EP2782112B1 - Überwachungs- und Steuerungssystem mit einem Sicherheitsschalter und Verfahren zum Betrieb eines Sicherheitsschalters - Google Patents

Überwachungs- und Steuerungssystem mit einem Sicherheitsschalter und Verfahren zum Betrieb eines Sicherheitsschalters Download PDF

Info

Publication number
EP2782112B1
EP2782112B1 EP13305355.3A EP13305355A EP2782112B1 EP 2782112 B1 EP2782112 B1 EP 2782112B1 EP 13305355 A EP13305355 A EP 13305355A EP 2782112 B1 EP2782112 B1 EP 2782112B1
Authority
EP
European Patent Office
Prior art keywords
relays
group
switching contacts
sets
contacts
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP13305355.3A
Other languages
English (en)
French (fr)
Other versions
EP2782112A1 (de
Inventor
Achilles Papageorgiou
Stephan Colle
Frédéric Janssens
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alstom Transport Technologies SAS
Original Assignee
Alstom Transport Technologies SAS
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alstom Transport Technologies SAS filed Critical Alstom Transport Technologies SAS
Priority to EP13305355.3A priority Critical patent/EP2782112B1/de
Priority to DK13305355.3T priority patent/DK2782112T3/en
Publication of EP2782112A1 publication Critical patent/EP2782112A1/de
Application granted granted Critical
Publication of EP2782112B1 publication Critical patent/EP2782112B1/de
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01H—ELECTRIC SWITCHES; RELAYS; SELECTORS; EMERGENCY PROTECTIVE DEVICES
    • H01H47/00—Circuit arrangements not adapted to a particular application of the relay and designed to obtain desired operating characteristics or to provide energising current
    • H01H47/002—Monitoring or fail-safe circuits
    • H01H47/004—Monitoring or fail-safe circuits using plural redundant serial connected relay operated contacts in controlled circuit
    • H01H47/005—Safety control circuits therefor, e.g. chain of relays mutually monitoring each other

