Abstract: An expansion module for an industrial controller is configured to perform independent local processing of its input signals and to independently generate control outputs in parallel with the primary control program executed by the industrial controller. This can reduce or eliminate response latency for time-critical processes that would otherwise be present if all monitoring and control were performed by the industrial controller alone. This approach can be beneficial for configurations in which the industrial devices that are monitored and controlled via the expansion module require fast response times, as in the case of industrial safety applications.

Abstract: A single-wire safety system architecture yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay and one or more compatible safety input devices connected in series with the safety relay via a single-wire communication circuit. A safety signal with a recognizable pulse pattern traverses the single-wire safety circuit to the safety relay via the safety devices. The safety relay opens its contactors and deenergizes its associated industrial equipment if the pulse pattern is not received and recognized. The safety relay can also be configured to initiate a global emergency stop in response to a loss of a safety function by one of its safety input devices, the global emergency stop instructing other safety relays of other safety circuits to open their contactors and enter safe mode.

Abstract: An industrial safety controller comprises a non-volatile memory configured for storing an industrial control program and at least one processing unit. The industrial safety controller, which may be a safety relay, further comprises a connector configured to communicatively couple the safety controller with an expansion module. The safety controller is configured to receive an input and/or provide an output via an I/O expansion module that is coupled to the safety controller utilizing the connector. The industrial safety controller may comprise an expansion module bay and the connector may comprise a bay connector.

Abstract: An industrial safety controller comprises a non-volatile memory configured for storing an industrial control program and at least one processing unit. The industrial safety controller, which may be a safety relay, further comprises a connector configured to communicatively couple the safety controller with an expansion module. The safety controller is configured to receive an input and/or provide an output via an I/O expansion module that is coupled to the safety controller utilizing the connector. The industrial safety controller may comprise an expansion module bay and the connector may comprise a bay connector.

Abstract: A safety controller module for providing safety control comprises a non-volatile memory configured for storing a safety control program and one or more processing units configured to execute safety control functions associated with the safety control program to provide independent safety control. The safety controller module further comprises a connector configured to communicatively couple the safety controller module with a non-safety controller. The safety controller module is configured to communicate an input and/or an output signal of the safety controller module via the connector to the non-safety controller.

Abstract: An industrial safety controller comprises a non-volatile memory configured for storing an industrial control program and at least one processing unit. The industrial safety controller, which may be a safety relay, further comprises connector means configured to communicatively couple the safety controller with an expansion module. The safety controller is configured to receive an input and/or provide an output via an I/O expansion module that is coupled to the safety controller utilizing the connector means. The industrial safety controller may comprise an expansion module bay and the connector means may comprise a bay connector.

Abstract: An industrial controller for safety control is disclosed. The controller comprises an interface for receiving a download of a safety control program, a memory for storing at least one safety control program and at least one processing unit for executing a safety control program stored in the non-volatile memory. The at least one processing unit is configured to determine whether a safety control program is verified and to limit an execution of an unverified safety control program according to an unverified run mode. An indicator is configured to indicate the execution of an unverified safety control program. A method of assigning a verification ID to an industrial controller comprises steps of configuring and downloading a safety control program, validating the configured safety control program for the target industrial controller, and assigning a verification ID. Execution of the configured safety control program is limited before the verification ID is assigned.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A safety controller and system of safety controllers and a removable memory module for rapid configuration and/or backup of safety controllers are provided. The safety controller comprises a non-volatile memory and one or more slots configured to host modules. A predetermined slot of the one or more slots is configured to communicatively couple the safety controller with a memory module. The safety controller is configured to transfer a backup of a configuration on the safety controller to a memory module hosted in the predetermined slot and configured to load a configuration from a memory module hosted in the predetermined slot. A method of distributing software to a plurality of industrial safety controller comprises utilizing a memory module.

Abstract: A safety switching device for driving a plurality of different kinds of guard locking devices is provided. The safety switching device comprises a first terminal and a second terminal for connecting a guard locking device, and a safety processor adapted for controlling drive signals at the first and the second terminal to drive the guard locking device. The safety processor is adapted for determining a kind of a guard locking device connected to the first and/or the second terminal out of a plurality of different kinds of guard locking devices by detecting external electrical connections between the first terminal, the second terminal, and a reference potential. The safety processor is further adapted for controlling the drive signals depending on the determined kind of the guard locking device.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: The present invention relates to a safety switching device for actuating actuators in a fail-safe manner, and further relates to an emergency shut-off circuit comprising a safety switching device according to the present invention. The safety switching device includes at least one first and second safety input for receiving a first and second input signal, at least one first and second safety output for transmitting a first and second output signal, and a control unit for evaluating said input signals and for generating said output signals. The first and second safety outputs further comprise a feedback loop said that couples the output signals back to the control unit such that the control unit is operable to perform a test routine for testing said output signals.

Abstract: A safety switching device for driving a plurality of different kinds of guard locking devices is provided. The safety switching device comprises a first terminal and a second terminal for connecting a guard locking device, and a safety processor adapted for controlling drive signals at the first and the second terminal to drive the guard locking device. The safety processor is adapted for determining a kind of a guard locking device connected to the first and/or the second terminal out of a plurality of different kinds of guard locking devices by detecting external electrical connections between the first terminal, the second terminal, and a reference potential. The safety processor is further adapted for controlling the drive signals depending on the determined kind of the guard locking device.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A method, system, and a control device are provided for reducing RFID reaction times. A control unit receives a data signal, which comprises a code signal if a passive RFID transponder is located in the carrier field of an RFID reader. The code represents the identification code of the passive RFID transponder. The carrier field is disabled to reset the data signal, and thereafter enabled to receive a first portion of the code signal only. The code of the passive RFID transponder is then validated on the basis of said first portion of the code signal only.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A circuit arrangement for indicating the status of one of a plurality of switches connected in series between signal terminals of a safety relay, each switch actuable between an open position and a closed position. The circuit arrangement includes at least one voltage sensor configured to be connected to one of the plurality of switches to provide an output signal upon sensing a presence of a voltage across the one of the plurality of switches and an indicating means associated with the voltage sensor to provide an indication signal when the voltage sensor provides an output signal. The circuit arrangement is powered by the voltage provided at one of said signal terminals of the safety relay.

Abstract: A modular safety system for controlling emergency stop applications includes a plurality of inputs, a plurality of output groups, and a plurality of safe relay outputs. The plurality of inputs is assigned to at least one of the output groups. Each output group is configured to control at least one of the plurality of safe relay outputs. The system also includes means for configuring the system and at least three freely programmable output groups.

Abstract: A modular safety system for safety control in emergency stop applications includes a base module and at least one extension module, wherein each module is arranged in a housing with a rail-mounting base, so that the modules are located in a side-by-side arrangement when mounted to the rail. The modular safety system also includes means for setting of required input and output functions, wherein the setting means is located in a side wall of the module housing, so that after mounting the modules to the rail, the setting means is covered by an adjacent module.