For checking the mechatronic systems of machines

Abstract

The invention describes an electromechanical system for checking a machine, comprising: ‑ at least one machine (M, M'...), the machine comprising at least one mechanical unit (M1, M2, M3...), ‑ an automatic module (EA), the automatic module being coupled to the machine via a first link (L1) for checking the operation of the mechanical unit, characterised in that ‑ a second link (L2), the second link coupling the automatic module with at least one identification code (I1, I2, I3...) of the mechanical unit arranged in the machine, the second link having at least one transmission device for identification data of the identification code, the transmission device being of a safety type; ‑ a monitoring controller (PS), the monitoring controller comprising at least one data input (E1) for data transmitted by the automatic module and at least one data input (E2) for identification data transmitted by the second link.

Description

Technical Field

[0001] The present invention relates to electromechanical systems for inspecting machines. Background Art

[0002] At present, for example in metal product production lines, machines are controlled by automatic devices in the form of electronic and information units and thus form an electromechanical system as a whole.

[0003] For the purpose of maintenance of machines and their mechanical equipment, a procedure for replacing specific mechanical parts is preset at cycles appropriately defined by the machine manufacturer and the end user. These procedures may be complex, since they may also depend, among other things, on the products, their various specifications, their various properties. It is therefore important to follow these cycles, while avoiding too frequent maintenance and ensuring that mechanical parts have been replaced in a timely manner by other suitable mechanical parts, depending on the production operating procedures and the products processed.

[0004] In particular, human errors when replacing mechanical parts can lead to serious impairment of the operation of the machine and even to dangers for operators in the vicinity of the machine. Also in this sense, it can be proven that parts that are unsuitable, unsuitable in size or even counterfeit due to overuse are improperly placed in the machine, for example during a maintenance procedure of the machine or during a change of product type at the machine entrance. So far, it is difficult to foresee an electromechanical system with checks sufficient to avoid errors of this type according to the actual operating conditions of the machine. Usually, operators intervene as best as possible by visually checking the parts they should replace at the cycles provided by the table of the machine manufacturer. In any case, the operator cannot ensure by a simple visual check that the replaced part is exactly suitable.

[0005] In order to help the operator better identify the part to be replaced, a well-known method is to set a barcode or electronic label on the mechanical part to be replaced and the mechanical part that replaces it. This method of identifying parts is certainly safer, but it does not prevent the operator from making a wrong choice of replacement parts, or even the labeled part does not meet the machine manufacturer's requirements for the target working conditions of product production. This situation is particularly serious once the supplier of the original and identified part is replaced by a supplier of similar parts that can also have identification labels, but in the form of inappropriate or even fraudulent imitations. Summary of the invention

[0006] The object of the present invention is to provide an electromechanical system for enhanced inspection of a machine, in particular to ensure operation in compliance with the operating requirements of the machine and thus to minimize any human errors of the machine operator or any other damage to the machine.

[0007] Such a system for enhanced inspection is introduced by having the features described below.

[0008] The electromechanical systems used to inspect the machine include:

[0009] - at least one machine comprising at least one mechanical unit,

[0010] - an automatic module, said automatic module being coupled to the machine via a first link for checking the operation of the mechanical unit, the present invention proposes that the electromechanical system is preset:

[0011] a second link coupling the automatic module to at least one identification code of a mechanical unit arranged in the machine, said second link having at least one transmission means for identification data of the identification code, said transmission means being of a secure type, for example by encryption;

[0012] - a monitoring controller comprising at least one data input for data transmitted by the automatic module and at least one data input for identification data transmitted by the second link.

[0013] The monitoring controller and its two data inputs for the machine type and the identification data advantageously allow to establish a check on the physical state of the machine according to the state of one or more recognized identification codes. The check is thus strengthened because it is strengthened by a safe intersection of different types of data, in that, for example, if an identification code is not detected by the controller because maintenance is being carried out by replacing a mechanical part comprising this identification code, the controller will be able to receive data of the machine type in a state of detected maintenance. In short, what will be involved here is a check on the absence of an identification code, however, it is finally considered in order.

