JP2007094927A - Interlocking device, and medium transfer device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an interlocking device provided with a composition positively securing safety of an operator accessing a device interior. <P>SOLUTION: Detecting means for detecting that an operator has accessed an interior portion of a device are plurally provided in correspondence to degrees of risk. A delay circuit incorporated with delay time determined within a tolerance capable of securing safety of the operator per hazardous portion of the device is provided in an interlocking mechanism connected to each drive part. In a medium management device having a medium transfer drive, a delay circuit is configured by determining a delay time not impairing a management function for medium cash after securing safety of the operator. The medium transfer device is incorporated with the interlocking mechanism such that medium management performance is improved and trouble is prevented in the device by carrying out a medium transfer drive interruption process in the delay time. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an interlock device provided in each drive unit for protecting an operator such as a device having a drive unit, and more particularly to a medium transport device that transports a medium by the drive unit.

  In an apparatus having a conventional drive unit, an interlock mechanism is generally used. For example, the operator can open and close the power supply voltage of a load drive unit such as a motor by using a switch connected to the opening and closing of a cover provided in each part of the internal module of the apparatus and a cover of each part of the internal module. To prevent dangerous operating conditions from occurring. As a result, even if the device is in operation, if the cover or the like is opened, the drive voltage of the load is not applied, that is, the load is not transmitted, and an unexpected accident can be prevented. In addition, an interlock mechanism is provided in each part that seems to be dangerous, and when the operator accesses each dangerous part during operation, the interlock mechanism is immediately activated so that the operator is not harmed.

  Another drive device using an interlock mechanism is disclosed in Japanese Patent Laid-Open No. 7-27508 (Patent Document 1). This drive device is composed of a controller unit provided with a sensor unit and an interlock circuit, and is configured such that a laser beam is emitted when a power source unit is turned on as a trigger. In addition, the interlock circuit connected to turning on the power supply unit is not activated and the laser beam is emitted immediately, but the laser beam is emitted after a certain time delay from the time of turning on the power supply unit. A sensor driving device in which a circuit operates is provided.

JP-A-7-27508

  According to the above-described conventional technology, the safety of the operator can be ensured, but there is a possibility that an adverse effect may occur in the processing inside the apparatus because the drive unit is stopped immediately. For example, when the data being processed is deleted because the drive is stopped immediately, or when the processing is interrupted without performing the closing process, and it becomes impossible to restart, the medium conveying device, etc. In an apparatus that is transported by the drive unit and manages the medium, the position of the medium being transported may become uncertain when the drive unit stops driving.

  Furthermore, the interlock mechanism for the purpose of stopping the drive as described above is not only provided in a place where the operator directly accesses the drive unit, but the operator touches the drive unit after detecting the access of the operator. If the interlock mechanism is provided in a place where there is a time allowance until it becomes, it is possible to predict the operator's access to the dangerous part in advance and add a configuration with a delay time before stopping Is possible.

  SUMMARY OF THE INVENTION An object of the present invention is to provide an interlock device and a medium transport device which are configured so as not to hinder the apparatus while placing importance on the safety of an operator's operation.

  In order to achieve the above object, the present invention particularly provides a detection means for detecting that an operator has touched the inside of the apparatus during operation, and a drive unit connected to the actuator based on detection by the detection means. In the interlock device provided with the interlock mechanism configured to stop the driving of the operator, from the time when the operator detects access to the device by the detecting means until the operator can access the drive unit inside the device. A delay circuit provided with a delay time for stopping the actuator within a time period having the upper limit as the upper limit time is provided in the interlock mechanism so as to be provided for each dangerous part of the device.

  Since it is configured as described above, when it is detected that the operator can touch the inside of the apparatus during operation, there is a time margin until the operator accesses a dangerous part such as a drive unit. For this reason, a delay circuit is provided in the interlock mechanism for stopping the drive unit, and the stop of the drive unit is operated in consideration of the margin time. In addition, since the time margin until the operator accesses the dangerous part such as the drive unit is different for each part, the delay time is assumed in advance for each part and each delay time is incorporated in each delay circuit. Therefore, it is configured so that the optimum delay operation can be performed for each part while always ensuring the safety of the operator.

