WO2008064381A2

WO2008064381A2 - Method for the operation of a wireless communication link between a mobile manual operator device and a machine controller, and corresponding system components

Info

Publication number: WO2008064381A2
Application number: PCT/AT2007/000525
Authority: WO
Inventors: Werner Schwarz; Jürgen Hofer
Original assignee: Keba Ag
Priority date: 2006-11-28
Filing date: 2007-11-21
Publication date: 2008-06-05
Also published as: AT504670B1; AT504670A4; WO2008064381A8; WO2008064381A3; DE112007002876A5

Abstract

The invention relates to a method for operating a data communication link between a wireless data-linked mobile manual operator device (2) and a machine controller with the help of at least one bidirectional first radio link (13) and an at least largely concurrent bidirectional second radio link (14) that is technically separated from the first radio link (13). The mobile manual operator device (3) comprises at least one protective switching element (25; 26) for reliably terminating potentially dangerous processes and operating states of the controlled technical apparatus (6). The mobile manual operator device (2) further comprises output means (29) for outputting information. All of the transmitted data, command and safety information is subdivided into a first class of data that has high time priority and a second class of data which has low time priority. The data from the first class of data is transmitted via the first radio link (13) while the data from the second class of data is transmitted via the second radio link (14).

Description

Method for operating a wireless communication connection between a mobile handheld terminal and a machine control and corresponding system components

The invention relates to a method for the wireless data connection of a mobile handheld terminal for the delivery of control commands and for the output of information to the controller of a controllable technical device, as described in claim 1.

The subject invention further relates to a system according to claim 13, consisting of a mobile handheld terminal and a corresponding radio data-coupled machine control for a controllable technical device, a machine tool, a system or a technical process, and a mobile handheld terminal according to claim 29 and a programmable machine control according to Claim 41.

A mobile handheld terminal, sometimes also referred to as a mobile operating and monitoring device, is to be understood in the context of this document as a mobile, in particular portable operator control and monitoring device for the visualization of general process data, machine and operating conditions, as well as for or output of general textual or graphical information and occasionally also of multimedia content, as well as for the operation of machines, robots or other technical equipment, controllable devices and processes. A mobile hand-held device often, but not necessarily, has a high-resolution color display for sophisticated visual output of information and images. Furthermore, such a hand-held operating device comprises input means, such as e.g. a keyboard, a joystick, a track ball, a potentiometer or a rotary encoder for the delivery of control commands to the machine control for the direct influence of the controllable technical device, as well as occasionally a Betriebsartenwahlschalter or key switch or similar input means. The display can also be equipped with a so-called touch screen for user input in order to enable flexible, powerful and graphically oriented user communication.

Furthermore, these handheld terminals have one or more processors and storage means and interfaces for data connection to a machine control. At Speaking powerful handhelds come well-known and commercially available operating systems such as Windows CE or appropriately adapted versions of Linux or similar used.

For the subject mobile hand-held devices is typical that they are for the delivery of

Control commands in so-called special modes of a machine (such as a robot) are suitable. In contrast to the fully automatic operation of systems, in which the safety for persons is ensured, for example, by closed fences, the operator is in the immediate influence and danger zone of the machine during such special operating modes, ie within a protective fencing. Any potentially hazardous machine function is performed only then and only so long, if and as long as the operator releases this function by the operation of a special safety switching element, namely a so-called enabling button. The enabling button is designed according to special safety guidelines switching element and usually three-stage and two-channel. In addition, mobile handheld terminals of this kind occasionally also have emergency stop buttons or comparable safety switching elements, upon actuation of which the associated machine is shut down as quickly as possible and a danger state or emergency situation is ended. An operating mode selector switch or key switch may also be designed as a special safety switching element, and e.g. be built redundantly two-circuit and the operating state of two channels redundant detected and transmitted to the controller or the safety circuit of the machine.

For the mobile handheld terminals according to the invention is further essential that the data technology coupling to the control of a machine is wireless, in particular via a radio link. This ensures optimum freedom of movement for the user while using the handheld terminal.

From the point of view of the world-wide possible usability of such devices, any proprietary methods, frequencies and protocols are out of the question for the radio-technical connection of a mobile hand-held terminal, since the individual authorizations required in each case would represent an unacceptably high effort or would not be achievable at all. As internationally broadly approved, cost-effective and principally usable radio standards are therefore for example WLAN (Wireless LAN) and BlueTooth as well as DECT, Zigbee or similar in question. All of these standard technologies have strengths and weaknesses and in the future will experience considerable or more or less massive, downward-compatible further developments.

The transmission of the safety critical signals and information from the safety switching elements over non-wired links requires a cyclic, i. quasi-continuous monitoring of an intact connection with corresponding real-time requirements, i. maximum permissible transmission delays. While a brief interruption in the transmission of general data or visualization data usually results in only a noncritical delay in image build-up, the interruption of the transmission of security data causes significant functional disturbances. If the connection is interrupted or delayed, the transmission of a data packet with such safety-related information, this is detected by a monitoring device on the machine control or part of the machine control and must be considered there as a defect or unsafe operating condition. But this means that the system must be shut down immediately. Thus, regardless of the quality and reliability of the radio transmission path, the personal safety of the system is ensured, however, leads to a poor wireless connection to an unacceptable operational reliability and the unacceptable frequency of unwanted interruptions in operation with correspondingly high costs. Since the safety of people in the value above the protection of the system In the event of such safety-related emergency shutdowns, the interruption of ongoing processes may even result in damage to the plant or workpieces or at least because of the interruption to quality problems in series production (interruption of production cycles, deviating production parameters in the restart phase).

There are also certain real-time requirements for the transmission of the control commands from the handheld terminal to a machine control. Too long a delay between issuing a command and executing on the machine is unacceptable when making adjustments or teaching a robot. The reaction of the machine must take place virtually without delay for the operator's feeling.

Because standard wireless technologies, which are suitable for widespread global deployment, are primarily developed for the broad consumer sector and not for security-critical purposes Although there are no or only very limited real-time capabilities, creating sufficient operating reliability while at the same time requiring personal safety poses a major challenge. The problem of the reliability of standard wireless technologies is exacerbated considerably as soon as a plurality of devices are within the usual communication range communicates in the same radio frequency band and these interfere with each other. The numerous and sometimes high-energy sources of interference in an industrial environment also affect the reliability. These errors increase the communication errors and the number of transmission attempts required, which increases the transmission delays that occur.

Another problem arises when for the transmission between a manual control unit and the control of a machine, at least as part of the transmission path already existing in the machine hall network is to be used. The different components of such networks do not belong to the scope of delivery of the manufacturer of the hand-held operating devices or the machine control, but come from different device manufacturers. Also utilization and operating parameters of such networks can vary within wide ranges. Often there is also a connection to the company's general office data communications network. Such networks therefore have highly variable suitability, quality and reliability and are not suitable for the transmission of information under real-time conditions, in particular of safety switching states. If such a network also includes the radio coverage (for example WLAN), then the organization results in individual brief and partially overlapping radio cells additional short-term interruptions in the automatic change from one radio cell to an adjacent cell, the so-called roaming.

