-safe signal. As already mentioned above, such a safety switching device is complex and expensive.
Es ist daher eine Aufgabe der vorliegenden Erfindung, ein Sicherheitsschaltgerät der eingangs genannten Art anzugeben, das kostengünstiger herstellbar ist. Diese Aufgabe wird bei dem eingangs genannten Sicherheitsschaltgerät dadurch gelöst, daß die Meldeeinheit eine nicht- fehlersichere Einheit ist, die an einem Ausgang des Schaltgerätes ein nicht-fehlersicheres Meldesignal bereitstellt.It is therefore an object of the present invention to provide a safety switching device of the type mentioned at the outset which can be manufactured more cost-effectively. This object is achieved in the safety switching device mentioned at the outset in that the signaling unit is a non-fail-safe unit which provides a non-fail-safe signaling signal at an output of the switching device.
Die erfindungsgemäße Lösung beruht auf der Erkenntnis, daß die Erzeugung des Meldesignals ein Teilprozeß ist, der für sich genommen und im Gegensatz zu dem Gesamtprozeß des Abschaltens der Maschine nicht unmittelbar sicherheitskritisch ist. Eine Funktionsstörung bei der Erzeugung des Meldesignals wird nämlich spätestens nach Ablauf der ersten Zeitspanne durch die dann erfolgende Unterbrechung der Stromzuführung aufgefangen. Infolgedessen ist es möglich, bei der Meldeeinheit geringere Anforderungen an die Fehlersicherheit zu stellen, ohne dabei die Fehlersicherheit des erfindungsgemäßen Sicherheitsschaltgeräts insgesamt zu reduzieren. Verzichtet man darauf, die Meldeeinheit durchgängig fehlersicher aufzubauen, verringert sich der Aufwand erheblich, so daß das erfindungsgemäße Sicherheitsschaltgerät insgesamt einfacher und damit kostengünstiger hergestellt werden kann.The solution according to the invention is based on the knowledge that the generation of the alarm signal is a sub-process which, taken on its own and, in contrast to the overall process of switching off the machine, is not immediately critical to safety. A malfunction in the generation of the alarm signal is caught at the latest after the end of the first period by the interruption of the power supply. As a result, it is possible to place lower demands on the fault safety of the signaling unit without reducing the fault safety of the safety switching device according to the invention as a whole. If you do not build the alarm unit consistently fail-safe, the effort is considerably reduced, so that the safety switching device according to the invention can be manufactured overall more simply and therefore more cost-effectively.
Die genannte Aufgabe ist damit vollständig gelöst.The task mentioned is thus completely achieved.
Im Gegensatz zu einem vollständigen Verzicht auf die Meldeeinheit besitzt das erfindungsgemäße Sicherheitsschaltgerät den Vorteil, daß die abzuschaltende Maschine im Regelfall vor dem Abschalten kontrolliert heruntergefahren werden kann. Dadurch werden Schwierigkeiten bei der Wiederinbetriebnahme vermieden. In einer bevorzugten Ausgestaltung der Erfindung deaktiviert die Meldeeinheit das Meldesignal beim Auftreten des definierten Signalzustandes verzögerungsfrei .In contrast to completely dispensing with the signaling unit, the safety switching device according to the invention has the advantage that the machine to be switched off can generally be shut down in a controlled manner before it is switched off. This avoids difficulties when starting up again. In a preferred embodiment of the invention, the signaling unit deactivates the signaling signal without delay when the defined signal state occurs.
Dies bedeutet, daß die Meldeeinheit einen Zustandswechsel des externen Meldesignals nahezu zeitgleich mit dem Auftreten des definierten Signalzustandes des Steuersignals hervorruft. Es versteht sich, daß eine exakte zeitliche Übereinstimmung in der Praxis aufgrund von technisch bedingten Signallaufzeiten nicht erreicht werden kann. "Verzögerungsfrei" bedeutet daher, daß über die unvermeidlichen Signallaufzeiten hinaus keine zusätzlichen Verzögerungen bei der Reaktion der Meldeeinheit vorhanden sind. Die Maßnahme besitzt den Vorteil, daß die Betriebssteuerung der Maschine eine maximale Zeitspanne zur Verfügung hat, um die Maschine kontrolliert herunterzufahren. Umgekehrt kann die erste Zeitspanne sehr gering bemessen werden, was insgesamt eine schnelle Reaktion des Sicherheitsschaltgerätes ermöglicht.This means that the signaling unit causes a change in state of the external signaling signal almost simultaneously with the occurrence of the defined signal state of the control signal. It goes without saying that an exact correspondence in time cannot be achieved in practice due to signal delays due to technical reasons. "Delay-free" therefore means that there are no additional delays in the response of the signaling unit beyond the inevitable signal propagation times. The measure has the advantage that the operational control of the machine has a maximum time available to shut down the machine in a controlled manner. Conversely, the first period of time can be dimensioned very small, which overall enables the safety switching device to react quickly.
