An emergency stop state monitoring function block applied to a safety control system

Abstract

This invention belongs to the field of safety control system technology, specifically relating to an emergency stop status monitoring function block applied to a safety control system. It includes: a numerical comparison module for comparing the mutual exclusion contact signals of an emergency stop button and outputting the current state of the emergency stop button; an open delay module for comparing the current state and the difference time signal; an RS trigger module for alarm retention to output a state difference alarm signal; a logic OR module for performing an OR operation on the state difference alarm signal and the normally open / closed contact quality code signal of the emergency stop button, outputting a passivation alarm signal; a logic AND module for performing an AND operation on the passivation alarm signal and the mutual exclusion contact signal, outputting an emergency stop action signal and an alarm value signal; and a multi-multiply-add module for outputting an alarm status signal based on the alarm value signal. This invention, based on the basic functional modules of domestically produced safety systems, can realize the design of complex emergency stop status monitoring function blocks.

Description

Technical Field

[0001] This invention belongs to the field of safety control system technology, specifically relating to an emergency stop status monitoring function block applied to a safety control system. Background Technology

[0002] Proton therapy, a high-precision radiotherapy technique, utilizes the physical properties of proton particles to achieve precise tumor localization and treatment while significantly reducing damage to surrounding healthy tissues. In a proton therapy system, the treatment safety system is the core equipment ensuring patient safety and treatment effectiveness. Its functions encompass accurate proton beam positioning and adjustment, dose monitoring and control, and patient safety education and training. With the widespread application and continuous development of proton therapy technology, proton therapy safety systems have become a research hotspot in the medical field.

[0003] During the operation of a proton therapy system, the safety control system is a crucial link in ensuring the safety of equipment and personnel in the treatment center, effectively preventing and avoiding potential personal injury accidents. The emergency stop status monitoring function block, as an important component of the safety control system, is mainly used to determine the status and passivation state of a pair of normally open (NO) and normally closed (NC) contacts of the emergency stop button. This confirms whether the emergency stop button of the safety system is functioning correctly and outputs the corresponding alarm status value, as well as an emergency stop action signal, to ensure that the emergency stop button status received by the system logic is correct and reliable.

[0004] Currently, most mainstream safety control systems on the market rely on imported equipment, and the function block library of domestically produced safety systems still suffers from significant deficiencies in richness. Therefore, how to design complex emergency stop status monitoring function blocks based on the basic function modules of domestically produced safety systems has become an urgent problem to be solved. Summary of the Invention

[0005] In view of the shortcomings of the prior art described above, the purpose of this invention is to provide an emergency stop status monitoring function block for use in safety control systems, and to implement the design of a complex emergency stop status monitoring function block based on the basic functional modules of domestic safety systems.

[0006] This invention provides an emergency stop state monitoring function block for a safety control system, comprising: several logic AND modules, a numerical comparison module, an open delay module, an RS trigger module, a logic OR module, and a multi-multiply-add module;

[0007] The numerical comparison module is used to perform numerical comparison on the mutual exclusion contact signals of the emergency stop button in order to output the current status signal of the emergency stop button. The delay module is used to compare the current state of the emergency stop button with the time difference signal to output a status alarm signal. The RS trigger module is used to retain alarms based on the status alarm signal and the reset alarm signal, so as to output a status difference alarm signal. The logic OR module is used to perform an OR operation on the state difference alarm signal and the inverted signals of the normally open contact quality code signal and the normally closed contact quality code signal of the emergency stop button, so as to output the passivation alarm signal of the emergency stop button. The logic AND module is used to first partially invert the passivation alarm signal of the emergency stop button and the mutual exclusion contact signal of the emergency stop button, and then perform an AND operation to output an emergency stop action signal and several alarm value signals. The multi-adder module is used to multiply and sum several alarm value signals to output the current alarm status signal of the emergency stop button.

[0008] In one embodiment of the present invention, the numerical comparison module includes a first data input pin, a second data input pin, and an equal result output pin; The first data input pin of the numerical comparison module is connected to the normally closed contact signal in the mutual exclusion contact signal, the second data input pin of the numerical comparison module is connected to the normally open contact signal in the mutual exclusion contact signal, and the equal result output pin is connected to the trigger signal input pin of the open delay module. When the normally closed contact signal and the normally open contact signal in the mutual exclusion contact signal are the same, the equal result output pin of the numerical comparison module outputs a high-level signal as the current status signal of the emergency stop button.

