Control System for Safely Operating at Least One Functional Component

• US 20120035750A1
• Filed: 10/18/2011
• Published: 02/09/2012
• Est. Priority Date: 05/02/2009
• Status: Active Grant

• Current Assignee: Leopold Kostal GmbH & Company KG
• Original Assignee: Leopold Kostal GmbH & Company KG
• Inventors: Edel, Jan
• Granted Patent: US 9,008,808 B2
• Time in Patent Office: Days
• US Class Current: 700/79
• CPC Class Codes: G05B 9/02 electric

Abstract

A system includes a functional control unit and a controller. The functional control unit is configured to enable and disable operation of a functional component. The controller is configured to receive a sensor signal, evaluate safety quality of the sensor signal, generate an evaluation parameter representing the safety quality of the sensor signal, and output the sensor signal with the evaluation parameter as a pair for receipt by the functional control unit. The functional control unit is configured to control operation of the functional component depending on the safety quality indicated by the evaluation parameter.

Claims

1. A system comprising:

a functional control unit configured to enable and disable operation of a functional component; and

a controller configured to receive a sensor signal, evaluate safety quality of the sensor signal, generate an evaluation parameter representing the safety quality of the sensor signal, and output the sensor signal with the evaluation parameter as a pair for receipt by the functional control unit;

wherein the functional control unit is configured to control operation of the functional component depending on the safety quality of the sensor signal indicated by the evaluation parameter.

2. The system of claim 1 wherein:

the functional component has a safety level and can be safely operated when using a sensor signal having a safety quality satisfying the safety level of the functional component;

wherein the functional control unit is configured to enable operation of the functional component when the evaluation parameter is indicative of the safety quality of the sensor signal satisfying the safety level of the functional component.

3. The system of claim 1 wherein:

the functional component has a safety level and can be safely operated when using a sensor signal having a safety quality satisfying the safety level of the functional component;

wherein the functional control unit is configured to disable operation of the functional component when the evaluation parameter is indicative of the safety quality of the sensor signal not satisfying the safety level of the functional component.

4. The system of claim 1 wherein:

the controller is configured to generate the evaluation parameter based on a plausibility comparison of the sensor signal with known data.

5. The system of claim 1 further comprising:

a data bus configured to receive the sensor signal with the evaluation parameter from the controller and output the sensor signal with the evaluation parameter to the functional control unit.

6. The system of claim 1 further comprising:

a first sensor configured generate the sensor signal based on a sensed element and provide the sensor signal to the controller.

7. The system of claim 6 further comprising:

a monitoring sensor configured to generate a monitoring signal based on the sensed element and provide the monitoring signal to the controller;

wherein the controller is configured to generate the evaluation parameter representing the safety quality of the sensor signal based on a comparison between the sensor signal and the monitoring signal.

8. The system of claim 7 wherein:

the sensed element is a drive wheel, the first sensor is a measurement wheel, and the monitoring sensor is a monitoring wheel;

wherein the measurement wheel and the monitoring wheel each engage the drive wheel such that the measurement wheel and the monitoring wheel rotate as the drive wheel rotates.

9. The system of claim 1 wherein:

the evaluation parameter is indicative of one of a plurality of safety integrity levels at a given time.

10. A system comprising:

a plurality of functional control units each associated with one or more of functional components, wherein each functional control unit is configured to enable and disable operation of their associated functional components; and

a controller configured to receive a sensor signal, evaluate safety quality of the sensor signal, generate an evaluation parameter representing the safety quality of the sensor signal, and output the sensor signal with the evaluation parameter as a pair for receipt by the functional control units;

wherein each functional control unit is further configured to control operation of the their associated functional components depending on the safety quality of the sensor signal indicated by the evaluation parameter.

11. The system of claim 10 wherein:

each functional component has a safety level and can be safely operated when using a sensor signal having a safety quality satisfying the safety level of the functional component;

wherein each functional control unit is further configured to enable operation of a functional component when the evaluation parameter is indicative of the safety quality of the sensor signal satisfying the safety level of the functional component.

12. The system of claim 10 wherein:

each functional component has a safety level and can be safely operated when using a sensor signal having a safety quality satisfying the safety level of the functional component;

wherein each functional control unit is configured to disable operation of a functional component when the evaluation parameter is indicative of the safety quality of the sensor signal not satisfying the safety level of the functional component.

13. The system of claim 10 wherein:

the controller is further configured to generate the evaluation parameter based on a plausibility comparison of the sensor signal with known data.

14. The system of claim 10 further comprising:

a data bus configured to receive the sensor signal with the evaluation parameter from the controller and output the sensor signal with the evaluation parameter to the functional control units.

15. The system of claim 10 further comprising:

a first sensor configured generate the sensor signal based on a sensed element and provide the sensor signal to the controller.

16. The system of claim 15 further comprising:

a monitoring sensor configured to generate a monitoring signal based on the sensed element and provide the monitoring signal to the controller;

wherein the controller is further configured to generate the evaluation parameter representing the safety quality of the sensor signal based on a comparison between the sensor signal and the monitoring signal.

17. The system of claim 10 wherein:

the evaluation parameter is indicative of one of a plurality of safety integrity levels at a given time.

18. A method comprising:

receiving a sensor signal from a sensor;

evaluating safety quality of the sensor signal;

generating an evaluation parameter representing the safety quality of the sensor signal;

outputting the sensor signal with the evaluation parameter as a pair to a data bus in communication with a functional control unit, configured to enable and disable operation of a functional component, for receipt by the functional control unit; and

controlling with the functional control unit operation of the functional component depending on the safety quality of the sensor signal indicated by the evaluation parameter.

19. The method of claim 18 wherein the functional component has a safety level and can be safely operated when using a sensor signal having a safety quality satisfying the safety level of the functional component, the method further comprising:

enabling with the functional control unit operation of the functional component when the evaluation parameter is indicative of the safety quality of the sensor signal satisfying the safety level of the functional component.

20. The method of claim 18 wherein the functional component has a safety level and can be safely operated when using a sensor signal having a safety quality satisfying the safety level of the functional component, the method further comprising:

disabling with the functional control unit operation of the functional component when the evaluation parameter is indicative of the safety quality of the sensor signal not satisfying the safety level of the functional component.