A control device for controlling a machine or system includes a monitoring unit designed and configured to monitor the functional state of a second control unit such that, when the second control unit is in an activated functional state, by which the machine or system is put into a safe state, the monitoring unit connects at least one input means associated with the second control unit to a first control unit such that non-safety-relevant functions of the machine or system can be triggered by manual actuation of the input means, as long as the second control unit is in its activated functional state in which the input means is not connected to the machine or system as a proper safety switching means.

Exemplary embodiments are provided of wireless emergency stop systems. In an exemplary embodiment, a wireless emergency stop system includes a machine safety device wired to a machine stop circuit for stopping operation of a machine when the machine stop circuit is activated. The machine safety device includes a wireless communication interface. The system also includes multiple personal safety devices. Each personal safety device includes a wireless communication interface for wireless communication with the machine safety device, and an emergency stop switch. The emergency stop switch is configured to, when activated, transmit an emergency stop signal to the machine safety device to trigger an emergency stop of the machine. The machine safety device is configured to maintain wireless connections with more than one of the multiple personal safety devices at the same time. Example methods of operating a wireless emergency stop system are also disclosed.

A service panel for controlling at least one utility actuator to control the availability of a utility comprises a covered enclosure having an exterior region and an interior region, at least one readily accessible utility control providing ON and OFF request signals and a limited access control in the exterior region providing a temporary activate signal. The service panel has a controller and data storage programmed with code and data and control circuitry providing an ON control signal to the at least one utility actuator to switch the at least one utility actuator to the ON state, and the control circuitry providing an OFF control signal to the at least one utility actuator to switch the at least one utility actuator to an OFF state, the control circuitry further providing a re-key signal to the at least one actuator in response to activation of a switch.

A service panel for controlling at least one utility actuator to control the availability of a utility comprises a covered enclosure having an exterior region and an interior region, at least one readily accessible utility control providing ON and OFF request signals and a limited access control in the exterior region providing a temporary activate signal. The service panel has a controller and data storage programmed with code and data and control circuitry providing an ON control signal to the at least one utility actuator to switch the at least one utility actuator to the ON state, and the control circuitry providing an OFF control signal to the at least one utility actuator to switch the at least one utility actuator to an OFF state, the control circuitry further providing a re-key signal to the at least one actuator in response to activation of a switch.

A microcontroller unit includes at least one core, a plurality of safety fault management units, with each safety fault management unit including circuitry to detect one or more safety faults and to output an alarm signal in response to detection of one or more safety faults. The microcontroller further includes system control units operating in parallel to the at least one core. Each of the plurality of system control units can be coupled to at least one of the safety fault management units and can include hardware circuitry to generate and output a port emergency stop (PES) signal based on the alarm signals obtained from a safety fault management unit. The microcontroller includes port circuitries coupled to ports and to the system control units. The port circuitries can selectively cause a respectively connected port to enter a non-operational electronic state in response to receiving a PES signal.

A method and system for safely switching off an electrical load in a system comprising a multi-channel control unit, a single-channel data transmission path and an output unit having a first processing unit, a second processing unit and safe outputs. The method comprises receiving and evaluating an input signal by the multi-channel control unit and generating an enable signal based on the evaluation; transmitting the enable signal to the output unit via the single-channel data transmission path; receiving the enable signal by the first processing unit and generating an output signal based on the enable signal; providing at least one part of the enable signal from the first processing unit to the second processing unit for evaluation therewith; generating a dynamic clock signal by the second processing unit based on the enable signal; and controlling the safe outputs based on the output signal and the dynamic clock signal.

A pump device for extracting one or more resources includes a pump apparatus, a processor configured for receiving information from one or more sensors and sending instructions to one or more electronic controls, where the sensors and the electronic controls are each placed proximate to a respective component of the pump apparatus, and a network interface configured for sending and receiving communication from a device through a network.

An emergency command device comprises: two safety inputs connectable to a control/evaluating unit to receive an input voltage; two safety outputs connectable to the control/evaluating unit; two electrical switching paths respectively extending between the two safety inputs and the two safety outputs; an emergency actuating unit comprising: a manually triggerable actuating element, a background element, and two switches connected to the actuating element and respectively disposed in the two electrical switching paths; a light emitting unit comprising red LEDs to backlight the actuating element and yellow LEDs to backlight the background element; a voltage detector detect an electrical output voltage at one of the two safety outputs; and a flashing circuit arrangement coupled to activate flashing of the yellow LEDs and/or the red LEDs in response to detection by the voltage detector of a drop in the output voltage below a preset or presettable threshold value.

Operating unit for a container treatment machine, wherein the operating unit comprises at least one touch-sensitive display device, and the operating unit can be operated in two operating modes, wherein a first operating mode is only executed if the operating unit is connected to an operating station of the container treatment machine, and wherein a second operating mode is only executed if the operating unit is not physically connected to the operating station, wherein the first operating mode and the second operating mode differ at least with regard to one function that can be executed with the operating unit.

A user carried remote control interrupt transmitter that communicates with an interrupt receiver configured with a stop line circuit of a manufacturing process, such as a conveyor interrupt circuit. The remote control interrupt transmitter permits a user performing tasks associated with the manufacturing process to activate the stop line circuit from any location in the vicinity of the manufacturing process.