[0009] In one embodiment of the present invention, the delay module includes a trigger signal input pin, a preset time input pin, and a status output pin; The trigger signal input pin of the open delay module is connected to the current status signal of the emergency stop button, the preset time input pin of the open delay module is connected to the difference time signal, and the status output pin of the open delay module is connected to the set pin of the RS trigger module. When the duration of the current status signal of the emergency stop button, which is equal to the output of the result output pin, is greater than the duration of the difference time signal, the status output pin of the delay module outputs a high-level signal as the status alarm signal.

[0010] In one embodiment of the present invention, the RS trigger module includes a set pin, a reset pin, and a set-priority output pin; The set pin of the RS flip-flop module is connected to the status alarm signal, the reset pin of the RS flip-flop module is connected to the reset alarm signal, and the set priority output pin of the RS flip-flop module is connected to the first control signal input pin of the logic OR module. When the reset alarm signal is a low-level signal and the status alarm signal is a high-level signal, the set priority output pin outputs a status difference alarm signal as a high-level signal; When the reset alarm signal is a high-level signal and the status alarm signal is a low-level signal, the set priority output pin outputs a status difference alarm signal as a low-level signal. When the reset alarm signal is a low-level signal and the status alarm signal is a low-level signal, the status difference alarm signal output by the set priority output pin remains unchanged. When the reset alarm signal is a high-level signal and the status alarm signal is a high-level signal, the set priority output pin outputs a status difference alarm signal as a low-level signal.

[0011] In one embodiment of the present invention, the logic OR module includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin; The first control signal input pin of the logic OR module is connected to a state difference alarm signal, the second control signal input pin of the logic OR module is connected to the inverted signal of the normally open contact quality code signal, the third control signal input pin is connected to the inverted signal of the normally closed contact quality code signal, and the data output pin of the logic OR module is connected to the first control signal input pin of the logic AND module. When any one of the status difference alarm signal, the inverted signal of the normally open contact quality code signal, or the inverted signal of the normally closed contact quality code signal is a high-level signal, the data output pin of the logic OR module outputs a high-level signal. When the status difference alarm signal, the inverted signal of the normally open contact quality code signal, and the inverted signal of the normally closed contact quality code signal are all low-level signals, the data output pin of the logic OR module outputs a low-level signal.

[0012] In one embodiment of the present invention, the logic AND module includes a first logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin; The first control signal input pin of the first logic AND module is connected to the inverted signal of the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the first logic AND module is connected to the normally closed contact signal in the mutual exclusion contact signal; and the third control signal input pin of the first logic AND module is connected to the inverted signal of the passivation alarm signal of the emergency stop button. When the inverted signal of the passivation alarm signal of the emergency stop button is a high-level signal, the inverted signal of the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, the data output pin of the first logic AND module outputs a high-level signal as an emergency stop action signal.

[0013] In one embodiment of the present invention, the logic AND module includes a second logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin; The first control signal input pin of the second logic AND module is connected to the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the second logic AND module is connected to the inverted signal of the normally closed contact signal in the mutual exclusion contact signal; the third control signal input pin of the second logic AND module is connected to the inverted signal of the passivation alarm signal of the emergency stop button; and the data output pin of the second logic AND module is connected to the first data input pin of the multi-multiply-add module. When the inverted signal of the passivation alarm signal of the emergency stop button is a high-level signal, the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the inverted signal of the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the second logic AND module outputs a high-level signal as an alarm value signal.

[0014] In one embodiment of the present invention, the logic AND module includes a third logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin; The first control signal input pin of the third logic AND module is connected to the inverted signal of the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the third logic AND module is connected to the normally closed contact signal in the mutual exclusion contact signal; the third control signal input pin of the third logic AND module is connected to the passivation alarm signal of the emergency stop button; and the data output pin of the third logic AND module is connected to the second data input pin of the multi-multiply-add module. When the passivation alarm signal of the emergency stop button is a high-level signal, the inverted signal of the normally open contact signal in the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the normally closed contact signal in the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the third logic AND module outputs a high-level signal as an alarm value signal.

[0015] In one embodiment of the present invention, the logic AND module includes a fourth logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin; The first control signal input pin of the fourth logic AND module is connected to the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the fourth logic AND module is connected to the inverted signal of the normally closed contact signal in the mutual exclusion contact signal; the third control signal input pin of the fourth logic AND module is connected to the passivation alarm signal of the emergency stop button; and the data output pin of the fourth logic AND module is connected to the third data input pin of the multi-multiply-add module. When the passivation alarm signal of the emergency stop button is a high-level signal, the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the inverted signal of the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the fourth logic AND module outputs a high-level signal as an alarm value signal.

