DETERMINING THE MOVEMENT OF A MACHINE TO BE SECURED

Abstract

An arrangement for determining the movement of a machine to be secured after safety directed emergency signal, wherein the arrangement has a sensor module and a trigger module, wherein the sensor module is subsequently and releasably fastenable to the machine, and wherein the sensor module comprises: at least one sensor for detecting movement data describing the movement, a first trigger interface for the reception of a trigger signal that includes the point in time of the emergency signal, and a recording unit that is configured to store and/or output at least some of the movement data from the time period between the point in time of the emergency signal and the reaching of a safe state of the machine, and wherein the trigger module is configured for generating and/or receiving the safety directed emergency signal for the machine to be secured.

Claims

1. An arrangement for determining the movement of a machine to be secured after a safety directed emergency signal, wherein the arrangement has a sensor module and a trigger module, wherein the sensor module is subsequently and releasably fastenable to the machine, and wherein the sensor module comprises: at least one sensor for detecting movement data describing the movement, a first trigger interface for the reception of a trigger signal that includes the point in time of the emergency signal, and a recording unit that is configured to store and/or output at least some of the movement data from the time period between the point in time of the emergency signal and the reaching of a safe state of the machine, and wherein the trigger module is configured for generating and/or receiving the safety directed emergency signal for the machine to be secured.

2. The arrangement in accordance with claim 1, wherein the machine is one of a robot and a vehicle.

3. The arrangement in accordance with claim 1, wherein the movement data have at least one of the parameters position, speed, acceleration.

4. The arrangement in accordance with claim 3, wherein the movement data have at least one of the parameters position, speed, acceleration with a time stamp in each case.

5. The arrangement in accordance with claim 1, wherein the sensor module has at least one of an accelerometer and a rotation rate sensor.

6. The arrangement in accordance with claim 1, wherein the sensor module is energy autonomous.

7. The arrangement in accordance with claim 1, wherein the sensor module has a wireless output interface for the output of movement data.

8. The arrangement in accordance with claim 1, wherein the trigger module comprises a second trigger interface for the output of a trigger signal that includes the point in time of the emergency signal.

9. The arrangement in accordance with claim 1, wherein a time stamp for the point in time of the emergency signal is encoded into the trigger signal.

10. The arrangement in accordance with claim 1, wherein the second trigger interface is configured as an infrared interface.

11. The arrangement in accordance with claim 1, wherein the machine is one of a robot and a vehicle.

12. A method of determining the movement of a machine to be secured after a safety directed emergency signal, wherein a sensor module having at least one sensor for the detection of movement data describing the movement of the machine is releasably attached to the machine; a safety directed emergency stop of the machine is triggered; a trigger signal that includes the point in time of the emergency signal is transmitted to the sensor module; and movement data of the sensor module between the point in time of the emergency signal designated by the trigger signal and the reaching of a safe state of the machine is stored or output.

13. The method in accordance with claim 12, wherein the machine is one of a robot and a vehicle.

14. The method in accordance with claim 12, wherein the sensor module further comprises: a first trigger interface for the reception of a trigger signal that includes the point in time of the emergency signal, and a recording unit that is configured to store and/or output at least some of the movement data from the time period between the point in time of the emergency signal and the reaching of a safe state of the machine.

15. The method in accordance with claim 12, wherein the trigger signal is transmitted to the sensor module by a trigger module comprising a second trigger interface for the output of said trigger signal, with said trigger signal including the point in time of the emergency signal.

16. A method of configuring and verifying at least one safety sensor that monitors a machine to be secured and that outputs a safety directed emergency stop signal to the machine on a falling below of a safety distance between the machine and a detected unpermitted object, wherein the movement of the machine is determined by a method of determining the movement of a machine to be secured after a safety directed emergency signal, wherein a sensor module having at least one sensor for the detection of movement data describing the movement of the machine is releasably attached to the machine; a safety directed emergency stop of the machine is triggered; a trigger signal that includes the point in time of the emergency signal is transmitted to the sensor module; and movement data of the sensor module between the point in time of the emergency signal designated by the trigger signal and the reaching of a safe state of the machine is stored or output after a safety directed emergency stop signal and the safety distance is verified or adapted with reference to the stored or output movement data.

Description

[0026] The invention will be explained in more detail in the following also with respect to further features and advantages by way of example with reference to embodiments and to the enclosed drawing. The Figures of the drawing show in:

[0027] FIG. 1 a block diagram of a sensor module and of a trigger module;

[0028] FIG. 2 a schematic view of a sensor module attached to a robot and of a trigger module connected to the safety output of a monitoring safety camera; and

[0029] FIG. 3 a flowchart for a method of fixing safety distances with the aid of the sensor module and the trigger module.