In einer weiteren Ausgestaltung der Erfindung beinhaltet das Steuersignal eine Betriebsspannung des Schaltgerätes, wobei der definierte Signalzustand einem Wegfall der Betriebsspannung entspricht.In a further embodiment of the invention, the control signal contains an operating voltage of the switching device, the defined signal state corresponding to a loss of the operating voltage.
Auf diese Weise wird eine zusätzliche Sicherheit erzeugt, da das Sicherheitsschaltgerät den Abschaltvorgang automatisch einleitet, wenn seine eigene Betriebsspannung entfällt. Bei Ausfall des Sicherheitsschaltgerätes wird die überwachte Maschine somit automatisch heruntergefahren und fehlersicher abgeschaltet. In einer weiteren Ausgestaltung weist das Sicherheitsschaltgerät eine logische ODER-Verknüpfung auf, die die Betriebsspannung mit einem von außen zugeführten Abschaltsignal eines Auslöseelements verknüpft, wobei der definierte Signalzustand einem Wegfall der Betriebsspannung oder einem Betätigen des Auslöseelements entspricht.In this way, additional safety is generated, since the safety switching device automatically initiates the switch-off process when its own operating voltage is lost. If the safety relay fails, the monitored machine is shut down automatically and switched off in a fail-safe manner. In a further embodiment, the safety switching device has a logical OR link which links the operating voltage with a shutdown signal of a triggering element which is supplied from the outside, the defined signal state corresponding to a loss of the operating voltage or an actuation of the triggering element.
Mit dieser Maßnahme wird auf eine einfache Weise eine zweikana- lige Ansteuerung des Sicherheitsschaltgerätes bereitgestellt, wodurch die Fehlersicherheit nochmals erhöht ist.With this measure, a two-channel control of the safety switching device is provided in a simple manner, as a result of which the reliability is further increased.
In einer weiteren Ausgestaltung der Erfindung weist die Meldeeinheit ein zweites Verzögerungselement auf, mit dessen Hilfe die Erzeugung des Meldesignals beim Einschalten des Schaltgerätes um eine zweite Zeitspanne verzögert wird.In a further embodiment of the invention, the signaling unit has a second delay element, with the aid of which the generation of the signaling signal is delayed by a second period when the switching device is switched on.
Diese Maßnahme besitzt den Vorteil, daß die Versorgungsspannung für die Maschine bereits stabil anliegt, bevor die Meldeeinheit das externe Meldesignal bereitstellt und somit die Betriebssteuerung der Maschine veranlaßt, diese hochzufahren. Dabei ist dieser vorteilhafte Zeitablauf ohne zusätzliche externe Be- schaltung und Zeitglieder erreichbar, was die Anwendung und die Installation des erfindungsgemäßen Sicherheitsschaltgerätes vereinfacht.This measure has the advantage that the supply voltage for the machine is already stable before the signaling unit provides the external signal and thus prompts the operational control of the machine to start it up. This advantageous timing can be achieved without additional external circuitry and timing elements, which simplifies the application and installation of the safety switching device according to the invention.
In einer weiteren Ausgestaltung der Erfindung weist die Abschalteinheit zumindest zwei zueinander redundante Schaltmittel auf, die in Reihe zueinander angeordnet sind.In a further embodiment of the invention, the shutdown unit has at least two mutually redundant switching means which are arranged in series with one another.
Mit Hilfe dieser für sich genommen bekannten Maßnahme ist es möglich, die Abschalteinheit fehlersicher im Sinne der europäi- sehen Norm EN 954-1 zu machen, so daß das erfindungsgemäße Sicherheitsschaltgerät insgesamt diese Norm erfüllen kann.With the help of this known measure, it is possible to make the switch-off unit fail-safe in the sense of the European see to make standard EN 954-1, so that the safety switching device according to the invention can meet this standard overall.
In einer weiteren Ausgestaltung der zuvor genannten Maßnahme weisen die Schaltmittel zumindest einen zwangsgeführten Hilfskontakt auf, der in einen Überwachungskreis eingebunden ist.In a further embodiment of the measure mentioned above, the switching means have at least one positively driven auxiliary contact which is integrated in a monitoring circuit.
Mit dieser Maßnahme wird eine noch höhere Fehlersicherheit erreicht, da die Abschalteinheit auf diese Weise zusätzlich auf ihre Funktionssicherheit überwacht werden kann.With this measure, an even higher level of error security is achieved, since the shutdown unit can also be monitored for its functional reliability in this way.
In einer weiteren bevorzugten Ausgestaltung der Erfindung sind die Abschalteinheit und die Meldeeinheit in einem gemeinsamen Schaltgerätegehäuse angeordnet.In a further preferred embodiment of the invention, the shutdown unit and the signaling unit are arranged in a common switchgear housing.