[0016] In one embodiment of the present invention, the multi-multiply-add module includes three data input pins, three coefficient input pins, and a data output pin; Each data input pin of the multi-multiply-add module is connected to a data output pin of the logic AND module that outputs an alarm value signal, and the three coefficient input pins are connected to a preset coefficient signal. The multi-multiply-add module is used to perform multi-multiply-add calculations on the alarm value signals output by each logic AND module and each preset coefficient signal, and outputs the current alarm status signal of the emergency stop button through the data output pin of the multi-multiply-add module.

[0017] The beneficial effects of this invention are as follows: This invention, through the design and combination of six basic functional modules—a logic AND module, a numerical comparison module, an open delay module, an RS flip-flop module, a logic OR module, and a multi-multiplication and addition module—is used to determine the state of a pair of normally open / normally closed contacts of an emergency stop button and their passivation state. This confirms whether the emergency stop button of the safety system is operating normally, outputs the corresponding alarm state value, and simultaneously outputs an emergency stop action signal. This ensures that the emergency stop button state received by the safety system's logic operation is correct and reliable. Furthermore, the combined design of these basic functional modules improves the maintainability and scalability of the safety system. Attached Figure Description

[0018] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application. It is obvious that the drawings described below are merely some embodiments of this application, and those skilled in the art can obtain other drawings based on these drawings without any inventive effort.

[0019] Figure 1 This is a schematic diagram of the structure of an emergency stop state monitoring function block applied to a safety control system according to an embodiment of the present invention; Among them, 100 is the numerical comparison module; 200 is the open delay module; 300 is the RS flip-flop module; 400 is the logic OR module; 501 is the first logic AND module; 502 is the second logic AND module; 503 is the third logic AND module; 504 is the fourth logic AND module; and 600 is the multi-multiplication addition module. Detailed Implementation

[0020] To facilitate understanding of this application, a more complete description will be provided below with reference to the accompanying drawings, which illustrate embodiments of the present application. However, the present application can be implemented in many different forms and is not limited to the embodiments described herein. Rather, these embodiments are provided so that the disclosure of this application will be thorough and complete.

[0021] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application.

[0022] It is understood that the terms "first," "second," etc., used herein may be used to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish one element from another. For example, without departing from the scope of this application, a first resistor may be referred to as a second resistor, and similarly, a second resistor may be referred to as a first resistor. Both the first resistor and the second resistor are resistors, but they are not the same resistor.

[0023] It is understood that the term "connection" in the following embodiments should be understood as "electrical connection," "communication connection," etc., if the connected circuits, modules, units, etc., have electrical signal or data transmission with each other.

[0024] It is understandable that "at least one" refers to one or more, and "multiple" refers to two or more. "At least a part of an element" refers to part or all of an element.

[0025] When used herein, the singular forms of “a,” “an,” and “the” may also include the plural forms unless the context clearly indicates otherwise. It should also be understood that the terms “comprising / including” or “having,” etc., specify the presence of the stated features, wholes, steps, operations, components, parts, or combinations thereof, but do not preclude the possibility of the presence or addition of one or more other features, wholes, steps, operations, components, parts, or combinations thereof. Meanwhile, the term “and / or” as used in this specification includes any and all combinations of the associated listed items.

[0026] Please see Figure 1 As shown, an emergency stop state monitoring function block applied to a safety control system includes: several AND modules (AND6), a numerical comparison module 100 (CMPR), an open delay module 200 (TON), an RS flip-flop module 300 (LTCH), a logic OR module 400 (OR6), and a multi-multiply-add module 600 (MULADD). In the following description of this invention, a pin output of 1 indicates a high-level output signal, and a pin output of 0 indicates a low-level output signal.

[0027] The numerical comparison module 100 is used to perform numerical comparison on the mutual exclusion contact signal of the emergency stop button, so as to output the current status signal of the emergency stop button. The delay module 200 is used to compare the current state of the emergency stop button with the time difference signal to output a status alarm signal. The RS trigger module 300 is used to retain alarms based on the status alarm signal and the reset alarm signal, so as to output a status difference alarm signal. The logic OR module 400 is used to perform an OR operation on the state difference alarm signal and the inverted signals of the normally open contact quality code signal and the normally closed contact quality code signal of the emergency stop button, so as to output the passivation alarm signal of the emergency stop button. The logic AND module is used to first partially invert the passivation alarm signal of the emergency stop button and the mutual exclusion contact signal of the emergency stop button, and then perform an AND operation to output an emergency stop action signal and several alarm value signals. The multi-adder module 600 is used to multiply and sum several alarm value signals to output the current alarm status signal of the emergency stop button.