Further, the detection unit is constituted by a drawer detection mechanism provided in each module inside the apparatus, which detects an operation of pulling out each module from the apparatus main body.
With the above configuration, when each module is pulled out from the main unit during operation, the detection mechanism can be activated to detect early access to the dangerous part by the operator, so that there is a margin. Thus, the interlock mechanism can be operated to stop the drive of the drive unit. In this configuration, the timing of pulling out from the main body of the module has been described as a relatively low risk part. However, for example, a configuration in which the interlock mechanism is operated at the timing of pulling out the entire storage unit may be used. It can be applied not only to a mechanism comprising detection of an on / off switch, but also to a light emitting / receiving sensor, a sensor for detecting a minute current of a human body, and the like. In addition, the detection unit has been described with reference to a drawer detection mechanism provided on the module side to be housed in the module. A configuration using a number or a key may be used.

Furthermore, the dangerous part is configured to indicate a part inside the apparatus that allows an operator to directly access a drive unit inside the apparatus.
With the above configuration, the part where the operator can directly access the drive unit is difficult to take danger measures on the device side, and the part that is highly likely to cause harm or failure to the operator easily by the operator's access is particularly a dangerous part It is configured to take all possible safety measures.

  Furthermore, in the interlock device comprising the detection means and a second detection means for detecting that the operator has touched the dangerous part during operation, the first direct detection is performed regardless of detection by the detection unit. When the detection is performed by the second detection means, the actuator is actuated immediately and the drive of the drive unit is stopped. As a result, for example, an operator's normal access to the device cannot be considered, for example, a failure of a detection sensor or a failure or control of an electronic component such as an electronic circuit provided in a drive unit or an interlock mechanism. First of all, in an apparatus that is in an unstable state, such as a runaway part, it is first necessary to ensure safety so that it does not cause harm or failure by allowing the operator to access it even during operation at a relatively low risk level. Considering this, the drive unit can be stopped immediately.

  Further, the second detection means is configured by a switch that is turned on and off in conjunction with opening and closing of the cover provided in the dangerous part, so that the operator can directly access the drive unit at the dangerous part. In many cases, it is configured so that direct access is not possible. For example, when performing repairs or maintenance due to equipment failure, etc., the drive unit that is a dangerous part by opening and closing the above cover, except during processing assuming access to the dangerous part during operation In the case where direct access is possible, etc., the safety is considered as much as possible, and the delay time is minimized. By doing so, it is possible to prevent harm or failure to the operator that occurs when the operator accesses the dangerous part without knowing the danger to the dangerous part. Here, the configuration of the on / off sensor such as the opening / closing of the cover provided in the dangerous part and the tilt portion provided in the cover has been described as an example, but a configuration other than the cover may be used as described above. Further, the detection sensor may be a light projecting / receiving sensor or a sensor that detects a minute current of the human body, and any sensor that detects access to the human body at a high risk level for the operator can be applied. Further, in this configuration, the access detection means for detecting the access of the operator has a two-stage configuration, but it may be configured in a plurality of stages.

  Further, in a medium transport apparatus including a drive unit that transports a medium and a management unit that manages the medium to be transported, when the interlock mechanism is provided in the drive unit and driving of the drive unit is stopped by the interlock mechanism The delay time is longer than the shortest delay time with which the management means can manage the medium. This makes it very important to manage money as well as the safety of operators such as devices that automatically process transactions by transporting and managing money, such as transaction processing devices. . In these apparatuses, as described above, when the driving of the driving unit stops, it is necessary to determine the position of the medium being transported. It is necessary to devise such as executing a process for determining the position of the medium. Therefore, the delay time from the detection of the operator's access to the device to the activation of the interlock mechanism or the drive stop of the drive unit is defined here. In consideration of the conditions for operating the interlock mechanism or the drive stop of the drive unit before accessing the drive unit, the delay time can be ensured as much as possible so that the shortest delay time capable of managing the medium of the device can be secured. Is designed to the maximum value. By doing so, it is possible to realize an emergency drive stop process while ensuring the safety of the operator and minimizing the trouble of the apparatus. Here, a configuration is provided in which safety is considered with the highest priority so as not to cause harm to the human body such as an operator, and so as not to cause any trouble as a device.

