Robust Safe Switch

Abstract

The Robust Safe Switch and Control Device is an “Internet of Things” end effecter that provides a minimally dissipating, robust switch tightly integrated with circuit, life and property automated safety features. The device enables extended sensing and monitoring capabilities that enable the effective management of the “Internet of Things.”

Claims

1. A method whereby an embedded microcomputer, a programmable logic controller or custom configured logic will schedule and control the interleaved Alternating Current switching action of both a zero-crossing switch (i.e., always “opens” or “closes” when the circuit voltage crosses zero volts) and a minimally dissipative switch (i.e., consumes or dissipates minimal power when holding in either an “on” or “off” switch condition), with the following characteristics: a. where the method requires the zero-crossing switch to remain closed for enough cycles to allow the minimally dissipative switch to “settle” to either its “on” or “off” position; b. where the method requires the zero-crossing switch to always return to its high impedance or “off” state when the minimally dissipative switch has settled to either its “on” or “off” state; c. where the switching action of the method is used as a single activity to turn a circuit on and/or off by command or on a configurable schedule.

2. The method of claim 1 where functionality of an embedded microcomputer, a programmable logic controller or custom configured logic is extended to include the simultaneous monitoring of current flow in both the “hot” and “neutral” circuits of the AC lines to “Load” and “neutral” for Over-Current, GROUND Fault and/or ARC Fault conditions. a. Where an Over-Current condition is indicated when the monitored current in the AC Hot circuit exceeds a preset threshold in terms of both magnitude and time. b. Where an Over-Current condition is indicated when the monitored current in the AC Hot circuit exceeds a programmable threshold in terms of both magnitude and time. c. Where the method of claim 1 will be used to “open” the circuit when an Over-Current condition is detected. d. Where constantly measuring the differential current (i.e., difference current magnitude) of the load (i.e., AC “Hot”) and neutral lines to detect leakage to Ground current. e. Where leakage current to Ground above a preset or configurable magnitude for a configurable or preset duration of time will be detected as a GROUND Fault. f. Where the method of claim 1 will be used to “open” the circuit when a GROUND Fault is detected. g. Where measurements of the magnitude and frequency of the switched AC amperage applied to the load are incrementally compared to a preset or configurable reference standard. h. Where a preset or a configurable difference between the measured values of magnitude and frequency and a reference standard for a preset or a configurable duration of time indicates an ARC Fault condition. i. Where the method of claim 1 will be used to “open” the circuit when an ARC Fault is detected.

3. The method of claim 2 where functionality of an embedded microcomputer, a programmable logic controller or custom configured logic is extended to include monitoring the current flow in the “hot” circuit of the switched AC power for Over-Current detection, with a preset or a programmable “motor start-up ramp” feature: a. When measured against a configurable time varying profile to accommodate various “start-up” current draws. b. Where an Over-Current condition is indicated when the monitored current in the AC Hot circuit exceeds a preset or a configurable time-varying threshold. c. Where the method of claim 1 will be used to “open” the circuit when an Over-Current condition is detected.

4. An apparatus in support of the Method described in claims 1, 2 and 3 of a zero-crossing switching device implemented in parallel with a minimally dissipative switching device that simultaneously monitors the current flow in both the hot and neutral circuits of the Alternating Current power supply to simultaneously provide Over-Current, GROUND Fault and ARC Fault circuit protection. a. Where a mechanically or electrically latching mechanical relay and a full-wave electronic switch (i.e., “back-to-back” Silicon Controlled Rectifiers (SCR) or TRIAC) are implemented in parallel. b. Where an embedded controller or programmable logic circuit or dedicated electronic logic is implemented to configure the TRIAC (or back-to-back SCRs) to carry all switching actions; the mechanical relay is configured to carry all loads after the settling of the switching action and the TRIAC is returned to the high impedance state when the controller configures the circuit to be in either the “on” or the “off” condition. c. Where a current shunt or current detecting device is inserted into both the hot and the neutral circuits of the AC power supply to provide high frequency, large dynamic range monitoring of the current wave forms. d. Where an embedded controller includes features enabling detection and resolution of the outputs of the current monitoring devices.