[0028] In this embodiment of the invention, the numerical comparison module 100 implements the comparison status output of two input variables; the module has two input variables, namely the first data input pin and the second data input pin, and five status output variables, namely the output pin greater than the result, the output pin greater than or equal to the result, the output pin equal to the result, the output pin less than or equal to the result, and the output pin less than the result.

[0029] The first data input pin of the numerical comparison module 100 is connected to the normally closed contact signal (NC.AV) of the mutual exclusion contact signal, the second data input pin of the numerical comparison module 100 is connected to the normally open contact signal (NO.AV) of the mutual exclusion contact signal, and the equal result output pin is connected to the trigger signal input pin of the open delay module 200.

[0030] In this embodiment of the invention, the emergency stop button in the safety system is a pair of normally open and normally closed mutually exclusive contacts. Through this pair of contacts, the IO hardware performs an unequal evaluation and outputs a status variable indicating whether the emergency stop button is triggered: when the normally closed contact signal NC.AV is 1 and the normally open contact signal NO.AV is 0, the emergency stop button is not triggered; when the normally closed contact signal NC.AV is 0 and the normally open contact signal NO.AV is 1, the emergency stop button is triggered.

[0031] like Figure 1 As shown, in the numerical comparison module 100, EN is the enable control pin, IN1 and IN2 are the first data input pin and the second data input pin, respectively. The normally closed contact signal in the mutual exclusion contact signal is used as the comparison value. GT, GE, EQ, LE, and LT are respectively greater than the result output pin, greater than or equal to the result output pin, equal to the result output pin, less than or equal to the result output pin, and less than the result output pin. When IN1 is greater than, greater than or equal to, equal to, less than or equal to, and less than the value of IN2, the five output pins output 1 respectively.

[0032] In this embodiment of the invention, when the normally closed contact signal and the normally open contact signal in the mutual exclusion contact signal are the same, the equal result output pin of the numerical comparison module 100 outputs a high-level signal as the current status signal of the emergency stop button.

[0033] In this embodiment of the invention, the delay module 200 includes a trigger signal input pin, a preset time input pin, and a status output pin; The trigger signal input pin of the open delay module 200 is connected to the current status signal of the emergency stop button, the preset time input pin of the open delay module 200 is connected to the difference time signal, and the status output pin of the open delay module 200 is connected to the set pin of the RS trigger module 300.

[0034] Furthermore, the preset time input pin of the open delay module 200 is connected to the output pin of the delay period module, and the delay period module includes at least one multi-multiply-add module for generating a difference time signal.

[0035] like Figure 1 As shown, in the open delay module 200, EN is the enable control pin, IN is the trigger signal input pin for timing control pulse, PT is the preset time input pin, Q is the elapsed time output pin, and ET is the status output pin. The open delay module 200 enables the delay count to take effect when IN is 1, and outputs 1 after a delay of PT. At this time, ET = ET + 1 per cycle. When IN is 0 at any time, Q and ET are simultaneously cleared to zero. The integer input variable PT is the delay difference time. The digital output variable Q is the timing output. When Q = 1, the delay count ends. The integer output variable ET is the current timing value. When ET = PT, Q outputs 1.

[0036] In a practical application scenario of this invention, the delay time of the PT in the delay module 200 is calculated according to the number of scan cycles, rather than the PT delay time being directly input in some systems. For example, if the delay module 200 needs to output 1 when the input is a high-level signal for more than 500ms, then when the logic page scan cycle is set to 50ms, 500 / 50=10 needs to be input on the PT pin, which means that the output will be 1 after 10 scan cycles. Similarly, when the page scan cycle is 100ms, to delay for 500ms, 500 / 100=5 needs to be input on the PT pin, and so on.

[0037] In this embodiment of the invention, when the duration of the current status signal of the emergency stop button output by the result output pin is greater than the duration of the difference time signal, the status output pin of the delay module 200 outputs a high-level signal as a status alarm signal.

[0038] In this embodiment of the invention, the RS flip-flop module 300 has two digital input variables and two digital output variables. EN is the enable control pin, S is the set pin, R is the reset pin, Q_RS is the reset priority output pin, and Q_SR is the set priority output pin.