Definitions

  • the present invention concerns a monitoring and control system comprising a safety switch and a controller. Further, the present invention relates to a method for operating a safety switch.
  • DE 10 2005 048 601 B3 discloses a device having two microcontrollers to determine measuring quantities that are representative for partial impedances of a position indicator, respectively.
  • the microcontrollers include two outputs that are connected with two connectors of the indicators, respectively, where the outputs are alternately assigned with a high potential or a low potential.
  • the controllers include inputs that are connected with adjustable pickups of the indicator.
  • a switching unit is provided to separate the indicator from the outputs of the controllers.
  • WO 96/41358 A1 discloses a power disconnect switch which employs a plurality of high current relays which are simultaneously activated by the application of a control signal to an attached control terminal.
  • US 6,738,246 concerns a combination of a microrelay switch switching off small overcurrents, and a short-circuit current limiter, for example a fuse link, a PTC thermistor or a power breaker, for limiting or switching of large overcurrents.
  • a short-circuit current limiter for example a fuse link, a PTC thermistor or a power breaker, for limiting or switching of large overcurrents.
  • EP 0 094 045 A2 concerns a contact arrangement for a relay.
  • a safety switch for switching a plurality of safety critical loads was based on normal relays and includes a voltage measurement device for providing information, whether a voltage at the output of the switch was present.
  • safety critical loads should be switched with switches complying with the European norm EN 50 205 type A.
  • safety switches for safety critical loads may comprise two relays, which are connected in series. Each relay comprises at least two sets of contact for switching a first line and a second line. Further these relays comprise a read back contact detecting the state of each of the relays. These relays are normally guided relays, in which the means for moving the contacts are connected.
  • Object of the invention is to provide the monitoring and control system comprising a safety switch which provides a minimum predefined air gap with a high reliability.
  • a monitoring and control system comprising:
  • the method may include one or more of the following features: the safety switch is a safety switch comprised in the monitoring and control system according to an embodiment disclosed herein.
  • FIG. 1 shows a monitoring and control system 1 according to an embodiment of the invention.
  • the monitoring and control system 1 is provided for the control of safety critical loads 3, for example for signalling lamps or traffic lights, in particular for a railway.
  • safety critical loads for example for signalling lamps or traffic lights, in particular for a railway.
  • the safety critical load has to be controlled whether there is a defect in the switch or in the load itself.
  • the monitoring and control system 1 detects whether a load is present, whether it is switched off or on or has a defect and, in particular how much energy it consumes.
  • control and monitoring system 1 may detect whether a lamp 3 exists, whether the lamp is switched on or off, or whether it is has a defect.
  • the monitoring and control system 1 comprises a safety switch 5 having an input side with a first and a second terminal 7a, 7b and an output side with a first and second output terminal 9a, 9b.
  • the first input terminal 7a of the safety switch 5 is connected to a first input power line 11a and the second input terminal 7b is connected to a second input power line 11b, for example of a power grid.
  • the first and second input power lines 11a, 11b provides a current of for example 110 V direct current (DC) or 230 volt alternating current (AC) to the safety switch 5, because the safety critical loads 3 need such a current.
  • DC direct current
  • AC 230 volt alternating current
  • the output terminals 9a, 9b are connected respectively with a first line 13a and a second line 13b to a plurality of load switches 100, 200, ... , and 800.
  • the monitoring and control system 1 includes eight load switches. However, in other embodiments, the monitoring and control system may comprise more or less switches.
  • the plurality of load switches 100, 200, ... , 800 are connected electrically in parallel via a first line 13a and a second line 13b to the output side 9 of the safety switch 3.
  • Each load switch 100, 200, ... , 800 is associated with a respective safety critical load 3, for example a signalling lamp.
  • a respective safety critical load for example a signalling lamp.
  • one safety critical load may comprise more than one signalling lamp.
  • the load switches 100, 200, ... , 800 may be replaced by another device for regulating an output current and/or output voltage, for example a pulse width modulation circuit.
  • the safety critical load 3 may be dimmed.
  • the load switches 100, 200, ... , 800 comprise each two input terminals, namely a first input terminal 102a, 202a, ... , 802a and second input terminals 102b, 202b, ... , 802b.
  • the first input terminals 102a, 202a, ... , 802a are connected to the first line 13a and the second input terminals 102b, 202b, ... , 802b are connected to the second line 13b.
  • the load switches 100, 200, ... , 800 have an output side with respectively a first output terminal 104a, 204a, ... , 804a and a second output terminal 104b, 204b, ... , 804b.
  • the output terminals are connected respectively to the safety critical load 3.
  • monitoring and control system 1 includes a controller 900 which is connected to the safety switch 5 and each of the load switches 100, 200, ... , 800 to monitor individually the state of each of the safety critical loads 3, and to control the load switches 100, 200, ... , 800 and the safety switch 5.
  • Each load switch 100, 200, ..., 800 comprises a first switch 106a, 206a, ..., 806a for switching the line between the first input terminal 102a, 202a, ... , 802a and the first output terminal 104a, 204a, ..., 802a. Further, the load switches 100, 200 , ..., 800 comprise a second switch 106b, 206b, ..., 806b for switching a second line between the second input terminal 102b, 202b, ..., 802b and the second output terminal 104b, 204b, ..., 804b.
  • the respective safety critical load 3 is provided with a current.
  • the first switch 106a, 206a, ..., 806a is a semi-conductor switch, for example a MOS switch.
  • a semi-conductor switch permits a high frequency switching, for example for a blinking light.
  • the second switch 106b, 206b, ..., 806b is a relay switch.
  • the relay switch permits switching high loads.
  • both the first and the second switch 106a, 106b, 206a, 206b, ..., 806a, 806b are relay switches.
  • the load switches 100, 200, ..., 800 have, in an embodiment, not a security function, for example a minimum air gap, so that, in case of a malfunction of one of the load switches 100, 200, ..., 800 is detected, the controller 900 is adapted to release the safety switch 5. This may reduce the complexity of the load switches 100, 200, 800. Thus, in such an embodiment, the space and costs for each load switch 100, 200, 800 is reduced.
  • the load switches 100, 200, ..., 800 include a voltmeter or an ampere meter for detecting the voltage and/or current at their output terminals 104a, 104b, 204a, 204b, ..., 804a, 804b.
  • the controller 900 is adapted to release the safety switch 5 in case a fault is detected on the circuit board on which the switches and/or the controller is arranged and/or outside the circuit board.
  • FIG. 2 shows schematically the general architecture of the safety switch 5.
  • the safety switch 5 and the controller 900 comprise two channels, namely a first channel CH1 and a second channel CH2.
  • the safety switch 5 comprises a first group of relays 1000 associated with the first channel CH1 and a second group of relays 1100 associated with the second channel CH2.
  • the safety switch may comprise more than two groups of relays, for example three or more groups associated with a respective channel.
  • the number of groups of relays depends on the combined minimum air gap to be provided between the first input terminal 7a and the first output terminal 9a and the combined minimum air gap between the second input terminal 7a and second output terminal 9b.
  • the combined minimum air gap to be provided is dependent on the voltage to be switched and is defined by a European Norm EN50205 type A.
  • the first group of relays 1000 comprises a first relay 1010 and a second relay 1080.
  • the second group of relays 1100 comprises a first relay 1110 and a second relay 1180.