5. An apparatus in support of the method of claim 1 where the functionality of an embedded microcomputer, a programmable logic controller or custom configured logic has a network-extensible interface that enables two way communication between the apparatus and a netcentric controller: a. Where the netcentric controller includes environmental sensors to aid in the situational awareness through telepresence in support of the Internet of Things. b. Where the netcentric controller includes a wired and/or wireless communications capability.

Description

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING

[0033] FIG. 1 represents a typical electrical schematic of the functionality of the Robust Safe Switch incorporating the functionality of the Hybrid Relay, indicating the major functional components.

[0034] FIG. 2 is an expansion of the Robust Safe Switch which makes use of the interprocessor bus connectivity to enable true remote wired or wireless features as well as the added functionality of many easily integrated hardware capabilities such as “Off Board Temperature,” temperature of the electronics, a microphone and/or a visible light detector.

[0035] FIG. 3 is a functional flow chart of the logic of the embedded functionality within the Robust Safe Switch.

[0036]

TABLE-US-00001 Reference Signs Description CN1 External connector extending internal power and control to a network interface processor CN2A DC input control signal connector CN2B AC line input control signal connector CN3 Input Connector delivering AC Power from the line to the local “switch mode power supply” CN4 Connector delivering AC Line and Neutral Power out of the Robust Switch CN5 Connector delivering AC Line and Neutral Power in to the Robust Switch ISO-1 Opto-isolated input open collector diode triggered by the presence of an AC (Line) input at CN2B ISO-2 Opto-isolated input open collector diode triggered by the presence of a DC input at CN2A KC Mechanical Relay in parallel with TRIAC 1 carrying the AC LOAD in the steady state LED1 Status indicator LED LED2 Status indicator LED OPTO TRIAC 1 Optically isolated AC buffer switch between U11 and TRIAC 1 OPTO TRIAC 2 Optically isolated AC buffer switch between U11 and relay KC SH1 Current shunt on the AC “Hot” or “LOAD” side SH2 Current shunt of the AC Neutral side TRIAC 1 Power TRIAC carrying the AC LOAD during all switching operations U1 and U3 Differential amplifier pair providing isolation U2 Differential amplifier U4 Level shifting unity gain amplifier U5 and U9 Differential amplifier pair providing isolation U6 Differential amplifier U7 Level shifting unity gain amplifier U8 Summing amplifier, summing the detected current levels between the out- of-phase AC “Hot” and AC “Neutral U10 Hard limiting comparator, square wave frequency detector U11 Programmable, highly integrated resource circuit featuring, Analog-to- Digital Converters, Counters, Timers, digital outputs and communication buses U12 Differential shunt voltage pickup on the LOAD side of the AC U14 Differential shunt voltage pickup on the Neutral side of the AC U15 Switch Mode Power Supply integrated circuit controller  1 Network Extension Processor  2 System on a Chip (SOC)  3 Robust Safe Switch  9 Ambient Light Sensor of the network processor 10 DC trigger connector on network processor 11 Interprocessor bus connector on network processor 12 Barometric Pressure Sensor of the network processor 13 The ARM processor of the network processor 14 Ethernet connector to a physical Local Area Network 15 Microphone peripheral of the network processor 16 Humidity sensor of the network processor 17 Temperature sensor of the network processor 18 Projected Infrared temperature sensor measuring “off-board” temperature 20 WiFi radio of the network processor 21 BlueTooth radio of the network processor 22 ZigBee radio of the network processor 23 Physical antenna of the WiFi radio 24 Physical antenna of the ZigBee radio 25 Physical antenna of the BlueTooth radio

DETAILED DESCRIPTION OF THE INVENTION

[0037] The Robust Safe Switch circuit performs several separate functions simultaneously using a hybrid mix of analog and digital circuitry. The following description is notional, or an example. The circuit could be implemented with a variety of circuit components able to provide the method functionality.

