Robot having a controller protected for a network failure

Abstract

A robot having actuator-driven elements, actuators to drive the elements, and brakes to decelerate the elements, the robot requiring voltage UB and/or current IB, the robot including: a source having an input to which voltage UP and current IP are applied, wherein, during normal operation, UP is equal to voltage UP,desired and IP is equal to current IP,desired, and having an output to which voltage Uactual and current Iactual are supplied, wherein during normal operation: Uactual=UB and Iactual=IB, an energy store integrated into the source for maintaining UB and IB for time Δt following failure or drop in UP and/or IP, a unit for monitoring UP, wherein as soon as UP deviates by amount ΔU from UP,desired, a signal is generated, and a control unit connected to the unit for controlling the robot and its elements into a predefined safe state upon receipt of the signal.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is the U.S. National Phase of International Patent Application No. PCT/EP2017/059693, filed on 25 Apr. 2017, which claims benefit of German Patent Application No. 102016005366.6, filed on 25 Apr. 2016, the contents of which are incorporated herein by reference in their entirety.

BACKGROUND

Field

The invention relates to a robot having a controller which is protected against a power network failure (failure of the electrical energy required to operate the robot). For this purpose, the robot has advantageously movable, actuator-driven elements.

Related Art

Robots typically require electric power to operate. This power is supplied, particularly in the case of immobile robots, via an electric power supply unit of the robot, which is connected on the input side to an electric power source, typically to an electric power network. The electric power network or the electric power source may suffer failure for a number of reasons. When such a failure occurs, for functional safety reasons it must be ensured that the robot, i.e., its movable elements in particular, will enter a safe state. Such a state is meant to ensure that the 25 robot will not become damaged, will not cause any damage in the area surrounding it, and will be operable immediately once the electric power supply is restored, if at all possible without any problems and without requiring intervention.

SUMMARY

The object of the invention is therefore to provide a robot that will enter a safe state, in particular with its moving elements, when a failure of the power supply occurs, and which will simply be ready to operate again once the network power supply is restored.

The invention will be clear from the features of the independent claims. Advantageous refinements and embodiments are the subject matter of the dependent claims. Other features, applications and advantages of the invention will be apparent from the following description, and from the elucidation of exemplary embodiments of the invention, which are depicted in the FIGURE.

The object is attained by a robot having actuator-driven elements, actuators to drive the actuator-driven elements, and mechanical brakes to decelerate the actuator-driven elements, the robot requiring a desired operating voltage U_B and/or a desired operating current I_B in order to operate. The robot includes a voltage and current source (i.e., a power supply unit) having an input interface, to which a primary voltage U_P and a primary current I_P are applied, wherein during normal operation the primary voltage U_P is equal (in terms of control and noise tolerances) to a desired primary voltage U_P,desired and the primary current I_P is equal (in terms of control and noise tolerances) to a desired primary current I_P,desired, and also having an output interface, to which an actual voltage U_actual and an actual current I_actual are applied, wherein during normal operation (in terms of control and noise tolerances). U_actual=U_B and I_actual=I_B, an energy store which is integrated into the voltage and current source and which, following a failure or a drop in the primary voltage/primary current, maintains the operating voltage U_B and the operating current I_B for a predefined period of time Δt, a monitoring unit for monitoring the primary voltage U_P applied to the input interface, the monitoring unit being configured such that, as soon as the applied primary voltage U_P deviates from the desired primary voltage U_P,desired by a predefined amount ΔU, a stop signal is generated, and a control unit which is connected to the monitoring unit and which is designed for controlling the robot and the actuator-driven elements thereof, the control unit being configured to control the robot and the elements thereof into a predefined safe state upon receipt of the stop signal, wherein control of the robot into the predefined safe state includes driving the actuators of the actuator-driven elements such that the robot decelerates into a dynamic state characterized by a sum of kinetic energy of at least a plurality of the actuator-driven elements, wherein the sum is less than a predefined boundary kinetic energy, and triggering one or more of the mechanical brakes to further decelerate the actuator-driven elements only when the robot has been decelerated by the actuators into the dynamic state.

