This application claims benefit of priority from Japanese application number JP 2011-115237 filed May 23, 2011, the entire contents of which are incorporated by reference herein.
Embodiments of the present invention described herein relate generally to a control system for providing a diagnostic pulse signal and a control device therefor.
As part of international standardization in recent years, the functional safety standard IEC61508 “Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems” has been established by the International Electrical Standardization Conference in respect of device manufacturers and suppliers. In addition, IEC61508 has been issued as a processing applications standard in respect of systems designers/integrators/users.
By means of such standards, safety in the life-cycle from system design and maintenance to final disposal can be evaluated and the safety integrity level (SIL), which is the required level for risk reduction, can be set as a quantitative evaluation standard.
The background to the foregoing is that, in order to raise the safety level of safety shutdown systems as a whole in for example industrial plants, it is demanded to perform not only fault diagnosis of the interior of the various devices such as the sensors, control devices (referred to in the Standard IEC61508 established by the International Electrical Standardization Conference, as “Logic Solvers”: referred to hereinafter as LS) and final elements (referred to in the Standard IEC61508 established by the international Electrical Standardization Conference, as “Final Elements”: referred to hereinafter as “operating terminals”) but also fault diagnosis including the signal lines connecting the control devices with the various devices.
Typically, sensors and operating terminals are not provided with an advanced diagnostic function, so a fault diagnostic function for signal lines between these control devices and sensors or operating terminals needs to be provided in the control device.
Incidentally, a technique is known in which a control device detects, as a diagnostic function of operating terminal devices, whether or not the signal from the operating terminal is received in the control device and whether or not the operating terminal delivers an output signal normally. An example is to be found in Japanese Patent Number 4131134 (hereinafter referred to as Patent Reference 1).
Also, as a function for diagnosis of the connection between the control device and the operating terminal, the technique is known of feeding back the signal line from the control device that is connected with the operating terminal once more to the control device, so as to detect whether or not the output signal from the control device has been correctly fed to the operating terminal. An example is to be found in Japanese Patent Number 3695234 (hereinafter referred to as Patent Reference 2).
In the systems of for example petrochemical plants, in some cases, the distance from the control device to the operating terminal may be a few hundred meters. In the case of such a long-distance transmission path, in Patent Reference 1 and Patent Reference 2 described above, there is the problem that the waveform of the diagnostic pulse signal is distorted by the delay components of the transmission path, with the result that it becomes impossible to detect normally the diagnostic pulse signal that is returned to the control device.
Also, although, in the aforementioned Patent Reference 1, inspection of the input path of the control device can be achieved, there is the problem that short-circuiting or disconnection of the signal line between the control device and the operating terminal cannot be detected.
Also, in the aforementioned Patent Reference 2, although short-circuiting of the signal line between the devices can be detected, there is the problem that, if the impedance of the signal line between the operating terminal and the device is smaller than the resistance value for current detection, short-circuiting of the signal line cannot be detected.
According to an aspect of the present technology, in a control device for diagnosing the connection between the signal line and an operating terminal by transmitting diagnostic pulse signal from the control device to the operating terminal, and a control system therefor: an object is to provide a control system and control device therefor whereby a diagnostic pulse signal can be accurately detected and whereby a diagnostic pulse signal is supplied that is capable of detecting short-circuiting or disconnection of the transmission path without affecting the impedance of a signal line that effects transmission over a long distance.