  • Each relay 1010, 1080, 1110, 1180 has a first set of switching contacts 1012, 1082, 1112, 1182 a second set of switching contacts 1014, 1084, 1114, 1184, a set of read back contacts 1016, 1086, 1116, 1186, and an actuator 1018, 1088, 1118, 1188 for moving the contacts of the respective relay, for example a coil.
  • the sets of switching contacts 1012, 1014, 1082, 1084, 1112, 1114, 1182, 1184 are provided to switch the power supply to the safety critical loads and/or the load switches 100, 200, ..., 800.
  • the sets of switching contacts 1012, 1014, 1082, 1084, 1112, 1114, 1182, 1184 are normally opened contacts.
  • the read back contacts 1016, 1086, 1116, 1186 are normally closed contacts.
  • the relays 1010, 1080, 1110, 1180 of the safety switch 5 are guided contact relays.
  • these relays 1010, 1080, 1110, 1180 guarantee, when the normally closed contact in form of the read back contacts 1016, 1086, 1116, 1186 is detected as closed, that the associated normally opened contacts, namely the sets of switching contacts 1012, 1014, 1082, 1084, 1112, 1114, 1182, 1184 are opened with a minimal air gap of a predetermined width.
  • the first sets of switching contacts 1012, 1082, 1112, 1182 are connected electrically in parallel. Further, within each group of relays 1000, 1100, the second sets of switching contacts 1014, 1084, 1114, 1184 are connected in parallel.
  • the first sets of switching contacts 1012, 1082 of the first group of relays 1000 and the first sets of switching contacts 1112, 1182 of the second group of relays 1100 are connected electrically in series. Further, for the same reasons, the second sets of switching contacts 1014, 1084 of the first group of relays 1000 and the second sets of switching contacts 1114, 1184 of the second group of relays 1100 are also contacted electrically in series.
  • a current between the first input terminal 7a and the first output terminal 9a must traverse at least one of the first sets of switching contacts 1012, 1082 of the first group of relays 1000 and at least one of the first sets of switching contacts 1112, 1182 of the second group of relays 1100.
  • a current traversing the safety switch 5 between the second input terminal 7b and the second output terminal 9b traverses at least one of the second sets of switching contacts 1014, 1082 of the first group of relays 1000 and at least one of the second sets of switching contact 1114, 1182 of the second group of relays 1100.
  • the first sets of switching contacts 1012, 1082 of the first group of relays 1000 comprise each two subsets of contacts 1020, 1022; 1090, 1092 connected in series.
  • the subsets of contacts 1020, 1022; 1090, 1092 are opened and closed simultaneously, in particular simultaneously with the second set of switching contacts 1014, 1084 of the same relay.
  • a relay 1010, 1080 may comprise three sets of switching contacts 1014, 1020, 1022; 1084, 1090, 1092, which are normally open and mechanically connected to each other so that all three sets of switching contacts 1014, 1020, 1022; 1084, 1090, 1092 open and close simultaneously, wherein two of the switching contacts form the subsets of contacts 1020, 1022; 1090, 1092 by connecting them in series.
  • the second sets of switching contacts 1114, 1184 of the second group of relays 1100 are formed by respectively two subsets of contacts 1120, 1122; 1190, 1192 connected in series.
  • the subsets of contacts 1120, 1122; 1190, 1192 are opened and closed simultaneously, in particular simultaneously with the first set of switching contacts 1112, 1182 of the same relay.
  • a relay 1110, 1180 may comprise three sets of switching contacts 1112, 1020, 1022; 1182, 1090, 1092, which are normally open and mechanically connected to each other so that all three sets of switching contacts 1112, 1020, 1022; 1182, 1090, 1092 open and close simultaneously, wherein two of the switching contacts form the subsets of contacts 1120, 1122; 1190, 1192 by connecting them in series.
  • these relays 1010, 1080, 1110, 1180 guarantee, when the normally closed contact in form of the read back contacts 1016, 1086, 1116, 1186 is detected as closed, that the sets of switching contacts and the subsets of contacts 1020, 1022, 1014, 1090, 1092, 1084, 1112, 1120, 1122, 11182, 1190, 1192 (i.e. the physical sets of contacts) are opened respectively with a minimal air gap of a predetermined width, for example of 0.5 mm according to the European norm EN50205.
  • FIG. 3 shows schematically the controller 900.
  • the controller includes two channels, namely a first channel CH1 mainly responsible for switching the relays of the same channel, i.e. the first group of relays 1000, and a second channel CH2 mainly responsible for switching the relays of the same channel, i.e. the second group of relays 1100.
  • the controller 900 comprises a first processor 1005 and a second processor 1105 which operate independently from each other.
  • the first processor 1005 is associated with the first channel CH1 and the second processor 1105 is associated with the second channel CH2.
  • the first processor 1005 is adapted to generally actuate the first and the second relays 1010, 1080 of the first group of relays 1000 and the second processor 1105 is provided to control the first and second relays 1110, 1180 of the second group of relays 1100.
  • the controller 900 comprises a first programmable logic device (PLD) 1007 and a second PLD 1107.
  • PLD programmable logic device
  • the first PLD 1007 is associated with the first channel CH1 or the first group of relays 1000 and the second PLD 1107 is associated with the second channel CH2 or the second group of relays 1100.
  • each channel CH1, CH2 comprises in this embodiment two subcontrollers as intelligent devices, namely one processor 1005, 1105 and one PLD 1007, 1107.
  • the PLDs 1007, 1107 are respectively a field programmable gate array (FPGA). In other embodiments, the PLDs 1007, 1107 are respectively realized as a programmable logic array, programmable array logic, a generic array logic, or a complex programmable logic device.
  • FPGA field programmable gate array
  • the first PLD 1007 is connected to the first processor 1005 and the second PLD 1107 is connected to the second processor 1105.
  • first processor 1005 and the second processor 1105 connected to each other via a link 902 are adapted to control and/or monitor each other.
  • the subcontrollers associated with different channels CH1, CH2 monitor each other.
  • the processors 1005, 1105 are adapted to exchange security keys.
  • the first and/or the second processor 1005, 1105 are adapted to send the result of the exchange of keys to the respective PLD 1007, 1107.
  • control means for example voltmeters and/or ampere meters for determining the output current and voltages of the safety switch 5 and the load switches 100, 200, ... , 800 are also connected to the processors 1005, 1105.
  • Each of the processors 1005, 1105 is adapted to release each of the relays 1010, 1080, 1110, 1180 of the safety switch.
  • Each read back contacts 1016, 1086, 1116, 1186 of the relays 1010, 1080, 1110, 1180 of the safety switch 5, is electrically connected to the processors 1005, 1105 via a respective branch circuit 1024, 1094, 1124, 1194.
  • the branch circuits are adapted to provide independently to each of the processors 1005, 1105 the state of the of the read back contacts 1016, 1086, 1116, 1186, in particular whether the respective read back contact 1016, 1086, 1116, 1186 is closed or open.
  • the branch circuit will be described in more detail with respect to figure 5 .
  • the controller includes a plurality of control circuits 1026, 1096, 1126, 1196 adapted to control the energizing of the actuator 1018, 1088, 1118, 1188 or relay coil of the respective relay 1010, 1080, 1110, 1180 depending on the instructions of the processors 1005, 1105 and the PLDs 1007, 1107.
  • Each control circuit 1026, 1096, 1126, 1196 is associated with a respective actuator 1018, 1088, 1118, 1188 of a relay 1010, 1080, 1110, 1180.
  • the number of control circuits corresponds to the number of relays of the safety switch 5.
  • the first control circuit 1026 is associated with the first relay 1010 and the second control circuit 1096 is associated with the second relay 1080 of the first group of relays 1000 or the first channel
  • the third control circuit 1126 is associated with the first relay 1110 and the fourth control circuit 1196 is associated with the second relay 1180 of the second group of relays 1100 or the second channel
  • figure 4 shows in more detail the control circuit 1026 adapted to control the energizing of the actuator 1018 of the first relay 1010 of the first group of relays 1000.
  • the actuator 1018 is activated or deactivated in response of switching signals of the first processor 1005.
