Safety dual loop protection device and robotic press tending system

Abstract

The application provides a safe double-loop protection device and a robot stamping connection system, and belongs to the technical field of stamping. The safe double-loop protection device comprises a key safety device, a safety control module and a safety programmable logic controller. The key safety device is connected to the safety control module through two independent loops, and the safety control module is connected to the safety programmable logic controller with a safety integrity level of PLe level through double loops. Through the double-loop design, the risk of safety failure caused by single-loop failure can be greatly reduced, and the system safety and reliability are improved. The safety programmable logic controller can be connected with related devices of the robot stamping connection system and send control instructions, so that precise safety control of the system can be realized, the robot stamping connection system can be operated in a safe and stable environment, and safety accidents can be effectively avoided.

Description

Technical Field

[0001] This application relates to the field of stamping technology, and in particular to a safety dual-circuit protection device and a robot stamping line system. Background Technology

[0002] Currently, some safety protection measures for robotic stamping lines are available on the market. For example, some simple emergency stop buttons allow operators to manually press them to stop the robot in case of an emergency. However, this single protection method has significant limitations. On the one hand, it relies on the operator's timely reaction; in an emergency, the operator may fail to press the emergency stop button in time due to tension or negligence. On the other hand, if a fault occurs in the single signal transmission path, such as a short circuit or open circuit, the safety protection function will fail, unable to provide reliable safety assurance for production. Utility Model Content

[0003] To address at least one of the aforementioned problems, this application proposes a dual-circuit safety protection device and a robot stamping line system, which aims to ensure that if one circuit fails, the other circuit can immediately take over, thus achieving uninterrupted safety protection.

[0004] To achieve the above objectives, a first aspect of this application provides a safety dual-circuit protection device applied to a robot stamping line system, comprising: The critical safety equipment includes at least one of an emergency stop button, a safety door interlock switch, a safety light curtain, and an intelligent monitoring device. A safety control module, wherein the critical safety equipment is connected to the safety control module via two independent circuits; A safety programmable logic controller (PLC) is provided, wherein the safety control module is connected to the PLC via two independent loops. The safety integrity level of the PLC reaches PLe level. The PLC is also used to connect with relevant equipment of the robot stamping line system to send corresponding control commands to the relevant equipment of the robot stamping line system.

[0005] The above technical solution has the following advantages or beneficial effects: In this embodiment, critical safety equipment is connected to the safety control module via two independent loops. The safety control module, in turn, is connected to a safety programmable logic controller (PLC) with a safety integrity level of PLe via dual loops. This dual-loop design significantly reduces the risk of safety failure due to a single loop failure, thereby improving system safety and reliability. The safety PLC can connect to relevant equipment in the robotic stamping line system and send control commands, enabling precise safety control of the system and ensuring its safe and stable operation, effectively preventing safety accidents.

[0006] In one embodiment of this application, the dual-circuit safety protection device further includes a digital output safety module; The safety programmable logic controller is connected to one end of the digital output safety module through two independent loops, and the other end of the digital output safety module is used to connect to the relevant equipment of the robot stamping line system.

[0007] The above technical solution has the following advantages or beneficial effects: In this embodiment, a digital output safety module is installed between the safety programmable logic controller (PLC) and related equipment in the robotic stamping line system, which significantly improves the system's safety and stability. On one hand, it acts as a reliable intermediary for signal transmission, accurately processing and converting signals from the PLC to ensure that signals are transmitted to related equipment in a suitable format and strength, achieving precise control and preventing equipment malfunctions due to signal mismatch. On the other hand, its safety protection functions effectively isolate the influence of electrical faults and interference on control signals, preventing erroneous signals from causing safety accidents and providing a solid guarantee for the safe operation of the robotic stamping line system.

[0008] In one embodiment of this application, the dual-circuit safety protection device further includes a digital input safety module; The critical safety device is connected to the digital input safety module via two independent loops, and the digital input safety module is connected to the safety control module via two independent loops.

[0009] The above technical solution has the following advantages or beneficial effects: In this embodiment, a digital input safety module is set between the critical safety equipment and the safety control module. The digital input safety module can filter and verify the signals transmitted from the critical safety equipment, effectively filtering out abnormal or interference signals, preventing erroneous signals from triggering malfunctions of the safety control module, improving the entire system's ability to identify and respond to safety risks, and providing a more reliable guarantee for the safe operation of the robot stamping line system.

