Abstract: A single-wire safety system architecture is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more compatible safety input devices connected in series with the safety relay via a single-wire communication circuit. The safety input device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. In addition to conveying the safety signal, the architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel.

Abstract: A safety switching device for driving a plurality of different kinds of guard locking devices is provided. The safety switching device comprises a first terminal and a second terminal for connecting a guard locking device, and a safety processor adapted for controlling drive signals at the first and the second terminal to drive the guard locking device. The safety processor is adapted for determining a kind of a guard locking device connected to the first and/or the second terminal out of a plurality of different kinds of guard locking devices by detecting external electrical connections between the first terminal, the second terminal, and a reference potential. The safety processor is further adapted for controlling the drive signals depending on the determined kind of the guard locking device.

Abstract: A safety controller module for providing safety control comprises a non-volatile memory configured for storing a safety control program and one or more processing units configured to execute safety control functions associated with the safety control program to provide independent safety control. The safety controller module further comprises a connector configured to communicatively couple the safety controller module with a non safety controller. The safety controller module is configured to communicate an input and/or an output signal of the safety controller module via the connector to the non-safety controller.

Abstract: A safety controller and system of safety controllers and a removable memory module for rapid configuration and/or backup of safety controllers are provided. The safety controller comprises a non-volatile memory and one or more slots configured to host modules. A predetermined slot of the one or more slots is configured to communicatively couple the safety controller with a memory module. The safety controller is configured to transfer a backup of a configuration on the safety controller to a memory module hosted in the predetermined slot and configured to load a configuration from a memory module hosted in the predetermined slot. A method of distributing software to a plurality of industrial safety controller comprises utilizing a memory module.

Abstract: A single-wire safety system is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more safety devices connected in series with the safety relay via a single-wire communication circuit. A smart tap device is used to interface safety devices that are not compliant with the single-wire protocol to the single-wire channel. The safety device or smart tap device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices or smart taps. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. The architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel.

Abstract: An industrial controller for safety control is disclosed. The controller comprises an interface for receiving a download of a safety control program, a memory for storing at least one safety control program and at least one processing unit for executing a safety control program stored in the non-volatile memory. The at least one processing unit is configured to determine whether a safety control program is verified and to limit an execution of an unverified safety control program according to an unverified run mode. An indicator is configured to indicate the execution of an unverified safety control program. A method of assigning a verification ID to an industrial controller comprises steps of configuring and downloading a safety control program, validating the configured safety control program for the target industrial controller, and assigning a verification ID. Execution of the configured safety control program is limited before the verification ID is assigned.

Abstract: A single-wire safety system architecture is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more compatible safety devices connected in series with the safety relay via a single-wire communication circuit. The safety device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. The architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel, and can also allow safety devices to insert prognostic data into the safety signal in order to convey health information while the system is in normal operation mode.

Abstract: An industrial safety controller comprises a non-volatile memory configured for storing an industrial control program and at least one processing unit. The industrial safety controller, which may be a safety relay, further comprises connector means configured to communicatively couple the safety controller with an expansion module. The safety controller is configured to receive an input and/or provide an output via an I/O expansion module that is coupled to the safety controller utilizing the connector means. The industrial safety controller may comprise an expansion module bay and the connector means may comprise a bay connector.

Abstract: A single-wire safety system architecture is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more compatible safety input devices connected in series with the safety relay via a single-wire communication circuit. The safety input device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. In addition to conveying the safety signal, the architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: The present invention relates to a safety switching device for actuating actuators in a fail-safe manner, and further relates to an emergency shut-off circuit comprising a safety switching device according to the present invention. The safety switching device includes at least one first and second safety input for receiving a first and second input signal, at least one first and second safety output for transmitting a first and second output signal, and a control unit for evaluating said input signals and for generating said output signals. The first and second safety outputs further comprise a feedback loop said that couples the output signals back to the control unit such that the control unit is operable to perform a test routine for testing said output signals.

Abstract: A safety switching device for driving a plurality of different kinds of guard locking devices is provided. The safety switching device comprises a first terminal and a second terminal for connecting a guard locking device, and a safety processor adapted for controlling drive signals at the first and the second terminal to drive the guard locking device. The safety processor is adapted for determining a kind of a guard locking device connected to the first and/or the second terminal out of a plurality of different kinds of guard locking devices by detecting external electrical connections between the first terminal, the second terminal, and a reference potential. The safety processor is further adapted for controlling the drive signals depending on the determined kind of the guard locking device.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A modular safety switching device system for actuating actuators in a fail-safe manner. and a switching device system wherein a plurality of switching devices are connected in series and optically communicate with each other. The system includes a first and a second safety device. The first and second safety devices are connected to each other via an optical link. The optical link may be formed in a way that the first safety device comprises an optical transmitter and the second safety device comprises an optical receiver configured to receive information from the optical transmitter.

Abstract: The present invention relates to a safety switching device for actuating actuators in a fail-safe manner, and further relates to an emergency shut-off circuit comprising a safety switching device according to the present invention. The safety switching device includes at least one first and second safety input for receiving a first and second input signal, at least one first and second safety output for transmitting a first and second output signal, and a control unit for evaluating said input signals and for generating said output signals. The first and second safety outputs further comprise a feedback loop said that couples the output signals back to the control unit such that the control unit is operable to perform a test routine for testing said output signals.

Abstract: A modular safety system for controlling emergency stop applications includes a plurality of inputs, a plurality of output groups, and a plurality of safe relay outputs. The plurality of inputs is assigned to at least one of the output groups. Each output group is configured to control at least one of the plurality of safe relay outputs. The system also includes means for configuring the system and at least three freely programmable output groups.

Abstract: A modular safety system for safety control in emergency stop applications includes a base module and at least one extension module, wherein each module is arranged in a housing with a rail-mounting base, so that the modules are located in a side-by-side arrangement when mounted to the rail. The modular safety system also includes means for setting of required input and output functions, wherein the setting means is located in a side wall of the module housing, so that after mounting the modules to the rail, the setting means is covered by an adjacent module.

Abstract: A modular safety system for safety control in emergency stop applications includes a base module and at least one extension module, wherein each module is arranged in a housing with a rail-mounting base, so that the modules are located in a side-by-side arrangement when mounted to the rail. The modular safety system also includes means for setting of required input and output functions, wherein the setting means is located in a side wall of the module housing, so that after mounting the modules to the rail, the setting means is covered by an adjacent module.