Man-machine interaction double-control intelligent switch control device, control method and chip

The human-computer interaction dual-control intelligent switch control device, which combines the dual verification logic of the sensing module and the manual intervention unit, solves the problems of false triggering of the sensing switch and forgetting to turn off the traditional switch. It realizes user self-control, energy saving and safety management, and is suitable for a variety of public places.

CN122159849APending Publication Date: 2026-06-05陈小良

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
陈小良
Filing Date
2026-02-15
Publication Date
2026-06-05

AI Technical Summary

Technical Problem

Existing induction switches are prone to accidental triggering, and traditional mechanical switches rely on manual operation and are easily forgotten to be turned off, resulting in energy waste and safety hazards, and failing to meet users' needs for autonomous control.

Method used

It adopts a human-machine interactive dual-control intelligent switch control device, which combines a sensing module and a manual intervention unit. Through dual verification start-up logic, it ensures that the device starts up in accordance with the user's intention, continues to operate when the user is present, and automatically shuts down after the user leaves. It also integrates a timing unit and remote monitoring function.

Benefits of technology

It effectively prevents accidental triggering, ensures that startup conforms to user intent, achieves energy-saving management and safe operation, provides users with autonomous operation rights, supports remote fault detection and management, and is suitable for various public places.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure FT_1
    Figure FT_1
  • Figure FT_2
    Figure FT_2
  • Figure FT_3
    Figure FT_3
Patent Text Reader

Abstract

The application discloses a human-computer interaction double-control intelligent switch control device, a control method and a chip. The intelligent switch comprises an induction module and a user operation module, adopts a double-verification / user-priority starting mechanism, and only when two signals are triggered at the same time or the user selects priority starting, a load circuit is turned on, and any module can independently control the circuit to be turned off. The induction module adopts an induction mode of infrared, sound control, light control or radar, and has the functions of resetting or prolonging a timing period. The user operation module provides multiple human-computer interaction modes, including a press or touch switch, a remote control module and voice recognition control. The application guarantees the autonomy of the user, realizes automatic power-off when leaving, effectively solves the problems of false triggering of a traditional induction switch and forgetting to turn off the power of a mechanical switch, has the advantages of energy saving, safety, convenient use and the like, and is particularly suitable for control of electronic and electrical equipment in smart home public places.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention belongs to the field of intelligent control technology, specifically relating to a human-computer interaction dual-control intelligent switch control device, control method and chip, which is particularly suitable for home and public application scenarios such as lighting and electrical appliance control that need to prevent false triggering and take into account automated operation. Background Technology

[0002] Currently, switches widely used in public places and some indoor environments are mainly divided into two categories: induction automatic switches and traditional mechanical switches. Induction switches (such as voice-activated, infrared, and radar sensors) can achieve automatic operation without human intervention, but they are prone to false triggering due to environmental interference (such as pedestrians passing by or pets moving around), causing unexpected equipment startup, resulting in energy waste and user interference, and cannot fully meet the user's active control needs; traditional mechanical switches rely entirely on manual operation, and users are likely to forget to turn them off after leaving, which also leads to energy waste and safety hazards.

[0003] Existing technologies present a clear contradiction: simple induction activation lacks intent judgment, while simple manual switches rely on user operation. Therefore, there is an urgent need for a new type of intelligent switch solution that can ensure user autonomy, maintain equipment operation while the user is present, automatically shut down after the user leaves, and ensure safe operation. Summary of the Invention

[0004] This invention aims to overcome the problems of easy accidental triggering of existing inductive switches and the lack of automatic delay in traditional switches, and provides an intelligent switch control scheme based on human-machine collaboration and dual verification. This scheme integrates inductive signals and manual operation signals to ensure that device startup matches the user's true intention, and continuously maintains operation through intelligent sensing during use, ultimately achieving energy-saving and safe automatic or manual shutdown, significantly improving the user experience.

[0005] To achieve the above objectives, the present invention provides the following technical solution:

[0006] This invention provides a human-computer interactive dual-control intelligent switch control device, comprising: The sensing module is used to detect when a user enters a preset area and output a sensing signal; The manual intervention unit is used to receive user operations and output start or stop command signals. The timing unit is used to provide the time timing circuit; The control unit is electrically connected to the sensing module, the manual intervention unit, and the timing unit, respectively.

[0007] The control unit is configured to execute dual-verification startup control logic, specifically including:

[0008] Start-up phase: When a trigger signal is received by either the sensing module or the manual intervention unit, a confirmation timing cycle is started; within the confirmation timing cycle, if a valid trigger signal is received from the other, a drive signal is generated and output to turn on the external load, and a running timing cycle is started.

[0009] Maintenance and shutdown phase: If a sensing signal is received again from the sensing module during the running time period, the running time period is delayed or reset to effectively extend the running time; when the running time period expires, or when a shutdown command signal is received from the manual intervention unit, the output drive signal is stopped to shut down the external load.

[0010] Optionally, the control unit is configured to support a user-initiated priority control mode, in which:

[0011] Once a start command signal is received from the manual intervention unit, a drive signal is generated and output to start the external load and initiate a running timer cycle. During the running timer cycle, if a sensing signal is received from the sensing module, the running timer cycle is reset or extended. When the running timer cycle expires, or a shutdown command signal is received from the manual intervention unit, the output of the drive signal is stopped to shut down the external load.

[0012] Furthermore, the device may also include monitoring and remote control functions, specifically including:

[0013] The monitoring signal processing unit is used to collect and process fault monitoring signals (such as overcurrent, overvoltage, short circuit, open circuit, and overtemperature) that reflect the working status of the external load, and outputs a drive prohibition signal and generates a monitoring alarm signal when an abnormality is detected. The network signal processing unit has remote communication access capabilities: it can connect to wireless modules through interfaces such as UART, SPI, and I²C, or connect to broadband networks, Ethernet, fiber optics, Wi-Fi, Bluetooth, ZigBee, LoRa, NB-IoT, 4G / 5G, etc., via gateways. This unit supports receiving lock / unlock control commands from remote control in real time and ensures the reliability and timeliness of command transmission.

[0014] The control unit also includes a logic control module, which is used to prevent the control unit from outputting drive signals when a drive prohibition signal or a lock command is received; and to release the prohibition state when an unlock command is received.

[0015] The sensing module can be selected from at least one of infrared pyroelectric sensors, sound sensors, photosensitive sensors, microwave radar human body sensors, and electromagnetic sensors; the manual intervention unit can be selected from at least one of tactile switches, touch modules, wireless remote control receiver modules, or voice recognition receiver modules; the control unit can be selected from at least one of AND gate logic integrated circuits, programmable logic control modules, electromagnetic relays, field-effect transistor circuits, transistor circuits, thyristor circuits, and other semiconductor power.

[0016] In one specific embodiment, the control unit and the timing unit can be integrated into the same programmable logic control module to implement the control logic. This module is configured as follows:

[0017] When either the induction signal input port or the manual signal input port receives a trigger signal, an acknowledgment timing cycle is initiated. Only when the other port also receives a valid trigger signal within the acknowledgment timing cycle is a drive signal output to start the load and initiate a running timing cycle. During the running timing cycle, the running timing cycle is reset each time an induction signal is received. When the running timing cycle times out or a manual shutdown command is received, the output of the drive signal stops.

[0018] Correspondingly, the present invention provides a human-computer interaction dual-control intelligent switch control method, comprising the following steps:

[0019] S1: Triggered by a start signal, the sensor module detects the user's entry and outputs a sensor signal, or the manual intervention unit receives the user's operation and outputs a start command signal; after either signal is triggered, the start confirmation timing cycle begins.