The term “actuator-driven elements” is interpreted broadly in the present case. It includes essentially all movable, actuator-driven elements of the robot, for example, members of a robot manipulator, artificial limbs, drive wheels, etcetera.

The voltage and current source is preferably embodied as a power supply unit of the robot, with the robot being operated at a desired operating voltage U_B and/or a desired operating current I_B, which is supplied to the output interface of the voltage and current source. The input interface of the voltage and current source is advantageously connected to an electric power network, typically a low voltage network (for example, a 230V-240V power network or a 400V-420V three-phase alternating current network). The voltage and current source advantageously converts the primary voltage U_P which is applied to the input side to the actual voltage U_actual which is supplied to the output interface. Typically, U_actual<U_P.

During normal robot operation, the actual voltage U_actual supplied to the output interface is equal to the desired operating voltage U_B(U_actual=U_B). In addition, during normal robot operation, the actual current I_actual supplied to the output interface is equal to the desired operating current I_B(I_actual=I_B).

According to the invention, the voltage and current source is further equipped with an energy store, which is integrated into the voltage and current source and which is designed and configured such that, following a failure or a drop in the primary voltage U_P or the primary current I_P at the input interface, the operating voltage U_B and the operating current I_B at the output interface are maintained for a predefined period of time Δt. The energy store is preferably equipped with one or more capacitors and/or one or more inductors and/or one or more accumulators for energy storage. The term “inductors” in the present case includes, for example, inductors, coils, transformers, etcetera. The dimensions of the energy store are advantageously dependent upon the amount of energy required by the robot to bring the robot from any dynamic state (any possible dynamic state of the operator) into a safe state.

The term “safe state” is interpreted broadly in the present case. It includes essentially any state of the robot that can be detected by means of sensors. In particular, the term includes a predefined state of the movable elements of the robot, in particular a deceleration of all the movable elements of the robot into a predefined pose or a deceleration of all the movable elements of the robot into said state without a predefined pose. The “safe state” may further include, for example, electrical states and data-related states of the robot. For instance, the safe state may include a data backup, etcetera.

Advantageously, once the stop signal has been received, the control unit quasi instantaneously initiates the establishment of the safe state, in particular initiating a deceleration process of the actuator-driven movable elements of the robot into a mechanical safe state. The safe state is advantageously predefined appropriately depending upon the task set for the robot, and advantageously meets the condition that, during the establishment of the safe state, in particular by decelerating the movable elements of the robot into the safe mechanical state, the robot does not present a threat to its environment or to itself.

The dimensions of the energy store are advantageously selected such that in the event of a total failure of the primary voltage U_P/primary current I_P applied to the input interface it is ensured that the operating voltage U_B and the operating current I_B at the output interface are maintained for the predefined period of time Δt. The period of time Δt is advantageously a required period of time during which the robot can be brought from any state into a safe state.

Appropriate dimensions of the energy store thus ensure that, even with a total failure of the voltage or current supply to the input side of the voltage and current source, it is always ensured that the robot can be transferred from any state into a safe state. The state referred to as “any” state is any element of the set of all the states that the robot is able to occupy.

One advantageous refinement of the proposed robot is characterized in that actuators of the actuator-driven elements are designed for the recuperation of electric power and can be connected to the integrated energy store. Thus, it is advantageously possible to convert kinetic energy of the movable elements of the robot during the deceleration process into electrical energy and to use this energy to increase the energy stored in the energy store.

