Patent Application
20180205375
The invention relates to circuits. More particularly, it relates to a circuit for a secure digital switched output for connecting a load which can be connected between the switched output and another output.
The circuit is used, for example, in digital output modules of industrial automated controls. For many applications, particularly applications that are critical for security, it must be ensured in such output modules that a switched output is securely switched off, if required by the automated control or an additional security device. This applies particularly if an actuator is controlled via the switched output and if its operation can result in hazard for operators of an installation.
As disclosed in the European standard EN 13849-1, two series-connected semiconductor switches are commonly used in order to ensure that no supply voltage is applied at the switched output during the switch-off process as a result of the redundant design. In a series connection of this type, an interruption of the power supply, for example to an actuator, still occurs even if one of the two semiconductor switches is defective and has assumed a permanently conductive state.
The correct operation, in particular the correct switching off, of the circuit for the digital switched output is regularly verified by a test method.
For this purpose, it is possible to measure a voltage level at the digital switched output, while the switched output is switched off for the briefest possible operating time. Such a brief switching off is also referred to as “blanking.” If the brief blanking can also be observed at the switched output, this indicates a correct switching off capacity of at least one semiconductor switch. For many application purposes, such blanking, even if kept very brief, is not desirable during operation, since it interferes with the correct operation of the load controlled by the switched output.
EP 1 389 284 B1 discloses a circuit for a security switch module in which, parallel to a first current path in which at least one semiconductor switch is located, there is a second current path, which also has at least one semiconductor switch. During operation, voltage is applied alternately to the switched output via one or the other current paths, wherein the respective non-active current path is verified with regard to the function of the semiconductor switch thereof. In this manner, with the switched output on, it is possible to verify that the semiconductor switches are being used without the switched output being briefly blanked by the test output. However, this functionality leads to a doubling of the number of semiconductor switches and to a more complex verification circuit.
An object of the present invention is to provide a circuit for a digital switched output and an output module which, with the smallest possible number of semiconductor switches used and without a brief blanking occurring at the switched output, verifies that the semiconductor switches are functioning. Another object is to describe a test method for a circuit of this type, which verifies the correct functioning of a semiconductor switch of the circuit without interrupting the supply load.
The circuit has a digital switched output for connecting a load between a switched output and a second output, including at least one semiconductor switch connected with a supply voltage, an inductor connected with the semiconductor switch and with the switched output, a connecting node between the semiconductor switch and the inductor, and a free-running element connected between the connecting node and the second output. The elements of the circuit provide for testing the circuit during operation without interrupting a voltage supplied to a load connected with the switched output.
In the circuit according to the invention, switching off the semiconductor switch does not lead to an immediate switching off of the load. Instead, the current flow through the dropping magnetic field of the inductor is maintained and continues to flow briefly via the inductor, the load and the free-running element. This can be used for verification of the correct switching off of the semiconductor switch. During a brief blanking pulse of the semiconductor switch during a test, the combination of an inductor and free-running element leads to continued maintenance of a current flow through the connected load. The verification can be completed without the blanking manifesting itself on the load.
The circuit preferably includes a control and test circuit which controls the semiconductor switch and determines whether there is a brief blanking pulse in the control of the semiconductor switch. Here, the test connection can be connected to the connecting node between the semiconductor circuit and the inductor. Alternatively, it is also possible to connect the test connection to the switched output. In this case, the control and test circuit are configured so as to determine a current flowing at the switched output from a voltage change determined at the switched output during a blanking pulse. A current measurement thus becomes possible without an additional current measuring device, for instance without shunt. The determined current value can also be monitored and it provides information regarding any problems present during the connection of the load, such as a line break.
In a preferred embodiment of the circuit, for the purpose of increasing the switching security, two or more semiconductors are connected in series.
In another embodiment of the circuit, a capacitor is arranged between the switched output and the other output parallel to the load. The capacitor supports the maintenance of the current flow at the output during a brief blanking and minimizes voltage changes at the output.