On the other hand, using these existing corporate networks allows for particularly easy access to the data of the networked machines and the retrieval of all other information from servers and other data sources of the network. Also, the transmission bandwidths of such a network are usually quite sufficient for the transmission of multimedia data and also of visualization data of a machine. For the users of the hand-held operating devices, there is therefore an increasing demand for a modern, powerful hand-held operating device with a simple and powerful access option to such an already existing company network. As the state of the art, from the international patent application WO 2006/000264 a controller for a robot including a wirelessly connected handheld terminal with safety switching elements is known. However, this solution takes into account only the safety-technically relevant requirements of the handheld terminal, such as the two-channel detection and transmission of the operating states of the safety switching elements, but not the same existing requirements for a broadband data link to the machine control or even to the general network infrastructure Site with numerous communication participants for the transmission of large amounts of data for a powerful visualization or for multimedia applications.

While in the cited prior art the use of a general wireless network and specifically of BlueTooth is called, a problem occurring in the practical realization remains completely unconsidered. Compliance with the common radio standards requires, in addition to certain physical signal characteristics, relatively complex protocols to ensure interoperability and compatibility with other radio subscribers. These protocols are usually implemented in quite complex multi-layered software structures that are executed on a corresponding processor. Some such software parts already exist as part of the operating system used or they can be obtained as a software module from the manufacturer of the chips for the radio technology. But there are already complete intelligent wireless modules along with their own communication processor and software commercially available at low cost, which handle the entire wireless protocol and communicate via an already very simple standardized interface (eg Ethernet, SPI or UART) with a main processor, on which finally includes the operating system the application software is executed.

However, these commercially inexpensive software and hardware modules do not or insufficiently address the simultaneous transmission of large amounts of data without special real-time visualization requirements associated with smaller amounts of data for high-priority, cyclic and delay critical transmission of the security data and control commands in a common data stream. This would sometimes require relatively complex customer-specific changes and enhancements to these standard products, including extensive tests, and there would still be a risk Incompatibilities to the respective radio standard, which would also occur again when changing the chip manufacturer or updates of the standard products.

The safety data are provided in the handheld terminal by separate evaluation circuits, which record the switching states of the safety switching elements in multiple circuits, check them and provide them with appropriate test information. At the other end of the transmission path, at the machine control, correspondingly assigned circuits are provided, which receive the security data intended for them, check their authenticity and feed them into the safety circuit of the machine in a suitable form. Preferably, these evaluation circuits are diverse, so realized with different technical means, so that when a certain error occurs in the evaluation circuit of one of the circles of the other circle does not have this error and thus a loss of security does not occur. This method is described both in WO 2006/000264 and in other publications and safety standards and is well known. The security, i. the safe stopping of the machine is ensured exclusively by the evaluation circuits and the correspondingly associated receiving circuits. Misguided, manipulated, delayed, or missing security information causes the receiving circuits to shut down the machine.

If these safety data are now to be transmitted together with the general control and visualization data in a common technical data transmission channel, the safety data must normally be read by the evaluation circuits and transmitted by the main processor to the radio module. To delay the data transfer channel comes with it still the reaction or delay time of the main processor added, which can be quite significant depending on the operating system used. Depending on the operating system used, the delay time can also be affected by various user programs running on the handheld terminal, which the actual manufacturer of the handheld terminal does not influence and can hardly foresee.

In addition, there is the problem that when passing through the security data by the main processor this can not be easily put into a power-down mode with reduced power consumption or even switched off completely in the phases with low computing power, since then the reaction time when transmitting the security information to Radio interface would be extended additionally. However, the main processor is next to the display one of the main energy consumers in a mobile handheld device, so that this circumstance is at the expense of the available battery life.

An object of the invention is therefore to provide a method for reliable and efficient wireless connection of a mobile handheld to the control of a controllable technical device via radio, taking into account real-time requirements or time priorities for the transmission of commands and security signals for immediate and quasi delay-free influencing the controlled technical facility. Another object of the invention is to provide a mobile handheld terminal, a machine control and a system for carrying out the method.

The task is inventively achieved by a method according to claim 1.

According to the method according to the invention, two technically independent radio links are operated in parallel for the communication between the mobile hand-held operating device and the machine control, and the data for transmission are separated into a part or a class with high-priority information, including the safety information, and into a remaining one Part or a class with lower-priority information, including the visualization data. All high-priority data is transmitted exclusively over one of the two radio links, while the lower-priority data is transmitted over the second radio link. During the operation on a machine, both radio links are in common use.

This solution surprisingly has a whole series of advantages and hardly foreseeable effects compared to the prior art approaches known from the prior art.

The high-priority control commands and safety data and the low-priority but extensive visualization data sometimes have different origins and different goals in the handheld terminal, namely the special safety evaluation circuits and the main processor with the operating system and the application program. The critical assembly and separation of the data streams under consideration The different priorities are made unnecessary by the separate transmission links. Furthermore, when concatenating several technologically different data paths, any problems with different priorities in implementing the protocols are largely avoided.

This solution according to the invention allows the use of the standard protocols and standard drivers for the individual radio links and does not require any application-specific and error-critical adaptations. On the one hand, development costs are saved, risks are avoided, and on the other hand, various providers of radio technologies can alternatively and quickly be integrated into a product line.

Different radio technologies or operating modes can also be used for the two radio links, which are optimally adapted to the respective requirements of the data components to be transmitted. For example, WLAN can be used for the broadband transmission of general data, visualization data or multimedia information and a comparatively more robust but slower BlueTooth connection for the smaller amount of high-priority command and safety data. In particular, it is also possible to flexibly address the special requirements of an end user with an already existing network infrastructure, which can then be used for broadband access to general data, multimedia data and visualization data, while at the same time time-critical security and security processes Control data via a more technologically robust radio technology are transmitted directly to the respective control.

The different common performance classes of handheld terminals differ in addition to the number and features of the controls mainly in their capabilities for visualization, the display size and the complexity of the representations, the processor power and the memory size and finally in the amount of data to be transmitted by the machine control. However, the scope of safety data and direct control command data, as well as the reliability requirements for their transmission, are broadly similar across all power classes. Due to the separation of these data and the separate transmission, a once safety-certified and reliably functioning partial solution for the transmission of high-priority data for all performance classes of a product series of wireless handheld terminals can be reused virtually unchanged be selected while the second radio link for the general user data depending on the visualization and multimedia capabilities, the resulting data volumes and processor performance can be selected appropriately, without any cross-influences or development risks in terms of real-time requirements and safety technology are to be feared. Overall, this results in a faster, more cost-effective and lower-risk development as well as greater reliability and safety of the resulting products.

While the advent of general data, visualization and multimedia data in operation is subject to a wide range of variation and can be estimated with less accuracy, the data traffic with special real-time requirements is relatively clearly demarcated, so that by using a separate link for this data class, relatively reliable estimations are made Utilization, timing and transmission reliability. This also makes it possible to more easily determine and specify the required framework conditions for the reliable operation of the mobile handheld terminal, for example the maximum number of such handheld terminals within a specific environment.

In addition, the two completely separate radio links can also be used for redundant transmission of certain information or for plausibility checks, so that about a temporary disturbance on one of the radio links unwanted interruption or safety shutdown of the machine is prevented or when establishing the radio connection to a particular machine control, which is selected from a plurality of possible machine controls, the risk of erroneous assignment is reduced. In particular, by using two different radio technologies, to which external disturbances normally have a different effect, the reliability of operation can be increased.

The separate radio link eliminates the passing through of the security data by the main processor of the handheld terminal, whereby an additional delay of the main processor in the transmission is generally eliminated. In this way, the main processor can advantageously also be transposed into a power-saving mode only temporarily and can nevertheless continue to transmit the safety data without interruption and maintain the connection to the machine control. This reduces the Energy consumption of the handheld terminal and increases according to the battery life or it can be used a battery with lower capacity and thus lower weight, which in turn is beneficial to the ergonomics of the handheld.

