Abstract: A safety device for safeguarding a danger zone of a robot having a first body part configured to rotate about a first axis of rotation and having at least one further body part configured to rotate relative to the first body part about a further axis of rotation during robot operation. The safety device includes multiple sensors, each of which is configured to monitor a respective defined spatial sector in a vicinity of the robot and configured to generate a respective sensor signal in response to an object being detected in the respective defined spatial sector. The safety device includes a support structure configured to fix the sensors to the robot so that the sensors rotate together with the first body part about the first axis of rotation. The safety device includes an evaluation and control unit configured to control operation of the robot.

Abstract: An automation system for monitoring a safety-critical process includes a platform configured to execute user programs that implement a safety function, a fail-safe peripheral module configured to couple the user programs with the safety-critical process, and a monitoring device configured to ensure fail-safe execution of the safety function on the platform. The monitoring device is couplable to the platform via a first communication interface and the fail-safe peripheral module is couplable to the platform via a second communication interface. The monitoring device runs a fail-safe service independently of the platform, via which the monitoring device interacts with the fail-safe peripheral module. The fail-safe peripheral module signals a safe state based on the implemented safety function and the fail-safe service.

Abstract: An automation system for monitoring a safety-critical process includes a platform, a fail-safe peripheral module, and a safe runtime environment. The platform executes user programs. The user programs include a first user program and a second user program, which together implement a safety function. The second user program is diversitary with respect to the first user program. The fail-safe peripheral module couples the user programs with the safety-critical process. The safe runtime environment is implemented on the platform independently of the user programs and provides the user programs with safe resources independent of the platform.

Abstract: A method is described for collision-free motion planning of a first manipulator with closed kinematics. The method includes defining a dynamic optimization problem, solving the optimization problem using a numerical approach, and determining a first movement path for the first manipulator based on the solution of the optimization problem. The dynamic optimization problem includes a cost function that weights states and control variables of the first manipulator, a dynamic that defines states and control variables of the first manipulator as a function of time, and at least one inequality constraint for a distance to collisions. Furthermore, the optimization problem includes at least one equality constraint for the closed kinematics.

Abstract: A method and corresponding apparatus for collision-free motion planning of a first manipulator in a first working space and a second manipulator in a second working space, wherein the first and second working spaces at least partially overlap. The method includes the steps of importing a first dynamic roadmap for a first configuration space of the first manipulator, wherein the first dynamic roadmap includes a first search graph and a first mapping between the first working space and the first search graph, and importing a second dynamic roadmap for a second configuration space of the second manipulator, wherein the second dynamic roadmap includes a second search graph and a second mapping between the second working space and the second search graph. Furthermore, the motion of the first manipulator and the second manipulator are coordinated based on the first dynamic roadmap and the second dynamic roadmap.

Abstract: An apparatus and method for executing a safety function is particularly applicable to monitoring a safety area of a technical installation. An imaging unit acquires an event that triggers the safety function within a defined working area. A controller carries out a safety-related reaction depending on the triggering event. A test unit is configured to verify the operability of the imaging unit and includes a processing unit and a projection unit. The projection unit projects a pattern with defined properties into the working area. The processing unit evaluates the image data acquired by the imaging unit to detect the projected pattern within the acquired image data. Further, the processing unit extracts the specific properties of the detected projected pattern, and compares the specific properties of the detected projected pattern with the defined properties.

Abstract: A method for collision-free motion planning of a first manipulator of a robotic control apparatus from a starting point to a destination point. The method includes repeatedly determining a target path of the first manipulator to the destination point with a global planner, continuously determining a movement of the first manipulator with a local planner based on a current target path of the global planner, and performing the movement by the first manipulator in parallel with the determination by the global planner and the local planner.

Abstract: An automation system for monitoring a safety-critical process includes a platform, a fail-safe peripheral module, and a safe runtime environment. The platform executes user programs. The user programs include a first user program and a second user program, which together implement a safety function. The second user program is diversitary with respect to the first user program. The fail-safe peripheral module couples the user programs with the safety-critical process. The safe runtime environment is implemented on the platform independently of the user programs and provides the user programs with safe resources independent of the platform.

Abstract: An automation system for monitoring a safety-critical process includes a platform configured to execute user programs that implement a safety function, a fail-safe peripheral module configured to couple the user programs with the safety-critical process, and a monitoring device configured to ensure fail-safe execution of the safety function on the platform. The monitoring device is couplable to the platform via a first communication interface and the fail-safe peripheral module is couplable to the platform via a second communication interface. The monitoring device runs a fail-safe service independently of the platform, via which the monitoring device interacts with the fail-safe peripheral module. The fail-safe peripheral module signals a safe state based on the implemented safety function and the fail-safe service.

Abstract: Apparatus for voltage monitoring of a dual-channel device which implements or monitors a safety function of a machine or technical installation. The apparatus comprises an input for receiving an input voltage, a voltage regulator for generating a defined output voltage, and an output for providing the defined output voltage for the operation of the device. A voltage monitor compares a voltage present at the output with the defined output voltage and switches off the output in case the present voltage at the output deviates from the defined output voltage. A first interface and a second interface connect the voltage regulator to the dual-channels of the device, wherein the first interface and the second interface connect to a first processing channel and a second processing channel of the device separately so that the first processing channel and the second processing channel of the device can detune the voltage regulator independently.

