WO2024070540A1 - Système de commande - Google Patents

Système de commande Download PDF

Info

Publication number
WO2024070540A1
WO2024070540A1 PCT/JP2023/032449 JP2023032449W WO2024070540A1 WO 2024070540 A1 WO2024070540 A1 WO 2024070540A1 JP 2023032449 W JP2023032449 W JP 2023032449W WO 2024070540 A1 WO2024070540 A1 WO 2024070540A1
Authority
WO
WIPO (PCT)
Prior art keywords
safety
board
related parameters
slave
master
Prior art date
Application number
PCT/JP2023/032449
Other languages
English (en)
Japanese (ja)
Inventor
楓 武知
靖啓 衣笠
康之 田中
Original Assignee
パナソニックＩｐマネジメント株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by パナソニックＩｐマネジメント株式会社 filed Critical パナソニックＩｐマネジメント株式会社
Publication of WO2024070540A1 publication Critical patent/WO2024070540A1/fr

Links

Images

Classifications

    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00—Safety arrangements
    • G05B9/02—Safety arrangements electric

Definitions

  • This disclosure relates to a control system that controls equipment such as robots.
  • Patent document 1 discloses a control system for controlling equipment.
  • This disclosure has been made in light of these points, and its purpose is to reduce the risk of failure of non-volatile memory that stores safety-related parameters and to reduce costs in a control system that has multiple boards as safety-related parts.
  • the present disclosure provides a control system for controlling equipment, comprising a non-safety-related unit that outputs safety-related parameters in response to a predetermined input, and a master board and a slave board that are safety-related units that conform to Category 3 of ISO 13849-1 and execute predetermined processing using the safety-related parameters, the master board having a non-volatile memory and a master processor that executes a storage process that receives the safety-related parameters from the non-safety-related unit and stores them in the non-volatile memory, and a parameter transfer process that reads the safety-related parameters from the non-volatile memory and transfers them to the slave board, and the slave board has a reception process that receives the safety-related parameters transferred in the parameter transfer process, and a slave processor that executes arithmetic processing using the safety-related parameters.
  • safety-related parameters are sent from the master processor to the slave processor, so there is no need to provide a non-volatile memory for storing the safety-related parameters on the slave board. This reduces the risk of non-volatile memory failure and cuts costs compared to providing non-volatile memory on both the master board and the slave board.
  • the non-volatile memory for storing safety-related parameters is provided only on the master board and not on the slave board, the user only needs to set the safety-related parameters and check whether the safety-related parameters have been correctly set in the non-volatile memory on the master board, and does not need to do so on the slave board. For example, checking whether the safety-related parameters output by the non-safety-related section match the safety-related parameters set in the non-volatile memory only needs to be done on the master board, and does not need to be done on the slave board. Therefore, the effort required for setting and checking safety-related parameters can be reduced compared to when non-volatile memory is provided on both the master board and the slave board.
  • This disclosure makes it possible to reduce the risk of non-volatile memory failure and cut costs while minimizing the effort required for setting and checking safety-related parameters.
  • FIG. 1 is a block diagram showing a configuration of a robot control system according to an embodiment of the present disclosure.
  • FIG. 1 is a block diagram showing a main part of a robot control system according to an embodiment of the present disclosure.
  • 13 is a flowchart showing an operation of the master processor during a parameter transfer process.
  • 13 is a flowchart showing an operation of the first slave processor during a parameter transfer process.
  • FIG. 1 shows the configuration of a robot control system 1 according to this embodiment.
  • This robot control system 1 controls a robot 2 as a device.
  • the robot control system 1 has a teach pendant 3, an area sensor 4, and a controller 5.
  • the robot 2 has nine motors 21 and nine encoders 22 that detect and output the position of the rotation axis of the corresponding motor 21. Some of the motors 21 and encoders 22 are not shown in FIG. 1.
  • Each robot 2 is a six-axis robot with six rotary joints, and six of the nine motors 21 are motors that rotate the rotary joints, and three motors 21 are motors for external axes (not shown).
  • the teach pendant 3 has an input section 31, an operation input board 32, and a TP side communication board 33.
  • the input unit 31 accepts input from a user and outputs an input signal corresponding to the input.
  • the operation input board 32 generates operation input information based on the input signal output by the input unit 31, and transmits it to the TP side communication board 33 using the communication method specified in IEC 61784-3.
  • the TP-side communication board 33 receives the operation input information sent by the operation input board 32 and sends it to the controller 5 via the communication medium M.
  • the TP-side communication board 33 is a non-safety-related part.
  • the area sensor 4 outputs a detection result indicating whether or not a person is within the working range of the robot 2.
