Abstract: A safety switching device for fail-safely disconnecting an electrical load has an input part for receiving a safety-relevant input signal, a logic part for processing the at least one safety-relevant input signal, and an output part. The output part has a relay coil and four relay contacts. The first and second relay contacts are arranged electrically in series with one another. The third and fourth relay contacts are also arranged electrically in series with one another. The first and the third relay contacts are mechanically coupled to each other and form a first group of positively driven relay contacts. The second and the fourth relay contacts are mechanically coupled to each other and form a second group of positively driven relay contacts. The logic part redundantly controls the first and the second groups of positively driven relay contacts to selectively allow, or to interrupt in a fail-safe manner, a current flow to the electrical load, depending on the safety-relevant input signal.

Abstract: An electronic safety switching device comprising at least a first and a second signal processing channel to which input signals may be supplied for signal processing. The first and second signal processing channels provide processed output signals, wherein the first and the second signal processing channels process the supplied input signals redundantly with respect to one other. The first and the second signal processing channels are each formed as integrated circuits, wherein the first signal processing channel is arranged monolithically on a first semiconductor substrate, and the second signal processing channel is arranged monolithically on a second semiconductor substrate. Furthermore, the first and the second semiconductor substrates are combined into a stack to form a one-piece electronic component.

Abstract: A safety switching apparatus for switching-on or switching-off a technical installation has a first input for receiving a first clock signal via a feed line, said first clock signal having a first clock frequency. A failsafe control/evaluation unit processes the first clock signal in a failsafe manner in order to generate an output signal for switching-on or switching-off the technical installation in response to the first clock signal. A clock reference provides a second clock signal having a second clock frequency. A current-increasing circuit having a switching element is arranged for selectively increasing an input current into the first input. The switching element is coupled to the clock reference and selectively activates or deactivates the current-increasing circuit in response to the second clock frequency.

Abstract: A safety switching device for fail-safely disconnecting an electrical load has an input part for receiving a safety-relevant input signal, a logic part for processing the at least one safety-relevant input signal, and an output part. The output part has a relay coil and four relay contacts. The first and second relay contacts are arranged electrically in series with one another. The third and fourth relay contacts are also arranged electrically in series with one another. The first and the third relay contacts are mechanically coupled to each other and form a first group of positively driven relay contacts. The second and the fourth relay contacts are mechanically coupled to each other and form a second group of positively driven relay contacts. The logic part redundantly controls the first and the second groups of positively driven relay contacts to selectively allow, or to interrupt in a fail-safe manner, a current flow to the electrical load, depending on the safety-relevant input signal.

Abstract: An electronic safety switching device comprising at least a first and a second signal processing channel to which input signals may be supplied for signal processing. The first and second signal processing channels provide processed output signals, wherein the first and the second signal processing channels process the supplied input signals redundantly with respect to one other. The first and the second signal processing channels are each formed as integrated circuits, wherein the first signal processing channel is arranged monolithically on a first semiconductor substrate, and the second signal processing channel is arranged monolithically on a second semiconductor substrate. Furthermore, the first and the second semiconductor substrates are combined into a stack to form a one-piece electronic component.

Abstract: A control system has a plurality of spatially distributed stations. At least some of the stations have input connectors for connecting sensors or output connectors for connecting actuators. The stations are connected from station to station to form a series of stations. The series has a first station, at least one second station and a last station. The first station and every second station have a successor in the series. Every second station and the last station have a predecessor in the series. In order to transmit data in this control system, the first station generates a number of separate data telegrams which is equal to the number of second stations plus the last station. Each data telegram is addressed to precisely one of the stations. The first station sends the data telegrams on by one at defined time intervals to its successor, wherein the data telegrams are addressed in reverse order of the stations.

Abstract: A safety circuit assembly for switching on or switching off a hazardous system in a failsafe manner has an evaluating device which is designed to produce a redundant switching signal. The evaluating device is connected to a signaling device via a first and a second line forming a pair of lines. The signaling device has an actuator which can be switched between a defined first state and at least one further state. The evaluating device produces a first defined pulse signal and transmits the first defined pulse signal to the signaling device using the pair of lines in a first direction. The signaling device produces a second defined pulse signal, which is a predefined replica of the first pulse signal, and transmits the second defined pulse signal to the evaluating device using the same pair of lines when the actuator is in the defined first state.

Abstract: A safety switching apparatus for switching-on or switching-off a technical installation has a first input for receiving a first clock signal via a feed line, said first clock signal having a first clock frequency. A failsafe control/evaluation unit processes the first clock signal in a failsafe manner in order to generate an output signal for switching-on or switching-off the technical installation in response to the first clock signal. A clock reference provides a second clock signal having a second clock frequency. A current-increasing circuit having a switching element is arranged for selectively increasing an input current into the first input. The switching element is coupled to the clock reference and selectively activates or deactivates the current-increasing circuit in response to the second clock frequency.

Abstract: A safety circuit assembly for switching on or switching off a hazardous system in a failsafe manner has an evaluating device which is designed to produce a redundant switching signal. The evaluating device is connected to a signaling device via a first and a second line forming a pair of lines. The signaling device has an actuator which can be switched between a defined first state and at least one further state. The evaluating device produces a first defined pulse signal and transmits the first defined pulse signal to the signaling device using the pair of lines in a first direction. The signaling device produces a second defined pulse signal, which is a predefined replica of the first pulse signal, and transmits the second defined pulse signal to the evaluating device using the same pair of lines when the actuator is in the defined first state.