In a further embodiment of the circuit, the free-running element includes a diode or is a diode. Due to the potentials formed, the diode becomes conductive and securely closes the current circuit extending via the inductor and load during a blanking. Alternatively or additionally, a transistor is connected in parallel and used as the free-running element to be controlled synchronously with the blanking pulses. In the case of a low passage resistance of the transistor, energy losses that occur in the case of a diode as a free-running element and which can lead to heating the diode can be prevented.
In another embodiment of the circuit, the other output is also switched and connected via at least one additional semiconductor switch to another supply voltage connection so that separation can be carried out at all the poles.
According to another embodiment of the circuit, a reverse polarity protection switch is connected upstream of the semiconductor switch and/or one or more additional semiconductor switches.
An output module for automated control includes at least one digital switched output of a circuit for controlling the digital switched output.
A test method is also provided for a circuit that includes a digital switched output for connecting a load via an inductor and at least one semiconductor switch arranged between a supply voltage connection and a switched output. The test method includes the following steps: controlling the at least one semiconductor switch for operation of a load connected to a switched output, interrupting the controlling step, operating the load with energy stored in the inductor, determining whether the interrupting step prevents the supply of voltage to the load, and further controlling the at least one semiconductor switch for further operation of the load connected to the switched output. Because the inductor continues to supply the load during the determining step, the test method can be implemented without interrupting the load.
The steps of interruption of the control of the at least one semiconductor switch and of determining whether the at least one semiconductor switch prevents the supply of voltage to the load can be carried out repeatedly. The repetition can occur, for example, in a periodically recurring manner. In this manner, the correct functionality of the semiconductor switch, in particular the capacity thereof to separate the load from the supply voltage, is continuously ensured.
Other objects and advantages of the disclosure will become apparent from a study of the following specification when viewed in the light of the accompanying drawing, in which:
Referring first to
The circuit is part of an output module which is used within an industrial automated installation. The circuit has a digital switched output 2 or is connected to the switched output, to which an output voltage Vs, which can be switched on or off, is applied by the circuit. The output voltage Vs again relates to the ground potential GND which is also provided at another output 2′ of the circuit. The circuit is used for the secure controlled switching on or off of a load connected between the switched output 2 and the other output 2′.
In this embodiment, two series-connected semiconductor switches 3, 4 are connected between the supply voltage connection 1 and the switched output 2. Metal oxide semiconductor field effect transistors (MOSFETs) are used as semiconductor switches. The semiconductor switches 3, 4 have an internal bypass diode. It is understood that instead of the MOSFETs, bipolar transistors or insulated gate bipolar transistors (IGBTs), for example, can also be used.
Two series-connected semiconductor switches 3, 4 are provided in order to increase the switching security, in particular the switch-off security.
The semiconductor switches 3, 4 are controlled via the control connection thereof (here the gate connection) by a control and test circuit 5. The control and test circuit 5 receives an input signal via an input (not shown) and switches the semiconductor switches 3, 4 on or off in accordance with the input signal.
Between the semiconductor switches 3, 4 and the switched output 2, an inductor 6 is connected and a diode 7 is connected as a switching device between the reference potential and the connecting nodes between the series connection of the semiconductor switches 3, 4 and the inductor. A capacitor 8 is connected between the outputs 2, 2′.
The circuit shown in
The blanking of one of the semiconductor switches 3, 4 leads to an interruption of the current flow between the series connection of the semiconductor switches 3, 4 and of the inductor 6. According to Lenz's law, the current flow is maintained by the dropping magnetic field of the inductor 6, as a result of which the diode 7 becomes conductive. During the brief blanking pulse, the combination of the inductor 6 and diode 7 maintains the flow of the connected load. The resulting circuit current extends via the diode 7, the inductor 6 and the load connected to the switched output 2 or to the other output 2′.
The capacitor 8, which is optionally arranged parallel to the load, supports this behavior and maintains the supply voltage V+ with respect to the ground potential GND. The inductance value of the inductor 6, preferably formed by a coil with a ferrite core, is dimensioned so that for the duration of the blanking pulse, the voltage at the switched output 2 is maintained to the extent possible with only a small voltage drop. Preferably, the blanking times are in the range from several i.e 10 microseconds (μs) to less than 1 μs is in order to deliver even stronger currents in the range from several amps (A) through the inductor 6 for a sufficiently long time without the inductor 6 requiring an excessively high inductance value. A maximum voltage drop of approximately 5%-7% can be tolerated during the blanking time for usually connected loads. For example, a supply voltage V+ of 24 volt (V), a 1.5 V drop, can generally be tolerated. By adapting the size of the inductance value of the inductor 6, an even smaller voltage drop can be carried out, if necessary.