[0020] S2: Dual verification, during the confirmation timing period, checks whether another type of trigger signal is received: If the initial trigger signal is a sensing signal, then check whether a start command signal has been received; If the initial trigger signal is a start command signal, then check whether a sensing signal has been received.

[0021] S3: Load start. If dual verification is completed within the confirmation timing cycle, a drive signal is generated and output to turn on the external load and start a running timing cycle.

[0022] S4: Operation maintenance. If a sensing signal is received again from the sensing module during the operation timer cycle, the operation timer cycle will be reset or extended.

[0023] S5: Load shutdown. When the running timer cycle expires or a shutdown command signal is received from the manual intervention unit, the output is stopped to shut down the external load.

[0024] S6: The system is reset. After the load is turned off, the system returns to its initial state and returns to step S1.

[0025] Optionally, the control device supports a manual priority start mode, and the corresponding method includes the following steps:

[0026] P1: Manual start trigger, receives user operation and outputs start command signal through the manual start signal pre-unit: P2: Load operation, in response to the start command signal, generates and outputs a drive signal to turn on the external load and starts a running timer cycle; P3: Operation maintenance. If a sensing signal is received from the sensing module during the operation timer cycle, the operation timer cycle will be reset or extended. P4: Load shutdown. When the running timer cycle expires or a shutdown command signal is received from the manual intervention unit, the output drive signal is stopped to shut down the external load.

[0027] Furthermore, the control method also includes safety monitoring steps:

[0028] It monitors the operating status of external loads in real time; when abnormalities such as overcurrent, overvoltage, short circuit, open circuit, or overtemperature are detected, it generates a fault monitoring signal and sends it to the remote controller; it receives a lock command from the remote controller and responds to the lock command by prohibiting the output of drive signals; after the abnormality is resolved, it receives an unlock command from the remote controller and restores the normal output of drive signals.

[0029] The present invention also provides a dedicated chip for human-computer interaction intelligent switches, which is integrated on a single semiconductor substrate and is used to realize the core control functions of a human-computer interaction dual-control intelligent switch control device.

[0030] Dedicated chips include:

[0031] The induction signal input interface is used to connect the output induction signal of the induction module; Manual signal input interface, used to connect to the command signal of the manual intervention unit; The timing unit is used to provide an internal timing reference; The logic control module circuit has a first input terminal connected to the induction signal input interface and a second input terminal connected to the manual signal input interface. The drive unit is used to output drive signals to control external loads.

[0032] The logic control module is configured to execute a dual-verification control process, implementing the following control logic:

[0033] SC1: When either the induction signal input interface or the manual signal input interface receives a trigger signal, a confirmation timing cycle is started; SC2: Only when both input interfaces receive valid signals within the confirmation timing cycle will the drive unit be triggered to output a drive signal to start the load and initiate a running timing cycle; SC3: If a sensing signal is received again through the sensing signal input interface during the running time period, the running time period will be reset or extended. SC4: When the running timer expires or a shutdown command signal is received through the manual signal input interface, the control drive unit stops outputting drive signals to shut down the load.

[0034] The logic control module is also configured to execute a manual priority control process, implementing the following control logic:

[0035] SD1: When a start command signal is received through the manual signal input interface, the drive unit is immediately triggered to output a drive signal to start the load and start a running timer cycle; SD2: If a sensing signal is received through the sensing signal input interface during the running time period, the running time period will be reset or extended. SD3: When the running timer expires or a shutdown command signal is received through the manual signal input interface, the control drive unit stops outputting drive signals to shut down the load.

[0036] Furthermore, the chip can also integrate monitoring and remote control functions.

[0037] Specifically, the chip also includes:

[0038] The monitoring signal processing unit is connected to the monitoring signal input interface. It is used to acquire and process fault monitoring signals that reflect the external load status. When an abnormality is detected, it sends a drive prohibition signal to the logic control module circuit and generates a monitoring alarm signal. The network signal processing unit connects to a wireless module or broadband such as Ethernet via a remote communication interface (such as UART, SPI, I²C) to report monitoring alarm signals to the remote controller and receive lock or unlock commands from the remote controller. The logic control module is further configured to: control the drive unit to prohibit the output of drive signals when a drive prohibition signal or a lock command is received; and release the prohibition state when an unlock command is received. Beneficial effects

[0039] Compared with the prior art, the present invention has the following significant advantages:

[0040] High protection against false triggers and accurate intent verification: By using user-confirmed startup loads, it fundamentally eliminates false startups caused by environmental interference (such as unauthorized personnel passing by, noise, or pet activity), as well as false triggers where the device starts automatically without the user's consent. This ensures that every startup matches the user's true intent, preventing energy waste at the source.

[0041] Intelligent energy saving and automated, efficient management: During load operation, the system continuously senses the presence of the user and resets the operating timer cycle, achieving intelligent maintenance and automatic shutdown with the principle of "continue when someone is present, turn off when someone leaves." This solves the pain point of traditional manual switches relying on human memory and being easily forgotten to turn off, realizing fully automated energy-saving management.

[0042] User autonomy is prioritized, and operation is flexible and convenient: The solution retains the user's autonomy to actively start or stop the load at any time through manual intervention. It supports a manual priority start mode, ensuring immediate response to the user's immediate operational needs, achieving automated intelligent control combined with user-defined decision-making and flexible switching.

[0043] The system is safe, reliable, and highly manageable: By integrating load status monitoring and remote communication functions, it can achieve real-time detection, rapid identification, and remote alarm for faults such as overcurrent, overvoltage, short circuit, and overtemperature. Remote intervention is possible, greatly improving the system's security, maintainability, and management efficiency.

[0044] With diverse implementation methods and wide application scenarios, this invention provides a complete technical path from application-specific integrated circuits and programmable logic controllers to various discrete components, adapting to different cost control, functional requirements and application scenarios. It can be widely used in public places such as smart homes, public corridors, parks, streets, parking lots, and warehouses where safety, energy saving and convenience need to be taken into account. Attached Figure Description

[0045] Figure 1 : A schematic diagram of the architecture of the human-computer interaction dual-control intelligent switch control device of the present invention.

[0046] Figure 2 : Flowchart of the core control logic of this invention.

[0047] Figure 3 : Circuit block diagram of a multi-channel dual-control device based on a programmable logic control module.

[0048] Figure 4 Schematic diagram based on AND gate logic circuit.

[0049] Figure 5 : Circuit diagram of a dual-control switch based on a sensing chip and a thyristor.

[0050] Figure 6: A dual-mode switch circuit diagram based on the coordinated control of relays and MOSFETs.

[0051] Figure 7 : Circuit diagram of a dual-control intelligent switch based on voice control and analog comparator.

[0052] Figure 8 : A schematic diagram of the structure of a dedicated integrated circuit chip of the present invention. Detailed Implementation

[0053] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without inventive effort are within the scope of protection of this invention.

[0054] The human-machine interactive dual-control intelligent switch control device and its controlled load described in this invention can operate in a DC or AC power supply environment after appropriate rectification, filtering, and voltage regulation. Unless otherwise stated, the state descriptions such as "high level," "conduct," "first," and "second" in the following text are exemplary. Depending on the specific circuit design, their effective logic levels can be interchanged, and the pin numbers of different components are independent and do not represent a physical location correspondence.

[0055] Example 1: Basic dual-control logic and device architecture.

[0056] This embodiment combines Figure 1 and Figure 2 This paper elucidates the basic control logic and overall architecture of the human-computer interaction dual-control intelligent switch of the present invention.

[0057] like Figure 1 As shown, the control device includes: a sensing module 101, a control unit 102, a manual intervention unit 103, and a timing unit 104.

