Siemens Aktiengesellschaft

Mario Maier

Stefan Grosser

Gerald Hirmer

Martin Fichtlscherer

Tobias Gramolla

Herbert Barthel

Andreas Maximilian Schenk

Martin Maier

Edgar Sigwart

Reinhard Mark

Werner Engl

Hartmut Schütz

Mathias König

Richard List

Wemer Engl

Monika Singer

Domagoj Ilic

Joachim Wahrbichler

Philipp Löhdefink

Thomas Briemle

The invention relates to a safety switching device () comprising a control side () with at least one single-error tolerance, having a first and second control unit (), each formed on an actuation side () for emitting a switch command () to at least two switching elements (), and comprising a monitoring unit () having a first and a second connection element (), and which monitoring unit () is designed to emit the switch command () to at least one switching element () of a load circuit (), characterised in that the at least two switching elements () are each designed as standard components that are free from a forced guidance of the contacts () thereof, and the first connection element () is directly connected to the second control unit () via a first feedback channel () and the second connection element () is directly connected to the first control unit () via a second feedback channel ().

Safety switching device and safety-related device

A method for fail-safe provision of an analog output value for a control process designed for functional safety, wherein the output value is specified by a control unit as a digital output value and, in a first step, the digital output value is converted into the analog output value via a converter, in a second step, the analog output value is converted into a fail-safe digital output value using fail-safe criteria via a read-back device and, in a third step, the originally provided digital output value is compared with the converted fail-safe digital output value, where in the event of the comparison revealing a deviation or of a plausibility criterion being infringed, a safety action is performed, otherwise, the analog output value is output to the control process with the aid of a release device.

System and method for fail-safe provision of an analog output value

A method for safely detecting in two redundantly-configured output modules a possible wire break of a load, wherein during a switch-off test of a first module, a current test is performed in the respective other module and a binary test is performed in the switched-off module. The binary test determines whether the voltage switched off through the respective other module is also reaching the module with the binary tests over corresponding connection paths.

Method for operating a redundant system and system therefor

A output assembly and method for diagnosing an electrical connection for reliably identifying a possible wire break to a load in redundantly connected output assemblies in which a control device for operating a switching device is configured such that the control device subjects the measured value to a test criterion, wherein satisfaction of the test criterion initially noted in the output assembly as a diagnosis fault, and the test criterion is applied cyclically within a time period comprising a waiting time, and wherein another output assembly performs a switch-off test during this time, thus allowing a statement to be made as to whether a wire break is present.

Method for diagnosing an electrical connection, and output assembly

An industrial automation system for controlling the operating means of a technical process. The system includes fail-safe modules for interchanging process data with the operating means, i.e., actuating and measurement signals, stations having slots for modules, which slots are inter-connected by a backplane bus, a central processing unit at least for processing process signals from the technical process, and a field bus for transmitting data between the central processing unit and the stations. In accordance with the invention, the address relationship for the addressing of a fail-safe module by the central processing unit over the field bus for data processing purposes is permanently stored in a first memory in the respective module and is additionally permanently backed-up in the associated station. As a result, it is advantageously possible to safely and automatically recover the address relationships of fail-safe modules due to address relationships which have already been recognized as valid, such as during planning, being backed-up in a permanent, power-failure-safe manner at the station level. In addition, it is possible, when a module is exchanged, for a new module to reload the correct address relationships of the old module, which is no longer present, from the back-up means in the station.

Safety-oriented automation system having automatic address recovery

An input/output module for a programmable controller is provided that generates an output voltage and an output current from the power input. The input/output module functions as a power supply which re-emits or outputs at least some of the power input so that the occurrence of dissipation heat internally within the module is prevented or reduced. The input/output module reduces the power loss that arises inside the input/output module whenever a digital input receives current. A method is also provided for operating an input/output module for a programmable controller.

Input/output module for a programmable controller

An input/output module for a programmable controller is provided. The input/output module has a digital input channel, and in order to prevent power losses previously incurred internally within the module, an electrical source is provided internally within the module for evaluating the status of a sensor connected to the digital input channel. The module receives no electrical energy via the digital input channel but outputs it. A reduction is thus achieved in the power loss incurred internally within the module. A method for operating an input/output module for a programmable controller is also provided.

An input circuit (') provided with a time delay element (), which circuit is capable of being tested by a controlled high level or low level connection, and a method for the operation thereof. The delay time of the time-delay element can be modified during operation of the input circuit. In particular, the elapsed delay time is read out prior to the testing of the input circuit and is restored again after testing, so that the test does not increase the effective input delay time for the process signals. In addition or as an alternative, the delay time is set to a minimum value prior to the test to enable rapid testing of the input circuit independent of the set delay time.

Growing community of inventors

Ensdorf, Germany

Mario Maier