Safety module for a safe drive control of a drive system in an automation system, drive system and automation system

Patent metadata

Field	Value
Publication number	US-12409857-B2
Application number	US-202217883036-A
Country	US
Kind code	B2
Filing date	Aug 8, 2022
Priority date	Feb 18, 2020
Publication date	Sep 9, 2025
Grant date	Sep 9, 2025

Abstract

A safety module for a secured drive control of an automated drive system is configured to receive encoder data sent from an encoder unit to a drive unit, based on an encoder protocol via a protocol active unit. The safety module is configured to forward the encoder data from the protocol active unit to a safety logic and a protocol passive unit, check the forwarded encoder data with the aid of the safety logic for correspondence with predetermined safety criteria relating to operation of a motor unit, and transmit the forwarded encoder data via the protocol passive unit to the drive unit, in respective data packets based on the encoder protocol. The safety module can stop operation of the motor unit with the aid of the safety logic, if the encoder data does not correspond to the predetermined safety criteria. A corresponding drive system and automation system are also provided.

First claim

The invention claimed is:

1. A safety module for secure drive control of a drive system in an automation system, wherein the drive system comprises:
at least one drive unit comprising a drive protocol active unit having a processor and memory configured for operation as an active unit of an encoder protocol of an encoder interface,
an encoder unit comprising an encoder protocol passive unit having a processor and memory configured for operation as a passive unit of the encoder protocol, and
a motor unit;
wherein the safety module is formed as a hardware component comprising contact connections configured to connect with the encoder unit and the motor unit,
wherein the safety module is integrated between the drive unit and the encoder unit and connected thereto via at least one data connection established by the contact connections,
wherein the safety module further comprises a protocol active unit, a protocol passive unit and a safety logic configured to communicate with one another via data communication, and
wherein the protocol active unit is configured as an active unit and the protocol passive unit is configured as a passive unit of the encoder protocol of the encoder interface, wherein the encoder interface provides the at least one data connection; and
wherein the safety module comprises a processor and memory configured to:
receive requests sent by the drive protocol active unit of the drive unit to the encoder protocol passive unit of the encoder unit to send out the encoder data by the protocol passive unit of the safety module;
forward the received requests of the drive protocol active unit of the drive unit to send out the encoder data by the protocol passive unit to the protocol active unit of the safety unit;
send out the received requests of the drive protocol active unit of the drive unit by the protocol active unit of the safety module to the encoder protocol passive unit of the encoder unit;
receive the requested encoder data sent out from the encoder protocol passive unit of the encoder unit configured for operation as the passive unit of the encoder protocol to the drive protocol active unit of the drive unit configured for operation as the active unit of the encoder protocol based on the encoder protocol with the aid of the protocol active unit of the safety module;
forward the received encoder data from the protocol active unit to the safety logic and the protocol passive unit;
check the forwarded encoder data with the aid of the safety logic for correspondence with predetermined safety criteria relating to operation of the motor unit;
send out the forwarded encoder data via the protocol passive unit based on the encoder protocol in corresponding data packets to the drive protocol active unit of the drive unit; and
cause a stop of the operation of the motor unit with the aid of the safety logic, if the forwarded encoder data is detected by the safety logic as not corresponding to the predetermined safety criteria.

2. The safety module according to claim 1 , wherein the safety module is further configured to send out, via the protocol active unit, requests to send out the encoder data to the encoder protocol passive unit of the encoder unit.

3. The safety module according to claim 1 , wherein the safety module may further be synchronized with the drive unit, and wherein the safety module is configured to send out corresponding requests by the protocol active unit to the encoder protocol passive unit of the encoder unit in synchrony with sending out requests for the encoder data via the drive unit.

4. A safety module according to claim 1 , wherein the safety module may further be connected to the drive unit via a data bus connection, and wherein the safety module is configured to send out, in order to cause a stop of the operation of the motor unit by the safety logic, a corresponding operation stop message based on a safety-related data packet according to a secure data bus protocol of the data bus connection to the drive unit.

5. The safety module according to claim 1 , wherein the safety criteria comprise a maximum position and/or a maximum speed and/or a maximum acceleration and/or a maximum temperature of the motor unit.

6. A drive system comprising at least a drive unit, an encoder unit, a motor unit and a safety module according to claim 1 , wherein the drive unit and the encoder unit are connected to each other via a data link and are configured to communicate via an exchange of data packets according to an encoder protocol, wherein the safety module is connected to the drive unit and the encoder unit via the data connection, and wherein the drive unit is connected to the motor unit via a control connection for controlling the motor unit.

7. An automation system comprising a control unit and at least the drive system according to claim 6 , which is connected to the control unit via a data bus connection, wherein the control unit is configured to control the drive system.

Assignees

• Beckhoff Automation Gmbh

Inventors

• Pohl Christopher
• Kathöfer Andreas
• Sieweke Frank
• Zutz Robert

Classifications

• B60W2510/0657

  Engine torque · CPC title

• B60W40/12

  related to parameters of the vehicle itself {, e.g. tyre models} · CPC title

• B60W2554/4041

  Position · CPC title

• G05B2219/42039

  Select servo parameter set from table for fixed linear working points · CPC title

• G05B2219/42281

  If estimated temperature rise of motor is too high, inhibit motor · CPC title