One advantageous refinement of the proposed robot is characterized in that the control unit is designed such that the controlling of the robot into the predefined safe state includes a triggering of the mechanical deceleration of the actuator-driven elements. Advantageously, the mechanical brake(s) of the actuator-driven elements is/are triggered only when the robot has been decelerated by actuators into a dynamic state which is preferably characterized by the sum of the kinetic energy of some or all of the movable elements of the robot, which is less than one predefined boundary kinetic energy. It can thereby be ensured that an abrupt intervention by mechanical brakes takes place only when no mechanical or other damage to the robot will be caused by engagement of the mechanical brakes. Prior to this point, the robot. i.e., its actuator-driven movable elements, is preferably decelerated by the actuators. This refinement increases the availability of the robot system, since a firm response by mechanical brakes with the associated risk of mechanical damage is generally avoided.

According to one advantageous refinement of the proposed robot, the stop signal is transmitted as an encrypted data signal via the symmetrically configured data link from the monitoring unit to the control unit. Further advantageously, the stop signal is an optical signal and the data link is configured for transmitting optical signals.

In principle, any wired or fiber optic transmission method is suitable for this transmission: analog voltage, digital signal (direct or modulated), communication protocol. The latter two groups are optically transmittable; this is advantageous because isolation is simultaneously achieved as a result (i.e., detection at the input interface with high voltage, processing at the output interface typically with lower voltage).

The stop signal is advantageously a high priority signal to the control unit of the robot indicating that a power failure at the output interface is imminent.

Advantageously, when a drop in voltage occurs at the output interface, mechanical brakes are engaged immediately so that the movable elements of the robot are decelerated almost instantaneously. Thus, a safe initiation of a deceleration process is always ensured. In this case, a reliable implementation of the energy storage function is not necessary, because the mechanical deceleration process is initiated independently of the energy that is available in the energy store.

Further advantages, features and details will be apparent from the following description, in which at least one exemplary embodiment is described in detail, with reference to the drawings where appropriate. The same, similar and/or functionally equivalent parts are provided with the same reference signs.

BRIEF DESCRIPTION OF THE DRAWINGS

In the drawings:

FIG. 1 shows a schematic diagram of one embodiment of the proposed robot.

DETAILED DESCRIPTION

FIG. 1 shows a schematic diagram of one embodiment of the proposed robot having actuator-driven elements 105, actuators 105a to drive the actuator-driven elements 105, and mechanical brakes 105b to decelerate the actuator-driven elements 105, wherein the robot requires a desired operating voltage U_B and/or a desired operating current I_B for operation. The robot includes a voltage and current source 101 having an input interface 107 to which a primary voltage U_P and a primary current I_P are applied, wherein during normal operation, the primary voltage U_P is equal to a desired primary voltage U_P,desired and the primary current I_P is equal to a desired primary current I_P,desired, and also having an output interface 108 to which an actual voltage U_actual and an actual current I_actual are applied, wherein during normal operation: U_actual=U_B and I_actual=I_B.

Voltage and current source 101 includes an energy store 102 integrated therein, in the present case including a plurality of capacitors which, following a failure or a drop in the primary voltage U_P and/or primary current I_P, maintain the operating voltage U_B and the operating current I_B at the output interface 108 for a predefined period of time Δt.

Voltage and current source 101 further includes a transformer 106, which transforms the primary voltage U_P supplied to the input interface 107 into a low-voltage range and supplies it to output interface 108 as the actual voltage U_actual.

The robot further includes a monitoring unit 103 for monitoring the primary voltage U_P applied to input interface 107, with the monitoring unit 103 being designed in such a way that as soon as the applied primary voltage U_P deviates from the desired primary voltage U_P,desired by a predetermined amount ΔU, a stop signal is generated.

Finally, the robot includes a control unit 104, which is connected to monitoring unit 103 and is designed for controlling the robot and its actuator-driven elements 105, with the control unit 104 being configured to control the robot with its actuator-driven elements 105 into a predefined safe state upon receipt of the stop signal. Control of the robot into the predefined safe state includes driving the actuators 105a of the actuator-driven elements 105 such that the robot decelerates into a dynamic state characterized by a sum of kinetic energy of at least a plurality of the actuator-driven elements 105, wherein the sum is less than a predefined boundary kinetic energy, and triggering one or more of the mechanical brakes 105b to further decelerate the actuator-driven elements 105 only when the robot has been decelerated by the actuators 105a into the dynamic state.