  • the controller 5 controls the robot 2.
  • the controller 5 includes a main control board 51, a sensor input board 52 as a slave board, a monitoring board 53 as a slave board, a notification board 54 as a master board, a motor control unit 55, and nine amplifiers 56.
  • the signal output by the teach pendant 3 is input to the main control board 51 as a specified input, and safety-related parameters are set according to this signal.
  • the main control board 51 then outputs the set safety-related parameters.
  • the main control board 51 is a non-safety-related part.
  • the sensor input board 52 generates sensor input information that indicates the detection results output by the area sensor 4.
  • the monitoring board 53 generates and outputs monitoring information based on the output of the nine corresponding encoders 22, which indicates whether or not the safety conditions are met, that is, the positions (angles) of the rotation shafts of the nine motors 21 that rotate the rotary joints are within a safety area and the speeds of the rotation shafts of the nine motors 21 are less than the speed limit.
  • the monitoring board 53 also refers to a notification signal (described below) output by the notification board 54, and if the notification signal is at a low level, outputs a stop signal to the amplifier 56, thereby bringing the robot 2 to an emergency stop.
  • the notification board 54 can perform a reception process to receive operation input information, sensor input information, and monitoring information, and a notification signal output process to generate a notification signal related to the robot 2 based on this information and output it to the outside.
  • the motor control unit 55 controls the nine motors 21 by controlling the nine amplifiers 56.
  • the amplifier 56 stops the motor 21 when a stop signal is output from the monitoring board 53.
  • the amplifier 56 can rotate the motor 21 under the control of the motor control unit 55.
  • the notification board 54, monitoring board 53, sensor input board 52, and operation input board 32 are safety-related parts that comply with Category 3 of ISO13849-1 and perform specified processing using safety-related parameters.
  • the notification board 54 has two master processors 54a and 54b, non-volatile memories 54c and 54d corresponding to the master processors 54a and 54b, and volatile memories 54e and 54f corresponding to the master processors 54a and 54b. That is, the notification board 54 has two non-volatile memories 54c and 54d.
  • Each of the master processors 54a and 54b executes a storage process for receiving the safety-related parameters from the main control board 51 and storing them in the non-volatile memories 54c and 54d corresponding to the master processors 54a and 54b, and a parameter transfer process for reading the safety-related parameters from the non-volatile memories 54c and 54d and transferring the safety-related parameters to the monitoring board 53, the sensor input board 52, and the operation input board 32 with test data added.
  • the test data is a CRC value of a CRC (Cyclic Redundancy Check).
  • each of the master processors 54a, 54b executes a first calculation process using a portion of the safety-related parameters stored in the corresponding non-volatile memory 54c, 54d.
  • the first calculation process includes the above-mentioned notification signal output process that generates a notification signal for controlling the robot 2.
  • Each master processor 54a, 54b further determines whether the first calculated value obtained in the first calculation process matches the first calculated value output by the other master processor 54a, 54b.
  • the first calculated value is a result of the first calculation process, or a calculated value obtained during the first calculation process.
  • Each master processor 54a, 54b continues processing if the first calculated value obtained by each master processor 54a, 54b matches the first calculated value obtained by the other master processor 54a, 54b, but stops the robot 2 if they do not match a predetermined number of times.
  • the monitoring board 53 has two first slave processors 53a, 53b and volatile memories 53c, 53d corresponding to the first slave processors 53a, 53b.
  • Each of the first slave processors 53a, 53b executes a reception process to receive the safety-related parameters transferred by the master processors 54a, 54b of the notification board 54 together with the inspection data, and stores the safety-related parameters received in the reception process in the corresponding volatile memory 53c, 53d.
  • Each of the first slave processors 53a, 53b further executes a second calculation process using the safety-related parameters stored in the corresponding volatile memory 53c, 53d.
  • the second calculation process includes the above-mentioned process of generating the monitoring information, and a process of generating the stop signal based on the notification signal from the notification board 54.
  • Each of the first slave processors 53a, 53b further determines whether the second calculated value obtained in the second arithmetic process matches the second calculated value output by the other of the first slave processors 53a, 53b.
  • the second calculated value is a result of the second arithmetic process, or a calculated value obtained during the second arithmetic process.
  • Each of the first slave processors 53a, 53b continues processing if the second calculated value obtained by each of the first slave processors 53a, 53b matches the second calculated value obtained by the other of the first slave processors 53a, 53b, but stops the robot 2 if they do not match a predetermined number of times.