The advantageous method according to claim 2 ensures that the actuation states of input means and thus the corresponding control commands for immediate execution by the controlled technical device are transmitted and executed quickly and without unacceptable delay. As a result, adjustments under the immediate visual control by the operator are much easier and overshooting an actually desired target point by delayed command transmission is avoided.

The advantageous method according to claim 3 ensures that the actuation states of the safety switching elements are transmitted with high priority and undisturbed by a parallel transmission of broadband data to the controlled technical device. While safety is mainly guaranteed by continuous monitoring of the upright communication connection between the handheld terminal and the controller and an interruption to the immediate shutdown of the system leads, this advantageous embodiment ensures that the security data are preferred and particularly reliable transmitted to the controller, causing the problem of unwanted emergency shutdown is alleviated by a transmission delay.

The configuration of the method according to claim 4 or claim 5 ensures that usually extensive data, which require a data channel with high transmission bandwidth, but on the other hand have no particularly high temporal priority, are not transmitted together with high-priority data and thus the reliable and timely Transmission of high-priority data.

The method according to claim 6 increases the transmission reliability and usually also the achievable transmission bandwidths of the two radio transmission links used. In this case, for example, for the communication according to the radio standards used available frequency bands, time slots or transmission power can be optimally divided according to the required bandwidth and priority between the two radio transmission links. The method according to claim 7 increases the transmission reliability analogous to claim 6, but with the objective of an optimal transmission power of the first radio transmission path for the high-priority data, optionally at the expense of the transmission power on the second radio transmission path.

The advantageous embodiment of the method according to claim 8 takes into account in particular the fact that the automatic transmission of radio communication with some very high transmission power send out general data telegrams to potential radio stations and thus other operated nearby radio links can be temporarily affected. In the embodiment according to claim 8, the pairing of the handheld terminal and machine control takes place only via one of the two radio transmission links, while the suitable addresses and parameters for the other radio transmission path are exchanged via the previously established connection. Particularly in the case of technologically differently configured first and second radio transmission paths, it is possible to implement particularly unambiguous assignment methods in connection with special properties, such as a defined limited communication range. It is also ensured in particular that the two radio transmission links are actually established between the two same communication partners.

In the advantageous method according to claim 9, the fact is taken into account that the high-priority data have only a limited validity and are therefore continuously updated and transmitted to the machine control. In the case of a transmission error, however, this makes no sense in retransmitting the incorrectly transmitted data telegram. Instead, the next telegram is simply transmitted with updated data. The current data thus arrive faster to the receiver, as in a repetition of the erroneous data telegram.

The embodiment of the method according to claim 10 makes it possible to ensure that no obsolete control commands and security information are processed and thus unwanted functions are triggered or dangerous operating states are brought about.

The advantageous embodiment of the method according to claim 11 allows especially when The occurrence of disturbances on the radio transmission links and a concomitant impairment of the operational reliability of a diagnosis with regard to the possible causes and possible approaches to improve the transmission quality. In addition, before the execution of particularly critical operator actions, a check of the current connection quality can be made, and in the case of unfavorable conditions appropriate remedies or alternatives can be taken.

The method according to claim 12 allows not only the use of the manual control unit for operating tasks but also the temporary exclusive use for visualization or diagnostic purposes without taking immediate influence on the program-controlled process of the controlled technical device. The operator is also not in the immediate physical sphere of influence of the controlled technical device, that is, for example, outside a Sicherheitsumzäunung, so that there are no high-priority control or safety data to be transmitted. A correspondingly confusion-proof and complex production of the first radio transmission path, for example with verification of the spatial proximity or an existing visual contact with the controlled technical device or another authorization check, can therefore be dispensed with.

The further object of the invention is achieved by the embodiment according to claim 13, whereby a system for implementing the erfϊndungsgemäßen method is provided according to claim 1.

Due to the embodiment according to claims 14, 15, 16 and 17, an advantageous division of the various accumulating data is achieved on the two radio transmission links, thus enabling reliable transmission of high-priority data.

The embodiment according to claim 18 extends the scope of functions to the effect that the operator can not only query data directly from a specific machine and visualize it on the handheld terminal, but that other sources of information can be queried at any time. This is particularly advantageous for repair work or service work, if, for example, service manuals, operating instructions or design documents can be displayed directly. Also during set-up work on generating machines or the like required additional information, for example, about the respective job or the workpiece can be accessed and displayed by a central server.

The advantageous embodiment of the system according to claim 19 enables the optimal adaptation or selection of the parameters and operating characteristics of the respective radio transmission links to the requirements of the data to be transmitted. In addition, certain advantageous additional functions of a particular radio standard, such as a position determination in a network, can be combined with the advantages of another radio standard, such as a secure point-to-point connection.

In the system according to claim 20 it is ensured that the radio transmission path has only exactly two communication partners and thus a misdirection of data telegrams or the coupling of foreign data telegrams is prevented.

The system according to claim 21 is an advantageous development, in which particularly suitable and widely used and easily usable radio standards are used for the second radio transmission path.

The advantageous embodiment according to claim 22 allows easy access to different, spatially distributed data and information sources. Furthermore, it is possible to use a network that already exists at the place of deployment, including the connected information processing components, such as databases and secure Internet access.

In the system according to claim 23, another advantageous feature of the solution according to the invention comes into play, since in this case an existing general information infrastructure can be shared by several, simultaneously operated mobile handheld devices for the relatively large amount of general data without special real-time and security requirements.

Due to the configuration according to claim 24, a larger area despite relatively low transmission power of the individual radio access nodes can be reliably radio-lit become. Due to the lower transmission power required, several radio subscribers, in particular several handheld terminals, can be operated in the entire area and use the same frequency bands without disturbing each other. Furthermore, a longer battery life is made possible by the lower transmission power required in the handheld terminal. In addition, a plurality of radio access nodes also enables the basic realization of a localization of a handheld terminal within the area with the radio access nodes.

The embodiment according to claim 25 allows the change of location with a mobile handheld device beyond the transmission and reception range of a single radio access node, without interrupting an existing data connection.

In a system according to claim 26, a particularly suitable and widely used radio standard for the realization of the second radio transmission path is used.

Due to the configuration according to claim 27, information about the current location is provided on the handheld terminal. This information can be used to provide other useful functions, in particular in connection with personal safety and certain special danger areas, or also in connection with automatic notification of fault messages, or for automatic logon or assignment to the nearest premises to the implementation of local alarms In-house navigation systems, for example, for service technicians for fault location, are used.

The embodiment of claim 28 increases the transmission reliability and usually also the achievable transmission bandwidths of the two radio transmission links used. In this case, for example, the frequency bands, time slots or transmission powers available for the communication according to the radio standards used can be optimally divided between the two radio transmission paths in accordance with the required bandwidth and priority.