[0010] In one embodiment of this application, the dual-circuit safety protection device further includes a safety relay; The critical safety equipment is connected to the first terminal of the safety relay through two independent circuits, the safety control module is connected to the second terminal of the safety relay through two independent circuits, and the third terminal of the safety relay is connected to the relevant equipment of the robot stamping line system.

[0011] The above technical solution has the following advantages or beneficial effects: In this embodiment, the safety control module is primarily responsible for receiving signals from various safety devices and transmitting them to the safety programmable logic controller (PLC), while simultaneously conveying the PLC's instructions to relevant devices. However, in some emergency situations, such as short circuits or strong electromagnetic interference, relying solely on the communication and control between the safety control module and the PLC may not be sufficient to quickly and reliably cut off the hazard. Safety relays, characterized by rapid response and high reliability, can directly disconnect relevant circuits upon detecting specific emergency signals, ensuring that equipment immediately stops operating or enters a safe state. When used in conjunction with the safety control module, safety relays can serve as a redundant safety protection measure. When the safety control module malfunctions and cannot execute safety commands normally, the safety relay can function independently, providing additional safety assurance and preventing accidents from occurring or escalating.

[0012] In one embodiment of this application, the safety dual-circuit protection device further includes an alarm module, which is connected to the safety programmable logic controller.

[0013] The above technical solution has the following advantages or beneficial effects: In this embodiment, when the safety programmable logic controller (PLC) detects an abnormal situation, such as a circuit malfunction or signal anomaly that may endanger the safe operation of the robot stamping line system, the PLC can quickly transmit instructions to the alarm module. The alarm module then issues a clear and timely alarm using sound and light, alerting operators to notice the system abnormality immediately so that they can take rapid countermeasures, effectively preventing further escalation of the accident and ensuring the stable operation of the system and the safety of personnel and equipment.

[0014] In one embodiment of this application, the safety dual-circuit protection device further includes a display module connected to the safety programmable logic controller, and the display module is used to display the quantity, location layout and operating status of the critical safety equipment.

[0015] The above technical solution has the following advantages or beneficial effects: In this embodiment, the display module can intuitively present the quantity, location, and operating status of critical safety equipment, allowing operators to clearly grasp the overall equipment status without tedious searching. This not only greatly facilitates daily equipment inspection and management, but also enables operators to quickly locate problematic equipment based on the displayed information and take timely and targeted measures in case of emergencies, effectively improving fault handling efficiency and providing strong support for the safe and stable operation of the robotic stamping line system.

[0016] In one embodiment of this application, one of the critical security devices is connected to one of the security control modules.

[0017] The above technical solution has the following advantages or beneficial effects: In this embodiment, one critical safety device is connected to one safety control module. This one-to-one connection allows each critical safety device to have an independent safety control module for precise management and monitoring. This enables faster and more accurate detection of abnormal device states and timely responses, avoiding signal interference or control chaos. Simultaneously, it simplifies system maintenance and troubleshooting processes. When a device malfunctions, the corresponding safety control module can be directly located, improving the overall reliability and maintenance efficiency of the system and providing a solid guarantee for the safe and stable operation of the robotic stamping line system.

[0018] In one embodiment of this application, a plurality of the critical security devices are connected to one of the security control modules.

[0019] The above technical solution has the following advantages or beneficial effects: In this embodiment, multiple critical safety devices are connected to a single safety control module. This centralized connection effectively simplifies the system architecture, reduces the number of safety control modules, and lowers overall cost and wiring complexity. Simultaneously, the safety control module can uniformly monitor and manage the multiple connected critical safety devices, achieving efficient information integration and processing. This allows the system to have a more comprehensive and rapid grasp of the overall safety status, facilitating the quick detection of potential safety hazards and timely countermeasures. While ensuring the safe operation of the robotic stamping line system, it also improves the overall coordination and management efficiency of the system.

[0020] In one embodiment of this application, one of the critical security devices is connected to a plurality of the security control modules.