Diese Maßnahme besitzt den Vorteil, daß das erfindungsgemäße Sicherheitsschaltgerät als ein in sich kompaktes Bauelement zur Verfügung steht, was seine Installation in einer zu überwachenden Maschinenanlage wesentlich vereinfacht. Besonders vorteilhaft ist dabei, daß die Steuerung der Zeitabläufe zwischen der Abschalteinheit und der Meldeeinheit geräteintern durchgeführt wird, wodurch Fehler bei der Installation und unerwünschte Manipulationen vermieden werden.This measure has the advantage that the safety switching device according to the invention is available as a compact component, which considerably simplifies its installation in a machine system to be monitored. It is particularly advantageous that the control of the time sequences between the switch-off unit and the signaling unit is carried out inside the device, as a result of which errors during installation and undesired manipulations are avoided.
Es versteht sich, daß die vorstehend genannten und die nachstehend noch zu erläuternden Merkmale nicht nur in der jeweils angegebenen Kombination, sondern auch in anderen Kombinationen oder in Alleinstellung verwendbar sind, ohne den Rahmen der vorliegenden Erfindung zu verlassen. Ausführungsbeispiele der Erfindung sind in der Zeichnung dargestellt und werden in der nachfolgenden Beschreibung näher erläutert. Es zeigen:It goes without saying that the features mentioned above and those yet to be explained below can be used not only in the combination indicated in each case, but also in other combinations or on their own without departing from the scope of the present invention. Exemplary embodiments of the invention are shown in the drawing and are explained in more detail in the following description. Show it:
Fig. 1 eine schematische Darstellung eines gattungsgemäßen Sicherheitsschaltgerätes, von dem die vorliegende Erfindung ausgeht;Figure 1 is a schematic representation of a generic safety switching device from which the present invention is based.
Fig. 2 eine schematische Darstellung eines Ausführungsbeispiels des erfindungsgemäßen Sicherheitsschaltgerätes;Fig. 2 is a schematic representation of an embodiment of the safety switching device according to the invention;
Fig. 3 ein erstes Ausführungsbeispiel für den Aufbau der Meldeeinheit bei dem Sicherheitsschaltgerät gemäß Fig. 2;3 shows a first exemplary embodiment for the construction of the signaling unit in the safety switching device according to FIG. 2;
Fig. 4 ein zweites Ausführungsbeispiel für eine Meldeeinheit; und4 shows a second exemplary embodiment for a signaling unit; and
Fig. 5 eine Darstellung der zeitlichen Zusammenhänge bei dem erfindungsgemäßen Sicherheitsschaltgerät; und5 shows a representation of the temporal relationships in the safety switching device according to the invention; and
Fig. 6 eine schematische Darstellung eines zweiten Ausführungsbeispiels des erfindungsgemäßen Sicherheitsschaltgerätes .Fig. 6 is a schematic representation of a second embodiment of the safety switching device according to the invention.
In Fig. 1 ist ein gattungsgemäßes Sicherheitsschaltgerät in seiner Gesamtheit mit der Bezugsziffer 10 bezeichnet. Das Sicherheitsschaltgerät 10 ist in ein kompaktes Gerätegehäuse 12 eingebaut, das zahlreiche von außen zugängliche Anschlußklemmen aufweist. Die Anschlußklemmen sind im vorliegenden Ausführungsbeispiel als Schraubklemmen ausgebildet und sind in Fig. 1 in der bei derartigen Schaltgeräten üblichen Art und Weise bezeichnet.In Fig. 1, a generic safety switching device is designated in its entirety with the reference number 10. The safety switching device 10 is installed in a compact device housing 12 which has numerous connecting terminals which are accessible from the outside. In the present exemplary embodiment, the connection terminals are designed as screw terminals and are designated in FIG. 1 in the manner customary for such switching devices.
Die Anschlußklemmen AI und A2 bilden einen Eingang, über den das Sicherheitsschaltgerät 10 mit einer geräteinternen Betriebsspannung UB versorgt wird. Über externe Brücken 14 zwischen den Klemmen S33 und S34 bzw. Yl und Y2 gelangt die Betriebsspannung UB beim Einschalten zunächst zu einer Serienschaltung 16, die aus den Hilfskontakten von vier Relais Kl, K2, K4 und K5 sowie dem Steuerkreis eines rückfallverzögerten Relais K3 aufgebaut ist. Die Hilfskontakte der Relais Kl, K2 , K4 und K5 sind Öffnerkontakte, die im Ruhezustand geschlossen sind. Infolgedessen fließt nach dem Einschalten des Sicherheitsschaltgerätes 10 zunächst ein Strom über den Steuerkreis des Relais K3. Dessen Arbeitskontakte 18, 20 ziehen daraufhin ebenso wie sein Hilfskontakt 22 an. Über die Arbeitskontakte 18, 20 des Relais K3 gelangt die Betriebsspannung UB dann an die Steuerkreise der bereits genannten Relais Kl, K2, K4 und K5. Deren Arbeitskontakte 24, 26, 28, 30 bilden zwei Ausgangskreise des Sicherheitsschaltgerätes 10, die über die Klemmen 32, 33 bzw. 34, 35 zugänglich sind.The connection terminals AI and A2 form an input via which the safety switching device 10 is supplied with an internal operating voltage U B. Via external bridges 14 between the terminals S33 and S34 or Yl and Y2, the operating voltage U B first comes to