[0038] ISO-1 and ISO-2 are open collector type opto-isolators that enable the circuit to be controlled by virtually any type of device that can source a minimum amount of current at a minimum voltage. The circuit can be configured on the inputs to connector CN2A to operate as driven by an AC/Neutral input or to be driven by a separate DC source CN2B. ISO-1 and ISO-2 completely isolate the circuit from the devices providing the driving current to CN2B and CN2A, respectively.

[0039] U15 is a highly efficient Switch Mode Power Supply (smps) providing DC power from the AC Line voltage, as presented in FIG. 1 to be 120-240 Volts AC. Such an smps power supply could be created using an integrated circuit or created from discrete components. The power supply for this circuit need only be sufficient and is not a critical component of the functionality.

[0040] CN1 is the connector that links the Robust Safe Switch to a controller module that will support wired and wireless networking to enable the Robust Safe Switch to be the end effecter component of an Internet of Things system. The connector provides all of the inner process component controls to enable monitoring and augmented control of the Robust Safe Switch internal system, including an interprocessor bus.

[0041] The Robust Safe Switch extension processor (see FIG. 2) adds an integrated System on a Chip (SOC) with a central processing unit (a low power ARM processor) using an interprocessor bus interface to a programmable radio system, or separate radio systems such as Bluetooth, ZigBee or WiFi radio subsystems, or any combination thereof.

[0042] The principal control circuitry presented in FIG. 1 showing CPU (U11) uses opto-isolated OPTO TRIAC 1 to initialize all AC switching operations. When the load is fully carried across the TRIAC 1, then the CPU (U11) will energize or de-energize mechanical relay (KC) by driving opto-isolated OPTO TRIAC 2 to power the relay (KC) or removing the drive from OPTO TRIAC 2 to de-energize relay (KC). After the load is fully carried across relay (KC) or fully removed from the relay (KC), the CPU (U11) will release the drive on OPTO TRIAC 1. (Note that this is not the only configuration, nor even the most optimal configuration, both OPTO TRIAC 1 and OPTO TRIAC 2 could be replaced by transistor or CMOS drives.)

[0043] This action ensures that the voltage across the mechanical relay KC is never greater than the saturation voltage of the TRIAC 1 during a relay KC switching action. The TRIAC 1 is used to eliminate the arcing and contact wear in the relay KC. The use of the relay KC to carry the steady-state load eliminates the dissipation factor of the TRIAC 1 during a continuous duty operation. Thus a significant energy savings and a dramatically extended useful life expectancy of both TRIAC 1 and relay KC are maintained.

[0044] Operational amplifiers U1, U2, U3 and U4 provide an isolation differential amplifier monitoring current shunt SH1 interface U12 which could be a zero-loss Hall Effect device. SH1 accurately measures the current flowing through the “hot” side of the AC supply circuit which will be controlled and monitored to supply the “load” side of the hybrid relay.

[0045] Operational amplifiers U5, U6, U7 and U9 provide a similar function on the neutral leg of the AC supply circuit. The outputs of both differential amplifier circuits are fed into summing and level-shifting amplifier U8.

[0046] Both U7 and U4 have offset circuits that have been conditioned to set the measured current flow of the neutral shunt monitoring SH2 through interface U14 (which again could be a zero-loss Hall Effect device) and SH1 through interface U12, representing the AC “hot” side current, to be precisely one half V.sub.cc when the monitored current is zero respectively in each measured side of the AC circuit.

[0047] The low-pass summing amplifier U8 will sum the measured current in the neutral leg of the AC with the out-of-phase AC “hot” leg measured current and amplify the result. The amplified sum is detected by the Analog-to-Digital converter in U11, where the digital representation of the sum will be compared to a programmable leakage current limit. Excessive current will indicate a Ground Fault condition.

[0048] Upon a Ground Fault Condition, the CPU U11 will implement an immediate shutdown and issue an appropriate signal on LED1 and LED2 to indicate that a GROUND FAULT has occurred.