[0021] The above technical solution has the following advantages or beneficial effects: In this embodiment, one critical safety device is connected to multiple safety control modules. This redundant connection ensures that even if some safety control modules fail, the critical safety device can still maintain safe interaction with the system through other functioning safety control modules, greatly enhancing the system's fault tolerance and reliability. Furthermore, multiple safety control modules can monitor and control the critical safety device from different perspectives, providing more comprehensive safety protection and enabling more timely and accurate responses to various emergencies, ensuring the robotic stamping line system remains in a safe and stable operating state.

[0022] To achieve the above objectives, a first aspect of this application provides a robotic stamping line system, including the safety dual-circuit protection device described in any embodiment of this application.

[0023] The above technical solution has the following advantages or beneficial effects: This application applies a dual-circuit safety protection device to a robotic stamping line system. This device, with its unique design, significantly enhances the redundancy and reliability of the system's safety control, effectively reducing the risk of safety accidents caused by a single circuit failure. In scenarios like robotic stamping lines, where safety and stability requirements are extremely high, it ensures stable system operation under various complex working conditions, promptly responds to various unexpected safety situations, provides robust safety assurance for robotic stamping operations, reduces the possibility of production interruptions and equipment damage, and ultimately improves production efficiency and product quality.

[0024] It should be understood that the above general description and the following detailed description are merely exemplary and do not limit this application. Attached Figure Description

[0025] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the specification, serve to explain the principles of this application.

[0026] Figure 1 This is a first structural block diagram of a safety dual-circuit protection device provided in an embodiment of this application.

[0027] Figure 2 This is a second structural block diagram of a safety dual-circuit protection device provided in an embodiment of this application.

[0028] Figure 3 This is a third structural block diagram of a safety dual-circuit protection device provided in an embodiment of this application.

[0029] Figure 4 This is a fourth structural block diagram of a safety dual-circuit protection device provided in an embodiment of this application.

[0030] Figure 5This is the fifth structural block diagram of a safety dual-circuit protection device provided in an embodiment of this application.

[0031] Figure 6 This is a sixth structural block diagram of a safety dual-circuit protection device provided in an embodiment of this application.

[0032] Figure label: 100. Safety dual-circuit protection device; 110. Key safety equipment; 120. Safety control module; 130. Safety programmable logic controller; 140. Digital output safety module; 150. Digital input safety module; 160. Safety relay; 170. Alarm module; 180. Display module; 20. Related equipment for robot stamping line system. Detailed Implementation

[0033] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0034] It should be noted that although functional modules are divided in the device schematic diagram and a logical order is shown in the flowchart, in some cases, the steps described or executed may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first," "second," etc., in the specification, claims, and the aforementioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0035] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of this application only and is not intended to limit this application.

[0036] In the field of industrial automation, robotic stamping lines are widely used in many industries such as automobile manufacturing and electronic equipment production due to their high efficiency and precision. However, with the accelerating pace of production and increasing complexity, safety issues in robotic stamping lines are becoming increasingly prominent.

[0037] When robots perform stamping operations, their high speed and great force mean that any unexpected situations, such as personnel accidentally entering the work area or sudden equipment malfunctions, could potentially lead to serious personal injury and equipment damage, causing huge economic losses to enterprises and adverse social impacts. Therefore, ensuring the safety of the robotic stamping line process has become a crucial aspect of industrial production.

[0038] Currently, some safety protection measures for robotic stamping lines are available on the market. For example, some simple emergency stop buttons allow operators to manually press them to stop the robot in case of an emergency. However, this single protection method has significant limitations. On the one hand, it relies on the operator's timely reaction; in an emergency, the operator may fail to press the emergency stop button in time due to tension or negligence. On the other hand, if a fault occurs in the single signal transmission path, such as a short circuit or open circuit, the safety protection function will fail, unable to provide reliable safety assurance for production.

[0039] Based on this, this application proposes a safety dual-circuit protection device and a robot stamping line system, which aims to ensure that when one circuit fails, the other circuit can immediately take over, so as to achieve uninterrupted safety protection.

[0040] Reference Figure 1 , Figure 1 This is a first structural block diagram of a safety dual-circuit protection device 100 provided in an embodiment of this application. The safety dual-circuit protection device 100 is applied to a robot stamping line system. The safety dual-circuit protection device 100 includes a critical safety device 110, a safety control module 120, and a safety programmable logic controller 130.