  • the PLD 1007 and the second processor 1105 associated with the other or second group of relays 1100 are adapted to deenergize the actuator 1018 and thus to release the first relay 1010 in case a malfunction is detected.
  • An output 1028 of the PLD 1007 is connected to a charge pump 1030.
  • the PLD 1007 is adapted to provide a watch dog signal to an input 1032 of the charge pump 1030.
  • the watch dog signal is typically a first high frequency signal 1034 during the normal functioning of the PLD. For example, for each or a specific number of clock signals, the first high frequency signal 1034 may change its state, for example from high to low or vice versa.
  • the PLD is adapted to stop emitting the first high frequency signal 1034 or watch dog signal to the charge pump 1030. Instead a static signal is applied to the input 1032 of the charge pump 1030.
  • the signals may have another form and instead of the charge pump another device may be used.
  • the signal at the output 1036 of the charge pump 1030 depends on the signal applied to the input 1032 of the charge pump 1030. For example, in case a high frequency signal is applied to the input 1032, the charge pump 1030 accumulates the energy of the incoming signal and the voltage of the output signal raises up to a specific value. In case a constant or zero volt signal is applied to the input 1032, the voltage of the output signal fall down to zero volt. In other words, in case a constant signal is applied to the input 1032, the charge pump 1030 will discharge.
  • the output 1036 of the charge pump 1030 is connected to a first transistor 1038, in particular to the gate 1040 or the basis of the first transistor 1038.
  • the first transistor is a MOSFET.
  • the first transistor 1038 may be another type of transistor, for example a bipolar transistor.
  • Source and drain 1042, 1044 of the transistor 1038, or emitter and collector in case of a bipolar transistor, are connected in series between the positive power 1046 and the first terminal 1048 of the actuator 1018 of the first relay 1010.
  • a current may flow between the positive power 1046 and the first terminal 1048 of the actuator 1018.
  • the charge pump 1030 need more than one impulsion to provide a signal at his output 1036 that is sufficient to activate the transistor 1038.
  • the second terminal 1050 of the actuator 1018 and the collector and emitter 1052, 1054 of a second transistor 1056 are connected in series with a negative power or ground 1058.
  • the second transistor 1056 is a bi-polar transistor.
  • other types of transistors may be used, for example MOSFETs.
  • a current may flow between the second terminal 1050 of the actuator 1018 and the negative power 1058.
  • control circuit 1026 shown in figure 4 includes an AND gate 1062.
  • the output 1064 of the AND gate 1062 is connected to the base 1060 of the second transistor 1056.
  • a first output 1066a of the first processor 1005 is connected to an input 1068 of a second charge pump 1070.
  • the second charge pump 1070 functions similar like the first charge pump 1030.
  • the output 1072 of the second charge pump 1070 is connected to a first input 1074a of the AND gate 1062.
  • the first output 1066a of the first processor 1005 is adapted to generate a high frequency signal 1076, for example a rectangular wave signal or another alternating signal.
  • the first output 1066a may be a General Purpose Input Output (GPIO) of the processor.
  • the first processor 1005 is adapted to provide the high frequency signal 1076 at his first output 1066a during normal functioning. In case of a failure of the processor 1005, for example if the processor hangs up, the first output 1066a will emit a static signal, so that the charge pump 1070 will discharge.
  • the second high frequency 1034 signal may change its state, for example from high to low or vice versa.
  • the signals may have another form and instead of the charge pump another device may be used.
  • the processor 1005 has a second output 1066b which is connected directly to a second input 1074b of the AND gate 1062.
  • the second output 1066b may be a General Purpose Input Output (GPIO) of the processor.
  • the processor 1005 is adapted to apply to the second output 1066b the command to activate and deactivate or release the respective relay 1010 of the first group 1000 of relays.
  • the processor 1005 may be adapted to deactivate or release the relays depending on the result of a failure detected in one of the load switches 100, 200, ..., 800 or the loads 3.
  • a third output 1166c of the second processor 1105 is directly connected to the third input 1074c of the AND gate 1105.
  • the third output 1166c may be a General Purpose Input Output (GPIO) of the processor.
  • the second processor 1105 associated with the second group of relays 1100, is adapted to provide direct command to inhibit the activation of the actuator 1018 of the relay 1010 of the first group of relays 1000. In other words, in case the second processor 1105 detects a failure of the first processor 1005, the second processor 1105 is adapted to release the relays 1010, 1080 of the first group of relays 1000.
  • the control circuit 1026 is adapted to activate the actuator 1018 of the first relay 1010 only when the PLD 1007, the first processor 1005 and the second processor 1105 provides the respective signals to the first charge pump 1030, the second charge pump 1070 and the AND gate 1062. This is in particular the case, if positive signals are applied to the inputs 1074a, 1074b, 1074c of the AND gate 1062.
  • the actuator 1018 can only be activated using a signal at the second output 1066b of the first processor, when the PLD 1007 emits the high frequency signal 1034, the first output 1066a of the first processor 1005 emits the high frequency signal 1076 and the second processor 1105 emits a signal, such that a positive signal is applied to the third input 1074c of the AND gate 1062.
  • the combination of the signals may be provided differently.
  • the outputs 1036, 1072 of the first charge pump 1030 and the second charge pump 1070 may be combined with a second AND gate.
  • the activation or release of the actuator 1018 of a relay 1010 reacts faster to the second output 1066b of the first processor 1005 and to the third output 1166c of the second processor 1105 than to the output 1028 of the PLD 1007 providing the signal to the charge pump 1030 or to the first output 1066a of the first processor 1005 providing the signal 1076 to the charge pump 1070, because the charge pumps 1030, 1070 need some moments to discharge, when their respective input signals are constant.
  • control circuit 1026 of figure 4 has been described with respect to the actuator 1018 of the first relay 1010 of the first group of relays 1000 corresponding to the first channel.
  • Corresponding control circuits 1096, 1126, 1196 are provided for the actuators 1088, 1118, 1188 of the second relay 1080 of the first group of relays and the first and second relays 1110, 1180 of the second group of relays 1100 corresponding to the second channel.
  • control circuit 1126 for activating the actuator of the first relay 1110 of the second group of relays 1100 instead of the signals of the first PLD 1007, an output of the second PLD 1107 is connected to the first charge pump, a first output of the second processor 1105 is connected to the second charge pump, a second output of the second processor 1105 is directly connected to the AND gate, and the third output 1066c of the first processor 1005 is connected directly to the AND gate.
  • the control circuits 1096, 1196 are similarly connected to the first and second processors 1005, 1105 and first or second PLDs 1007, 1107.
  • Figure 5 shows details of the branch circuit 1024 for the connection of the read back contact 1016 of the first relay 1010 of the first group of relays 1000 to both processors 1005, 1105.
  • the subcontrollers here the first and second processors 1005, 1105, of both channels CH1 and CH2 are provided with the state of the read back contact 1016.
  • the branch circuits 1094, 1124, 1194 are identical to the branch circuit 1024 to connect the respective read back contacts 1086, 1116, 1186 to a respective input of the first processor 1005 and the second processor 1105 of the controller 900.
  • the state of the relays 1010 are verified and controlled by the read back contacts 1016, which are normally closed contacts.
  • the read back contacts 1016 have a first contact 1078a directly connected to a power source, for example a five volt power source.
  • the second contact 1078b is connected respectively in parallel to an input terminal of the first processor 1005 and an input terminal of the second processor 1105.