[0058] The sensing module 101 is used to detect the presence or activity of a user within a preset area (e.g., through infrared, microwave, sound, light changes, etc.) and output a sensing signal; the manual intervention unit 103 is used to receive the user's active operation (e.g., pressing, touching, voice commands, wireless remote control, etc.) and output a start command signal or a stop command signal; the timing unit 104 is used to provide the control unit 102 with the timing reference required to realize the confirmation timing cycle and the running timing cycle; the control unit 102 is electrically connected to the sensing module 101, the manual intervention unit 103 and the timing unit 104 respectively, and is used to output a drive signal to control the on / off of the external load 105 according to the input signal and the timing reference provided by the timing unit 104. The timing unit 104 can be physically set independently or integrated into the control unit 102 or the sensing module 101.

[0059] The control unit 102 is configured to perform, for example Figure 2 The dual-verification startup control logic is shown below:

[0060] Start-up trigger: The initial trigger is considered to be when either the sensing signal (S_sense) output by the sensing module 101 or the start command signal (S_manual_on) output by the manual intervention unit 103 is valid.

[0061] Confirmation timing: When the initial trigger is valid, the control unit 102 starts a confirmation timing period T_confirm of a preset duration (e.g., 1-30 seconds).

[0062] Double verification: Within the confirmation time period T_confirm, the system checks whether another type of signal has been received. That is: if the initial trigger is S_sense, then wait for S_manual_on; if the initial trigger is S_manual_on, then wait for S_sense.

[0063] Load start-up and running timer: If another signal is successfully received within T_confirm, the double verification is completed. At this time, the control unit 102 outputs a drive signal to turn on the external load 105, and simultaneously starts a running timer cycle T_run (e.g., 1-20 minutes) according to the timing unit 104.

[0064] Operation maintenance: If the control unit 102 receives a valid sensing signal S_sense from the sensing module 101 again during the operation timing cycle T_run, it controls the timing unit 104 to reset T_run to its initial value and restart timing, or to extend the timing, thereby maintaining the operation of the load.

[0065] Load shutdown: When the running timer cycle T_run times out naturally, or when the shutdown command signal S_manual_off is received from the manual intervention unit 103 at any time, the control unit 102 stops outputting the drive signal and shuts off the external load 105.

[0066] System Reset: After the load is turned off, the control logic is reset, and the system returns to the standby monitoring state of step "Start-up Trigger".

[0067] Optionally, the control device also supports a user-initiated priority control mode. In this mode, the control unit 102 is configured to:

[0068] Once S_manual_on is received, a drive signal is immediately output to start the load and T_run is started according to the timing unit 104; the subsequent operation maintenance and shutdown logic is the same as the above dual verification mode.

[0069] like Figure 2 As shown, the user-priority start control mode, i.e., the user-priority start command signal, can be considered as an optional logical path that skips the double verification step and directly executes the load start and run timing steps when the initial trigger is S_manual_on. The two modes can be selected via hardware jumpers, software configuration, or a dedicated mode switch.

[0070] The monitoring signal processing unit is used to collect and process fault monitoring signals that reflect the working status of the external load. The fault monitoring signals include at least one of the abnormal information such as overcurrent, overvoltage, short circuit, open circuit or overtemperature. Based on the judgment result, it outputs a drive prohibition command signal, i.e. a lock command signal, and generates a monitoring alarm signal.

[0071] The network signal processing unit is used to report monitoring alarm signals to the remote controller via the communication link and to receive lock or unlock commands from the remote controller.

[0072] Example 2: Implementation based on programmable logic controller (PLC / MCU):

[0073] This embodiment combines Figure 3 This provides a flexible implementation method based on a programmable logic controller (such as a microcontroller MCU), which is suitable for scenarios with complex functions, requiring control of multiple loads, or having network communication capabilities.

[0074] like Figure 3As shown, the core of the device is a microcontroller U (MCU). The output of the sensing module (such as a pyroelectric infrared PIR module) is connected to a general-purpose input port GPIO_1 (PA0) of the MCU. The first manual intervention unit (such as a tactile switch) is connected to GPIO_2 (PA1) to control the first load; the second manual intervention unit is connected to GPIO_3 (PA2) to control the second load. The two general-purpose output ports of the MCU, GPIO_4 (PB1) and GPIO_5 (PB2), control the first load switch K1 and the second load switch K2 respectively through driver circuits (such as transistors, MOSFETs, or relays). For safety monitoring, a sampling resistor can be connected in series in the first load circuit, and its voltage signal is amplified / conditioned and sent to the MCU's analog-to-digital converter channel ADC_1 (PA3); the second load is similarly connected to ADC_2 (PA4) to monitor faults such as overcurrent and short circuit. Furthermore, a temperature sensor can be set to monitor the load temperature, and its signal can also be connected to the MCU's ADC channel. A mode selection switch SW_mode is connected to GPIO_6 (PB0) to switch between "dual authentication mode" and "user-initiated priority control mode". Optionally, the MCU can connect its serial communication interface (such as UART, SPI, I2C, or wireless module G via a remote network port) through the network module G to achieve data interaction with the remote controller.

[0075] The MCU program executes the following process:

[0076] 1. System initialization, read SW_mode status, configure ports and timers.

[0077] 2. Continuously monitor the input status of GPIO_1, GPIO_2, and GPIO_3 in the main loop.

[0078] 3. If SW_mode is set to two-factor authentication:

[0079] a. When a valid transition occurs in either GPIO_1 (sensing) or GPIO_2 / GPIO_3 (manual start), the internal timer Timer_Confirm (corresponding to T_confirm) is started. b. During the Timer_Confirm timing period, check for another type of signal transition (e.g., check for manual start after sensor triggering, or vice versa). c. If double verification is completed before the Timer_Confirm timeout, the corresponding output port (PB1 or PB2) is set to enable the load and the internal timer Timer_Run (corresponding to T_run) is started.

[0080] 4. If SW_mode selects user-first startup mode:

[0081] When a valid transition occurs in GPIO_2 or GPIO_3 (manual start), the corresponding output port is directly set to enable the load and Timer_Run is started.

[0082] 5. Runtime maintenance logic (shared by both modes):

[0083] During the Timer_Run timer, whenever a valid transition occurs on GPIO_1 (sensor), Timer_Run is reset (the initial value is reloaded and the timer is restarted).

[0084] 6. Shutdown logic:

[0085] a. If Timer_Run times out naturally, clear the corresponding output port and shut down the load; b. If a long press signal of the corresponding manual intervention unit is detected (e.g., a continuous low level of GPIO_2 / GPIO_3 for more than 1.5 seconds, identified as S_manual_off), the output port is immediately cleared and the load is turned off; c. If an abnormal load current (exceeding the threshold) is detected by ADC_1 / ADC_2, or an over-temperature is detected by the temperature sensor, the system will immediately shut down and output an alarm signal (such as driving an LED to flash or a buzzer to sound) through the GPIO_7 (PD) port. At the same time, the wireless module or gateway G will report a remote alarm indication through the communication interface.

[0086] 7. After shutdown, the system resets the relevant status flags and returns to step 2.

[0087] Example 3: Hardware Implementation Based on AND Gate Logic Integrated Circuits

[0088] This embodiment combines Figure 4 This demonstrates how to implement the core dual-verification logic / user-initiated priority control mode of this invention using basic digital logic gates, which has the advantages of low cost, fast response, and no programming required.

[0089] See Figure 4 The sensing module uses a built-in delay infrared pyroelectric (PIR) module (which outputs a high level after sensing triggering, and the built-in delay can be up to 40 seconds, which is the confirmation timing period T1), connected to one input terminal (1) of an AND gate U1.