[0041] The key safety equipment 110 includes at least one of the following: an emergency stop button 111, a safety door interlock switch 112, a safety light curtain 113, and an intelligent monitoring device 114. The emergency stop button 111 can quickly stop the system in an emergency, preventing further escalation of danger. The safety door interlock switch 112 ensures the system can only operate after the safety door is fully closed, preventing accidental entry into dangerous areas. The safety light curtain 113 can monitor a specific area in real time, triggering a safety response once an object enters. The intelligent monitoring device 114 can comprehensively monitor and analyze the system's operating status. These key safety devices 110 work together to lay a solid foundation for the safe and stable operation of the robotic stamping line system.

[0042] Critical safety device 110 is connected to safety control module 120 via two independent loops, and safety control module 120 is connected to safety programmable logic controller 130 via two independent loops. Safety programmable logic controller 130 has a safety integrity level of PLe and is also used to connect with related equipment 20 of the robot stamping line system to send corresponding control commands to the related equipment 20 of the robot stamping line system.

[0043] In this embodiment, the connection between the critical safety device 110 and the safety control module 120, as well as the connection between the safety control module 120 and the safety programmable logic controller 130, both employ two independent loops. This dual-loop layout creates a double-insurance mechanism, effectively providing "double insurance" for the system's safe operation. When one loop fails due to aging lines, electromagnetic interference, or other unforeseen factors, the other loop can quickly and seamlessly take over the signal transmission task, ensuring that the safety information collected by the critical safety device (such as the trigger signal of the emergency stop button, the status signal of the safety door interlock switch, etc.) can be stably, continuously, and accurately transmitted to subsequent modules. This avoids the loss or interruption of safety information due to loop failure, effectively preventing the system from falling into a dangerous situation due to the lack of safety signals.

[0044] The safety programmable logic controller 130, as the core control unit of the entire protection device, achieves a PLe level of safety integrity, an internationally recognized high safety integrity standard. This signifies superior performance in hardware and software reliability, fault diagnosis capabilities, and the ability to handle complex and hazardous situations. It not only reliably receives safety signals from the safety control module 120 but also leverages its powerful logic processing capabilities to accurately analyze and rapidly decide on these signals. Subsequently, the safety programmable logic controller 130 connects with various related equipment in the robotic stamping line system, such as stamping machinery, conveying devices, and robotic arms, and sends precise and timely control commands to these devices based on the analysis and decision-making results. For example, when a safety light curtain is detected to be triggered, a stop command is quickly sent to the stamping machinery, ensuring that the equipment immediately stops when personnel or objects enter the hazardous area. This achieves comprehensive, high-precision safety control of the robotic stamping line system, ensuring the entire system operates safely, stably, and efficiently in complex and ever-changing production environments.

[0045] In some embodiments, refer to Figure 2 , Figure 2 This is a second structural block diagram of a dual-circuit safety protection device 100 provided in an embodiment of this application. In addition to the critical safety equipment 110, safety control module 120, and safety programmable logic controller 130, the dual-circuit safety protection device 100 may also include a digital output safety module 140. The safety programmable logic controller 130 is connected to one end of the digital output safety module 140 via two independent circuits. The other end of the digital output safety module 140 is used to connect to the relevant equipment 20 of the robot stamping line system.

[0046] In this embodiment, the safety programmable logic controller 130 serves as the system's brain, and its PLe-level safety integrity ensures the absolute reliability of its internal logic. However, the electrical characteristics of its output ports (such as drive capability, voltage level, and interference immunity) may not directly meet the stringent requirements of high-power equipment in industrial settings. The primary function of the digital output safety module 140 is to perform signal conversion, power amplification, and electrical isolation on the two independent safety control commands from the safety programmable logic controller 130. It converts the low-power, high-precision digital signals output by the programmable logic controller 130 into high-power, high-stability industrial-grade signals capable of directly driving actuators such as contactors, solenoid valves, or frequency converters, ensuring that the commands can be reliably received and executed by the equipment.