[0049] Removing power from the Robust Safe Switch will reset the GROUND FAULT detection.

[0050] Comparator U10 is configured to compare the measured current of the AC “hot” leg as represented by the voltage across SH1 to the approximated mid-scale of the voltage swing of the representative signal from SH1 through interface U12. Comparator U10 will hard limit and create a square wave representative of the frequency of the current signal monitored by SH1. This frequency representative signal will be fed into U11 where a counter output will read by the CPU U11. Significant deviations from the expected frequency will be considered indications of ARC FAULT. An ARC FAULT will cause the CPU to issue the commands to open the AC circuit and send a notification signal pattern to LED1 and LED2.

[0051] Resetting the AC power will resent the ARC FAULT status.

[0052] The well conditioned output of U4 represents the current flowing to the load and it is fed to a high performance Analog-to-Digital Converter A/D. The output of the converter is used by the CPU (U11) to compare the current flowing through the load to the expected (configured) limits.

[0053] Acceptable current limits can be configured at manufacturing (or field configured with a network connector adapter and a cell phone “app” or through a connected network processor) to apply just to the configurable startup period of, for example, 2 seconds to follow one of several available motor startup curves. During the startup period, the circuit continues to monitor the current flow for indications of GROUND FAULT and ARC FAULT conditions.

[0054] After the startup period, the CPU (U11) compares the maximum permissible current to a normal or “run time” expected limit. Any current measurements that do not meet the expected values for startup or run situations will be considered faults and the hybrid relay will be commanded to shut off the flow of AC current and CPU (U11) will issue the appropriate status signal patterns on signal LED1 and LED2.

[0055] During all operations, the CPU (U11) is available through a two-wire bus available at connector CN1. This bus enables the use of the Robust Safe Switch as an effective and efficient end-effecter for a network centric controller and the extension of a wired or wirelessly connected network, including the Internet, to the low level of remote switching.

[0056] The external connector CN1 links the Robust Safe Switch to a network processor extension 1, through interprocessor bus connector 11, which will enable wired and wireless networking to enable the Robust Safe Switch 3 to be the end effecter component of an “Internet of Things” system. The connector 11 provides all of the inner process component controls to enable monitoring and augmented control of the Robust Safe Switch internal system through the interprocessor bus.

[0057] It is possible that an adapter with a wireless connection could be temporarily connected to connector CN1 on the Robust Safe Switch 3, which would enable a smart phone “app” to field reconfigure the set points for the current limit or to read the current load on the circuit in real-time.

[0058] The Network Extension Processor 1 (see FIG. 2) adds an integrated System on a Chip (SOC) 2 with a central processing unit 13 (a low power ARM processor) using the interprocessor bus interface 11 to link the Robust Safe Switch 3 to the network processor subsystem 1 featuring a wired 14 or a wireless 20, 21, 22 network system. Wireless systems could be any or all of a low-power Bluetooth 21, a ZigBee 22 and/or a WiFi 20 radio system. Each of these radio system could utilize an external antenna or integrated circuit-board antennas 23, 24, 25.

[0059] Currently many of these households do not have the ability to use a controlled network to assist them in the control and the operation of appliances. These people are outside of the Internet. But the Robust Safe Switch technology is extending the Network of Things to those without access to the Internet.

[0060] The Robust Safe Switch with the Network Extension processor features could be configured with a BlueTooth 21 and a ZigBee radio system 22 delivering control and mesh networking. The ZigBee units 22 will automatically network together and enable a rural home owner without benefit of the Internet or WiFi to use his cell phone as an interface to control an impromptu Internet of Things network. Such a system could include heaters and other appliances like window-mounted air conditioners, lighting and gate controllers. As shown on FIG. 2, the SOC could include telepresence sensors to detect and report environmental parameters such as humidity 16, device temperature 17, projected temperature 18, ambient light 9, or barometric pressure 12. Through Network Extension processor 1 and interface CN1, the homeowner can control the home environment and other appliances, through a computer or phone “app” or through an on-board microphone interface 15. The embedded microcontroller U11 could be configured to maintain schedules downloaded to each device and monitored through the ZigBee Mesh when the cell phone is within range of its BlueTooth signal.

