JP5163001B2 - Consulting equipment and consulting program - Google Patents

Description

  The present invention relates to a consulting apparatus and a consulting program for selecting an appropriate safety measure for a hazard source such as a manufacturing site, and more particularly to a method for determining a safety measure corresponding to each situation in an interactive manner.

  In many manufacturing sites, factory automation (FA) has progressed, and various types of manufacturing apparatuses are operating according to predetermined programs. Such manufacturing equipment can sometimes be a source of danger to humans.

  Specifically, a person who operates such a manufacturing apparatus (hereinafter also referred to as an “operator”) changes the type of work flowing through the production line (so-called changeover) or a defective work generated during manufacturing. For example, it is necessary to approach the manufacturing apparatus when removing the material. In addition, a person who maintains such a manufacturing apparatus (hereinafter also referred to as “maintenance worker”) needs to approach the manufacturing apparatus in order to repair or check the manufacturing apparatus. On the other hand, since the manufacturing apparatus operates according to a predetermined program, it may be considered that an operator or a maintenance worker performs an unexpected operation.

  In order to protect people from such a manufacturing apparatus, the power source of the manufacturing apparatus should be shut off so that the manufacturing apparatus is completely stopped and then approached to the manufacturing apparatus. There are cases where the operation cannot be stopped or the operation state needs to be confirmed (for example, a test run), and it is not realistic to approach the manufacturing apparatus after it is completely stopped.

  For this reason, it is necessary to provide appropriate safety measures according to the installation environment of the target manufacturing apparatus and its performance / function. For such safety measures, the International Organization for Standardization (ISO) has adopted ISO 12100 (Safety of machinery -Basic concepts, general principles for design-). Principle-) is defined (see Non-Patent Document 1). The International Electrotechnical Commission has also established IEC 61508 (Functional safety of electrical / electronic / programmable electronic safety -related systems-). .

The procedure for analyzing such hazards from various aspects and determining appropriate safety measures is also referred to as “risk assessment”.
Supervised by the Japan Machinery Federation ISO TC 199 National Committee, “Translation ISO12100-1 / 12100-2: 2003 International Standard for Machine Safety (2003 Edition)”, Japanese Standards Association, March 22, 2004.

  It is necessary to select an appropriate safety measure for the risk source after evaluating the situation of the risk source (manufacturing equipment, etc.) from various aspects. However, it is not easy to objectively evaluate the situation of the danger source, and it is not easy to determine whether or not it conforms to each standard as described above. Therefore, considerable skill is required to select an appropriate safety measure for each hazard source. In addition, there are variations in the way of thinking among such skilled persons, and it may not be said that safety measures are selected based on objectively unified evaluation criteria.

  The present invention has been made in order to solve such problems, and the purpose of the present invention is appropriate even for a user who does not have prior knowledge of safety measures depending on the situation of the hazard source. It is to provide a consulting device and a consulting program that can select a safety policy.

  According to an aspect of the present invention, a consulting apparatus that selects a safety policy corresponding to a situation from among a plurality of predetermined safety policies, and displays a dialogue screen including a question about the situation of a danger source on a display unit. In response to a selection command given from the display means and the input unit, at least one of a plurality of dialogue screens stored in advance in the storage unit is selected, and the dialogue screen currently displayed is selected as the selected dialogue screen. A plurality of result display screens stored in advance in the storage unit for notifying the safety policy when the update means for updating and the history of the selection command given in association with each dialog screen become a predetermined value Output means for selecting at least one associated with the history and outputting the selected result display screen to the display unit.

  Preferably, the display means displays a first dialog screen asking whether or not periodic access to the danger source is necessary, and the output means periodically displays the risk source on the first dialog screen. When a selection command indicating that a specific access is unnecessary is given, the corresponding first result display screen is output to the display unit, and the updating means periodically accesses the hazard source on the first dialog screen. When a selection command indicating that the user needs to be given is given, a second dialogue screen asking whether or not the person has access to the danger source is displayed.

  More preferably, the update means asks whether or not the danger source can be isolated by the door when a selection instruction is given that a person accesses the danger source on the second dialog screen. The update means displays a fourth screen for selecting a safety measure for the door when a selection command is given that the danger source can be isolated by the door in the third dialog screen. The update means displays the selection screen indicating that the danger source cannot be isolated by the door in the third dialog screen, or the person becomes the risk source in the second dialog screen. On the other hand, when a selection command not to access is given, a fifth dialogue screen for selecting a safety policy for the access space to the danger source is displayed.

  More preferably, the fourth dialog screen includes a screen asking whether or not the person using the door is a maintenance worker, and the updating means is such that the person using the door in the fourth dialog screen is the maintenance worker. When the selection command is given, the sixth dialogue screen asking whether or not the hazard source is accessible after the danger source is stopped is displayed, and the updating means is displayed on the sixth dialogue screen. When a selection command to allow access after stopping the hazard source is given, a seventh dialog screen is displayed asking whether access to the hazard source is necessary for the entire human body, The output means outputs a corresponding second result display screen to the display unit when a selection command indicating that access to the danger source is unnecessary in the entire human body is given on the seventh dialog screen, Access to the hazard source is required throughout the human body in the seventh dialog screen. When the selection command and is given, and outputs a corresponding third result display screen on the display unit.

  More preferably, the output means outputs a corresponding fourth result display screen to the display unit when a selection command indicating that access is impossible is given after the danger source is stopped in the sixth dialog screen. To do.

  Still more preferably, the updating means requires constant access during operation of the hazard source when a selection command is given that the person using the door is not a maintenance worker on the fourth dialog screen. An eighth dialog screen is displayed asking whether or not the risk source is stopped when the selection means that the constant access is necessary during operation of the risk source is given on the eighth dialog screen. In response to the command, a ninth dialog screen asking whether or not to immediately stop is displayed, and the output means, when the danger source immediately stops in response to the stop command in the ninth dialog screen When the selection command is given, the corresponding fifth result display screen is output to the display unit, and the output means selects that the constant access is not required during operation of the hazard source on the eighth dialog screen. Is given, or Hazards in 9 interactive screen of when the selection instruction of the not stopped immediately in response to the stop command is given, and outputs the sixth result display screen corresponding to the display unit.

  More preferably, the fifth dialogue screen includes a screen asking whether or not there is a possibility that a person's arm enters the access space, and the updating means has the person's arm in the access space in the fifth dialogue screen. When a selection command indicating that there is no possibility of entering is given, a tenth dialogue screen asking whether or not an interlock is necessary is displayed on the access path to the danger source. When a selection command indicating that an interlock is unnecessary is given on the access path to the danger source in the dialog screen of FIG. 10, while the corresponding seventh result display screen is output to the display unit, When a selection command indicating that the interlock is necessary is given on the access path to the danger source, a corresponding eighth result display screen is output to the display unit.

  More preferably, the update means needs to detect access within a predetermined range when a selection instruction is given that a human arm may enter the access space on the fifth dialog screen. An eleventh dialog screen asking whether or not is displayed, and the output means corresponds to the ninth result when a selection command indicating that access detection within a predetermined range is necessary is given on the eleventh dialog screen. While the display screen is output to the display unit, when a selection command indicating that the detection of access within a predetermined range is unnecessary is given on the eleventh interactive screen, the corresponding tenth result display screen is displayed on the display unit. Output.

  More preferably, the updating means asks whether or not the danger source needs to be stopped when the work is carried into and out of the danger source after the output means outputs the tenth result display screen. When the selection means that the danger source does not need to be stopped when the work is carried into and out of the danger source is given on the twelfth dialogue screen, the update means is temporarily A thirteenth dialog screen for invalidating the detection function is displayed.