[0047] More importantly, the dual-loop connection design extends the redundancy safety concept to the execution end. Two independent communication loops (such as one PROFINET and the other a secure serial bus) tightly couple the safety programmable logic controller 130 with the digital output safety module 140. Under normal circumstances, the digital output safety module 140 continuously cross-checks the instructions from both loops. Only when the two instructions are completely consistent is the instruction considered valid and an output triggered. Once a communication interruption, data error, or signal conflict is detected in either loop, the digital output safety module 140 immediately enters a safe state, cuts off all outputs, and forces the equipment to stop, thereby eliminating the risk of "false instructions" or "instruction loss" caused by a single point of communication failure.

[0048] Furthermore, the digital output safety module 140 integrates hardware-level safety protection functions, such as overcurrent, overvoltage, short-circuit protection, and output status monitoring. It effectively isolates electrical noise, surge voltage, or load faults from equipment on the robotic stamping line, preventing these common industrial environmental disturbances from being transmitted back to the precision safety programmable logic controller 130, thus protecting the core controller from damage. This physical isolation provides the ultimate safety guarantee that software logic alone cannot achieve.

[0049] This embodiment of the application, through the addition of the digital output safety module 140, enables the entire dual-loop safety protection device to form a complete, closed-loop, and multi-redundant end-to-end safety chain from "sensing" (critical safety equipment) → "decision-making" (safety control module and safety programmable logic controller) → "execution" (digital output safety module). It not only ensures the accurate transmission of safety commands but also the stable execution of safety actions, making it an indispensable core component for achieving the safety goal of "zero malfunctions and zero failures" in the robotic stamping line system.

[0050] Reference Figure 3 , Figure 3This is a third structural block diagram of a dual-circuit safety protection device 100 provided in an embodiment of this application. In addition to the critical safety device 110, safety control module 120, safety programmable logic controller 130, and digital output safety module 140, the dual-circuit safety protection device 100 may also include a digital input safety module 150. The critical safety device 110 is connected to the digital input safety module 150 via two independent circuits, and the digital input safety module 150 is connected to the safety control module 120 via two independent circuits.

[0051] In this embodiment, the critical safety device 110 (such as an emergency stop button, a safety door interlock switch, a safety light curtain, etc.) serves as the initial sensing source of a dangerous state. Its output switching signals (such as the on / off state of normally closed contacts, light curtain blocking pulses) are first connected to the digital input safety module 150 before entering the system core. This digital input safety module 150 is not a simple signal receiving port, but a dedicated hardware unit integrating multiple safety functions such as electrical isolation, signal filtering, anti-jitter processing, and channel independence detection. It is connected to the critical safety device 110 via two completely independent physical circuits, meaning that each signal has its own independent wire, connector, and circuit path, completely avoiding the risk of single-point failure due to shared lines. For example, the two normally closed contacts of the emergency stop button are connected to two independent circuits respectively. Even if one circuit is disconnected due to mechanical wear or loose wiring, the other circuit can still completely transmit the "emergency stop" state, ensuring that the system will not misjudge "safety" due to hardware degradation.

[0052] More importantly, the digital input safety module 150 transmits pre-processed, standardized digital safety signals to the safety control module 120 through two independent communication loops. These two loops are independent in terms of protocol, physical medium, and routing; for example, one uses the high-speed PROFIsafe protocol, and the other uses an independent hard-wired safety signal. The digital input safety module 150 continuously performs real-time cross-comparison of the input data from these two channels. Only when the two signals are completely consistent in logical state, timing, and data integrity is it determined to be a valid safety state and transmitted upstream. If signal loss, timing deviation, data verification error, or inconsistency between channels is detected in either channel, the digital input safety module 150 immediately enters a "safety failure" mode, actively sending a fault signal to the safety control module 120 instead of transmitting error information. This "verify first, transmit later" mechanism fundamentally prevents "false safety" signals caused by sensor failure, line interference, or electromagnetic pulses from entering the core control system, intercepting potential risks before the system decision-making level.

[0053] Therefore, the addition of the digital input safety module 150 creates a four-fold safety reinforcement system for the entire safety architecture: "sensing-preprocessing-verification-transmission." Specifically, the critical safety device 110 provides the original signal, dual-loop ensures reliable physical connections, the module internally performs signal purification and logic verification, and dual-loop communication ensures lossless information delivery. It is not only a signal repeater but also a "gatekeeper" and "purifier" of safety information, providing an absolutely reliable input source for subsequent safety control modules and PLe-level safety PLCs. It is a cornerstone design for achieving the core objective that "any single point of failure will not cause safety function failure."