In order to achieve the above object, a control system according to the present embodiment for supplying diagnostic pulse signals comprises the following construction. Specifically:
A control system wherein a diagnostic pulse signal is transmitted through a signal line from a control device to an operating terminal and that diagnoses abnormality of the connection condition from aforementioned control device to aforementioned operating terminal and the function of this operating terminal, wherein aforementioned control system comprises aforementioned control device and aforementioned operating terminal, is characterized in that
aforementioned control device comprises a diagnostic pulse signal generating section provided with: an internal circuit that generates aforementioned control data that controls aforementioned operating terminal with a preset control period and generates diagnostic pulse data for diagnosing aforementioned operating terminal with a preset diagnostic period and diagnoses the connection condition from aforementioned control device to aforementioned operating terminal, based on the waveform of a feedback signal of the diagnostic pulse signal that is fed back from the input end of aforementioned operating terminal, and the function of aforementioned operating terminal; a variable amplification circuit provided with: a non-inverting amplification circuit that generates a control signal based on aforementioned control data; a DA converter that generates a diagnostic pulse signal based on aforementioned diagnostic pulse data; and an adder that multiplexes aforementioned diagnostic pulse signal on aforementioned control signal and delivers this to aforementioned operating terminal at a preset signal level; and
a receiving circuit that receives aforementioned feedback signal and delivers this to aforementioned internal circuit; aforementioned internal circuit further comprises a correction pulse data generating section that generates correction pulse data that corrects the rise time of aforementioned diagnostic pulse signal that is transmitted, and thereby corrects the diagnostic pulse data; and in that the rise time of aforementioned diagnostic pulse signal is corrected with reception of aforementioned diagnostic pulse signal being made possible by aforementioned operating terminal without expanding the pulse width of aforementioned diagnostic pulse signal, even when the length of aforementioned signal line is long.
In order to achieve the above object, a control device for a control system that supplies diagnostic pulse signals according to the present embodiment further comprises the following construction. Specifically,
a control system wherein a diagnostic pulse signal is transmitted through a signal line from a control device to an operating terminal and that diagnoses abnormality of the connection condition from aforementioned control device to aforementioned operating terminal and the function of aforementioned operating terminal is characterized in that aforementioned control device comprises a diagnostic pulse signal generating section provided with: an internal circuit that generates aforementioned control data that controls aforementioned operating terminal with a preset control period and generates diagnostic pulse data for diagnosing aforementioned operating terminal with a preset diagnostic period and diagnoses the connection condition from aforementioned control device to aforementioned operating terminal, based on the waveform of a feedback signal of the diagnostic pulse signal that is fed back from the input end of aforementioned operating terminal, and the function of aforementioned operating terminal; a variable amplification circuit provided with: a non-inverting amplification circuit that generates a control signal based on aforementioned control data; a DA converter that generates a diagnostic pulse signal based on aforementioned diagnostic pulse data; and an adder that multiplexes aforementioned diagnostic pulse signal on aforementioned control signal and delivers this to aforementioned operating terminal at a preset signal level; and a receiving circuit that receives aforementioned feedback signal and delivers this to aforementioned internal circuit; aforementioned internal circuit further comprises a correction pulse data generating section that generates correction pulse data that corrects the rise time of aforementioned diagnostic pulse signal that is transmitted, and thereby corrects the diagnostic pulse data; and wherein the rise time of aforementioned diagnostic pulse signal is corrected with reception of aforementioned diagnostic pulse signal being made possible by aforementioned operating terminal without expanding the pulse width of aforementioned diagnostic pulse signal, even when the length of aforementioned signal line is long.
Embodiments of the present invention are described below with reference to the drawings.
Embodiment 1 is described below with reference to
The control system of the present embodiment comprises: a control device 1 that controls an operating terminal 2; an operating terminal 2 that is controlled by a control signal from the control device 1; and a signal line 3 that supplies a diagnostic pulse signal multiplexed with the control signal from the control device 1 to the operating terminal 2.
The control device 1 comprises a diagnostic pulse signal generating section 10 for diagnosing the function of the operating terminal 2: this diagnostic pulse signal generating section 10 comprises an internal circuit 13 that generates control data of the control signal that is used to control the operating terminal 2 and diagnostic pulse data that generates an output signal matching the received signal level of the operating terminal 2 by multiplexing the diagnostic pulse data with the control data generated by the internal circuit 13; a variable amplifier circuit 12; and a receiving circuit 16 that receives a feedback signal whereby the output signal that is sent from this variable amplifier circuit 12 is fed back from the input terminal of the operating terminal 2.
