Diagnostic circuit for programmable logic safety control systems

• US 4,415,884 A
• Filed: 10/07/1981
• Issued: 11/15/1983
• Est. Priority Date: 10/07/1981
• Status: Expired due to Fees

• Current Assignee: Combustion Engineering Incorporated (ABB Limited)
• Original Assignee: Combustion Engineering Incorporated (ABB Limited)
• Inventors: Schuss, Jack A., Delin, Michael A.
• Primary Examiner(s): Crosland, Donnie L.
• Application Number:
  US06/309,287
• Time in Patent Office: 769 Days
• Field of Search: 340/500, 340/501, 340/505, 340/506, 340/507, 340/511, 340/514, 340/517, 340/518, 340/532, 340/538, 340/577, 340/578, 340/579, 340/635, 340/644, 340/645, 340/648, 340/650 , 340/651, 340/652, 340/653, 340/638, 340/516, 431/12, 431/13, 431/15, 431/17, 431/18, 431/46, 361/189, 361/190, 361/1, 361/23, 361/67, 361/100, 307/252 B, 307/252 Q, 307/117, 364/431, 364/477
• US Class Current: 340/500
• CPC Class Codes: G05B 19/058 Safety, monitoring
• CPC Class Codes: G05B 2219/1186 Redundant inputs parallel, outputs series, load safe switch off, AND condition
• CPC Class Codes: G08B 23/00 Alarms responsive to unspecified undesired or abnormal conditions
• CPC Class Codes: G08G 1/097 Supervising of traffic control systems, e.g. by giving an alarm if two crossing streets have green light simultaneously

Abstract

A programmable controller (41) based logic system places two electronic output converters (14,18) in series for redundant protection against the inadvertent energization, due to the failure of an image register (66,68) or due to the shorted failure of a triac (10,12) on the output converters (14,18), of an energize-to-start, deenergize-to-stop field device (28). A control and monitor circuit monitors the image registers (66,68) and the output converter (14,18) triacs (10,12) that switch power on and off to the field device (28) to assure that the triacs (10,12) have not failed in an unsafe mode or that the image registers (66,68) have not failed. The monitor circuit continuously monitors both image registers (66,68), the first triac (10) and the series combination of the two triacs (10,12). The monitor circuit intermittently monitors the second image register (66) and the second triac (12). A failure of either or both triacs (10,12) or either or both image registers (66,68) energizes an alarm.

Claims

1. In a programmable controller based logic system having an alarm system for alarming malfunctions, an alternating current voltage source, first and second image registers, electronic input and output modules, said output modules containing solid state switches capable of switching the output module load power, and first and second output module solid state switches connected in series to energize and deenergize an energize-to-start, deenergize-to-stop field device, a method of operating a programmable controller based logic system comprising:

a. monitoring said first image register, said second image register and the integrity of the series combintion of said first and second solid state switches;

b. independently of and simultaneously with step (a), monitoring said first image register and the integrity of said first solid state switch;

c. independently of steps (a) and (b), monitoring intermittently said second image register and the integrity of said second solid state switch; and

d. alarming an unsafe condition whenever said monitoring indicates the failure of said first image register. and second image register, said first solid state switch, said second solid state switch or the series combination of said first solid state switch and said second solid state switch.

2. The method of operating a programmable controller based logic system as recited in claim 1 further comprising the step of:

monitoring said input modules continuously to assure that said input modules which monitor said output modules on which said solid state switches reside are electrically connected to said programmable controller and that power is available to said input modules from said alternating current voltage source.

3. The method of operating a programmable controller based logic system as recited in claim 1:

wherein said step of monitoring intermittently said second image register and the integrity of said second solid state switch includes initiating a start signal;

generating a pulse of approximately one-half second duration;

switching said first of two series solid state switches to the on-state for the duration of said pulse;

detecting the presence or absence of voltage at the output of said second of two series solid state switches for the duration of the pulse; and

latching in a permissive to start upon the detection of absence of voltage at the output of said second of two series solid state switches.

4. The method of operating a programmable controller based logic system as recited in claim 1, 2, or 3:

wherein said step of monitoring said first image register and the integrity of said first solid state switch includes monitoring said first image register and the integrity of said first solid state switch while the burner associated field device logic is not in the startup stage.

5. The method of operating a programmable controller based logic system as recited in claim 4:

wherein said step of monitoring said first image register and the integrity of said first solid state switch includes monitoring said first image register and the integrity of said first solid state switch while the burner associated field device logic is not in the operation stage.

