EP1982105A1 - Appartus and method of safely turning on and off an electric consumer comprising a microcontroller - Google Patents
Appartus and method of safely turning on and off an electric consumer comprising a microcontrollerInfo
- Publication number
- EP1982105A1 EP1982105A1 EP07703034A EP07703034A EP1982105A1 EP 1982105 A1 EP1982105 A1 EP 1982105A1 EP 07703034 A EP07703034 A EP 07703034A EP 07703034 A EP07703034 A EP 07703034A EP 1982105 A1 EP1982105 A1 EP 1982105A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- switching
- switching device
- trigger
- safety
- microcontroller
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 13
- 230000011664 signaling Effects 0.000 claims abstract description 57
- 238000012544 monitoring process Methods 0.000 claims abstract description 11
- 230000004913 activation Effects 0.000 claims abstract description 10
- 238000012806 monitoring device Methods 0.000 claims abstract description 10
- 230000003213 activating effect Effects 0.000 claims description 17
- 238000013461 design Methods 0.000 claims description 6
- 238000001514 detection method Methods 0.000 claims description 5
- 230000000694 effects Effects 0.000 claims description 3
- 239000003990 capacitor Substances 0.000 description 10
- 238000005259 measurement Methods 0.000 description 3
- 230000008859 change Effects 0.000 description 2
- 230000007547 defect Effects 0.000 description 2
- 230000000994 depressogenic effect Effects 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 230000006978 adaptation Effects 0.000 description 1
- 230000000903 blocking effect Effects 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 230000001419 dependent effect Effects 0.000 description 1
- 230000007613 environmental effect Effects 0.000 description 1
- 238000011156 evaluation Methods 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 230000008571 general function Effects 0.000 description 1
- 238000009776 industrial production Methods 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 238000002955 isolation Methods 0.000 description 1
- 230000007257 malfunction Effects 0.000 description 1
- 238000011017 operating method Methods 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
- 230000001681 protective effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
- H01H47/00—Circuit arrangements not adapted to a particular application of the relay and designed to obtain desired operating characteristics or to provide energising current
- H01H47/002—Monitoring or fail-safe circuits
- H01H47/004—Monitoring or fail-safe circuits using plural redundant serial connected relay operated contacts in controlled circuit
- H01H47/005—Safety control circuits therefor, e.g. chain of relays mutually monitoring each other
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
- H01H2300/00—Orthogonal indexing scheme relating to electric switches, relays, selectors or emergency protective devices covered by H01H
- H01H2300/054—Application timeslot: duration of actuation or delay between or combination of subsequent actuations determines selected function
Definitions
- the invention relates to a safety switching device for safe switching on and off of an electrical load, in particular an automated system, with a first port for a first reporting element, a second port for a second reporting element, a first switching device, which is coupled to a first switching trigger, a second switching device, which is coupled to a second switching trigger, further comprising a time monitoring device, which is adapted to effect a switching of the first and the second switching device by activating the first and the second switching trigger then when between an actuation of the first signaling element and an actuation of the second signaling element falls below a predetermined maximum time duration, wherein the first switching trigger, a first switching element and the second switching trigger, a second switching element is connected in series.
- the invention also relates to a method for safely switching on and off an electrical load, in particular an automated system, with the steps
- a safety switching device is any switching device that meets at least category 3, preferably even category 4, the European standard EN 954-1 or a comparable safety standard. These include in particular switching devices, safety controllers and sensor and actuator modules that are used for the control and execution of safety-critical tasks in the field of industrial production environments.
- switching devices which monitor the operating position of an actuating button, an emergency stop switch, a protective door or any other signaling device and turn off a machine or a machine area depending thereon.
- safety switching devices can be life-threatening consequences for the machine operating personnel, which is why safety switching devices are usually only used if they are approved by the competent supervisory authorities (in Germany, for example, the professional associations).
- buttons are arranged in such a way, for example, by being suitably spaced from each other that the operation requires the left and the right hand of the operator. This is to prevent the operator from activating the machine while one of his hands is still in the danger zone of the machine.
- two-hand control devices are often equipped with a time monitoring device. It sets a further condition for activating the machine, namely that only a certain maximum period of time may elapse between the actuation of the first and the second button, more generally the first and the second signaling element. If this maximum time is exceeded, the machine will not be activated even if both buttons are depressed. This should prevents the operator with one hand, the first button pressed down and locked inadmissible and then pressed with the same hand the second button.
- DE 42 15 327 C2 proposes a circuit for a safety switching device.
