Address checking by optically presenting addresses in encoded form

Abstract

Disclosed are an input / output device and a method for checking an address of the input / output device. An input / output device includes an input and / or output, a bus interface, a memory, and a plurality of light emitting components. The input and / or the output are / is designed to connect a field device. The bus interface is designed to indirectly or directly connect the field device to the field bus. The memory is designed to store addresses. The input / output device is designed to receive data directed to an address via the bus interface. The input / output device is further designed to present the address in encoded form using the lighting means.

Description

Technical Field

[0001] The present disclosure relates to checking addresses for electronic data transmission and in particular to checking addresses for setting up a communication channel between an input / output device (I / O device) and a control device that is particularly secure (compared to conventional standard communication channels). Background Art

[0002] I / O devices can be connected to a network or a superordinate control device via a (wired) bus interface such as a local bus interface and a field bus interface and can thereby send data to the superordinate control device and / or receive data from the superordinate control device via the bus interface. In order to establish a communication channel between two bus users, addresses are often used, based on which the bus users can check whether the messages transmitted via the bus are addressed to these bus users. Since errors can occur / occur during address assignment, it is advantageous or necessary (with the corresponding safety level as the background) to check the assigned addresses before use, especially when constructing safety-oriented communication channels (i.e., communication channels that are particularly and generally safer than standard communication channels), so that errors can be discovered and corrected during address assignment. Summary of the invention

[0003] The I / O device according to the invention comprises an input and / or output, a bus interface, a memory and a plurality of light-emitting components. Here, the input and / or output are designed to be connected to a field device and the bus interface is designed to connect the field device to a field bus indirectly or directly. In addition, the memory is designed to store addresses. In addition, the I / O device is designed to receive data via the bus interface, which data are addressed to the addresses and the addresses are presented in coded form when using light-emitting components.

[0004] In this regard, the term "input" or "output" as used within the scope of the present description and claims is understood in particular to mean an electrical connection. It can be provided that a voltage and / or a current is generated at the input of the I / O device or via the input of the I / O device by other devices, and that a voltage and / or a current is generated at the output of the I / O device or via the output of the I / O device by the I / O device itself. For example, a field device can be connected to the input and / or output, which provides a status signal or processes a control signal. The term "field device" as used within the scope of the present description and claims is understood in particular to mean a sensor or actuator that is connected to the I / O device (signaling) during operation.

[0005] Furthermore, the term "bus interface" as used within the scope of the present description and claims is understood in particular to mean a bus interface which is designed for connection to a local bus and for exchanging (process) data with other I / O devices or a fieldbus coupler or for direct connection to a fieldbus. The term "local bus" as used within the scope of the present description is understood in particular to mean a bus via which (only) I / O devices connected in series on a fieldbus coupler are connected (directly) to one another or to the fieldbus coupler. If, on the other hand, the bus interface is designed for direct connection to a fieldbus (and therefore not via a local bus and a fieldbus coupler), the term "bus interface" as used within the scope of the present description and claims is understood in particular to mean a fieldbus interface.

[0006] Furthermore, the term "memory" as used within the scope of the present description and claims is understood to mean, in particular, an electronic memory in which data about the configuration of the I / O device can be stored. This configuration, for example, results in how the process image is generated (e.g., how process data representing a specific point in time or a characteristic time period are derived from the signals read in at the input of the I / O device and how the process data are transmitted to the fieldbus coupler via the local bus) and / or how control signals are derived from the process data transmitted from the fieldbus coupler to the I / O device via the local bus (these control signals are output at the output of the I / O device, for example). If the bus interface is designed to be directly connected to the fieldbus, this configuration, for example, results in how the process data are transmitted to a higher-level control device via the fieldbus and / or how control signals are derived from process data transmitted from the higher-level control device to the I / O device via the fieldbus.