  According to the present invention, while ensuring the safety of the operator, there is an effect of minimizing the trouble of the device that occurs when the drive unit is stopped by the operation of the interlock mechanism.

  Hereinafter, an embodiment of the present invention will be described with reference to FIGS. The present embodiment relates to an automatic transaction apparatus such as an ATM (Automatic Teller Machine) employed in a financial institution system such as a bank system.

  FIG. 1 is a connection diagram of an automatic transaction apparatus 1 and a system connected to the automatic transaction apparatus 1 via a communication network as a typical example of a medium transport apparatus, and FIG. 2 is an internal configuration of the automatic transaction apparatus and the host computer. FIG. A schematic structure will be described with reference to the connection diagram and the internal configuration diagram.

  An automatic transaction apparatus (hereinafter referred to as ATM) 1 is an automatic transaction apparatus that is installed in a financial institution and performs transactions such as cash deposits and withdrawals by customer operations. It is connected to the connection unit 12. The ATM is a device that automatically executes various transactions requested by the user, and includes an operation unit 3, a card / detail slip mechanism unit 4, a passbook mechanism unit 5, a bill deposit / withdrawal mechanism unit 6, and a coin deposit / withdrawal mechanism unit 7. , A vein authentication mechanism unit 9, and a control unit 2 for controlling these units. The control unit includes a hardware configuration such as a CPU and a memory, and a software configuration such as a program and data, and controls various processes and transactions.

  Each part will be described below. The operation unit 3 has a screen display and a key input detection function. When an ATM user mainly performs a transaction, the operation unit 3 displays a transaction operation guide screen, or a user's operation such as a personal identification number or a key pressed by a finger. This is the part that accepts input. Note that the operation unit 3 is preferably an input / display unit (also referred to as an input display unit) configured by a touch panel or the like, displays various information on the display screen, and detects pressing of various items included in the display screen. To do. The card mechanism unit 4 has a user card insertion or ejection operation, a card magnetic stripe or IC chip read or write operation, a card embossed portion image reading function, and the like. Moreover, it has the statement slip mechanism part 4 which prints the transaction contents on a statement slip by a printing part, and discharge | emits it from the inside of an apparatus. The passbook mechanism unit 5 has a user's passbook insertion / ejection operation, magnetic stripe read / write operation, a printing function by the passbook printing unit, and the like. The banknote deposit / withdrawal mechanism unit 6 and the coin deposit / withdrawal mechanism unit 7 have cash depositing / withdrawing functions, cash discrimination / conveyance, and storage functions, and are constantly managing cash.

  The vein authentication mechanism unit 9 has a user vein reading function and an authentication function between vein data registered in the IC card and read vein data. And as above-mentioned, the process of each of these site | parts is controlled by the control part 2. FIG.

  On the other hand, a host computer (hereinafter referred to as a host) 10 connected to the ATM 1 is connected to a line control unit 8 of the ATM 1 and connected via a line connection unit 11 for transmitting or receiving data to / from the ATM 1, such as account information of the user. And a host computer control unit 13 for controlling the file unit 12 for storing.

  The schematic structure of the interlock mechanism provided in the coin deposit / withdrawal mechanism part 7 which is one structure of the said ATM1 main body and a module is demonstrated using FIG. 3, FIG. FIG. 3 is a partial configuration diagram of the interlock mechanism in the ATM 1 and the coin deposit / withdrawal mechanism unit 7. FIG. 4 is a partial configuration diagram of the interlock mechanism of the coin deposit / withdrawal mechanism 7 as viewed from the side.