The operating terminal 2 is a device such as for example a valve and comprises an input circuit 21 that receives the control signal from the control device 1 through the signal line 3, and an internal circuit 23 that controls the operating terminal 2 itself and is responsive to the signal received by the input circuit 21.
In general, in regard to the diagnostic pulse signal, when diagnosing the function of the signal line 3 to its input circuit 21, this is processed by the feedback signal from the input terminal of the input circuit 21: when diagnosing the function of the internal circuit 23, as shown by the broken line, a diagnostic response data transmission circuit 24 is provided in the operating terminal 2 and a diagnostic response data receiving circuit 134 is provided in the control device 1 and the control device 1 diagnoses whether the diagnostic response data that is sent from the internal circuit 23 is satisfactory or not.
Also, the diagnostic pulse signal is output multiplexed with the bits used to output the control signal on the signal line 3. The mode of this diagnostic pulse signal output may be either parallel output or serial output. Various forms may also be adopted for the circuit used for output of the diagnostic pulse signal, depending on the transmission distance to the operating terminal 2 and the type of insulation. The mode of output of a single bit in this embodiment is as shown in the drawings.
Next, the various sections are described in detail. The internal circuit 13 comprises: a control data generating section 131 that generates control data for controlling the operating terminal 2 with a preset control period Tc; a diagnostic pulse data generating section 132 that generates diagnostic pulse data, for diagnosing the operating terminal 2, with a diagnostic period Td that is different from the preset control period, being longer than the control period; and a correction pulse data generating section 133 that corrects the diagnostic pulse signal from the waveform of the feedback signal that is fed back from the input, terminal of the operating terminal 2 and generates correction pulse data for correcting the rise time of the diagnostic pulse signal.
Also, the internal circuit 13 comprises a computational processor, not shown, and is provided with a diagnostic function for diagnosing abnormality of the connection condition of the control device 1 and the operating terminal 2 and/or the satisfactoriness of the operating condition of the operating terminal 2, from the diagnostic pulse signal that is fed back (i.e. the feedback signal).
Furthermore, in more detail, the correction pulse data generating section 133 generates correction pulse data that corrects the rise time and fall time of the transmitted diagnostic pulse signal; the internal circuit 13 uses this correction pulse data to correct the diagnostic pulse data and corrects the rise time of the diagnostic pulse signal, so as to make it possible for the operating section terminal 2 to receive the diagnostic pulse signal without expansion of the pulse width of the diagnostic pulse signal, even if the signal line 3 comprises a long-distance transmission path.
Also, as shown in
Also, the receiving circuit 16 employs a photocoupler 161 to provide isolation from the interior of the control device 1; the primary-side anode of the photodiode is connected with a signal line 32 providing a feedback route for the feedback signal from the operating terminal 2, while the cathode of the photodiode is connected with external ground potential GND through a current-limiting resistance 162, and detects the voltage level of the feedback signal.
Also, the input circuit 21 of the operating terminal 2 comprises a photocoupler for providing isolation from the interior of the operating terminal 2, and a preset current-limiting resistance 212; the anode of the photocoupler 211 is connected with a signal line 31 on one side, while the other side thereof is connected with another signal line 32, through a load resistance 212.
In this embodiment, the interface was illustrated for the case where the control device 1 and operating terminal 2 are isolated by a photocoupler; however, various other modes of interfacing could be adopted, using for example insertion of a current limiting resistance 212 in parallel with the input circuit 211 between the signal line 31 and 32, series connection of the signal line 31 with the anode of the photocoupler 211, or the transmission distance between the signal line and input circuit of the operating terminal 2.
Next, the operation of a diagnostic pulse generation section 10 constructed in this way will be described with reference to
In the internal circuit 3, as shown in
The non-inverting amplification circuit 121 generates a control signal corresponding to the control data output from the control data generating section 131: in order to confer freedom regarding the output, this circuit may also be constituted by a DA converter.