[0014] If, shortly after maintenance and replacement of a mechanical part with a new identification code, the automatic module transmits data to the controller near the end of maintenance (for example according to the configuration of the signal of the sensor or other recognized identification code), but the identification code of the replaced part has not yet been recognized as a correct code, it is reasonable to assume that an error in the mechanical part or the identification code has occurred. The operator is therefore notified and the automatic module is able to limit the operating mode of the machine to a safe degraded mode, thus avoiding any risk of damage to the machine or danger to operators close to the machine. If, in addition to the second maintenance intervention, the problem reappears and the operator seems to have replaced the mechanical part with another one that he sees fit, the controller, which re-performs its monitoring check, will issue an instruction to the automatic module for the operator to contact the machine supplier for a further check.

[0015] This also results in other important advantages:

[0016] - Systematic detection of inappropriate, unsuitable or even counterfeit machine parts or units without the knowledge of the operator and the machine supplier;

[0017] - more informative and safer detection of the state and life span of each machine part, according to the various modes of use of the machine part or the products processed by the machine;

[0018] - Before starting the machine's operating mode, the operator is warned of potential program defects;

[0019] -Put the machine in a degraded mode so that no risk of machine damage or product damage will occur, not even human risk.

[0020] The various examples in the detailed description also have the advantages of the present invention, particularly those related to the above-mentioned advantages. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Implementation and application examples are provided with the aid of the described figures:

[0022] Figure 1 is an electromechanical inspection system according to the present invention. DETAILED DESCRIPTION

[0023] Figure 1 An electromechanical inspection system according to the present invention is shown, comprising:

[0024] - at least one machine (M, M' ...) comprising at least one mechanical unit (M1, M2, M3 ...),

[0025] an automatic module (EA) coupled to the machine via a first link (L1) for checking the operation of the mechanical unit,

[0026] a second link (L2) coupling the automatic module with at least one identification code (I1, I2, I3, ...) of a mechanical unit arranged in the machine, said second link having at least one transmission means for identification data of the identification code, said transmission means being of a safety type;

[0027] A monitoring controller (PS) comprising at least one data input (E1) for data transmitted by the automatic module and at least one data input (E2) for identification data transmitted by a second link. Here, the machine (M) is, for example, a rolling mill stand for metal strip, comprising working rolls (M1), retaining blocks (M2, M3) for lateral support rolls, etc. Such machines require frequent maintenance procedures, the working rolls being most often replaced after rolling one or more coils of metal strip, while the blocks for lateral support rolls are replaced less frequently. If an inappropriate choice of rolls or supports to be replaced occurs, the operator may thus cause damage to the machine and therefore to production. Here, identification codes (I1, I2, I3...) are therefore provided on the working rolls and retaining blocks, all of which will be replaced according to their own maintenance cycles. Here, a second machine (M') is also shown, which is coupled to the automatic module via a link of the first link (L1) type (link not shown). The second machine can be a maintenance tool, a system of sensor(s), a machine or mechanical element connectable to the first machine (M), etc. An identification code (I'1) can also be provided on this second machine cooperating with the first machine, which identification code (I'1) will indicate its presence in a safe manner to the monitoring controller according to its detection status. In all cases, the controller also receives data about the physical state of the second machine, which will reinforce the information of the data about the physical state of the first machine. Thus, if it is assumed that the first machine is in a maintenance phase (= its identification code can therefore be detected as not present), the second machine, for example a tool for changing rollers (which is connected to the first machine or separated from the first machine), will give the actual status of the progress of the maintenance. Thus, if the physical state of the first machine gives rise to monitoring doubts, the checks of the monitoring controller are advantageously more robust.

[0028] Advantageously, these or the identification code is an electronic tag, such as an RFID chip (radio frequency identification). It can be read by an identification code reader (LI) via a radio frequency link, said reader being arranged in the vicinity of the identification code or codes to be detected. Thus, if a mechanical unit with an RFID type tag is moved in or out of the machine, a connection to the identification code reader is always possible at a close distance, otherwise a connection is not possible at a far distance (maintenance situation when the mechanical unit and its identification code are taken out or replaced).

