Control device, control method and recording medium

Abstract

This control device is connected to a master device and controls a drive target on the basis of the content of communication with the master device, and includes a communication unit which periodically transmits to and receives from the master device first information, which is information relating to control of the drive target, and second information, which is information relating to safety; a first processing unit which controls the drive target by processing the first information; a second processing unit which, by processing the second information, performs processing to ensure safety of the drive target; and an abnormality determining unit which determines that an abnormality has occurred if both the first information and the second information have not been processed within a prescribed period.

Claims

1. A control device connected to a master device and performing controls of a drive target based on a content of communication with the master device, the control device comprising: a communication unit which periodically transmits and receives, to and from the master device, first information which is information on the controls of the drive target and second information which is information on security; a first processing unit which controls the drive target by processing the first information; a second processing unit which performs processing for ensuring security of the drive target by processing the second information; and an abnormality determining unit which detects an abnormality when both the first information and the second information are not processed normally within a prescribed period, wherein an operation of the drive target is stopped when the abnormality is detected, the first information and the second information are respectively transmitted and received by independent packets, the abnormality determining unit: detects the abnormality when the first information is not processed normally within the prescribed period while the drive target is being driven, and detects the abnormality when both the first information and the second information are not processed normally within the prescribed period while the drive target is not being driven.

2. The control device according to claim 1, wherein the first information and the second information are transmitted and received in different cycles.

3. The control device according to claim 2, wherein a transception cycle of the first information is shorter than a transception cycle of the second information.

4. A control method performed by a control device which is connected to a master device and performs controls of a drive target based on a content of communication with the master device, the control method comprising: a communication step of periodically transmitting and receiving, to and from the master device, first information which is information on the controls of the drive target and second information which is information on security; a first processing step of controlling the drive target by processing the first information; a second processing step of performing processing for ensuring security of the drive target by processing the second information; and an abnormality determining step of detecting an abnormality when both the first information and the second information are not processed normally within a prescribed period, wherein an operation of the drive target is stopped when the abnormality is detected, the first information and the second information are respectively transmitted and received by independent packets, the abnormality determining step comprises: detecting the abnormality when the first information is not processed normally within the prescribed period while the drive target is being driven, and detecting the abnormality when both the first information and the second information are not processed normally within the prescribed period while the drive target is not being driven.

5. A non-transient computer-readable recording medium that stores a program which causes a computer to implement the control method according to claim 4.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

(1) FIG. 1 is a schematic view of a control system according to the first embodiment.

(2) FIG. 2 is a module configuration view of a CPU unit 22 according to the conventional art.

(3) FIGS. 3A, 3B and 3C are views showing PDO communication.

(4) FIG. 4 is a module configuration view of a CPU unit 22 according to the first embodiment.

DESCRIPTION OF THE EMBODIMENTS

First Embodiment

(5) <System Configuration>

(6) Hereinafter, preferred embodiments of the invention will be described with reference to the drawings.

(7) FIG. 1 is a schematic view showing a control system according to the first embodiment. The control system according to the first embodiment is configured to include a master PLC, which is a master node, and a plurality of slaves, which are slave nodes.

(8) The master PLC 10 is a device that controls the plurality of slaves 20. Specifically, management of programs executed by the slaves 20, monitoring of the operating state of the slaves 20, and the like are performed.

(9) The slave 20 is a device that is electrically connected to the master PLC 10, a servomotor 30 and a sensor 40, drives the servomotor 30 according to a command received from the master PLC 10, obtains information on the driving of the servomotor 30 from the sensor 40, and transmits the information to the master PLC 10. Moreover, the slave 20 has a safety controller function.

(10) The slave 20 typically includes a communication unit 21 which performs network communication, a CPU unit 22 which is an entity that executes a program, and an I/O unit which inputs and outputs signals from the field. Specifically, an output unit 23 drives the servomotor 30 based on the execution result of the program executed by the CPU unit 22, and an input unit 24 obtains an input signal from the sensor 40 which senses the servomotor 30.

(11) Although not shown, the CPU unit 22 may have a part for performing input and output (such as a touch panel or a display). For example, information on the operation of the PLC may be provided to a user.

(12) The master PLC 10 and the slaves 20 are connected via a network such as Ethernet (registered trademark). In the present embodiment, the master PLC 10 and the slaves 20 are configured to communicate using EtherCAT (registered trademark).

(13) Different servomotors 30 are respectively connected to the plurality of slaves 20. Although FIG. 1 shows an example in which one servomotor 30 is connected to one slave 20, the number of motors connected to the slave 20 may also be plural. In the case where the number of motors connected to the slave 20 is plural, information on the driving of each servomotor 30 is unified by the slave and transmitted to the master PLC 10.

(14) Moreover, although three slaves 20 are shown in FIG. 1, the number of slaves connected to the network is not limited.

(15) <CPU Unit in Conventional Example>

(16) Next, the module configuration of the CPU unit 22 will be described. FIG. 2 is a module configuration view of the CPU unit 22 in the conventional art.

(17) Moreover, in the description of the present embodiment, only the modules that perform process data communication are shown, and illustration and description of the modules that perform mailbox communication are omitted.

(18) The CPU unit 22 has a module that transmits and receives a PDO to and from the master PLC, and a module that processes the received PDO.

(19) In this example, a PDO reception module 221A receives a PDO transmitted from the master PLC and divides the received PDO respectively into a standard PDO and a safety PDO.

(20) Here, the standard PDO and the safety PDO will be described.