[0007] Furthermore, the term "light-emitting component" used within the scope of the present description and claims is understood in particular to mean a component that is designed to stimulate the emission of light by means of a current flowing through the component, such as a light-emitting semiconductor component of a light-emitting diode. It should be noted that, according to the above understanding, a multicolor light-emitting diode may include a plurality of light-emitting components that emit light of different wavelengths or wavelength ranges.

[0008] Furthermore, the term “coded form” as used within the scope of the present description and claims is understood to mean in particular an assignment between an address and a pattern displayed by a lighting component, which assignment results from a single mapping.

[0009] The I / O device can be designed as an I / O module. In this context, the term "module" used within the scope of the present description is understood to mean, in particular, a device that is designed to be electrically connected to another device in order to expand the capabilities of the other device, so that the two devices form a functional unit. It can be provided that the two devices are designed to be connected not only electrically but also mechanically to each other, so that the two devices form a unit not only functionally but also mechanically.

[0010] The I / O module can, for example, have a housing which is designed to connect the I / O module in series to another I / O module or to a fieldbus coupler. The term "housing" as used within the scope of the present description is understood in particular to mean a structure made of solid insulating material, in which conductive structures are embedded, wherein the housing is generally designed to substantially prevent accidental contact with live conductors. Furthermore, the term "series" as used within the scope of the present description is understood in particular to mean the establishment of a friction-locking or form-locking connection between the housings, via which a plurality of modules can be connected in series with one another. The housing can be equipped in such a way that a wired transmission path is established within the scope of the series connection (without further aids).

[0011] Furthermore, the term "field bus coupler" as used within the scope of the present description and claims is to be understood in particular as a component of a modular field bus node, the task of which is to make data and / or services of I / O modules connected in series on the field bus coupler available via a field bus connected to the field bus coupler.

[0012] The data pointing to the address may be contained in the message addressed to the bus interface. The I / O device may be designed to extract the address from the message and store the address in a memory. That is, the bus interface may already have a bus address through which communication can be performed. The address may then be used to construct a secure communication channel, which is implemented based on the message addressed to the bus interface. For example, by using the address provided for the secure communication channel, it is possible to prevent an error in the addressing of the bus interface from causing the I / O device to use data not designated for the I / O device to implement a safety-oriented function.

[0013] Thus, addresses provided for the implementation of safety-oriented functions can be used as an additional safety mechanism, which ensures that data transmitted via a secure communication channel has a higher probability of actually reaching the intended recipient, or that data not intended for the I / O device is discarded by the I / O device. Furthermore, the I / O device can apply (forward) error correction algorithms to the messages or the data contained in the messages and / or evaluate checksums (contained in the messages or data) in order to detect errors in the messages or data and correct them if necessary.

[0014] The I / O device can be designed to, in response to the confirmation of the address, use the address for establishing a communication channel which is protected by a security mechanism different from that of the messages addressed to the bus interface. For example, the I / O device can be designed to, after presenting the address in coded form, wait for confirmation by the user or commissioning engineer and use the address only upon receipt of the confirmation. In this context, it can be provided that the correctness of the presented address can be confirmed by input on the I / O device (e.g. by pressing a key arranged on the I / O device) or by sending a confirmation message to the bus interface.

[0015] In addition, the I / O device is designed to permanently store the address (adding a checksum if necessary), and when the I / O device is restarted, the address is used to build the communication channel only when the address is confirmed to be (continued) valid by the superior device. For example, the I / O device can wait for the address to be received by the superior control device after restarting and continue to use the address when the received address matches the stored address. Here, it can also be provided that in addition to the received address, a checksum is transmitted together, and the correctness of the address can be checked by the checksum. In addition, the I / O device can be designed to reset the address in response to the reception of a reset request, so that a new address can be received and stored. The reset request can be, for example, that the I / O device receives a predetermined address after restarting to replace the correct address, and the predetermined address is, for example, a specific address within the invalid address range.

[0016] In this case, the address received by the I / O device after a restart can be contained in a message (or message sequence) with further configuration data, which further define or at least relate to the communication channel to be established using the address or the data to be exchanged via the communication channel. These configuration data can also be checked, for example by analyzing a checksum attached to the configuration data or by comparing them with configuration data stored on the I / O device.

