Control Device

Abstract

A control device (7) for a system controlled by a controller with an evaluation unit (9) and at least one acquisition unit (17a, 17b) that is connected to the evaluation unit (9). Depending on input values that are input in the acquisition unit (17a, 17b), an operating mode selection can be performed and/or an access authorization can be granted. Output values generated in this manner can be output to the controller via an output stage (8).

Claims

1. A control device (7) for a system controlled by a controller with an evaluation unit (9) and at least one acquisition unit (17a, 17b) that is connected to the evaluation unit (9), wherein, depending on input values input in the acquisition unit (17a, 17b), an operating mode selection can be performed and/or an access authorization can be granted in the evaluation unit (9) and output values generated in this manner can be output to the controller via an output stage (8).

2. The control device (7) according to claim 1, characterized in that the evaluation unit (9) has a dual-channel design.

3. The control device (7) according to claim 1, characterized in that the output stage (8) is designed as a safe output stage (8) via which a safe signal output to a safety controller (6) controlling a safety system (1) occurs.

4. The control device (7) according to claim 3, characterized in that the safe output stage (8) is designed in the form of digital outputs (8a) or in the form of a safety bus system.

5. The control device (7) according to claim 1, characterized in that at least one acquisition unit (17a, 17b), which is a component of an access system, is provided.

6. The control device (7) according to claim 5, characterized in that the at least one acquisition unit (17a, 17b) forming an access system is a reader unit (12a, 12b) that is designed for reading signals of a transponder.

7. The control device (7) according to claim 1, characterized in that the at least one acquisition unit (17a, 17b) is connected to the evaluation unit (9) via a wired or touchless interface (13).

8. The control device (7) according to claim 5, characterized in that multiple acquisition units (17a, 17b) are provided that form different and/or spatially separated access systems.

9. The control device (7) according to claim 1, characterized in that at least one input/output unit is connected to the evaluation unit (9).

10. The control device (7) according to claim 9, characterized in that authentication data can be input into the evaluation unit (9) via the input/output unit.

11. The control device (7) according to claim 9, characterized in that an operating mode to be selected can be input via the input/output unit.

12. The control device (7) according to claim 11, characterized in that the operating mode that was input can be verified in the evaluation unit (9).

13. The control device (7) according to claim 12, characterized in that an operating mode that was verified in the evaluation unit (9) and released is output to the controller via the output stage (8).

14. The control device (7) according to claim 1, characterized in that the or multiple acquisition units (17a, 17b) are designed for a data transfer.

15. The control device (7) according to claim 1, characterized in that the evaluation unit (9) has at least one interface (13) for connecting additional components.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0052] The invention is explained below with reference to the drawings. They show:

[0053] FIG. 1: A schematic depiction of a safety system for securing a hazard zone.

[0054] FIG. 2: An exemplary embodiment of the control device according to the invention for the safety system from FIG. 1.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0055] FIG. 1 shows schematically a safety system 1 for safe operation of a machine 2. The machine 2 can be a source of hazards, especially for persons. Accordingly, a hazard zone 3 around the machine 2 is secured with an enclosure 4. In the enclosure 4, two safety doors 5 are provided through which persons can get access to the hazard zone 3.

[0056] A safety controller 6 that controls the operation of the machine 2 is provided as an essential component of the safety system 1. Safety switches used to monitor whether the safety doors 5 are closed or not are typically provided as additional components of the safety system 1. The safety controller 6 controls the operation of the machine 2, especially depending on the signals generated by the safety switch.

[0057] FIG. 2 shows an exemplary embodiment of the control device 7 according to the invention that can be used for the safety system 1 from FIG. 1.

[0058] The control device 7 forms an independent unit from the safety controller 6 of the safety system 1.

[0059] The control device 7 can be connected to the safety controller 6 via a safe output stage 8. In the present case, the safe output stage 8 has a number of digital outputs 8a and an output circuit 8b for controlling the digital outputs 8a. In the present case, the output circuit 8b is formed by a one-out-of-N circuit that ensures that only one digital output 8a is ever active, through which safe output signals can be output to the safety controller 6.

[0060] Alternatively, the safe output stage 8 can also be formed by a safety bus system. Profisafe, IO Link Safety or CIP Safety are examples of this.

[0061] The safe output signals are generated in an evaluation unit 9 of the control device 7. The safe output stage 8 is connected to the evaluation unit 9 for this purpose.