The further object of the invention is achieved by the provision of a mobile handheld terminal according to claim 29. The hand-held operating device according to the invention has, for the data technical connection to a machine control on a first and a technically separate second bidirectional radio interface. The designation as bidirectional radio interfaces should be understood to mean that data telegrams or at least acknowledgment or synchronization telegrams are both transmitted and received via this interface, although this does not necessarily mean that it is actually possible to communicate simultaneously in both directions. The data transmitted between the hand-held operating device and the machine control is transmitted via the second radio interface at high temporal priority or, in the case of real-time requirements, via the first and at low temporal priority. This is achieved according to the invention in that the transmission of the high-priority data is not impaired by the simultaneous transmission of general, low-priority data. Thus, although there is a demand for high data transmission rates for very variable data volumes, in particular for the second radio transmission path, there is also a relatively large tolerance with regard to the transmission quality. At the same time, the amount of data for the first radio transmission path can be limited very precisely, but there is a requirement for reliable data transmission while adhering to certain maximum transmission times. Due to the technically separated radio interfaces and radio links, these competing requirements need not be considered together in a radio protocol. In particular, no different priorities have to be taken into account in the radio protocols, or the mechanisms for priority control provided in the protocols are without significant influence on the reliable operation of the mobile handheld terminal.

The advantageous embodiment according to claim 30 enables optimized for the respective requirements of the two data classes operation and the selection of the optimal radio technology for both radio transmission links, so that the handheld device provides optimal performance and high operational reliability, which using only a single wireless standard not could be achieved.

The embodiment according to claim 31 enables a technically very simple realization of the handheld terminal according to the invention using commercially available radio modules. These modules are now extremely compact and inexpensive and are used commercially in very large numbers in a variety of applications and devices. The sometimes very complex radio protocols are largely based on processors in the respective implemented gen modules and the connection approximately to the main processor of the manual control unit via technically relatively simple interfaces, so that the main processor is not excessively burdened by the radio transmission.

The advantageous embodiment according to claim 32 enables the particularly simple, optional equipment of the handheld terminal according to the invention with different radio standards, with all device-specific components remain unchanged. Likewise, radio modules from different manufacturers can also be used. On the one hand, this enables the cost-effective realization of variants with different radio standards and, on the other hand, the use of comparable products from different manufacturers

Wireless modules. The latter is again favored by the fact that the priority of the distribution of data on the two radio transmission links, the radio protocols of the respective routes, the different priorities no longer need to be considered separately and only the basis functions of the respective standards must be used.

The embodiment of claim 33 increases the transmission reliability and usually also the achievable transmission bandwidths of the two radio transmission links. In this case, for example, available for the communication according to the radio standards used frequency bands, time slots or transmission power corresponding to the required bandwidth and priority between the two radio transmission links optimally. Due to the immediate spatial proximity of the two radio interfaces in the handheld terminal, the risk of mutual interference during transmission due to the high field strengths in the near field of the antennas is also particularly great when the radio interface parts use different frequency bands. By suitable synchronization of the two interfaces, the mutual interference can be significantly reduced and the operational reliability and transmission performance can be increased.

The advantageous embodiment according to claim 34 enables independent of a main processor detection and reliable transmission of the operating states of the safety switching elements to the machine control.

The embodiment according to claim 35 also allows the independent of the main processor Detection, evaluation and transmission of at least some of the existing actuators. This allows a particularly short transmission and response time for the immediate control commands.

Due to the advantageous embodiment according to claim 36, a powerful handheld device for demanding operating and visualization tasks is created, the direct connection of the processor to the second radio interface favors the transmission of large amounts of data.

The additional communication link according to the embodiment of claim 37 allows, for example, the transmission of certain high-priority data or commands from the main processor to the safety evaluation circuit for further transmission to the machine control via the first radio interface, or the access of the main processor to the detected operating states of the safety switching elements for the direct Processing in the application software.

The embodiment according to claim 38 enables the possibility of saving electrical energy, which is particularly important for a wirelessly data-coupled mobile handheld terminal, in those periods in which the computing power of the main processor is not or only minimally required. This extends the achievable with a single charge battery life, or can be used with a lower capacity battery, which in turn allows the saving of weight and volume. The shutdown of the components can also be staggered over time. The control mechanisms for switching off and reactivating the individual components can be distributed as an integral part of the respective components or else concentrated in a separately designed power management component.

Due to the embodiment according to claim 39, the handheld terminal can also be used for access to the Internet or intranet. Furthermore, web-based visualization applications can be implemented in the controller and the visualization data can then be transmitted and displayed directly as web data to the handheld terminal. This could be completely or largely dispensed with an application-specific software on the handheld terminal and would be the handheld without adaptation with different Interface-compatible machines and controllers can be used immediately.

Due to the advantageous embodiment according to claim 40, the mobile handheld terminal can also be used for direct and inexpensive telecommunications via the Internet or intranet, especially in conjunction with a so-called headset, which can be either wired or wirelessly coupled via an interface with the handheld device , In principle, with a simultaneous use of a plurality of inventive handheld operating devices within a work environment, for example in a larger machine shop or production line, a corresponding communication between several handheld devices and the respective operators can be made, for example, to be able to coordinate more complex and comprehensive operating tasks directly to each other. Of course, so in case of system failure, for example, a connection to a particular service point can be made.

The advantageous embodiment according to claim 41 enables the coupling of an exchangeable memory to the handheld terminal, for example, to transmit a software update in the machine control or to read and store operating data or log files from the controller.

The further object of the invention is also achieved by providing a programmable machine control according to claim 42. The machine controller according to the invention provides a first and a second data interface designed to be technically independent for the common use for data transmission from and to a mobile handheld terminal. The data interfaces can be formed either directly as radio interfaces or be provided with the interposition of further signal transmission paths for connection to corresponding radio interfaces. Analogous to the solutions according to the invention described above, the data to be transmitted is divided into a high-priority class and a low-temporal priority class, and the high-temporal-priority data is divided over the first data interface and the low-temporal priority data is transmitted over the second Transfer data interface. As a result, the data having a higher temporal priority or real-time request can be transmitted largely uninfluenced by the data having a low temporal priority via the first data interface and the first radio transmission path, so that the reliability of the override is improved. Since no special consideration of any priorities is required within the class of data transmitted over one of the two radio transmission links, a wide variety of transmission standards can be used in a flexible manner both for the radio transmission links and for any other intermediate transmission paths.

In the machine control according to claim 43, it is ensured that the first radio transmission path has only exactly two communication partners and a misdirection of data telegrams or the coupling in of external data telegrams is prevented. A radio transmission path according to the BlueTooth standard is particularly suitable for the production of such a point-to-point connection in the context of this invention.

In the machine control according to claim 44, the simple use of a powerful, often already existing information infrastructure is made possible for the data transmission via the second data interface, or via the second radio transmission path, through the use of a network connection. Thus, the second data interface for the exchange of data with a variety of communication participants can be used, such as for connection to central control centers or for central operating data acquisition, error message or the like. A wireless network according to the WLAN standard as part of such a network is particularly well within the scope of this invention, as this comparatively large data transmission bandwidths are provided for the transmission of extensive visualization data to a handheld terminal according to the invention.

The advantageous embodiment of the machine control according to claim 45 enables independent and secure from the main processor and its function verification and evaluation of the received safety information and the continuous monitoring of the intact state of the first radio transmission link to the docked handheld terminal. The received safety data are evaluated accordingly and coupled into the safety circuit of the controlled technical device and thus, for example, the drive energy or drive enable is influenced directly. In case of a detected interruption of the first radio transmission link, the controllable technical device is stopped immediately by the safety receiving circuit via the safety circuit. The advantageous embodiment of the machine control according to claim 46 allows rapid access or transmission of the current operating states of the safety switching elements and certain input means of the mobile handheld terminal to the main processor for the immediate processing and control of the technical device.

The invention will be explained in more detail below with reference to the embodiments illustrated in the drawings.