  • the connection between the second contact 1078b and the input terminals of the processors 1005, 1105 is performed respectively via a voltage divider associated with each processor to convert the voltage of the power source into the voltage compatible with the input terminals of the processors 1005, 1105.
  • the first voltage divider is formed by resistance R3 and resistance R4, and the second voltage divider is formed by resistance R2 and resistance R5.
  • a resistance R1 connected to the ground GND between the second read back terminal 1078b and the voltage dividers.
  • the resistance R1 has a resistance value being much smaller than resistance values of R4 and R5.
  • the resistance values of R4 and R5 are about 10 kOhms.
  • the PLDs 1007, 1107 associated with the group of relays 1000, 1100 to which the relay to activated belongs to provides the high frequency alternating signals 1034 to the respective charge pumps 1030, so that the transistors 1038 enables that the positive power 1046 is provided to the first terminals 1048 of the actuators 1018, 1088, 1118, 1188 of the relays 1010, 1080, 1110, 1180.
  • the first output terminals 1066a of the processors 1005, 1105 associated with the group of relays 1000, 1100 to which the relay to activated belongs to provide the respective alternating high frequency signals 1076 to the charge pumps 1070.
  • the charge pump 1070 provides a respective voltage (or positive value) to the first input 1074a of the AND gate 1062. Further, a positive signal is applied to the third input 1074c of the AND gate 1062 coming from the third terminal 1166c of the processor 1005, 1105 associated with the other group of relays 1000, 1100.
  • the actuator 1018, 1088, 1118, 1188 of the respective relay is activated, and when the signal on the second output terminal 1066b is disabled, the respective coil of the relay is deactivated and the relay moves back into the release state.
  • Both processors 1005, 1105 perform a regular exchange of keys which is then sent to the PLD 1007, 1107.
  • the PLD disables its output 1028 and provides a constant signal instead of the alternating signal 1034 to the respective charge pumps 1030. Consequently, the actuator 1018, 1088, 1118, 1188 or coil of the respective relays 1010, 1080, 1118, 1188 cannot be activated any more or is released, because the signal at the output 1036 of the charge pump 1030 applied to the gate 1040 of the transistor 1038 is 'deactivated'.
  • the first transistor 1038 is in a blocking state. For example, if the first PLD 1007 does not receive the correct key, both relays 1010, 1080 of the first group of relays 1000 which are associated with the first PLD 1007 are released.
  • a regular test with the wrong key is performed. Then, the respective PLD 1007, 1107 receiving the wrong key releases the associated relays 1010, 1080, 1110, 1180.
  • one processor 1005, 1105 detects that the other processor 1005, 1105 of the same controller 900, but of another channel CH1, CH2, is not working correctly, he deactivates his output signals at the third output terminals 1066c, 1166c connected to the third input 1074c of the AND gates 1062 of the control circuits 1026, 1096, 1126, 1196 and both relays of the other channel CH1, CH2, which are associated with the other processor are released.
  • the second processor 1105 of the second channel CH2 detects that the first processor 1005 of the first channel CH1 does not work properly, the second processor 1105 commands that his third output terminals 1166c connected to control circuits 1026, 1096 of the first channel CH1, so that the output of the AND gate 1105 is negative so that the second transistor 1056 is in a blocking state. Then, the respective relays 1010, 1080 of the first group of relays 1000 or the first channel CH1 are released.
  • the first output 1066a connected to the control circuits 1026, 1096, 1126, 1196 does not create any more an alternating high frequency signal 1076, so that the output 1072 of the charge pump 1070 falls after a few moments below a specific value so that the output 1064 of the AND gate 1062 commands the second transistor 1056 to be in the blocking state.
  • Figure 6 shows a flowchart for testing the safety switch 5. For testing the safety switch 5, one relay after the other is released, whereas the other relays remain in their active state.
  • a first step 1200 the first relay 1010 of the first group 1000 is released, for example by the first processor 1005, and the other relays 1080, 1110, 1180 remain in the active or activated state.
  • the current bypasses the switching contacts 1012, 1014, 1020, 1022 of the first relay by the switching contacts 1082, 1084, 1090, 1092 of the second relay 1080 of the first group 1000.
  • the output voltage is monitored at the output terminals 9a, 9b and the first processor 1005 verifies that the read back contacts 1016 of the relay 1010 are closed.
  • a second step 1202 the first relay 1010 of the first group 1000 is again activated and the second relay 1080 of the first group 1000 is released whereas both relays 1110 and 1180 of the second group 1100 remain in their active state.
  • the output voltage is monitored at the output terminals 9a, 9b and the first processor 1005 verifies that the read back contacts 1086 of the relay 1080 are closed.
  • a third step 1204 the second relay 1080 of the first group 1000 is again activated and the first relay 1110 of the second group 1100 is released whereas both relays 1010 and 1080 of the first group 1100 remain in their active state. Again, the output voltage is monitored at the output terminals 9a, 9b and the second processor 1105 verifies that the read back contacts 1116 of the relay 1110 are closed.
  • a fourth step 1206 the first relay 1110 of the second group 1100 is again activated and the second relay 1180 of the second group 1100 is released whereas both relays 1010 and 1080 of the first group 1100 remain in their active state. Again, the output voltage is monitored at the output terminals 9a, 9b and the second processor 1105 verifies that the read back contacts 1186 of the relay 1180 are closed.
  • the different relays 1010, 1080, 1110, 1180 may be also tested one after the other in another arbitrary sequence.
  • the read back contacts 1016, 1086 of the stuck relay remain open even if the first processor 1005 commands the release of the relays 1010, 1080.
  • the switching contacts may stick together if the switching contacts are molten together due to an excessive current.
  • the first and/or the second processor 1005, 1105 detect that the read back contacts 1016, 1086 are still open. Thus the first and/or the second processor 1005, 1105 concludes that there is a fault of the first and/or second relay 1010, 1080 of the first group of relays 1000. Then, the first and/or the second processor 1005, 1105 release consequently the first and second relays 1110, 1180 of the second group of relays 1100 or the second channel CH2. Consequently, there is no current applied to the output terminals 9a, 9b of the safety switch 5.
  • the read back contacts 1116, 1186 of the stuck relay remain open even if the second processor 1105 commands the release of the relays 1110, 1180.
  • the first and/or the second processor 1005, 1105 detect that the read back contacts 1116, 1186 of the stuck relay are still open. Thus the first and/or the second processor 1005, 1105 concludes that there is a fault of the first and/or second relay 1110, 1180 of the second group of relays 1000. Then, the first and/or the second processor 1005, 1105 release consequently the first and second relays 1010, 1080 of the first group of relays 1000 of the first channel CH1. Consequently, there is no current applied to the output terminals 9a, 9b of the safety switch 5.
  • the safety switch 5 provides an architecture which is driven by a 2oo2 system (two out of two).
  • a 2oo2 system two out of two.
  • both channels CH1, CH2 including respectively a group of relays 1000, 1100 which are controlled by respectively a processor 1005, 1105 must be in accordance.
  • the activation of a relay needs the active signals of at least three intelligent devices, namely one PLD and the two processors (3oo3, three out of three).
  • the safety switch When all relays are released, the safety switch provides the maximal air gap across the switching contacts.
  • the switching contacts 1014, 1084, 1112, 1182 and subcontacts 1020, 1022, 1090, 1092, 1120, 1122, 1190, 1192 provides a minimum air gap of 0.5 mm
  • the complete (maximal) air gap will be 1.5 mm between the first input terminal 7a and the first output terminal 9a or the second input terminal 7a and the second output terminal 9b.
  • the safety switch assures a safety minimal distance of 1.5 mm across the contacts, when the safety switch is released in order to handle voltages of 230V alternating current. Further, the maximum switching direct current voltage is higher than in prior solutions thanks to three normally open contacts connected in series.