[0029] The second link (L2) comprises at least one encrypted data transmission means, the encryption of which is ideally generated by the automation module and / or by the monitoring controller. Thus, it is impossible for a supplier of unsuitable parts to transmit data from the identification code reader and the automation module to the monitoring controller. Likewise, in a similar manner, the monitoring controller is also able to encode and decode the data sent to the automation module and the identification code reader by means of one or more output keys.

[0030] Therefore, an embodiment of the system according to the present invention proposes that the second link may include in series:

[0031] - Identification code reader (LI);

[0032] - Monitoring controller;

[0033] the identification code reader is integrated into the monitoring controller or has at least one input and one output coupled to the monitoring controller and secure to the monitoring controller, the coupling being implemented, for example, in compliance with IP addresses and MAC addresses, so that the coupling allows a very secure communication protocol;

[0034] - or the monitoring controller is part of an automatic module and the identification code reader is coupled to the automatic module, for example by wire or wirelessly, and still in an encrypted manner,

[0035] - or the monitoring controller is connected to at least one input and at least one output of the automatic module by secure transmission (for example by data encryption).

[0036] According to the system of the present invention, it is proposed that the second link includes a link for transmitting data associated with the physical state of the machine (in particular the physical state of the mechanical unit), and compared with a simple check by a separate identification code, the data is transmitted from the automatic module to the monitoring controller for enhanced inspection of the machine based on the inspection from the automatic module.

[0037] Therefore, the physical state of the machine may include at least one of the following information parameters: an indicator of the presence of an identification code, an indicator of the positioning of the mechanical unit in the machine or outside the machine, the service life of the mechanical unit, the temperature of the mechanical unit, an indicator of the failure of the mechanical unit, an indicator of the replacement of the mechanical unit, an indicator of the operating steps of the mechanical unit or the machine; physical state indicators of other mechanical units of the machine.

[0038] Thus, if the mechanical unit is old and has therefore been removed from the machine in order to be replaced, and even if the identification code of the mechanical unit has been removed to be replaced on another mechanical unit (not suitable), the monitoring controller will be able to advantageously observe during several maintenance cycles of the machine (through the data of the machine provided by the automatic module) that the identification code has been present for too long (through the presence data provided by the identification code reader), which will therefore signal that the service life of the mechanical unit has been greatly exceeded. An alarm will therefore be issued to inform the operator that there may be a danger if the mechanical unit has not in fact been checked or replaced by another suitable mechanical unit. During this alarm, the monitoring controller or / and the automatic module will provide control of the machine to protect the machine, for example in a degraded operating mode or even a stop mode.

[0039] In addition, the machine manufacturer may also preset the second link to be a dynamically encoded or encrypted type transmission via at least one private key, wherein the at least one private key may be modified over time based on each of a number of identification codes that have been registered for the type of mechanical unit to be regularly maintained, so that a third party (e.g., a supplier of incompatible parts) cannot fraudulently reuse the same originally authenticated RFID tag on various mechanical units to be replaced for a long period of time without being detected by the monitoring controller (or automatic module).

[0040] The system according to the invention can of course comprise a plurality of mechanical units, each of which is coupled to one of the identification codes, so that the overall physical state of the plurality of mechanical units is verified as being operationally consistent according to a scheme of permissions or prohibitions defined by each of the physical states of the mechanical units. These mechanical units are usually arranged in the machine as internal components, however, external mechanical units of a second machine interacting with the initial machine can also be coupled to the identification code, which helps to better define the overall physical state of the initial machine. As an example, in the case of a rolling mill stand as the initial machine, the external mechanical unit can be included in the second machine for changing rolls, wherein the second machine for changing rolls is arranged away from or close to the rolling mill stand, respectively, depending on the operating phase and the maintenance phase of the rolling mill stand. According to the detection (or non-detection) scheme of the identification code associated with the second machine, it is thus known whether the initial machine is in a maintenance phase. All these operating phases and maintenance phases can also advantageously be recorded for better maintenance tracking in case of doubt or later failure situations.