Show it:

1 shows a section of an industrial manufacturing system with a controllable, technical device as a possible application of the method and apparatus according to the invention;

2 schematically and by way of example the essential components of a mobile handheld terminal according to the invention;

3 schematically and by way of example the essential components of a machine control according to the invention.

By way of introduction, it should be noted that in the described, different embodiments, the same parts are provided with the same reference numerals or the same component designations, wherein the disclosures contained in the entire description can be applied mutatis mutandis to the same parts with the same reference numerals and component names. Furthermore, individual features or combinations of features from the illustrated and described, different embodiments may represent for themselves, inventive or inventive solutions.

FIG. 1 shows by way of example an industrial production system 27 or a partial section or a processing station of such a production system 27 as a typical environment of use of the methods and devices according to the invention. The manufacturing system 27 comprises a program-controlled technical device 6 in the manner of a Robot which is used for manipulating or machining a workpiece 7. The workpiece 7 is located on a transport means 8 with which it can be transported in and out of the processing station or in a further, no longer shown processing station. The working area of the robot 6, the so-called machining cell or robot cell 10, is surrounded by a protective fence 9 or a comparable enclosure, so that the robot cell 10 can normally only be entered through a protective door 11. The closed state of the protective door 11 is monitored by means of a door contact 12. In normal fully automatic and program-controlled operation of the processing station, the protective door 11 is closed and no persons are allowed to stand within the robot cell 10.

The robot 6 is controlled by a programmable logic controller 3. The machine control 3 is located somewhat distanced in the illustration outside the robot cell 10, but can of course also be arranged within the robot cell 10 or in the immediate vicinity of the robot 6. The electric drives of the robot 6 are electrically supplied via converters or servo-controllers 76, which receive their positioning commands from the machine controller 3 via a corresponding communication link 75. The illustration of an electrical power supply of the servo controller 76 as well as the electrical power supply of various other components has been omitted for reasons of clarity, since these are already well known to the person skilled in the art. Various, not specifically illustrated further actuators and sensors on the robot 6 are connected via a plurality of control lines, the so-called control circuit 22, directly or occasionally also with the interposition of signal and energy converters also not shown with the machine control 3.

The robot cell 10 also has a so-called safety circuit 21, which may be designed as a safety-specific specially designed plurality of signal lines or occasionally as a special bus connection. The purpose of the safety circuit 21 is the data or signal-technical connection of all safety-related facilities, as in the illustrated case of emergency stop switches 24, the door contact 12 but also the machine control 3 and especially the servo controller 76. By any one of the devices coupled to the safety circuit 21 signals an unsafe operating state, in particular a dangerous situation, for example when an emergency stop is actuated. Switch 24 by a person are promptly and regardless of any control commands and the state of the machine control 3 all potentially dangerous movements and machine operations canceled, in particular by switching off the drive power for the drives of the robot 6 and the transport 8. The processing cell is characterized in a safe condition transferred.

As can be seen from this presentation, the term security in the context of this document is to be understood as the absence of danger to the life and limb of persons and, with certain limitations, also to property. On the other hand, it must be clearly distinguished from the reliability of a technical facility that is to be understood as meaning that the technical facility regularly performs satisfactorily the function expected of it.

In addition to the fully automatic program-controlled operation of the robot cell 10, in which the security of persons is ensured by the protective fence 9 and the technical monitoring of the protective door 11, however, there are those special operating phase in which the robot 6 must be programmed by a trained operator 1 accordingly, where one speaks of so-called teaching. In this phase, the operator 1 is within the robot cell 10 and via a mobile manual control unit 2 are control commands for immediate execution by the robot 6 with simultaneous visual control of the robot 3 and the effect of the control commands to the machine control 3 from. Essential for a precise and efficient programming process and is the most immediate and delay-free response of the robot 6 to the issued control commands.

In order to allow the operator 1 during the programming process maximum freedom of movement, this is equipped with a wireless data-bound handheld device 2. In addition to the delivery of the control commands, this also has corresponding functions for the sophisticated visualization of operating states and other information concerning the robot 6, the machine control 3, the machined workpiece 7 or the manual control device 2. In addition, safety switching elements in the manner of an emergency stop switch 25 and at least one, preferably two enabling buttons 26 are provided on the handheld terminal 2, which are signal-technically integrated during the teaching in the safety circuit 21 of the robot cell 10 and with which the operator 1 the execution poten- deliberately release potentially dangerous control commands and processes and can also terminate them technically reliably at any time.

For data linkage of the mobile handheld terminal 2 to the machine control 3, a first radio transmission path 13 and a technically independent trained and concurrent radio transmission path 14 are provided. To set up these radio transmission links 13 and 14, the mobile handheld terminal 2 has a corresponding first and second radio interface 15 and 16. As permanently installed remote station of the first radio transmission path 13, the radio remote station 17 is provided, which is connected via a first data transmission link 71 directly to the machine control 3. The first radio transmission path 13 is advantageously set up as a point-to-point connection. As a permanently installed remote station for the second radio transmission path 14 radio remote stations, in particular a plurality of access points 4 are provided, which in turn are coupled to the wired network connection 5 and the second Datenanbindungs- track 72 are also coupled with the machine control data.

The two radio transmission links 13 and 14 and the respective further linked transmission links and transmission elements are technically independent and independently usable, so that two independent and bidirectional transmission paths for data exchange between the mobile handheld device 2 and the machine control 3 are available.

While the first radio transmission path 13 together with the concatenated transmission elements 17 and transmission links 71 is almost exclusively available for communication, the second radio transmission path 14 and optionally also linked transmission devices such as the network connection 5 of several other active participants, such as the wirelessly connected data device 79 or the wired communication subscriber 18, shared.

According to the invention, all high-priority or real-time critical data telegrams, in particular information about actuation states of the input elements or of the safety switching elements 25, are now between the manual operating device 2 and the machine control 3. 26 on the first radio transmission path 13 and the chained so Transmission devices 17; 71 transmit, while the usually significantly larger amount of data telegrams without special real-time requirements, in particular visualization data and multimedia data, via the second radio transmission path 14 and the thus linked transmission facilities 5; 72 are transmitted.

Using suitable software, the handheld terminal 2 is also a communication with the other communication participants 18; 19; 79 of the network 5 possible, for example, voice communication via Internet telephony or a database query in a central database server 18. Via corresponding coupling devices, such as the firewall 19, can also be accessed on other connected networks such as the Internet 20 or on a corresponding company-wide network ,

2, the essential components of a mobile handheld terminal 2 according to the invention are shown schematically. The hand-held operating device 2 has a plurality of different input means such as a keypad 31, a joystick 32 and a handwheel or potentiometer 33 for the input of control commands for immediate execution by a controlled technical device as well as for inputting data or switching operating states of the data-coupled Machine control 3 or the manual control unit 2 on. The mobile hand-held device 2 further has a high-resolution, graphics-capable display 29 for the visual output of general information and operating data and the like. The display 29 is structurally combined with a so-called touch screen 30, so that a flexible graphics-supported user guidance can be implemented.

In addition to the input means special safety switching elements in the manner of an emergency stop switch 25 or the two enabling buttons 26 are formed, with which the operator 1 during programming work within a robot cell, the respective controlled technical device 6 can shut down any time technically reliable.

