Abstract: A safety controller and system of safety controllers and a removable memory module for rapid configuration and/or backup of safety controllers are provided. The safety controller comprises a non-volatile memory and one or more slots configured to host modules. A predetermined slot of the one or more slots is configured to communicatively couple the safety controller with a memory module. The safety controller is configured to transfer a backup of a configuration on the safety controller to a memory module hosted in the predetermined slot and configured to load a configuration from a memory module hosted in the predetermined slot. A method of distributing software to a plurality of industrial safety controller comprises utilizing a memory module.

Abstract: A single-wire safety system is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more safety devices connected in series with the safety relay via a single-wire communication circuit. A smart tap device is used to interface safety devices that are not compliant with the single-wire protocol to the single-wire channel. The safety device or smart tap device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices or smart taps. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. The architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel.

Abstract: A single-wire safety system architecture is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more compatible safety devices connected in series with the safety relay via a single-wire communication circuit. The safety device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. The architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel, and can also allow safety devices to insert prognostic data into the safety signal in order to convey health information while the system is in normal operation mode.

Abstract: A safety switching device for driving a plurality of different kinds of guard locking devices is provided. The safety switching device comprises a first terminal and a second terminal for connecting a guard locking device, and a safety processor adapted for controlling drive signals at the first and the second terminal to drive the guard locking device. The safety processor is adapted for determining a kind of a guard locking device connected to the first and/or the second terminal out of a plurality of different kinds of guard locking devices by detecting external electrical connections between the first terminal, the second terminal, and a reference potential. The safety processor is further adapted for controlling the drive signals depending on the determined kind of the guard locking device.

Abstract: A safety controller module for providing safety control comprises a non-volatile memory configured for storing a safety control program and one or more processing units configured to execute safety control functions associated with the safety control program to provide independent safety control. The safety controller module further comprises a connector configured to communicatively couple the safety controller module with a non safety controller. The safety controller module is configured to communicate an input and/or an output signal of the safety controller module via the connector to the non-safety controller.

Abstract: A safety controller and system of safety controllers and a removable memory module for rapid configuration and/or backup of safety controllers are provided. The safety controller comprises a non-volatile memory and one or more slots configured to host modules. A predetermined slot of the one or more slots is configured to communicatively couple the safety controller with a memory module. The safety controller is configured to transfer a backup of a configuration on the safety controller to a memory module hosted in the predetermined slot and configured to load a configuration from a memory module hosted in the predetermined slot. A method of distributing software to a plurality of industrial safety controller comprises utilizing a memory module.

Abstract: A single-wire safety system is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more safety devices connected in series with the safety relay via a single-wire communication circuit. A smart tap device is used to interface safety devices that are not compliant with the single-wire protocol to the single-wire channel. The safety device or smart tap device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices or smart taps. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. The architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel.

Abstract: A single-wire safety system architecture is provided that yields reliable safety device monitoring without the need for dual redundant signal channels. The safety system comprises a safety relay acting as a communications master device and one or more compatible safety devices connected in series with the safety relay via a single-wire communication circuit. The safety device farthest from the safety relay on the safety circuit modulates a safety signal with a recognizable pulse pattern that traverses the single-wire safety circuit to the safety relay via the intermediate safety devices. The safety relay maintains safety mode as long as the pulse pattern is received and recognized. The architecture allows bi-directional communication of initialization, configuration, and diagnostic messages over the single-wire safety channel, and can also allow safety devices to insert prognostic data into the safety signal in order to convey health information while the system is in normal operation mode.

Abstract: An industrial controller for safety control is disclosed. The controller comprises an interface for receiving a download of a safety control program, a memory for storing at least one safety control program and at least one processing unit for executing a safety control program stored in the non-volatile memory. The at least one processing unit is configured to determine whether a safety control program is verified and to limit an execution of an unverified safety control program according to an unverified run mode. An indicator is configured to indicate the execution of an unverified safety control program. A method of assigning a verification ID to an industrial controller comprises steps of configuring and downloading a safety control program, validating the configured safety control program for the target industrial controller, and assigning a verification ID. Execution of the configured safety control program is limited before the verification ID is assigned.