[0054] Reference Figure 4 , Figure 4 This is a fourth structural block diagram of a dual-circuit safety protection device 100 provided in one embodiment of this application. In addition to a critical safety device 110, a safety control module 120, a safety programmable logic controller 130, a digital output safety module 140, and a digital input safety module 150, the dual-circuit safety protection device 100 may also include a safety relay 160. The critical safety device 110 is connected to the first terminal of the safety relay 160 via two independent circuits, the safety control module 120 is connected to the second terminal of the safety relay 160 via two independent circuits, and the third terminal of the safety relay 160 is connected to the relevant equipment 20 of the robot stamping line system.

[0055] In this embodiment, the dual-circuit safety protection device 100, based on the integration of critical safety equipment 110, safety control module 120, safety programmable logic controller 130, digital output safety module 140, and digital input safety module 150, adds a safety relay 160 as a hardware-level redundant protection unit. This safety relay 160 achieves dual protection through a dual-circuit design. The first terminal of the safety relay 160 is directly connected to the critical safety equipment 110 (such as an emergency stop button or safety door interlock switch) via two independent circuits, ensuring that emergency signals can still be reliably triggered in the event of abnormalities such as short circuits or strong electromagnetic interference. The second terminal of the safety relay 160 receives instructions from the safety control module 120 through a dual-circuit design. When the main control system fails to output control signals normally due to a fault, the safety relay 160 can independently determine and force action. The third terminal of the safety relay 160 is directly connected to the relevant equipment 20 (such as a power contactor) in the robot stamping line system. Internally, it employs a dual-channel normally closed contact series structure, remaining closed only when both signals are normal. Upon detecting an emergency stop trigger, main control failure, or signal conflict, it immediately physically cuts off the equipment power, achieving a millisecond-level forced shutdown. This design makes the safety relay 160 a "hardwired safety switch" independent of the main control link. Even in extreme cases such as software logic failure or communication interruption, it can still ensure the equipment enters a safe state through physical circuit switching, providing the ultimate "failure-safety" guarantee for the system.

[0056] Reference Figure 5 , Figure 5 This is a fifth structural block diagram of a dual-circuit safety protection device provided in an embodiment of this application. In addition to the critical safety equipment 110, safety control module 120, safety programmable logic controller 130, digital output safety module 140, digital input safety module 150, and safety relay 160, the dual-circuit safety protection device 100 may also include an alarm module 170. The alarm module 170 is connected to the safety programmable logic controller 130.

[0057] In this embodiment, the alarm module 170 serves as a real-time alarm unit for safety monitoring, connected to the safety programmable logic controller 130, enabling rapid response and visual alerts for fault signals. When the safety programmable logic controller 130 detects an abnormal triggering of critical safety equipment 110 (such as an emergency stop button or a safety door interlock switch), a circuit signal interruption, or a system logic conflict, the alarm module 170 can immediately issue a warning through audible and visual alarms, screen pop-ups, or remote notifications, clearly identifying the fault type and location (e.g., displaying "Emergency stop button triggered" or "Safety light curtain signal lost"). This design allows operators to quickly locate problems without relying on external diagnostic tools, significantly shortening fault response time and preventing the expansion of safety risks due to information delays. Simultaneously, the alarm module 170, together with components such as the safety control module 120 and the safety relay 160, forms a collaborative protection mechanism, providing a warning buffer before forced hardware disconnection, buying crucial time for emergency shutdown decisions, and further improving the overall safety and operational efficiency of the robot stamping line system.

[0058] Reference Figure 6 , Figure 6 This is a sixth structural block diagram of a dual-circuit safety protection device provided in an embodiment of this application. In addition to key safety equipment 110, a safety control module 120, a safety programmable logic controller 130, a digital output safety module 140, a digital input safety module 150, a safety relay 160, and an alarm module 170, the dual-circuit safety protection device 100 may also include a display module 180. The display module 180 is connected to the safety programmable logic controller 130 and is used to display the quantity, location, and operating status of the key safety equipment 110.

