WO2010069011A1 - A sentinel unit for an it electrical distribution system having a floating reference conductor - Google Patents

Abstract

A protection system 1 for an IT electrical distribution system (EDS) (2) has a floating reference conductor (3) and two electrical conductors in the form of an active conductor (5) and a neutral conductor (6). System (1) includes two input terminals (7, 8) for electrically connecting to an MEN electrical power source (10) that is upstream of system (1). Two output terminals (11, 12) are electrically connected, via respective conductors (5, 6), to an electrical load in the form of an electrical motor (14) for a compressor (not shown) of an upright freezer display (15) having a metal cabinet (16). Motor (14) is downstream of the system (1). A protection device, in the form of an MCB (17), electrically connects terminals (7, 8) to respective terminals (11, 12) to allow a supply of electrical power from source (10) to motor (14). MCB (17) is responsive to a fault signal at a port (18) for selectively electrically disconnecting at least one of terminals (7, 8) from the respective output terminals (11, 12) to prevent the supply of electrical power. A sentinel unit (19) selectively generates the fault signal at port (18) in response to the current in conductor (3) being greater than a predetermined current threshold.

Description

A SENTINEL UNIT FOR AN IT ELECTRICAL DISTRIBUTION SYSTEM HAVING A FLOATING REFERENCE CONDUCTOR

FIELD OF THE INVENTION

[0001] The present invention relates to a sentinel unit and in particular to a sentinel unit for an IT electrical distribution system having a floating reference conductor.

[0002] Embodiments of the invention have been developed particularly for mains voltage deployments, and will be described herein with reference to that application. It will be appreciated, however, that the invention is not limited to such a field of use, and is applicable in broader contexts. Examples of these other deployments and applications of the invention are found in an Australian patent application in the name of the present applicant and filed with IP Australia on 19 December 2008 (Attorney docket no: 61076AUV00). The subject matter of that earlier application, in its entirety, is incorporated herein by way of cross-reference.

BACKGROUND

[0003] Any discussion of the background art throughout the specification should in no way be considered as an admission that such art is widely known or forms part of common general knowledge in the field.

[0004] Known protection devices have been primarily developed for TN electrical distribution systems and require a well-established and common earth connection to function correctly and safely. Most commercially available protection devices are not suitable for use in an IT electrical distribution system.

[0005] Protection devices that are available for use in an IT electrical distribution system are often complex and expensive to implement, and are only economic for use in high-end deployments.

SUMMARY OF THE INVENTION

[0006] It is an object of the present invention to overcome or ameliorate at least one of the disadvantages of the prior art, or to provide a useful alternative.

[0007] According to a first aspect of the invention there is provided a sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source, via an electrical protection device, to a load, wherein: the protection device is responsive to a fault signal for electrically isolating the load from the source; and the sentinel unit selectively generates the fault signal in response to the current in the reference conductor being greater than a predetermined current threshold.

[0008] In one embodiment, the predetermined current threshold is less than about 1O mA.

[0009] In one embodiment, the predetermined current threshold is less than about 5 mA.

[0010] In one embodiment, the sentinel unit includes a limiting circuit for limiting the current in the reference conductor.

[0011] In one embodiment, the limiting circuit limits the current in the reference conductor to no more than the predetermined current threshold.

[0012] In one embodiment, the sentinel unit selectively generates the fault signal in response to the current in the reference conductor being greater than the predetermined current threshold and the voltage in the reference conductor being greater than a predetermined voltage threshold.

[0013] In one embodiment, the predetermined voltage threshold is less than about 40 Volts.

[0014] In one embodiment, the predetermined voltage threshold is less than about 35 Volts.

[0015] In one embodiment, the predetermined voltage threshold is less than about 30 Volts.

[0016] In one embodiment, the predetermined voltage threshold is less than a touch potential.

[0017] According to a second aspect of the invention there is provided a sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the sentinel unit limits the current flowing in the reference conductor to less than a first predetermined current threshold.

[0018] In one embodiment, the IT electrical distribution system supplies electrical power from the source, via an electrical protection device, to the load, and the protection device is responsive to a fault signal for electrically isolating the load from the source.

[0019] In one embodiment, the sentinel unit selectively generates the fault signal in response to the current in the reference conductor being greater than a second predetermined current threshold.

[0020] In one embodiment, the first predetermined current threshold and the second predetermined current threshold are different.

[0021] In one embodiment, the first and second predetermined current thresholds are less than about 35 mA.

[0022] In one embodiment, the first and second predetermined current thresholds are less than about 20 mA.

[0023] In one embodiment, the first and second predetermined current thresholds are less than about 10 mA.

[0024] In one embodiment, the first and second predetermined current thresholds are about 10 mA and 8 mA respectively.

[0025] In one embodiment, the first and second predetermined current thresholds are about 8 mA and 5 mA respectively.

[0026] In one embodiment, the sentinel unit limits the current flowing in the reference conductor to less than a first predetermined current threshold after the generation of the fault signal.

[0027] According to a third aspect of the invention there is provided a sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the sentinel unit provides a variable impedance to shape a current flowing in the reference conductor. [0028] In one embodiment, the variable impedance substantially maintains a peak value of the current while reducing the average value of the current.

