A computer-implemented method for determining a parameter of a safety configuration of a safety system for a machine includes providing a virtual model of the machine in a virtual environment. The method includes simulating a scattering of particles from the virtual model of the machine and acquiring simulation data. The method includes determining spin changes of the particles, each associated with a location at the time of the spin change. The method includes filtering the determined spin changes according to a set of filter criteria. According to a first filter criterion, filtering is performed for ones of the spin changes that are greater than or equal to a defined threshold value. The method includes determining mechanical hazard locations based on the locations that are associated with the filtered spin changes. The method includes determining the parameter of the safety configuration based on the determined mechanical hazard locations.

An apparatus is described for energy-efficient execution of a safety function used for safeguarding a technical installation. A safety device detects a triggering event of the safety function, and a processing unit executes a safety-related reaction of the safety function based on the detection by the safety device. The apparatus is selectively operable in a first operating mode and a second operating mode. In the first operating mode, the safety device and the processing unit operate according to a first quality level, and, in the second operating mode, at least one of the safety device and the processing unit operates according to a second quality level. The second quality level is lower than the first quality level and at least one of (a) the safety device and (b) the processing unit is operable with a reduced capacity in the second operating mode to save energy.

A safety system includes a robot, the robot comprising, a function module, configured to perform a robot function; and

a safety module, configured to communicate with the robot, the safety module comprising a stimulus-response tester, configured to send a stimulus of a stimulus-response pair, comprising a stimulus and an expected response to the stimulus, to the robot for processing by the function module; and receive from the function module a response representing the processed stimulus; wherein if a difference between the response and the expected response is within a predetermined range, the safety module is configured to operate according to a first operational mode; and if the difference between the response and the expected response is outside of the predetermined range, the safety module is configured to operate according to a second operational mode.

A rapid shutdown device capable of driving two MOSFETs connected in series through single drive signal, which includes a switch S1, a switch S2, a control IC and a drive circuit. The PV+ terminal of the photovoltaic module is connected to an output terminal OUT+ through the switch S1 and the switch S2 connected in series in sequence. The PV− terminal of the photovoltaic module is connected to an output terminal OUT−. The control IC, the switch S1 and the switch S2 are connected with the drive circuit respectively, and the two signal terminals of the control IC control the on-off of switch S1 and switch S2 through the drive circuit. The invention adopts two switches connected in series for on-off operation, greatly improving the shutoff reliability and safety of the photovoltaic power generation system.

Disclosed herein are systems, devices, and methods for efficiently checking the integrity of a robot system. The integrity-checking system may generate a predefined motion instruction for a robot, where the predefined motion instruction instructs the robot to perform a random movement at a test time. The random movement may be associated with an expected observation at the test time. The integrity-checking system may also determine a systematic failure based on a difference between the expected observation and a current observation of the robot at the test time. The current observation may be determined from received sensor data, and if the integrity-checking system detects a failure, it may stop the robot's motion or other mitigating instructions.

A method for a device to monitor performance of a manufacturing machine which is equipped with a fixture for holding a workpiece, the fixture having at least one fixing hole, includes obtaining actual coordinate values of the fixing hole in a plurality of machining processes and calculating a standard deviation of the coordinates in at least one axial direction according to the actual coordinate values and a preset standard coordinate value. A risk index in at least one axial direction is calculated according to the standard deviation and a preset tolerance and a determination made as to whether risk index exceeds a preset threshold. A warning is sent to the machine and supervising engineer if the risk exceeds the preset threshold. A machine monitoring device and a computer readable storage medium are also provided.

An interactive autonomous robot is configured for deployment within a social environment. The disclosed robot includes a show subsystem configured to select between different in-character behaviors depending on robot status, thereby allowing the robot to appear in-character despite technical failures. The disclosed robot further includes a safety subsystem configured to intervene with in-character behavior when necessary to enforce safety protocols. The disclosed robot is also configured with a social subsystem that interprets social behaviors of humans and then initiates specific behavior sequences in response.

One example embodiment of the present invention is a control system for an actuator that is controlled by a pulse width modulation (PWM) signal. The control system includes at least two controllers that are connected to the actuator. Each of the controller sends an independent sequence of PWM signal to the actuator. The actuator is controlled by a combination of the PWM signals from all the controllers together. The controllers are synchronized by a clock signal that provides a sequence of periodic clock interval and the PWM signal from each controller occupies a separate and non-overlapping clock interval from the PWM signal of other controllers.

In one embodiment, a multi-purpose sensor may couple to a machine operating in an industrial environment and include numerous sensors disposed within the multi-purpose sensor to acquire sets of data associated with the machine or an environment surrounding the machine. A first portion of the sets of data may include historical sensor measurements over time for each of the sensors, and a second portion of the sets of data may include sensor measurements subsequent to when the first portion is acquired for each of the sensors. A processor of the multi-purpose sensor may determine a baseline collective signature based on the first portion, determine a subsequent collective signature based on the second portion, determine whether the collective signatures vary, and generate signals when a variance exists. The signals may cause a computing device, a cloud-based computing system, and/or a control/monitoring device to perform various actions.

A procedure for neutralizing an attack on a control system of an industrial asset includes detecting an anomaly in a first sensor node associated with a first unit operating in a first operational mode, and receiving time series data associated with the first sensor node. A subset of the time series data is provided to each of a plurality of virtual sensor models A first virtual sensor model is selected from among a plurality of virtual sensor models based upon the subset of the time series data received by each of the plurality of virtual sensor models. A first confidence level of the first virtual sensor is determined. Responsive to determining that the first confidence level is below a first confidence level threshold, the first unit is transferred to a second operational mode using sensor readings associated with a second sensor node of a second unit of the industrial asset.