SAFETY INTERLOCKS FOR ELECTRICITY METER CONTROL RELAYS

• US 20110187206A1
• Filed: 01/29/2010
• Published: 08/04/2011
• Est. Priority Date: 01/29/2010
• Status: Active Grant

• Current Assignee: Elster Solutions LLC (Honeywell International Inc.)
• Original Assignee: Elster Solutions LLC (Honeywell International Inc.)
• Inventors: Jones, Charles H., Hart, David G.
• Granted Patent: US 8,212,432 B2
• Time in Patent Office: Days
• US Class Current: 307/328
• CPC Class Codes: G01D 2204/45 Utility meters networked together within a single building
• CPC Class Codes: G01D 4/02 Details
• CPC Class Codes: G01R 22/061 Details of electronic electricity meters
• CPC Class Codes: Y02B 90/20 Smart grids as enabling technology in buildings sector smart grids supporting the management or operation of end-user stationary applications in general, or like technologies with no associated climate change mitigation effect Y04S20/00
• CPC Class Codes: Y04S 20/30 Smart metering, e.g. specially adapted for remote reading

Abstract

Safety in an electricity metering environment is improved by providing an additional level of safety interlocking to disconnect switches and other control relays in electricity meters.

Claims

1. In an electricity meter comprising a processor, a memory, a communication interface, and at least one control relay that has a first state in which the control relay is open and a second state in which the control relay is closed, the state of the control relay being controlled by the processor, a method comprising:

receiving a request via the communications interface to change a state of the at least one control relay;

checking a state of a safety interlock flag stored in the memory of the electricity meter, the safety interlock flag indicating whether or not changes to the state of the at least one control relay are permitted; and

changing the state of the at least one control relay in response to the received request, only if the state of the safety interlock flag indicates that changes are permitted, but otherwise not changing the state of the at least one control relay.

2. The method recited in claim 1, wherein the communications interface via which the request to change the state of the at least one control relay comprises an optical port of the electricity meter, an option board connected to the electricity meter, or a wireless communications interface.

3. The method recited in claim 1, wherein the at least one control relay comprises a disconnect switch or an auxiliary control relay.

4. The method recited in claim 1, wherein the at least one control relay comprises a plurality of control relays, and wherein there is stored in the memory a respective safety interlock flag for each of the control relays, and further wherein said receiving, checking and changing steps may be performed independently for each control relay and its respective safety interlock flag.

5. The method recited in claim 1, further comprising:

receiving a request to change the state of the safety interlock flag stored in the memory of the electricity meter and an identification of a source of the request;

determining from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the safety interlock flag; and

changing the state of the safety interlock flag as requested, only if it is determined that the source of the request is permitted to change the state of the safety interlock flag.

6. The method recited in claim 5, wherein the request to change the state of the safety interlock flag is received in encrypted form, and wherein the method further comprises decrypting the request.

7. The method recited in claim 5, wherein the step of determining from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the safety interlock flag comprises:

comparing the identifier of the source of the request to entries in a rights management table;

locating an entry corresponding to the identifier of the source of the request; and

determining from the located entry whether the source is permitted to change the state of the safety interlock flag.

8. The method recited in claim 5, wherein the source of the request to change the state of the safety interlock flag comprises a person, an entity, a device or a particular type of communications interface over which the request is received.

9. The method recited in claim 1, wherein the request to change the state of the at least one control relay is received in encrypted form, and wherein the method further comprises decrypting the request.

10. The method recited in claim 1, further comprising:

receiving an identification of a source of the request to change the state of the at least one control relay; and

prior to changing the state of the at least one control relay;

determining from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the at least one control relay; and

changing the state of the at least one control relay as requested, only if it is determined that the source of the request is permitted to change the state of the at least one control relay.

11. The method recited in claim 10, wherein the step of determining from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the at least one control relay comprises:

comparing the identifier of the source of the request to entries in a rights management table;

locating an entry corresponding to the identifier of the source of the request; and

determining from the located entry whether the source is permitted to change the state of the at least one control relay.

12. An electricity meter comprising:

at least one control relay that has a first state in which the control relay is open and a second state in which the control relay is closed;

a memory containing a safety interlock flag having a state that indicates whether or not changes to the state of the at least one control relay are permitted;

a communications interface adapted to receive a request to change the state of the at least one control relay; and

a processor that controls the state of the control relay, the processor operating to receive a request via the communications interface to change the state of the at least one control relay, to check the state of the safety interlock flag stored in the memory of the electricity meter and to determine therefrom whether or not changes to the state of the at least one control relay are permitted, and to change the state of the at least one control relay in response to the received request, only if the state of the safety interlock flag indicates that changes are permitted, but otherwise to not change the state of the at least one control relay.

13. The electricity meter recited in claim 12, wherein the communications interface via which the request to change the state of the at least one control relay comprises an optical port of the electricity meter, an option board connected to the electricity meter, or a wireless communications interface.

14. The electricity meter recited in claim 12, wherein the at least one control relay comprises a disconnect switch or an auxiliary control relay.

15. The electricity meter recited in claim 12, wherein the at least one control relay comprises a plurality of control relays, and wherein there is stored in the memory a respective safety interlock flag for each of the control relays, and further wherein the processor may perform the receive, check and change functions independently for each control relay and its respective safety interlock flag.

16. The electricity meter recited in claim 12, wherein the processor further operates to receive a request to change the state of the safety interlock flag stored in the memory of the electricity meter and an identification of a source of the request, to determine from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the safety interlock flag, and to change the state of the safety interlock flag as requested, only if it is determined that the source of the request is permitted to change the state of the safety interlock flag.

17. The electricity meter recited in claim 16, wherein the request to change the state of the safety interlock flag is received in encrypted form, and wherein the processor further operates to decrypt the request.

18. The electricity meter recited in claim 16, wherein the processor determines from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the safety interlock flag by (i) comparing the identifier of the source of the request to entries in a rights management table;

(ii) locating an entry corresponding to the identifier of the source of the request; and

(iii) determining from the located entry whether the source is permitted to change the state of the safety interlock flag.

19. The electricity meter recited in claim 16, wherein the source of the request to change the state of the safety interlock flag comprises a person, an entity, a device or a particular type of communications interface over which the request is received.

20. The electricity meter recited in claim 12, wherein the request to change the state of the at least one control relay is received in encrypted form, and wherein the processor further operates to decrypt the request.

21. The electricity meter recited in claim 12, wherein the processor further operates to receive an identification of a source of the request to change the state of the at least one control relay, and prior to changing the state of the at least one control relay, still further operates to (i) determine from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the at least one control relay;

and (ii) change the state of the at least one control relay as requested, only if it is determined that the source of the request is permitted to change the state of the at least one control relay.

22. The electricity meter recited in claim 21, the processor determines from information stored in the memory of the electricity meter whether the source of the request is permitted to change the state of the at least one control relay by (i) comparing the identifier of the source of the request to entries in a rights management table;

(ii) locating an entry corresponding to the identifier of the source of the request; and

(iii) determining from the located entry whether the source is permitted to change the state of the at least one control relay.