[0029] According to a fourth aspect of the invention there is provided a sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the sentinel unit includes: a monitoring circuit for selectively generating a fault signal in response to a fault condition in the electrical distribution system; and a policing circuit that is responsive to one or more characteristics of the monitoring circuit for selectively generating the fault signal.

[0030] In one embodiment, a failure of the policing circuit to correctly selectively generate the fault signal does not prevent the monitoring circuit from generating the fault signal.

[0031 ] In one embodiment, the monitoring circuit detects the fault condition from one or more characteristics of: the current flowing in the floating reference conductor; and/or the voltage of the floating reference conductor relative to one or more of the electrical conductors.

[0032] In one embodiment, the electrical power is provided as an AC voltage waveform having alternate positive half-cycles and negative half-cycles, and the monitoring circuit includes two sub-circuits that are substantively responsive to the fault condition in the positive and negative half-cycles respectively.

[0033] In one embodiment, the electrical power is provided as an AC voltage waveform having alternate positive half-cycles and negative half-cycles, and the policing circuit includes two sub-circuits that are one or more characteristics of the monitoring circuit for selectively generating the fault signal in the positive and negative half-cycles respectively.

[0034] In one embodiment, the monitoring unit limits the current in the reference conductor. [0035] In one embodiment, the monitoring unit limits the current in the reference conductor to a predetermined peak current value.

[0036] In one embodiment, the monitoring unit shapes the current in the reference conductor such that the average current is less than that of a sine wave current having the predetermined peak value.

[0037] According to a fifth aspect of the invention there is provided a method for monitoring an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source, via an electrical protection device, to a load, wherein: the protection device is responsive to a fault signal for electrically isolating the load from the source; and the method includes the step of selectively generating the fault signal in response to the current in the reference conductor being greater than a predetermined current threshold.

[0038] According to a sixth aspect of the invention there is provided a method for monitoring an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the method includes the step of limiting the current flowing in the reference conductor to less than a first predetermined current threshold.

[0039] According to a seventh aspect of the invention there is provided a method for monitoring an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the method includes the step of providing a variable impedance to shape a current flowing in the reference conductor.

[0040] According to an eighth aspect of the invention there is provided a method for monitoring an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the method includes the steps of: providing a monitoring circuit for selectively generating a fault signal in response to a fault condition in the electrical distribution system; and being responsive to one or more characteristics of the monitoring circuit for selectively generating the fault signal. [0041] Reference throughout this specification to "one embodiment", "some embodiments" or "an embodiment" means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, appearances of the phrases "in one embodiment", "in some embodiments" or "in an embodiment" in various places throughout this specification are not necessarily all referring to the same embodiment, but may. Furthermore, the particular features, structures or characteristics may be combined in any suitable manner, as would be apparent to one of ordinary skill in the art from this disclosure, in one or more embodiments.

[0042] As used herein, unless otherwise specified the use of the ordinal adjectives "first", "second", "third", etc., to describe a common object, merely indicate that different instances of like objects are being referred to, and are not intended to imply that the objects so described must be in a given sequence, either temporally, spatially, in ranking, or in any other manner.

[0043] In the claims below and the description herein, any one of the terms comprising, comprised of or which comprises is an open term that means including at least the elements/features that follow, but not excluding others. Thus, the term comprising, when used in the claims, should not be interpreted as being limitative to the means or elements or steps listed thereafter. For example, the scope of the expression a device comprising A and B should not be limited to devices consisting only of elements A and B. Any one of the terms including or which includes or that includes as used herein is also an open term that also means including at least the elements/features that follow the term, but not excluding others. Thus, including is synonymous with and means comprising.

BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Preferred embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings in which:

Figure 1 is a schematic representation of a protection system according to an embodiment of the invention;

Figure 2 is a detailed schematic representation of the electronic components within a sentinel unit of one of the preferred embodiments of the invention; Figure 3 is a flowchart providing an overview of the operation of the microprocessors included in the circuit of Figure 2;

Figure 4 is a comparison table of characteristics of an embodiment of the invention and two prior art devices; and

Figure 5 is a schematic representation of a high voltage protection circuit for use with the sentinel unit of Figure 2.

DETAILED DESCRIPTION

[0045] Referring to Figure 1 there is illustrated a protection system 1 for an IT electrical distribution system (EDS) 2. EDS 2 has a floating reference conductor 3 and two electrical conductors in the form of an active conductor 5 and a neutral conductor 6. System 1 includes two input terminals 7 and 8 for electrically connecting to an MEN electrical power source 10 that is upstream of system 1. Two output terminals 11 and 12 are electrically connected, via respective conductors 5 and 6, to an electrical load in the form of an electrical motor 14 for a compressor (not shown) of an upright freezer display 15 having a metal cabinet 16. It will be appreciated that motor 14 is downstream of the system 1. A protection device, in the form of an MCB 17, electrically connects terminals 7 and 8 to respective terminals 11 and 12 to allow a supply of electrical power from source 10 to motor 14. MCB 17 is responsive to a fault signal at a port 18 for selectively electrically disconnecting at least one of terminals 7 and 8 from the respective output terminals 11 and 12 to prevent the supply of electrical power. A sentinel unit 19 selectively generates the fault signal at port 18 in response to the current in conductor 3 being greater than a predetermined current threshold.