- the principle of the two-hand circuit shown there is based on the fact that in each case one capacitor is charged in two channels. If now the first button is pressed, a first relay switches through. At the same time the charging of the second capacitor is terminated by the capacitor is disconnected from the one pole of the supply voltage and connected via an adjustable potentiometer with the other pole of the supply voltage. In this way, a discharge process of the second capacitor starts. If now the second button is pressed, the remaining energy in the second capacitor is passed through a second relay. If only a small time has passed, the charge in the capacitor is sufficient to attract the relay. However, if too much time has passed, that is, the capacitor has discharged too far, the energy is not enough to attract the second relay. In this case, the consumer can not be turned on.
- a safety switching device of the type mentioned, wherein the time monitoring device has at least a first microcontroller, which is adapted to detect actuations of the first and second reporting element and falls below the maximum time, the first and the second Switch through switching element.
- Activating the first and second switching triggers by sending a control signal from the first microcontroller to the first and second switching elements.
- the peculiarity of the invention is that here electrical and electronic components are combined in an advantageous manner.
- the energy flow and the processing of the input information take place in combination, which means that the energy flow always requires a closed safety circuit, which means that there is no individual monitoring of the safety circuits that are run by the signaling elements required.
- the activation of the switching trigger such as a relay, realized on the same current path, in which the reporting element is located. This avoids that the switching trigger can turn on unintentionally for a short time.
- the safety-related monitoring of the simultaneity ie the time monitoring that a certain maximum period of time is not exceeded between the actuations of the signaling elements, is carried out in the electronic part of the safety switching device with the aid of at least one microcontroller. Therefore, the time monitoring device can be set very precisely and has only negligible (or easily compensated) voltage and temperature dependencies. Turning on the switching trigger thus depends on the one hand on whether the safety circuits were closed by means of the reporting elements, but also on the other hand, that via the switching elements is released by the microcontroller. Therefore, an apparatus and a method according to the invention is very safe.
- microcontroller also provides the ability to easily check other conditions that must be met for switching on the electrical load. For example, the microcontroller may poll for the presence of another signal that is to be relevant for activating the first and second switching triggers.
- a first current path for activating the first switching trigger is guided over the first port such that the first port for activating the first switching trigger must be switched to low impedance.
- low impedance is understood to mean that the input resistance, which acts from the circuit in the direction of the first port of the first signaling device, allows a current which is large enough to activate the switching trigger. so the resulting current flow is not sufficient to activate the switching trigger.
- the invention can also provide that the second port for activating the second switching trigger must be switched to low impedance.
- the first signaling element has at least one first opener and a first closer, wherein in the idle state, the first closer is opened and the first opener is closed and in the activated state, the first current path is passed through the first closer.
- activated state should be understood as the state when the respective switching trigger is transferred from the idle state to an active state.
- Such an embodiment allows further security-relevant checks. For example, in idle mode it can be checked whether the opener is closed. This can be done by means of a voltage measurement, since the first opener must be connected to a predetermined voltage at a given structure. Furthermore, as soon as the opener opens, the initiation of an actuation of the first reporting element can be detected and, depending on the desired implementation, the time recording can be started.
- the current flow through the switching trigger is only possible when the first closer closes. If, in the event of a fault, the first closer does not close, the first switching release can not be activated. Since the first normally closed contact and the first normally open contact are dependent on different voltage potentials, the safety switching device can recognize at least three different states:
- a first voltage potential is measured, for example 0 volts, this allows the conclusion that the normally closed contact is closed. If neither a positive nor a negative current flows from the safety switching device into the first port, this may indicate that either no first signaling element is connected, or that an intermediate state has set in which the first opener has opened, but the first closer still not closed. If, in contrast, a second voltage potential is detected, for example 24 volts, this makes it possible to infer that the first opener has opened and the first closer has closed.
- the second signaling element in the same way with at least a second opener and a second closer.
- the first switching device is assigned a first switching indicator and the second switching device is assigned a second switching indicator whose respective state is monitored by the first microcontroller is to determine a deviation between an expected state of a switching device and an actual state of this switching device.
- the switching indicators are arranged in particular forcibly guided to the respective switching device. This means that the state of the respective switching device can be detected by means of the switching indicators. This has safety significance meaning that an unexpected state can be detected on a switching device.
- the first switching trigger is deactivated, this should result in an opening of the first switching device.
- this can be detected as an error and a shutdown can be carried out.
- the first microcontroller has a monitoring input for signaling a state of the consumer and the detection of a fault in the consumer.
- the safety can be further increased. Since there is now information about the state of the consumer and a fault can be detected in the consumer, it is possible to suppress the switching of the first and the second switching device, although the safety switching device works properly per se.
- a further embodiment of the invention includes a redundant, second microcontroller, which is designed in cooperation with the first microcontroller such that the activation of the first and the second switching trigger takes place only if the second microcontroller has detected an undershooting of the maximum period.