a series circuit 16 when it is switched on, which is built up from the auxiliary contacts of four relays Kl, K2, K4 and K5 and the control circuit of a relay K3 which is delayed on release is. The auxiliary contacts of relays Kl, K2, K4 and K5 are normally closed contacts, which are closed in the idle state. As a result, after the safety switching device 10 is switched on, a current initially flows through the control circuit of the relay K3. Its normally open contacts 18, 20 then attract as well as its auxiliary contact 22. The operating voltage U B then reaches the control circuits of the relays K1, K2, K4 and K5 already mentioned via the working contacts 18, 20 of the relay K3. Their working contacts 24, 26, 28, 30 form two output circuits of the safety switching device 10, which are accessible via the terminals 32, 33 and 34, 35.
Mit dem Anziehen der Relais Kl, K2 , K4 und K5 öffnen deren Hilfskontakte in der Serienschaltung 16, und die Arbeitskontakte 24, 26, 28, 30 schließen sich. Des weiteren werden die beiden weiteren Hilfskontakte 36, 38 geschlossen, die dann den Stromfluß über die Steuerkreise der Relais Kl, K2 , K4 und K5 unabhängig von der Betriebsstellung des Relais K3 aufrechterhalten. Das Relais K3 fällt nach Ablauf der vorbestimmten Rückfall-Verzögerungszeit ab.When the relays K1, K2, K4 and K5 are energized, their auxiliary contacts in the series circuit 16 open, and the normally open contacts 24, 26, 28, 30 close. Furthermore, the two further auxiliary contacts 36, 38 are closed, which then the current flow through the control circuits of the relays K1, K2, K4 and K5 maintained regardless of the operating position of relay K3. The relay K3 drops out after the predetermined release delay time has elapsed.
Nach Ablauf dieser Vorgänge sind die Arbeitskontakte 24, 26, 28, 30 in den beiden Ausgangskreisen des Sicherheitsschaltgerätes 10 geschlossen, so daß eine an das Sicherheitsschaltgerät 10 angeschlossene Maschine (hier nicht dargestellt) eingeschaltet ist. Wird die Betriebsspannung UB an den Eingangsklemmen AI, A2 entfernt, fallen sämtliche Kontakte in ihre in Fig. 1 dargestellte Ruhestellung zurück. Dies hat zur Folge, daß der Strompfad zwischen den Klemmen 32 und 33 nahezu zeitgleich unterbrochen wird. Der Strompfad zwischen den Klemmen 34 und 35 wird demgegenüber mit einer Verzögerungszeit unterbrochen, die der Rückfallzeit der Relais K4 und K5 entspricht.After these processes, the working contacts 24, 26, 28, 30 in the two output circuits of the safety switching device 10 are closed, so that a machine connected to the safety switching device 10 (not shown here) is switched on. If the operating voltage U B at the input terminals AI, A2 is removed, all contacts fall back into their rest position shown in FIG. 1. As a result, the current path between terminals 32 and 33 is interrupted almost simultaneously. In contrast, the current path between terminals 34 and 35 is interrupted with a delay time which corresponds to the release time of relays K4 and K5.
Im praktischen Betrieb wird eine abzuschaltende Maschine über den Strompfad zwischen den Klemmen 34 und 35 versorgt, während über den Strompfad zwischen den Klemmen 32 und 33 das Meldesignal geführt wird. Wie sich daraus ergibt, werden hier zur Erzeugung des Meldesignals ebenso viele Relais benötigt, wie für das Abschalten der Maschine.In practical operation, a machine to be switched off is supplied via the current path between terminals 34 and 35, while the signaling signal is carried via the current path between terminals 32 and 33. As can be seen from this, as many relays are required to generate the signal as to switch off the machine.
In Fig. 2 ist ein Ausführungsbeispiel eines erfindungsgemäßen Sicherheitsschaltgerätes in seiner Gesamtheit mit der Bezugsziffer 40 bezeichnet. Gleiche Bezugszeichen bezeichnen dabei dieselben Elemente wie in Fig. 1.2, an exemplary embodiment of a safety switching device according to the invention is designated in its entirety by reference number 40. The same reference numerals designate the same elements as in FIG. 1.
Das Sicherheitsschaltgerät 40 weist in seinem Ausgangskreis zwischen den Klemmen 34 und 35 wiederum die in Reihe angeordneten Arbeitskontakte 24, 26 der beiden Relais Kl und K2 auf. Die Eingangskreise der Relais Kl und K2 werden wie bei dem Sicherheitsschaltgerät 10 gemäß Fig. 1 zunächst über die Arbeitskontakte 18, 20 des Relais K3 versorgt. Nach dem Anziehen der Relais Kl und K2 fällt das Relais K3 mit einer Verzögerungszeit ab, und die Versorgung der Eingangskreise der Relais Kl und K2 erfolgt über die zu diesem Zeitpunkt geschlossenen Hilfskontakte 36 und 38. Der Aufbau des Sicherheitsschaltgerätes 40 entspricht insoweit demjenigen des Sicherheitsschaltgerätes 10.The safety switching device 40 in its output circuit between the terminals 34 and 35 in turn has the working contacts 24, 26 of the two relays K1 and K2 arranged in series. The As in the safety switching device 10 according to FIG. 1, input circuits of the relays K1 and K2 are initially supplied via the normally open contacts 18, 20 of the relay K3. After the relays K1 and K2 are energized, the relay K3 drops out with a delay time, and the input circuits of the relays K1 and K2 are supplied via the auxiliary contacts 36 and 38 which are closed at this time. The structure of the safety switching device 40 corresponds to that of the safety switching device 10 ,