  More preferably, the thirteenth dialog screen includes a screen asking whether to carry in / out only the workpiece during the operation of the hazard source, and the updating means is only the workpiece during the operation of the hazard source in the thirteenth dialog screen. When a selection command to carry in / out is given, a fourteenth dialogue screen is displayed asking which one of loading and unloading of the workpiece is necessary, and the output means displays the workpiece on the fourteenth dialogue screen. When a selection command indicating that only unloading is necessary is provided, a corresponding eleventh result display screen is output to the display unit, and a selection command indicating that only loading of a work is required is provided on the fourteenth dialog screen. In the case, the corresponding twelfth result display screen is output to the display unit, and when the selection command indicating that both loading and unloading of the workpiece are necessary is given on the fourteenth dialog screen, the corresponding thirteenth Result table The screen is output to the display unit, and the output means corresponds to the fourteenth corresponding to the case where a selection command is given to include the case other than the case where only the work is carried in / out during the operation of the danger source in the thirteenth interactive screen The result display screen is output to the display unit.

  According to another aspect of the present invention, the consulting apparatus is installed in a computer including a display unit, an input unit, and a storage unit, and the computer selects a safety policy corresponding to the situation among a plurality of predetermined safety policies. A consulting program that operates as a display unit that displays a dialogue screen including a question about the situation of the hazard source on the display unit, and a plurality of pre-stored in the storage unit in response to a selection command given from the input unit An update means for selecting at least one of the dialog screens and updating the currently displayed dialog screen to the selected dialog screen, and a predetermined value of a history of selection commands given in association with each dialog screen If there are a number of result display screens stored in advance in the storage unit for notifying safety measures, the number associated with the history is small. Both with selecting one, and output means for outputting the result display screen that the selected display unit.

  According to the present invention, it is possible to realize a consulting apparatus and a consulting program that allow a user who does not have prior knowledge about a safety policy to select an appropriate safety policy according to the situation of the danger source.

  Embodiments of the present invention will be described in detail with reference to the drawings. Note that the same or corresponding parts in the drawings are denoted by the same reference numerals and description thereof will not be repeated.

[System configuration]
FIG. 1 is a perspective view showing a computer 1 which is a representative hardware configuration for realizing a consulting apparatus according to the present embodiment.

  Referring to FIG. 1, a computer 1 includes a computer main body 101 having an FD (Flexible Disk) driving device 111 and a CD-ROM (Compact Disk-Read Only Memory) driving device 113, a monitor 102 as a display device, It includes a keyboard 103 and a mouse 104 which are input devices.

  FIG. 2 is a schematic configuration diagram showing a hardware configuration of the computer 1 according to the present embodiment.

  Referring to FIG. 2, in addition to the FD driving device 111 and the CD-ROM driving device 113 shown in FIG. 1, the computer main body 101 includes a CPU (Central Processing Unit) 105 and a ROM ( A memory 106 including a read only memory (RAM) and a random access memory (RAM), a hard disk 107 as a storage device, and a communication interface 109 are included. The consulting apparatus according to the present embodiment is realized by the CPU 105 executing the program stored in the hard disk 107 or the like in advance in the RAM in the memory 106. Hard disk 107 stores in advance a plurality of dialogue screens and result display screens used in dialogue processing according to the present embodiment as will be described later.

  A program stored in the hard disk 107 is stored and distributed in a recording medium such as a CD-ROM 114 and a flexible disk 112, read by the CD-ROM drive device 113, the FD drive device 111, and the like and installed in the hard disk 107. Instead of such a form, when the computer 1 is connected to the network via the communication interface 109, a program transmitted from a server on the network may be received and installed in the hard disk 107. . When receiving the program via the network, the program may be executed after being loaded on the RAM without being installed in the hard disk 107.

  Note that the recording medium for storing the program is not limited to the CD-ROM 114 and the flexible disk 112, and may be, for example, a DVD-ROM (Digital Versatile Disk) or a memory card. A drive device capable of reading various recording media is provided.

  Furthermore, a program according to the present invention is a program module that is provided as a part of an operating system (OS) of a computer and calls necessary modules in a predetermined arrangement at a predetermined timing to execute processing. Also good. In that case, the program itself does not include the module, and the process is executed in cooperation with the OS. A program that does not include such a module can also be included in the program according to the present invention.

  The program according to the present invention may be provided by being incorporated in a part of another program. Even in this case, the program itself does not include the module included in the other program, and the process is executed in cooperation with the other program. Such a program incorporated in another program can also be included in the program according to the present invention.

  Furthermore, part or all of the consulting apparatus according to the present embodiment may be realized by hardware.

[Function configuration]
The CPU 105 of the computer 1 reads out the program stored in the hard disk 107 to the memory 106 and executes it, thereby displaying a dialogue screen including a question regarding the situation of the danger source on the monitor 102 (display unit), and the keyboard 103. In response to a selection command given from the mouse 104 or the mouse (input unit), at least one of a plurality of dialogue screens stored in advance in the hard disk 107 (storage unit) is selected, and the currently displayed dialogue screen is displayed. An update function for updating the selected dialog screen is realized. Further, when the history of the selection command given in association with each interactive screen becomes a predetermined value, the CPU 105 stores a plurality of information stored in advance in the hard disk 107 (storage unit) for notifying safety measures. An output function for selecting at least one of the result display screens associated with the history and outputting the selected result display screen to the monitor 102 (display unit) is realized.

  As described above, the consulting apparatus according to the present embodiment accepts a question regarding the situation of the danger source in an interactive manner to the user, and the situation among a plurality of predetermined safety measures based on the history of answers to the question. Select appropriate safety measures according to the situation. In this specification, the “user” means a person who intends to select an appropriate safety measure for the danger source, and an “operator” who actually operates the danger source (such as a manufacturing apparatus) or the danger source. It is not necessarily the same as the “maintenance worker” who actually performs maintenance.

[Overall processing]
FIG. 3 is a flowchart showing an overall process related to the consulting apparatus according to the present embodiment.

  Referring to FIG. 3, first, a user who uses the consulting apparatus according to the present embodiment inputs the setting of the target apparatus that is a danger source (step S1).

  FIG. 4 is a diagram showing an example of a setting input screen for the target device in step S1 shown in FIG. In step S1, CPU 105 (FIG. 2) of computer 1 reads a setting input screen as shown in FIG. 4 stored in advance in hard disk 107 (FIG. 2) and displays it on monitor 102 (FIGS. 1 and 2). . Note that the setting input screen shown in FIG. 4 corresponds to the risk assessment sheet defined by the international standard ISO 12100 and the international electrotechnical conference IEC61508. On the setting input screen displayed on the monitor 102, the user operates the mouse 104 (FIG. 2) or the like to select the field 10 with the title “target unit” and the target danger source ( Enter information to identify the manufacturing equipment. Then, the process proceeds to step S3.

  In step S3, the user further selects a risk evaluation method. In this situation, in a situation where a plurality of risk evaluation methods are proposed, it is possible to select a risk evaluation method that is appropriate to be adopted as a hazard source targeted by the user. In the example illustrated in FIG. 4, the user selects one of the two types of risk evaluation methods (reference numeral 12) of “SFP method” and “SL method”. The CPU 105 of the computer 1 changes the evaluation items displayed in the field 14 according to the risk evaluation method selected by the user. Then, the process proceeds to step S5.

  In step S <b> 5, the user operates the keyboard 103 and the mouse 104 and inputs a corresponding answer (selection command) while viewing an interactive screen including a question regarding the danger source status displayed on the monitor 102 by the CPU 105 of the computer 1. . In step S5, the CPU 105 of the computer 1 performs processing as described later, so that an appropriate safety measure is selected for a danger source such as a manufacturing site. Information on the safety policy selected in step S105 is input to fields 16 and 18 on the setting input screen shown in FIG. Then, the process proceeds to step S7.