- the safety of the device according to the invention or the method according to the invention is further improved.
- a defect could occur in the first microcontroller, which leads to the fact that the first and the second switching trigger are activated even if the maximum duration has been exceeded.
- the second microcontroller such a defect can be detected and intercepted.
- the first and the second microcontroller are preferably configured in such a way that they monitor each other and, in the event of a deviation in the evaluation result, an activation of the first and the second switching trigger is suppressed.
- the two microcontrollers are driven with the same signals, a difference in the detection of the received signal can be detected as a fault and treated accordingly.
- a third switching element and the second switching trigger a fourth switching element connected in series, which are controlled by the second microcontroller for the first switching trigger.
- both the first and the third switching element must be switched through. If only one of these elements blocks, the switching trigger can not be activated and a switching through the first switching device is omitted.
- the second signaling element on at least a second opener and a second closer, wherein in the idle state, the second opener is closed and the second normally open is open, in the activated state, the second current path is guided via the second NO, the first NO allows a first connection to a first voltage potential and the second closer allows a second connection to a second voltage potential.
- a further embodiment of the invention includes a mode selection device for setting an operating mode of the safety switching device as a function of the design of the signaling elements.
- the signaling devices are designed as a simple NO contact.
- the signaling devices are designed as NC / NO combination. Since different signaling devices can go through a different sequence of states, the corresponding circuits must be adapted to the signaling device used.
- the embodiment results in the advantageous possibility of integrating a mode selector device, preferably in the first and / or the second microcontroller, in order to allow a simple adaptation to different signaling devices.
- the mode selector causes the microcontroller to monitor only closure and opening of the shutter.
- the microcontroller can perform this monitoring both in the NC and in the NO of the reporting element. This allows errors in the operating procedure to be determined and plausibility checks to be carried out.
- the first microcontroller for detecting the design of the reporting elements is formed.
- the configuration of the mode selector can be made easily.
- a configuration process may be required that requires actuation of the signaling elements.
- the microcontroller detects, for example, the states “high-impedance”, “voltage potential” and “high-impedance”, this allows the inference that a monitored device of the first type is connected to the monitored port., however, if, for example, the sequence “first voltage potential”, “high-resistance” results. , and “second voltage potential”, this is an indication that a signaling device of the second type has been depressed. Based on this information, the operating mode can now be set or, if the operating mode has been specified in another way, checked.
- Figure 2 shows the basic structure of a safety switching device with two
- Figure 3 is a simplified representation of Figure 2 as a block diagram
- FIG. 4 shows the alternative use of signaling devices of other types.
- a structure with the new safety switching device 10 is designated in its entirety by the reference numeral 12.
- the structure 12 includes here a power supply 14, a machine 16 and the safety switching device 10, to which a first signaling device 18 and a second signaling device 20 are connected.
- the machine 16 is a consumer 22, which may only be turned on for one operation if the time T between an actuation of the first reporting element 18 and an actuation of the second reporting element 20 is below a predetermined maximum time T max .
- the safety switching device 10 controls two contactors 24, 26, whose normally open contacts 28, 30 are arranged in the connection between the power supply 14 and the machine 16.
- the machine 16 can only perform the operation when both contactors 24, 26 close their working contacts 28, 30.
- Figure 2 shows the simplified circuit diagram of a safety switching device 10.
- the first reporting element 18 is connected, which has a first closer SIa and a first opener SIb.
- the first closer SIa is connected at its one side to the first port 32 to the opener SIb.
- On its other side is the first closer SIa with a first voltage potential Ui connected to a first terminal Kl.
- the opener SIb is connected to a second voltage potential U2 a second terminal K2.
- the second signaling element 20 is connected.
- the second element 20 has a second closer S2b and a second opener S2a, which are connected to each other at their respective one side on the second port 34.
- the second closer S2b is connected to the second voltage potential U2 of the second clamp K2
- the second opener S2a is connected to the first voltage potential Ui of the first clamp Kl.
- the safety switching device 10 has a first switching trigger 36 and a second switching trigger 38.
- the switching triggers 36, 38 are each designed as a coil of a relay in this embodiment.
- the first switching trigger 36 cooperates with a first switching device 40
- the second switching trigger 38 cooperates with a second switching device 42. If the first switching trigger 36 flows through a sufficiently large current, the switching device 40 closes. If the second switching trigger 38 flows through a sufficiently large current, then the switching device 42 closes. Only when both switching devices 40, 42 are closed, can between the output terminals 44, 46 flow a current.
- first switching element 48 and a third switching element 50 are connected in series.
- first switching element 48 and third switching element 50 are turned on. Accordingly, this applies correspondingly to a second switching element 52 and a fourth switching element 54, which are connected in series with the second switching trigger 38.