In dem beschriebenen Zustand nach dem Einschalten ist der Strompfad über die Klemmen 34, 35 geschlossen, und eine elektrische Maschine 42 ist mit der Versorgungsspannung Uv verbunden.In the described state after switching on, the current path via the terminals 34, 35 is closed, and an electrical machine 42 is connected to the supply voltage U v .
Mit den Bezugsziffern 44, 46 sind zwei Kapazitäten bezeichnet, die jeweils dem Steuerkreis der Relais Kl und K2 parallel geschaltet sind. Im eingeschalteten Zustand laden sich die beiden Kapazitäten 44, 46 auf. Entfernt man die eingangsseitige Betriebsspannung UB, entladen sich die beiden Kapazitäten 44, 46 über die Steuerkreise der Relais Kl und K2. Erst nach dem Entladen fallen die Relais Kl und K2 ab und öffnen ihre Arbeitskontakte 24, 26. Dadurch wird die Maschine 42 mit einer Verzögerungszeit T1 die der Entladezeit der Kapazitäten 44, 46 entspricht, abgeschaltet. Die Kapazitäten 44, 46 sind somit erste Verzögerungselemente im Sinne der vorliegenden Erfindung.The reference numbers 44, 46 denote two capacitances which are connected in parallel to the control circuit of the relays K1 and K2. When switched on, the two capacitors 44, 46 charge up. If the operating voltage U B on the input side is removed, the two capacitors 44, 46 are discharged via the control circuits of the relays K1 and K2. Only after the discharge, the relays K1 and K2 drop out and open their work contacts 24, 26. As a result, the machine 42 is switched off with a delay time T 1 which corresponds to the discharge time of the capacitors 44, 46. The capacitors 44, 46 are thus first delay elements in the sense of the present invention.
Die bislang beschriebenen Komponenten des Sicherheitsschaltgerätes 40 bilden eine Abschalteinheit, die nachfolgend in ihrer Gesamtheit mit der Bezugsziffer 48 bezeichnet wird. Die Abschalteinheit 48 ist dabei in an sich bekannter Weise zweikana- lig redundant aufgebaut, wodurch eine FehlerSicherheit im Sinne der europäischen Norm EN 954-1 erreicht wird. Hinzu kommt, daß jedes der beiden Relais Kl, K2 über einen zwangsgeführten Hilfskontakt 50, 52 verfügt, der mit dem Relais K3 derart gekoppelt ist, daß das Sicherheitsschaltgerät 40 nicht in Betrieb genommen werden kann, wenn einer der Arbeitskontakte 24, 26 verschmolzen ist. Die Hilfskontakte 50, 52 sind somit in einen Überwachungskreis eingebunden.The components of the safety switching device 40 described so far form a shutdown unit, which in its entirety is referred to below with the reference number 48. The shutdown unit 48 is constructed in a manner known per se with two channels of redundancy, which means fault safety in the sense the European standard EN 954-1 is achieved. In addition, each of the two relays K1, K2 has a positively driven auxiliary contact 50, 52 which is coupled to the relay K3 in such a way that the safety switching device 40 cannot be put into operation if one of the working contacts 24, 26 is fused. The auxiliary contacts 50, 52 are thus integrated in a monitoring circuit.
Im Unterschied zu dem Sicherheitsschaltgerät 10 gemäß Fig. 1 weist das Sicherheitsschaltgerät 40 jedoch eine nicht-fehlersichere Meldeeinheit 54 auf, die an einer Ausgangsklemme 56 ein nicht-fehlersicheres Meldesignal 58 bereitstellt. Das Meldesignal 58 kann damit auf einfache Weise einer Steuereinheit 60 für die Maschine 42 zugeführt werden.In contrast to the safety switching device 10 according to FIG. 1, however, the safety switching device 40 has a non-fail-safe signaling unit 54 which provides a non-fail-safe signal 58 at an output terminal 56. The signal 58 can thus be supplied to a control unit 60 for the machine 42 in a simple manner.
Im einfachsten Fall ist die Ausgangsklemme 56 zur Erzeugung des Meldesignals 58 direkt mit der Betriebsspannung UB verbunden. Bevorzugte Ausführungsbeispiele für die Meldeeinheit 54 sind jedoch anhand der nachfolgenden Figuren beschrieben.In the simplest case, the output terminal 56 for generating the signal 58 is connected directly to the operating voltage U B. Preferred exemplary embodiments for the reporting unit 54 are, however, described with reference to the following figures.
In Fig. 3 beinhaltet die Meldeeinheit 54 eine Verstärkerschaltung bestehend aus zwei Transistoren Tl und T2 sowie einer Anzahl von Widerständen Rl bis R6. Das Meldesignal 58 wird dabei über den Widerstand R6 am Kollektor des Transistors T2 abgegriffen, was in der dargestellten Beschaltung zur Folge hat, daß das Meldesignal 58 im aktiven Zustand in etwa der Betriebsspannung UB entspricht, während es im deaktiviert einen spannungslosen, hochohmigen Zustand aufweist.In FIG. 3, the reporting unit 54 contains an amplifier circuit consisting of two transistors T1 and T2 and a number of resistors R1 to R6. The signal 58 is tapped through the resistor R6 at the collector of the transistor T2, which in the circuit shown has the consequence that the signal 58 corresponds approximately to the operating voltage U B in the active state, while in the deactivated state it has a voltage-free, high-resistance state ,
