Fail-safe bus system for a process system

Patent metadata

Field	Value
Publication number	US-11947432-B2
Application number	US-202117366803-A
Country	US
Kind code	B2
Filing date	Jul 2, 2021
Priority date	Jul 3, 2020
Publication date	Apr 2, 2024
Grant date	Apr 2, 2024

Abstract

A bus system for a process system, having a first bus subscriber which transmits bus messages and having at least one first bus subscriber which receives bus messages, wherein the transmitting first bus subscriber and the receiving first bus subscriber are connected to one another via a first data bus, wherein the transmitting first bus subscriber is designed such that it transmits control commands to the receiving first bus subscriber, wherein the receiving first bus subscriber is designed such that it executes the control commands of the transmitting first bus subscriber and achieves the object of providing a bus system that is designed to be fail-safe in a special way.

First claim

The invention claimed is:

1. A bus system for a process system, comprising:
a transmitting first bus subscriber which transmits bus messages and a receiving first bus subscriber which receives bus messages, wherein the transmitting first bus subscriber and the receiving first bus subscriber are connected to one another via a first data bus, wherein the transmitting first bus subscriber transmits first control commands to the receiving first bus subscriber, wherein the receiving first bus subscriber executes the first control commands of the transmitting first bus subscriber;
a transmitting second bus subscriber;
a receiving second bus subscriber;
wherein the transmitting second bus subscriber and the receiving second bus subscriber are connected to one another via a second data bus;
wherein the transmitting second bus subscriber transmits second control commands to the receiving second bus subscriber;
wherein the receiving second bus subscriber executes the second control commands of the transmitting second bus subscriber;
wherein the transmitting first bus subscriber and the transmitting second bus subscriber are connected to one another via a monitoring communication channel and functionally monitor one another;
wherein the first data bus and the second data bus can be connected to one another and disconnected from one another via a switching device which can be controlled by a circuit;
wherein the first data bus and the second data bus are disconnected from one another in a simultaneous go state of the transmitting first bus subscriber and of the transmitting second bus subscriber;
wherein, in a fault state of the transmitting second bus subscriber, the circuit connects the first data bus and the second data bus to each other via the switching device so that the transmitting first bus subscriber is connected to the receiving first bus subscriber and the receiving second bus subscriber, and in a fault state of the transmitting first bus subscriber, the circuit connects the first data bus and the second data bus to each other via the switching device so that the transmitting second bus subscriber is connected to the receiving first bus subscriber and the receiving second bus subscriber; and
wherein, in the fault state of the transmitting second bus subscriber, the transmitting first bus subscriber transmits the first control commands to the receiving first bus subscriber and transmits the second control commands to the receiving second bus subscriber, and in the fault state of the transmitting first bus subscriber, the transmitting second bus subscriber transmits the first control commands to the receiving first bus subscriber and transmits the second control commands to the receiving second bus subscriber.

2. The bus system according to claim 1 , wherein the receiving first bus subscriber transmits first status data about a current operating status of the receiving first bus subscriber or first data characterizing a process environment to the transmitting first bus subscriber, and the receiving second bus subscriber transmits second status data about a current operating status of the receiving second bus subscriber or second data characterizing the process environment to the transmitting second bus subscriber; and
wherein the receiving first bus subscriber at least partially stops transmitting the first status data or the first data characterizing the process environment in the fault state of the transmitting first bus subscriber, and the receiving second bus subscriber at least partially stops transmitting the second status data or the second data characterizing the process environment in the fault state of the transmitting second bus subscriber.

3. The bus system according to claim 2 , wherein, in the fault state of the transmitting first bus subscriber, the transmitting first bus subscriber, the transmitting second bus subscriber and the transmitting substitute bus subscriber prompt the receiving first bus subscriber to at least partially stop transmitting the first status data and/or the first data characterizing the process environment, and in the fault state of the transmitting second bus subscriber, the transmitting first bus subscriber, the transmitting second bus subscriber and the transmitting substitute bus subscriber prompt the receiving second bus subscriber to at least partially stop transmitting the second data and/or the second data characterizing the process environment; or
wherein the receiving first bus subscriber recognizes the fault state of the transmitting first bus subscriber and independently at least partially stops the transmission of the first status data or the first data characterizing the process environment, and the receiving second bus subscriber recognizes the fault state of the transmitting second bus subscriber and independently at least partially stops the transmission of the second status data or the second data characterizing the process environment.

4. The bus system according to claim 1 , wherein the monitoring communication channel is implemented as an analog, digital, wireless or wired communication channel.

5. The bus system according to claim 1 , wherein the circuit is implemented as a separate bus subscriber.

6. The bus system according to claim 1 , wherein a moderating first bus subscriber and a moderating second bus subscriber are provided;
wherein the moderating first bus subscriber moderates communication between the transmitting first bus subscriber and the receiving first bus subscriber and the moderating second bus subscriber moderates communication between the transmitting second bus subscriber and the receiving second bus subscriber; and
wherein, in the fault state of the transmitting first bus subscriber, the moderating first bus subscriber is deactivated and the moderating second bus subscriber moderates communication between the transmitting second bus subscriber and the receiving first bus subscriber or, in the fault state of the transmitting second bus subscriber, the moderating second bus subscriber is deactivated and the moderating first bus subscriber moderates the communication between the transmitting first bus subscriber and the receiving second bus subscriber.

7. The bus system according to claim 6 , wherein the moderating first bus subscriber and the moderating second bus subscriber are implemented as separate bus subscribers; or
wherein the moderating first bus subscriber and the moderating second bus subscriber are provided in the circuit; or
wherein the moderating first bus subscriber is implemented in the transmitting first bus subscriber and moderating second bus subscriber is implemented in the transmitting second bus subscriber.

8. The bus system according to claim 1 , wherein the circuit is a first circuit;
wherein a second circuit is provided;
wherein the first circuit is implemented in the transmitting first bus subscriber; and
wherein the second circuit is implemented in the transmitting second bus subscriber
wherein the switching device is configured such that at least one of:
a first switch connected to the switching device via a first switching channel and switches the switching device via the first switching channel, and a second switch is connected to the switching device via a second switching channel and switches the switching device via the second switching channel;
the switching device is connected to the monitoring communication channel, and the first circuit and the second circuit switch the switching device via the monitoring communication channel;

the first circuit switches the switching device via the first data bus, and the second circuit switches the switching device via the second data bus.

9. The bus system according to

Assignees

• Krohne Messtechnik Gmbh

Inventors

• Kuschnerus Dirk
• Lemke Lars
• Walbrecker Sven

Classifications

• G06F11/221 Primary

  to test buses, lines or interfaces, e.g. stuck-at or open line faults · CPC title

• G06F11/3027

  where the computing system component is a bus · CPC title

• G06F13/374

  using a self-select method with individual priority code comparator · CPC title

• G06F13/4022

  using switching circuits, e.g. switching matrix, connection or expansion network (G06F13/4009 takes precedence) · CPC title

• H04L12/40189 Primary

  by using a plurality of bus systems · CPC title