[0017] The I / O module can be designed to present the address in digitally coded form using a lighting component.

[0018] In this regard, the concept of "digital coding" used within the scope of the current description and claims is particularly understood as a coding in which each character in a string representing an address is mapped to a discrete state (e.g. deactivated, activated) of one of a plurality of light-emitting components.

[0019] The address may include a sequence of zeros and ones, and the I / O device may be designed to present a zero or one in the sequence by deactivating or activating a light emitting component.

[0020] The first group of light emitting components may be designed to emit light of a first wavelength, and the second group of light emitting components may be designed to emit light of a second wavelength, wherein the first wavelength and the second wavelength correspond to different colors.

[0021] For example, the light emitting component may be included in a multicolor light emitting diode (LED) and the LED may emit green light to represent "0" and red light to represent "1." Here, using different colors to represent the string is advantageous because a problematic LED can be identified at any time.

[0022] The I / O device may be arranged to present the sequence segments in sequence and to present the zeros and / or ones in each segment simultaneously.

[0023] For example, if there are 2 LEDs available and the string representing the address has 6 characters, the address can be divided into 3 segments and presented in sequence (segment 1: characters 1 and 2, segment 2: characters 3 and 4, segment 3: characters 5 and 6; LED 1: characters 1, 3, and 5, LED 2: characters 2, 4, and 6).

[0024] The I / O device may be designed to present a segment presented at a specific point in time by deactivating or activating individual ones of the light emitting components.

[0025] The I / O device can be designed to output a sequence-independent optical, acoustic or tactile signal after the last segment and / or before the first segment, which signal the end of the sequence presentation and / or the start of the sequence presentation.

[0026] For example, the I / O device may be configured to allow all lighting components to (briefly) flash, output a signal sound or vibrate after the last segment and / or before the first segment.

[0027] The I / O device may be arranged to, in response to confirmation of the address, perform a reboot of the I / O device, and / or use some or all of the lighting components to present more information.

[0028] The method according to the invention for checking the address of an I / O device comprises storing the address in a memory of the I / O device and checking the address by means of optically presenting the address in coded form.

[0029] The address may include a sequence of zeros and ones, and the I / O device may be designed to present a zero or one in the sequence by deactivating or activating a light emitting component of the I / O device.

[0030] Furthermore, it is to be understood that in principle all features of a step performed using an I / O module may be features of the corresponding method and vice versa. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The invention is explained in detail below using an exemplary embodiment, with reference to the accompanying drawings, in which:

[0032] Figure 1 A schematic diagram showing a fieldbus system;

[0033] Figure 2 Show Figure 1 A schematic diagram of a fieldbus node of a fieldbus system shown in;

[0034] Figure 3 Explanation of the configuration using a computer connected to the fieldbus node Figure 2 The fieldbus node shown in;

[0035] Figure 4 The structure of an I / O module is shown, and the I / O module is connected to a field device;

[0036] Figure 5 A first possible presentation of the first address in encoded form is shown;

[0037] Figure 6 A second possible presentation of the first address in encoded form is shown;

[0038] Figure 7 A first possible presentation of the second address in encoded form is shown;

[0039] Figure 8 A second possible presentation of the second address in encoded form is shown;

[0040] Fig. 9 Shows the flow of steps for checking the address of an I / O device.

[0041] In this case, identical or functionally similar elements are denoted by the same reference symbols in the figures. DETAILED DESCRIPTION

[0042] Figure 11 shows a block diagram of a fieldbus system 1000. The fieldbus system 1000 includes fieldbus nodes 100, 200, 300 and 400, which are connected to each other via a fieldbus 500. The fieldbus node 400 is configured as a superordinate control unit and can be used not only to monitor but also to regulate devices (not shown) controlled by the fieldbus system 1000. When the superordinate control unit 400 monitors the devices, the superordinate control unit 400 can periodically or aperiodically receive status data from one or more of the fieldbus nodes 100, 200 and 300, the status data describing the status of the devices and generate a fault signal or an alarm signal when the status of the devices deviates (substantially) from an expected / permitted state or a state range. When the superordinate control unit 400 (not only monitors but also) regulates the device, it can cyclically or acyclically receive status data from one or more of the fieldbus nodes 100, 200 and 300 and determine control data to be transmitted to one or more of the fieldbus nodes 100, 200 and 300 taking into account the status data.