Im bevorzugten Ausführungsbeispiel gemäß Fig. 4 ist die Schaltung der Meldeeinheit 54 um eine zusätzliche Kapazität 62 er- gänzt, die zur Folge hat, daß das Meldesignal 58 seinen aktiven Signalzustand erst einnimmt, nachdem sich die Kapazität 62 weitgehend aufgeladen hat. Hierdurch wird die Bereitstellung des Meldesignals 58 beim Einschalten des Sicherheitsschaltgerätes 40 um eine durch die Kapazität 62 bestimmte zweite Zeitspanne verzögert.In the preferred exemplary embodiment according to FIG. 4, the switching of the signaling unit 54 is increased by an additional capacitance 62. complements, which has the consequence that the message signal 58 only assumes its active signal state after the capacitance 62 has largely been charged. As a result, the provision of the message signal 58 is delayed by a second time period determined by the capacitance 62 when the safety switching device 40 is switched on.
In Fig. 5 sind die zeitlichen Abläufe für das Sicherheitsschaltgerät 40 nochmals graphisch dargestellt. Zum Zeitpunkt t0 wird die Betriebsspannung UB des Sicherheitsschaltgerätes 40 eingeschaltet. Nahezu zeitgleich ziehen dabei die Arbeitskontakte 24, 26 der Relais Kl und K2 an, so daß die Versorgungsspannung Uv an die Maschine 42 gelangt. Das Meldesignal 58 nimmt seinen aktiven Zustand demgegenüber erst nach Ablauf der zweiten Zeitspanne T2 ein, die in etwa der Aufladezeit der Kapazität 62 entspricht.5 shows the time sequences for the safety switching device 40 again graphically. At time t 0 , the operating voltage U B of the safety switching device 40 is switched on. The contacts 24, 26 of the relays K1 and K2 attract almost simultaneously, so that the supply voltage U v reaches the machine 42. The signal 58, on the other hand, assumes its active state only after the second time period T 2 , which corresponds approximately to the charging time of the capacitance 62.
Wird die Betriebsspannung UB des Sicherheitsschaltgerätes 40 zum Zeitpunkt t2 entfernt, kehrt das Meldesignal 58 praktisch zeitgleich in seinen deaktivierten, hochohmigen Zustand zurück. Die Arbeitskontakte 24, 26 der Relais Kl, K2 bleiben jedoch noch so lange geschlossen, bis die Kapazitäten 44, 46 entladen sind. Infolgedessen wird die Maschine 42 erst nach Ablauf der Zeitspanne x von ihrer Stromversorgung Uv getrennt. Der Steuereinheit 60 der Maschine 42 verbleibt daher genügend Zeit, um die Maschine 42 vor dem Abtrennen der Versorgungsspannung Uv kontrolliert herunterzufahren.If the operating voltage U B of the safety switching device 40 is removed at the time t 2 , the signal 58 returns almost simultaneously to its deactivated, high-resistance state. The normally open contacts 24, 26 of the relays K1, K2 remain closed until the capacitors 44, 46 are discharged. As a result, the machine 42 is only disconnected from its power supply U v after the period x has elapsed. The control unit 60 of the machine 42 therefore has enough time to shut down the machine 42 in a controlled manner before the supply voltage U v is disconnected.
In Fig. 6 ist ein weiteres Ausführungsbeispiel eines erfindungsgemäßen Sicherheitsschaltgerätes in seiner Gesamtheit mit der Bezugsziffer 70 bezeichnet. Das Sicherheitsschaltgerät 70 unterscheidet sich von dem Sicherheitsschaltgerät 40 aus Fig. 2 vor allem durch eine logische UND-Verknüpfung, die in Fig. 6 mit der Bezugsziffer 72 bezeichnet ist. Der Ausgang der UND- Verknüpfung 72 ist der Meldeeinheit 54 zugeführt. An einem ersten Eingang erhält die UND-Verknüpfung 72 das Abschaltsignal eines in diesem Fall zweikanaligen Auslöseelements 74, das hier beispielhaft ein zweikanaliger NOT-AUS-Taster ist. An ihrem zweiten Eingang erhält die UND-Verknüpfung 72 ein aus der Betriebsspannung UB abgeleitetes Signal. Der definierte Signalzustand, bei dessen Vorliegen das Sicherheitsschaltgerät 70 den Abschaltvorgang für die Maschine 42 einleitet, entspricht damit sowohl einem Wegfall der Betriebsspannung UB als auch einem Betätigen des Auslöseelements 74 oder sogar beidem. 6, a further exemplary embodiment of a safety switching device according to the invention is designated in its entirety by the reference number 70. The safety switching device 70 differs from the safety switching device 40 from FIG. 2 primarily by a logical AND combination, which is designated in FIG. 6 with the reference number 72. The output of the AND link 72 is fed to the message unit 54. At a first input, the AND link 72 receives the switch-off signal of a triggering element 74, which in this case is two-channel, which here is, for example, a two-channel EMERGENCY STOP button. At its second input, the AND link 72 receives a signal derived from the operating voltage U B. The defined signal state, in the presence of which the safety switching device 70 initiates the switch-off process for the machine 42, thus corresponds to both a loss of the operating voltage U B and an actuation of the trigger element 74 or even both.