[0090] The manual intervention unit includes a start tactile switch SK1 and a stop tactile switch SK2. One end of SK1 is connected to VCC, and the other end is connected to another input terminal (2) of AND gate U1 through a current-limiting resistor R2. At the same time, this point is grounded through capacitor C2 to achieve debouncing delay. Resistor R3 is a circuit for discharging the charge of C2, and R3C2 is the first RC network. SK2 is used for stop, with one end connected to input terminal (2) of U1 and the other end connected to ground.

[0091] The output terminal (3) of the AND gate circuit is connected to the load switch Q, which can be a semiconductor power device or component such as a MOS transistor; its connection node is connected to the second parallel RC network, and the other end of the resistor R1 and capacitor C1 in the RC network is grounded.

[0092] Working principle:

[0093] 1. In the dual-verification start control logic mode: the output of U1 is connected to the input of U1 via a unidirectional diode VD1 (2).

[0094] Standby: When no one is in use, the PIR output is low. As long as one input of the AND gate U1 is low, the output of U1 (3) will be low, the external load switch Q (such as MOSFET, relay, power semiconductor, etc.) will be cut off, and the load will be de-energized.

[0095] Dual verification start: When someone enters the sensing area, the PIR module outputs a high-level pulse. A continuous high-level signal is formed at the first input terminal of U1 (corresponding to the start of the T1 confirmation timing cycle). At the same time, the user presses the start switch SK1 during this cycle, making the second input terminal of U1 high-level. With both the first and second input terminals of U1 at high levels, U1 outputs a high level, which charges C1 and drives the load switch Q to conduct, starting the load. At this time, the high level output of U1 is fed back through diode VD1, maintaining the high level of the second input terminal (2) to achieve self-holding.

[0096] If the sensing module has no sensing signal output at this time, U1 has no high level output, C1 starts to discharge from R1, and the timing cycle T2 starts timing.

[0097] Operation maintenance and reset: During the load startup operation at time T2, if the PIR detects human activity again, it will output a pulse again to charge C1 (and charge C2 via VD1), thereby resetting the timer at time T2 and maintaining load operation. At this time, the first and second RC networks form a common operating timer cycle, and the duration of the T2 cycle is longer than that of T1. This achieves "continuation as soon as a person is present".

[0098] Load shutdown: Load is shut down when any of the following conditions are met:

[0099] Firstly, if there is no new induced signal during the T2 cycle, the first input terminal of U1 goes low, the output of U1 goes low, C1 discharges to a low level through R1, and Q is cut off.

[0100] Secondly, when the user presses the off switch: the normally open tactile switch SK2 is grounded, pulling all the second input terminals of C1, C2, and U1 low, releasing the self-locking, causing the output to go low, and Q to be cut off.

[0101] System reset: After the load is turned off, the circuit returns to its initial state and waits for the next trigger.

[0102] 2. In user-initiated priority control mode: the unidirectional diode VD1 from the output terminal of U1 to the second input terminal is canceled out, i.e., short-circuited;

[0103] When the user presses the normally open tactile switch SK1, VCC is turned on to charge C2 and C1. C1 is at a high level, Q is turned on, and the load runs, realizing the user-priority control mode.

[0104] The subsequent control logic, such as "running maintenance and reset, load shutdown, system reset", is the same as the dual-verification startup control logic.

[0105] Features and Variations of the Solution

[0106] This embodiment uses a simple AND gate logic circuit to physically implement the core logic of dual verification triggering of sensor signals and manual signals within the confirmation window. The sensor module can also be replaced with a microwave radar, voice control, or light control module; the manual intervention unit can also adopt a touch screen, wireless remote control, or voice recognition module.

[0107] Example 4: Implementation based on dedicated sensing chip and thyristor

[0108] This embodiment combines Figure 5 By utilizing mature human body sensing dedicated control chips and thyristor devices, a high-efficiency dual-control switch solution is constructed.

[0109] like Figure 5 As shown, the sensing module includes a PIR probe and a dedicated sensing control chip U2 (such as BISS0001, which needs to be configured for repeatable triggering mode). Among the peripheral components of U2, the values ​​of resistor R5 and capacitor C5 determine the duration of its high-level output, i.e., the running timing cycle T_run (T2) of this invention. The output terminal of U2 (active high) is connected to the anode of the silicon controlled rectifier (thyristor) D, the PIR is connected to the trigger terminal 1 of U2, and R5 is connected to the timing interface terminal 2.

[0110] The manual intervention unit includes an activation tactile switch SK1, an deactivation tactile switch SK2, and a corresponding resistor-capacitor network (R4, C3). One end of SK1 is connected to the DC trigger power supply VCC through a current-limiting resistor R4, and the other end is connected to the control electrode of the silicon controlled rectifier (SCR) D. Resistor R4 and capacitor C3 form a shaping network for the manual trigger pulse, ensuring that a trigger pulse of effective width is generated when SK1 is pressed.

[0111] Working principle:

[0112] Standby and Triggering: When the PIR detects human movement, U2 is triggered, and output terminal 4 of U2 goes high, providing a positive potential to the anode of the thyristor D. At this time, since there is no trigger current at the control electrode, the thyristor D is in the off state, and the load does not work.

[0113] Manual start confirmation (dual verification): During the validity period of the high level output of U2 (i.e., within the sensing signal window), the user presses the start switch SK1. The trigger power supply VCC injects trigger current into the control electrode of the SCR D through SK1 and R4. The SCR D conducts under the condition of positive voltage applied to the anode and a positive trigger signal applied to the control electrode, and the load is powered on and started.

[0114] Operation Maintenance and Timing Reset: After the load starts, as long as the output of U2 remains high due to continuous human activity (i.e., PIR repeatedly triggers U2, causing it to reset the T_run timer through the external RC network capacitor C5), the anode of the thyristor D maintains a positive voltage, keeping it conducting. This process achieves the reset of the operation timing cycle T_run by a new induced signal.

[0115] Load shutdown:

[0116] Automatic shutdown: When personnel leave and the high-level output of U2 for the duration T_run ends, the output of U2 flips to a low level, and the anode voltage of the thyristor D disappears. When the load current flowing through the thyristor D is lower than its holding current, the thyristor D automatically turns off when the current crosses zero, and the load stops working.

[0117] Manual shutdown: The user presses the shutdown switch SK2. SK2 is connected in parallel between the anode and cathode of the thyristor D. When pressed, it momentarily short-circuits the thyristor, causing its current to drop below the holding current and forcibly shutting it off. Alternatively, the normally closed tactile switch SKD1 can also be connected in series in the anode circuit of the thyristor D. When pressed, it cuts off the anode current to achieve shutdown.

[0118] Protection and Auxiliary Circuits: Resistor R6 and capacitor C4 connected to the trigger terminal of U2 constitute the power-on trigger circuit. The node formed by capacitor C5 and resistor R5 is connected to the set pin 3 of U2. After C5 is reset, it is in the set state. Pin 5 is grounded (repeated trigger setting function), which is the key to realizing the resettable running timer T_run. If the subsequent load switch Q uses a high-power switching device such as a relay, and the direct driving capability of the sensing signal processor is insufficient, a driving transistor can be added to the output terminal of the sensing signal processor. The output of the sensing signal processor is connected to the base of the transistor. After the transistor is turned on, its collector / emitter circuit provides sufficient current to the relay coil to achieve reliable engagement. A thyristor is connected in series between the transistor and the load, and its main circuit controls the on / off of the load power supply. This structure utilizes the current gain of the transistor to achieve stable control of a small signal on a large current load.

[0119] Example 5: Dual-mode collaborative switch based on sensing module and relay.