[0041] According to the state of the machine associated with the data input (E1) transmitted by the automatic module, the monitoring controller sends a verification signal (SV) to the automatic (module), upon detection and confirmed recognition of each identification code. This verification signal depends on the good consistency of the scheme of enabling or disabling the identification codes, according to the state of the machine at a given moment or during the period of several maintenance cycles. In other words, the monitoring controller is provided with an internal algorithm capable of performing associations and other calculations or logical tests between the data received by the identification code reader and the automatic module. For this purpose, the monitoring controller is preferably implemented in the form of a secure electronic and / or information platform, for example by means of encryption or compilation.

[0042] The monitoring controller can also be set up in one of the following configurations:

[0043] - it is arranged in one piece or in two pieces with the identification code reader (LI);

[0044] - it is arranged in a separate logic-type component and coupled to the automation module in a secure manner;

[0045] - It is set in the automatic module;

[0046] - It is partly set in components of logic type and in automatic modules.

[0047] The insertion of the monitoring controller is therefore very flexible, according to the possibility of adding the monitoring controller (together with the identification code reader) to an existing machine having an automation module, if the monitoring controller is preset to be separate from the automation module, the automation module can also be reconfigurable (for example by reprogramming or electronic / automatic expansion methods) or non-reconfigurable.

[0048] Besides the fact that monitoring controllers are or are not set in the automatic module, monitoring controllers include:

[0049] an analysis submodule which receives the data (E1, E2) provided by the second link, namely the data provided by the identification code reader and the data provided by the automatic module,

[0050] - a data processing submodule, which manages the permission or prohibition scheme based on the status of the identification code according to the monitoring standard according to the machine status,

[0051] - A control submodule which, according to the verification signal (SV) output by the data processing submodule, specifies to the automatic module a selected mode for the operation of the machine, such as: a good operation mode, an alarm mode, a maintenance mode, a degraded or idle mode or a stop mode.

[0052] As an example, if the machine is of the "rolling stand" type, the supervisory controller may have multiple operating modes according to the following possible situations:

[0053] - if the monitoring controller receives from the identification code reader a complete presence signal corresponding to all the identification codes required and receives from the automatic module an operating signal indicating a valid rolling operating state (= the machine is in a valid operating mode), a verification signal (SV) specifies (or confirms) a good operating mode to the automatic module;

[0054] - if the monitoring controller does not receive from the identification code reader any signal required for the presence of the identification code of the rolling stand and receives from the automatic module an operating signal indicating the maintenance state of the rolling stand (= the machine is in maintenance phase), a verification signal (SV) specifies (or confirms) a good operating mode to the automatic module;

[0055] - a verification signal (SV) specifies (or confirms) a degraded mode or a stop mode to the automatic module if the monitoring controller receives from the identification code reader a signal of the presence of the same identification code of the rolling stand and receives from the automatic module a signal of an excessive number of consecutive operating cycles indicating a maintenance state of the rolling stand (= the machine is in a maintenance phase), knowing that either the mechanical unit has not been maintained (replaced) in time or that the identification code may have been removed from the original mechanical unit and then reset on a replacement mechanical unit, the latter being possibly incompatible or even forged;

[0056] - If the monitoring controller receives from the identification code reader only a part of the signal required for the presence of all the identification codes of the rolling mill stand, and receives from the automatic module an operating signal indicating the operating state or the maintenance state of the rolling mill stand (= machine), the verification signal (SV) specifies (or confirms) a degraded mode or a stopped mode to the automatic module, it is known that either replacement mechanical units without identification codes are used (the latter may be incompatible or even counterfeit), or these mechanical units do not include a coded or encrypted identification code in accordance with that specified via the second link (L2).

[0057] In all the above cases, the monitoring controller can thus generate periodic and therefore advantageously preventive alarms for the operator, the manufacturer, or the machine maintenance service personnel, in order to allow an enhanced check of the machine operation, in particular to avoid incompatibilities, human errors or possible falsifications by the supplier of the mechanical unit. These alarms can be issued in the form of a timed protocol according to the machine's operating and maintenance cycles, in order to obtain a chronologically retrospective check in the event of a technical fault.