- the switching elements 48, 50, 52, 54 are designed here as transistors.
- the first switching element 48 and the second switching element 52 are driven at the respective base by a first microcontroller 56.
- the third switching element 50 and the fourth switching element 54 are at their respective base of a second Microcontroller 58 controlled.
- the Mikrokon troller 56, 58, as well as the wiring of the microcontroller 56, 58 are designed redundantly to detect errors.
- the microcontrollers 56, 58 are part of a time monitoring device 60 which is designed to effect a switching through of the first and the second switching devices 40, 42 by activating the first and second switching triggers 36, 38 only if between an actuation of the first signaling element 18 and an actuation of the second reporting element 20 falls below a predetermined maximum period of time.
- a first current path 62 can be set via the first switching trigger 36.
- the first port 32 may not be open (high ohmic), otherwise no or no sufficient current flow through the switching trigger 36 can be set. Rather, a low-resistance element must be connected to the first port 32, here the first closer SIa. A sole switching of the first and third switching element 48, 50 is therefore not sufficient to establish the first current path 62.
- the safety switching device 10 also has a first switching indicator 66, which is associated with the first switching device 40, and a second switching indicator 68, which is associated with the second switching device 42.
- the task of the switching indicators 66, 68 will be explained with reference to the first switching indicator 66.
- the first switching device 40 is closed when the first current path 62 exists, and that the first switching device 40 is opened when the first current path 62 is interrupted.
- a solution for detecting such an error case is the first switching indicator 66, which is coupled directly to the first switching device 40.
- the state of the first switching device 40 can be determined via the state of the switching indicator 66.
- the embodiment is selected such that the first switching indicator 66 is closed only when the first switching device 40 is actually opened. If at least one of the microcontrollers 56, 58 determines that the expected switching state of the switching device 40 deviates from the switching state that was determined by means of the first switching indicator 66, this would be recognized as an error case and treated accordingly.
- the previous remarks can be analogously transferred to the second switching indicator 68.
- the safety switching device 10 shown has a further mechanism for error detection.
- the first and the second microcontroller 56, 58 each have a monitoring input 70.
- the monitoring inputs 70 are connected to a control terminal 72, to which a signal output of the electrical load 22 can be connected.
- the trouble-free operation of the load 22 is indicated to the microcontrollers 56, 58 by a dedicated signal or a dedicated signal level.
- the microcontrollers 56, 58 expect the electrical load 22 at the control connection 72 to provide an electrical connection which generates a voltage level at the monitoring input 70 which is based on the first voltage potential Ui at the terminal K1. If the expected voltage level is missing, an error can be assumed and the switching devices 40, 42 remain or are opened.
- mode selectors 74 which are integrated here in the microcontrollers 56, 58.
- the mode selecting means 74 it is possible to set an operation mode of the safety switching device 10.
- the adjustment of the operating mode can be carried out in particular depending on the design of the signaling elements 18, 20.
- the safety switching device 10 As shown in Figure 2 shows.
- the NO contacts SIa, S2b and the switching devices 40, 42 are open.
- the openers SIb, S2a and the switching indicators 66, 68 are closed.
- the switching elements 48, 50, 52, 54 lock.
- Between the terminals Kl and K2 is an operating voltage UB. It is assumed here by way of example that the terminal Kl is at a first voltage potential Ui of +24 volts and the terminal K2 is at a second voltage potential U2 of 0 volts. It is further assumed that the consumer 22 does not signal a fault and therefore provides a conductive connection at the control port 72.
- the first port 32 has now become low-resistance with respect to the current path 62, since the first closer SIa represents only a low resistance. This state of the first port 32 does not occur when only the first opener SIb is closed, since the first opener SIb is not in the first current path 62.
- This sequence or a part of this sequence is recognized by the microcontrollers 56, 58 as the complete actuation of the reporting element 18 and the beginning of the time measurement.
- the first switching trigger 36 already has a voltage of 24 volts
- the first current path 62 remains interrupted because the first and third switching elements 48, 50 are still blocking.
- the actuation of the second signaling element causes first the second opener S2a opens and subsequently closes the second closer S2b. Accordingly, at the second port 34, the sequence shows 24 volts, high impedance, 0 volts.
- the second port 34 has now become low-resistance with respect to the current path 64, since the second closer S2b represents only a low resistance. This state of the first port 34 does not occur when only the second opener S2a is closed, since the second opener S2a is not in the second current path 64.
- This sequence is known by the microcontrollers 56, 58 as the complete actuation of the second reporting element 20, and the timing is terminated. If the time duration which has elapsed between the beginning and the end of the time measurement is below a defined maximum time duration, the microcontrollers 56, 58 switch through the switching elements 48, 50, 52, 54.