  The ATM 1 is provided with a rear opening / closing door which is a rear opening / closing portion 30 on the rear side of the main body, and a mechanism for pulling out an internal module such as the coin deposit / withdrawal mechanism portion 7 to the rear surface. Further, in the coin deposit / withdrawal mechanism 7, the drawer detection sensor A 33 including an on / off switch that operates when the coin is withdrawn to the rear surface to detect the drawer, the dangerous part C'34 in which the transport driving part is exposed, and the dangerous part C A cover 31 made of a sheet metal covering '34 from the top, a cover access detection sensor B 32 for detecting access to open and close the cover, and a dangerous part C 35 without a protective member are shown.

  The internal detailed mechanism of the coin deposit / withdrawal mechanism section 7 and the medium transport path will be described with reference to FIGS. FIG. 5 is a detailed configuration diagram of the coin deposit / withdrawal mechanism unit 7. FIG. 6 shows a coin deposit / withdrawal mechanism transport path (payment). The coin deposit / withdrawal mechanism unit 7 is a deposit / receipt port that is used when a user makes a transaction, and that the user deposits / receives coins or receives / receives coins stored in the coin deposit / withdrawal mechanism unit 7. 50, a single-sheet separating mechanism 57 that separates the coins accumulated in the deposit slot one by one and guides them to an internal conveyance path, and identifies the separated coins such as genuine coins, fake coins, and denominations An identification mechanism 56, a temporary holding unit 53 that temporarily holds the identified coins until a transaction is confirmed, and a denomination stacker 54 that divides the storage area into denominations in order to store the identified coins in denominations. And a deposit transport path 52 for guiding coins to the denomination stacker, a collective stacker 51 that collectively collects coins in a denomination mixed as opposed to the denomination stacker 54, and a withdrawal coin before the transaction operation Operational stacker stocked with coins in advance It is composed of a 5.

  As shown in FIG. 6, the deposit route related to deposit processing in the coin deposit / withdrawal mechanism unit 7 will be described in order. In order to start the deposit transaction, the user inserts coins necessary for the transaction into the deposit / withdrawal port 50 (deposit conveyance path 1 (60) in FIG. 6). The coins inserted into the deposit / withdrawal port 50 are guided to the identification unit 56 through the one-sheet separating mechanism 57, and are temporarily held in the temporary holding unit 53 only when it is determined to be a genuine coin. Here, coins and foreign matters that cannot be distinguished from fake coins and genuine coins are returned to a return port (not shown) or the deposit / withdrawal port (deposit conveyance path 2 (61) in FIG. 6). When the transaction is completed after the transaction is confirmed, the temporarily held coin is again guided to the deposit / withdrawal port 50 and then to the identification unit 56 via the one-sheet separation mechanism 57. Here, after determining the denomination of the coin, each coin is separated into each denomination area and stored in each denomination area in the denomination stacker 54 via the deposit conveyance path 52 (deposit conveyance path in FIG. 6). 3 (62)). At this time, when enough coins to be withdrawn are accumulated in the denomination stacker, the coins are stored in the batch stacker 51 via the temporary storage unit (payment transfer path 4 (63) in FIG. 6). ). The description of the parts indicated by A and B will be made later. Here, the deposit route in the deposit process of the coin depositing mechanism unit 7 has been described, but it is a part of the function of the coin depositing / dispensing mechanism unit 7, and depending on the type of the mechanism unit, various other functions including a dispensing function. have.