[0120] This embodiment combines Figure 6 This paper provides a specific circuit to illustrate how to implement two control logics, dual-authentication boot and user boot priority, on the same hardware platform.

[0121] I. Circuit Structure and Module Correspondence:

[0122] I. Circuit Structure and Module Correspondence like Figure 6 As shown, the circuit mainly includes the following functional modules: 1. Sensing Module: An infrared pyroelectric (PIR) sensor module is used. Its output is grounded via a first RC network consisting of resistor R8 and capacitor C6. This RC network realizes the confirmation timing cycle T1 during the startup phase and switches to the operation timing cycle T2 during the load operation phase. Both are determined by the same set of R8 and C6 parameters, which are used to filter, shape, and delay the sensed signal to realize startup determination and operation cycle management.

[0123] 2. Manual intervention unit, including: Normally open switch SK1: used for dual-verification triggering; normally open switch SK11: used for manual priority start; normally closed switch SK4: used for forced shutdown.

[0124] 3. Control unit: An N-channel MOSFET Q1 is used, whose gate receives the induced signal shaped by the first RC network, which is used to control the on / off state of the relay coil.

[0125] 4. Timing and Status Maintenance Unit: Confirmation Timing Unit: Implemented by a second RC network consisting of resistor R9 and capacitor C7, working in conjunction with switch SK1, charging C7 during the period when SK1 is pressed, forming the confirmation timing cycle T1.

[0126] Operation maintenance and self-locking unit: The auxiliary normally open contacts J1 / J2 of relay KJ form an electrical self-locking circuit, which enables the load to remain energized after the initial trigger signal is removed.

[0127] 5. Load drive unit: It adopts relay KJ, whose main control normally open contacts J3 / J4 are used to control the on and off of the load power supply.

[0128] Protection and optimization measures: A reverse bias diode VD2 is connected in parallel across the relay coil to suppress the induced electromotive force during the turn-off process.

[0129] A current-limiting resistor R7 is connected in series in the circuit between nodes J1 / J2 and SK1, SK4 to reduce the holding current, thus balancing energy saving and relay lifespan.

[0130] II. Working principle of dual-authentication startup mode This mode embodies the logic of "collaborative verification," meaning that both manual confirmation and sensor triggering are required to start the load.

[0131] 1. Pre-trigger and confirmation timing: When the user presses the normally open switch SK1, the power supply charges the capacitor C7 through the current-limiting resistor R10, and the circuit enters the confirmation timing period T1 determined by R9 and C7; Alternatively, when the PIR module detects human activity within the sensing area, its output signal charges capacitor C6 via the first RC network, initiating the sensing confirmation timing cycle. 2. Collaborative Verification and Startup: Within the confirmation timing period T1, if the PIR module detects human activity and outputs a valid sensing signal, this signal raises the voltage of capacitor C6 via the first RC network, thereby causing the gate potential of MOSFET Q1 to reach the conduction threshold, and Q1 turns on. Even if SK1 is released at this time, the discharge process of C7 can still maintain Q1 on until the relay KJ coil is energized and engaged.

[0132] Furthermore, when the induction confirmation timing cycle has been established and the voltage of C6 reaches the gate conduction threshold of MOSFET Q1, the user can press SK1 to allow the power supply to provide drive current to the gate of Q1 through contacts K1 / K2, causing Q1 to conduct immediately, thereby realizing the energizing process of relay KJ.

[0133] After the relay is energized, its auxiliary normally open contacts J1 / J2 close, forming an electrical self-locking circuit, so that KJ remains energized after C7 has finished discharging, and the load is energized and started through the main control contacts J3 / J4.

[0134] 3. Operation Maintenance and Shutdown: After the load starts, the circuit enters the operation timing cycle T2 determined by R8 and C6. During this period, if the PIR module detects human activity again, its output signal will charge C6, thereby resetting or extending T2, maintaining the conduction state of Q1 and the operation of the load.

[0135] Shutdown can be achieved in any of the following ways: a) The disappearance of the sensing signal causes T2 to time out, C6 discharges below the cutoff threshold of Q1, Q1 turns off, and the relay releases; b) Press the normally closed shut-off switch SK4 to directly cut off the relay coil current, causing KJ to release.

[0136] Any of the above situations will cause the load to lose power.

[0137] III. Working Principle of User Startup Priority Control Mode In this mode, user-initiated actions have priority and can start the load directly even when there is no sensor signal.

[0138] 1. Direct Start: The user simultaneously presses normally open switches SK11 and SK1. SK11 applies power supply VCC to the gate of MOSFET Q1 through current-limiting resistor R and debouncing capacitor C6, causing Q1 to turn on immediately without waiting for the PIR module to output a sensing signal.

[0139] SK1 provides the initial pull-in current to the coil of relay KJ. After KJ is pulled in, its auxiliary contacts J1 / J2 close to form a self-locking mechanism, and the load starts immediately.

[0140] 2. Subsequent Intelligent Maintenance: After the load starts, the system enters a running timer cycle (determined by parameters R8 and C6). During this period, if the PIR module detects human activity, its output signal can charge C6 to reset or extend T2, maintaining Q1 conduction and realizing the "continue as soon as a person is present" function.

[0141] 3. Shutdown: The shutdown logic is completely consistent with the dual authentication mode, and can be achieved by sensing timeout or pressing SK4.

[0142] IV. Summary and Variations of the Plan In this embodiment, within the same hardware architecture, two control logics—dual-verification startup and user-priority startup—can be implemented by the user operating different combinations of manual switches (SK1 and SK11).

[0143] In addition to PIR, the sensing module can also be replaced by microwave radar, voice-activated sensors, etc., to adapt to different application scenarios.

[0144] This circuit uses relay contacts to control the load, which has the advantages of excellent electrical isolation performance and strong driving capability. It can also be configured with multiple pairs of normally open contacts (such as J5 / J6, J7 / J8, etc.) to realize one-button control of multiple loads.

[0145] This solution combines reliability, flexibility, and scalability, making it suitable for intelligent control applications of lighting, ventilation, or other electrical equipment that require both automated sensing and manual priority control.

[0146] Example 6: Dual-control switching circuit based on voice control and analog comparator.

[0147] This embodiment combines Figure 7 This paper presents a specific implementation scheme based on sound triggering and analog comparator circuitry, suitable for enclosed or stationary scenarios (such as cubicles) that are difficult to detect by infrared and radar. By introducing dual-confirmation start-up with voice control, runtime reset, and manual shutdown logic, combined with a positive feedback self-locking mechanism, the reliability and practicality of the system are improved.

[0148] I. Circuit Module Composition:

[0149] Sound acquisition module: Includes an electret microphone (MIC) and its bias resistor R12. The positive terminal of the MIC is connected to VCC via R12, and the negative terminal is grounded. The connection point between the MIC and R12 is connected to the non-inverting input 3 of the operational amplifier U3A through a coupling capacitor C10.

[0150] Signal amplification module: An operational amplifier U3A (such as half of an LM358) is used to construct a non-inverting amplifier. Its inverting input terminal 2 is connected to the node of resistors R14 and R15, and the other end of R15 is grounded to provide a reference voltage Vref.

[0151] Delay hold module (corresponding to confirmation / run timing): Output terminal 1 of U3A charges capacitor C9 via diode VD3. C9 is connected in parallel with discharge resistor R20, forming an RC delay network. The voltage on C9 is sent to the non-inverting input terminal 5 of comparator U3B, and remains at a high level for a certain period of time (T_confirm / T_run) after the sound signal disappears.

