Safety device and computation method for safety device

Patent metadata

Field	Value
Publication number	US-9753437-B2
Application number	US-201113989888-A
Country	US
Kind code	B2
Filing date	Oct 6, 2011
Priority date	Jan 31, 2011
Publication date	Sep 5, 2017
Grant date	Sep 5, 2017

Abstract

A safety device includes a first computation unit, a second computation unit, an output control unit, and a first central processing device. The first computation unit is configured to perform a first computation on a detected value detected from a subject to be controlled, thus obtaining a first result value. The second computation unit is configured to perform a second computation on the detected value, thus obtaining a second result value which is to be determined if equal to the first result value. The output control unit is configured to output the first result value in a case that the second computation unit determines that the first result value is equal to the second result value, and not to output the first result value in a case that the second computation unit determines that the first result value is not equal to the second result value.

First claim

The invention claimed is:

1. A safety device comprising:
a first computation unit configured to perform a first computation on a detected value that is detected from a subject to be controlled, thus obtaining a first result value;
a second computation unit configured to perform a second computation on the detected value, thus obtaining a second result value, and determine whether the first result value is equal to the second result value;
an output control unit configured to output the first result value in a case that the second computation unit determines that the first result value is equal to the second result value, the output control unit being configured not to output the first result value in a case that the second computation unit determines that the first result value is not equal to the second result value; and
a first central processing device including the first computation unit and the second computation unit,
wherein the first computation is a logical computation and the second computation is a floating point computation, or the second computation is a logical computation and the first computation is a floating point computation,
wherein if the first computation is the logical computation and the second computation is the floating point computation, the first computation unit is configured to perform the logical computation and the second computation unit is configured to perform the floating point computation, thus emulating the logical computation, and if the second computation is the logical computation and the first computation is the floating point computation, the first computation unit is configured to perform the floating point computation and the second computation unit is configured to perform an integer computation by emulation, and
wherein the first computation unit is different from the second computation unit.

2. The safety device according to claim 1 , wherein the first computation unit is configured to obtain a third result value during the first computation and input to the second computation unit, the detected value, the first result value, and the third result value,
the second computation unit is configured to perform an inverse computation of the first computation using the first result value and the third result value, thereby obtaining a fourth result value,
the second computation unit is configured to determine whether or not the fourth result value is equal to the detected value,
the output control unit is configured to output the first result value in a case that the second computation unit determines that the fourth result value is equal to the detected value, and
the output control unit is configured not to output the first result value in a case that the second computation unit determines that the fourth result value is not equal to the detected value.

3. The safety device according to claim 1 , further comprising:
a second central processing device having the same configuration as that of the first central processing device, the second central processing device being connected in parallel to the first central processing device; and
an output device configured to determine a command value that controls the subject to be controlled, based on the first result value output from the output control unit of the first central processing device and a fifth result value output from the output control unit of the second central processing device.

4. The safety device according to claim 3 , wherein the output control unit is configured to, in a case that the second computation unit determines that the first result value is not equal to the second result value, output to the output device, information indicating that the first computation unit or the second computation unit is in an abnormal state, and
the output device is configured to determine the command value based on the information.

5. A computation method for a safety device, the computation method comprising:
a step of performing a first computation on a detected value that is detected from a subject to be controlled, thus obtaining a first result value;
a step of performing a second computation on the detected value, thus obtaining a second result value;
a step of determining whether the first result value is equal to the second result value; and
a step of outputting the first result value in a case that it is determined that the first result value is equal to the second result value, and not outputting the first result value in a case that it is determined that the first result value is not equal to the second result value,
wherein the first computation is a logical computation and the second computation is a floating point computation, or the second computation is a logical computation and the first computation is a floating point computation, and
wherein if the first computation is the logical computation and the second computation is the floating point computation, the step of performing the first computation unit comprises a step of performing the logical computation on the detected value, and the step of performing the second computation comprises a step of performing the floating point computation on the detected value, thus emulating the logical computation, and if the second computation is the logical computation and the first computation is the floating point computation, the step of performing the first computation comprises a step of performing the floating point computation, and the step of performing the second computation comprises a step of performing an integer computation by emulation.

6. The computation method according to claim 5 , wherein the step of performing the first computation comprises a step of obtaining a third result value during the first computation, and
the step of performing the second computation comprises a step of performing an inverse computation of the first computation using the first result value and the third result value, thereby obtaining a fourth result value, and
the computation method further comprises:
a step of determining whether or not the fourth result value is equal to the detected value; and
a step of outputting the first result value in a case that it is determined that the fourth result value is equal to the detected value, and not outputting the first result value in a case that it is determined that the fourth result value is not equal to the detected value.

7. The computation method according to claim 5 , further comprising:
in a case that it is determined that the first result value is not equal to the second result value, a step of outputting information indicating that there is abnormality; and
a step of controlling the subject to be controlled based on the information.

Assignees

• Ishii Kiyoshi
• Soga Masanobu
• Emoto Hideaki
• Toda Shinichi
• Daigo Katsuya
• Morimoto Kenichi
• Mitsubishi Heavy Ind Ltd

Inventors

• Ishii Kiyoshi
• Soga Masanobu
• Emoto Hideaki
• Toda Shinichi
• Daigo Katsuya
• Morimoto Kenichi

Classifications

• G05B2219/14014

  Redundant processors and I-O · CPC title

• G05B19/0421

  Multiprocessor system · CPC title

• G05B9/02

  electric · CPC title

• G05B19/058

  Safety, monitoring · CPC title

• G05B2219/24182

  Redundancy · CPC title