  In step S7, the user confirms the information regarding the safety policy entered in the fields 16 and 18 and approves the selected safety policy. If the user does not approve the selected safety policy, the process of step S5 may be executed again. Then, the process proceeds to step S9.

  In step S9, the CPU 105 of the computer 1 displays information about the product that implements the safety policy selected in step S5. Specifically, the hard disk 107 of the computer 1 stores information related to sensors and the like for realizing a preselected safety policy, and the CPU 105 of the computer 1 performs the process according to the selected safety policy. Information is read from the hard disk 107 and displayed on the monitor 102. As another form, the hard disk 107 of the computer 1 stores a URL (Uniform Resource Locator) of a server in which information relating to sensors and the like for realizing a preselected safety policy is present. The CPU 105 reads out the URL corresponding to the selected safety policy and displays it on the monitor 102. Furthermore, when any URL is selected by the user operating the keyboard 103 or the mouse 104, the CPU 105 of the computer 1 acquires the corresponding file from the corresponding server via the communication interface 109 (FIG. 2) and monitors it. 102 may be displayed. Then, the process proceeds to step S11.

  In step S11, the user outputs (typically, prints) a risk assessment sheet. The CPU 105 of the computer 1 outputs a risk assessment sheet including information input or selected by executing the above steps to a printer device (not shown).

In this way, the user can select an appropriate safety measure for the hazard.
[Safety policy selection process]
Details of the safety policy selection process in step S5 of FIG. 3 will be described below.

  FIG. 5 is a flowchart (No. 1) showing a safety policy selection process according to the present embodiment.

  With reference to FIG. 5, first, the CPU 105 functioning as a display means displays on the monitor 102 an interactive screen asking whether or not periodic access to the danger source is necessary (step S101).

  FIG. 6 is a diagram showing an example of the dialogue screen displayed in step S101 of FIG. In step S <b> 101, the CPU 105 functioning as a display unit displays the dialogue screen shown in FIG. 6 on the monitor 102 among the plurality of dialogue screens stored in advance in the hard disk 107. In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately switch and display the dialogue screens shown in FIGS. 6 (a) and 6 (b) every predetermined time. In response to this, the user inputs a corresponding answer (selection command) by operating the keyboard 103 or the mouse 104 while referring to the dialog screen displayed on the monitor 102. Specifically, the user selects one of the selection buttons 201 and 202 shown in FIG. 6 according to the situation of the target danger source.

  In the dialog screen shown in FIG. 6, when the user selects the selection button 201, that is, when a selection command indicating that periodic access to the danger source is unnecessary (NO in step S101), output means The CPU 105 that functions as the result displays the result display screens shown in FIGS. 7 and 8 on the monitor 102 among the plurality of result display screens stored in the hard disk 107 in advance.

  FIG. 7 is a diagram showing an example of a result display screen displayed in step S103 of FIG. FIG. 8 is a diagram showing an example of a result display screen displayed in step S105 of FIG. Referring to FIG. 5, FIG. 7 and FIG. 8, when a selection command indicating that periodic access to the danger source is not required is given (NO in step S101), CPU 105 functioning as an output means As shown in FIG. 7, it is displayed that “guard by enclosure” is necessary (step S103). Further, when the user selects the selection button 203 on the result display screen shown in FIG. 7, the CPU 105 functioning as the output means displays “fixed guard” as shown in FIG. 8 as the selected safety measure (step S105). ).

  That is, when the user inputs a “selection command that periodic access is not required for a hazard source” in step S101 in FIG. 5, the CPU 105 functioning as an output unit selects the installation of a “fixed guard” as a safety measure. To do. Note that the “fixed guard” realizes safety by isolating a person from the danger source by a predetermined safety distance, and therefore it is preferable to provide guidance on a method for calculating the safety distance of the fixed guard. Therefore, for example, when the user selects the selection button 204 provided on the result display screen illustrated in FIG. 8, the guidance screen may be displayed regarding the method for calculating the safe distance.

  When the processing from step S101 to step S105 is completed, the processing returns to step S7 shown in FIG.

  On the other hand, when the user selects the selection button 202 on the dialog screen shown in FIG. 6, that is, when a selection command indicating that periodic access to the danger source is required (YES in step S <b> 101), The CPU 105 functioning as the updating unit displays the dialog screen shown in FIG. 9 on the monitor 102 among the plurality of dialog screens stored in the hard disk 107 in advance.

  FIG. 9 is a diagram showing an example of the dialogue screen displayed in step S107 of FIG. Referring to FIG. 5 and FIG. 9, when a selection command indicating that periodic access is required to the hazard source is given (YES in step S <b> 101), CPU 105 functioning as an updating unit displays monitor 102. The display is updated to a dialogue screen asking whether manual access or automatic access is necessary as shown in FIG. 9 (step S107). In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately display the dialogue screens shown in FIGS. 9A and 9B every predetermined time. This “manual access” means that a person accesses the danger source, and corresponds to “automatic access” when a carrier other than the person accesses the danger source.

  In the dialog screen shown in FIG. 9, when the user selects the selection button 205, that is, when a selection command indicating that manual access is required (manual access in step S107), the CPU 105 functioning as the updating means, Of the plurality of dialogue screens stored in the hard disk 107 in advance, the dialogue screen shown in FIG.

  FIG. 10 is a diagram showing an example of the dialogue screen displayed in step S109 of FIG. Referring to FIGS. 5 and 10, when a selection command indicating that manual access is required (manual access in step S107), CPU 105 functioning as the updating means displays the display on monitor 102 in FIG. Thus, the dialog screen is updated to ask whether or not the door can be isolated (step S109). In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately switch and display the dialogue screens shown in FIGS. 10 (a) and 10 (b) every predetermined time.

  In the dialog screen shown in FIG. 10, when the user selects the selection button 207, that is, when a selection command is given that the danger source can be isolated by the door (YES in step S109), the updating means is used. The functioning CPU 105 displays the dialogue screen shown in FIG. 11 on the monitor 102 among a plurality of dialogue screens stored in the hard disk 107 in advance.

  FIG. 11 is a diagram showing an example of the dialogue screen displayed in step S111 of FIG. Referring to FIG. 5 and FIG. 11, when a selection command is given that the danger source can be isolated by the door (YES in step S <b> 109), CPU 105 functioning as the updating unit displays on monitor 102. Is updated to an interactive screen for selecting a safety policy for the door as shown in FIG. 11 (step S111). When the user selects the selection button 209 on the dialog screen shown in FIG. 11, the process proceeds to a process flow for selecting a safety policy for the door described later.

  On the other hand, when the user selects the selection button 206 on the dialog screen shown in FIG. 9, that is, when a selection command indicating that automatic access is required (automatic access in step S107), the updating means is used. The functioning CPU 105 displays the dialogue screen shown in FIG. 12 on the monitor 102 among a plurality of dialogue screens stored in the hard disk 107 in advance.

  FIG. 12 is a diagram showing an example of the dialogue screen displayed in step S113 of FIG. Referring to FIG. 5 and FIG. 12, when a selection command indicating that automatic access is necessary is given (automatic access in step S107), CPU 105 functioning as an updating means has an access space as shown in FIG. Display that it is necessary. In the dialog screen shown in FIG. 12, when the user selects the selection button 210, the processing proceeds to a processing flow for selecting a security policy for the access space described later. The “access space” means a route (space region) having a predetermined region for accessing the danger source.

  Also, in the dialog screen shown in FIG. 10, when the user selects the selection button 208, that is, when a selection command is given that the danger source cannot be isolated by the door (NO in step S109), The process proceeds to a process flow for selecting a security policy for the access space described later.