The adder 123 combines these signals: for example, it finds the logical product of the control signal s1 and the diagnostic pulse signal s2 and outputs this logical product, as a signal matching the reception potential level of the operating terminal 2, using as references the ground signal GND that is earthed through the receiving circuit 16 and the external potential VDC supplied to the variable amplification circuit 12.
Ideally, the single pulse of the diagnostic pulse signal s3 that is generated by the variable amplification circuit 12 has a waveform as shown in
Now according to the ISA (American Measurement Instrument Industrial Association) Standard, which issues a safety standard for safety instrumentation systems of chemical process industries, the output signal of a safety shutdown system should be Hi level (in the case of the valve of the operating terminal 2, this means that the risk side operating signal should be “valve open”) during ordinary control and should become Lo level (in the case of the valve of the operating terminal 2, this means that the safe side operating signal should be “valve closed”) in the case of shutdown. This represents the “fail safe” concept.
The test of the operating terminal 2 is conducted in a condition with the control device 1 performing ordinary control: the output signal is therefore ordinarily Hi level.
A diagnostic pulse signal is therefore periodically output, in order to confirm that the control device 1 is capable of outputting Lo level when needed. The diagnostic pulse signal for confirming the Lo level output function is a Lo level pulse signal as shown in
Also, in order to avoid spurious detection by the receiving circuit 16, the La level of the diagnostic pulse signal is less than the Lo level detectable maximum potential VL of the receiving circuit 16. Also, in order to avoid spurious detection by the receiving circuit 16, the Hi level of the diagnostic pulse signal is also at least the Hi level detectable minimum potential VH of the receiving circuit 16.
Also, in order to avoid spurious operation of the operating terminal 2, the pulse width T0 of the diagnostic pulse signal is set to be shorter than the maximum insensitive time width TFE of the operating terminal 2.
Thus, the variable amplification circuit 12 of the control device 1 multiplexes the diagnostic pulse signal that is output from the internal circuit 13 with the control signal and outputs the result as a signal of pulse waveform as described above.
However, in the application of an actual safety shutdown system, in some cases, the distance from the control device 1 to the operating terminal 2 may be a few hundred meters. In such cases, as shown in
As shown in
In this case, the control device 1 may be incapable of detecting the pulse that is output on the control line 31 at the receiving circuit 16.
One method of dealing with this problem is to expand the time width of the output pulse width T0. However, if the pulse width is too long, the output pulse width T0 may exceed the maximum insensitive time width TFE of the operating terminal 2, with the result that the diagnostic pulse signal may cause spurious operation (such as for example valve closure) of the operating terminal 2.
In order to solve this problem, as shown in
Specifically, the potential difference at the rising edge of the pulse waveform that is output from the variable amplification circuit 12 of the control device 1 is expanded for a fixed time is as shown in
In this way, the pulse signal received by the control device 1 can be made detectable by excluding the possibility of the effective pulse width TR undershooting the maximum length detection time width TFE of the control device 1, yet without expanding the pulse width.
The reason for this that, by performing correction to expand the potential difference of the pulse waveform of voltage change, the time taken for this corrected pulse signal to reach a potential at which reception can take place is shortened.
Next, the principles of generation of the pulse waveform of this diagnostic pulse signal will be explained. In order to make the pulse signal that is received by the receiving circuit 16 of the control device 1 capable of detection, the internal circuit 133 generates corrected pulse data such as to satisfy the following expressions (1) and (2) in respect of the expanded potential difference Vo and the expanded time width t of the pulse wave form shown in
Specifically, the expanded potential difference VO(V) and the expanded time width t(s) of the diagnostic pulse signal are given by values in the range defined by the following expressions:
V
F≦(VO+VDC)(1−e−t/CR) (1)
T
O
−T
F
≧t (2)
where
VDC is the pulse potential difference (V);
VF is the minimum potential difference (V) that is capable of detection (by the control device);
e is the base of natural logarithms (2.71828 . . . );
C is the capacitative component (F) of the signal line and R is the resistive component (Ω) of the signal line;
T0 the output pulse width (s) (at the output terminal PO of the control device);
TF is the minimum detection time width (s) (at the input terminal PI of the control device).