[0059] In this embodiment, the introduction of the display module 180 enables the construction of a visual interactive interface for information on critical safety equipment 110. The display module 180 is directly connected to the safety programmable logic controller 130, allowing real-time acquisition of the status data of the critical safety equipment 110. The core functions of the display module 180 include: centrally displaying the physical quantity and logical topology of all critical safety equipment 110 (such as emergency stop buttons, safety door interlock switches, etc.); presenting the spatial layout of the equipment in the robot stamping line system using a graphical interface; and intuitively reflecting the real-time operating status of each device (such as normal, fault, under maintenance) through dynamic methods such as color coding and icon flashing. Operators can quickly locate equipment positions and identify abnormal nodes through the display module 180 without relying on external diagnostic tools, significantly improving daily inspection efficiency and fault response speed. For example, when a safety light curtain triggers an alarm, the module can highlight the corresponding equipment location and simultaneously pop up a status prompt, assisting maintenance personnel in quickly taking isolation measures. This design transforms discrete security data into actionable decision-making information, enhancing system transparency, reducing the risk of human error, providing intuitive support for equipment maintenance and emergency response, and further improving the reliability and ease of management of overall security protection.

[0060] In some embodiments, a critical safety device 110 may be connected to a corresponding safety control module 120. This one-to-one design is primarily for specific critical devices with extremely high safety requirements or those whose failures have a severe impact. When a critical safety device 110 (such as a high-risk emergency stop button or safety light curtain in the core area of ​​a stamping line) requires independent and precise monitoring, a dedicated safety control module 120 is configured for it. This ensures that the safety signal of the critical safety device 110 can be directly transmitted to the safety control module 120 through a dedicated loop, avoiding interference or delay caused by signals from other devices. The safety control module 120 can perform real-time status monitoring and independent logic processing on the critical safety device 110, and can respond quickly when an anomaly is detected, prioritizing the safety control of the critical safety device 110. This connection method is suitable for scenarios where equipment is distributed widely and the safety risk levels vary greatly. It can improve the safety protection level of critical equipment, reduce the risk of system-wide failure propagation, and facilitate specialized maintenance and debugging for individual devices.

[0061] In some embodiments, multiple critical safety devices 110 can be connected to a single safety control module 120. This design is primarily suitable for scenarios with relatively balanced safety risk levels and concentrated device distribution. By sharing access to the same safety control module 120 for multiple critical safety devices 110 (such as multiple emergency stop buttons, safety door interlock switches, or safety light curtains), the system can utilize the centralized processing capabilities of the safety control module 120 to perform parallel monitoring and logical analysis of multiple safety signals, achieving efficient resource integration. The safety control module 120, through a dual-loop connection, can simultaneously receive and verify signals from each critical safety device 110. When any critical safety device 110 is detected to be abnormal, the safety control module 120 can quickly respond and uniformly send control commands to the safety programmable logic controller 130, ensuring the overall safe shutdown of the system. This approach reduces hardware costs and wiring complexity, and is particularly suitable for small and medium-sized stamping lines or situations where equipment is close together, improving system integration and maintenance convenience while ensuring safety redundancy.

[0062] In some embodiments, a critical safety device 110 can be connected to multiple safety control modules 120. This design is primarily aimed at critical scenarios with extremely high safety requirements and multiple redundancy safeguards. By establishing independent connections between a single critical safety device 110 (such as an emergency stop button or safety light curtain in the core area of ​​a stamping line) and multiple safety control modules 120, the system can construct a multi-level signal transmission and logic verification mechanism. Specifically, each safety control module 120 receives the safety signal from the critical safety device 110 through a dual-loop system and independently performs status monitoring and logic analysis. When any safety control module 120 detects an anomaly, it can immediately trigger a system-level safety response. This design not only achieves physical redundancy in signal transmission but also enhances fault tolerance through parallel processing by multiple safety control modules 120. Even if some safety control modules 120 fail due to interference or malfunction, other safety control modules 120 can still ensure that the equipment's safety status is accurately identified and controlled, providing ultimate safety assurance of "zero single point of failure" for high-risk processes.

[0063] This application also provides a robot stamping line system, including a safety dual-circuit protection device provided in any embodiment of this application.