  Next, enlarged portions in A and B shown in FIG. 5 will be described with reference to FIGS. FIG. 7 is an enlarged view showing the internal structure of the temporary storage unit 53, which is the part shown in FIG. 5A. FIG. 9 is an enlarged view showing an internal structure of the deposit conveyance path 52 which is a part of FIG. 5B. Further, FIG. 8 is an image of an internal structure in which the portion A is enlarged, and FIG. 10 is an image of an internal structure in which the portion B is enlarged. As in the enlarged parts A and B, a distribution mechanism that distributes the coin transport destination is provided at a location where the coin transport destination branches.

  In the internal structure of the temporary storage unit 53 shown in FIG. 7, when the flapper A 70 is tilted to the right, the coin is transported to the left transport path, and conversely, when the flapper A 70 is tilted to the left, the coin is transported to the right transport path. It is conveyed to. Incidentally, the flapper A 70 is connected to an actuator (not shown), and has a mechanism that closes one of the left and right transport paths around the rotation axis when the actuator is ON and OFF. In addition, the temporary storage unit 53 has a structure in which the coins conveyed from the upper part are conveyed to the lower part by using a vertical drop. When the drive unit is stopped by the interlock mechanism at the time of abnormality, The flapper A 70, which functions as a sorter during conveyance, is not operated by the coin conveyance control, but by the operation state of the actuator and the mechanical structure of the flapper (for example, it is pulled back to one side by the biasing force of the spring). Flapper A 70 will be located. For example, as illustrated in FIGS. 7 and 8, an event may occur in which the coin being conveyed is not led to the conveyance path to be conveyed, but is led to the wrong conveyance path. For this reason, in the apparatus which manages the cash by recording the transport destination of the medium by detecting the passage of the medium with a plurality of sensors provided in each transport path, the coins erroneously transported as described above The problem that it becomes impossible to manage will occur.

  Further, in the internal structure of the deposit conveyance path 52 shown in FIGS. 9 and 10, a plurality of flappers are provided in the same manner as the enlarged portion B, and the denomination is the same based on the identification result of the coins that have been conveyed. Sorting is performed to guide the transport path. Taking the operation of the flapper B 90 as an example, an actuator (not shown) is connected to the flapper B 90 in the same manner as described above, and the flapper B 90 is centered on the rotation axis in the ON / OFF state of the actuator. It is a mechanism that closes one of the lower right conveyance paths. When the drive unit is stopped by the interlock mechanism at the time of abnormality, the coin 100 being transported is temporarily stopped on the spot by the actuator stop, and the flapper B 90 is moved to its original position (here, The situation returns to the left horizontal position. Thereafter, a foreign matter removal operation for removing foreign matter on the transport path is entered as processing at the end of access by the operator, and the coin 100 being transported is transported in parallel as it is. Normally, in the distribution control, the coin is to be guided to the lower transport path, but is guided to the right transport path. Due to this erroneous conveyance, the coins are transported to a part different from the intended one, and the managed number of coins and the actual number of coins do not match. Further, in the coin deposit / withdrawal mechanism unit 7, the coins stored in the money type stacker are withdrawn to the user as withdrawal coins, which causes a withdrawal failure in which payments with different amounts are made.

  In the above-described example, for example, in the event of a drive stop due to an interlock mechanism in the event of an abnormality, the management means that manages cash secures time for managing the medium, so that it is being sorted or being transported nearby The above-mentioned trouble or cash management impossible state can be overcome by means such as stopping the drive unit after finishing the coin sorting process or intentionally stopping (or giving up) the sorting process.

  In this example, the flapper control has been described as a representative. For example, even in the card mechanism unit 4 or the like, the data can be erased if the driving unit is stopped while the data stored in the card is being rewritten. There is also sex. Further, when the main software that controls the main control of ATM1 uses an OS used by a personal computer, a shutdown process is performed by software that normally terminates a task that is in operation at the time of termination. When OFF is performed, it can be assumed that there is a situation where it cannot be restarted, or even when it is started, the internal application software is broken and cannot be used thereafter. Further, the delay circuit provided with the delay circuit provided with the time delay necessary for cash management is not limited to the structure provided with the interlock mechanism, and the delay circuit provided with the delay circuit provided with the time delay required for each control process inside the apparatus. It is assumed to include the configuration.