- the switching of the switching elements 48, 50, 52, 54 results in the first current path 62 being closed by the first switching trigger 36 and the second current path 64 being closed by the second switching trigger 38.
- Activating the switching triggers 36, 38 in turn causes the switching devices 40, 42 to close and the switching indicators 66, 68 to open.
- the consumer 22 is turned on and can perform his work.
- the first closer SIa and / or the second closer S2b opens, which in turn immediately interrupts the first and / or the second current paths 62, 64. This in turn leads to the opening of the switching devices 40, 42 and the shutdown of the consumer 22nd
- this switching off takes place independently of a reaction of the microcontrollers 56, 58 and independently of the state of the switching elements 48, 50, 52, 54.
- the switching elements 48, 50, 52, 54 are locked again.
- the switching indicators 66, 68 can now be interrogated and, if a switching device 40, 42. is still closed, an error can be signaled.
- the safety switching device 10 shows a particularly advantageous combination of electrical and electronic components.
- the time monitoring device 60 is constructed electronically and thus offers high precision. The combination of the relatively inexpensive and at the same time secure electrical structure with the electronic time monitoring device 60 enables a safety switching device 10 with a very good price / performance ratio.
- the safety switching device 10 provides a special security that closing the switching devices 40, 42 always requires a closed current path 62, 64 via the first closer SIa and the second closer S2b. This means that even with a release signal to the switching elements 48, 50, 52, 54, a turning on of the consumer 22 can not take place, provided that the closer SIa, S2b are not closed.
- the safety switching device 10 is shown here only as a block.
- the following state sequence can be recognized on the first port 32 if the first signaling element 18 is switched over from the unactuated to the actuated state. leads: O volts, high impedance, 24 volts. For the second element 20, this sequence looks like this: 24 volts, high impedance, 0 volts. With a change of the reporting elements 18, 20 from the actuated to the unactuated state, these sequences are reversed.
- the first port 32 changes from a high-impedance state to 24V when the signaling element 18 is actuated.
- the second port 34 changes accordingly from high impedance to 0 volts. If the signaling elements 18, 20 are no longer actuated, the two ports 32, 34 change back into the high-impedance state.
- the mode selector 74 By means of the mode selector 74 it is now possible to pre-set which type of signaling elements 18, 20 are connected to the safety switching device 10. Thus, the microcontroller 56, 58 expect the operation or when releasing the reporting elements 18, 20 a certain sequence. If the sequence actually determined deviates from the expected sequence, this can be output as an error and a switch-on of the consumer 22 can be suppressed. If, for example, the mode selector 74 has been configured such that a normally closed / normally closed combination is expected as the signaling element 18, 20, then if in fact signaling elements 18, 20 are connected as shown in FIG. 4, then at ports 32, 34 an unexpectedly appears at rest high impedance condition. The safety switching device 10 can then respond.
- the mode selector 74 can also be used to detect the type of the attached signaling elements 18, 20.
- a first configuration step can be provided, in which the operator actuates the signaling elements 18, 20 and releases them again. Based on the specific sequence that results, it can be determined which type the reporting elements 18, 20 have. The design determined in the configuration step can then be locked in such a way that later changes to the sequence are not reconfigured as be recognized as an error case.
- the mode selector 74 thus simultaneously provides another mechanism for error detection.
