Pilz Gmbh & Co Kg.

Pilz Gmbh & Co.

Hans Dieter Schwenkel

Roland Rupp

Klaus Wohnhaas

Richard Veil

Christoph Weishaar

Matthias Holzaepfel

Christoph Zinser

Thomas Nitsche

Jürgen Pullmann

Thorsten Godau

Winfried Gruber

Mark Hufnagel

Andreas Heckel

Reinhard Sperrer

J&uuml;rgen Baur

Marco Giger

Thomas Leitmann

Antonio Spataro

Norbert Froehlich

A safety switching device for fail-safely disconnecting an electrical load has an input part for receiving a safety-relevant input signal, a logic part for processing the at least one safety-relevant input signal, and an output part. The output part has a relay coil and four relay contacts. The first and second relay contacts are arranged electrically in series with one another. The third and fourth relay contacts are also arranged electrically in series with one another. The first and the third relay contacts are mechanically coupled to each other and form a first group of positively driven relay contacts. The second and the fourth relay contacts are mechanically coupled to each other and form a second group of positively driven relay contacts. The logic part redundantly controls the first and the second groups of positively driven relay contacts to selectively allow, or to interrupt in a fail-safe manner, a current flow to the electrical load, depending on the safety-relevant input signal. The relay coil is electromagnetically coupled to the first and second groups of positively driven relay contacts so that the logic part can control the relay contacts together via a single relay coil.

Safety switching device for fail-safely disconnecting an electrical load

An electronic safety switching device comprising at least a first and a second signal processing channel to which input signals may be supplied for signal processing. The first and second signal processing channels provide processed output signals, wherein the first and the second signal processing channels process the supplied input signals redundantly with respect to one other. The first and the second signal processing channels are each formed as integrated circuits, wherein the first signal processing channel is arranged monolithically on a first semiconductor substrate, and the second signal processing channel is arranged monolithically on a second semiconductor substrate. Furthermore, the first and the second semiconductor substrates are combined into a stack to form a one-piece electronic component.

Electronic safety switching device

A safety switching apparatus for switching-on or switching-off a technical installation has a first input for receiving a first clock signal via a feed line, said first clock signal having a first clock frequency. A failsafe control/evaluation unit processes the first clock signal in a failsafe manner in order to generate an output signal for switching-on or switching-off the technical installation in response to the first clock signal. A clock reference provides a second clock signal having a second clock frequency. A current-increasing circuit having a switching element is arranged for selectively increasing an input current into the first input. The switching element is coupled to the clock reference and selectively activates or deactivates the current-increasing circuit in response to the second clock frequency.

Safety switching apparatus for switching-on or switching-off a technical installation

A control system has a plurality of spatially distributed stations. At least some of the stations have input connectors for connecting sensors or output connectors for connecting actuators. The stations are connected from station to station to form a series of stations. The series has a first station, at least one second station and a last station. The first station and every second station have a successor in the series. Every second station and the last station have a predecessor in the series. In order to transmit data in this control system, the first station generates a number of separate data telegrams which is equal to the number of second stations plus the last station. Each data telegram is addressed to precisely one of the stations. The first station sends the data telegrams on by one at defined time intervals to its successor, wherein the data telegrams are addressed in reverse order of the stations. Every second station receives a data telegram from its respective predecessor and sends the received data telegram to its respective successor in the manner of a bucket brigade until it receives a data telegram which is addressed itself. The second stations and the last station each generate an individual reply telegram which is directed to the first station, and send the individual reply telegrams to their respective predecessors in the manner of a bucket brigade.

Method and apparatus for transmitting data in an automated control system

A safety circuit assembly for switching on or switching off a hazardous system in a failsafe manner has an evaluating device which is designed to produce a redundant switching signal. The evaluating device is connected to a signaling device via a first and a second line forming a pair of lines. The signaling device has an actuator which can be switched between a defined first state and at least one further state. The evaluating device produces a first defined pulse signal and transmits the first defined pulse signal to the signaling device using the pair of lines in a first direction. The signaling device produces a second defined pulse signal, which is a predefined replica of the first pulse signal, and transmits the second defined pulse signal to the evaluating device using the same pair of lines when the actuator is in the defined first state.

Safety circuit assembly for switching on or off a hazardous system in a failsafe manner

An arrangement for controlling an automated system, having a number of sensors and actuators, in particular for controlling a railroad system. A programmable control unit runs a user program to process input data from the sensors and to generate control commands for the actuators. The sensors and the actuators are connected to a remote I/O unit, which is connected to the control unit via a communication network. The control unit and the I/O unit interchange data messages in order to transmit the input data and the control commands. The arrangement has a remote disconnection unit, which is coupled to the remote I/O unit independently from the input data and control commands. The control unit is designed to integrate specific verification data for the disconnection unit into the data messages for the I/O unit. The disconnection unit is designed to deactivate the I/O unit depending on the specific verification data.