[0043] Figure 2 The modular fieldbus node 100 is shown, comprising a fieldbus coupler 110 and two I / O modules 120 and 130 connected in series to the fieldbus coupler 110, to which sensors 140 and actuators 150 are connected. During operation, the I / O module 130 reads in sensor signals via an input 134 and generates status data from the sensor signals, which are transmitted to the fieldbus coupler 110 via a bus interface 132 of the I / O module 130, a local bus 160 and a bus interface 112 (of the fieldbus coupler 110). In addition to the fieldbus interface 114, the fieldbus coupler 110 has a processor and a memory, in which information about the configuration of the fieldbus coupler 110 is stored.

[0044] The information about the configuration of the fieldbus coupler 110 can indicate, for example, which or how many I / O modules are connected in series to the fieldbus coupler 110 and how the fieldbus coupler 110 is to process received status data. The fieldbus coupler 110 can be configured, for example, to process these status data locally and / or (if necessary in a modified form) to forward them to the superordinate control unit 400 via the fieldbus interface 114 and the fieldbus 500. The superordinate control unit 400 (or the fieldbus coupler 110 in the case of local processing) can generate control data taking into account these status data.

[0045] The control data generated by the superordinate control unit 400 can be transmitted to the fieldbus coupler 110 via the fieldbus 500. The control data transmitted to the fieldbus coupler 110 (or generated by the fieldbus coupler 110 in the case of purely local processing) are (if necessary in a modified form) forwarded / transmitted to the I / O module 120. The I / O module 120 receives the control data and outputs a control signal corresponding to the control data at an output 124, to which the actuator 150 is connected. In this case, the data communication between the components of the fieldbus system 1000, the mapping of sensor signals to status data and the mapping of control data to control signals can be adapted to different usage scenarios by configuring the fieldbus node 100.

[0046] to this end, Figure 3 A fieldbus node 100 and a computer 600 (e.g., a desktop, laptop, tablet, etc.) connected to the fieldbus node 100 are shown, which is designed to configure the I / O modules 120 and 130 of the fieldbus node 100. Here, the computer 600 can not only be used only or mainly for configuration, but also (in addition to configuration) can also undertake other tasks. The computer 600 can especially be part of the superordinate control unit 400 and can also undertake monitoring tasks and / or control tasks in addition to configuration. For example, the computer 600 can monitor the device and be designed to switch from one operating mode to another operating mode when certain conditions exist (and in the process of switching, it is possible to change or update the configuration).

[0047] Furthermore, as part of the configuration, addresses (e.g. PROFIsafe addresses) can be transmitted to the I / O modules 120 and 130, which addresses are provided for use by the I / O modules 120 and 130 to set up a safety-oriented channel, so that data directed to the I / O modules 120 and 130 and relevant for implementing safety-oriented functions can be sent to these addresses. In order to set up the safety-oriented channel, it can be provided that the data and addresses are embedded in the message addressed to the bus interface, and that the data are discarded by the respective I / O module 120 and 130 if the address does not match the address assigned to the respective I / O module 120 and 130. In this case, the addresses and / or the data can be provided with a checksum and / or forward error coding for the purpose of detecting or correcting errors.

[0048] If it is provided that one or both of the I / O modules 120 and 130 can establish a safety-oriented channel for communication, then (further) configuration can be performed via this safety-oriented channel. For example, if it is provided that the I / O module does not perform safety-related functions, then the configuration of the I / O module 120 can be performed only based on the messages addressed to the bus interface 122. However, if it is provided on the side of the I / O module 130 that the I / O module 130 performs safety-related functions (prerequisites below), then after receiving and confirming the address set for safety-oriented communication, (further) configuration (at least substantially related to safety-oriented functions) can be performed via the safety-oriented communication channel established using this address.