Landscapes
- Safety Devices In Control Systems (AREA)
- Keying Circuit Devices (AREA)
- Emergency Protection Circuit Devices (AREA)
- Emergency Alarm Devices (AREA)
- Dc-Dc Converters (AREA)
Abstract
Description
Claims
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE102006007264.2A DE102006007264C5 (en) | 2006-02-10 | 2006-02-10 | Safety switching device and method for safely switching on and off an electrical consumer |
PCT/EP2007/000644 WO2007090524A1 (en) | 2006-02-10 | 2007-01-25 | Appartus and method of safely turning on and off an electric consumer comprising a microcontroller |
Publications (2)
Publication Number | Publication Date |
---|---|
EP1982105A1 true EP1982105A1 (en) | 2008-10-22 |
EP1982105B1 EP1982105B1 (en) | 2017-03-08 |
Family
ID=37905002
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP07703034.4A Active EP1982105B1 (en) | 2006-02-10 | 2007-01-25 | Appartus and method of safely turning on and off an electric consumer comprising a microcontroller |
Country Status (7)
Country | Link |
---|---|
US (1) | US7898118B2 (en) |
EP (1) | EP1982105B1 (en) |
JP (1) | JP5089611B2 (en) |
CN (1) | CN101400939B (en) |
DE (1) | DE102006007264C5 (en) |
ES (1) | ES2620403T3 (en) |
WO (1) | WO2007090524A1 (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110077271A (en) * | 2018-01-25 | 2019-08-02 | 保时捷股份公司 | Communication unit for vehicle |
Families Citing this family (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102007052512B3 (en) * | 2007-10-26 | 2009-04-09 | Pilz Gmbh & Co. Kg | Control device for a safety switching device, safety switching device, use of a control device and method for controlling a safety switching device |
DE102008060004B4 (en) * | 2008-11-25 | 2021-09-02 | Pilz Gmbh & Co. Kg | Safety switch for generating a system release signal depending on the position of a movable protective door |
DE102011052251A1 (en) * | 2011-07-28 | 2013-01-31 | Phoenix Contact Gmbh & Co. Kg | Electric relay drive circuit |
EP2671690B1 (en) * | 2012-06-06 | 2019-02-20 | Keba Ag | Evaluation unit for a safety switch device and safety switch device |
US9214797B2 (en) | 2013-02-13 | 2015-12-15 | General Electric Company | Apparatus, systems, and methods for operation of a trip unit in a circuit protection device |
DK2782112T3 (en) * | 2013-03-22 | 2018-09-03 | Alstom Transp Tech | Monitoring and control system comprising a security switch and method for managing a security switch |
DE102013106739A1 (en) * | 2013-06-27 | 2014-12-31 | Pilz Gmbh & Co. Kg | Safety switching device with fail-safe inputs |
EP2887163B1 (en) * | 2013-12-18 | 2018-01-17 | Festo AG & Co. KG | Surveillance device, security system and method for operating a security system |
DE102015104211A1 (en) * | 2015-03-20 | 2016-09-22 | Pilz Gmbh & Co. Kg | Safety switching device for fail-safe disconnection of an electrical load |
US10106042B2 (en) | 2015-11-24 | 2018-10-23 | GM Global Technology Operations LLC | Methods of operating contactors in high voltage circuits of vehicles |
US10360790B2 (en) | 2016-04-22 | 2019-07-23 | Banner Engineering Corp. | Safety touch button system having an intercommunications link |
DE102016109915A1 (en) * | 2016-05-30 | 2017-11-30 | Pilz Gmbh & Co. Kg | Device for fail-safe shutdown of a consumer |
CH714313A1 (en) * | 2017-11-09 | 2019-05-15 | Elesta Gmbh Ostfildern De Zweigniederlassung Bad Ragaz | Device with a sensor and an actuator, in particular for use as a door contact switch, and method for testing the device. |
DE102018129899A1 (en) * | 2018-11-27 | 2020-05-28 | Pilz Gmbh & Co. Kg | Switching device for the targeted switching on and / or switching off of an electrical consumer, especially for the fail-safe switching off of a dangerous machine system |
WO2024050785A1 (en) * | 2022-09-08 | 2024-03-14 | 广东逸动科技有限公司 | Control device, system and method, water area movable device, and storage medium |
Family Cites Families (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE2449725C3 (en) * | 1974-10-19 | 1980-03-13 | Ernst Tesch Kg, 5600 Wuppertal | Two-hand safety switch arrangement for switching on a machine and for triggering a reciprocating working stroke |
JPS5733275Y2 (en) * | 1977-02-08 | 1982-07-22 | ||
DE3028196C2 (en) * | 1980-07-25 | 1984-03-08 | Pilz Apparatebau Gmbh & Co, 7302 Ostfildern | Two-channel two-hand control for power-operated presses |
DE3303791C2 (en) * | 1982-02-11 | 1992-04-16 | ZF-Herion-Systemtechnik GmbH, 7990 Friedrichshafen | Electronic control with safety devices |
DE3600173A1 (en) * | 1986-01-07 | 1987-07-09 | Rohr Manfred | Two-channel, two-handed circuit operated using direct current for power-operated presses or the like |
US4939358A (en) * | 1986-10-08 | 1990-07-03 | Jeffries, Inc. | Switch apparatus including a pair of beam-type switches |
US5168173A (en) * | 1990-05-04 | 1992-12-01 | Control Devices, Inc. | Pushless two-hand run bar apparatus |
DE4215327C2 (en) * | 1992-05-09 | 1999-11-04 | Rohr Manfred | Two-channel, two-hand control operated with direct current, particularly for power-operated presses |
FR2696089B1 (en) * | 1992-09-25 | 1994-11-25 | Gen Electric Cgr | Device for handling a radiology device. |
DE4427759C2 (en) * | 1994-08-05 | 1999-01-14 | Manfred Bauer | Device for two-hand operation |
US5880954A (en) * | 1995-12-04 | 1999-03-09 | Thomson; Robert | Continous real time safety-related control system |
DE19920340A1 (en) * | 1999-05-03 | 2000-11-09 | Hsm Pressen Gmbh & Co Kg | Control device and method for controlling safety-relevant functions of a dangerous machine |