  An example of the interlock circuit configuration will be described with reference to FIG. FIG. 11 is an interlock circuit configuration diagram. The drawer detection sensor A 32 is connected in parallel with a transport control circuit 110 using a farm and a transport control circuit 111 using hardware. Further, the hardware conveyance control circuit 111 and the cover access detection sensor B 33 are connected by a logic circuit (AND), and the output of the logic circuit (AND) is connected to the actuator operation permission circuit 114. The conveyance control circuit 110 by the farm is connected to an improved actuator control circuit 113 having the actuator operation permission circuit 114 built therein.

  As the operation of each circuit, first, the transport control circuit 110 by the firmware performs control to interrupt the transport immediately when the access start of the device such as the drawer detection sensor A 32 is detected by software control. Further, the hardware-based transfer control circuit 111 turns off the actuator operation permission circuit 114 after a predetermined delay time using a delay circuit provided therein if there is an access start detection of a device such as the drawer detection sensor A 32 by hardware control. If there is a set detection of the device, the actuator operation permission circuit 114 is immediately turned on. Further, when the access is made, the cover access detection sensor B 33 is immediately turned OFF (L) because the drive unit is exposed, and the actuator operation permission circuit 114 is turned off. When the cover is closed, the actuator operation permission circuit 114 is turned on. Control to ON (H) state. In the OFF (L) state detected by the cover access detection sensor B 33 due to the configuration of the logic circuit (AND) in the next stage, the actuator operation permission circuit 114 is turned off regardless of the state of the drawer detection sensor A 32. Control that forcibly stops the drive unit is realized.

  The configuration surrounded by the dotted line shown in the figure has a particular feature, and a circuit configuration branched to a circuit that immediately stops the drive unit and a circuit that stops with a delay time is added. With this circuit configuration, the improved actuator control circuit 113 for controlling the conveyance of the driving unit provides a delay time after the detection by the drawer detection sensor A 32 and when there is no access by the cover access detection sensor B 33, and within the delay time. After executing the interruption process for interrupting the conveyance, the conveyance drive is stopped. When the access is completed and the apparatus is set, the conveyance access is permitted immediately, and the cover access detection sensor B 33 accesses during the delay. There are three types of control: a case in which the driving of the conveyance is stopped immediately when there is an error, and a case where the driving of the conveyance is stopped by the access detection by the cover access detection sensor B 33 regardless of the detection state of the drawer detection sensor A 32 Can be implemented with this circuit.

  Here, a delay circuit incorporated in the transport control circuit 111 by hardware will be described. The delay circuit is configured to have a delay in the output signal by combining electronic elements. The delay time is calculated on the basis of the positional relationship and the degree of danger of each drive unit and detection means for detecting access by the operator. Therefore, the delay time incorporated in each delay circuit has a different value based on the above conditions. In addition, since the operator's safety is given top priority and the apparatus is configured to reduce the trouble of the apparatus to the maximum under that condition, the following conditions are satisfied.

A delay time L required to stop the driving of the driving unit after the actuator is operated after detecting the access to the operator's device;
The time required from when the operator starts to access the device until the operator can access the drive unit inside the device is defined as an upper limit L1 of L,
The time required for the drive unit to stop while the medium management state is maintained after detecting the start of access by the operator to the device is the lower limit L2 of L.
If
The delay time L is set to the maximum length within a range not exceeding the delay time L1.
When the condition of L1 <L2 is satisfied, the part is protected by a cover or the like, and the condition of L2 ≦ L1 is ensured.

  Using this, the delay time is calculated and set for each location. Since the delay time is obtained based on such conditions, the safety of the operator is ensured and the trouble of the device caused by the drive stoppage of the drive unit due to the operation of the interlock mechanism is minimized. It will be possible to provide an interlocking mechanism that is limited.