Landscapes

  • Safety Devices In Control Systems (AREA)

Claims (15)

  1. Überwachungs- und Kontrollsystem (1), umfassend:
    einen Sicherheitsschalter (5), enthaltend:
    einen ersten Eingabeanschluss (7a) und einen zweiten Eingabeanschluss (7b), angepasst für eine Verbindung mit einer Stromversorgung,
    einen ersten Ausgabeanschluss (9a) und einen zweiten Ausgabeanschluss (9b), angepasst für eine Verbindung mit mindestens einer Last (3), und
    mindestens zwei Gruppen von Relais (1000, 1100), wobei jede Gruppe mindestens zwei Relais (1010, 1080; 1110, 1180) mit jeweils einem ersten Satz von Schaltkontakten (1012, 1082; 1112, 1182) und einem zweiten Satz von Schaltkontakten (1014, 1084; 1114, 1184) umfasst, wobei der erste Satz von Schaltkontakten und der zweite Satz von Schaltkontakten von jedem Relais gleichzeitig durch ein Betätigungsglied (1018, 1088; 1118, 1188) betätigt werden, wobei der erste Satz von Schaltkontakten (1012, 1082; 1112, 1182) der mindestens zwei Relais (1010, 1080; 1110, 1180) einer Gruppe elektrisch parallel geschaltet sind und der zweite Satz von Schaltkontakten (1014, 1084; 1114, 1184) der mindestens zwei Relais einer Gruppe (1000, 1100) elektrisch parallel geschaltet sind,
    wobei der erste Satz von Schaltkontakten (1012, 1082) einer ersten Gruppe (1000) elektrisch in Reihe mit dem ersten Satz von Schaltkontakten (1112, 1182) einer zweiten Gruppe (1100) geschaltet ist, der zweite Satz von Schaltkontakten (1014, 1084) der ersten Gruppe (1000) elektrisch in Reihe mit dem zweiten Satz (1114, 1184) von Schaltkontakten der zweiten Gruppe (1100) geschaltet ist, wobei
    der erste Satz von Schaltkontakten (1012, 1082) der ersten Gruppe (1000) mit dem ersten Eingabeanschluss (7a) verbunden ist und der zweite Satz von Schaltkontakten (1014, 1084) der ersten Gruppe (1000) mit dem zweiten Eingabeanschluss (7b) verbunden ist, wobei der erste Satz von Schaltkontakten (1112, 1182) der zweiten Gruppe (1100) mit dem ersten Ausgabeanschluss (9a) verbunden ist und der zweite Satz von Schaltkontakten (1114, 1184) der zweiten Gruppe (1100) mit dem zweiten Ausgabeanschluss (9b) verbunden ist; und wobei das Überwachungs- und Kontrollsystem des Weiteren enthält
    einen Regler (900) zum Steuern der Relais der mindestens zwei Gruppen (1000, 1100), wobei der Sicherheitsschalter angepasst ist, um den ersten und zweiten Satz von Kontakten von jedem der Relais nacheinander zu öffnen, wobei der erste und zweite Satz von Kontakten der anderen Relais geschlossen bleiben.
  2. Überwachungs- und Kontrollsystem nach Anspruch 1, wobei mindestens ein Satz von Schaltkontakten (1012, 1082; 1114, 1184) des ersten oder zweiten Satzes von Schaltkontakten der Relais zwei Untergruppen von Schaltkontakten (1020, 1022, 1090, 1092; 1120, 1122, 1190, 1192) umfasst, die elektrisch in Reihe geschaltet sind, wobei insbesondere der erste Satz von Schaltkontakten (1012, 1082) der Relais (1010, 1080) der ersten Gruppe (1000) und der zweite Satz von Schaltkontakten (1114, 1184) der Relais (1110, 1180) der zweiten Gruppe (1100) zwei Untergruppen von in Reihe geschalteten Schaltkontakten umfasst.
  3. Überwachungs- und Kontrollsystem nach einem der vorhergehenden Ansprüche, wobei die Sätze von Schaltkontakten (1012, 1082; 1114, 1184) zwei Untergruppen von Schaltkontakten umfasst und/oder die Anzahl von Gruppen von Relais (1000, 1100) von der zu schaltenden Spannung abhängt.
  4. Überwachungs- und Kontrollsystem nach einem der vorhergehenden Ansprüche, wobei mindestens eines, insbesondere alle der Relais (1010, 1080; 1110, 1180) mindestens einen Satz von Rücklesekontakten (1016,1086; 1116; 1186) umfasst.
  5. Überwachungs- und Kontrollsystem nach einem der vorhergehenden Ansprüche, wobei der mindestens erste und zweite Satz von Schaltkontakten (1020, 1022, 1090, 1092; 1120, 1122, 1190, 1192) und insbesondere die Untergruppe von Kontakten (1012, 1014, 1082, 1084; 1112, 1114, 1182, 1184) normalerweise offene Kontakte sind und/oder die Sätze von Rücklesekontakten (1016, 1086; 1116; 1186) normalerweise geschlossene Kontakte sind, wobei insbesondere die Relais (1010, 1080; 1110, 1180) geführte Relais sind, sodass wenn normalerweise geschlossene Kontakte geschlossen sind, die normalerweise offenen Kontakte (1014, 1020, 1022, 1090, 1092; 1120, 1122,1190,1192) einen vorbestimmten minimalen Abstand zwischen ihren Kontakten bereitstellen.
  6. Überwachungs- und Kontrollsystem nach einem der vorhergehenden Ansprüche, umfassend mindestens zwei Kanäle, wobei eine Gruppe von Relais (1000, 1100) der mindestens zwei Gruppen von Relais (1000, 1100) mit jedem Kanal (CH1, CH2) zusammenhängt, wobei der Regler (900) eine Vielzahl von Unterreglern (1005, 1007, 1105, 1107) umfasst, wobei jeder Kanal mindestens einen insbesondere zwei oder mehr der Vielzahl von Unterreglern umfasst, wobei für jeden Kanal (CH1, CH2):
    mindestens ein erster Unterregler (1005, 1105), insbesondere ein Prozessor, von dem Kanal angepasst ist, den Betätigungsgliedern (1018, 1088, 1118, 1188) der zu diesem Kanal gehörigen Relais und den Betätigungsgliedern (1018, 1088, 1118, 1188) der zu mindestens einem anderen Kanal gehörigen Relais Befehle zu geben.
  7. Überwachungs- und Kontrollsystem nach Anspruch 6, wobei der mindestens eine erste Unterregler (1005) eines ersten Kanals (CH1) angepasst ist, um das Arbeiten des mindestens einen ersten Unterreglers (1105), der zu einem anderen Kanal (CH2) gehört, zu überwachen, wobei der mindestens eine erste Unterregler (1105) des anderen Kanals angepasst ist, um den Betätigungsgliedern (1018, 1088) der zu dem ersten Kanal (CH1) gehörigen Relais Befehle zu geben, wobei der mindestens eine erste Unterregler (1005) des ersten Kanals (CH1) angepasst ist, um die Relais des anderen Kanals (CH2) abfallen zu lassen, wenn ein Versagen des mindestens einen ersten Unterreglers (1105) des anderen Kanals durch den mindestens einen ersten Unterregler (1005) nachgewiesen ist.
  8. Überwachungs- und Kontrollsystem nach Anspruch 6 oder 7, wobei mindestens ein Kanal, insbesondere alle Kanäle mindestens einen zweiten Unterregler (1007, 1107) der Vielzahl von Unterreglern umfassen, insbesondere in Form einer programmierbaren Logikschaltung (1007, 1107), wobei jeder zweite Unterregler (1007, 1107) mit mindestens einem ersten Unterregler (1005, 1105) des gleichen Kanals verbunden ist und angepasst ist, um das Arbeiten von diesem mindestens einen ersten Unterregler zu überwachen.