Claims

Patentansprüche claims
Sicherheitsschaltgerät zum sicheren Abschalten eines elektrischen Verbrauchers (42), insbesondere einer elektrisch angetriebenen Maschine, mit einer fehlersicheren Abschalteinheit (48) sowie einer Meldeeinheit (54), denen ein externes Steuersignal (UB; UB, 74) gemeinsam zuführbar ist, wobei die Abschalteinheit den elektrischen Verbraucher (42) in Abhängigkeit von einem definierten Signalzustand des Steuersignals (UB; UB, 74) fehlersicher abschaltet, wobei die Meldeeinheit (54) in Abhängigkeit von dem definierten Signalzustand ein externes Meldesignal (58; UM) erzeugt, und wobei die Abschalteinheit (48) ein erstes Verzögerungselement (44, 46) aufweist, mit dessen Hilfe das Abschalten des Verbrauchers (42) um eine erste Zeitspanne (Tx) verzögert wird, dadurch gekennzeichnet, daß die Meldeeinheit (54) eine nicht-fehlersichere Einheit ist, die an einem Ausgang (56) des Schaltgerätes (40) ein nicht-fehlersicheres Meldesignal (58; UM) bereitstellt.Safety switching device for safely switching off an electrical consumer (42), in particular an electrically driven machine, with a fail-safe switch-off unit (48) and a signaling unit (54), to which an external control signal (U B ; U B , 74) can be fed together, the Switch-off unit switches off the electrical consumer (42) in a fail-safe manner as a function of a defined signal state of the control signal (U B ; U B , 74), the signaling unit (54) generating an external signal (58; U M ) as a function of the defined signal state, and wherein the switch-off unit (48) has a first delay element (44, 46), with the aid of which the switch-off of the consumer (42) is delayed by a first time period (T x ), characterized in that the signaling unit (54) has a non- is a fail-safe unit which provides a non-fail-safe signal (58; U M ) at an output (56) of the switching device (40).
Sicherheitsschaltgerät nach Anspruch 1, dadurch gekennzeichnet, daß die Meldeeinheit (54) das Meldesignal (58; UM) beim Auftreten des definierten Signalzustandes verzögerungsfrei deaktiviert.Safety switching device according to claim 1, characterized in that the signaling unit (54) deactivates the signaling signal (58; U M ) without delay when the defined signal state occurs.
Sicherheitsschaltgerät nach Anspruch 1 oder 2, dadurch gekennzeichnet, daß das Steuersignal eine Betriebsspannung (UB) des Schaltgerätes (40) beinhaltet, wobei der defi- nierte Signalzustand einem Wegfall der Betriebsspannung (UB) entspricht.Safety switching device according to claim 1 or 2, characterized in that the control signal contains an operating voltage (U B ) of the switching device (40), the defi nated signal state corresponds to a loss of operating voltage (U B ).
4. Sicherheitsschaltgerät nach einem der Ansprüche 1 bis 3, dadurch gekennzeichnet, daß das Steuersignal ein Ausgangssignal eines Auslöseelements (74) beinhaltet, wobei der definierte Signalzustand einem Betätigen des Auslöseelements (74) entspricht.4. Safety switching device according to one of claims 1 to 3, characterized in that the control signal includes an output signal of a trigger element (74), the defined signal state corresponding to an actuation of the trigger element (74).
5. Sicherheitsschaltgerät nach einem der Ansprüche 1 bis 4, dadurch gekennzeichnet, daß die Meldeeinheit (54) ein zweites Verzögerungselement (62) aufweist, mit dessen Hilfe die Erzeugung des Meldesignals (58; UM) beim Einschalten des Schaltgerätes (40) um eine zweite Zeitspanne (T2) verzögert wird.5. Safety switching device according to one of claims 1 to 4, characterized in that the signaling unit (54) has a second delay element (62), with the aid of which the generation of the signal (58; U M ) when switching on the switching device (40) by a second period (T 2 ) is delayed.
6. Sicherheitsschaltgerät nach einem der Ansprüche 1 bis 5, dadurch gekennzeichnet, daß die Abschalteinheit (48) zumindest zwei zueinander redundante Schaltmittel (Kl, K2 ; 24, 26) aufweist, die in Reihe zueinander angeordnet sind.6. Safety switching device according to one of claims 1 to 5, characterized in that the switch-off unit (48) has at least two mutually redundant switching means (Kl, K2; 24, 26) which are arranged in series with one another.
7. Sicherheitsschaltgerät nach Anspruch 6, dadurch gekennzeichnet, daß die Schaltmittel (Kl, K2 ) zumindest einen zwangsgeführten Hilfskontakt (50, 52) aufweisen, der in einen Überwachungskreis eingebunden ist.7. Safety switching device according to claim 6, characterized in that the switching means (Kl, K2) have at least one positively driven auxiliary contact (50, 52) which is integrated in a monitoring circuit.
8. Sicherheitsschaltgerät nach einem der Ansprüche 1 bis 7, dadurch gekennzeichnet, daß die Abschalteinheit (48) und die Meldeeinheit (54) in einem gemeinsamen Schaltgerätegehäuse (12) angeordnet sind. 8. Safety switching device according to one of claims 1 to 7, characterized in that the switch-off unit (48) and the signaling unit (54) are arranged in a common switching device housing (12).
EP01962887A 2000-08-01 2001-07-30 Safety switch for safely switching off an electric consumer, especially an electrically driven machine Expired - Lifetime EP1307894B1 (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
DE10037383 2000-08-01
DE10037383A DE10037383A1 (en) 2000-08-01 2000-08-01 Safety switching device for safely switching off an electrical consumer, in particular an electrically driven machine
PCT/EP2001/008805 WO2002011165A1 (en) 2000-08-01 2001-07-30 Safety switch for safely switching off an electric consumer, especially an electrically driven machine

Publications (2)

Publication Number Publication Date
EP1307894A1 true EP1307894A1 (en) 2003-05-07
EP1307894B1 EP1307894B1 (en) 2007-07-11

Family

ID=7650902

Family Applications (1)

Application Number Title Priority Date Filing Date
EP01962887A Expired - Lifetime EP1307894B1 (en) 2000-08-01 2001-07-30 Safety switch for safely switching off an electric consumer, especially an electrically driven machine

Country Status (7)

Country Link
US (1) US6809911B2 (en)
EP (1) EP1307894B1 (en)
JP (1) JP4824897B2 (en)
AT (1) ATE366991T1 (en)
AU (1) AU2001283969A1 (en)
DE (2) DE10037383A1 (en)
WO (1) WO2002011165A1 (en)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10045651B4 (en) * 2000-09-15 2007-08-02 Pilz Gmbh & Co. Kg Safety relay
DE10220349B4 (en) * 2002-01-31 2005-09-22 Siemens Ag Method and device for connecting a DC supply voltage to a load and for disconnecting the DC supply voltage from the load
US7196434B2 (en) * 2003-03-21 2007-03-27 Eaton Corporation Modular contactor assembly having independently controllable contractors
JP2005311300A (en) * 2004-03-26 2005-11-04 Toshiba Corp Semiconductor memory device and manufacturing method therefor
US7453677B2 (en) * 2004-10-06 2008-11-18 Teknic, Inc. Power and safety control hub
DE102011075212B3 (en) * 2011-05-04 2012-07-12 Lindauer Dornier Gmbh Loom has two safety control devices that are provided to supply halt signals to two motors with preset delay period, based on the control signal received from a safety device
DE102012103015B4 (en) * 2012-04-05 2013-12-05 Pilz Gmbh & Co. Kg Safety switching device with switching element in the auxiliary contact current path
US10360790B2 (en) 2016-04-22 2019-07-23 Banner Engineering Corp. Safety touch button system having an intercommunications link
EP3410458B1 (en) * 2017-06-02 2019-05-22 Sick AG Modular safety relay circuit for the safe switching on and/or disconnecting of at least one machine