[0039] Specifically, the set pin of the RS trigger module 300 is connected to the status alarm signal, the reset pin of the RS trigger module 300 is connected to the reset alarm signal, and the set priority output pin of the RS trigger module 300 is connected to the first control signal input pin of the logic OR module 400.

[0040] Specifically, when the normally open and normally closed contact signals of the emergency stop button are not mutually exclusive (i.e., all are 0 or 1), or when the normally open and normally closed contact signals do not change synchronously within a specified time difference (e.g., 100ms) after the emergency stop button is pressed or released, a channel status warning will be triggered, and the reset alarm signal will be responsible for resetting the difference alarm. The emergency button channel passivation alarm consists of a status warning and a quality code. Only the status warning will be maintained and requires an alarm reset, while the quality code alarm can self-reset.

[0041] When the reset alarm signal is 0 and the status alarm signal is 1, the set priority output pin outputs 1; When the reset alarm signal is 1 and the status alarm signal is 0, the set priority output pin outputs 0 and the set priority output pin outputs 0. When the reset alarm signal is 0 and the status alarm signal is 0, the output of the set priority output pin and the output of the set priority output pin remain unchanged. When the reset alarm signal is 1 and the status alarm signal is 1, the set priority output pin outputs 0 and 1 respectively.

[0042] In this embodiment of the invention, the logic OR module 400 implements a logic OR operation on 6 digital input variables; the module has 6 digital input variables and 1 digital output variable; IN1~IN6 are input values, and Q is the output; the output is 0 if and only if all input values ​​are 0; the output is 1 if any input value is 1.

[0043] like Figure 1As shown, in the logic OR module 400, IN1 is the first control signal input pin, IN2 is the second control signal input pin, IN3 is the third control signal input pin, Q is the data output pin, EN is the enable control pin, NOQS.AV is the normally open contact quality code signal, NCQS.AV is the normally closed contact quality code signal, and DSCR.AV is the passivation alarm signal of the emergency stop button output by the logic OR module 400.

[0044] The first control signal input pin of the logic OR module 400 is connected to a state difference alarm signal, the second control signal input pin of the logic OR module 400 is connected to the inverted signal of the normally open contact quality code signal, the third control signal input pin is connected to the inverted signal of the normally closed contact quality code signal, and the data output pin of the logic OR module 400 is connected to the first control signal input pin of the logic AND module.

[0045] When the quality code of normally closed and normally open contacts is normal, the logic value is 1; when the quality code is abnormal, the logic value is 0.

[0046] In this embodiment of the invention, when any one of the status difference alarm signal, the inverted signal of the normally open contact quality code signal, or the inverted signal of the normally closed contact quality code signal is 1, the data output pin of the logic OR module 400 outputs 1. When the status difference alarm signal, the inverted signal of the normally open contact quality code signal, and the inverted signal of the normally closed contact quality code signal are all 0, the data output pin of the logic OR module 400 outputs 0.

[0047] It should be noted that the passivation state of the emergency stop button is determined by the safety system based on a comprehensive analysis of the quality code of the emergency stop button signal and the time difference between state changes. The passivation alarm signal is set to 1 when the following conditions occur: 1. The normally closed contact signal and the normally open contact signal are not mutually exclusive (i.e., all are 0 or 1); 2. Either the normally closed contact signal or the normally open contact signal has a bad quality code; 3. When the emergency stop button is pressed or released, the normally closed contact signal and the normally open contact signal do not change synchronously within the specified time difference.

[0048] In this embodiment of the invention, the logic AND module implements a logic AND operation on 6 digital input variables. The module has 6 digital input variables and 1 digital output variable; IN1~IN6 are input values, and Q is the output; the output is 1 if and only if all input values ​​are 1; the output is 0 if any input value is 0. In the AND logic module, IN1 is the first control signal input pin, IN2 is the second control signal input pin, IN3 is the third control signal input pin, Q is the data output pin, and EN is the enable control pin.

[0049] In this embodiment of the invention, the multi-multiply-add module 600 performs multiplication and summation of three sets of analog inputs; the module has 6 analog input variables and 1 analog output variable, that is, the multi-multiply-add module 600 includes three data input pins, three coefficient input pins and a data output pin; the three data input pins are the first data input pin, the second data input pin and the third data input pin, and the three coefficient input pins are the first coefficient input pin, the second coefficient input pin and the third coefficient input pin.