Hereinafter, the derivation of expressions (1) and (2) will be described. In general, taking the equivalent circuit of the signal line 3 as being a first-order delay (PC) circuit, as shown in
Vout≦Vin·(1−e−t/CR) (3)
where Vout must exceed the minimum potential difference VF that is capable of being detected. (4)
Also,
Vin=Vo(expanded potential difference)+VDC(pulse potential difference) (5)
Consequently, expression (1) can be found from expression (3), condition (4) and expression (5).
Also, in order to prevent spurious operation (such as for example valve closure) of the operating terminal 2 by the diagnostic pulse signal, it is necessary that the effective pulse width TR at the input terminal PI of the control device 1 should be shorter than the maximum-length detection time width TFE.
Also, the value of the expanded time width t is defined by expression (2).
It should be noted that, in
Thus, with the above embodiment, the rise time of the pulse waveform can be corrected without expanding the pulse time width of the diagnostic pulse signal, so, even in the case of a long-distance transmission path having a delay circuit characteristic such that the pulse waveform of the diagnostic pulse signal is distorted, the presence of abnormality in the control signal can be accurately diagnosed from the feedback signal.
Embodiment 2 will now be described with reference to
The aspect in which the control system of Embodiment 2 differs from Embodiment 1 is that, whereas, in Embodiment 1, no function for automatically generating correction pulse data was provided; in the case of Embodiment 2, a correction table 133a is provided in the correction pulse data generating section 133: the rise time of the pulse waveform and this pulse width are detected from the feedback signal and the correction pulse data corresponding to the characteristics of this rising waveform are found beforehand; thus, even if the transmission path length (transmission path characteristic or impedance×distance) to the operating terminal 2 changes, correction pulse data (expanded potential difference×expanded time) can be automatically generated by referring to the correction table 133a.
Thus, with this construction according to Embodiment 2, diagnostic pulse data can be generated that is automatically corrected even if the characteristics of the input circuit or transmission path of the operating terminal 2 change.
Also, as shown in
Embodiment 3 will now be described with reference to
The aspect in which the control system of Embodiment 3 differs from Embodiment 1 is that, whereas, in Embodiment 1, no function for determining the satisfactoriness of the transmission path of the diagnostic pulse signal was provided, in the case of Embodiment 3, it is arranged to detect short-circuiting of the signal line 3 using the diagnostic pulse signal.
With the control device 1 of Embodiment 3, in addition to the construction of Embodiment 1, there are provided a negative power source circuit 15 shown in
In
The receiving circuit 16b is a circuit that makes possible passage of current even if the voltage of the signal line 32 and the ground potential GND is the negative voltage −VDCX.
The variable amplification circuit 12 of Embodiment 3 generates a pulse waveform as shown in FIG. 8B1 from the negative voltage −VDCX that is supplied from the power source VDC and the negative power source circuit 15.
The control device 1 of Embodiment 3 constructed in this way can detect short-circuit faults of the signal line 31 and signal line 32. The operation of such short-circuit detection will now be described.
When a short-circuit fault is generated across the transmission lines 3, the diagnostic pulse signal that is generated by the variable amplification circuit 12 passes through the input circuit 21, constituting a pulse signal that flows along the path, in this order: variable amplification circuit 12→signal line 31→signal line 32→receiving circuit 16b. At: this point, when the output waveform constituted by the negative voltage from the output terminal s3 of the variable amplifier 12 is applied as in FIG. 8B1, a pulse current flows in the opposite direction and the output s5 on the secondary side of the receiving circuit 16b produces the half-wave rectified output respectively shown in FIG. 8B2 and FIG. 8B3.
On the other hand, if no short-circuit fault occurs i.e. operation is normal, on a negative voltage pulse, inverse voltage is applied in the reverse direction to the receiving circuit 21 of the operating terminal 2: consequently, due to the rectifying function of the photodiode of the photocoupler 211, no signal current can flow in the signal line 31 or signal line
The output terminal s3 of the variable amplifier 12 and the output s5 of the secondary side of the receiving circuit then respectively become high-impedance and are fixed at the potential of the respective terminals.