[Safety policy selection process for doors]
As described above, after step S111 shown in FIG. 5, the process proceeds to a process flow for selecting a safety policy for the door.

  FIG. 13 is a flowchart (No. 2) showing the safety policy selection process according to the present embodiment.

  Referring to FIG. 13, CPU 105 functioning as a display means displays on monitor 102 an interactive screen asking whether the door to be arranged is a maintenance door or a normal work door (step S201). Here, “maintenance door” means a door used by a maintenance worker, and “normal operation door” means a door used by an operator. That is, since the maintenance worker is usually familiar with the operation of the manufacturing apparatus, which is a danger source, in step S201, it is intended to determine the degree of understanding of the danger source of the person using the door. Yes.

  FIG. 14 is a diagram showing an example of the dialogue screen displayed in step S201 of FIG. In step S <b> 201, the CPU 105 functioning as an updating unit displays the dialogue screen shown in FIG. 14 on the monitor 102 among the plurality of dialogue screens stored in advance in the hard disk 107. In order to make it easier for the user to understand the meaning of the question, it is desirable that the dialogue screens shown in FIGS. 14 (a) and 14 (b) are alternately switched and displayed every predetermined time.

  In the dialog screen shown in FIG. 14, when the user selects the selection button 211, that is, when a selection command is given that the door to be arranged is a maintenance door (maintenance door in step S201), the updating means The CPU 105 that functions as the one displays a dialogue screen shown in FIG. 15 on the monitor 102 among a plurality of dialogue screens stored in advance in the hard disk 107.

  FIG. 15 is a diagram showing an example of the dialogue screen displayed in step S203 of FIG. Referring to FIG. 13 and FIG. 15, when a selection command is given that the door to be arranged is a maintenance door (maintenance door in step S <b> 201), CPU 105 functioning as an updating unit displays monitor 102. As shown in FIG. 15, the display is updated to an interactive screen asking which maintenance method is used (step S203). In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately display the dialogue screens shown in FIGS. 15A and 15B every predetermined time.

  In the dialog screen shown in FIG. 15, when the user selects the selection button 213, that is, when a selection command is given that the apparatus power is shut off and maintenance is possible (the apparatus power is shut off in step S 203), the updating means The CPU 105 that functions as the one displays a dialogue screen shown in FIG. 16 on the monitor 102 among a plurality of dialogue screens stored in advance in the hard disk 107. Note that the device power supply interruption means that access is possible after the hazard source is stopped.

  FIG. 16 is a diagram showing an example of the dialogue screen displayed in step S205 of FIG. Referring to FIG. 13 and FIG. 16, when a selection command is given that the apparatus power supply is shut off and maintenance is possible (the apparatus power supply is cut off in step S <b> 203), the CPU 105 functioning as the updating means As shown in FIG. 16, the display is updated to an interactive screen asking whether there is full body access (step S205). Here, “whether or not full body access is present” is a question as to whether or not access to a hazard source is necessary for the entire body of the maintenance worker. In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately switch and display the dialogue screens shown in FIGS. 16A and 16B every predetermined time.

  In the dialog screen shown in FIG. 16, when the user selects the selection button 215, that is, when a selection command indicating no full body access is given (NO in step S205), the CPU 105 functioning as an output means Of the plurality of result display screens stored in advance 107, the result display screen shown in FIG. 17 is displayed on the monitor 102.

  FIG. 17 is a diagram showing an example of a result display screen displayed in step S207 of FIG. Referring to FIG. 13 and FIG. 17, a combination of a selection command indicating that the door to be arranged is a maintenance door, a selection command indicating that maintenance is possible by shutting off the apparatus power supply, and a selection command indicating no full body access When (history) is given (no in step S205), the CPU 105 functioning as the output means displays “locked door interlock” as the selected safety measure as shown in FIG. 17 (step S207). ). Then, the process returns to step S7 shown in FIG.

  Here, the “locking door interlock” is a mechanism that locks the door until the danger source stops. For details on this "lock type door interlock", reference documents 1 (OMRON Corporation, Industrial Automation Business Company, Sales Control Division, "Safety Component Comprehensive Catalog 2006", October 2006, 1st edition) 28-86. Refer to page etc.

  On the other hand, when the user selects the selection button 216 on the dialog screen shown in FIG. 16, that is, when a selection command indicating that there is a full body access is given (in step S205), the CPU 105 functioning as an output means The result display screens shown in FIGS. 18 and 19 among the plurality of result display screens stored in advance in the hard disk 107 are displayed on the monitor 102.

  FIG. 18 is a diagram showing an example of a result display screen displayed in step S209 of FIG. FIG. 19 is a diagram showing an example of a result display screen displayed in step S211 of FIG. Referring to FIGS. 13, 18 and 19, a selection command indicating that the door to be arranged is a maintenance door, a selection command indicating that maintenance is possible by shutting off the apparatus power supply, and a selection command with full body access. When the combination (history) is given (existed in step S205), the CPU 105 functioning as the output means needs the “locking door interlock” as the selected safety measure as shown in FIG. A message to that effect is displayed (step S209). Further, when the user selects the selection button 217 on the result display screen shown in FIG. 18, the CPU 105 functioning as the output means displays “locking door interlock” and “locking” as the selected safety measures as shown in FIG. A combination of “out / tag out” or “trapped key” is displayed (step S211). Then, the process returns to step S7 shown in FIG. In order to indicate to the user that there are two options, it is desirable to alternately switch and display the result display screens shown in FIGS. 19A and 19B every predetermined time.

  Here, "lockout / tagout" is a mechanism that can invalidate the door lock by attaching a drawstring lock (padlock), and the maintenance worker accidentally moves to the danger source side during maintenance work. This is to prevent being trapped. Similarly, the “trapped key” is a mechanism for preventing a maintenance worker from being trapped in the danger source side accidentally during maintenance work, and invalidates the door lock with the corresponding key. For details of “lockout / tagout” and “trapped key”, see pages 40-61 and 107-110 of the above-mentioned reference 1.

  On the other hand, in the dialog screen shown in FIG. 15, when the user selects the selection button 214, that is, the maintenance is impossible by shutting off the apparatus power supply, and the selection command to perform maintenance by bypassing the interlock. Is provided (interlock bypass in step S203), the CPU 105 functioning as output means monitors the result display screens shown in FIGS. 20 and 21 among the plurality of result display screens stored in the hard disk 107 in advance. 102.

  FIG. 20 is a diagram showing an example of a result display screen displayed in step S213 of FIG. FIG. 21 is a diagram showing an example of a result display screen displayed in step S215 of FIG. Referring to FIGS. 13, 20, and 21, when a combination (history) of a selection command that the door to be arranged is a maintenance door and a selection command for maintenance by interlock bypass is given (history) ( In step S203 (interlock bypass), the CPU 105 functioning as an output means displays that the “maintenance mode” is necessary as shown in FIG. 20 (step S213). In step S213, when the user selects the selection button 218 on the screen shown in FIG. 20A, the screen is switched to the screen shown in FIG. 20B, and the user selects the selection button 219 on the screen shown in FIG. Then, the screen is switched to the screen shown in FIG. Further, when the user selects the selection button 220 on the result display screen shown in FIG. 20 (c), the CPU 105 functioning as the output means selects “the door interface in the maintenance mode” as the safety measure selected as shown in FIG. “Lock” is displayed (step S215). Then, the process returns to step S7 shown in FIG.

  Here, the “maintenance mode” is a dedicated mode set at the time of maintenance work, and has control conditions different from the normal mode during normal operation. Generally, in the maintenance mode, the safety condition (interlock condition) is relaxed compared to the normal mode, so that only a specific maintenance worker who has sufficient knowledge about the hazard source can switch to the maintenance mode. Is configured to request an access code such as a password.

