Safety system with test signal path through bus line and termination element
First Claim
1. A safety system comprisinga safety unit (10) having an output (X1) and a safety input (I1);
- a bus line (18) which is connected to the output (X1) and to the safety input (I1) of the safety unit (10);
a plurality of safety related participants (22) connected to the bus line (18) which each comprise a protective device (24);
wherein the bus line (18) and the safety related participants (22) connected to the bus line (18) form a test signal path (36) having a forward path (38) connected to the output (X1) of the safety unit (10) and having a return path (40) connected to the safety input (I1) of the safety unit (10);
wherein a plurality of safety related participants (22) are arranged along the bus line (18) in a line in such a way that both the forward path (38) and the return path (40) of the test signal path (36) run through the same safety related participants (22) and wherein the safety related participants (22) are adapted such that an occurrence of a non-secure state of the associated protective device (24) brings about an interruption of the test signal path (36);
wherein the safety system further comprises;
a termination element (32) connecting the forward path (38) to the return path (40) of the test signal path (36),wherein the safety unit (10) is configured to transmit an output signal (72) at its output (X1) connected to the forward path (38), wherein the output signal (72) comprises periodically recurring synchronization features (74) and has a time base;
wherein the termination element (32) is configured to receive the output signal (72) from the forward path (38) and to output a test signal (80) to the return path (40) of the test signal path (36), said test signal being changed with respect to the received output signal (72) in dependence on the output signal (72) received from the forward path (38), wherein the test signal (80) generated by the termination element (32) has a high level having a test gap (82), the test gap recurring at periodic spacings;
wherein the safety unit (10) comprises a safety module (126) and a connection module (128) connected to the safety module (126), wherein the bus line (18), the safety related participants (22) and the termination element (32) are connected to the safety module (126) via the connection module (128) and wherein the safety module (126) and the connection module (128) are designed as two devices independent from one another;
wherein the safety module (126) of the safety unit (10) is adapted to make available a test signal at an output (X1′
) of the safety module (126) and to transmit the test signal to the connection module (128), said test signal corresponding to a test signal expected by the safety module (126), and to check whether the test signal received at a safety input (IF) of the safety module (126) corresponds to the expected test signal, and wherein the connection module (128) is configured to generate and to transmit the output signal (72) of the safety unit (10) in dependence on the test signal transmitted at the output (X1′
) of the safety module (126);
wherein the connection module (128) is adapted to configure the termination element (32) in such a way that the termination element (32) generates a test signal (80) and outputs the test signal to the return path (40) of the test signal path (36), said test signal corresponding to the test signal expected by the safety module (126); and
wherein the termination element (32) is configured to detect the synchronization features (74), and wherein said test signal (80) transmitted by the termination element (32) is synchronized with respect to the presence of the synchronization features (74) in the output signal (72), and wherein the termination element (32) has its own time base independent from the time base of the received output signal (72) and synchronizes its own time base with the presence of the synchronization features (74) in such a way that the start of the test gaps (82) respectively coincides with the start of the synchronization features (74).
1 Assignment
0 Petitions
Accused Products
Abstract
Multiple safety related participants are arranged along a bus line in such a way that both a forward test signal path and a return test signal path run through the same safety related participants and the safety related participants are adapted in such a way that the occurrence of a non-secure state of their protective device brings about an interruption of the test signal path. A termination element connects the forward test signal path to the return test signal path. The safety unit is configured to transmit an output signal at its output and the termination element is configured to receive the output signal from the forward test signal path and to output a test signal to the return test signal path. The test signal is changed with respect to the received output signal in dependence on the received output signal.