Consequently, if, for a negative voltage pulse, the diagnostic pulse signal, which ought not to be detectable in normal operation, in fact detected by the receiving circuit 16, in other words, if there is a signal line short-circuit or a fault of some kind, passage of this pulse by the receiving circuit 21 of the operating terminal 2 can be identified by the control device 1.
As described above, with this embodiment, it becomes possible for the control device to detect short-circuit faults of the signal line connecting the control device and the operating terminal, irrespective of the impedance of the signal line path: the fault detect Lou function of the safety shutdown system can thus be improved.
Embodiment 4 will now be described with reference to
The aspect in which the control system of Embodiment 4 differs from Embodiment 1 is that, whereas, in Embodiment 1, no function for determining the satisfactoriness of the transmission path of the diagnostic pulse signal was provided, in the case of Embodiment 4, it is arranged to detect short-circuiting of the signal line 3 using the diagnostic pulse signal.
In the case of the control device 1 of Embodiment 4, there is provided a signal line changeover switch 14 that connects the diagnostic pulse signal that is applied to the operating terminal 2 from the variable amplification circuit 12 of Embodiment 1 with the signal line 31 or signal line 32 and that connects the receiving circuit 16 with the signal line 32 or signal line 31.
In regard to this changeover, although not shown, a construction could be adopted so as to output a changeover instruction s6 in respect of the signal changeover switch 14 from a diagnostic pulse data generating section 132 of the internal circuit 13.
The signal line changeover switch 14 is a switch that changes over the direction of application of the diagnostic pulse signal in respect of the input circuit 21 by changing over the connection to the signal line 3 that is connected between the output terminal of the variable amplification circuit 12 and the input terminal of the receiving circuit 16, at the output terminal in question and the input terminal in question.
In more detail, the direction of application of the output of the variable amplifier 12 to the operating terminal 2 is changed over by connecting the output s3 of the variable amplification circuit 12 to a first path (signal line 31 from the signal line changeover switch a1-b, signal line changeover switch c-a2 from the signal line 32, indicated by the solid line) or by connecting it to a second path (signal line 32 from the signal line changeover switch a1-c, signal line changeover switch d-a2 from the signal line 31, indicated by the broken line).
The control device 1 of Embodiment 4 constructed as above can detect short-circuit faults of the signal line 31 and signal line 32. This detection operation is described below.
If the signal line changeover switch 14 is connected with the first path and a short-circuit fault occurs on the signal line 31 and signal line 32, even if a diagnostic pulse signal is applied by the control device 1, the short-circuit fault cannot be detected.
The reason for this is that, in the case of the first path, if a short-circuit fault occurs, the change with respect to the normal situation is only of an extent such as to pass the receiving circuit 21: thus no marked change occurs in the diagnostic pulse signal.
In contrast, in the case where the signal line changeover switch 14 is connected with the second path, the control device 1 can detect a short-circuit fault.
In the event of a short-circuit fault, the diagnostic pulse signal passes through the input circuit 21 and flows by the path: variable amplification circuit 12→signal line 32→signal line 31→receiving circuit 16. In these circumstances, if there is no short-circuit fault, while the signal line changeover switch 14 is on the second path, inverse voltage is applied to the input circuit 21 of the operating terminal 2, so no signal current can flow to the signal line 31 or signal line 32, due to the rectifying function of the photodiode.
Consequently, if the signal line changeover switch 14 is connected with the second path, if the diagnostic pulse signal, which ought not to be detected during normal operation, is in fact detected by the receiving circuit 16 i.e. if the input circuit 21 of the operating terminal 2 is bypassed due to short-circuiting of the signal line or a fault of some kind, this fact can be identified by the control device 1.
As described above, with this embodiment, it becomes possible for the control device to detect a short-circuiting fault of the signal line that links the control device and the operating terminal, irrespective of the impedance of the signal path: the fault detection function of the safety shutdown system can thus be improved.