Abstract: An industrial safety controller comprises a non-volatile memory configured for storing an industrial control program and at least one processing unit. The industrial safety controller, which may be a safety relay, further comprises connector means configured to communicatively couple the safety controller with an expansion module. The safety controller is configured to receive an input and/or provide an output via an I/O expansion module that is coupled to the safety controller utilizing the connector means. The industrial safety controller may comprise an expansion module bay and the connector means may comprise a bay connector.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.

Abstract: A safety relay configuration system for configuring safety functions to be carried out by a safety relay is provided. The configuration system comprises a number of features that facilitate intuitive and simplified configuration of an industrial safety relay, including but not limited to features that guide the user through the configuration process using an intuitive sequential procedure that provides feedback and prompts based on user interaction, enforce design consistency throughout the configuration project by intelligently limiting user selections, and visually organize configuration and status information in a manner that efficiently utilizes display space and allows the user to quickly evaluate available configuration options.

Abstract: A safety relay configuration system for configuring safety functions to be carried out by a safety relay is provided. The configuration system comprises a number of features that facilitate intuitive and simplified configuration of an industrial safety relay, including but not limited to features that guide the user through the configuration process using an intuitive sequential procedure that provides feedback and prompts based on user interaction, enforce design consistency throughout the configuration project by intelligently limiting user selections, and visually organize configuration and status information in a manner that efficiently utilizes display space and allows the user to quickly evaluate available configuration options.

Abstract: A safety relay configuration system for configuring safety functions to be carried out by a safety relay is provided. The configuration system comprises a number of features that facilitate intuitive and simplified configuration of an industrial safety relay, including but not limited to features that guide the user through the configuration process using an intuitive sequential procedure that provides feedback and prompts based on user interaction, enforce design consistency throughout the configuration project by intelligently limiting user selections, and visually organize configuration and status information in a manner that efficiently utilizes display space and allows the user to quickly evaluate available configuration options.

Abstract: A safety relay configuration system for configuring safety functions to be carried out by a safety relay is provided. The configuration system comprises a number of features that facilitate intuitive and simplified configuration of an industrial safety relay, including but not limited to features that guide the user through the configuration process using an intuitive sequential procedure that provides feedback and prompts based on user interaction, enforce design consistency throughout the configuration project by intelligently limiting user selections, and visually organize configuration and status information in a manner that efficiently utilizes display space and allows the user to quickly evaluate available configuration options.

Abstract: A safety relay configuration system for configuring safety functions to be carried out by a safety relay is provided. The configuration system comprises a number of features that facilitate intuitive and simplified configuration of an industrial safety relay, including but not limited to features that guide the user through the configuration process using an intuitive sequential procedure that provides feedback and prompts based on user interaction, enforce design consistency throughout the configuration project by intelligently limiting user selections, and visually organize configuration and status information in a manner that efficiently utilizes display space and allows the user to quickly evaluate available configuration options.

Abstract: The present invention relates to a safety switching device for actuating actuators in a fail-safe manner, and further relates to an emergency shut-off circuit comprising a safety switching device according to the present invention. The safety switching device includes at least one first and second safety input for receiving a first and second input signal, at least one first and second safety output for transmitting a first and second output signal, and a control unit for evaluating said input signals and for generating said output signals. The first and second safety outputs further comprise a feedback loop said that couples the output signals back to the control unit such that the control unit is operable to perform a test routine for testing said output signals.

Abstract: A safety switching device for driving a plurality of different kinds of guard locking devices is provided. The safety switching device comprises a first terminal and a second terminal for connecting a guard locking device, and a safety processor adapted for controlling drive signals at the first and the second terminal to drive the guard locking device. The safety processor is adapted for determining a kind of a guard locking device connected to the first and/or the second terminal out of a plurality of different kinds of guard locking devices by detecting external electrical connections between the first terminal, the second terminal, and a reference potential. The safety processor is further adapted for controlling the drive signals depending on the determined kind of the guard locking device.

Abstract: A safety switching device for fail-safely switching on and off an electrical load, and to a system comprising at least two safety switching devices which interact in a fail-safe manner via a single-channel. The safety switching device comprises a fail-safe control unit, a first and a second electronic switching element connected with a first and a second output terminal; and at least one input terminal for receiving a first switching signal that causes a switching of said switching elements. Said first and second switching elements each comprise an output which provides depending on the first switching signal an output signal having a first or second potential. A third output terminal connects said safety switching device to a second safety switching device, providing a clocked signal depending on the first switching signal and being monitored by said control unit for performing a cross fault detection.