While the output voltage Vs is substantially maintained in this manner at the switched output 2 during the blanking pulse, when the semiconductor switches 3, 4 are working correctly, the output voltage decreases at the test connection 9 to a voltage which corresponds to the breakdown voltage of the diode 7. This lowering of the supply voltage V+ to the forward voltage of the diode which is negative with respect to the ground potential at the test connection 9 and typically less than one volt, is detected by the control and test circuit 5 and evaluated as a sign of a correctly switched-off semiconductor switch 3, 4. If the voltage at the test connection 9 does not decrease, this is a sign of a defective semiconductor switch 3 and/or 4, or a sign that no load is connected to the output. The latter can also be interpreted as a potential error since it can be caused by a cable break or other issue.
In an alternative design of the circuit, the switched output 2 is used as a test connection. In this design, no lowering to the low voltage value of the breakdown voltage of the diode 7 is detected by the control and test circuit 5, but only a slight lowering is detected because the inductor 6 and the capacitor 8 exhibit an exponential discharge behavior. Even if the inductor 6 and diode 7, and optionally the capacitor 8, are suitable for maintaining the output voltage Vs at the switched output such that an included load can be passed on without a problem, a detectable lowering of the voltage Vs at the switched output 2 occurs nevertheless.
When measuring the voltage at the capacitor 8, the value of the current flowing at the output or whether any current flows at all at the output can be noted. The determined current value or current flow can also be monitored to, among other things, provide information regarding any problems during the connection of the load, such as a line break.
In the basic design, the circuit represented in
In contrast to the embodiment example of
The transistor 10 thus also represents a free-running element having the same function as the diode 7. For this purpose, it is controlled by the control and test circuit 5 synchronously with the blanking pulses. The passage resistance of the transistor 10 is so low that in the conductive state, there is only a slight, negligible voltage drop across the transistor 10. Accordingly, energy losses that occur in the circuit of
Another difference from the embodiment of
There are supply voltage connections 1, 1′ for a positive voltage supply V+ and a ground potential GND, respectively. Each of these supply voltage connections 1, 1′ is connected via a respective semiconductor switch 3 or 4′ to the output of the circuit. Accordingly, the two poles of the output are connected and marked in
A control and test circuit 5 controls the two semiconductor switches 3, 4′. The voltage applied between two test connections 9, 9′ is determined during a blanking pulse.
A polarity protection 11 is connected downstream of the positive supply voltage connection 1.
The circuit including inductor 6, diode 7 and capacitor 8, which enables the supply of the load connected to the switched output 2, 2′ in the blanking pulses of the control and test circuit 5, is designed similarly to those of
A transistor 10 is connected parallel to the diode 7 and controlled during the blanking pulse by the control and test circuit 5 and used in addition to the diode 7 as a free-running element.
During switching off of the switched output 2, 2′, a separation from the supply voltage V+ or GND is carried out at all of the poles. The advantage of the separation at all the poles is that an external short circuit of a line which leads away from the switched output 2 and which permanently applies the supply voltage V+ to the load does not represent a security loss since the line leading away from the other switched output 2′ is also switched off.
| Number | Date | Country | Kind |
|---|---|---|---|
| 20 2015 103 339.7 | Jun 2015 | DE | national |
This application is a § 371 National Stage Entry of PCT/EP2016/064724 filed Jun. 24, 2016 entitled “Circuit Arrangement for a Secure Digital Switched Output, Test Method for—and Output Module Comprising a Digital Circuit Arrangement of this Type.” PCT/EP2016/064724 claims priority of DE 202015103339.7 filed Jun. 25, 2015. The entire contents of these applications are incorporated herein by reference in their entireties.
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/EP2016/064724 | 6/24/2016 | WO | 00 |