[0046] A more detailed description of system 1 is provided in an Australian patent application in the name of the present applicant and filed with IP Australia on 19 December 2008 (Attorney docket no: 61076AUV00). The subject matter of that earlier application, in its entirety, is incorporated herein by way of cross-reference.

[0047] Reference is now made to Figure 2 where there is illustrated a schematic representation of a circuit 101 of a sentinel unit of an embodiment of the invention. The Figure shows the specific nature and arrangement of electronic components within circuit 101. The actual components used in the illustrated configuration are set out in the tables below, and are identified by the reference indicia used in Figure 2.

8] The two resistors R8 and R12 are laser trimmed post assembly of the circuit to provide the desired triggering threshold for the sentinel unit. In this specific embodiment, R8 is laser trimmed to progressively increase the resistance of R8 until T2 turns ON with 4.5 rriA of positive current. R12 is then laser trimmed until Tl turns ON with 4.5 mA of negative current. This sets the level of current flowing through those resistors that will trigger the respective triacs. This current is practically equivalent to the fault current in conductor 3. While the notional fault current threshold for circuit 101 is 5 rnA, the 4.5 rnA calibration is used to provide a margin for temperature variability of the triacs. For when circuit 101 is used in lower temperature environments, the triacs often require a slightly higher voltage - and hence a higher fault current - before triggering. Where circuit 101 is intended for deployment in more temperature stable applications, R8 and R12 are trimmed such that the respective triacs turn ON with more than 4.5 mA.

[0049] Circuit 101 provides a number of functions, which are categorized broadly as protection functions, on the one hand, and policing functions, on the other. The protection or monitoring functions are directed to sensing one or more external characteristics to circuit 101, and being responsive to those characteristics for selectively generating the fault signal. The policing or management functions are directed to sensing one or more internal characteristics to circuit 101, and being responsive to those internal characteristics for selectively generating the fault signal.

[0050] Circuit 101 is connected to the active and neutral conductors 5 and 6. As these conductors are downstream from the protection device they are both open to be switched between two states, one where they are connected to source 10, and the other where they are disconnected from source 10. Accordingly, these conductors 5 and 6 are referred to respectively as the switched active conductor and the switched neutral conductor or, for short, the switch active and the switched neutral respectively. It will be appreciated that terminals 7 and 8 are continually connected to the source - subject only to any upstream protection device triggering - via conductors 23 and 24, which are referred to simply as the active conductor and the neutral conductor respectively.

[0051] In circumstances where conductors 5 and 6 are disconnected from source 10, circuit 101 will not be powered and, hence, will not be operating. Upon connection of conductors 5 and 6 with source 10, circuit 101 will quickly power up - within a few milliseconds - and thereafter commence and continually perform the policing functions. Importantly, while there is a short delay in the policing functions being provided, circuit 101 will provide the required protection functions at all times, including during the transitory power-up phase. [0052] Circuit 101 includes considerable symmetry and redundancy to contribute to a fast and reliable operation. This speed and reliability is relevant to both the policing functions and the protection functions and to the overall failsafe characteristics offered by circuit 101.

[0053] Turning to circuit 101, it will be appreciated that:

• The label "Port" adjacent to the switched active in the bottom right-hand side of Figure 2 corresponds to port 37 of Figure 1.

• The label "Port" adjacent to the switched neutral in the centre right-hand side of Figure 2 corresponds to port 38 of Figure 1.

• The labels "Port" and the adjacent label "Sensor" in the top right-hand side of Figure 2 correspond to port 36 and conductor 3 of Figure 1.

[0054] The voltage on conductor 5 - that is, the switched active - is applied to one side of R20 and, due to the operation of diodes Z6 and Z7 in combination, provide a ±15 V square wave voltage signal at the junction of R20 and Z6. This square wave is applied, via R21, to the base of transistors Q7 and Q8. In the positive and negative half-cycles of the square wave, Q 8 and Q7 respectively are conductive and act (in combination with the associated components) to limit current in those half-cycles. The current that is limited is that current that flows from conductor 3, through the respective transistors Q8 and Q7, and to the switched neutral.

[0055] Due to the biasing of Q7 and Q8, any current flow in conductor 3 appears as a modified sine wave current through resistors R22 and R19. In this circuit, it is the sizing of Rl 9 that provides critical value for determining the limited of the current in conductor 3. Accordingly, the resistance of R19 is selected to provide the desired maximum current at the likely maximum voltage to be experienced by the circuit in normal conditions. For a normal AC voltage of 240 V, Rl 9 is selected with a value of 1.5 kOhm so that the maximum fault current - that is, the maximum current in conductor 3 - is limited to 8 mA. In other embodiments using different current limits and/or different voltages, the resistance of R19 is selected accordingly.