  • the sensor input board 52 has two second slave processors 52a, 52b and volatile memories 52c, 52d corresponding to each of the second slave processors 52a, 52b.
  • Each of the second slave processors 52a, 52b executes a reception process to receive the safety-related parameters transferred by the master processors 54a, 54b of the notification board 54 together with the inspection data, and stores the safety-related parameters received in the reception process in the corresponding volatile memory 52c, 52d.
  • Each of the second slave processors 52a, 52b further executes a third calculation process using the safety-related parameters.
  • Each second slave processor 52a, 52b further determines whether the third calculated value obtained in the third calculation process matches the third calculated value output by the other second slave processor 52a, 52b.
  • the third calculated value is a result of the third calculation process, or a calculated value obtained in the course of the third calculation process.
  • Each second slave processor 52a, 52b continues processing if the third calculated value obtained by each second slave processor 52a, 52b matches the third calculated value obtained by the other second slave processor 52a, 52b, but stops the robot 2 if they do not match a predetermined number of times.
  • the operation input board 32 has two third slave processors 32a, 32b and volatile memories 32c, 32d corresponding to each of the third slave processors 32a, 32b.
  • Each of the third slave processors 32a, 32b executes a reception process to receive the safety-related parameters transferred by the master processors 54a, 54b of the notification board 54 together with the inspection data via the main control board 51 and the TP side communication board 33.
  • Each of the third slave processors 32a, 32b stores the safety-related parameters received in the reception process in the corresponding volatile memory 32c, 32d.
  • Each of the third slave processors 32a, 32b further executes a fourth calculation process using the safety-related parameters.
  • Each of the third slave processors 32a, 32b further determines whether the fourth calculated value obtained in the fourth calculation process matches the fourth calculated value output by the other third slave processor 32a, 32b.
  • the fourth calculated value is a result of the fourth calculation process, or a calculated value obtained during the fourth calculation process.
  • Each of the third slave processors 32a, 32b continues processing if the fourth calculated value obtained by each of the third slave processors 32a, 32b matches the fourth calculated value obtained by the other third slave processor 32a, 32b, but stops the robot 2 if they do not match a predetermined number of times.
  • the teach pendant 3 when a user inputs a predetermined value to the teach pendant 3 to set a safety-related parameter, the teach pendant 3 outputs a signal corresponding to the input to the controller 5.
  • the signal output by the teach pendant 3 is input as a predetermined input to the main control board 51 of the controller 5, and a safety-related parameter corresponding to the signal is set.
  • the main control board 51 then outputs the set safety-related parameter to the notification board 54.
  • Each of the master processors 54a, 54b of the notification board 54 receives the safety-related parameter from the main control board 51 and executes a storage process to store the parameter in the non-volatile memory 54c, 54d corresponding to each of the master processors 54a, 54b.
  • each of the master processors 54a, 54b receives the safety-related parameter together with the inspection data from the main control board 51, and performs a CRC calculation on the received safety-related parameter. Specifically, the remainder obtained by dividing the safety-related parameter by a predetermined constant (generator polynomial) is calculated as the first CRC value. Then, it is checked whether the calculated first CRC value matches the test data received from the main control board 51. If the first CRC value matches the test data, each master processor 54a, 54b deletes past data stored in the non-volatile memory 54c, 54d, and writes the safety-related parameters received from the main control board 51 to the non-volatile memory 54c, 54d.
  • a predetermined constant generator polynomial
  • each master processor 54a, 54b reads the written safety-related parameters from the non-volatile memory 54c, 54d, performs CRC calculations on the read safety-related parameters, and calculates a second CRC value. Then, each master processor 54a, 54b checks whether the calculated second CRC value matches the first CRC value. If the first and second CRC values match, each master processor 54a, 54b transmits information indicating successful rewriting and the matching CRC value (first or second CRC value) to the main control board 51.
  • each master processor 54a, 54b writes the matching CRC value (first or second CRC value) to the non-volatile memory 54c, 54d. This enables the safety-related parameters stored in the non-volatile memory 54c, 54d.
  • each master processor 54a, 54b of the notification board 54 receives test data from the main control board 51 and checks whether the received test data matches the CRC value stored in the non-volatile memory 54c, 54d. If the test data matches the CRC value, each master processor 54a, 54b transmits the check result to the main control board 51. Then, each master processor 54a, 54b executes a parameter transfer process to transfer the safety-related parameters read from the non-volatile memory 54c, 54d, together with the test data, to the monitoring board 53, the sensor input board 52, and the operation input board 32.