  The processes in steps S203 to S215 described above are safety policy selection processes for the door used by the maintenance worker. Next, the safety policy selection process for the door used by the operator will be described.

  In the dialog screen shown in FIG. 14, when the user selects the selection button 212, that is, when a selection command is given that the door to be arranged is a normal work door (normal work door in step S201), The CPU 105 functioning as an updating unit displays the dialogue screen shown in FIG. 22 on the monitor 102 among a plurality of dialogue screens stored in the hard disk 107 in advance.

  FIG. 22 is a diagram showing an example of the dialogue screen displayed in step S217 of FIG. Referring to FIGS. 13 and 22, when a selection command is given that the door to be arranged is a normal work door (normal work door in step S201), CPU 105 functioning as the updating means monitors As shown in FIG. 22, the display 102 is updated to an interactive screen asking whether or not the door can be opened while the apparatus is operating (step S203). That is, the CPU 105 functioning as an updating unit displays an interactive screen asking whether or not constant access is necessary during operation of the danger source. In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately display the dialogue screens shown in FIGS. 22A and 22B every predetermined time.

  In the dialog screen shown in FIG. 22, when the user selects the selection button 214, that is, when a selection command is given that the door can be opened while the apparatus is operating (YES in step S217), the updating means The CPU 105 that functions as the one displays a dialogue screen shown in FIG. 23 on the monitor 102 among a plurality of dialogue screens stored in the hard disk 107 in advance.

  FIG. 23 is a diagram showing an example of the dialogue screen displayed in step S219 of FIG. Referring to FIG. 13 and FIG. 23, when a selection command is given that the door can be opened while the apparatus is operating (YES in step S217), CPU 105 functioning as the updating means As shown in FIG. 23, the display is updated to an interactive screen asking whether or not the device stops as soon as the door is opened (step S219). Here, “the device stops as soon as the door is opened” is a question as to whether or not the danger source immediately stops in response to a stop command given by opening the door. In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately display the dialogue screens shown in FIGS. 23A and 23B every predetermined time.

  In the dialog screen shown in FIG. 23, when the user selects selection button 216, that is, when a selection command is given to stop immediately after opening (YES in step S219), CPU 105 functioning as an output means A result display screen shown in FIG. 24 among a plurality of result display screens stored in advance in the hard disk 107 is displayed on the monitor 102.

  FIG. 24 is a diagram illustrating an example of a result display screen displayed in step S221 of FIG. With reference to FIGS. 13 and 24, a selection command that the door to be arranged is a normal work door, a selection command that the door can be opened while the device is in operation, and that the door stops immediately if opened. When the combination (history) with the selection command is given (YES in step S219), the CPU 105 functioning as the output means sets “unlocked door interlock” as the selected safety measure as shown in FIG. It is displayed (step S221). Then, the process returns to step S7 shown in FIG.

  Here, the “unlocked door interlock” is a mechanism that does not have a function of locking the opening and closing of the door, but issues a stop command to the danger source when the door is opened. For the “door interlock without lock”, refer to pages 4 to 26 of the above-mentioned reference 1.

  On the other hand, when the user selects the selection button 215 on the dialogue screen shown in FIG. 22, that is, when a selection instruction is given that the user does not want to open the door while the apparatus is operating (NO in step S217). In this case, the CPU 105 functioning as an output unit displays a result display screen shown in FIG. 25 on the monitor 102 among a plurality of result display screens stored in the hard disk 107 in advance. Also, in the dialog screen shown in FIG. 23, when the user selects the selection button 217, that is, when a selection command is given that the door does not stop immediately after the door is opened (NO in step S219), the output is performed. The CPU 105 functioning as a means displays a result display screen shown in FIG. 25 on the monitor 102 among a plurality of result display screens stored in advance in the hard disk 107.

  FIG. 25 is a diagram showing an example of a result display screen displayed in step S223 of FIG. Referring to FIG. 13 and FIG. 25, a combination (history) of a selection command indicating that the door to be arranged is a normal work door and a selection command indicating that the door is not to be opened while the apparatus is in operation is given. (NO in step S217), or a selection command that the door to be arranged is a normal work door, a selection command that the door can be opened while the device is in operation, and immediately after the door is opened When a combination (history) with a selection command that does not stop is given (NO in step S219), the CPU 105 functioning as the output means selects “lock” as the safety measure selected as shown in FIG. "Type door interlock" is displayed (step S223). Then, the process returns to step S7 shown in FIG. Since “lock type door interlock” has been described above, detailed description will not be repeated.

[Safety policy selection process for access space]
As described above, after step S115 shown in FIG. 5, the process proceeds to a process flow for selecting a security policy for the access space.

  FIG. 26 is a flowchart (part 3) showing a safety policy selection process according to the present embodiment.

  Referring to FIG. 26, CPU 105 functioning as an updating unit displays an interactive screen on monitor 102 asking whether the access space is a gap where the arm does not enter or a space where the arm enters (step S301). That is, the CPU 105 functioning as an updating unit displays an interactive screen asking whether there is a possibility that a human arm may enter the access space.

  FIG. 27 is a diagram showing an example of the dialogue screen displayed in step S301 in FIG. In step S <b> 301, the CPU 105 functioning as an updating unit displays the dialogue screen shown in FIG. 27 on the monitor 102 among a plurality of dialogue screens stored in advance in the hard disk 107. In order to make it easier for the user to understand the meaning of the question, it is desirable that the dialogue screens shown in FIGS. 27 (a) and 27 (b) are alternately switched and displayed every predetermined time.

  In the dialog screen shown in FIG. 27, when the user selects the selection button 221, that is, when a selection command is given that the access space is a gap where the arm does not enter (in step S301, the arm does not enter), The CPU 105 functioning as the updating means displays the dialog screen shown in FIG. 28 on the monitor 102 among the plurality of dialog screens stored in the hard disk 107 in advance.

  FIG. 28 is a diagram showing an example of the dialog screen displayed in step S303 of FIG. Referring to FIG. 26 and FIG. 28, when a selection command is given that the access space is a gap where the arm does not enter (in step S301, the arm does not enter), the CPU 105 functioning as the updating unit monitors As shown in FIG. 28, the display 102 is updated to an interactive screen asking whether or not an interlock is necessary in the gap (step S303). In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately display the dialogue screens shown in FIGS. 28A and 28B every predetermined time. The term “interlock” here refers to a mechanism that stops a hazard when an arm enters the corresponding gap. “Interlock in the gap” refers to an interlock provided on the access path to the hazard. is there.

  In the dialog screen shown in FIG. 28, when the user selects selection button 223, that is, when a selection command indicating that no interlock is required is given to the gap (NO in step S303), CPU 105 functioning as an output means The result display screen shown in FIG. 29 among the plurality of result display screens stored in advance in the hard disk 107 is displayed on the monitor 102.

  FIG. 29 is a diagram showing an example of a result display screen displayed in step S305 of FIG. Referring to FIG. 26 and FIG. 29, when a combination (history) of a selection command indicating that the access space is a gap that does not allow an arm and a selection command indicating that no interlock is required in the gap is given (step S303). In step S305, the CPU 105 functioning as an output unit displays “space with a safety distance” as the selected safety measure, as shown in FIG. 29 (step S305). Further, the user may select a selection button 225 provided on the result display screen illustrated in FIG. 29 so that a guidance screen regarding the method for calculating the safe distance may be displayed. Then, the process returns to step S7 shown in FIG.

  On the other hand, in the dialog screen shown in FIG. 28, when the user selects the selection button 224, that is, when a selection command indicating that an interlock is necessary is given to the gap (YES in step S303), it functions as an output means. The CPU 105 displays a result display screen shown in FIG. 30 on the monitor 102 among a plurality of result display screens stored in the hard disk 107 in advance.