[0049] like Figure 4 As shown in FIG. 1 , an I / O module 130 designed to perform safety-oriented functions has a circuit 10 that reads in a sensor signal of a sensor 140. The sensor signal can be read in, for example, by the circuit 10 determining (at a certain sampling frequency) a voltage applied to an input 134 or a current flowing through the input 134. The circuit 10 can also include a processor 12 that is designed to execute a program (e.g., a sequence of instructions) stored in a memory 14 of the I / O module 130, which program determines, using configuration data, how process data are generated from the sensor signal and how the process data are further processed (e.g., whether, when, or at what frequency the process data are transmitted to the field bus coupler 110).

[0050] To improve reliability, the program may include, for example, redundant programming branch instructions The results of these branch instructions are compared. In addition, Figure 4 Unlike the example shown in FIG. 1 , two or more similar or different sensors 140 can be used which, in the absence of errors, provide (approximately) identical sensor signals, so that the state of the sensor 140 can be inferred by comparing these sensor signals. Figure 4 The sensor 140 is shown as an example as the field device, but the field device connected to the I / O module 140 may also be an actuator, a plurality of actuators, or any other field device.

[0051] The I / O module 130 also includes a plurality of LEDs 20, 22 and 24, which display the operating status of the I / O module 130 during operation. In addition, the LEDs 20, 22 and 24 are used to present the address assigned to the I / O module 130 for establishing a safety-oriented communication channel. To this end, Figure 5A possible presentation of the first address 30 in a coded form is shown. Here, each character (here zero and one) in the string representing the address 30 is assigned a light-emitting component, and when the character is "0", the light-emitting component is not activated, and when the character is "1", the light-emitting component is activated.

[0052] If LEDs 20, 22 and 24 are multi-color LEDs, then Figure 6 As shown in , one of the LEDs 20, 22, and 24 is assigned to each character, wherein when the character is "0", the first light-emitting component 40, 44, or 48 of the corresponding LED 20, 22, or 24 is activated, and when the character is "1", the second light-emitting component 42, 46, or 50 of the LED 20, 22, or 24 is activated, wherein the light-emitting components 40, 44, and 48 differ from the light-emitting components 42, 46, and 50 in the wavelength range or wavelength of the emitted light. For example, the LEDs 20, 22, and 24 can be designed to emit green light or red light, and emit green light to present "0" and emit red light to present "1".

[0053] If the number of LEDs 20, 22 and 24 available for presentation is less than the number of characters in the string, then Figure 7 As shown, the string is segmented and different segments can be presented in sequence. For example, as combined Figure 5 By activating and deactivating the LEDs as described, the first three characters of the string can be presented by LEDs 20, 22 and 24 at time point T1, and the last three characters of the string can be presented by LEDs 20, 22 and 24 at time point T2. Figure 8 As shown, combined Figure 6 The LEDs are operated as described (at the times T1 and T2 ), and a segmented display can also be performed using multi-color LEDs.

[0054] Fig. 9 A flow chart of a process is shown. In this case, in step 2000, the address 30 or 32 is stored in the memory of the I / O device (for example, in the memory 14 of the I / O module 130). In step 2100, if, when checking the address 30 or 32 by means of the optical display of the address 30 or 32, it is determined that the stored address matches the address provided for the I / O device, the address can be used to establish a communication channel that is different from other communication channels established by the I / O device and is particularly more secure.