[0152] Comparison and Manual Intervention Module: A voltage comparator is constructed using operational amplifier U3B. The reference voltage network for its inverting input 6 includes: pull-up resistor R16, filter capacitor C8, start confirmation tactile switch SK1 (grounded through R17), and turn-off tactile switch SK2 (connected to VCC).

[0153] Feedback Maintenance and Output Module: The output of U3B at terminal 7 drives the gate of MOSFET Q2 via resistor R21. The drain of Q2 is connected to the inverting input terminal 6 of U3B through resistor R11, forming positive feedback and achieving self-locking of the output state. The output of U3B also drives the subsequent load switch Q.

[0154] Anti-interference enhancement design: A feedback resistor R13 is introduced between output terminal 1 and inverting input terminal 2 of U3A. A feedback resistor R18 is introduced between output terminal 7 and non-inverting input terminal 5 of U3B, forming a Schmitt trigger to improve noise immunity. Resistor R19 provides a DC discharge path for C10.

[0155] II. Working Principle

[0156] Initial standby state: When there is no sound signal, U3A output is low, C9 voltage is low, the voltage at the non-inverting input of U3B is lower than that at the inverting input, U3B output is low, Q2 is cut off, and the load is turned off.

[0157] Double confirmation start: A valid acoustic signal causes U3A to output a positive pulse, charging C9 and increasing the voltage at the non-inverting terminal of U3B.

[0158] At this time, if the user presses the start confirmation switch SK1 while the C9 voltage is maintained at a high level (within T_confirm), SK1 will instantly pull the inverting input of U3B low.

[0159] When the voltage at the non-inverting input of U3B is higher than the voltage at the inverting input, the output of U3B flips to a high level. This high level drives the load and also turns on Q2. After Q2 turns on, it continuously pulls the inverting input of U3B low through R11, forming a self-locking mechanism. Even if SK1 is released, the output remains high and the load continues to operate.

[0160] Operation Maintenance (Induction Reset Timing): During load operation, if a valid acoustic signal is detected again, U3A will output a pulse to charge C9 again, extending the discharge time of C9 (i.e., resetting the operation timer T_run), thereby maintaining the high level output of U3B and keeping the load running.

[0161] Load shutdown: Automatic shutdown (delayed end): When the sound signal disappears and C9 discharges through R20 to a voltage lower than the voltage at the inverting terminal of U3B, the output of U3B flips to a low level, Q2 is turned off, the latch is released, and the load is shut off.

[0162] Manual forced shutdown: Press the shutdown switch SK2 during operation. SK2 will directly lead VCC to the inverting terminal of U3B, instantly raising its voltage and forcing the output of U3B to immediately switch to a low level, shutting off the load.

[0163] The manual start switch SK11 and capacitor CX are connected in series for user-priority start control. When both start switches SK1 and SK11 are pressed simultaneously, the user-priority start control logic is implemented.

[0164] III. Extended Implementation Methods

[0165] A mature sound and light control switch can be used for modification, removing its photosensitive element (or replacing it with a fixed resistor), so that it only retains the sound control function and serves as the sensing module of this circuit.

[0166] In a further extended embodiment, after implementing the mature voice-controlled switch technology, the microphone can be replaced by a photosensitive element. This photosensitive element generates an alternating current in response to sudden changes in light and shadow, which is then coupled to the non-inverting input of U3 via C10, achieving the same purpose as voice-changing control using a microphone. If increased sensitivity is required, a transistor can be added after C10 to amplify the gain, thus realizing its function as a light-controlled sensor.

[0167] The manual switches SK1 and SK2 can be replaced with touch modules, voice recognition, or wireless remote control receiver modules to adapt to diverse scenarios.

[0168] Application case of dedicated chip:

[0169] I. Chip Overview

[0170] This invention relates to a dedicated integrated circuit chip for a human-machine interactive dual-control intelligent switch (hereinafter referred to as "this chip"). It integrates core functions such as sensing signal processing, manual command recognition, timing control, drive output, fault monitoring signal processing, and network communication into a single chip, forming a complete solution with high reliability, low power consumption, and small size. This chip supports two main operating modes: a default dual-verification startup mode and a user-priority startup mode. It also integrates fault self-protection and remote management functions, and can be widely used for intelligent control of lighting, home appliances, and electronic and electrical equipment in public places.

[0171] II. Chip Architecture and Functional Modules

[0172] like Figure 8 As shown, this chip adopts a modular architecture and mainly includes the following functional units:

[0173] 1. Timing Unit: Responsible for generating confirmation timing cycles and running timing cycles.

[0174] 2. Signal Input Interface: Induction Signal Input Interface: Used to receive high / low level or pulse signal signals output from external sensing modules (such as microwave radar, infrared sensors, sound / light control devices or electromagnetic sensors).

[0175] Manual signal input interface: used to receive start command signals from manual intervention unit operation unit (such as tactile switch SK5 or remote control receiver, speech record recognition), supports level or pulse input (or turn-off command signal input from remote control receiver, speech record recognition, etc.).

[0176] Drive signal output interface: Used to output drive signals to drive external loads.

[0177] Control reset interface (optional): Used to receive manual shutdown commands (such as via SK6 operation), which can directly disconnect the load.

[0178] External configuration optional interface: Interface for configuring dual-authentication control logic / user-priority startup control mode (optional) 3. Logic Control Module: As the core control unit, it is used to execute the following control logic: a) Implement a two-factor authentication startup mechanism in the default mode:

[0179] When any signal from the sensing or manual interface is valid, a confirmation timing cycle is initiated. If another interface also detects a valid signal during this cycle, the verification is successful, the drive unit starts the load, and enters the running timing cycle. If a sensor signal is received again during the running timer cycle, the running timer will be reset. When the operation times out or a manual shutdown command is received, the output drive signal is stopped and the load is shut down.

[0180] b) In user-priority startup mode (which can be switched via an external configuration signal):

[0181] The manual start signal can directly trigger the load to run and start the running timer cycle; The timing can be reset by sensing the signal during operation;

[0182] The shutdown conditions are the same as the default mode.

[0183] 5. Drive unit: Controls the on / off state of external loads (such as lamps, motors or electrical appliances) according to the instruction signals of the logic control module.

[0184] 6. Extended Function Interface: Monitoring Signal Processing Interface: Used to connect to an external monitoring unit H (such as a current sensor, resistance voltage sampling or temperature detection circuit) to collect load current, voltage or temperature parameters in real time. The monitoring signal processing unit can be used to determine faults such as overcurrent, overvoltage, short circuit, and open circuit, and output fault alarm signals. The monitoring signal processing unit includes comparators and AND gate circuits (such as CMP1 / CMP2 and U6).

[0185] Network signal processing unit: reports alarm signals to remote controllers (such as gateways or mobile apps) via communication interfaces; receives remote lock / unlock commands and forwards them to the logic control module; the logic control module enables or disables drive command signal output accordingly.

[0186] III. Chip Logic Flow

[0187] This chip operates according to the following steps:

[0188] 1. Signal Monitoring: The control unit continuously monitors sensor and manual input signals; 2. Startup Confirmation: A confirmation timer cycle (e.g., 5 seconds) begins when a valid signal is received at any interface. 3. Collaborative Verification: Continuously monitor the signal from another interface during the verification period. If the initial sensing is valid, a valid manual signal must be detected within that cycle. If manual activation is enabled first, then a valid sensing signal must be detected within that cycle. If the conditions are met, the verification passes and the process enters the driver phase; otherwise, it times out and resets, waiting for the next trigger.

[0189] 4. Load-driven and operation management:

[0190] Once the verification is successful, the load will be started and the running timer cycle will begin (e.g., 30 minutes). If a valid signal is detected again during operation, the operation timer will be reset; The load is shut down when the operation times out or a manual shutdown command is received.