Abstract: Apparatus for voltage monitoring of a dual-channel device which implements or monitors a safety function of a machine or technical installation. The apparatus comprises an input for receiving an input voltage, a voltage regulator for generating a defined output voltage, and an output for providing the defined output voltage for the operation of the device. A voltage monitor compares a voltage present at the output with the defined output voltage and switches off the output in case the present voltage at the output deviates from the defined output voltage. A first interface and a second interface connect the voltage regulator to the dual-channels of the device, wherein the first interface and the second interface connect to a first processing channel and a second processing channel of the device separately so that the first processing channel and the second processing channel of the device can detune the voltage regulator independently.

Abstract: An apparatus and method for executing a safety function is particularly applicable to monitoring a safety area of a technical installation. An imaging unit acquires an event that triggers the safety function within a defined working area. A controller carries out a safety-related reaction depending on the triggering event. A test unit is configured to verify the operability of the imaging unit and includes a processing unit and a projection unit. The projection unit projects a pattern with defined properties into the working area. The processing unit evaluates the image data acquired by the imaging unit to detect the projected pattern within the acquired image data. Further, the processing unit extracts the specific properties of the detected projected pattern, and compares the specific properties of the detected projected pattern with the defined properties.

Abstract: A method is described for collision-free motion planning of a first manipulator with closed kinematics. The method includes defining a dynamic optimization problem, solving the optimization problem using a numerical approach, and determining a first movement path for the first manipulator based on the solution of the optimization problem. The dynamic optimization problem includes a cost function that weights states and control variables of the first manipulator, a dynamic that defines states and control variables of the first manipulator as a function of time, and at least one inequality constraint for a distance to collisions. Furthermore, the optimization problem includes at least one equality constraint for the closed kinematics.

Abstract: A method for estimating a torque acting on a joint of a robot. The method comprises performing an identification routine for determining a position-dependent error rotation angle of a rotational deformation of a transmission. Subsequently, a rotation angle of a rotational deformation of the transmission is measured at a joint position and the measured rotation angle is corrected by means of the identified error rotation angle.

Abstract: Apparatus for voltage monitoring of a dual-channel device which implements or monitors a safety function of a machine or technical installation. The apparatus comprises an input for receiving an input voltage, a voltage regulator for generating a defined output voltage, and an output for providing the defined output voltage for the operation of the device. A voltage monitor compares a voltage present at the output with the defined output voltage and switches off the output in case the present voltage at the output deviates from the defined output voltage. A first interface and a second interface connect the voltage regulator to the dual-channels of the device, wherein the first interface and the second interface connect to a first processing channel and a second processing channel of the device separately so that the first processing channel and the second processing channel of the device can detune the voltage regulator independently.

Abstract: A method for collision-free motion planning of a first manipulator of a robotic control apparatus from a starting point to a destination point. The method includes repeatedly determining a target path of the first manipulator to the destination point with a global planner, continuously determining a movement of the first manipulator with a local planner based on a current target path of the global planner, and performing the movement by the first manipulator in parallel with the determination by the global planner and the local planner.

Abstract: A method and corresponding apparatus for collision-free motion planning of a first manipulator in a first working space and a second manipulator in a second working space, wherein the first and second working spaces at least partially overlap. The method includes the steps of importing a first dynamic roadmap for a first configuration space of the first manipulator, wherein the first dynamic roadmap includes a first search graph and a first mapping between the first working space and the first search graph, and importing a second dynamic roadmap for a second configuration space of the second manipulator, wherein the second dynamic roadmap includes a second search graph and a second mapping between the second working space and the second search graph. Furthermore, the motion of the first manipulator and the second manipulator are coordinated based on the first dynamic roadmap and the second dynamic roadmap.

Abstract: A control unit sends a plurality of request messages to the I/O units. The I/O units send a plurality of response messages to the control unit. The request messages and response messages are sent using radio-frequency signals. The I/O units expect to receive a request message within defined first time intervals, and the control unit expects to receive at least one response message within defined second time intervals. The control unit and the I/O units maintain a selected transmission frequency for as long as the request messages and response messages are received within the defined time intervals. The control unit and the I/O units change the transmission frequencies according to a defined pattern if no expected message is received within the defined time intervals.

Abstract: A control unit sends a plurality of request messages to the I/O units. The I/O units send a plurality of response messages to the control unit. The request messages and response messages are sent using radio-frequency signals. The I/O units expect to receive a request message within defined first time intervals, and the control unit expects to receive at least one response message within defined second time intervals. The control unit and the I/O units maintain a selected transmission frequency for as long as the request messages and response messages are received within the defined time intervals. The control unit and the I/O units change the transmission frequencies according to a defined pattern if no expected message is received within the defined time intervals.