[0050] like Figure 1 As shown, in the multi-multiply-add module 600, K1 is the first data input pin, X1 is the first coefficient input pin, K2 is the second data input pin, X2 is the second coefficient input pin, K3 is the third data input pin, X3 is the first coefficient input pin, and Q is the data output pin, where Q=K1. X1+K2 X2+K3 X3, the default value of the unlinked data output pin is 0.0, and STATUS.AV is the current alarm status signal of the emergency stop button output by the multi-multiply-add module 600.

[0051] In this embodiment of the invention, several logic AND modules are included: a first logic AND module 501, a second logic AND module 502, a third logic AND module 503, and a fourth logic AND module 504; The first data input pin of the multi-multiply-add module 600 is connected to the alarm value signal output by the second logic AND module 502 in the logic AND module; the second data input pin of the multi-multiply-add module 600 is connected to the alarm value signal output by the third logic AND module 503 in the logic AND module; the third data input pin of the multi-multiply-add module 600 is connected to the alarm value signal output by the fourth logic AND module 504 in the logic AND module; the first coefficient input pin is connected to the first preset coefficient signal; the second coefficient input pin is connected to the second preset coefficient signal; and the third coefficient input pin is connected to the third preset coefficient signal. The first preset coefficient signal, the second preset coefficient signal, the third preset coefficient signal, and the alarm value signal output from the data output pins of the second logic AND module 502, the third logic AND module 503, and the fourth logic AND module 504 are used to perform a multi-multiplication and addition calculation. The current alarm status signal of the emergency stop button is output through the data output pin of the multi-multiplication and addition module 600.

[0052] In this embodiment of the invention, the first control signal input pin of the first logic AND module 501 is connected to the inverted signal of the normally open contact signal in the mutual exclusion contact signal, the second control signal input pin of the first logic AND module 501 is connected to the normally closed contact signal in the mutual exclusion contact signal, and the third control signal input pin of the first logic AND module 501 is connected to the inverted signal of the passivation alarm signal of the emergency stop button.

[0053] When the inverted signal of the passivation alarm signal of the emergency stop button is a high-level signal, the inverted signal of the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the first logic AND module 501 outputs a high-level signal as the emergency stop action signal SS.AV, to indicate that the emergency stop button is pressed and the emergency channel is not passivated.

[0054] SS.AV=1 indicates that there is no emergency stop action and the passivation alarm is not triggered. Any other combination of input signal states will cause the data output pin of the first logic AND module to output a low level signal, that is, the emergency stop action signal is triggered. When the emergency stop button is pressed (state is reliable) or the passivation alarm is triggered, SS.AV=0 indicates that the emergency stop state is triggered (including either the emergency stop button action or the passivation alarm trigger).

[0055] In this embodiment of the invention, the first control signal input pin of the second logic AND module 502 is connected to the normally open contact signal in the mutual exclusion contact signal, the second control signal input pin of the second logic AND module 502 is connected to the inverted signal of the normally closed contact signal in the mutual exclusion contact signal, the third control signal input pin of the second logic AND module 502 is connected to the inverted signal of the passivation alarm signal of the emergency stop button, and the data output pin of the second logic AND module 502 is connected to the first data input pin of the multi-multiply-add module 600.

[0056] When the inverted signal of the passivation alarm signal of the emergency stop button is a high-level signal, the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the inverted signal of the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the second logic AND module 502 outputs a high-level signal as an alarm value signal to indicate that the emergency stop button is not pressed and the emergency channel is not passivated.

[0057] In this embodiment of the invention, the first control signal input pin of the third logic AND module 503 is connected to the inverted signal of the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the third logic AND module 503 is connected to the normally closed contact signal in the mutual exclusion contact signal; the third control signal input pin of the third logic AND module 503 is connected to the passivation alarm signal of the emergency stop button; and the data output pin of the third logic AND module 503 is connected to the second data input pin of the multi-multiply-add module 600.

[0058] When the passivation alarm signal of the emergency stop button is a high-level signal, the inverted signal of the normally open contact signal in the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the normally closed contact signal in the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the third logic AND module 503 outputs a high-level signal as an alarm value signal to indicate that the emergency stop button is not pressed and the emergency channel is passivated.

[0059] In this embodiment of the invention, the first control signal input pin of the fourth logic AND module 504 is connected to the normally open contact signal in the mutual exclusion contact signal, the second control signal input pin of the fourth logic AND module 504 is connected to the inverted signal of the normally closed contact signal in the mutual exclusion contact signal, the third control signal input pin of the fourth logic AND module 504 is connected to the passivation alarm signal of the emergency stop button, and the data output pin of the fourth logic AND module 504 is connected to the third data input pin of the multi-multiply-add module 600.