[0191] IV. Key Submodule Circuit Examples

[0192] To illustrate the hardware implementation, the circuit structure of a typical submodule is listed below: 1. Two-factor authentication module:

[0193] Using AND gate U4, its two inputs are connected to the manual and sensing signal interfaces respectively. The output is fed back to the manual signal input terminal via diodes VD5 and VD4 to form a self-holding circuit. When both input interfaces are high, U4 outputs a high level. The manual confirmation timing is implemented by the first RC network circuit composed of C11 and R22, and the sensing confirmation timing period is implemented by the built-in sensing signal width pulse signal delay period (which can be preset to a delay of up to 40 seconds) of the sensing module.

[0194] 2. Runtime and reset mechanism:

[0195] The timing cycle is achieved by an RC network consisting of R23 (discharge resistor) and C12 capacitor.

[0196] After successful verification, AND gate U4 outputs a high level, which charges C12 through diode VD4, making one end of OR gate U5 high (the other end grounded). According to the OR gate logic, it outputs a high level to the logic control unit DSP. The DSP sends a drive command signal to turn on MOSFET Q and start the load.

[0197] When there is no new sensing signal, C12 discharges through R23, the voltage drops to the low-level threshold of U5, U5 outputs a low level, Q is turned off, the load is turned off, and the timing ends.

[0198] If a sensing signal is received again during operation, U4 will output a high level again: C12 is charged through VD4 to reset the timing; and C11 is charged through diode VD5 (one-way conduction) to maintain the high level of the manual input terminal of U4, ensuring that U4 can respond to the sensing signal again and maintain the output high level during the operation cycle, satisfying the subsequent logic judgment.

[0199] 3. Load shutdown mechanism:

[0200] In addition to shutting down due to timeout during operation, the system can also receive a manual signal from SK6 via the control reset interface to pull down the voltage of C12, causing U5 to output a low level. This disables the DSP's drive instruction signal from being sent to the drive unit, preventing it from outputting drive signals. Simultaneously, C11 discharges, and U4 resets.

[0201] 4. Fault protection and remote management:

[0202] After sampling the load circuit signal, H outputs a monitoring signal. This signal is then processed by the monitoring signal processing unit. When a fault monitoring signal occurs, a monitoring alarm signal is output, which is then controlled by the DSP to turn off Q, thereby cutting off the drive signal output. The network signal processing unit G supports communication with remote devices, reporting abnormal monitoring alarm signals or receiving lock / unlock commands via the remote communication interface, and inputting and controlling the on / off state of the drive circuit through the DSP.

[0203] 5. Implementation of user-priority mode: Connect the SK5 manual switch start signal to the connection node between the second RC network and VD4 via the input interface, and short-circuit VD5; (Optional interface switching via external configuration) Operating SK5 can directly charge C12, triggering U5 to output drive command signal and start the load; after releasing SK5, C12 discharges and the running timer starts; operating SK6 can quickly discharge C12 to achieve manual shutdown; during operation, the sensing signal can reset the timer, and the shutdown logic is the same as the default mode; mechanical structures such as rocker switches are used to avoid short circuits caused by simultaneous operation of SK5 and SK6.

[0204] V. Technological Advantages

[0205] High reliability: Based on a hardware dual verification mechanism, it significantly reduces the probability of false triggering; Intelligent energy saving: The running timer can be reset to achieve the energy-saving effect of "lights on when people are present, lights off when people leave"; Flexible interaction: Supports multiple modes such as local manual, sensor control, fault protection and remote management; Comprehensive security protection: Integrates hardware-level fault detection, driver locking and hierarchical alarm functions to build a reliable security protection system; High integration: A single chip realizes multiple functions, reducing external components and reducing system power consumption and size.

Claims

1. A human-computer interactive dual-control intelligent switch control device, characterized in that, include: The sensing module is used to detect when a user enters a preset area and generate a sensing signal; The manual intervention unit is used to receive user input and generate start or stop command signals. The timing unit is used to provide the time timing circuit; The control unit is electrically connected to the sensing module, the manual intervention unit, and the timing unit, respectively. The control unit is configured to execute a dual-verification startup control logic, specifically including: Upon receiving either a sensing signal from the sensing module or a start command signal from the manual intervention unit, the confirmation timing cycle is initiated. Upon receiving another signal within the confirmation timing period, a drive signal is generated and output to enable the external load to operate and to start the running timing period. If a sensing signal is received again from the sensing module during the running time period, the running time period is reset or extended. When the running timer expires, or when a shutdown command signal is received from the manual intervention unit, the output of the drive signal is stopped to shut down the operation of the external load.

2. The human-computer interaction dual-control intelligent switch control device according to claim 1, characterized in that, The control unit is also configured to support another user-initiated priority control mode, in which: Upon receiving the start command signal from the manual intervention unit, the system generates and outputs the drive signal to start the external load and initiates a running timer cycle. If a sensing signal is received from the sensing module during the running time period, the running time period is reset or extended. When the running timer expires, or when a shutdown command signal is received from the manual intervention unit, the output of the drive signal is stopped to shut down the external load.

3. The human-computer interactive dual-control intelligent switch control device according to claim 1 or 2, characterized in that, Also includes: The monitoring signal processing unit is used to collect and process fault monitoring signals that reflect the working status of the external load. The fault monitoring signals include at least one of the abnormal information such as overcurrent, overvoltage, short circuit, open circuit or overtemperature. Based on the judgment result, the unit outputs a drive prohibition command signal and generates a monitoring alarm signal. The network signal processing unit is used to report the monitoring alarm signal to the remote controller via a communication link, and to receive lock or unlock commands from the remote controller. The control unit further includes a logic control module, which is used to prevent the output of the drive signal when the drive prohibition command signal or the lock command is received.

4. The human-computer interaction dual-control intelligent switch control device according to claim 1, characterized in that: The sensing module is selected from at least one of infrared pyroelectric sensors, sound-controlled sensors, photosensitive sensors, microwave radar human body sensors, and electromagnetic sensors. The manual intervention unit includes at least one of a tactile switch, a touch module, a wireless remote control, or a voice recognition receiver module; The control unit includes, but is not limited to, at least one of the following: AND gate logic integrated circuit, programmable logic control module, electromagnetic relay, field-effect transistor circuit, transistor circuit, and thyristor circuit.

5. The human-computer interactive dual-control intelligent switch control device according to claims 1 and 2, characterized in that: The control unit and the timing unit are integrated into the same programmable logic control module; The programmable logic control module is provided with an external configuration interface, which is used to receive external configuration signals. The programmable logic control module is configured as follows: In response to the external configuration signal, the dual-authentication startup control logic or the user startup priority control mode is selectively executed.

6. The human-computer interactive dual-control intelligent switch control device according to claim 5, characterized in that, The programmable logic control module further includes: The third signal input interface is electrically connected to the monitoring signal processing unit and is used to receive the fault monitoring signal; A remote network interface is electrically connected to the network signal processing unit; The programmable logic control module is further configured as follows: When the fault monitoring signal is received through the third signal input interface, or when a lock command is received from the remote controller through the remote network interface, the output of the drive signal through the drive output interface is prohibited.

7. The human-computer interactive dual-control intelligent switch control device according to claim 1, characterized in that: The output terminal of the sensing module is electrically connected to the first input terminal of the AND gate logic circuit. The output of the manual intervention unit is electrically connected to the second input of the AND gate logic circuit, and the connection node is grounded through a parallel first RC delay network; The output of the AND gate logic circuit is connected to its second input via a unidirectional diode to achieve state self-holding after the load is started; the output is grounded through a second RC delay network in parallel, serving as a running timing cycle circuit. The output of the AND gate logic circuit is used to output the drive signal to control the switching circuit of the external load.

