A system and method for redundantly monitoring faultless functioning of first and second rotational speed sensors on an electric motor, where the rotational speed is to precisely determine and monitor a rotor position, where a first product is formed from a first current count of the first output signal of the first sensor and a maximum count of the second output signal, a second product is formed from a second current count of the second output signal of the second sensor and a maximum count of the first output signal, the two products are cyclically checked for equality and, in when the check is negative, an error message is generated, where the method provides the position of both sensors in a common values system and the positions can be directly compared with one another such that precise determination and monitoring of the rotor position becomes possible.

A safety switching device for fail-safely disconnecting an electrical load has an input part for receiving a safety-relevant input signal, a logic part for processing the at least one safety-relevant input signal, and an output part. The output part has a relay coil and four relay contacts. The first and second relay contacts are arranged electrically in series with one another. The third and fourth relay contacts are also arranged electrically in series with one another. The first and the third relay contacts are mechanically coupled to each other and form a first group of positively driven relay contacts. The second and the fourth relay contacts are mechanically coupled to each other and form a second group of positively driven relay contacts. The logic part redundantly controls the first and the second groups of positively driven relay contacts to selectively allow, or to interrupt in a fail-safe manner, a current flow to the electrical load, depending on the safety-relevant input signal. The relay coil is electromagnetically coupled to the first and second groups of positively driven relay contacts so that the logic part can control the relay contacts together via a single relay coil.

A safety switching device for fail-safely disconnecting an electrical load has an input part for receiving a safety-relevant input signal, a logic part for processing the at least one safety-relevant input signal, and an output part. The output part has a relay coil and four relay contacts. The first and second relay contacts are arranged electrically in series with one another. The third and fourth relay contacts are also arranged electrically in series with one another. The first and the third relay contacts are mechanically coupled to each other and form a first group of positively driven relay contacts. The second and the fourth relay contacts are mechanically coupled to each other and form a second group of positively driven relay contacts. The logic part redundantly controls the first and the second groups of positively driven relay contacts to selectively allow, or to interrupt in a fail-safe manner, a current flow to the electrical load, depending on the safety-relevant input signal. The relay coil is electromagnetically coupled to the first and second groups of positively driven relay contacts so that the logic part can control the relay contacts together via a single relay coil.

The present invention relates to a dual controller system for analyzing a control signal received from two dual controllers, both of which operate in an active state, to check whether an error occurs in the controllers and to perform operation with a controller in a normal state. A dual controller system according to the present invention includes a plurality of lower-layer modules performing respective functions, and first and second controllers for controlling each of the plurality of lower-layer modules, wherein the first and second controllers transmit control signals to the plurality of lower-layer modules, and the lower-layer modules determine whether an error occurs in the two received control signals, remove an erroneous control signal and perform a function according to a normal control signal.

A method for controlling an automation system having control redundancy is provided. The automation system has at least a first controller, a second controller and a plurality of field devices connected to the first and second controller via a data bus, with the first and second controller configured to cyclically control an automation process of the automation system. The method comprises cyclically controlling the automation process via the first controller, determining a malfunction of the first controller during an (n+x)-th control cycle, where the (n+x)-th control cycle is carried out x control cycles later in time than the n-th control cycle, and sending out an n-th set of output data via a second input-output unit of the second controller to the plurality of field devices in the (n+x)-th control cycle, for controlling the automation process. An automation system is configured to carry out the method.

A method for controlling an automation system having control redundancy is provided. The automation system has at least a first controller, a second controller and a plurality of field devices connected to the first and second controller via a data bus, with the first and second controller configured to cyclically control an automation process of the automation system. The method comprises cyclically controlling the automation process via the first controller, determining a malfunction of the first controller during an (n+x)-th control cycle, where the (n+x)-th control cycle is carried out x control cycles later in time than the n-th control cycle, and sending out an n-th set of output data via a second input-output unit of the second controller to the plurality of field devices in the (n+x)-th control cycle, for controlling the automation process. An automation system is configured to carry out the method.

The present invention relates to an induction heating cooker including a synchronization circuit for a plurality of inverters, comprising: a first inverter including a first switching circuit unit for applying a first power source to a first heating coil, and a first control unit for controlling the first switching circuit unit; and a second inverter including a second switching circuit unit for applying a second power source to a second heating coil, and a second control unit for controlling the second switching circuit unit, wherein the first inverter further includes a first insulated signal transfer unit for controlling an operation of the second switching circuit unit, and the first control unit may match an operating frequency of the second switching circuit unit with an operating frequency of the first switching circuit unit by using the first insulated signal transfer unit.

A device for controlling a safety apparatus comprises at least one OSSD-type output having an output terminal to be connected to a corresponding input of the safety apparatus, said OSSD output being powerable to a maximum threshold value and to a minimum threshold value of the supply voltage suitable for determining respectively the ON and OFF conditions of said at least one output, a control circuit suitable for carrying out a test of the operation of said at least one OSSD output by sending test micropulses for switching said output terminal to said minimum threshold value to send an error signal to the safety in case of detection of a value different from said minimum threshold value, said control circuit being adapted to generate test micropulses having variable or adjustable duration.

A device for controlling a safety apparatus comprises at least one OSSD-type output having an output terminal to be connected to a corresponding input of the safety apparatus, said OSSD output being powerable to a maximum threshold value and to a minimum threshold value of the supply voltage suitable for determining respectively the ON and OFF conditions of said at least one output, a control circuit suitable for carrying out a test of the operation of said at least one OSSD output by sending test micropulses for switching said output terminal to said minimum threshold value to send an error signal to the safety in case of detection of a value different from said minimum threshold value, said control circuit being adapted to generate test micropulses having variable or adjustable duration.

A system is described. The system includes at least one power supply, a control system communicatively coupled to the at least one power supply, a communication module, and at least one channel connecting the at least one power supply to the communication module. The at least one channel is also configured to support communication according to a particular communication protocol. The communication module is configured to interface with two or more power supplies of the at least one power supply via the at least one channel, and each power supply of the at least one power supply is configured to transmit diagnostic data associated with the power supply to the communication module via the at least one channel.