Embodiment 5 will now be described with reference to
The aspect in which the control system of Embodiment 5 differs from Embodiment 1 is that, whereas, in Embodiment 1, no function for determining the satisfactoriness of the transmission path of the diagnostic pulse signal was provided, in the case of Embodiment 5, it is arranged to detect short-circuiting or disconnection of the signal line 3 using the diagnostic pulse signal.
In the control device 1 of Embodiment 5, in addition to the construction of Embodiment 1, an impedance matching circuit (variable matching resistance) 171 is provided inserted in parallel between an output feedback circuit 172 that directly receives the output from the variable application circuit 12 to the signal line 31 in the interior of the control device 1 and the variable amplification circuit 12 and signal line 31.
The output feedback circuit 172 detects the potential level of the input signal and is provided with a function of reporting this detection result to the internal circuit 13; this output feedback circuit 172 provides high input impedance in respect of the input signal of the variable amplification circuit 12 via the impedance matching circuit 171.
The impedance matching circuit 171 is a series resistance of variable resistance value: this impedance matching circuit 171 is provided with a function of matching the characteristic impedance regarding the signal line 31, input circuit 21 and signal line 32 as a single cable, and the impedance of the impedance matching circuit 171 itself.
The control device 1 of Embodiment 5 constructed in this way is capable of detecting short-circuit faults of the signal line 31 and signal line 32 and disconnection faults of the signal line 31. The detection action will be described below.
The electrical signal that is transmitted along the signal line 3 has the properties of a wave and reflection can occur at the terminal of the transmission, line or location of cable connection. However, even if cables of different kinds are connected, no reflection takes place if their characteristic impedances are equal (this is called impedance matching). However, if the characteristic impedances of the different types of cable are different, part of the signal is transmitted at the reflection point, while the remainder is reflected.
However, at the point of connection of the signal line 31 and the one end of the outlet signal line of the impedance matching circuit 171, once the impedances have been matched, matching is performed so that the characteristic impedances of both lines coincide: reflection therefore does not occur.
However, in the event of a short-circuit fault of the signal line 31 and signal line 32, when there is a change in the characteristic impedance, regarding the signal line 31, input circuit 21 and signal line 32 as a single cable, the characteristic impedance of the two lines becomes different at the connection point of the signal line 31 and the one end of the outlet signal line of the impedance-matched impedance matching circuit 171 prior to short-circuiting: thus reflection of the signal takes place.
Because of superimposition of this reflected wave and the output pulse wave of the diagnostic pulse signal, the pulse waveform of the diagnostic pulse signal at the connection point is distorted. The waveform of a diagnostic pulse signal that is different from that obtained under normal conditions is detected by the output feedback circuit 172.
Also, in the case of a disconnection fault of the signal line 31 or signal line 32, total reflection of the signal waveform takes place at the disconnected portion, so, due to superimposition of the totally reflected wave and the output pulse wave as in the case of a short-circuiting fault, the pulse waveform of the diagnostic pulse signal at the connection point is considerably distorted.
This distorted pulse waveform is input to the output feedback circuit 172, sc that a diagnostic pulse signal waveform different from that obtained under normal conditions is detected by the output feedback circuit 172. In this way, the control device 1 can detect occurrence of any abnormality, including a disconnection fault, on the signal line 31 and signal lines beyond this.
As described above, with this embodiment, it becomes possible for the control device to detect short-circuit faults or disconnection faults of the signal line connecting the control device and the operating terminal: the fault detection function of the safety shutdown system can thus be improved.
While various embodiments of the present invention have been described above, these embodiments are presented merely by way of example and are not intended to restrict the scope of the invention. Novel embodiments could be implemented in various other ways and various deletions, substitutions or alterations could be made within a range not departing from the gist of the invention. Such embodiments or modifications are included in the scope or gist of the present invention and are included in the scope of equivalents of the present invention as set out in the patent claims.
Number | Date | Country | Kind |
---|---|---|---|
2011-115237 | May 2011 | JP | national |