[0056] The capacitor C4 is placed in parallel with R22 such that, during a fault condition, the sine wave current is shaped to both reduce the average current flowing through Q7 and Q8 and retain the peak current value. This has a number of advantages. Firstly, by reducing the average current through transistors Q7 and Q8 it is possible to use smaller and faster transistors. In the context of circuit 101, where all the components are contained on a single circuit board having a footprint of 1 inch x 0.825 inch, the ability to use smaller transistors is significant. Second, the fault current - that is, the current flowing through conductor 3 and which personnel are exposed to - will also be limited to a 5 mA peak and a lower average current than a pure sine wave.

[0057] The capacitor C3 helps to reduce the impact of transient voltages. Typically, these voltages will only have a short duration and will not give rise to large current flows. However, these voltages are often a source of false triggering in prior art devices. For circuit 101, when a transient voltage appears on the switched active, R20 and C3 offer a relatively low impedance path for the resultant current to flow to the switched neutral. The higher the frequency of the transient current, the less impedance that will be offered by C3. If the high frequency voltage across C3 increases greatly, then Z5 and Z6 will also conduct to provide a further low impedance path for the transient current.

[0058] The capacitor C2 also acts to improve the performance of circuit 101 with transients. While C3 offers a low impedance path for the transient current to prevent it having an impact upon any fault current, C2 functions primarily to filter the current flowing internally within circuit 101 - and in particular the current flowing through R7 and R9 - to reduce the risk of false triggering of the triacs Tl and T2. This capacitor has the effect of shorting to the neutral any high frequency currents that exist on conductor 3 and which are, as a result, flowing though resistor Rl 9.

[0059] The current that flows through R19 in the positive half-cycle will also flow through D9, Z7 and R7 and then to the switched neutral. In the negative half-cycle the current will instead flow through DlO, Z8 and R9 and then to the switched neutral. If the magnitude of this current is greater than 4.5 mA, the voltage across R7, in the positive half-cycle, and R9, in the negative half-cycle, will be sufficient to trigger triacs T2 and Tl respectively. A triggering of either of these triacs will effective short the lower end of solenoid coil Ll to the switched neutral and cause the coil to become energized with the full mains voltage. This will result in the fault signal being generated.

[0060] As both the positive and negative half-cycles are independently monitored, the fault signal is able to be provided extremely quickly once a fault condition is sensed. It is enough that only one of triacs Tl and T2 is switched for the fault signal to be produced.

[0061] If the triggering of one of the triacs occurs very late in the half-cycle, it is possible that coil Ll will not be energized sufficiently to create the fault signal. But at that time the voltage on the switched active will be low and, hence, any personnel should be at low risk of an electric shock. As most faults occur in both half-cycles, even if a fault is not provided in the first half-cycle, it will in the subsequent half-cycle.

[0062] It has been found that circuit 101, in combination with MCB 17 provides an average switching time of less than 10 ms when in use with a 50 Hz 240 VAC supply source. It will be appreciated that a half-cycle for such a supply source is 10 ms. It has also been found that the time between a fault and the provision of a fault signal is no more than about half of the total switching time. That is, the switching time for unit 19 is less than 5 ms.

[0063] If one of the triacs Tl or T2 were to fail, a fault condition would still result in the other switching and, hence, a fault signal would still be generated. In this instance, it would be thought that the response time of circuit 101 and the subsequent triggering of MCB will take slightly longer. However, circuit 101 includes additional components to provide the testing and policing functions, and one of these functions is to regularly test triacs Tl and T2. If one of the triacs fails while a fault is present, circuit 101 operates to trigger the other traic during both half-cycles to compensate for the failed triac. Accordingly, the fault signal generates just as effectively. Additionally, if one triac fails the test and a fault condition is not present, circuit 101 directly generate a fault signal by triggering the other triac. These functions will be described in further detail below.

[0064] After assembly of circuit 101, and prior to deployment, a positive DC reference voltage is placed at the junction of C4 and R22 while R8 is laser trimmed until T2 triggers. Then, a negative DC reference voltage of the same magnitude is placed at the junction of C4 and R22 while R12 is laser trimmed until Tl triggers. The accuracy of the laser trimming is therefore tailored for the specific circuit and contributes to an extremely reliable and repeatable operation of the triacs and, hence, an extremely reliable and repeatable operation of circuit 101 in providing the fault signal.

[0065] Resistor RlO has a dual function, one of which is to enable a power supply to the microprocessor Ul and U2, and the other is to provide a timing signal to those microprocessors to indicate the zero crossing point of the voltage on the switched active.

[0066] RlO connects the switched active to the junction of the gates of Q5 and Q6. During the positive half-cycle, current will flow through R8 and then through two paths defined, on the one hand, by D8 and C1/R6, and on the other hand by TA and Z3. This combination provides a power supply to pin 1 (V_DD ⁾ of microprocessor U2. During the negative half-cycle, current will flow through R8 and then through two paths defined, on the one hand, by D7 and C5/R18, and on the other hand by Z4 and Z3. This combination provides a power supply to pin 8 (Vss⁾ of microprocessor Ul.

[0067] The voltage at the junction of RlO and the gates of Q5 and Q6 switches those transistors to provide respective signals to pin 3 of Ul and pin 2 of U2. This signal provides Ul and U2 with an indication of the zero-crossing point of the voltage of the switched active. This timing indicator is used by the microprocessors, and will be described in more detail below.