In FIG. 1, the load current paths are indicated by bold arrows. The thinner arrows proceeding from monitoring unit 103 to control unit 104 and from there to the actuator-driven elements 105 of the robot are data lines. Advantageously, the stop signal is an optical signal and the data lines are configured as optical fibers.

Although the invention has been further illustrated and described in detail by way of preferred example embodiments, the invention is not restricted by the disclosed examples, and other variations may be derived from the examples by those skilled in the art, without departing from the scope of the invention. It is therefore clear that a multitude of possible variations exists. It is also clear that cited, exemplified embodiments are actually merely examples, and are not to be construed in any way as limiting the scope, applicability, or configuration of the invention. Rather, the foregoing description and the description of the figures enable a person skilled in the art to implement the example embodiments, and those skilled in the art with knowledge of the disclosed inventive concept may make various modifications, for example as to the function or the arrangement of individual elements cited in an example embodiment, without departing from the scope as defined by the claims and their legal equivalents, such as the detailed explanations in the description.

LIST OF REFERENCE SIGNS

• 101 voltage and current source/power supply unit
• 102 energy store integrated into the voltage and current source
• 103 monitoring unit
• 104 control unit
• 105 actuator-driven elements of the robot
• 106 transformer
• 107 input interface
• 108 output interface

Claims

1. A robot comprising actuator-driven elements, actuators to drive the actuator-driven elements, and mechanical brakes to decelerate the actuator-driven elements, the robot requiring a desired operating voltage UB and/or a desired operating current IB in order to operate, wherein the robot comprises: a voltage and current source comprising: an input interface to which a primary voltage UP and a primary current IP are applied, wherein, during normal operation, the primary voltage UP is equal to a desired primary voltage UP,desired and the primary current IP is equal to a desired primary current IP,desired, andan output interface to which an actual voltage Uactual and an actual current Iactual arm supplied, wherein during normal operation: Uactual=UB and Iactual=IB;an energy store integrated into the voltage and current source and configured to maintain the operating voltage UB and the operating current IB for a predefined period of time Δt following a failure or a drop in the primary voltage UP and/or primary current IP;a monitoring unit configured to monitor the primary voltage UP applied to the input interface and configured to generate a stop signal as soon as the applied primary voltage UP deviates by a predefined amount ΔU from the desired primary voltage UP,desired; anda control unit connected to the monitoring unit and configured to control the robot and its actuator-driven elements, wherein the control unit is further configured to control the robot with its actuator-driven elements into a predefined safe state upon receipt of the stop signal, wherein control of the robot into the predefined safe state comprises driving the actuators of the actuator-driven elements such that the robot decelerates into a dynamic state characterized by a sum of kinetic energy of at least a plurality of the actuator-driven elements, wherein the sum is less than a predefined boundary kinetic energy, and triggering one or more of the mechanical brakes to further decelerate the actuator-driven elements into the predefined safe state only when the robot has been decelerated by the actuators into the dynamic state.

2. The robot according to claim 1, wherein the actuators of the actuator-driven elements are connectable to the integrated energy store to recuperate electrical energy.

3. The robot according to claim 1, wherein the energy store comprises one or more capacitors, and/or one or more inductors, and/or one or more accumulators.

4. The robot according to claim 1, wherein the stop signal is transmitted as a symmetrical and encrypted data signal from the monitoring unit to the control unit via a data link configured to transmit symmetrical and encrypted data signals.

5. The robot according to claim 1, wherein the stop signal is transmitted as an optical signal from the monitoring unit to the control unit via an optical data link configured to transmit optical signals.