  • the master processors 54a and 54b receive the check results from the monitoring board 53, the sensor input board 52, and the operation input board 32.
  • the master processors 54a and 54b determine whether or not there is an abnormality based on the check results received in (S103). If the master processors 54a and 54b determine that there is an abnormality, they proceed to processing in (S105), and if they determine that there is no abnormality, they proceed to processing in (S106).
  • the master processors 54a and 54b notify the main control board 51 of the abnormality.
  • the master processors 54a and 54b notify the main control board 51 of the abnormality based on the check results and end the parameter transfer process.
  • the master processor 54a, 54b determines whether n is the maximum value.
  • the maximum value is the number of safety-related parameters to be transferred. If the master processor 54a, 54b determines that n is not the maximum value, it returns to (S102), and if it determines that n is the maximum value, it proceeds to (S107).
  • the master processors 54a and 54b notify the main control board 51 of the end of the transfer process, and the parameter transfer process ends.
  • the operation of the first slave processors 53a and 53b during the parameter transfer process will be described with reference to FIG. 4. Note that the second slave processors 52a and 52b and the third slave processors 32a and 32b also perform the same operation during the parameter transfer process.
  • the first slave processors 53a and 53b each receive safety-related parameters together with the inspection data from the notification board 54.
  • the first slave processors 53a and 53b each perform a CRC calculation on the safety-related parameters received in (S201).
  • the remainder is calculated when the safety-related parameters are divided by a predetermined constant (generator polynomial).
  • the first slave processors 53a and 53b each check the CRC of the safety-related parameters. In other words, the first slave processors 53a and 53b check whether the remainder calculated in (S202) matches the inspection data received in (S201).
  • the first slave processors 53a and 53b each transmit the result of the check in (S203), i.e., a value indicating whether the remainder calculated in (S202) matches the test data, to the other first slave processor 53a and 53b as the check result (error detection result).
  • the first slave processors 53a and 53b transmit the result of the check in (S203), i.e., a value indicating whether the remainder calculated in (S202) matches the test data, as the check result (error detection result) to the master processors 54a and 54b of the notification board 54.
  • the first slave processors 53a and 53b perform error detection on the safety-related parameters received in (S201) using the test data, and transmit the error detection result to the master processors 54a and 54b.
  • the check result is received by the master processors 54a and 54b in (S103) above. This ends the processing on the first slave processors 53a and 53b side during the parameter transfer process.
  • the safety-related parameters are transmitted from the master processors 54a, 54b to the first slave processors 53a, 53b, the second slave processors 52a, 52b, and the third slave processors 32a, 32b, it is not necessary to provide non-volatile memory for storing the safety-related parameters in the monitoring board 53, the sensor input board 52, and the operation input board 32. Therefore, compared to providing non-volatile memory in all of the notification board 54, the monitoring board 53, the sensor input board 52, and the operation input board 32, it is possible to reduce the risk of failure of the non-volatile memory and to reduce costs.
  • the monitoring board 53, the sensor input board 52, and the operation input board 32 are not provided with non-volatile memory for storing safety-related parameters, the user does not need to set the safety-related parameters or check whether the safety-related parameters have been correctly set in the non-volatile memory on the monitoring board 53, the sensor input board 52, and the operation input board 32. Therefore, the effort required for setting and checking the safety-related parameters can be reduced compared to when non-volatile memory is provided on all of the notification board 54, the monitoring board 53, the sensor input board 52, and the operation input board 32.
  • the robot control system 1 is provided with four pairs of processors, but the present disclosure can also be applied to cases where the number of processors is other than four pairs.
  • the present disclosure can also be applied to cases where only one pair of master processors and one pair of slave processors that receive safety-related parameters from the master processor are provided.
  • control system disclosed herein reduces the risk of non-volatile memory failure and cuts costs while minimizing the effort required for setting and checking safety-related parameters, making it useful as a control system for controlling equipment.
  • Robot control system Robot 32 Operation input boards 32a, 32b Third slave processor 51 Main control board 53 Monitoring boards 53a, 53b First slave processor 52 Sensor input boards 52a, 52b Second slave processor 54 Notification boards 54a, 54b Master processor 54c, 54d Non-volatile memory