In addition, the mobile handheld terminal 2 has a first safety evaluation circuit 48 and a second safety evaluation circuit 49. These two safety evaluation circuits 48, 49 are in each case signal-coupled to the safety switching elements 25 and 26 and independently detect the actuation state of these safety switching elements. The information about the respective operating states will be from both Security evaluation circuits 48, 49 are each independently coded in a suitable manner and provided with address and checking information. The information captured and coded by the second safety evaluation circuit 49 is transmitted via the communication connection 57 to the first safety evaluation circuit 48 and from the latter via the communication connection 47 to the first radio interface 36 and further via the first radio transmission path 13 to the associated machine control 3 (FIG 1). The operating states detected and coded in the first safety evaluation circuit 48 are transmitted to the machine control 3 either jointly or as separate data telegrams via the same communication link. The coded information of both safety evaluation circuits 48, 49 in the machine control 3 (FIG. 3) becomes two correspondingly assigned safety reception circuits 50; 51 (FIG. 3) and evaluated there and correspondingly coupled into the safety circuit 21 (FIG. 3) of the controlled technical device.

The first and second safety evaluation circuits 48 and 49 are designed diversely with different technologies or components, so that in the case of a single fault in one of the two safety evaluation circuits 48 or 49 it is ensured that the same fault does not occur simultaneously in the other safety evaluation circuit 48, 49 and that at least one of the two circuits fully works. In the case of the present handheld device 2, approximately the first safety evaluation circuit 48 is designed as a programmed microcontroller and the second safety evaluation circuit 49 is designed as a permanently programmed logic module.

Furthermore, in the present case, the input elements 31, 32 and 33 are likewise connected directly to the safety evaluation circuit 48 via corresponding signal lines 44, which also detects, codes and directly and without involvement of the main processor 34 via the first radio interface 13 to the machine control 3, the actuating states of these input elements (Fig. 3) transmits. As a result, transmission takes place with a particularly short delay time so that precise programming and adjustment work on the controlled technical device is possible.

The mobile handheld terminal 2 also has a comparatively powerful computing unit 34 and a main memory 35, in which an operating system and a Application-specific software and, if necessary, other utilities such as an Internet browser or software for Internet telephony are stored and executed. The arithmetic unit 34 is coupled to the second radio interface 37 via the radio module connection 46, so that the arithmetic unit 34 can communicate directly via the second radio transmission path 14.

Between the arithmetic unit 34 and the first safety evaluation circuit 48, a communication connection 56 is provided, via which the arithmetic unit 34 can access, in particular, the operating states of the input means 31, 32 and 33 and the safety switching elements 25 and 26 detected by the safety evaluation circuit 48, so that this information also can be processed accordingly in the application software.

The two radio interfaces 36 and 37 used are designed as integrated, intelligent modules which, in addition to the components for radio technology, also have an independent processor and memory means in which the sometimes very complex protocols of the respective radio standard are implemented by appropriate software means. The modules can also have an integrated antenna.

The two radio interfaces used 36 and 37 are also designed as replaceable modules 38, so that they can be replaced by other, substantially identical modules with possibly other technical specifications or wireless standards. This allows a simple adaptation of the mobile handheld terminal 2, for example, for the use of an alternative radio standard and special requirements or already existing communication facilities or preferential solutions of an operator can be flexibly taken into account.

Between the two radio interfaces 36 and 37 there is further provided a synchronization connection 77, via which the intelligent radio modules 38 automatically exchange information for use for optimum attenuation of the mutual impairment.

Furthermore, the mobile handheld terminal 2 has an expansion interface 40 to which, for example, mobile storage media for the import or export of data or program Share or the like can be connected. Even functional extensions, which are only required at times, can be coupled to the handheld terminal 2. The expansion interface 40 is designed for example as a standard USB interface. Other common interface standards, such as common and known in notebooks, are also suitable.

To supply the components of the mobile handheld terminal 2, a corresponding energy storage in the manner of a battery 39 is provided. Although not indicated in the illustration, the battery 39 may be formed, for example, interchangeable, so that an exhausted battery easily and without significant loss of time replaced and work with the handheld terminal 2 can be continued immediately. Alternatively or additionally, a likewise not shown electrical connection or an electromagnetic coupling device for transmitting the energy for recharging the battery 39 may be provided.

3 schematically shows the essential components and links of a preferred embodiment of a machine control 3 according to the invention. The machine control 3 has a computing unit 53 and a main memory 52 for the execution of an operating system and / or a corresponding application software for the control of a controlled technical device 6 on. The signal-technical coupling of the machine control 3 to the controlled technical device 6 (FIG. 1) or to its sensors and actuators takes place in part via a number of digital and / or analog signal inputs 63 and signal outputs 64, collectively referred to as the control circuit 22. In addition, the machine controller 3 also has a serial bus interface 78, for example for the data-related coupling to a servo controller for controlling the drives of the controlled technical device 6 (FIG. 1).

The machine control system 3 also has a first safety receiving circuit 50 and a second safety receiving circuit 51 which receives the high-temporal data telegrams arriving via the first data interface 69 with the information about the actuation states of the safety switching elements 25, 26 on a coupled mobile handheld terminal 2 (FIG. 2) evaluate their validity and via a corresponding emergency stop circuit interface and an enabling switch interface in the safety circuit 21 of controlled technical device 6 (Fig. 1) einkoppeln. Another essential function of these safety receiving circuits 50, 51 is the constant monitoring of an intact communication connection to the associated manual control unit 2 and thus to its safety switching elements 25, 26. The continuously transmitted data telegrams with the current information on the operating states of the safety switching elements 25, 26 over a certain Period from or no valid data telegrams are received, the safety receiving circuits 50 and 51 respectively independently and independently the controlled technical device 6 (Fig. 1) in a safe operating state over.

The first and second security receiving circuits 50, 51 are coupled via the communication link 73, via which the data telegrams intended for the second security receiving circuit 51 are transmitted from the first data interface 69 via the first security receiving circuit 50.

The central processing unit 53 of the machine controller 3 is coupled via the communication link 61 to a second data interface 70, via which the class of the general data without special temporal priority, in particular the visualization data, is transmitted.

A communication connection 60 likewise exists between the central processing unit 53 and the first safety receiving circuit 50. The computing unit 53 can use this connection to determine, for example, the current operating state of the safety switching elements 25, 26 of the associated handheld terminal 2 (FIG. 2). Furthermore, the central computing unit 53 can also determine the current actuation states of the further input means 31, 32, 33 of the associated mobile handheld terminal 2 (FIG. 2) via this communication connection 60.

For the sake of organization, it should finally be pointed out that in order to better understand the various system components, these have been simplified and schematized. The problem underlying the independent inventive solutions can be taken from the description.

Above all, the individual in Figs. 1; 2; 3 embodiments form the subject of independent solutions according to the invention. The relevant objects and solutions according to the invention can be found in the detailed descriptions of these figures.