[0062] In the present case, the evaluation unit 9 of the control device 7 has a failsafe, redundant design. In this case, the evaluation unit 9 has two computing units 10a, 10b that can respectively be formed by a processor. The computing units 10a, 10b of the evaluation unit 9 are connected by data lines 11 via which a bidirectional data exchange can occur between the computing units 10a, 10b, especially for a mutual monitoring of the computing units 10a, 10b.

[0063] In principle, the control device 7 can also have a single channel evaluation unit 9. The control device 7 has a preset number of acquisition units 17a, 17b connected to the evaluation unit 9.

[0064] As acquisition units 17a, 17b in the present case, reader units 12a, 12b are provided, which are components of an access system in the form of an electronic key system. The two reader units 12a, 12b are typically composed of a CPU and an antenna. Multiple transponders (not shown) are assigned to each reader unit 12a, 12b to form an electronic key system.

[0065] In the present case, one of the electronic key systems respectively forms an access system for one of the safety doors 5 of the safety system 1 from FIG. 1.

[0066] In particular, the electronic key system can also be designed as an access system for a safety door 5. For example, an authentication in the form of encodings that define the conditions under which the safety doors 5 may be opened with the respective transponder, thereby granting a person access to the hazard zone 3, can be stored in each transponder.

[0067] The reader units 12a, 12b can also be used for a data transfer, especially in order to transfer user data, configurations, backup data, process data or also firmware into the evaluation unit 9.

[0068] Each reader unit 12a, 12b is connected to the evaluation unit 9 through an interface 13. In the present case, the interfaces 13 are implemented as RS485 interfaces. In general, wired or touchless interfaces 13 are possible. These are made such that the reader units 12a, 12b can be arranged separate in space from the evaluation unit 9. In this way, at the safety system 1 from FIG. 1, a reader unit 12a, 12b can respectively be arranged in the region of one of the safety doors 5 from a central evaluation unit 9.

[0069] The reader units 12a, 12b may be designed identically or differently. In general, more than two reader units can also be connected to the evaluation unit 9.

[0070] In the dual-channel embodiment of the evaluation unit 9, as shown in FIG. 2, the RS485 interface is connected to one of the computing units 10a of the evaluation unit 9.

[0071] In general, other interfaces 13 are also possible, such as WiFi, Ethernet, Bluetooth or CAN Bus, for example.

[0072] The transponder signals acquired with the reader units 12a, 12b are evaluated in the evaluation unit 9, access authorizations being checked and released in this evaluation. The safe output signals generated in this way in the evaluation unit 9 are provided to the safety controller 6 via the safe output stage 8.

[0073] Furthermore, an input/output unit, which in the present case is formed by a PC 14 (personal computer), is connected to the evaluation unit 9. The connection is realized via a communication interface 15 that can be formed by an RS485, USB, Profinet interface and similar. In general, the control device 7 can have multiple different communication interfaces 15.

[0074] In general, the control device 7 can also have interfaces 13 for connecting additional components such as control elements, limit switches, warning lights and similar.

[0075] The PC 14 has input/output means 16, such as keyboards, displays, etc. in the known manner.

[0076] In the present case, the input/output unit, i.e. the PC 14, is used for an operating mode selection. To do so, a user first inputs authentication data in the input/output unit, which authentication data may be formed by a password in the simplest case. The input of biometric data is also possible.

[0077] The user then inputs the desired operating mode into the input/output unit, which operating mode is then checked for validity in the evaluation unit 9. To do so, an authorization that is input via a reader unit 12a, 12b and released in the evaluation unit 9 can be used for an operating mode selection, in particular. The checked operating mode is then read back into the input/output unit by the evaluation unit 9, where the user checks whether the selection of the operating mode was correct.

[0078] In this way, a failsafe operating mode selection is performed completely in the control device 7. The selected operating mode is then output to the safety controller 6 via the safe output stage 8.

LIST OF REFERENCE NUMERALS

[0079] (1) safety system [0080] (2) machine [0081] (3) hazard zone [0082] (4) enclosure [0083] (5) safety door [0084] (6) safety controller [0085] (7) control device [0086] (8) output stage [0087] (8a) digital output [0088] (8b) output circuit [0089] (9) evaluation unit [0090] (10a, 10b) computing unit [0091] (11) data line [0092] (12a, 12b) reader unit [0093] (13) interface [0094] (14) PC [0095] (15) communication interface [0096] (16) input/output means [0097] (17a, 17b) acquisition unit