[0068] The circuitry centred about diodes Zl and Z2 is a power supply for providing a ±30 V power rails. These rails are used within circuit 101 primarily to assist with the policing functions and, particularly, to bias the internal transistor circuits so that the testing is able to occur. For example,

[0069] It will be appreciated by those skilled in the art that when a triac, such as Tl or T2, is triggered or switched ON - that is, switched to a low-resistive state following the application of a voltage between the gate and the main terminal - the voltage drop across between the main terminals is relatively small. It will also be appreciated that once the current between the main terminals falls below a threshold - as will occur for a zero DC offset mains supply sine wave signal - the triac will turn OFF and there will be, effectively, on open circuit between the main terminals. These characteristics of a triac are used within circuit 101 to provide part of the policing function. Particularly, the biasing circuitry for the policing function includes transistors Ql, Q2, Q3 and Q4. Ql and Q2 operate to bias the base and collector of transistor Q8, while Q3 and Q4 operate to bias the base and collector of Q7.

[0070] Microprocessors Ul and U2 use the zero-crossing signal - as supplied to pin 3 of Ul and pin 2 of U2 - to respectively generate bias signals at pins 6 that are applied to the bases of Q4 and Q2 during the positive and negative half-cycles. The bias signals are not applied during every half-cycle, but only once every 2 or 3 seconds. These signals are timed to be late in the respective half-cycles in which they occur, and typically within the last millisecond of the half-cycle. With the bias applied to the relevant transistors, the microprocessors Ul and U2, late in the respective half-cycles, trigger respective triacs Tl and Tl by generating trigger signals at pin 7 of Ul and pin 3 of U2 which are then applied to the gates of Tl and T2. These trigger signals, while being sufficient to trigger the respective triacs, are timed for when the resultant current flow through coil Ll will be so small that Ll will not be energized and a fault signal will not be generated. Notwithstanding, the triggering of a triac will result in the junction of Rl and T1/T2 being connected to the active neutral, and hence, a voltage drop will appear at the gates of Q5 and Q6 which will be detected, via resistors R13 and R14 by U2 and Ul respectively. If the relevant triac does not trigger, the voltage drop will not appear at the gates of Q5 and Q6, and U2 and Ul will not detect any change.

[0071 ] If a triac is tested to be operating correctly, the microprocessor that conducted that test will communicate the positive result to the other microprocessor by a control sub-circuit formed by R15, R16, R17, R37, ClO and the microprocessors themselves. As successive successful test are communicated, microprocessor Ul pulses pin 2 with the result that Dl 1 emits a periodic flash.

[0072] If, for example, triac T2 failed a test, microprocessor U2 would not provide a confirmation signal to Ul. U2 would then progress to administer a further like test to T2 at the next scheduled time for such a test. If, after three such tests the result was still negative - in that Ul had still not received a confirmation signal via the control sub-circuit - then U2 will, via pin 3, provide a series of pulses spaced by 3 ms to ensure triac T2 is triggered and, if necessary, retriggered. (For the triac will turn OFF once the supply voltage passes into the next half cycle.) If triac T2 is operating normally it will provide a low impedance and solenoid Ll will quickly become energized. Simultaneously, Ul will switch Tl ON - through the application of a series of electrical pulses to the gate of Tl via C9. The result being that a fault signal is generated as at least Tl and likely Tl and T2 will be ON. During the period of the confirmatory testing - typically about ten seconds - but prior to the fault signal being generated, the rate of flashing of DI l will decrease. Once the fault signal has been generated, DI l will cease flashing, as circuit 101 will be isolated from the power source.

[0073] Solenoid Ll only requires about a quarter cycle of energisation to trigger MCB 17. In other embodiments, more sensitive solenoids are used to provide quicker switching times.

[0074] The microprocessors also monitor the timing of successive zero-crossing signals and, in an absence of such signals for more than three seconds, cause a fault signal to be generated.

[0075] Circuit 101 has many features that provide for failsafe operation. Some of these features go to internal monitoring, and others to the detection of the fault, and protection of the load circuit to prevent high fault currents even if circuit 101 fails to correctly function. For example:

• If either one of the microprocessors fails, there will be no communication between them confirming the successful testing of the triacs, and the other microprocessor will cause a fault signal to be generated within about ten seconds. In the intervening period, the functioning microprocessor will continue to provide protection to the load should a fault occur, as both triacs are able to be controlled to switch (by the relevant microprocessor) in both directions.

• If either one of triacs Tl and T2 fails, there will be an absence of full communication between the microprocessors to confirm the successful testing, and the microprocessor controlling the functioning triac will cause a fault signal to be generated within about ten seconds. In the intervening period, the functioning triac microprocessor will continue to provide protection to the load should a fault occur, as the remaining triac is able to be controlled to switch (by the relevant microprocessor) in both directions.

• In the event the solenoid coil Ll fails by going open circuit, a fault signal will generate, as the zero-crossing signal will disappear.

• In the event the solenoid coil Ll fails by shorting, circuit 101 will not be able to function to provide the fault signal and the MCB or other protection device will not move to isolate the load from the supply. However, during this time, circuit 101 continues to operate to limit any fault current - that is, the current in conductor 3 - to less than 8 mA.