20 Citations
12 Claims
-
1. A safety system comprising
a safety unit (10) having an output (X1) and a safety input (I1); -
a bus line (18) which is connected to the output (X1) and to the safety input (I1) of the safety unit (10); a plurality of safety related participants (22) connected to the bus line (18) which each comprise a protective device (24); wherein the bus line (18) and the safety related participants (22) connected to the bus line (18) form a test signal path (36) having a forward path (38) connected to the output (X1) of the safety unit (10) and having a return path (40) connected to the safety input (I1) of the safety unit (10); wherein a plurality of safety related participants (22) are arranged along the bus line (18) in a line in such a way that both the forward path (38) and the return path (40) of the test signal path (36) run through the same safety related participants (22) and wherein the safety related participants (22) are adapted such that an occurrence of a non-secure state of the associated protective device (24) brings about an interruption of the test signal path (36); wherein the safety system further comprises; a termination element (32) connecting the forward path (38) to the return path (40) of the test signal path (36), wherein the safety unit (10) is configured to transmit an output signal (72) at its output (X1) connected to the forward path (38), wherein the output signal (72) comprises periodically recurring synchronization features (74) and has a time base; wherein the termination element (32) is configured to receive the output signal (72) from the forward path (38) and to output a test signal (80) to the return path (40) of the test signal path (36), said test signal being changed with respect to the received output signal (72) in dependence on the output signal (72) received from the forward path (38), wherein the test signal (80) generated by the termination element (32) has a high level having a test gap (82), the test gap recurring at periodic spacings; wherein the safety unit (10) comprises a safety module (126) and a connection module (128) connected to the safety module (126), wherein the bus line (18), the safety related participants (22) and the termination element (32) are connected to the safety module (126) via the connection module (128) and wherein the safety module (126) and the connection module (128) are designed as two devices independent from one another; wherein the safety module (126) of the safety unit (10) is adapted to make available a test signal at an output (X1′
) of the safety module (126) and to transmit the test signal to the connection module (128), said test signal corresponding to a test signal expected by the safety module (126), and to check whether the test signal received at a safety input (IF) of the safety module (126) corresponds to the expected test signal, and wherein the connection module (128) is configured to generate and to transmit the output signal (72) of the safety unit (10) in dependence on the test signal transmitted at the output (X1′
) of the safety module (126);wherein the connection module (128) is adapted to configure the termination element (32) in such a way that the termination element (32) generates a test signal (80) and outputs the test signal to the return path (40) of the test signal path (36), said test signal corresponding to the test signal expected by the safety module (126); and wherein the termination element (32) is configured to detect the synchronization features (74), and wherein said test signal (80) transmitted by the termination element (32) is synchronized with respect to the presence of the synchronization features (74) in the output signal (72), and wherein the termination element (32) has its own time base independent from the time base of the received output signal (72) and synchronizes its own time base with the presence of the synchronization features (74) in such a way that the start of the test gaps (82) respectively coincides with the start of the synchronization features (74). - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A termination element (32) for use in a safety system, the safety system comprising
a safety unit (10) having an output (X1) and a safety input (I1); -
a bus line (18) which is connected to the output (X1) and to the safety input (I1) of the safety unit (10); a plurality of safety related participants (22) connected to the bus line (18) which each comprise a protective device (24); wherein the bus line (18) and the safety related participants (22) connected to the bus line (18) form a test signal path (36) having a forward path (38) connected to the output (X1) of the safety unit (10) and having a return path (40) connected to the safety input (I1) of the safety unit (10); wherein a plurality of safety related participants (22) are arranged along the bus line (18) in a line in such a way that both the forward path (38) and the return path (40) of the test signal path (36) run through the same safety related participants (22) and wherein the safety related participants (22) are adapted such that an occurrence of a non-secure state of the associated protective device (24) brings about an interruption of the test signal path (36); wherein the safety unit (10) is configured to transmit an output signal (72) at its output (X1) connected to the forward path (38), wherein the output signal (72) comprises periodically recurring synchronization features (74) and has a time base; wherein the termination element (32) comprises an input for connection to the forward path (38) and an output for connection to the return path (40) and is configured to receive the output signal (72) made available at its input and to output a test signal in dependence on the received output signal (72), said test signal being changed with respect to the received signal (72) and being synchronized with the received output signal (72) to the return path (40) of the test signal path (36), with the termination element (32) having its own time base and being adapted to use this time base for synchronization of the test signal (80) to the received output signal (72), wherein the test signal (80) generated by the termination element (32) has a high level having a test gap (82), the test gap recurring at periodic spacings; wherein the safety unit (10) comprises a safety module (126) and a connection module (128) connected to the safety module (126), wherein the bus line (18), the safety related participants (22) and the termination element (32) are connected to the safety module (126) via the connection module (128) and wherein the safety module (126) and the connection module (128) are designed as two devices independent from one another; wherein the safety module (126) of the safety unit (10) is adapted to make available a test signal at an output (X1′
) of the safety module (126) and to transmit the test signal to the connection module (128), said test signal corresponding to a test signal expected by the safety module (126), and to check whether the test signal received at a safety input (I1′
) of the safety module (126) corresponds to the expected test signal, and wherein the connection module (128) is configured to generate and to transmit the output signal (72) of the safety unit (10) in dependence on the test signal transmitted at the output (X1′
) of the safety module (126);wherein the connection module (128) is adapted to configure the termination element (32) in such a way that the termination element (32) generates a test signal (80) and outputs the test signal to the return path (40) of the test signal path (36), said test signal corresponding to the test signal expected by the safety module (126); and wherein the termination element (32) is configured to detect the synchronization features (74), and wherein said test signal (80) transmitted by the termination element (32) is synchronized with respect to the presence of the synchronization features (74) in the output signal (72), and wherein the termination element (32) has its own time base independent from the time base of the received output signal (72) and synchronizes its own time base with the presence of the synchronization features (74) in such a way that the start of the test gaps (82) respectively coincides with the start of the synchronization features (74).
-
Specification