Arrangement and method for controlling an automated system, in particular a railway system

In a method for transmitting data in a control system, a first station generates a data frame having a plurality of data fields. At least one data field to be filled with transmission data is clearly assigned to each further station. The data frame is transmitted as an outgoing data frame from one station to the next, with every further station filling the respectively assigned data field with transmission data. The last station returns the data frame as a returning data frame to the series of stations. The stations read extraneous transmission data from the data fields in the returning data frame. Preferably, the respective data fields are individually assigned to the stations.

Control system having a plurality of spatially distributed stations, and method for transmitting data in such a control system

A safety switching apparatus for safe disconnection of an electrical load in an automated installation has at least one input for connecting a signaling device. The safety switching apparatus has an evaluation and control unit and at least one switching element controlled by the evaluation and control unit in order to interrupt an electrical power supply path to the load. The switching element is a changeover switch having at least two mutually alternative switching paths, with a first switching path being located in the electrical power supply path to the load and with a second switching path leading to a monitoring unit.

Safety switching apparatus for safe disconnection of an electrical load

A method and a device for switching off an inductive load in a failsafe manner are proposed. According to one aspect of the invention, the method and the device are configured such that a predefined inductive voltage is generated during switch-off. The predefined inductive voltage is monitored by means of a monitoring circuit. In a preferred embodiment, the inductive voltage is set by means of threshold switches and the inductive voltage also is monitored by means of these threshold switches.

Method and device for switching off an inductive load in a failsafe manner

The invention relates to a method for adjusting the data transmission rate in a fieldbus system () which is suitable to control safety-critical processes and which comprises at least one subscriber () connected to a fieldbus (), wherein in a first phase the subscriber/subscribers log on at a unit (central unit) centrally connected to the fieldbus with a first low data transmission rate. In a second phase the central unit () sets the data transmission rate at the subscriber/subscribers () to a predetermined higher second value. In a third phase the subscriber/subscribers () log on again at the central unit with a higher data transmission rate; and the central unit () shuts down the fieldbus () if it detects a deviation of the number of subscribers () logged on in the first and the third phase. The invention also relates to a fieldbus system for implementing said method

Method for adjusting the data transmission rate in a fieldbus system

The present invention describes a method of allocating a defined user address to a safe bus user when connecting it to a field bus of a safe control system. The method comprises the step of sending out a first registration message from the safe bus user to an administration unit connected to the field bus. The first registration message contains a predetermined universal address. The method further comprises the step of sending out an address allocation message from the administration unit to the safe bus user, wherein the address allocation message contains the defined user address. Finally, the method comprises the step of storing the defined user address in a memory of the safe bus user.

Method of configuring a safe station and safe control system using the same

The present invention relates to an apparatus for controlling safety-critical processes. The apparatus includes at least one safe control unit for controlling the safety-critical processes and at least two safe signal units which are connected via I/O channels to the safety-critical processes. The safe control unit and the safe signal units are connected to a common fieldbus. The safe signal units communicate with the safe control unit, but not with one another, when the apparatus is in the control mode. The safe signal units have an evaluator for evaluating a fault message which is broadcasted across the fieldbus, as well as a switching device which autonomously change the safety-critical process to a safe state when a fault message which is evaluated as being relevant occurs.

Apparatus for controlling safety-critical processes

The present invention relates to an electronic safety switching device having at least a first and a second signal processing channel. The channels can be supplied with input signals for signal processing, and they provide redundantly processed output signals. According to one aspect of the invention, the signal processing channels are arranged monolithically on a common semiconductor substrate. The semiconductor structures of each signal processing channel are spaced apart physically by a multiple of their width from the semiconductor structures of every other signal processing channel.

Electronic safety switching device and method

The invention relates to a modular safety switching device system for switching actuators fail-safely off. The system comprises at least one input module for fail-safely evaluating a safety transmitter and for generating an output signal. It further comprises at least one output module for fail-safely actuating the actuator in response to the output signal from the input module. At least the input module can be operated in different selectable operating modes. A control module is provided for individually setting the operating mode of the input module and, if applicable, of the output module. A display is provided for fail-safely displaying the operating modes set.

Growing community of inventors

Stuttgart, Germany

Hans Dieter Schwenkel