  9. Überwachungs- und Kontrollsystem nach einem der Ansprüche 6 bis 8, umfassend eine Vielzahl von Regelkreisen (1026, 1096, 1126, 1196), wobei jeder Regelkreis mit einem Relais (1010, 1080, 1110, 1180) zum Steuern eines Anziehens und/oder Abfallens des Relais verbunden ist und in dem jeweiligen Kanal (CH1, CH2) enthalten ist, wobei für mindestens einen, insbesondere jeden Regelkreis:
    dieser Regelkreis mit mindestens einer Ausgabe (1066a, 1066b) von mindestens einem ersten Unterregler (1005, 1105) des gleichen Kanals, mit mindestens einer Ausgabe (1066c) von mindestens einem ersten Unterregler (1005, 1105) des anderen Kanals und
    insbesondere mit mindestens einer Ausgabe (1028) des mindestens zweiten Unterreglers (1007, 1107) des gleichen Kanals verbunden ist, wobei der Regelkreis angepasst ist, die mit dem Regelkreis zusammenhängenden Relais basierend auf den Ausgaben der zugehörigen ersten Unterregler (1005, 1105) und insbesondere der Ausgabe des zughörigen zweiten Unterreglers (1007, 1107) anziehen und/oder abfallen zu lassen.
  10. Überwachungs- und Kontrollsystem nach Anspruch 9, wobei der mindestens eine erste Unterregler (1005, 1105) angepasst ist, um ein erstes Signal, zum Beispiel ein regelmäßiges Wechselsignal (1076), im Falle eines normalen Arbeitens und ein zweites Signal, zum Beispiel ein konstantes Signal, im Falle eines Versagens von mindestens einem der Ausgaben (1066a), die mit dem Regelkreis (1026, 1096, 1126, 1196) verbunden sind, zu liefern und/oder der mindestens eine zweite Unterregler (1007, 1107) angepasst ist, um ein erstes Signal, zum Beispiel ein regelmäßiges Wechselsignal (1034), im Falle eines normalen Arbeitens und ein zweites Signal, zum Beispiel ein konstantes Signal, im Falle eines Versagens von mindestens einer der Ausgaben (1028), die mit dem Regelkreis verbunden sind, zu liefern, wobei beim Empfang des zweiten Signals von dem mindestens einen ersten Unterregler (1005, 1105) und/oder dem mindestens zweiten Unterregler (1007, 1107) der Regelkreis das zugehörige Relais abfallen lässt.
  11. Überwachungs- und Kontrollsystem nach Anspruch 9 oder 10, wobei jeder Regelkreis angepasst ist, um das zugehörige Relais nur dann anziehen lässt, wenn von zwei Unterreglern (1005, 1105), zum Beispiel den ersten und zweiten Unterreglern von mindestens zwei verschiedenen Kanälen (CH1, CH2) gelieferte Signale und insbesondere das von dem mindestens einen zweiten Unterregler (1007,1107) des gleichen Kanals gelieferte Signal ein Anziehen dieses Relais erlaubt oder befiehlt.
  12. Überwachungs- und Kontrollsystem nach einem der Ansprüche 6 bis 11, wobei die Rücklesekontakte von jedem Relais durch mindestens zwei erste Unterregler (1005, 1105) von zwei verschiedenen Kanälen (CH1, CH2) gelesen werden, umfassend mindestens einen ersten Unterregler des Kanals, zu dem das jeweilige Relais gehört.
  13. Überwachungs- und Kontrollsystem nach einem der der vorhergehenden Ansprüche, wobei der Sicherheitsschalter zwei Gruppen von Relais umfasst, die jeweils zwei Relais umfassen, wobei jeder Kanal eine Gruppe von Relais umfasst.
  14. Verfahren zum Betreiben eines Sicherheitsschalters, wobei der Sicherheitsschalter einen ersten Eingabeanschluss (7a) und einen zweiten Eingabeanschluss (7b), angepasst für eine Verbindung mit einer Stromversorgung, einen ersten Ausgabeanschluss (9a) und einem zweiten Ausgabeanschluss (9b), angepasst für eine Verbindung mit mindestens einer Last (3), und mindestens zwei Gruppen von Relais (1000, 1100) umfasst, wobei jede Gruppe mindestens zwei Relais (1010, 1080; 1110, 1180) mit jeweils einem ersten Satz von Schaltkontakten (1012, 1082; 1112, 1182) und einem zweiten Satz von Schaltkontakten (1014, 1084; 1114, 1184) umfasst, wobei der erste Satz von Schaltkontakten und der zweite Satz von Schaltkontakten von jedem Relais gleichzeitig durch ein Betätigungsglied (1018, 1088; 1118, 1188) betätigt werden, wobei der erste Satz von Schaltkontakten (1012, 1082; 1112, 1182) der mindestens zwei Relais (1010, 1080; 1110, 1180) einer Gruppe elektrisch parallel geschaltet sind und der zweite Satz von Schaltkontakten (1014, 1084; 1114, 1184) der mindestens zwei Relais einer Gruppe (1000, 1100) elektrisch parallel geschaltet sind, wobei der erste Satz von Schaltkontakten (1012, 1082) einer ersten Gruppe (1000) elektrisch in Reihe mit dem ersten Satz von Schaltkontakten (1112, 1182) einer zweiten Gruppe (1100) geschaltet ist, der zweite Satz von Schaltkontakten (1014, 1084) der ersten Gruppe (1000) elektrisch in Reihe mit dem zweiten Satz (1114, 1184) von Schaltkontakten der zweiten Gruppe (1100) geschaltet ist, wobei der erste Satz von Schaltkontakten (1012, 1082) der ersten Gruppe (1000) mit dem ersten Eingabeanschluss (7a) verbunden ist und der zweite Satz von Schaltkontakten (1014, 1084) der ersten Gruppe (1000) mit dem zweiten Eingabeanschluss (7b) verbunden ist, wobei der erste Satz von Schaltkontakten (1112, 1182) der zweiten Gruppe (1100) mit dem ersten Ausgabeanschluss (9a) verbunden ist und der zweite Satz von Schaltkontakten (1114,1184) der zweiten Gruppe (1100) mit dem zweiten Ausgabeanschluss (9b) verbunden ist; und wobei das Verfahren des Weiteren umfasst: nacheinander den ersten und zweiten Satz von Kontakten von jedem der Relais zu öffnen, wobei der erste und zweite Satz von Kontakten der anderen Relais geschlossen sind.
  15. Verfahren nach Anspruch 14, wobei der Sicherheitsschalter ein Sicherheitsschalter ist, der in dem Überwachungs- und Kontrollsystem nach einem der Ansprüche 1 bis 13 enthalten ist.
EP13305355.3A 2013-03-22 2013-03-22 Überwachungs- und Steuerungssystem mit einem Sicherheitsschalter und Verfahren zum Betrieb eines Sicherheitsschalters Active EP2782112B1 (de)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP13305355.3A EP2782112B1 (de) 2013-03-22 2013-03-22 Überwachungs- und Steuerungssystem mit einem Sicherheitsschalter und Verfahren zum Betrieb eines Sicherheitsschalters
DK13305355.3T DK2782112T3 (en) 2013-03-22 2013-03-22 Monitoring and control system comprising a security switch and method for managing a security switch