• Detection of a fault condition occurs quickly for monitoring occurs on both the positive and negative half-cycles.

• The reference for determining a fault condition is a floating conductor 3 that should be at a low potential relative to the switched neutral. The sentinel unit connects conductor 3 to the switched neutral and monitors any voltage between the two that gives rise to a current flow of about 5 mA. The use of a zero-reference - that is the voltage and current between conductor 3 and the switched neutral - allows circuit 101 to be fast acting and accurate.

• At power-up, the current limiting functionality of circuit 101 operates immediately should a fault be present.

• The microprocessors provide the policing function of circuit 101 and, should it be found that key components of circuit 101 are faulty or not correctly operating, a fault signal is provided.

• If both microprocessors fail, it is only the policing function that will cease. Circuit 101 will continue to monitor the load circuit and, in the event of a fault, will limit the fault current. (In the above embodiments, the fault current is limited to 8 mA). 6] Circuit 101 includes two high voltage protection circuits which are included on the circuit board with the other electrical components. A first of the high voltage protection circuits is defined by a 7 mm diameter varistor V2 that extends between the junction of solenoid Ll and triacs Tl and T2 to the switched neutral. Varistor V2 is primarily intended to protect triacs Tl and T2 from damage from high voltage surges. [0077] The second high voltage protection circuit is defined by a 7 mm diameter varistor V3. This varistor is primarily intended to protect transistors Q7 and Q8 from high voltage surges, by diverting those surges to the switched neutral using R35 as a series protection resistor.

[0078] For low voltage applications, one or more of the high voltage protection circuits are omitted. In other embodiments, additional or alternative high voltage protection circuits are used. For example, in an embodiment, use is made of a further high voltage protection circuit such as circuit 110 that is illustrated in Figure 5. It has been found that when use is made of the Figure 5 protection circuit, in addition to the onboard protection circuits shown in Figure 2, that circuit 101 is able to withstand voltage surges of up to 10 kV, administered as an over-voltage test in accordance with AS/NZS 3190-2002 RCD Standard.

[0079] The preferred embodiments described above provides for a protected IT EDS. The EDS is a true IT EDS, as an earth connection is not required. This is distinct from a prior art pseudo IT EDS which must include an earth connection or the protection system - typically including one or more RCDs - will not operate, and the prior art EDS will be unprotected.

[0080] The preferred embodiment described above also allows a plurality of separately protected load circuits to be supplied from a single isolation transformer. This allows, particularly for large installations, for a reduction in the quantum and cost of the associated infrastructure while increasing the protection available to property and personnel. This advantage, together with other advantages, is described in more detail in an Australian patent application in the name of the present applicant and filed with IP Australia on 19 December 2008 (Attorney docket no: 61076AUV00).

[0081] A further advantage of the preferred embodiment described above is that the sentinel unit continually monitors the load circuit it is associated with and, upon detection of a fault, automatically actuates the associated protection device - which, in Figure 1 is an MCB. That is, there is no requirement for manual monitoring or manual intervention to isolate the load circuit.

[0082] Figure 3 is a flow chart illustrating, by way of example, the operation of the software used by processors Ul and U2. [0083] Figure 4 provides for unit 101 a comparison of certain characteristics with two prior art protection devices.

[0084] Unless specifically stated otherwise, as apparent from the following discussions, it is appreciated that throughout the specification discussions utilizing terms such as "processing," "computing," "calculating," "determining", analyzing" or the like, refer to the action and/or processes of a computer or computing system, or similar electronic computing device, that manipulate and/or transform data represented as physical, such as electronic, quantities into other data similarly represented as physical quantities.

[0085] In a similar manner, the term "processor" may refer to any device or portion of a device that processes electronic data, e.g., from registers and/or memory to transform that electronic data into other electronic data that, e.g., may be stored in registers and/or memory. A "computer" or a "computing machine" or a "computing platform" may include one or more processors.

[0086] The methodologies described herein are, in one embodiment, performable by one or more processors that accept computer-readable (also called machine-readable) code containing a set of instructions that when executed by one or more of the processors carry out at least one of the methods described herein. Any processor capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken are included. Thus, one example is a typical processing system that includes one or more processors. Each processor may include one or more of a CPU, a graphics processing unit, and a programmable DSP unit. The processing system further may include a memory subsystem including main RAM and/or a static RAM, and/or ROM. A bus subsystem may be included for communicating between the components. The processing system further may be a distributed processing system with processors coupled by a network. If the processing system requires a display, such a display may be included, e.g., a liquid crystal display (LCD) or a cathode ray tube (CRT) display. If manual data entry is required, the processing system also includes an input device such as one or more of an alphanumeric input unit such as a keyboard, a pointing control device such as a mouse, and so forth. The term memory unit as used herein, if clear from the context and unless explicitly stated otherwise, also encompasses a storage system such as a disk drive unit. The processing system in some configurations may include a sound output device, and a network interface device. The memory subsystem thus includes a computer-readable carrier medium that carries computer-readable code (e.g., software) including a set of instructions to cause performing, when executed by one or more processors, one of more of the methods described herein. Note that when the method includes several elements, e.g., several steps, no ordering of such elements is implied, unless specifically stated. The software may reside in the hard disk, or may also reside, completely or at least partially, within the RAM and/or within the processor during execution thereof by the computer system. Thus, the memory and the processor also constitute computer-readable carrier medium carrying computer-readable code.