  FIG. 30 is a diagram showing an example of a result display screen displayed in step S307 in FIG. Referring to FIG. 26 and FIG. 30, when a combination command (history) of a selection command indicating that the access space is a gap where the arm does not enter and a selection command indicating that the interlock is necessary is given to the clearance (step S303). In the case of “YES”, the CPU 105 functioning as the output means displays “safe distance” and “interlock in single beam or SLC (Safety Light Curtain)” as the selected safety measures as shown in FIG. Step S307). Furthermore, the guidance screen may be displayed regarding the calculation method of the safe distance by the user selecting the selection button 226 provided on the result display screen shown in FIG. Then, the process returns to step S7 shown in FIG.

  Here, “single beam” and “SLC” mean a kind of photoelectric sensor including a light projecting unit and a light receiving unit, and “single beam” is a photoelectric sensor composed of a pair of light projecting unit and light receiving unit, “SLC” is a photoelectric sensor including a plurality of pairs of light projecting units and light receiving units. Either “single beam” or “SLC” is selected as appropriate depending on the detection range. For details of “single beam” and “SLC”, refer to pages 174 to 319 of the above-mentioned reference 1.

  The processes in steps S303 to S307 described above are safety policy selection processes in the case where the access space on the route to the danger source is a gap where the arm cannot enter. Next, safety policy selection processing when the access space is large enough to fit an arm will be described.

  In the dialog screen shown in FIG. 27, when the user selects the selection button 222, that is, when a selection command is given that the access space is a space where the arm enters (the arm enters in step S301), the updating means The CPU 105 that functions as the one displays a dialogue screen shown in FIG.

  FIG. 31 is a diagram showing an example of the dialogue screen displayed in step S309 of FIG. Referring to FIG. 26 and FIG. 31, when a selection command is given that the access space is a space where an arm enters (in step S301, the arm enters), the CPU 105 functioning as an updating unit As shown in FIG. 31, the display is updated to an interactive screen asking which one of detection and spatial detection between guards is necessary in a wide range (step S309). In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately display the dialogue screens shown in FIGS. 31A and 31B every predetermined time. That is, the CPU 105 functioning as an updating unit updates the dialog screen asking whether it is necessary to detect access within a predetermined range.

  In the dialog screen shown in FIG. 31, when the user selects the selection button 227, that is, when a selection command for detection is given in a wide range (wide range in step S309), the CPU 105 functioning as an output means has the hard disk 107. Among the plurality of result display screens stored in advance, the result display screen shown in FIG.

  FIG. 32 is a diagram showing an example of a result display screen displayed in step S311 of FIG. Referring to FIG. 26 and FIG. 32, when a combination command (history) of a selection command that the access space is a space where the arm enters and a selection command for detection in a wide range is given (wide range in step S309). The CPU 105 functioning as the output means displays “interlock by any one of the laser scanner, the plurality of SLCs and the mat sensor” as the safety measure selected as shown in FIG. 32 (step S311). Then, the process returns to step S7 shown in FIG. In order to indicate to the user that there are two options, the result display screens shown in FIGS. 32 (a), 32 (b), and 32 (c) are sequentially switched and displayed every predetermined time. Is desirable.

  Here, the “laser scanner” is a sensor including a light projecting unit and a corresponding light receiving unit that are rotatably arranged, and detects the approach of a person within a predetermined range. Further, the “mat sensor” is a sensor including a pressure-sensitive part laid on the floor surface, and detects the approach of a person within a predetermined range when a person enters the pressure-sensitive part. For details of the “laser scanner” and “mat sensor”, reference documents 1 to 360 to 365 described above and reference document 2 (OMRON Industrial Automation Business Company, Sales Control Division, “Safety Component Comprehensive Catalog 2006” PLUS ", July 2006, first edition), pages 151 and 152, and the like.

  On the other hand, when the user selects the selection button 228 on the dialog screen shown in FIG. 31, that is, when a selection command for space detection between guards is given (space detection in step S309), it functions as output means. The CPU 105 displays a result display screen shown in FIG. 33 on the monitor 102 among a plurality of result display screens stored in the hard disk 107 in advance.

  FIG. 33 is a diagram showing an example of a result display screen displayed in step S313 of FIG. Referring to FIG. 26 and FIG. 33, when a combination (history) of a selection command indicating that the access space is a space where an arm enters and a selection command for detecting a space between guards is given (in step S309, the space) For detection, the CPU 105 functioning as an output means displays “interlock by SLC” as the selected safety measure as shown in FIG. 33 (step S313).

  Thereafter, when the user selects the selection button 230 on the result display screen shown in FIG. 33, the CPU 105 functioning as the updating unit monitors the dialog screen shown in FIG. 34 among the plurality of dialog screens stored in the hard disk 107 in advance. To display.

  FIG. 34 is a diagram showing an example of the dialogue screen displayed in step S315 of FIG. Referring to FIGS. 26 and 34, CPU 105 functioning as the updating means updates the display on monitor 102 to an interactive screen asking whether or not to stop the danger source when the work is carried in / out (step S315). That is, the CPU 105 functioning as an updating unit displays an interactive screen asking whether or not it is necessary to put the danger source in a stopped state when the work is carried in / out of the danger source.

  When the user selects the selection button 231 on the dialog screen shown in FIG. 34, that is, when a selection command is given to stop the danger source at the time of loading / unloading the work (YES in step S315), the processing is as shown in FIG. Returning to step S7 shown in FIG.

  On the other hand, when the user selects the selection button 232 on the dialog screen shown in FIG. 34, that is, when a selection command is given to stop the danger source at the time of loading / unloading the workpiece (NO in step S315), As shown in FIG. 35, the CPU 105 functioning as the updating means displays a message indicating that a “muting system” is proposed (step S319).

  FIG. 35 is a diagram showing an example of the dialogue screen displayed in step S319 of FIG. Referring to FIGS. 26 and 35, CPU 105 functioning as the updating means updates the dialogue screen for proposing “muting system” (step S319). In other words, the CPU 105 functioning as the updating means proposes the introduction of a mechanism for temporarily disabling the detection function (interlock function) only when a work is carried into and out of the danger source. In order to make it easier for the user to understand the meaning of the muting mechanism, it is desirable to alternately switch and display the dialogue screens shown in FIGS. 35 (a) and 35 (b) every predetermined time. Furthermore, when the user selects the selection button 233 on the dialog screen shown in FIG. 35, the process proceeds to a muting system setting process to be described later.

[Muting system setting process]
As described above, after step S319 shown in FIG. 26, the process proceeds to a process flow for setting a muting system.

  FIG. 36 is a flowchart (No. 4) showing a safety policy selection process according to the present embodiment.

  Referring to FIG. 36, CPU 105 functioning as an updating unit displays an interactive screen on monitor 102 asking about the state of a danger source at the time of loading / unloading a workpiece (step S401). In other words, the CPU 105 functioning as the updating means displays an interactive screen asking whether to carry in / out only the workpiece during the operation of the danger source.

  FIG. 37 is a diagram showing an example of the dialog screen displayed in step S401 of FIG. In step S <b> 401, the CPU 105 functioning as an updating unit displays the dialogue screen shown in FIG. 37 on the monitor 102 among a plurality of dialogue screens stored in the hard disk 107 in advance. In order to make it easier for the user to understand the meaning of the question, it is desirable to alternately switch and display the dialogue screens shown in FIGS. 37 (a) and 37 (b) every predetermined time.

  In the dialog screen shown in FIG. 37, when the user selects the selection button 241, that is, when a selection command is given to carry in / out only the workpiece while the danger source is in operation (the danger source is in operation in step S 401). In this case, the CPU 105 functioning as an updating unit displays the dialogue screen shown in FIG. 38 on the monitor 102 among the plurality of dialogue screens stored in advance in the hard disk 107.