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP13305355.3A EP2782112B1 (de) 2013-03-22 2013-03-22 Überwachungs- und Steuerungssystem mit einem Sicherheitsschalter und Verfahren zum Betrieb eines Sicherheitsschalters

Publications (2)

Publication Number Publication Date
EP2782112A1 EP2782112A1 (de) 2014-09-24
EP2782112B1 true EP2782112B1 (de) 2018-05-30

Family

ID=48095765

Family Applications (1)

Application Number Title Priority Date Filing Date
EP13305355.3A Active EP2782112B1 (de) 2013-03-22 2013-03-22 Überwachungs- und Steuerungssystem mit einem Sicherheitsschalter und Verfahren zum Betrieb eines Sicherheitsschalters

Country Status (2)

Country Link
EP (1) EP2782112B1 (de)
DK (1) DK2782112T3 (de)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102015104211A1 (de) * 2015-03-20 2016-09-22 Pilz Gmbh & Co. Kg Sicherheitsschaltgerät zum fehlersicheren Abschalten einer elektrischen Last
DE112017007153T5 (de) 2017-03-02 2019-11-21 Vacon Oy Anordnung und verfahren für ein sicheres abschalten

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3217528C2 (de) * 1982-05-10 1986-04-03 Siemens AG, 1000 Berlin und 8000 München Kontaktanordnung für Relais
DE4242792C2 (de) * 1992-12-17 1997-02-06 Sick Optik Elektronik Erwin Sicherheitsschalteranordnung
WO1996041358A1 (en) * 1995-06-07 1996-12-19 Transportation Safety Devices, Inc. Power disconnect switch
DE19927762A1 (de) * 1999-06-17 2001-01-04 Abb Research Ltd Neue elektrische Schalteinrichtung zum Überstromschutz
DE102005048601B3 (de) * 2005-10-06 2007-04-05 Pilz Gmbh & Co. Kg Vorrichtung und Verfahren zum fehlersicheren Auswerten eines Stellungsgebers, insbesondere eines Potentiometers
DE102006007264C5 (de) * 2006-02-10 2014-06-18 Pilz Gmbh & Co. Kg Sicherheitsschaltvorrichtung und Verfahren zum sicheren Ein- und Ausschalten eines elektrischen Verbrauchers
EP3174082B1 (de) * 2010-04-30 2018-07-25 Rockwell Automation Germany GmbH & Co. KG Einzelkanalsicherheitsausgang

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
None *

Also Published As

Publication number Publication date
EP2782112A1 (de) 2014-09-24
DK2782112T3 (en) 2018-09-03

Similar Documents

Publication Publication Date Title
EP3080831B1 (de) Wechselstromschutzschalter mit selbstprüffähigkeit
JP4191494B2 (ja) 安全スイッチモジュールおよびスイッチ素子のオフ能力検査方法
US7973533B2 (en) In-circuit testing for integrity of solid-state switches
DK2454747T3 (en) Initial fail-safe electromotive furniture drive
US9658268B2 (en) Device for diagnosing a circuit arrangement
US9711309B2 (en) Relay including processor providing control and/or monitoring
CN101925974A (zh) 剩余电流保护开关以及用于执行剩余电流保护开关的自测试的方法
JP2014504402A (ja) 電気負荷をフェイルセーフに停止させるための安全開閉装置
US10899579B2 (en) Elevator brake controller
US9819180B2 (en) Method for sequentially disconnecting/connecting electrical current sources from/to a common load
WO2010087745A1 (en) An electronic circuit breaker and a method of providing protection switching
US8976495B2 (en) Safety relay and safety-related communication system
EP2782112B1 (de) Überwachungs- und Steuerungssystem mit einem Sicherheitsschalter und Verfahren zum Betrieb eines Sicherheitsschalters
JP2016165032A (ja) 半導体スイッチ
CN111937111B (zh) 具有监控装置的断路器及其方法
KR20190071320A (ko) 릴레이 이상 진단 시스템 및 방법
CN111937263B (zh) 柔性断路器
CN109572436B (zh) 用于负载电路的诊断系统及电动车
US9559511B2 (en) Circuit assembly for error indicating
US10698038B2 (en) Multichannel ground fault tester
KR20080085736A (ko) 이중 채널 안전 조합물에 접속된 단일 채널 또는 이중 채널 전자 센서들의 자동 인식 및 구별을 위한 설비 및 방법
US10263613B2 (en) Safety-oriented load switching device and method for operating a safety-oriented load switching device
RU2016143638A (ru) Система коммутации исполнительных органов и способ неразрушающего контроля работоспособности и разобщённости элементов коммутации и исполнительных органов
EP2781847B1 (de) Gebäudebelüftungssystem mit Verbindungserkennung
US20240339844A1 (en) An arrangement comprising energy storage units and a related method

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20130322

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: ALSTOM TRANSPORT TECHNOLOGIES

R17P Request for examination filed (corrected)

Effective date: 20150324

RBV Designated contracting states (corrected)

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: ALSTOM TRANSPORT TECHNOLOGIES

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: GRANT OF PATENT IS INTENDED

INTG Intention to grant announced

Effective date: 20171222

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE PATENT HAS BEEN GRANTED

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: AT

Ref legal event code: REF

Ref document number: 1004459

Country of ref document: AT

Kind code of ref document: T

Effective date: 20180615

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602013038089

Country of ref document: DE

REG Reference to a national code

Ref country code: RO

Ref legal event code: EPE

REG Reference to a national code

Ref country code: DK

Ref legal event code: T3

Effective date: 20180828

REG Reference to a national code

Ref country code: NL

Ref legal event code: MP

Effective date: 20180530

REG Reference to a national code

Ref country code: LT

Ref legal event code: MG4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180830

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180830

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: RS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 1004459

Country of ref document: AT

Kind code of ref document: T

Effective date: 20180530

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602013038089

Country of ref document: DE

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

26N No opposition filed

Effective date: 20190301

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

REG Reference to a national code

Ref country code: DE

Ref legal event code: R119

Ref document number: 602013038089

Country of ref document: DE

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190322

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190331

Ref country code: DE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20191001

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190331

Ref country code: IE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190322

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190331

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20181001

Ref country code: MT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20190322

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180930

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT; INVALID AB INITIO

Effective date: 20130322

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20180530

P01 Opt-out of the competence of the unified patent court (upc) registered

Effective date: 20230823

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: RO

Payment date: 20240319

Year of fee payment: 12

Ref country code: GB

Payment date: 20240320

Year of fee payment: 12

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: TR

Payment date: 20240315

Year of fee payment: 12

Ref country code: IT

Payment date: 20240329

Year of fee payment: 12

Ref country code: DK

Payment date: 20240326

Year of fee payment: 12

Ref country code: BE

Payment date: 20240320

Year of fee payment: 12