[0061] The apparatus described herein employing the method as described dramatically extends the capability to effectively and safely manage the “end effect” of the long reach of the “Internet of Things”. Although not currently required by code at all locations suitable for extension through the Internet of Things, the concern for circuit, life and property safety should be reasonably considered as the power of the Internet reaches to the practicalities of remote control to the masses.

Detailed Description of the Method Logic Flow Chart

[0062] As shown in FIG. 3, at power up 100 the processor resets to read the input status pin 105 and then evaluates the status as changed to “off” 120 or “off” no change then loops back to read the pin again at 105. If the pin reads “on,” control moves to 107 to test for persistence (i.e., still on) 115 or a change to “on” 110.

[0063] If the circuit is just turned on then sub-routine 110 operates the interleaving cycle of energizing TRIAC 1 for a zero crossing switching action to power the circuit, then energizing the mechanical relay KC after the TRIAC 1 has settled and the voltage to be switched is near a minimum 1.5 volts and then un-powering the TRIAC 1 after the mechanical relay KC has settled.

[0064] If the circuit is still on, then routine 115 evaluates whether the process is still inside a preset or configurable motor startup current ramp. If it is, then control advances to process 116 where the program execution time is compared with the table stating the allowable current at that preset or configurable time window of control for the “motor start up” current control ramp (e.g. a current limit that varies as a function of time). If within the time window of startup current ramp then control is advanced to process 130 where the measured current is compared to the selected ramp profile. If the measured current is not within the profile then control advances to process 120. At process 120, TRIAC 1 is energized to pick up the load from the mechanical relay KC at the next zero voltage crossing. This action allows the mechanical relay KC to open at a minimal voltage across the relay contact points on KC. After the mechanical relay KC has settled into the open condition, TRIAC 1 is de-powered at the next zero crossing, again minimizing both switching arcing and thermal dissipation. Return from process 120 advances to the LED message display 117, where the “Motor Startup Over Current” indication is displayed on signal LEDs LED1, LED2. After a preset or configurable presentation time, the Robust Safe Switch will halt and wait for a power cycle to reset 118.

[0065] If the measured current is within the stated measurement profile, then program control is advanced to process 155 where process 150 results for high frequency ARC fault test conditions are evaluated. If an ARC fault condition is detected, then control is advanced to process 120 for shutdown and upon return to process 156 “ARC FAULT” indications are flashed on the signal LEDs LED1, LED2. After a preset or configurable presentation time, the Robust Safe Switch will halt and wait for a power cycle to reset, 118.

[0066] If an ARC FAULT condition is not detected then control advances to 145 where the return values for process 160 are evaluated for indications of a GROUND FAULT condition of leakage current to ground. If the evaluation indicates that the GROUND FAULT conditions have existed for a time period to exceed the threshold, then control will shift to shut down procedure 120 to shut down power and upon return to 146 “GROUND FAULT” indications are flashed on the signal LEDs LED1, LED2. After a preset or configurable presentation time, the Robust Safe Switch will halt and wait for a power cycle to reset, 118.

[0067] If the “on time” exceeds the “motor start up ramp” timer then control moves to process 125 where the results from sub-routine 140 are evaluated and the preconfigured or configurable “normal runtime” current” limits are used to test the measured AC “hot” load current. If the measured current exceeds the limit then shutdown process 120 is called and upon return process 126 is called to flash “Run Over Current” on the signal LEDs LED1, LED2. After a preset or configurable presentation time, the Robust Safe Switch will halt and wait for a power cycle to reset, 118.

[0068] If the measured current does not exceed the limits of sub-routine 140, then control is passed to process 155 where process 150 and then process 160 are called. If the results of 150 and then 160 are within limits, control is returned to process 105 and the control loop is repeated.