  Next, with reference to FIG. 12, FIG. 13, and FIG. 14, control of each detection sensor and conveyance drive will be described from circuit waveforms. FIG. 12 is a circuit waveform diagram showing a delay interlock operation when the device is pulled out and an operation control when the device is set. FIG. 13 is a diagram illustrating each operation control when there is cover access within the delay time after the device is pulled out. FIG. 14 is a circuit waveform diagram showing each operation control during irregular operation.

  The basic control of the interlock mechanism provided with the time delay in FIG. 12 will be described. When the withdrawal detection sensor A 32 detects the withdrawal of the internal module (in this case, the coin deposit / withdrawal mechanism unit 7) (120), the actuator operation permission circuit 114 is turned off after the delay time determined by the hardware conveyance control circuit 111 has elapsed. (L) and the drive of the drive part of the dangerous part C′34 and the dangerous part C35 is stopped. Thereafter, when the drawer detection sensor A 32 detects that the internal module is returned to the inside of the apparatus (123), the actuator operation permission circuit 114 is immediately turned on (H), and the dangerous part C′34 and the dangerous part C 35 are detected. It is controlled to allow the driving of the driving unit. This control stops the drive of the drive unit with a certain delay when the internal module is pulled out from the inside of the device, and when the internal module is returned to the inside of the device, the drive unit immediately Control that permits driving is realized.

  In FIG. 13, each operation control when there is a cover access within the delay time after the apparatus is pulled out in FIG. 12 will be described. When the drawer detection sensor A 32 detects the withdrawal of the internal module (in this case, the coin deposit / withdrawal mechanism unit 7) (120), the cover access detection sensor B 33 is detected during the elapse of the delay time determined by the conveyance control circuit 111 by hardware. When the opening of the cover 31 protecting the dangerous part is detected (121), the actuator operation permission circuit 114 is turned off (L) without waiting for the delay time, and the dangerous part C'34 and the dangerous part C 35 are detected. Immediately stop the drive of the drive unit. Thereafter, when the cover access detection sensor B 33 is closed (H) and the drawer detection sensor A 32 detects that the internal module is returned to the inside of the apparatus (H) (123), the actuator operation permission circuit 114 is immediately turned on. (H) and the driving of the drive unit for the dangerous part C′34 and the dangerous part C35 is permitted. With this control, when the internal module is pulled out from the inside of the device, and there is a second access near the dangerous part during the delay, the drive of the drive unit is immediately stopped and the internal module is accessed. When the process is finished and returned to the inside of the apparatus, the control of immediately restarting the drive of the drive unit is realized.

  In FIG. 14, each operation control when the second access is detected in the vicinity of the dangerous part in the state where the apparatus drawer is not detected will be described. Even though the drawer detection sensor A 32 does not detect the withdrawal of the internal module (in this case, the coin deposit / withdrawal mechanism unit 7), the cover access detection sensor B 33 detects the opening of the cover 31 protecting the dangerous part. When this is done (121), the drive of the drive part of the dangerous part C'34 and the dangerous part C35 is immediately stopped. In this case, any of the access detection sensors provided in the device is broken, the control software is abnormal, or the cover is opened due to a mechanical abnormality of the module inside the device. It is very dangerous for an operator to access the device. Therefore, control for stopping the drive unit immediately is provided. Thereafter, when the cover access detection sensor B 33 confirms that the cover is closed, it is recognized that the cover is safe, and control is performed so that the drive of the drive unit is immediately permitted. With this control, if the second module is accessed in the vicinity of the dangerous part even though the internal module is not detected for some reason, the drive unit is immediately stopped. When access is released and the state returns to a safe state, control for permitting the drive of the drive unit immediately is realized.