DE20309132U1 (en) * | 2003-06-12 | 2003-08-21 | Topseed Technology Corp | Electrical switching system to prevent the generation of a fault condition |
US7610119B2 (en) * | 2003-07-08 | 2009-10-27 | Omron Corporation | Safety controller and system using same |
DE10334653B4 (en) * | 2003-07-21 | 2005-06-09 | Pilz Gmbh & Co. Kg | Method and device for safely monitoring a closed position of two relatively movable parts |
US20070182255A1 (en) * | 2004-04-01 | 2007-08-09 | Schneiderheinze Martin D K | Safety switching module |
DE102005014125A1 (en) * | 2005-03-22 | 2006-09-28 | Pilz Gmbh & Co. Kg | Safety switching device for the safe switching off of an electrical consumer |
-
2006
- 2006-02-10 DE DE102006007264.2A patent/DE102006007264C5/en active Active
-
2007
- 2007-01-25 WO PCT/EP2007/000644 patent/WO2007090524A1/en active Application Filing
- 2007-01-25 ES ES07703034.4T patent/ES2620403T3/en active Active
- 2007-01-25 EP EP07703034.4A patent/EP1982105B1/en active Active
- 2007-01-25 CN CN2007800086566A patent/CN101400939B/en active Active
- 2007-01-25 JP JP2008553648A patent/JP5089611B2/en active Active
-
2008
- 2008-08-08 US US12/188,259 patent/US7898118B2/en active Active
Non-Patent Citations (1)
Title |
---|
See references of WO2007090524A1 * |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110077271A (en) * | 2018-01-25 | 2019-08-02 | 保时捷股份公司 | Communication unit for vehicle |
CN110077271B (en) * | 2018-01-25 | 2022-05-31 | 保时捷股份公司 | Communication unit for vehicle |
Also Published As
Publication number | Publication date |
---|---|
ES2620403T3 (en) | 2017-06-28 |
US20090058197A1 (en) | 2009-03-05 |
DE102006007264B3 (en) | 2007-10-25 |
CN101400939B (en) | 2013-05-22 |
JP5089611B2 (en) | 2012-12-05 |
EP1982105B1 (en) | 2017-03-08 |
JP2009526509A (en) | 2009-07-16 |
WO2007090524A1 (en) | 2007-08-16 |
DE102006007264C5 (en) | 2014-06-18 |
US7898118B2 (en) | 2011-03-01 |
CN101400939A (en) | 2009-04-01 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP1982105B1 (en) | Appartus and method of safely turning on and off an electric consumer comprising a microcontroller | |
EP1493064B1 (en) | Device for the error-proof switching off of an electric consumer, particularly in industrial production plants | |
EP1989720B1 (en) | Safety switching apparatus for the failsafe disconnection of an electrical load | |
EP1269274B1 (en) | Safety switching unit and method for setting an operational mode of a safety switching unit | |
EP3192091B1 (en) | Monitored adaptable emergency off-switch | |
EP2845072B1 (en) | Switching device | |
EP1932007B1 (en) | Process and device for the fail-safe evaluation of a position indicator, in particular a potentiometer | |
EP2352948A1 (en) | Safety switch for creating a system release signal in dependence on the position of a movable guard door | |
EP2202592A2 (en) | Safety device using multiple channels to control a safety device | |
EP2671690A1 (en) | Evaluation unit for a safety switch device and safety switch device | |
EP1680848A2 (en) | Device and method for switching off an inductive consumer without error | |
EP3410458B1 (en) | Modular safety relay circuit for the safe switching on and/or disconnecting of at least one machine | |
DE3919558C2 (en) | ||
EP3382735B1 (en) | Modular safety control for safety controlling at least one machine | |
EP2682834B1 (en) | Method and device for monitoring a safety switching device | |
EP1460666B1 (en) | Key for security related switching processes | |
WO2009052926A1 (en) | Control device for a safety switching apparatus with integrated monitoring of the supply voltage | |
DE4213171A1 (en) | Multiple redundancy safety circuits for hazardous process control - uses stored program controller with interlocked serial protection switches | |
DE2915589B2 (en) | Safety switchgear | |
EP2769273B1 (en) | Expansion module for a security system | |
DE202017103354U1 (en) | Modular safety relay circuit for safely switching on and / or off at least one machine | |
DE102007056516B4 (en) | evaluation arrangement | |
EP2053624B1 (en) | Pre-assembled switching device for protected and unprotected output switching | |
EP0565745A1 (en) | Monitoring of a signal-switching, particularly in self-checking controlling systems | |
DE10011076A1 (en) | Emergency shutdown unit connected to series emergency switches and used on e.g. plant including machine tools, has display showing location and level of shutdown |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
17P | Request for examination filed |
Effective date: 20080818 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR |
|
REG | Reference to a national code |
Ref country code: HK Ref legal event code: DE Ref document number: 1121517 Country of ref document: HK |
|
17Q | First examination report despatched |
Effective date: 20100329 |
|
DAX | Request for extension of the european patent (deleted) | ||
GRAP | Despatch of communication of intention to grant a patent |
Free format text: ORIGINAL CODE: EPIDOSNIGR1 |
|
INTG | Intention to grant announced |
Effective date: 20160809 |
|
GRAS | Grant fee paid |
Free format text: ORIGINAL CODE: EPIDOSNIGR3 |
|
GRAA | (expected) grant |
Free format text: ORIGINAL CODE: 0009210 |
|
AK | Designated contracting states |
Kind code of ref document: B1 Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR |
|
REG | Reference to a national code |