Abstract

La présente invention concerne une carte de notification (54), qui est une partie liée à la sécurité, qui comprend : des mémoires non volatiles (54c, 54d) ; et des processeurs maîtres (54a, 54b) qui exécutent un processus de stockage pour recevoir des paramètres liés à la sécurité à partir de parties non liées à la sécurité et pour stocker lesdits paramètres dans les mémoires non volatiles (54c, 54d) et un processus de transfert de paramètres pour lire les paramètres liés à la sécurité à partir des mémoires non volatiles (54c, 54d) et pour transférer lesdits paramètres à une carte de surveillance (53), qui est une partie liée à la sécurité La carte de surveillance (53) comprend des premiers processeurs esclaves (53a, 53b) qui exécutent un processus de réception pour recevoir les paramètres liés à la sécurité qui ont été transférés dans le processus de transfert de paramètres et un processus de calcul dans lequel les paramètres liés à la sécurité sont utilisés.
PCT/JP2023/032449 2022-09-29 2023-09-06 Système de commande WO2024070540A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2022-156499 2022-09-29
JP2022156499 2022-09-29

Publications (1)

Publication Number Publication Date
WO2024070540A1 true WO2024070540A1 (fr) 2024-04-04

Family

ID=90477383

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2023/032449 WO2024070540A1 (fr) 2022-09-29 2023-09-06 Système de commande

Country Status (1)

Country Link
WO (1) WO2024070540A1 (fr)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012510194A (ja) * 2008-11-24 2012-04-26 ベックホフ オートメーション ゲーエムベーハー 安全ステップの判定方法および安全マネージャ
US20170123396A1 (en) * 2015-10-29 2017-05-04 Rockwell Automation Germany Gmbh & Co. Kg Safety Controller Module
US20200033832A1 (en) * 2018-07-27 2020-01-30 Phoenix Contact Gmbh & Co. Kg Techniques for providing a secured control parameter for multi-channel control of a machine

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012510194A (ja) * 2008-11-24 2012-04-26 ベックホフ オートメーション ゲーエムベーハー 安全ステップの判定方法および安全マネージャ
US20170123396A1 (en) * 2015-10-29 2017-05-04 Rockwell Automation Germany Gmbh & Co. Kg Safety Controller Module
US20200033832A1 (en) * 2018-07-27 2020-01-30 Phoenix Contact Gmbh & Co. Kg Techniques for providing a secured control parameter for multi-channel control of a machine

Similar Documents

Publication Publication Date Title
US7145306B2 (en) Method, system, and program for controlling moving body
US7640480B2 (en) Detection of errors in the communication of data
WO2014041829A1 (fr) Dispositif arithmétique de sécurité, dispositif d'entrée de sécurité, dispositif de sortie de sécurité, et contrôleur de sécurité
JP4930969B2 (ja) ロボット制御装置
JP2007301680A (ja) ロボットアーム診断装置
JPH11502776A (ja) 多軸工業ロボットの較正の装置と方法
US20140032972A1 (en) Method of engineering and diagnosing a field device and a system thereof
JP6163748B2 (ja) 通信カプラ、通信システム、制御方法、およびプログラム
WO2024070540A1 (fr) Système de commande
US7418647B2 (en) Method for data transmission
JP2013140587A (ja) 制御システム冗長性のための方法およびシステム
US11141855B2 (en) Robot system, method of controlling robot arm, recording medium, and method of manufacturing an article
JP6136228B2 (ja) 通信カプラ、通信システム、制御方法、およびプログラム
US11290881B2 (en) Method for functionally secure connection identification
US9619619B2 (en) Method for error recognition in a control system of a medical treatment and/or diagnosis device
JP6149393B2 (ja) 通信カプラ、情報処理装置、制御方法およびプログラム
JPH0724765A (ja) ロボット間補正データ通信方式
JPH08174458A (ja) 組立用ロボットの力制御装置
WO2024038747A1 (fr) Dispositif de traitement
JP2007532992A (ja) 処理システムにおけるデータ処理中のエラー検知方法および制御システム
JP7310271B2 (ja) 制御装置、制御方法、およびロボットシステム
WO2024089884A1 (fr) Dispositif de commande de robot et procédé de comparaison de logiciel de commande avant et après mise à jour
US20200225635A1 (en) Device including data transmission mechanisms which transmit driving state of drive device
US11863533B2 (en) Arrangement and method for functionally safe connection identification
WO2021193905A1 (fr) Procédé de commande de système de robot