S u b e c u s e c tio n a tio n s

1 user, operator 35 main memory

2 mobile handheld terminal 36 first radio interface

3 machine control 37 second radio interface

4 access point, radio remote 38 interchangeable radio module

5 Network 39 Battery, power supply

6 machine, robot, manipulator 40 interface for optional Erwei¬

7 workpiece module, memory module or

8 means of transport data interface

9 protective fence

10 robot cell, processing cell 41 optional data connection

42 data line, bus connection

11 Protective door 43 Data line, bus connection

12 door contact 44 signal lines

13 first radio link 45 signal lines

14 second radio link

15 Radio module 46 Radio module connection

47 radio module connection

16 Radio module 48 Safety evaluation circuit

17 Radio remote 49 Safety evaluation circuit

18 servers, general network 50 security receiving circuit

communication stations

19 Firewall 51 Security receiving circuit

20 Internet 52 main memory

53 main processor, CPU

21 Safety Circuit 54 Input Output Port

22 control circuit 55 machine control

23 transport direction

24 Emergency stop switch, safety switch 56 Communication connection element 57 Communication connection

25 Emergency stop switch, safety switch58 Data line, bus connection element 59 Data line, bus connection

60 communication connection

26 enabling button, safety switching element 61 Communication connection

27 industrial manufacturing system, steu62 Communication link for technical equipment, Annex 63 Signal inputs

28 Module separation line 64 signal outputs

29 Output device, display 65 Emergency stop circuit interface

30 input devices, touch screen

66 approval circuit interface

31 Input device, keypad, button 67 Emergency stop circuit

32 input means, joystick 68 acknowledgment circuit

33 Input means, handwheel, potentiometer 69 first data interface

34 main processor, CPU 70 second data interface 71 first data transmission path

72 second data transmission path

73 Communication connection

74 signal lines 75 servo control connection

76 servo controller

77 Synchronization connection

78 Servo interface 79 Data device with radio connection

Claims

Patent claims

1. A method for operating a data communication link between a wireless data-coupled mobile handheld terminal (2) and a machine controller (3) using at least one bidirectional first radio transmission path (13) and a technically separated running and at least largely concurrent bidirectional second radio transmission path ( 14), wherein the machine control system (3) is designed and provided for controlling a technical device (6), in particular a machine tool, a device, a system, a robot or a technical process, and wherein the mobile hand-held operating device (3) is provided with input means ( 31, 32, 33) for the delivery of control commands for immediate execution by the controlled technical device (6) and with input means (30) for influencing the operation of the handheld terminal, the controller and / or the controlled technical device (6), as well as with at least one safety switching element (25; 26) is equipped for the technically reliable termination of potentially dangerous processes and operating states of the controlled technical device (6), wherein the mobile handheld terminal (2) is further provided with output means (29) for the output of information, in particular for the visualization of information about the operating supply. is the machine control (3) and / or the operating state of the controlled technical device (6) and / or the handheld terminal (2) is equipped, wherein the first and second radio transmission path (13; 14) formed to technically standardized and disclosed radio standards at least largely compatible are characterized in that the entirety of the transmitted data, command and security information is divided into a first data class with a high temporal priority and a second data class with a low temporal priority and the data from the first data class via the first radio transmission trecke (13) and the data from the second data class on the second radio transmission path (14) are transmitted.

2. The method according to claim 1, characterized in that the first data class information about the operating state of the operating elements (31; 32; 33) are assigned for the delivery of control commands.

3. The method according to claim 1 or 2, characterized in that the first data class information about the operating state of the safety switching elements (25; 26) are assigned.

4. The method according to any one of claims 1 to 3, characterized in that the second data class information for output by an output means (29) of the handheld terminal (2) are assigned.

5. The method according to any one of claims 1 to 4, characterized in that the second data class multimedia data for output by an output means (29) of the handheld terminal (2) are assigned.

6. Method according to one of claims 1 to 5, characterized in that for at least one of the first or second radio transmission links (13; 14) the operating parameters are automatically adjusted during operation such that a mutual impairment of the two radio transmission links (13; 14 ) is reduced.

7. The method according to claim 1, wherein at least one of the first or second radio transmission path (13; 14) automatically sets the operating parameters during operation such that impairment of the first radio transmission path (13) by the second radio transmission path (14) is as low as possible.

8. The method according to any one of claims 1 to 6, characterized in that during the establishment of the connections over the two radio transmission links (13; 14) these are constructed in temporal succession and that needed for the later connection establishment of addresses, assignment information or operating parameters on the an already existing connection will be transferred.

9. The method according to any one of claims 1 to 8, characterized in that the data of the first data class is continuously updated and repeatedly transmitted and in the case of an erroneously received on the receiving side data telegram no retransmission of the data message.

10. The method according to any one of claims 1 to 9, characterized in that over the first radio transmission path (13) transmitted data telegrams are provided with time and sequence information, by which the temporal validity and validity of the user data and the reception of such a data telegram / or the transmission duration of the first radio transmission path (13) can be detected.

11. The method according to any one of claims 1 to 10, characterized in that in the mobile handheld terminal (2) and / or in the machine control (3) information concerning the transmission quality and / or the utilization of the first and / or second radio transmission link (13 14), in particular regarding the transmission time, the error rate, the signal strength and / or the presence of any protocol or standard compatible further radio subscriber (79), determined and displayed on the handheld terminal (2).

12. The method according to any one of claims 1 to 11, characterized in that the mobile handheld terminal (2) can be operated in an alternative operating mode in which data is transmitted substantially only over the second radio transmission path (14) and in which Operator (1) are essentially only visualization functions and general information and data acquisition functions available, but no functions for directly influencing the operating state of the controlled technical device (6).

13. System comprising a machine control (3) for the program-controlled control of a technical device (6), in particular a machine tool, a device, a robot, a system or a technical process and a functionally assigned mobile handheld terminal (2) with input means , in particular in the nature of a keypad (31), a joystick (32), a handwheel or potentiometer (33), for issuing control commands for immediate execution by the controlled technical device (6), further comprising at least one safety switching element, in particular in the manner of a consent key (26) or an emergency stop switch (25) for the technically reliable termination of a potentially dangerous operating state, and with output means, in particular a graphics-capable display (29) for displaying operating states, operating data and other information the controlled technical equipment ( 6), the machine tion (3) and / or the mobile handheld terminal (2), wherein the machine control unit (6) and the handheld terminal (2) are data-technically wirelessly coupled by radio, characterized in that the data link during the operation of the controlled technical device ( 6) via a first radio transmission path (13) and a further, technically separated trained and at least largely concurrent second radio transmission path (14) and the first and second radio transmission path (13; 14) are formed at least largely compatible to technically standardized and disclosed radio standards, and the total data to be transmitted comprise a first data class with a higher temporal priority and a second data class with a lower temporal priority and transmit the data of the first data class via the first radio transmission path (13) and the data of the second data class over the second radio transmission path (14) be gene.

14. System according to claim 13, characterized in that the data of the first data class information about the operating state of the safety switching elements (25; 26) include.

15. System according to claim 13 or 14, characterized in that the data of the first data class control information, in particular the operating states of the input means

(31; 32; 33) for direct execution by the controlled technical device (6).

16. System according to any one of claims 13 to 15, characterized in that the data of the second data class include visualization data with information about the operating state of the controlled technical device (6).

17. System according to any one of claims 13 to 16, characterized in that the data of the second data class include multimedia data for output via the output means (29) of the mobile handheld terminal (2).

18. System according to any one of claims 13 to 17, characterized in that from the handheld terminal (2) via the second radio transmission path (14) as well as over if appropriate, further intermediary transmission devices (5; 19) allowing access to general or public databases or networks, in particular to the Internet (20).

19. The system according to any one of claims 13 to 18, characterized in that the first and second radio link (13; 14) are each operated with different radio technologies, radio standards or transmission protocols.

20. System according to any one of claims 13 to 19, characterized in that the first radio transmission path (13) is formed as part of a direct point-to-point connection between the handheld terminal (2) and the machine control (3) and no further data sources or Data sinks are coupled to this radio transmission path (13).

21. System according to any one of claims 13 to 20, characterized in that the first radio transmission path (13) to the BlueTooth standard or WLAN standard is compatible.