8. The human-computer interactive dual-control intelligent switch control device according to claim 1, characterized in that: The sensing module and the timing unit are implemented by a sensing signal processor, which is externally connected to a first timing network to set the running timing period. The output terminal of the sensing signal processor is electrically connected to the anode of the thyristor, and the cathode of the thyristor serves as the drive signal output terminal. The manual intervention unit includes an independent start switch and a stop switch; The start switch is connected between the DC trigger power supply and the control electrode of the thyristor via a current-limiting resistor; The sensing signal processor is configured to respond to a sensing signal; A capacitor is connected between the node between the start switch and the current-limiting resistor and the silicon thyristor cathode to form a confirmation timing cycle; The shut-off switch is connected in parallel between the anode and cathode of the thyristor, or in series between the output terminal of the sensing signal processor and the anode of the thyristor. The conduction of the thyristor requires that the sensing signal processor outputs a control current to the anode of the thyristor; and that the control electrode of the thyristor receives a sufficient trigger current.

9. The human-computer interactive dual-control intelligent switch control device according to claims 1 and 2, characterized in that: The control unit includes a relay and a switching transistor; The manual intervention unit includes a first start switch, a second start switch, and a stop switch; The output terminal of the sensing module is connected to the control electrode of the switching transistor via a first delay network; The first start switch is connected in series between the power supply and the first terminal of the relay coil; The first terminal of the relay coil is also grounded through a second delay network; The relay is provided with a set of normally open auxiliary contacts, which are connected in series with the off switch and the relay coil to form a self-holding circuit; The main current path of the switching transistor is connected in series between the second terminal of the relay coil and the reference ground; The second start switch is connected between the power supply and the control electrode of the switching transistor.

10. The human-computer interactive dual-control intelligent switch control device according to claim 1, characterized in that: The sensing module is a voice control module, which includes a sound signal acquisition circuit and a first-stage signal comparator amplifier. The output of the first-stage signal comparator amplifier is connected to the non-inverting input of the second-stage signal comparator via a timing network through a unidirectional diode. The inverting input of the second-stage signal comparator is connected to a pull-up bias circuit and a first switch, the first switch being configured to pull the inverting input low to a low potential. The output terminal of the second-stage signal comparator serves as the output terminal of the drive signal. The output terminal is also electrically connected to the control electrode of a feedback control transistor. One end of the main current path of the feedback control transistor is grounded, and the other end is connected to the inverting input terminal of the second-stage signal comparator through a resistor to form a self-locking output state.

11. The human-computer interactive dual-control intelligent switch control device according to any one of claims 1 to 10, characterized in that, The device is configured to control multiple independent load loops, each of which has an independent manual intervention unit to achieve independent control of each load.

12. A control method for controlling the human-machine interactive dual-control intelligent switch control device as described in any one of claims 1 to 11, characterized in that, Includes the following steps: S1: The start signal is triggered by the sensing module detecting the user's entry and outputting a sensing signal, or by the manual intervention unit receiving the user's operation and outputting a start command signal; after either signal is triggered, a confirmation timing cycle is started. S2: Dual verification, during the confirmation timing period, detecting whether another type of trigger signal is received to complete the dual verification: If the initial trigger signal is a sensing signal, then check whether a start command signal has been received; If the initial trigger signal is a start command signal, then check whether a sensing signal has been received; S3: Load start-up. If dual verification is completed within the confirmation timing cycle, a drive signal is generated and output to turn on the external load and start a running timing cycle. S4: Operation maintenance: If a sensing signal output by the sensing module is received again within the operation timing cycle, the operation timing cycle is reset or extended. S5: Load shutdown. When the running timer cycle times out or a shutdown command signal is received from the manual intervention unit, the output of the drive signal is stopped to shut down the external load. S6: System reset. After the external load is turned off, the system returns to its initial state and returns to step S1.

13. The human-computer interaction dual-control intelligent switch control method according to claim 12, characterized in that, The control device supports user-initiated priority control mode, and the corresponding method includes the following steps: P1: Manual start trigger, which receives user operation and outputs start command signal through the manual intervention unit; P2: Load operation, in response to the start command signal, generates and outputs a drive signal to turn on the external load and starts a running timer cycle; P3: Operation maintenance. If a sensing signal is received from the sensing module within the operation timing cycle, the operation timing cycle is reset. P4: Load shutdown. When the running timer expires or a shutdown command signal is received from the manual intervention unit, the output of the drive signal is stopped to shut down the external load.

14. The human-computer interaction dual-control intelligent switch control method according to claim 12 or 13, characterized in that, Also includes: Real-time monitoring of the operating status of the external load; When an abnormality such as overcurrent, overvoltage, short circuit, open circuit, or overtemperature is detected, a drive prohibition command signal is output, a fault monitoring signal is generated and sent to the remote controller; Receive a lock command from the remote controller and, in response to the lock command, disable the output of the drive signal; After the anomaly is resolved, an unlock command is received from the remote controller, and the normal output of the drive signal is restored.

15. A dedicated chip for a human-computer interaction dual-control intelligent switch, characterized in that, Integrated on a single semiconductor substrate, for implementing the core control functions of the human-machine interactive dual-control intelligent switch control device as described in any one of claims 1 to 11, including: The induction signal input interface is used to connect the output signal of the induction module; Manual signal input interface, used to connect to the command signal of the manual intervention unit; Drive signal output interface, used by the drive unit to output drive signals to control external load; Timing unit, used to provide an internal time base; The control unit has a first input terminal connected to the sensing signal input interface, a second input terminal connected to the manual signal input interface, and an output terminal connected to the drive unit. The control unit is configured as follows: In the default mode, the two-factor authentication startup control logic is executed, including: When either the sensing signal input interface or the manual signal input interface receives a sensing signal or a start command signal, the confirmation timing cycle is initiated. During the confirmation timing period, when both input interfaces have received the sensing signal and the start command signal, the drive unit is triggered to output a drive signal to start the load and start a running timing cycle. If a sensing signal is received again through the sensing signal input interface during the running time period, the running time period is reset or extended. When the running timer expires or a shutdown command signal is received through the manual signal input interface, the drive unit is controlled to stop outputting drive signals to shut down the load. Upon receiving an external configuration signal, switch to user-initiated priority control mode, including: When the manual signal input interface receives a start trigger signal, it outputs a drive signal to start the load and initiate a running timer cycle; If a sensing signal is received again through the sensing signal input interface during the running time period, the running time period is reset. When the running timer expires or a shutdown command signal is received through the manual signal input interface, the drive unit is controlled to stop outputting drive signals to shut down the load.

16. The dedicated chip for a human-computer interaction dual-control intelligent switch according to claim 15, characterized in that, Also includes: Monitoring signal processing unit; network signal processing unit; The monitoring signal processing unit is configured as follows: The monitoring signal input interface is used to obtain fault monitoring signals that reflect the external load status. Logical judgment is performed on the fault monitoring signals, and a monitoring alarm signal is generated when an abnormality is determined. The network signal processing unit is configured to convert the monitoring alarm signal into a drive prohibition command signal and send it to the logic control module. Simultaneously, it reports to the remote controller via the remote communication interface, receives lock or unlock commands from the remote controller, and forwards them to the logic control module; The logic control module is configured to control the drive unit to prevent it from outputting the drive signal when it receives the drive prohibition command signal or the lock command; And upon receiving the unlock command, the lock is released.

17. The human-computer interactive dual-control intelligent switch control device according to claim 1 or 15, characterized in that, It also includes a prompter: the prompter includes at least one of an indicator light, a buzzer, and a vibrator.