[0060] When the passivation alarm signal of the emergency stop button is a high-level signal, the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the inverted signal of the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-low level signal, an AND operation is performed, and the data output pin of the fourth logic AND module 504 outputs a high-level signal as an alarm value signal to indicate that the emergency stop button is pressed and the emergency channel is passivated.

[0061] Specifically, the emergency stop action signal and the current alarm status signal of the emergency stop button are as follows: 1. If the emergency stop button is not pressed and the channel is not deactivated, the data output pin of the 600 multi-multiply-add module will output 1. 2. When the emergency stop button is pressed and the channel is not passivated, the data output pin of the first logic AND module 501 outputs a low-level signal as an emergency stop action signal, and at the same time, the data output pin of the multi-multiply-add module 600 outputs 0. 3. If the emergency stop button is not pressed, the channel becomes passive, and the data output pin of the 600 multi-multiply-add module outputs 2. 4. When the emergency stop button is pressed, the channel becomes passive, and the data output pin of the 600 multi-multiply-add module outputs 3.

[0062] In summary, this invention, through the design and combination of six basic functional modules—a logic AND module, a numerical comparison module, an open delay module, an RS flip-flop module, a logic OR module, and a multi-multiplication-addition module—enables the determination of the state of a pair of normally open / normally closed contacts of an emergency stop button and their passivation state. This confirms whether the emergency stop button of the safety system is functioning correctly, outputs the corresponding alarm state value, and simultaneously outputs an emergency stop action signal. This ensures that the emergency stop button state received by the safety system's logic operations is correct and reliable. Furthermore, the combined design of these basic functional modules improves the maintainability and scalability of the system.

[0063] The above embodiments are merely illustrative of the principles and effects of the present invention and are not intended to limit the invention. Any person skilled in the art can modify or alter the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or alterations made by those skilled in the art without departing from the spirit and technical concept disclosed in the present invention should still be covered by the claims of the present invention.

Claims

1. A function block for monitoring emergency stop status in a safety control system, characterized in that, include: Several logic AND modules, numerical comparison modules, open delay modules, RS flip-flop modules, logic OR modules, and multi-multiply-add modules; The numerical comparison module is used to perform numerical comparison on the mutual exclusion contact signals of the emergency stop button in order to output the current status signal of the emergency stop button. The delay module is used to compare the current state of the emergency stop button with the time difference signal to output a status alarm signal. The RS trigger module is used to retain alarms based on the status alarm signal and the reset alarm signal, so as to output a status difference alarm signal. The logic OR module is used to perform an OR operation on the state difference alarm signal and the inverted signals of the normally open contact quality code signal and the normally closed contact quality code signal of the emergency stop button, so as to output the passivation alarm signal of the emergency stop button. The logic AND module is used to first partially invert the passivation alarm signal of the emergency stop button and the mutual exclusion contact signal of the emergency stop button, and then perform an AND operation to output an emergency stop action signal and several alarm value signals. The multi-adder module is used to multiply and sum several alarm value signals to output the current alarm status signal of the emergency stop button.

2. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The numerical comparison module includes a first data input pin, a second data input pin, and an equal result output pin; The first data input pin of the numerical comparison module is connected to the normally closed contact signal in the mutual exclusion contact signal, the second data input pin of the numerical comparison module is connected to the normally open contact signal in the mutual exclusion contact signal, and the equal result output pin is connected to the trigger signal input pin of the open delay module. When the normally closed contact signal and the normally open contact signal in the mutual exclusion contact signal are the same, the equal result output pin of the numerical comparison module outputs a high-level signal as the current status signal of the emergency stop button.

3. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The delay module includes a trigger signal input pin, a preset time input pin, and a status output pin. The trigger signal input pin of the open delay module is connected to the current status signal of the emergency stop button, the preset time input pin of the open delay module is connected to the difference time signal, and the status output pin of the open delay module is connected to the set pin of the RS trigger module. When the duration of the current status signal of the emergency stop button, which is equal to the output of the result output pin, is greater than the duration of the difference time signal, the status output pin of the delay module outputs a high-level signal as the status alarm signal.

4. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The RS flip-flop module includes a set pin, a reset pin, and a set-priority output pin. The set pin of the RS flip-flop module is connected to the status alarm signal, the reset pin of the RS flip-flop module is connected to the reset alarm signal, and the set priority output pin of the RS flip-flop module is connected to the first control signal input pin of the logic OR module. When the reset alarm signal is a low-level signal and the status alarm signal is a high-level signal, the set priority output pin outputs a status difference alarm signal as a high-level signal; When the reset alarm signal is a high-level signal and the status alarm signal is a low-level signal, the set priority output pin outputs a status difference alarm signal as a low-level signal. When the reset alarm signal is a low-level signal and the status alarm signal is a low-level signal, the status difference alarm signal output by the set priority output pin remains unchanged. When the reset alarm signal is a high-level signal and the status alarm signal is a high-level signal, the set priority output pin outputs a status difference alarm signal as a low-level signal.

5. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The logic or module includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin; The first control signal input pin of the logic OR module is connected to a state difference alarm signal, the second control signal input pin of the logic OR module is connected to the inverted signal of the normally open contact quality code signal, the third control signal input pin is connected to the inverted signal of the normally closed contact quality code signal, and the data output pin of the logic OR module is connected to the first control signal input pin of the logic AND module. When any one of the status difference alarm signal, the inverted signal of the normally open contact quality code signal, or the inverted signal of the normally closed contact quality code signal is a high-level signal, the data output pin of the logic OR module outputs a high-level signal. When the status difference alarm signal, the inverted signal of the normally open contact quality code signal, and the inverted signal of the normally closed contact quality code signal are all low-level signals, the data output pin of the logic OR module outputs a low-level signal.

6. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The logic AND module includes a first logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin. The first control signal input pin of the first logic AND module is connected to the inverted signal of the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the first logic AND module is connected to the normally closed contact signal in the mutual exclusion contact signal; and the third control signal input pin of the first logic AND module is connected to the inverted signal of the passivation alarm signal of the emergency stop button. When the inverted signal of the passivation alarm signal of the emergency stop button is a high-level signal, the inverted signal of the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, the data output pin of the first logic AND module outputs a high-level signal as an emergency stop action signal.

7. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The logic AND module includes a second logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin. The first control signal input pin of the second logic AND module is connected to the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the second logic AND module is connected to the inverted signal of the normally closed contact signal in the mutual exclusion contact signal; the third control signal input pin of the second logic AND module is connected to the inverted signal of the passivation alarm signal of the emergency stop button; and the data output pin of the second logic AND module is connected to the first data input pin of the multi-multiply-add module. When the inverted signal of the passivation alarm signal of the emergency stop button is a high-level signal, the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the inverted signal of the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the second logic AND module outputs a high-level signal as an alarm value signal.

8. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The logic AND module includes a third logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin. The first control signal input pin of the third logic AND module is connected to the inverted signal of the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the third logic AND module is connected to the normally closed contact signal in the mutual exclusion contact signal; the third control signal input pin of the third logic AND module is connected to the passivation alarm signal of the emergency stop button; and the data output pin of the third logic AND module is connected to the second data input pin of the multi-multiply-add module. When the passivation alarm signal of the emergency stop button is a high-level signal, the inverted signal of the normally open contact signal in the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the normally closed contact signal in the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the third logic AND module outputs a high-level signal as an alarm value signal.

9. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The logic AND module includes a fourth logic AND module, which includes a first control signal input pin, a second control signal input pin, a third control signal input pin, and a data output pin. The first control signal input pin of the fourth logic AND module is connected to the normally open contact signal in the mutual exclusion contact signal; the second control signal input pin of the fourth logic AND module is connected to the inverted signal of the normally closed contact signal in the mutual exclusion contact signal; the third control signal input pin of the fourth logic AND module is connected to the passivation alarm signal of the emergency stop button; and the data output pin of the fourth logic AND module is connected to the third data input pin of the multi-multiply-add module. When the passivation alarm signal of the emergency stop button is a high-level signal, the normally open contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, and the inverted signal of the normally closed contact signal of the mutual exclusion contact signal of the emergency stop button is a high-level signal, an AND operation is performed, and the data output pin of the fourth logic AND module outputs a high-level signal as an alarm value signal.

10. The emergency stop status monitoring function block applied to a safety control system according to claim 1, characterized in that, The multi-multiplication adder module includes three data input pins, three coefficient input pins, and a data output pin. Each data input pin of the multi-multiply-add module is connected to a data output pin of the logic AND module that outputs an alarm value signal, and the three coefficient input pins are connected to a preset coefficient signal. The multi-multiply-add module is used to perform multi-multiply-add calculations on the alarm value signals output by each logic AND module and each preset coefficient signal, and outputs the current alarm status signal of the emergency stop button through the data output pin of the multi-multiply-add module.

Images