Family Cites Families (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4068773A (en) * 1975-04-03 1978-01-17 Allis-Chalmers Corporation Lift vehicle with fail-safe overload protective system
US4085823A (en) * 1975-11-03 1978-04-25 Westinghouse Electric Corporation Elevator system
US4053876A (en) * 1976-04-08 1977-10-11 Sidney Hoffman Alarm system for warning of unbalance or failure of one or more phases of a multi-phase high-current load
US4769555A (en) * 1985-10-01 1988-09-06 Pulizzi Engineering Inc. Multi-time delay power controller apparatus with time delay turn-on and turn-off
DE3642233C2 (en) * 1986-12-10 1994-03-24 Steuerungselektronik Schoefman Self-monitoring device for relay contacts
DE4033800A1 (en) * 1990-10-24 1992-04-30 Pilz Gmbh & Co Emergency switch=off unit for alarm circuit - has optionally operable switch with rest contacts also two channels connected to supply voltage
DE9301023U1 (en) * 1993-01-26 1993-05-19 Electromatic Industri A/S, Hadsten Solid state relay
WO1996006475A1 (en) * 1994-08-24 1996-02-29 Rainer Berthold Earth-leakage circuit breaker with automatic monitoring facility
DE4441171C1 (en) * 1994-11-18 1996-02-08 Siemens Ag Combined protection and safety circuit for electrical drive
DE19500396C1 (en) * 1995-01-09 1996-02-01 Siemens Ag Safety control circuit for opening or clearing of drives
SE509479C2 (en) * 1996-12-09 1999-02-01 Torgny Olsson Safety relay and method when resetting a safety relay
DE29809550U1 (en) 1998-05-29 1999-07-08 Siemens AG, 80333 München Device for safely switching off an electrical load, in particular with high inductance, from an electrical DC voltage supply

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO0211165A1 *

Also Published As

Publication number Publication date
US20030137788A1 (en) 2003-07-24
DE50112721D1 (en) 2007-08-23
WO2002011165A1 (en) 2002-02-07
JP4824897B2 (en) 2011-11-30
JP2004505600A (en) 2004-02-19
AU2001283969A1 (en) 2002-02-13
ATE366991T1 (en) 2007-08-15
US6809911B2 (en) 2004-10-26
DE10037383A1 (en) 2002-02-21
EP1307894B1 (en) 2007-07-11

Similar Documents

Publication Publication Date Title
DE102005055325C5 (en) Safety switching device for fail-safe disconnection of an electrical consumer
EP1228519B1 (en) Safety switch device for switching on and safely switching off an electrical user, in particular an electrically driven machine
DE69904096T2 (en) Error protection arrangement and method for electrical power supply systems
EP1869687B1 (en) Safety switch for the safe disconnection of an electric consumer
EP2089892B1 (en) Safety switch device
EP1262021A1 (en) Security switching device and a system of security switching devices
EP0563787A1 (en) Monitoring circuit for computer controlled safety devices
WO2006002725A1 (en) Device for the fail-safe shutdown of an electrical consumer, especially an electrically driven machine
EP1307894B1 (en) Safety switch for safely switching off an electric consumer, especially an electrically driven machine
EP3857664A1 (en) Switching device for safely disconnecting an electrical load from a power supply network and a safety switching system
DE69702869T2 (en) SAFETY RELAY
EP2660663B1 (en) Safety circuit and safety switching device with a safety circuit
DE102008002758B4 (en) relay circuit
EP1364459B1 (en) Safety switch device
EP2461341A1 (en) Error-proof switching module and method for operating same
EP3742466B1 (en) Switching assembly for secure switching of an electrical consumer according to a safety guideline
EP0792512B1 (en) Protective safety combination
DE19715013B4 (en) Circuit for starting a machine and method for controlling a start of a machine
DE19750958C2 (en) Circuit arrangement for the manual or automatic control of at least one release path
DE19751674C2 (en) Circuit arrangement with safety function
DE4405052A1 (en) Safety switching circuit with at least one emergency stop switch
BE1031305B1 (en) Switching device for electrically switching on and off an electrical load connectable to a direct voltage supply device and method for operating such a switching device
DE19844185A1 (en) Bus line system, especially for controlling compact hydraulic drives as subscribers, has controller with external connection for connected subscriber with same characteristics as ring line
EP3916940A1 (en) Circuit arrangement with cascaded electronic circuit breakers and method for operating the circuit arrangement
EP4336537A1 (en) Relay device and safety switching device having at least one relay device

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20030207

AK Designated contracting states

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR

AX Request for extension of the european patent

Extension state: AL LT LV MK RO SI

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: PILZ GMBH & CO. KG

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: SE

Ref legal event code: TRGR

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REF Corresponds to:

Ref document number: 50112721

Country of ref document: DE

Date of ref document: 20070823

Kind code of ref document: P

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

Free format text: LANGUAGE OF EP DOCUMENT: GERMAN

GBT Gb: translation of ep patent filed (gb section 77(6)(a)/1977)

Effective date: 20071001

ET Fr: translation filed
BERE Be: lapsed

Owner name: PILZ G.M.B.H. & CO. KG

Effective date: 20070731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20071022

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20070711

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20070711

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20071211

NLV1 Nl: lapsed or annulled due to failure to fulfill the requirements of art. 29p and 29m of the patents act
REG Reference to a national code

Ref country code: IE

Ref legal event code: FD4D

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20070731

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20070731

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20071012

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20070711

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20070731

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20070711

26N No opposition filed

Effective date: 20080414

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20070731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20070730

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20070711

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20070730

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20070711

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: GB

Payment date: 20090720

Year of fee payment: 9

Ref country code: SE

Payment date: 20090715

Year of fee payment: 9

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20100730

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20100730

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20100731

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 16

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 17

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 18

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20180724

Year of fee payment: 18

Ref country code: FR

Payment date: 20180725

Year of fee payment: 18

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20190910

Year of fee payment: 19

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190731

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190730

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 50112721

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20210202