Ref country code: GB Ref legal event code: FG4D Free format text: NOT ENGLISH |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: EP Ref country code: CH Ref legal event code: NV Representative=s name: RENTSCH PARTNER AG, CH Ref country code: AT Ref legal event code: REF Ref document number: 873851 Country of ref document: AT Kind code of ref document: T Effective date: 20170315 |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: FG4D Free format text: LANGUAGE OF EP DOCUMENT: GERMAN |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R096 Ref document number: 502007015497 Country of ref document: DE |
|
REG | Reference to a national code |
Ref country code: SE Ref legal event code: TRGR |
|
REG | Reference to a national code |
Ref country code: ES Ref legal event code: FG2A Ref document number: 2620403 Country of ref document: ES Kind code of ref document: T3 Effective date: 20170628 |
|
REG | Reference to a national code |
Ref country code: LT Ref legal event code: MG4D |
|
REG | Reference to a national code |
Ref country code: NL Ref legal event code: MP Effective date: 20170308 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 Ref country code: FI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 Ref country code: GR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170609 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LV Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 Ref country code: BG Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170608 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: NL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PCAR Free format text: NEW ADDRESS: BELLERIVESTRASSE 203 POSTFACH, 8034 ZUERICH (CH) |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: SK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 Ref country code: RO Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 Ref country code: EE Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 Ref country code: CZ Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IS Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170708 Ref country code: PL Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 Ref country code: PT Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170710 |
|
REG | Reference to a national code |
Ref country code: DE Ref legal event code: R097 Ref document number: 502007015497 Country of ref document: DE |
|
PLBE | No opposition filed within time limit |
Free format text: ORIGINAL CODE: 0009261 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT |
|
REG | Reference to a national code |
Ref country code: FR Ref legal event code: PLFP Year of fee payment: 12 Ref country code: HK Ref legal event code: GR Ref document number: 1121517 Country of ref document: HK |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: DK Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 |
|
26N | No opposition filed |
Effective date: 20171211 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: SI Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 |
|
REG | Reference to a national code |
Ref country code: SE Ref legal event code: EUG |
|
GBPC | Gb: european patent ceased through non-payment of renewal fee |
Effective date: 20180125 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LU Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180125 Ref country code: SE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180126 |
|
REG | Reference to a national code |
Ref country code: IE Ref legal event code: MM4A |
|
REG | Reference to a national code |
Ref country code: BE Ref legal event code: MM Effective date: 20180131 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: BE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180131 Ref country code: GB Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180125 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: IE Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180125 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: MC Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 |
|
REG | Reference to a national code |
Ref country code: ES Ref legal event code: FD2A Effective date: 20190731 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: ES Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20180126 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: TR Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: HU Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO Effective date: 20070125 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: CY Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT Effective date: 20170308 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: CH Payment date: 20220119 Year of fee payment: 16 Ref country code: AT Payment date: 20220120 Year of fee payment: 16 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: FR Payment date: 20230124 Year of fee payment: 17 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: IT Payment date: 20230120 Year of fee payment: 17 |
|
REG | Reference to a national code |
Ref country code: CH Ref legal event code: PL |
|
REG | Reference to a national code |
Ref country code: AT Ref legal event code: MM01 Ref document number: 873851 Country of ref document: AT Kind code of ref document: T Effective date: 20230125 |
|
PG25 | Lapsed in a contracting state [announced via postgrant information from national office to epo] |
Ref country code: LI Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20230131 Ref country code: CH Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20230131 Ref country code: AT Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES Effective date: 20230125 |
|
PGFP | Annual fee paid to national office [announced via postgrant information from national office to epo] |
Ref country code: DE Payment date: 20240221 Year of fee payment: 18 |