  As another control, when the drawer detection sensor A 32 detects the withdrawal of the internal module (120), the cover access detection sensor B 33 detects the dangerous part during the lapse of the delay time determined by the hardware conveyance control circuit 111. After detecting the opening of the cover 31 being protected and immediately stopping the control of the drive unit, if it is detected that the cover 31 is closed, direct access to the dangerous part cannot be considered. Control for resuming control of the drive unit is performed. Since then, since the drawer detection sensor is OFF, the internal module is still being pulled out, so that the driving of the drive unit is stopped after a predetermined delay time determined by the delay circuit has elapsed (123). ) Is performed. With this control, when the internal module is pulled out from the inside of the device, and there is a second access in the vicinity of the dangerous part during the delay, the drive unit is immediately stopped. When released, the control of immediately restarting the driving unit and stopping the driving unit after a predetermined delay time is realized.

  As mentioned above, safety is given the highest priority so as not to harm the human body, such as an operator. In addition, an interlock device and a medium transport device provided with functions that are excellent in both safety and device performance are also provided.

Outline diagram of automatic teller machine and host computer Internal configuration diagram of automatic teller machine and host computer Partial configuration diagram of interlock mechanism in automatic teller machine and coin deposit mechanism 7 Partial configuration diagram of the interlock mechanism of the coin deposit mechanism 7 seen from the side Detailed configuration diagram inside the coin deposit and withdrawal mechanism Coin deposit / withdrawal mechanism transport route (deposit) Internal configuration diagram of the coin deposit / withdrawal mechanism (part A enlargement) Image of the internal structure of the coin deposit and withdrawal mechanism (Part B expansion) Internal configuration diagram of the coin deposit / withdrawal mechanism (part A enlargement) Image of the internal structure of the coin deposit and withdrawal mechanism (Part B expansion) Interlock circuit configuration diagram Circuit waveform diagram 1 (delay interlock operation when device is pulled out and operation when device is set) Circuit waveform diagram 2 (when there is cover access within the delay time after the device is pulled out) Circuit waveform 3 (operation during irregular operation)

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Automatic cash transaction apparatus, 2 ... Control part, 3 ... Operation part (input and display part), 4 ... Card mechanism part and statement slip mechanism part, 5 ... Passbook mechanism part, 6 ... Banknote depositing / withdrawing mechanism part, 7 ... Coin deposit / withdrawal mechanism unit, 8 ... line connection unit (automatic cash transaction apparatus side), 9 ... vein authentication mechanism unit, 10 ... host computer, 11 ... line connection unit (host computer side), 12 ... file unit, 13 ... host Computer control unit

Claims (6)

Detecting means for detecting that the operator touches the inside of the apparatus during operation;
In the interlock device provided with the interlock mechanism configured to stop the drive of the drive unit connected to the actuator based on the detection by the detection means,
A delay circuit for stopping the actuator within a time period up to a shortest time in which the operator can access the drive unit inside the apparatus after detecting the access to the apparatus by the detecting means; An interlock device provided in the mechanism and disposed for each dangerous part of the device.   The interlock device according to claim 1, wherein the detection unit is a drawer detection mechanism that is provided in each module in the apparatus and detects an operation of pulling out each module from the apparatus main body.   The interlock device according to claim 1, wherein the dangerous portion is a portion inside the device that allows an operator to directly access a drive unit inside the device. A second detecting means for detecting that an operator can touch the dangerous part during operation;
The interlock device according to any one of claims 1 to 3, wherein when the detection unit detects the second detection unit directly, the actuator is actuated immediately and the drive unit is stopped when detected by the second detection unit. .   The interlock device according to claim 4, wherein the second detection unit is a switch that is turned on and off in conjunction with opening and closing of a cover provided in the dangerous part. A drive unit for conveying the medium, a management means for managing the medium to be conveyed,
The drive mechanism is provided with the interlock mechanism,
6. The medium conveyance according to claim 1, wherein when the drive of the drive unit is stopped by the interlock mechanism, the time with the shortest time as an upper limit is set longer than the shortest delay time in which the management unit can manage the medium. apparatus.

Images