(21) In the control system to which the invention is applicable, the master PLC and the slaves perform information exchange through PDO communication. The PDO communication is performed cyclically (periodically), and a PDO transmitted from the master PLC circulates in all the slaves. Moreover, in this example, the PDO transmitted from the master PLC includes, in the same one packet, a standard PDO in which information for performing control on the motor (e.g., position information, speed information, torque information, etc.) is stored, and a safety PDO in which information on security (e.g., FSoE command, emergency stop command, etc.) is stored.

(22) FIG. 3A is a view showing transmission of a PDO. As shown in the drawing, the PDO is transmitted periodically (e.g., in every few microseconds to every few milliseconds).

(23) Referring back to FIG. 2, the description will be continued.

(24) The PDO reception module 221A divides the received PDO into a standard PDO and a safety PDO, and transmits the standard PDO to a module (222A) that processes the standard PDO. Moreover, the safety PDO is transmitted to a module (222C) that processes the safety PDO. Each module performs predetermined processing according to the received PDO and generates a control signal to be output to the servomotor 30.

(25) Further, the information obtained by the sensor 40 is obtained by a module (222B) that processes the standard PDO and a module (222D) that processes the safety PDO. Then, a PDO transmission module 221B generates information to be stored in the PDO, configures a packet, and transmits the packet to the network. As a result, the PDO transmitted from the master PLC 10 is relayed by each of the slaves and circulates in the network.

(26) In the description of the embodiment, the modules (222A and 222B) that process the standard PDO are referred to as standard parts, and the modules (222C and 222D) that process the safety PDO are referred to as safety parts.

(27) In addition, in such a configuration, there is an issue that the standard parts and the safety parts cannot be paused separately. For example, in the case where the modules 222A and 222B responsible for the standard parts are to be updated, transmission and reception of the standard PDO must be stopped. However, in the configuration in which the standard PDO and the safety PDO are integrally transmitted and received, once the standard parts are stopped, the communication of the standard PDO is stopped, which causes a watchdog (not shown) of the CPU unit 22 to detect a communication abnormality. Further, when a communication abnormality is detected, the operation of the entire device, including the safety parts, is stopped. Therefore, there is an issue that the security of the device cannot be sufficiently ensured. In addition, when the entire device is stopped, there is an issue that it takes time to restart.

(28) <CPU Unit in the Present Embodiment>

(29) Next, the module configuration of the CPU unit 22 in the present embodiment will be described with reference to FIG. 4. The CPU unit 22 in the present embodiment has a module that receives a PDO from the network and a module that transmits the PDO to the network as in the conventional example, but has a feature that the module that transmits and receives the standard PDO and the module that transmits and receives the safety PDO are divided.

(30) Specifically, a standard PDO reception module 221E performs reception of the standard PDO, and a standard PDO transmission module 221F performs transmission of the standard PDO. Moreover, a safety PDO reception module 221G performs reception of the safety PDO, and a safety PDO transmission module 221H performs transmission of the safety PDO.

(31) The parts (222A to 222D) for processing reception of the PDO and transmission of the PDO are the same as in the conventional example.

(32) Further, in the present embodiment, as shown in FIG. 3B, the standard PDO and the safety PDO are respectively transmitted and received by independent packets. In other words, the standard PDO reception module 221E and the standard PDO transmission module 221F perform transmission and reception operations by taking only the standard PDO as a target, and the safety PDO reception module 221G and the safety PDO transmission module 221H perform transmission and reception operations by taking only the safety PDO as a target.

(33) Furthermore, in the present embodiment, a watchdog (not shown) operating in the CPU unit 22 has the following features.

(34) (1) While the servomotor 30 is stopped, in the case where communication of both the standard PDO and the safety PDO is stopped, a communication abnormality event occurs.

(35) (2) During operations of the servomotor 30, in the case where communication of the standard PDO is stopped, a communication abnormality event occurs.

(36) In addition, the case where communication has stopped refers to the case where the modules 222A to 222D stop communication or input/output, but even in the case where communication or input/output is possible, if the modules 222A to 222D do not process the PDO normally, it is deemed that communication has stopped.

(37) In the case where a communication abnormality event occurs, the CPU unit 22 stops the operation of the entire device as in the conventional configuration to thereby stop the motor.

(38) According to such a configuration, it is possible to stop only one of the standard part and the safety part while the servomotor is stopped. In other words, while security remains ensured, maintainability can be further improved. As a result, it is possible to reduce the preparation time of restarting the device or the like.

(39) During operation of the servomotor, if the communication with the standard part is stopped, a communication abnormality event occurs. This is similar to the conventional configuration.

Second Embodiment

(40) The second embodiment is an embodiment in which, in addition to the first embodiment, the standard PDO and the safety PDO are respectively further configured to be transmitted and received in different cycles.

(41) FIG. 3C is a view showing a communication sequence in the second embodiment. In the example as shown, the standard PDO is transmitted and received every two time slots, and the safety PDO is transmitted and received every four time slots. Accordingly, by making the communication cycle different between the standard PDO and the safety PDO, the processing load of the device and the load of the network can be optimally designed. During PDO communication, although the capacity of the message which can be communicated is determined in advance, by optimizing the arrangement of the safety PDO, the communication capacity for the standard part can be increased, for example.

(42) (Modification Example)

(43) In addition, the description of the embodiments is an example for describing the invention, and the invention may also be implemented by being appropriately changed or combined within the scope that does not deviate from the spirit of the invention.

(44) For example, although the term “module” is used in the description of the CPU unit 22, the module may be a software module, or may be a specifically designed hardware (circuit or board) module or the like.

(45) Moreover, although a system that controls a servomotor has been illustrated in the description of the embodiments, the control target may be a target other than the servomotor. For example, it may also be an inverter or the like. Further, the control target does not necessarily have to have a movable part. For example, it may also be a sensing device, a laser device, or the like.