22. System according to any one of claims 13 to 21, characterized in that the second radio transmission path (14) is formed as part of a network, in which in addition to the manual control unit (2) and the machine control (3) further data sources or data sinks (79; 18) are involved in data technology.

23. System according to one of claims 13 to 22, characterized in that the further data sources and data sinks (79; 18) comprise further machine controls with associated mobile handheld terminals.

24. System according to any one of claims 13 to 23, characterized in that the network comprises a plurality of radio access nodes (4).

25. System according to claim 24, characterized in that the network allows an upright radio connection, an automatic change of the actual transmission path from a radio access node (4) to another radio access node (4).

26. System according to any one of claims 13 to 25, characterized in that the second radio transmission path (14) to the WLAN standard is compatible.

27. The system according to claim 13, wherein at least one of the first or second radio transmission links is implemented according to a technique or a standard which contains location information about the respective location of a user or the radio subscriber (2) provides.

28. System according to any one of claims 13 to 27, characterized in that in the mobile handheld terminal (2) and / or in the machine control (3) means for automatically adjusting the operation, in particular the temporal transmission behavior or the radio frequencies used, the first and second Radio transmission path (13; 14) are provided by which the extent of mutual interference is reduced.

29. Mobile, in particular portable handheld operating device (2) for dispensing control commands to a machine control (3) for the program-controlled control of a technical device (6), in particular a machine tool, a robot, a device, a plant or a technical process, and for the visualization of operating states, process data and other information of the controlled technical device (6), wherein the handheld terminal (2) with input means, in particular in the manner of a keypad (31), a joystick (32), a handwheel or potentiometer (33) , is equipped for dispensing the control commands, as well as with demand actuated safety switching elements, in particular in the manner of an enabling switch (26) or an emergency stop switch (25) for the technically reliable termination of a potentially dangerous operating condition, as well as with output means, in particular the kind of a graphics-capable display (29) for Visualisi tion of operating, machine and process data and other information, in particular of multimedia information, as well as with a bidirectional first radio interface (36) and a technically separated bi-directional second radio interface (37), which first and second radio interface for producing a first and second Radio transmission path (13; 14) are provided for the joint data-technical coupling to the machine control (3), characterized in that data and information with high temporal priority, in particular control commands for immediate execution by the controlled technical device (6) and operating states of safety switching elements (25; 26), via the first radio interface (36) and general data and information without special temporal priority, in particular data for visualization or multimedia information via the second radio interface (37) are transmitted.

30. Handheld terminal according to claim 2928, characterized in that the first radio-cut parts (36) and the second radio interface (37) are implemented with different radio technologies or operated with different radio standards or different transmission protocols.

31. A hand-held operating device according to claim 29 or 30, characterized in that at least one of the radio interfaces (36, 37) is realized by means of an intelligent radio module, wherein the radio module has independent storage means and an independent computing unit for implementing a standardized radio protocol.

32. Handheld terminal according to claim 31, characterized in that the at least one radio module (38) structurally independent and is replaceable by another module for the realization of another radio standard.

33. Handheld terminal according to one of claims 289 to 32, characterized in that between the first radio interface (36) and the second radio interface (37) continuously via a synchronization connection (77) internal signals or synchronization information is exchanged, which for optimizing the operation of the first and / or the second radio transmission path (13, 14) are used to reduce the mutual radio interference.

34. Handheld terminal according to one of claims 289 to 33, characterized in that at least one safety evaluation circuit (48) is provided which is signal-technically coupled to the first radio interface (36) and one or more safety switching elements (25; the safety switching elements (25; 26) detects, encodes, provides with test information and transmits via the first radio interface (36) to the machine control (3).

35. Handheld terminal according to claim 34, characterized in that the safety evaluation circuit (48) with further input means, in particular in the manner of a keypad (31), a handwheel (33) or a joystick (32) is signal-coupled, detects the actuation state and sends via the first radio interface (36) to the machine control (3).

36. Handheld terminal according to one of claims 29 to 35, characterized in that storage means (35) and a central processing unit (34) are provided, in which an operating system and a special application-specific application software are stored and executed, wherein the arithmetic unit (34) the second radio interface (37) is signal technically coupled.

37. Handheld terminal according to claim 34 and 36, characterized in that between the central processing unit (34) and the at least one safety evaluation circuit (48) is formed a communication connection (56) for the direct data exchange.

38. Handheld terminal according to claim 36 or 37, characterized in that the arithmetic unit (34) and / or the storage means (35) and / or the second radio interface (37) and possibly further electrical or electronic components temporarily switched off or in a power-saving mode with reduced Power consumption can be offset and returned to the normal operating state, if necessary, while the safety evaluation circuit (48) and the first radio interface (36) remains in normal operating condition.

39. Handheld terminal according to one of claims 36 to 38, characterized in that in the arithmetic unit (34) a software for Internet communication, in particular in the manner of a browser, is executed and via the second radio interface (37) a communication link in a local intranet or the global Internet (20) is produced.

40. Handheld terminal according to one of claims 36 to 39, characterized in that in the arithmetic unit software for Internet telephony is executed and via the second radio interface (37) a communication link in a local intranet or the global Internet (29) is made.

41. Handheld terminal according to one of claims 29 to 40, characterized in that a line-connected third interface (40) is provided for the temporary coupling of a removable memory and that data from the removable memory via the second radio interface (37) to the machine controller (3) or transferred from the machine control (3) in the removable memory.

42. Programmable machine control (3) with a plurality of signal inputs (63), signal outputs (64) and further data interfaces (78) for the signal and data connection to a controllable technical device (6), in particular to a machine tool, a robot, a device, a system or a technical process, with a connection to a security-designed security circuit (21) of the controlled technical device (6), as well as with at least one main processor (53) and a main memory (52) for the execution of an operating system and / or an application program for program-controlled control of the technical device (6), with a first data interface (69) and a technically independently designed second data interface (70) for common use for the data link of a mobile handheld terminal (2), wherein the first and second data interface (69; 70) ent neither directly as an independent radio interface is formed or via intermediate data transmission devices (5; 71) to a respective independent radio interface (4; 17) is coupled, characterized in that

Data and information with high temporal priority, in particular control commands for immediate execution by the controlled technical device (6) and operating states of safety switching elements (25; 26) of the handheld terminal (2), via the first data interface (69) and general data and information without special temporal priority, in particular data for visualization or multimedia information or operating data for display on the handheld terminal (2) via the second data interface (70) are transmitted.

43. Programmable machine control according to claim 42, characterized in that via the first data interface (69) a data-technical point-to-point connection to the mobile handheld terminal (2) is made, in particular using a wireless connection according to the BlueTooth standard as part of this Point-to-point connection.

44. Programmable machine control according to claim 42 or 43, characterized in that via the second data interface (70) a network connection (5) to the handheld terminal (2) is made, in particular using a radio link (14) according to the WLAN standard as part this network connection.

45. Programmable machine control according to one of claims 42 to 44, characterized in that the machine controller (3) has at least one safety receiving circuit (50), which is data-technologically coupled to the first data interface (69) and which via this first data interface (69). received security information regardless of the main processor (53) evaluates their integrity and authenticity checks and coupled in a suitable manner in the safety circuit (21) of the controlled machine.

46. Programmable machine control according to claim 45, characterized in that between the main processor (53) of the controller (3) and the at least one safety receiving circuit (50) is formed a communication connection (60) for direct data exchange, via which in particular information about the actuation state of safety switching elements (25; 26) or the actuation state of other operating elements (31; 32; 33) of the mobile handheld terminal (2) are transmitted.