Claims

1. An electromechanical system for inspecting a machine in a metal product production line, comprising: at least one machine (M, M', ...), said machine comprising at least one mechanical unit (M1, M2, M3, ...), an automatic module (EA) coupled to the machine via a first link (L1) for checking the operation of the mechanical unit, It is characterized in that a second link (L2) coupling the automatic module with at least one identification code (I1, I2, I3, ...) of the mechanical unit arranged in the machine, the second link having at least one transmission means for identification data of the identification code, the transmission means being of a safety type; A monitoring controller (PS) comprising at least one data input (E1) for data transmitted by the automation module and at least one data input (E2) for identification data transmitted by the second link to allow a check of the physical state of the machine to be established according to the state of the recognized identification code.

2. The system according to claim 1, wherein: The identification code is an electronic tag.

3. The system according to claim 1, wherein: The second link comprises at least one encrypted data transmission means, wherein at least one encryption key is generated by the automatic module and / or by the monitoring controller.

4. The system according to claim 1, wherein: The second link includes in series: Identification code reader (LI); The monitoring controller; The identification code reader has at least one input and an output coupled to the monitoring controller in a secure manner, the coupling being implemented in compliance with an IP address and a MAC address; Either the monitoring controller is part of the automatic module or is connected to at least one input and at least one output of the automatic module by means of a secure transmission.

5. The system according to one of claims 1 to 2, wherein: The second link comprises a link for transmitting data related to the physical state of the mechanical unit, said data being transmitted from the automatic module to the monitoring controller according to a check from the automatic module.

6. The system according to claim 5, wherein: The physical state includes at least one of the following parameters: an indicator of the presence of an identification code, an indicator of the positioning of the mechanical unit in the machine or outside the machine, an indicator of the service life of the mechanical unit, a temperature of the mechanical unit, an indicator of a failure of the mechanical unit, an indicator of replacement of the mechanical unit, an indicator of an operating step of the mechanical unit or the machine.

7. The system according to claim 6, wherein: In the case of a plurality of mechanical units each coupled to one of the identification codes, the overall physical state of the plurality of mechanical units is verified to be operationally consistent according to the enabling or disabling scheme defined by each of the physical states of the plurality of mechanical units.

8. The system according to one of claims 1 to 2, wherein: According to the machine status associated with the data input (E1) transmitted by the automatic module, the monitoring controller sends a verification signal (SV) to the automatic module upon detection and confirmed identification of each identification code.

9. The system according to one of claims 1 to 2, wherein: The monitoring controller is a secure electronic and / or information platform.

10. The system according to claim 4, wherein: The monitoring controller is configured as one of the following: being arranged in a double block with the identification code reader (LI); is arranged in a separate logic-type component and coupled to said automation module in a secure manner; Set in the automatic module; Partially set in logic-type components and in automatic modules.

11. The system according to claim 4, wherein: The monitoring controller comprises: an analysis submodule, the analysis submodule receiving the data (E1, E2) provided by the second link, namely the data provided by the identification code reader and the data provided by the automatic module, A data processing submodule, which manages the permission or prohibition scheme based on the identification code status according to the monitoring standard according to the machine status, A control submodule, wherein the control submodule specifies a selected mode for machine operation to the automatic module according to a verification signal (SV) output by the data processing submodule, wherein the selected mode includes: a good operation mode, an alarm mode, a maintenance mode, a degradation or idle mode, and a stop mode.

12. The system according to one of claims 1 to 2, wherein: The monitoring controller generates a preventive alarm to an operator, a manufacturer of the machine or a maintenance service personnel, and the alarm can be issued in the form of a timing protocol according to an operation cycle and a maintenance cycle of the machine.

13. The system of claim 1, wherein: The identification code is an RFID chip.

14. The system according to claim 4, wherein: The secure transmission method is implemented by data encryption.

15. The system according to claim 9, wherein: The monitoring controller is a secure electronic and / or information platform ensured by encryption or compilation.

Images