6. The method of operating a programmable controller based logic system as recited in claim 1, 2, or 3:

wherein said step of monitoring said first image register, said second image register and the integrity of the series combination of said first and second solid state switches includes monitoring said first image register, said second image register and the integrity of the series combination of said first and second solid state switches while the field device logic is not in the startup stage.

7. The method of operating a programmable controller based logic system as recited in claim 6:

wherein said step of monitoring said first image register, said second image register and the integrity of the series combination of said first and second solid state switches includes monitoring said first image register, said second image register and the series combination of said first and second solid state switches while the field device logic is not in the operation stage.

8. The method of operating a programmable controller based logic system as recited in claim 2:

wherein said step of monitoring said input modules continuously to assure that said input modules which monitor said output modules on which said solid state switches reside are electrically connected to said programmable controller and that power is available to said input modules includes controlling normally when said input modules are electrically connected to said programmable controller.

9. The method of operating a programmable controller based logic system as recited in claim 2:

wherein said step of monitoring said input modules continuously to assure that said input modules which monitor said output modules on which said solid state switches reside are electrically connected to said programmable controller and that power is available to said input modules includes alarming the condition of at least one of said input modules being electrically disconnected from said programmable controller.

10. In a programmable controller based burner management system having an alarm system for alarming malfunctions, an alternating current voltage source, first and second image registers, electronic input and output modules, said output modules containing solid state switches capable of switching the output module load power, and first and second output module solid state switches connected in series to energize and deenergize an energize-to-start, deenergize-to-stop burner associated field device, a method of operating a programmable controller based burner management system comprising:

a. monitoring said first image register, said second image register and the integrity of the series combination of said first and second solid state switches;

b. independently of and simultaneously with step (a), monitoring said first image register and the integrity of said first solid state switch;

c. independently of step (a) and (b), monitoring intermittently said second image register and the integrity of said second solid state switch; and

d. alarming an unsafe condition whenever said monitoring indicates the failure of said first image register, said second image register, said first solid state switch, said second solid state switch or the series combination of said first solid state switch and said second solid state switch.

11. The method of operating a programmable controller based burner management system as recited in claim 10 further comprising the step of:

monitoring said input modules continuously to assure that said input modules which monitor said output modules on which said solid state switches reside are electrically connected to said programmable controller and that power is available to said input modules from said alternating current voltage source.

12. The method of operating a programmable controller based burner management system as recited in claim 10:

wherein said step of monitoring intermittently said second image register and the integrity of said second solid state switch includes initiating a burner start signal;

generating a pulse of approximately one-half second duration;

switching said first of two series solid state switches to the on-state for the duration of said pulse;

detecting the presence or absence of voltage at the output of said second of two series solid state switches for the duration of the pulse; and

latching in a permissive to start upon the detection of absence of voltage at the output of said second of two series solid state switches.

13. The method of operating a programmable controller based burner management system as recited in claim 10, 11, or 12:

wherein said step of monitoring said first image register and the integrity of said first solid state switch includes monitoring said first image register and the integrity of said first solid state switch while the burner associated field device logic is not in the startup stage.

14. The method of operating a programmable controller based burner management system as recited in claim 13:

wherein said step of monitoring said first image register and the integrity of said first solid state switch includes monitoring said first image register and the integrity of said first solid state switch while the burner associated field device logic is not in the operation stage.

15. The method of operating a programmable controller based burner management system as recited in claim 10, 11, or 12:

wherein said step of monitoring said first image register, said second image register and the integrity of the series combination of said first and second solid state switches includes monitoring said first image register, said second image register and the integrity of the series combination of said first and second solid state switches while the burner associated field device logic is not in the startup stage.

16. The method of operating a programmable controller based burner management system as recited in claim 15:

wherein said step of monitoring said first image register, said second image register and the integrity of the series combination of said first and second solid state switches includes monitoring said first image register, said second image register and the series combination of said first and second solid state switches while the burner associated field device logic is not in the operating stage.

17. The method of operating a programmable controller based burner management system as recited in claim 11:

wherein said step of monitoring said input modules continuously to assure that said input modules which monitor said output modules on which said solid state switches reside are electrically connected to said programmable controller and that power is available to said input modules includes controlling normally when said input modules are electrically connected to said programmable controller.

18. The method of operating a programmable controller based burner management system as recited in claim 11:

wherein said step of monitoring said input modules continuously to assure that said input modules which monitor said output modules on which said solid state switches reside are electrically connected to said programmable controller and that power is available to said input modules includes alarming the condition of at least one of said input modules being electrically disconnected from said programmable controller.