[0087] Furthermore, a computer-readable carrier medium may form, or be included in a computer program product.

[0088] In alternative embodiments, the one or more processors operate as a standalone device or may be connected, for example, networked to other processor(s), in a networked deployment, the one or more processors may operate in the capacity of a server or a user machine in server-user network environment, or as a peer machine in a peer-to-peer or distributed network environment. The one or more processors may form a personal computer (PC), a tablet PC, a set-top box (STB), a Personal Digital Assistant (PDA), a cellular telephone, a web appliance, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine.

[0089] Note that while some diagrams only show single processors (having respective single memory that carries the computer-readable code, which is not shown) those in the art will understand that many of the components described above are included, but not explicitly shown or described in order not to obscure the inventive aspect. For example, while only a single machine is illustrated, the term "machine" shall also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methodologies discussed herein.

[0090] Thus, one embodiment of each of the methods described herein is in the form of a computer-readable carrier medium carrying a set of instructions, for example, a computer program that is for execution on one or more processors, for example, one or more processors that are part of web server arrangement. Thus, as will be appreciated by those skilled in the art, embodiments of the present invention may be embodied as a method, an apparatus such as a special purpose apparatus, an apparatus such as a data processing system, or a computer-readable carrier medium, for example, a computer program product. The computer-readable carrier medium carries computer readable code including a set of instructions that when executed on one or more processors cause the processor or processors to implement a method. Accordingly, aspects of the present invention may take the form of a method, an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of carrier medium (for example, a computer program product on a computer-readable storage medium) carrying computer-readable program code embodied in the medium. 1] The software may further be transmitted or received over a network via a network interface device. While the carrier medium is shown in an exemplary embodiment to be a single medium, the term "carrier medium" should be taken to include a single medium or multiple media (for example, a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term "carrier medium" shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by one or more of the processors and that cause the one or more processors to perform any one or more of the methodologies of the present invention. A carrier medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media. Non-volatile media includes, for example, optical, magnetic disks, and magneto-optical disks. Volatile media includes dynamic memory, such as main memory. Transmission media includes coaxial cables, copper wire and fiber optics, including the wires that comprise a bus subsystem. Transmission media also may also take the form of acoustic or light waves, such as those generated during radio wave and infrared data communications. For example, the term "carrier medium" shall accordingly be taken to included, but not be limited to, solid-state memories, a computer product embodied in optical and magnetic media; a medium bearing a propagated signal detectable by at least one processor of one or more processors and representing a set of instructions that, when executed, implement a method; a carrier wave bearing a propagated signal detectable by at least one processor of the one or more processors and representing the set of instructions a propagated signal and representing the set of instructions; and a transmission medium in a network bearing a propagated signal detectable by at least one processor of the one or more processors and representing the set of instructions.

[0092] It will be understood that the steps of methods discussed are performed in one embodiment by an appropriate processor (or processors) of a processing (that is, computer) system executing instructions (computer-readable code) stored in storage. It will also be understood that the invention is not limited to any particular implementation or programming technique and that the invention may be implemented using any appropriate techniques for implementing the functionality described herein. The invention is not limited to any particular programming language or operating system.

[0093] Reference throughout this specification to "one embodiment" or "an embodiment" means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, appearances of the phrases "in one embodiment" or "in an embodiment" in various places throughout this specification are not necessarily all referring to the same embodiment, but may. Furthermore, the particular features, structures or characteristics may be combined in any suitable manner, as would be apparent to one of ordinary skill in the art from this disclosure, in one or more embodiments.

[0094] Similarly it should be appreciated that in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, FIG., or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

[0095] Furthermore, while some embodiments described herein include some but not other features included in other embodiments, combinations of features of different embodiments are meant to be within the scope of the invention, and form different embodiments, as would be understood by those skilled in the art. For example, in the following claims, any of the claimed embodiments can be used in any combination.

[0096] Furthermore, some of the embodiments are described herein as a method or combination of elements of a method that can be implemented by a processor of a computer system or by other means of carrying out the function. Thus, a processor with the necessary instructions for carrying out such a method or element of a method forms a means for carrying out the method or element of a method. Furthermore, an element described herein of an apparatus embodiment is an example of a means for carrying out the function performed by the element for the purpose of carrying out the invention.