[0064] The robotic stamping line system provided in this application integrates the safety dual-circuit protection device described in any embodiment, constructing an end-to-end safety protection system from signal acquisition to execution control. The system uses the safety dual-circuit protection device as its core. Its key safety devices 110 (such as emergency stop buttons and safety light curtains) monitor the production environment in real time through a dual-circuit redundant design. The safety control module 120 and the safety programmable logic controller 130 (PLe level) collaboratively process safety logic. The digital output safety module 140 and the digital input safety module 150 ensure accurate signal transmission. The safety relay 160 provides hardware-level forced disconnection capability, while the display module 180 intuitively presents the equipment status and layout. This integration enables the robotic stamping line system to have multiple redundant protections, quickly responding to anomalies such as short circuits and strong electromagnetic interference, ensuring immediate shutdown of the equipment in emergency situations and significantly reducing the risk of accidents. Simultaneously, the system supports flexible expansion (such as one-to-one or many-to-many connection modes) through modular design, balancing high security with ease of operation and maintenance, providing reliable assurance for industrial automated production.

[0065] The terms “first,” “second,” “third,” “fourth,” etc. (if present) in the specification and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms “comprising” and “having,” and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0066] It should be understood that in this application, "at least one (item)" means one or more, and "more than" means two or more. "And / or" is used to describe the relationship between related objects, indicating that three relationships can exist. For example, "A and / or B" can represent three cases: only A exists, only B exists, and both A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0067] The preferred embodiments of the present application have been described above with reference to the accompanying drawings, but this does not limit the scope of the claims of the present application. Any modifications, equivalent substitutions, and improvements made by those skilled in the art without departing from the scope and substance of the embodiments of the present application shall be within the scope of the claims of the present application.

Claims

1. A dual-circuit safety protection device, applied to a robot stamping line system, characterized in that, include: The critical safety equipment includes at least one of an emergency stop button, a safety door interlock switch, a safety light curtain, and an intelligent monitoring device. A safety control module, wherein the critical safety equipment is connected to the safety control module via two independent circuits; A safety programmable logic controller (PLC) is provided, wherein the safety control module is connected to the PLC via two independent loops. The safety integrity level of the PLC reaches PLe level. The PLC is also used to connect with relevant equipment of the robot stamping line system to send corresponding control commands to the relevant equipment of the robot stamping line system.

2. The safety dual-circuit protection device according to claim 1, characterized in that, The dual-circuit safety protection device also includes a digital output safety module; The safety programmable logic controller is connected to one end of the digital output safety module through two independent loops, and the other end of the digital output safety module is used to connect to the relevant equipment of the robot stamping line system.

3. The safety dual-circuit protection device according to claim 1, characterized in that, The dual-circuit safety protection device also includes a digital input safety module; The critical safety device is connected to the digital input safety module via two independent loops, and the digital input safety module is connected to the safety control module via two independent loops.

4. The safety dual-circuit protection device according to claim 1, characterized in that, The dual-circuit safety protection device also includes a safety relay; The critical safety equipment is connected to the first terminal of the safety relay through two independent circuits, the safety control module is connected to the second terminal of the safety relay through two independent circuits, and the third terminal of the safety relay is connected to the relevant equipment of the robot stamping line system.

5. The safety dual-circuit protection device according to claim 1, characterized in that, The safety dual-circuit protection device also includes an alarm module, which is connected to the safety programmable logic controller.

6. The safety dual-circuit protection device according to claim 1, characterized in that, The dual-circuit safety protection device also includes a display module, which is connected to the safety programmable logic controller. The display module is used to display the quantity, location layout, and operating status of the critical safety equipment.

7. The safety dual-circuit protection device according to claim 1, characterized in that, Each of the aforementioned critical safety devices is connected to one of the aforementioned safety control modules.

8. The safety dual-circuit protection device according to claim 1, characterized in that, Each of the aforementioned critical safety devices is connected to one of the aforementioned safety control modules.

9. The safety dual-circuit protection device according to claim 1, characterized in that, One of the critical safety devices is connected to multiple of the safety control modules.

10. A robotic stamping line system, characterized in that, Includes the safety dual-circuit protection device as described in any one of claims 1-9.

Images