[0030] FIG. 1 shows a block diagram of a sensor module 10 for determining the response time or the movement of a machine to be secured after a safety directed emergency stop and of an associated trigger module 12 for transmitting a trigger signal that communicates points in time of a safety directed emergency stop.

[0031] The sensor module 10 is a small device for attachment to a hazardous object. In this description, a robot is used as an example for the hazardous object, but other machines and vehicles are likewise conceivable, in particular autonomous vehicles (AGCs, automated guided carts. or AGVs, automated guided vehicles). The sensor module is subsequently and releasably attached, for example by magnets, a clamp holder, a hook and loop band, or an adhesive band, and indeed preferably in proximity to the point of greatest danger, for instance a tool tip.

[0032] The sensor module 10 has at least one sensor to detect its own movement and thus the movement of the object to which it is attached. In the embodiment in accordance with FIG. 1, an accelerometer 14 and a rotation rate sensor 16 are provided by way of example. The accelerations and rotation rates can be determined in one to three dimensions depending on the application. The instantaneous speed can be determined by integration of the acceleration vectors; the direction of movement can be determined by means of the rotation rate. These calculations take place in the sensor module 10 or subsequently. Other or additional sensor are also possible. One example is a position sensor that determines its own position using known transmitters. This technique works like GPS, but also inwardly and at a higher resolution; and instead of radio, other signals such as ultrasound are also conceivable. A sensor for determining a payload is optionally also conceivable or such additional information is polled by the machine's own sensors.

[0033] The sensor module 10 has a first trigger interface 18, preferably having an IR receiver, at which a trigger signal is recognized that displays that a safety directed emergency stop has been triggered. In addition, an output interface 20 is provided, preferably a radio interface in accordance with a standard such as wireless LAN, ZIGBEE, BLE or the like.

[0034] A recording unit 22 is connected to the sensors 14, 16 and to the interfaces 18, 20 and can also take over other control and evaluation functions in the sensor module 10. The recording unit 22 stores movement data of the sensors 14, 16 or parameters derived therefrom in a memory not shown separately, preferably whenever a trigger signal has been received.

[0035] The trigger module 12 has a second trigger interface 24, preferably having an IR laser or an IR LED, that acts as a transmitter to transmit a trigger signal to the first trigger interface 18 of the sensor module 10. An emergency signal interface 26 is furthermore present for safety directed emergency signals. This emergency signal interface 26 is configured as an input or as an output depending on the embodiment. In the first case, the trigger module is additionally connected to a line by which safety directed signals are transmitted in an existing safety application to the monitored machine (OSSD, output signal switching device). The trigger module 12 is in this manner likewise informed of safety directed emergency stops that arrive at the machine. In the second case, the trigger module itself generates safety directed emergency signals test-wise to the monitored machine, whether internally or with the aid of an actuation device such as a button. The emergency signal interface 26 here acts as a safety output (OSSD) to which the monitored machine is connected. A trigger control 28 is connected to the second trigger interface 24 and to the emergency signal interface 26.

[0036] The sensor module 10 and the trigger module 12 are preferably small with maximum dimensions of 5 cm10 cm2 cm and are light with a weight of at most 100 g. They can be battery operated, for instance with a fixedly installed lithium ion rechargeable battery. If all the interfaces are then also wireless, the total arrangement in the measurement principle, data paths, and supply is contactless and is particularly simple to handle. Additional functions such as a display, not shown, for status such as operation, errors, or active data connection, in particular in the form of simple LEDs, are possible.

[0037] FIG. 2 shows a schematic view of a sensor module 10 attached to a robot 30 and of a trigger module 12 connected to a safety output 32 of a monitoring safety camera 34. In this embodiment, it is therefore not the trigger module 12 itself that is the trigger of such a safety directed emergency signal, but rather the safety camera 34, and the trigger module 12 learns of this via its connection to the emergency signal interface 26.

[0038] The configuration shown in FIG. 2 is an application example that can be varied in a variety of respects. It has first already been mentioned that other machines than the robot 30 can be monitored. The monitoring here furthermore takes place from outside by the safety camera 34. The safety camera 34 is only representative for any desired optical sensors or other sensors and arrangements of sensors that monitor the robot 30 and/or its surroundings. In addition, instead of a monitoring from outside, a monitoring by a sensor is possible that is part of the robot 30 such as a camera of the robot or a capacitive skin. The safety engineering does not have to be part of the plant overall, but can be a direct component of the robot 30 itself. Combinations of external sensors and sensors of the robot 30 are also conceivable.