[0097] In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In other instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

[0098] Similarly, it is to be noticed that the term electrically connected, when used in the claims, should not be interpreted as being limited to direct connections only. The terms "connected" and "coupled", along with their derivatives, may be used. It should be understood that these terms are not intended as synonyms for each other. Thus, the scope of the expression a device A electrically connected to a device B should not be limited to devices or systems wherein an output of device A is directly electrically connected to an input of device B. It means that there exists an electrical path between an output of A and an input of B which may be a path including other devices or means. "Connected" may mean that two or more elements are either in direct physical or electrical contact, or that two or more elements are not in direct contact with each other but yet still co-operate or interact with each other. 9] Thus, while there has been described what are believed to be the preferred embodiments of the invention, those skilled in the art will recognize that other and further modifications may be made thereto without departing from the spirit of the invention, and it is intended to claim all such changes and modifications as fall within the scope of the invention. For example, any formulas given above are merely representative of procedures that may be used. Functionality may be added or deleted from the block diagrams and operations may be interchanged among functional blocks. Steps may be added or deleted to methods described within the scope of the present invention.

Claims

CLAIMS:

1. A sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source, via an electrical protection device, to a load, wherein: the protection device is responsive to a fault signal for electrically isolating the load from the source; and the sentinel unit selectively generates the fault signal in response to the current in the reference conductor being greater than a predetermined current threshold.

2. A sentinel unit according to claim 1 wherein the predetermined current threshold is less than about 10 mA.

3. A sentinel unit according to claim 2 wherein the predetermined current threshold is less than about 5 mA.

4. A sentinel unit according to claim 1 including a limiting circuit for limiting the current in the reference conductor.

5. A sentinel unit according to claim 4 wherein the limiting circuit limits the current in the reference conductor to no more than the predetermined current threshold.

6. A sentinel unit according to claim 1 that selectively generates the fault signal in response to the current in the reference conductor being greater than the predetermined current threshold and the voltage in the reference conductor being greater than a predetermined voltage threshold.

7. A sentinel unit according to claim 6 wherein the predetermined voltage threshold is less than about 40 Volts.

8. A sentinel unit according to claim 6 wherein the predetermined voltage threshold is less than about 35 Volts.

9. A sentinel unit according to claim 6 wherein the predetermined voltage threshold is less than about 30 Volts.

10. A sentinel unit according to claim 6 wherein the predetermined voltage threshold is less than a touch potential.

11. A sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the sentinel unit limits the current flowing in the reference conductor to less than a first predetermined current threshold.

12. A sentinel unit according to claim 11 wherein the IT electrical distribution system supplies electrical power from the source, via an electrical protection device, to the load, and the protection device is responsive to a fault signal for electrically isolating the load from the source.

13. A sentinel unit according to claim 12 that selectively generates the fault signal in response to the current in the reference conductor being greater than a second predetermined current threshold.

14. A sentinel unit according to claim 13 wherein the first predetermined current threshold and the second predetermined current threshold are different.

15. A sentinel unit according to claim 14 wherein the first and second predetermined current thresholds are less than about 35 mA.

16. A sentinel unit according to claim 15 wherein the first and second predetermined current thresholds are less than about 20 mA.

17. A sentinel unit according to claim 15 wherein the first and second predetermined current thresholds are less than about 10 mA.

18. A sentinel unit according to claim 15 wherein the first and second predetermined current thresholds are about 10 mA and 8 mA respectively.

19. A sentinel unit according to claim 15 wherein the first and second predetermined current thresholds are about 8 mA and 5 mA respectively.

20. A sentinel unit according to any one of claims 13 to 19 wherein the sentinel unit limits the current flowing in the reference conductor to less than a first predetermined current threshold after the generation of the fault signal.

21. A sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the sentinel unit provides a variable impedance to shape a current flowing in the reference conductor.

22. A sentinel unit according to claim 21 wherein the variable impedance substantially maintains a peak value of the current while reducing the average value of the current.

23. A sentinel unit for an IT electrical distribution system having a floating reference conductor and at least two electrical conductors for supplying electrical power from a source to a load, wherein the sentinel unit includes:

a monitoring circuit for selectively generating a fault signal in response to a fault condition in the electrical distribution system; and

a policing circuit that is responsive to one or more characteristics of the monitoring circuit for selectively generating the fault signal.

24. A sentinel unit according to claim 23 wherein a failure of the policing circuit to correctly selectively generate the fault signal does not prevent the monitoring circuit from generating the fault signal.

25. A sentinel unit according to claim 23 or claim 24 wherein the monitoring circuit detects the fault condition from one or more characteristics of: the current flowing in the floating reference conductor; and/or the voltage of the floating reference conductor relative to one or more of the electrical conductors.

26. A sentinel unit according to claim 23 wherein the electrical power is provided as an AC voltage waveform having alternate positive half-cycles and negative half-cycles, and the monitoring circuit includes two sub-circuits that are substantively responsive to the fault condition in the positive and negative half-cycles respectively.

27. A sentinel unit according to claim 23 wherein the electrical power is provided as an AC voltage waveform having alternate positive half-cycles and negative half-cycles, and the policing circuit includes two sub-circuits that are one or more characteristics of the monitoring circuit for selectively generating the fault signal in the positive and negative half-cycles respectively.

28. A sentinel unit according to claim 23 wherein the monitoring unit limits the current in the reference conductor.

29. A sentinel unit according to claim 28 wherein the monitoring unit limits the current in the reference conductor to a predetermined peak current value.

30. A sentinel unit according to claim 28 wherein the monitoring unit shapes the current in the reference conductor such that the average current is less than that of a sine wave current having the predetermined peak value.