Abstract: An arrangement for controlling an automated system, having a number of sensors and actuators, in particular for controlling a railroad system. A programmable control unit runs a user program to process input data from the sensors and to generate control commands for the actuators. The sensors and the actuators are connected to a remote I/O unit, which is connected to the control unit via a communication network. The control unit and the I/O unit interchange data messages in order to transmit the input data and the control commands. The arrangement has a remote disconnection unit, which is coupled to the remote I/O unit independently from the input data and control commands. The control unit is designed to integrate specific verification data for the disconnection unit into the data messages for the I/O unit. The disconnection unit is designed to deactivate the I/O unit depending on the specific verification data.

Abstract: An arrangement for controlling an automated system, having a number of sensors and actuators, in particular for controlling a railroad system. A programmable control unit runs a user program to process input data from the sensors and to generate control commands for the actuators. The sensors and the actuators are connected to a remote I/O unit, which is connected to the control unit via a communication network. The control unit and the I/O unit interchange data messages in order to transmit the input data and the control commands. The arrangement has a remote disconnection unit, which is coupled to the remote I/O unit independently from the input data and control commands. The control unit is designed to integrate specific verification data for the disconnection unit into the data messages for the I/O unit. The disconnection unit is designed to deactivate the I/O unit depending on the specific verification data.

Abstract: In a method for transmitting data in a control system, a first station generates a data frame having a plurality of data fields. At least one data field to be filled with transmission data is clearly assigned to each further station. The data frame is transmitted as an outgoing data frame from one station to the next, with every further station filling the respectively assigned data field with transmission data. The last station returns the data frame as a returning data frame to the series of stations. The stations read extraneous transmission data from the data fields in the returning data frame. Preferably, the respective data fields are individually assigned to the stations.

Abstract: A control system has a plurality of spatially distributed stations. At least some of the stations have input connectors for connecting sensors or output connectors for connecting actuators. The stations are connected from station to station to form a series of stations. The series has a first station, at least one second station and a last station. The first station and every second station have a successor in the series. Every second station and the last station have a predecessor in the series. In order to transmit data in this control system, the first station generates a number of separate data telegrams which is equal to the number of second stations plus the last station. Each data telegram is addressed to precisely one of the stations. The first station sends the data telegrams on by one at defined time intervals to its successor, wherein the data telegrams are addressed in reverse order of the stations.

Abstract: A safety switching apparatus for safe disconnection of an electrical load in an automated installation has at least one input for connecting a signaling device. The safety switching apparatus has an evaluation and control unit and at least one switching element controlled by the evaluation and control unit in order to interrupt an electrical power supply path to the load. The switching element is a changeover switch having at least two mutually alternative switching paths, with a first switching path being located in the electrical power supply path to the load and with a second switching path leading to a monitoring unit.

Abstract: A method and a device for switching off an inductive load in a failsafe manner are proposed. According to one aspect of the invention, the method and the device are configured such that a predefined inductive voltage is generated during switch-off. The predefined inductive voltage is monitored by means of a monitoring circuit. In a preferred embodiment, the inductive voltage is set by means of threshold switches and the inductive voltage also is monitored by means of these threshold switches.

Abstract: A safety switching apparatus for safe disconnection of an electrical load in an automated installation has at least one input for connecting a signaling device. The safety switching apparatus has an evaluation and control unit and at least one switching element controlled by the evaluation and control unit in order to interrupt an electrical power supply path to the load. The switching element is a changeover switch having at least two mutually alternative switching paths, with a first switching path being located in the electrical power supply path to the load and with a second switching path leading to a monitoring unit.

Abstract: In a method for transmitting data in a control system, a first station generates a data frame having a plurality of data fields. At least one data field to be filled with transmission data is clearly assigned to each further station. The data frame is transmitted as an outgoing data frame from one station to the next, with every further station filling the respectively assigned data field with transmission data. The last station returns the data frame as a returning data frame to the series of stations. The stations read extraneous transmission data from the data fields in the returning data frame. Preferably, the respective data fields are individually assigned to the stations.

Abstract: A method and a device for switching off an inductive load in a failsafe manner are proposed. According to one aspect of the invention, the method and the device are configured such that a predefined inductive voltage is generated during switch-off. The predefined inductive voltage is monitored by means of a monitoring circuit. In a preferred embodiment, the inductive voltage is set by means of threshold switches and the inductive voltage also is monitored by means of these threshold switches.

Abstract: The invention relates to a method for adjusting the data transmission rate in a fieldbus system (10) which is suitable to control safety-critical processes and which comprises at least one subscriber (12, 14) connected to a fieldbus (20), wherein in a first phase the subscriber/subscribers log on at a unit (30/central unit) centrally connected to the fieldbus with a first low data transmission rate. In a second phase the central unit (30) sets the data transmission rate at the subscriber/subscribers (12, 14) to a predetermined higher second value. In a third phase the subscriber/subscribers (12, 14) log on again at the central unit with a higher data transmission rate; and the central unit (30) shuts down the fieldbus (20) if it detects a deviation of the number of subscribers (12, 14) logged on in the first and the third phase.

Abstract: The present invention describes a method of allocating a defined user address to a safe bus user when connecting it to a field bus of a safe control system. The method comprises the step of sending out a first registration message from the safe bus user to an administration unit connected to the field bus. The first registration message contains a predetermined universal address. The method further comprises the step of sending out an address allocation message from the administration unit to the safe bus user, wherein the address allocation message contains the defined user address. Finally, the method comprises the step of storing the defined user address in a memory of the safe bus user.