[0039] In order now to determine the movement of the robot 30 after a safety directed emergency signal, a situation is presented in which the safety camera 34 recognizes a hazard. Alternatively, the safety directed emergency signal is artificially initiated in the safety camera 34 or in another component, not shown.

[0040] The trigger control 28 of the trigger module 12 recognizes the safety directed emergency signal at the emergency signal interface 26 and generates a trigger signal at the second trigger interface 24. The trigger signal is preferably suitably encoded to be recognized as such or even includes a code for a time stamp of the safety directed emergency signal.

[0041] The sensor module 10 receives the trigger signal at the first trigger interface 18. From this point in time onward, movement data are generated by the accelerometer 14 and by the rotation rate sensor 16 and are stored by the recording unit 22. Alternatively, such movement data are collected and buffered constantly and the trigger signal only designates a relevant time period in which the movement data should be forwarded.

[0042] The recording unit 22 can already further process the movement data, for instance can calculate a respective instantaneous speed and direction of movement or add a time stamp. Which movement data are actually stored and later passed on is a question of the configuration and the application. As a rule, the time period of interest ends as soon as the robot 30 has reached a safe state, that is, is at a standstill or has completed an evasion movement.

[0043] The movement data stored by the recording unit 22 are subsequently forwarded via the output interface 20. This can take place, for example, after every safety directed emergency signal, after a specific number of repetitions or on request. A possible receiver of the movement data is a hand-held device such as a notebook, a tablet or a smartphone, but generally any device that is able to communicate with the output interface 20. The movement data are visualized and analyzed there and serve as a basis for further optimizations, tests, or simulations. The movement data of the sensor module 10 can also be compared or supplemented with data of the robot control, for instance by feedback sensors of the robot 30 with information on its own movement. The image data of the safety camera 34 also provide an additional information source for comparison or to improve the movement data.

[0044] FIG. 3 shows a flowchart for an exemplary optimization and/or verification of safety distances with the aid of the sensor module 10 and of the trigger module 12. The arrangement shown in FIG. 2 can here be made use of for orientation, but may not be understood as restrictive for this purpose. A verification does not only mean that a check is made whether a response was made to a hazardous situation in good time in each case. The sensor module 10 would not be needed for this; a simple test rod would suffice. Conclusions can rather also be drawn from the recorded movement data in the framework of a verification which considerably accelerate and improve the method.

[0045] Safety distances are fixed in a step S1. Since this is only an initial state, these safety distances can generally be as desired. To at least ensure the safety from the start, the initial safety distances can be selected in a very classic manner using worst case scenarios and safety margins.

[0046] A safety directed emergency signal is then triggered test-wise in a step S2. A possibility for this is to intentionally just fall below the set safety distances so that the safety application automatically reacts with an emergency signal. The safety related emergency signal can, however, also be triggered in any desired other manner, in particular actively by the trigger module 12, and useful conclusions can later also be drawn from a movement into the safe state that does not result from the borderline situation on falling below a safety distance.

[0047] In a step S3. the trigger module 12 generates a trigger signal at the point in time of the safety directed emergency stop and/or with encoded information of this point in time.

[0048] In a step S4, the sensor module 10 records its own movement as information on the movement of the machine to which it is attached. The corresponding movement data should sufficiently characterize the movement in the time period from the triggering of the emergency signal up to the reaching of the safe state. Partial information can, however, also be useful; for instance the accumulated response time of the system can be determined from the point in time when a braking and evasion movement starts and the overrun path can be determined from the end position.

[0049] In a step S5, the movement data desired for the optimization are transmitted by the sensor module 10, preferably to a hand-held device having corresponding software (app). They can be reaction times, complete movement profiles, or parts thereof.

[0050] In a sixth step S6, a check is made on the hand-held device using the transmitted movement data whether the set safety distances are optimum. Even a single case in which the safe state has been reached too late is almost always unacceptable because the health of persons depends thereon. In this case, the safety distances are too tight and not verified so that the method starts again with new safety distances in the step S1. If the safe state is reached at too early a time, this is an indication for further optimization scope for the safety distances that can be adapted in step S1. However, nothing stands in the way of a verification here; this is of no concern in a safety engineering respect and can be accepted as an ideal setting.

[0051] The previous description of the method assumes that the movement data are transmitted and evaluated directly after each safety directed emergency signal. In practice, safety directed emergency signals will preferably be generated repeatedly in different situations and will then be transmitted and evaluated in a bundle.

[0052] The method is ended in a step S7 as soon as sufficient events with safety directed emergency signals have been checked. This can be specified by statistics, for instance by an error rate corresponding to a desired standardized safety level, by a fixed number of repeats, or in that the achieved safety distances are now small enough for a sufficiently close collaboration of human and machine, or by other criteria.