  FIG. 38 is a diagram showing an example of the dialogue screen displayed in step S403 of FIG. Referring to FIGS. 36 and 38, when a selection command is given to load / unload only the workpiece while the danger source is in operation (when the danger source is in operation in step S401), CPU 105 functioning as an updating unit. However, as shown in FIG. 38, the display on the monitor 102 is updated to an interactive screen asking which situation muting is to be performed (step S403). In order to make it easier for the user to understand the meaning of the question, the dialog screens shown in FIGS. 38 (a), 38 (b), and 38 (c) are sequentially switched and displayed every predetermined time. Is desirable.

  In the dialog screen shown in FIG. 38, when the user selects the selection button 243, that is, when a selection command indicating that muting is required only for the workpiece is taken out from the danger source (carrying out in step S403). The CPU 105 functioning as output means displays on the monitor 102 a result display screen shown in FIG. 39 among a plurality of result display screens stored in advance in the hard disk 107.

  FIG. 39 is a diagram showing an example of a result display screen displayed in step S405 of FIG. 36 and 39, there are a selection command for loading and unloading only a workpiece while the danger source is in operation, and a selection command for requiring muting only for the workpiece when unloading from the danger source. When a combination (history) is given (carry out in step S403), the CPU 105 functioning as an output means displays “exit-only muting” as the selected safety measure as shown in FIG. 39 (step S405). ). Further, the user may select a selection button 246 provided on the result display screen shown in FIG. 39, so that a guidance screen regarding the function explanation of exit-only muting may be displayed. Then, the process returns to step S7 shown in FIG.

  Also, in the dialog screen shown in FIG. 38, when the user selects the selection button 244, that is, when a selection command indicating that muting is required only for the workpiece when carrying in from outside the danger source is given (in step S403). For carrying in), the CPU 105 functioning as output means displays a result display screen shown in FIG. 40 on the monitor 102 among a plurality of result display screens stored in advance in the hard disk 107.

  FIG. 40 is a diagram showing an example of a result display screen displayed in step S407 of FIG. 36 and FIG. 40, there are a selection command for loading and unloading only a workpiece while the danger source is in operation, and a selection command for requiring muting only for the workpiece when loading from outside the danger source. When a combination (history) is given (loading in step S403), the CPU 105 functioning as an output means displays “entrance-only muting” as the selected safety measure as shown in FIG. 40 (step S407). ). Further, the user may select a selection button 247 provided on the result display screen shown in FIG. 40 so that a guidance screen is displayed for explaining the function of entrance-only muting. Furthermore, the calculation formula for entrance-only muting may be displayed by the user selecting a selection button 248 provided on the result display screen shown in FIG. Then, the process returns to step S7 shown in FIG.

  In addition, when the user selects the selection button 245 on the dialog screen shown in FIG. 38, that is, when a selection command indicating that muting is required only for the workpiece when carrying in / out from the inside or outside of the hazard source (step) In step S403, the CPU 105 functioning as an output unit displays a result display screen shown in FIG. 41 on the monitor 102 among a plurality of result display screens stored in advance in the hard disk 107.

  FIG. 41 is a diagram showing an example of a result display screen displayed in step S409 of FIG. 36 and 41, a selection command for loading / unloading only a workpiece while the danger source is in operation, and a selection command for requiring muting only for the workpiece when loading / unloading from / inside the hazard source When the combination (history) is given (loading / unloading in step S403), the CPU 105 functioning as an output means displays “loading / unloading muting” as the selected safety measure as shown in FIG. (Step S409). Further, the user may select a selection button 249 provided on the result display screen shown in FIG. 41 so that the guidance screen is displayed for explanation of the function of carry-in / out muting. Then, the process returns to step S7 shown in FIG.

  On the other hand, in the dialog screen shown in FIG. 37, when the user selects the selection button 242, that is, a selection command is given to carry in the workpiece when the danger source is in a place where it is not directly dangerous. In such a case (there is no direct danger in step S401), the CPU 105 functioning as output means displays the result display screen shown in FIG. 42 on the monitor 102 among a plurality of result display screens stored in advance in the hard disk 107. To do.

  FIG. 42 is a diagram showing an example of a result display screen displayed in step S411 of FIG. Referring to FIG. 36 and FIG. 42, when a selection command is given to load a workpiece when the danger source is in a place where it is not directly dangerous (in step S401, there is no direct danger). The CPU 105 functioning as an output means displays “position detection muting” as the selected safety measure as shown in FIG. 42 (step S411). Further, the user may select a selection button 250 provided on the result display screen illustrated in FIG. 41 so that a guidance screen is displayed for explaining the function of position detection muting. Then, the process returns to step S7 shown in FIG.

[Risk assessment sheet output]
The risk assessment sheet is completed by executing the above-described safety policy selection process for each of the target devices set in FIG.

  FIG. 43 is a diagram showing an example of a risk assessment sheet generated by the consulting apparatus according to the present embodiment. Referring to FIG. 43, a risk assessment sheet based on a risk evaluation method selected in advance is generated for each target device.

  According to the present embodiment, the user simply selects the target risk source status sequentially in accordance with the dialogue screen including the question regarding the risk source status, and can select a safety measure suitable for the target risk source. Can be determined. Therefore, even a user who does not have prior knowledge about the safety policy can select the safety policy based on an evaluation standard that is appropriately and objectively unified according to the situation of the danger source.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

It is a perspective view which shows the computer which is a typical hardware configuration for implement | achieving the consulting apparatus according to this Embodiment. It is a perspective view which shows the computer which is a typical hardware configuration for implement | achieving the consulting apparatus according to this Embodiment. It is a flowchart which shows the whole process which concerns on the consulting apparatus according to this Embodiment. It is a figure which shows an example of the setting input screen of the object apparatus in step S1 shown in FIG. It is a flowchart (the 1) which shows the selection process of the safety policy according to this Embodiment. It is a figure which shows an example of the dialogue screen displayed in step S101 of FIG. It is a figure which shows an example of the result display screen displayed in step S103 of FIG. It is a figure which shows an example of the result display screen displayed in step S105 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S107 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S109 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S111 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S113 of FIG. It is a flowchart (the 2) which shows the selection process of the safety policy according to this Embodiment. It is a figure which shows an example of the dialogue screen displayed in step S201 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S203 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S205 of FIG. It is a figure which shows an example of the result display screen displayed in step S207 of FIG. It is a figure which shows an example of the result display screen displayed in step S209 of FIG. It is a figure which shows an example of the result display screen displayed in step S211 of FIG. It is a figure which shows an example of the result display screen displayed in step S213 of FIG. It is a figure which shows an example of the result display screen displayed in step S215 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S217 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S219 of FIG. It is a figure which shows an example of the result display screen displayed in step S221 of FIG. It is a figure which shows an example of the result display screen displayed in FIG.13 S223. It is a flowchart (the 3) which shows the selection process of the safety policy according to this Embodiment. It is a figure which shows an example of the dialogue screen displayed in step S301 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S303 of FIG. It is a figure which shows an example of the result display screen displayed in step S305 of FIG. It is a figure which shows an example of the result display screen displayed in step S307 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S309 of FIG. It is a figure which shows an example of the result display screen displayed in step S311 of FIG. It is a figure which shows an example of the result display screen displayed in step S313 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S315 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S319 of FIG. It is a flowchart (the 4) which shows the selection process of the safety policy according to this Embodiment. It is a figure which shows an example of the dialogue screen displayed in step S401 of FIG. It is a figure which shows an example of the dialogue screen displayed in step S403 of FIG. It is a figure which shows an example of the result display screen displayed in step S405 of FIG. It is a figure which shows an example of the result display screen displayed in step S407 of FIG. It is a figure which shows an example of the result display screen displayed in step S409 of FIG. It is a figure which shows an example of the result display screen displayed in step S411 of FIG. It is a figure which shows an example of the risk assessment sheet | seat produced | generated by the consulting apparatus according to this Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Computer 10,14,16 field, 101 Computer main body, 102 Monitor, 103 Keyboard, 104 Mouse, 106 Memory, 107 Hard disk, 109 Communication interface, 111 FD drive device, 112 Flexible disk, 113 CD-ROM drive device, 114 CD-ROM, 201-233, 241-250 selection buttons.