[0055] Reference numerals list

[0056] 10 Circuit

[0057] 12 Processor

[0058] 14 Memory

[0059] 20LED

[0060] 22LED

[0061] 24LED

[0062] 30 Address

[0063] 32 Address

[0064] 40 Light-emitting components

[0065] 42 Light-emitting components

[0066] 44 Light-emitting components

[0067] 46 Luminous components

[0068] 48 Light-emitting components

[0069] 50 Light-emitting components

[0070] 100 fieldbus nodes

[0071] 110 Fieldbus Coupler

[0072] 112 Bus interface

[0073] 114 Fieldbus interface

[0074] 120I / O modules

[0075] 122 Bus interface

[0076] 124 Output

[0077] 130I / O modules

[0078] 132 Bus interface

[0079] 134 Input

[0080] 140 Sensors

[0081] 150 Actuator

[0082] 160 Local Bus

[0083] 200 fieldbus nodes

[0084] 300 fieldbus nodes

[0085] 400 Superior control unit

[0086] 500 Fieldbus

[0087] 600 Computer

[0088] 700 devices

[0089] 800 devices

[0090] 1000 Fieldbus System

[0091] 2000 steps

[0092] 2100 steps

Claims

1. Input / output devices, including: An input terminal (134) and / or an output terminal (124); Bus interface (132); Memory (14); and A plurality of light emitting components (40, 42, 44, 46, 48, 50); Wherein, the input end (134) and / or the output end (124) are designed to be connected to a field device; Wherein, the bus interface (132) is designed to connect the field device to the field bus (500) indirectly or directly; Wherein, the memory (14) is designed to store addresses (30, 32); The input / output device is designed to receive data pointing to the address (30, 32) through the bus interface (122, 132); and The input / output device is designed to present addresses (30, 32) in coded form using lighting components (40, 42, 44, 46, 48, 50).

2. The input / output device according to claim 1, wherein: The data are contained in a message addressed to the bus interface (132), and the input / output device is designed to extract the address (30, 32) from the message and store the address in the memory (14).

3. The input / output device according to claim 2, wherein: The input / output device is designed to, in response to validation of an address (30, 32), use the address to construct a communication channel which is protected by a different security mechanism than messages addressed to the bus interface (132).

4. The input / output device according to any one of claims 1 to 3, wherein: The input / output device is designed to present an address (30, 32) in digitally coded form using a lighting element (40, 42, 44, 46, 48, 50).

5. The input / output device according to claim 4, wherein: The address (30, 32) comprises a sequence of zeros and ones, and the input / output device is designed to present a zero or one in the sequence by deactivating or activating a light emitting component (40, 42, 44, 46, 48, 50).

6. The input / output device according to claim 5, wherein: A first group of light emitting components (40, 42, 44, 46, 48, 50) is designed to emit light of a first wavelength, and a second group of light emitting components (40, 42, 44, 46, 48, 50) is designed to emit light of a second wavelength, wherein the first wavelength and the second wavelength correspond to different colors.

7. The input / output device according to claim 5 or 6, wherein: The input / output device is designed to present the sequence segments one after the other and to present zeros and / or ones simultaneously in each segment.

8. The input / output device according to claim 7, wherein: The input / output device is designed to present a segment presented at a specific point in time by deactivating or activating a single light emitting component among the light emitting components (40, 42, 44, 46, 48, 50).

9. The input / output device according to claim 7 or 8, wherein: After the last segment and / or before the first segment, a sequence-independent optical, acoustic or haptic signal is output, which signals the end of the sequence presentation and / or the start of the sequence presentation.

10. The input / output device according to any one of claims 1 to 9, wherein: The input / output device is designed to, in response to confirmation of the address (30, 32), perform a reboot of the input / output device and / or use some or all of the lighting components (40, 42, 44, 46, 48, 50) to present more information.

11. A method for checking an address (30, 32) of an input / output device, comprising: storing the addresses (30, 32) in a memory (14) of the input / output device; as well as The addresses (30, 32) are checked by optically presenting the addresses (30, 32) in coded form.

12. The method according to claim 11, wherein: The address (30, 32) comprises a sequence of zeros and ones, and the input / output device is designed to present a zero or one in the sequence by deactivating or activating a light emitting component (40, 42, 44, 46, 48, 50).

Images