Claims (11)

A consulting device for selecting a safety policy according to the situation from a plurality of predetermined safety policies,
Display means for displaying a dialogue screen including a question about the status of the hazard on the display unit;
Update means for selecting at least one of a plurality of dialogue screens stored in advance in the storage unit and updating the currently displayed dialogue screen to the selected dialogue screen in response to a selection command given from the input unit When,
When the history of the selection command given in association with each dialogue screen becomes a predetermined value, the history is selected from the plurality of result display screens stored in advance in the storage unit for notifying safety measures. with selecting at least one associated, e Bei and output means for outputting the result display screen that the selected on the display unit,
The display means displays a first dialog screen asking whether periodic access to the hazard is necessary;
The output means outputs a corresponding first result display screen to the display unit when a selection command indicating that periodic access to the danger source is unnecessary is given on the first dialog screen. ,
The update means asks whether or not a person accesses the danger source when a selection command is given on the first dialog screen that requires periodic access to the danger source. A consulting device that displays a second dialog screen . The update means asks whether or not the danger source can be isolated by a door when a selection command is given to the person to access the danger source on the second dialog screen. Display the dialogue screen of
The update means displays a fourth dialog screen for selecting a safety policy for the door when a selection command is given that the danger source can be isolated by the door in the third dialog screen. Display
In the third dialog screen, the update means is provided with a selection command indicating that the danger source cannot be isolated by a door, or a person has made a response to the risk source in the second dialog screen. The consulting apparatus according to claim 1 , wherein a fifth dialog screen for selecting a safety policy for an access space with respect to the danger source is displayed when a selection instruction not to access is given. The fourth dialog screen includes a screen asking whether or not the person using the door is a maintenance worker,
Whether or not the updating means can be accessed after the hazard source is stopped when a selection command is given that the person using the door is a maintenance worker on the fourth dialog screen. Display the 6th dialogue screen to ask
The updating means needs to access the hazard source in the entire human body when a selection command is given to allow access after the hazard source is stopped in the sixth dialog screen. Display a seventh dialogue screen asking whether or not
The output means outputs a corresponding second result display screen to the display unit when a selection command indicating that access to the danger source is unnecessary for the entire human body is given on the seventh dialog screen. On the other hand, when a selection command indicating that access to the danger source is necessary for the entire human body is given on the seventh dialog screen, a corresponding third result display screen is output to the display unit. The consulting apparatus according to claim 2 . The output means outputs a corresponding fourth result display screen to the display unit when a selection command indicating that access is not possible after the danger source is stopped in the sixth dialog screen is given. The consulting apparatus according to claim 3 . The updating means determines whether or not constant access is required during operation of the hazard source when a selection command is given that the person using the door is not a maintenance worker on the fourth dialog screen. Display the 8th dialogue screen to ask
In the eighth dialog screen, when the selection command indicating that constant access is required during the operation of the danger source is given, the update means immediately stops the danger source in response to the stop command. Display a ninth dialogue screen asking whether or not
The output means displays a corresponding fifth result display screen on the display unit when a selection command is given on the ninth dialog screen that the danger source immediately stops in response to the stop command. Output to
The output means receives a selection command indicating that constant access is unnecessary during operation of the danger source on the eighth dialog screen, or the danger source responds to a stop command on the ninth dialog screen. The consulting apparatus according to claim 3 or 4 , wherein when a selection command is given that the stop state does not immediately occur, a corresponding sixth result display screen is output to the display unit. The fifth dialog screen includes a screen asking whether there is a possibility that a human arm enters the access space;
The updating means requires an interlock on the access path to the danger source when a selection command is given that there is no possibility that a human arm enters the access space on the fifth dialog screen. Display the 10th dialogue screen to ask if there is,
The output means outputs a corresponding seventh result display screen to the display unit when a selection command indicating that an interlock is unnecessary is given on the access path to the danger source in the tenth dialog screen. On the other hand, when a selection command indicating that an interlock is necessary is given on the access path to the danger source in the tenth dialog screen, a corresponding eighth result display screen is output to the display unit. The consulting apparatus according to any one of claims 2 to 5 . Whether the update means needs to detect access within a predetermined range when a selection command is given that a human arm may enter the access space on the fifth dialog screen. Display the 11th dialogue screen to ask
The output means outputs a corresponding ninth result display screen to the display unit when a selection command indicating that an access within a predetermined range needs to be detected is given on the eleventh interactive screen. , when said selection command with unnecessary detection of access within a predetermined range is given in the first 11 interactive screen, and outputs a corresponding first 10 result display screen on the display unit, according to claim 6 Consulting equipment. The update means asks whether or not the danger source needs to be stopped when the work is carried into and out of the danger source after the output means outputs the tenth result display screen. Display 12 dialogue screens,
The update means temporarily performs a detection function when a selection command is given on the twelfth dialog screen that indicates that it is not necessary to stop the danger source when the work is carried into and out of the danger source. The consulting apparatus according to claim 7 , wherein the consulting apparatus displays a thirteenth dialog screen for invalidation. The thirteenth dialogue screen includes a screen asking whether to carry in / out only the workpiece during operation of the danger source,
The update means asks which one of the work loading and unloading is required when a selection command is given to load and unload only the work during the operation of the danger source on the thirteenth dialog screen. Display the 14th dialogue screen,
The output means outputs a corresponding eleventh result display screen to the display unit when a selection command indicating that only the work needs to be carried out is given on the fourteenth dialog screen, and the fourteenth dialog When a selection command indicating that only the work needs to be carried in is given on the screen, a corresponding twelfth result display screen is output to the display unit, and both the work carrying in and the work out are carried out on the fourteenth dialog screen. Is output to the display unit, the corresponding thirteenth result display screen is output.
The output means displays a corresponding fourteenth result display screen when a selection instruction is given to include the case other than the case of loading and unloading only the workpiece during the operation of the danger source on the thirteenth dialog screen. The consulting apparatus according to claim 8 , which outputs to a display unit. Further comprising a second output means for outputting a risk assessment sheet showing the selected safety measures, consulting device according to any one of claims 1-9. A consulting program that is installed in a computer including a display unit, an input unit, and a storage unit, and operates the computer as a consulting device that selects a safety policy according to the situation among a plurality of predetermined safety policies, The consulting program uses the computer,
Display means for displaying a dialogue screen including a question regarding the status of the hazard on the display unit;
In response to a selection command given from the input unit, at least one of a plurality of dialogue screens stored in advance in the storage unit is selected, and the currently displayed dialogue screen is updated to the selected dialogue screen. Update means;
When the history of the selection command given in association with each dialogue screen becomes a predetermined value, the history is selected from the plurality of result display screens stored in advance in the storage unit for notifying safety measures. with selecting at least one associated, to function as an output unit for outputting the result display screen that the selected on the display unit,
The display means displays a first dialog screen asking whether periodic access to the hazard is necessary;
The output means outputs a corresponding first result display screen to the display unit when a selection command indicating that periodic access to the danger source is unnecessary is given on the first dialog screen. ,
The update means asks whether or not a person accesses the danger source when a selection command is given on the first dialog screen that requires periodic access to the danger source. Consulting program that displays the second dialog screen .