SAFETY CIRCUIT AND METHOD FOR TESTING A SAFETY CIRCUIT IN AN AUTOMATION SYSTEM

Abstract

Circuit (1), comprising: an input circuit (500) configured to connect an analog sensor, wherein the input circuit (500) comprises an adaptation circuit for outputting a sensor signal (S E ) at an output (501) of the input circuit (500); a test device (300) with a test input (302) for inputting an analog test signal (S TA ), a first analog test output (310) and a second analog test output (320); an AD converter (100) having a first analog input (101) and a second analog input (102); a first signal line (410) connected to the output (501) of the input circuit (500) and to the first analog input (101); a second signal line (420) connected to the output (501) of the input circuit (500) and to the second analog input (101); and a control and evaluation device (600) with a first input (601) and a second input (602); wherein a first damping element (Z1) is connected in series in the first signal line (410), so that a sensor signal (S E ), wherein a damping factor derived from the first damping element (Z1) is co-determined by its impedance; wherein a second damping element (Z2) is connected in series in the second signal line (420), so that a sensor signal (S E ), wherein a damping factor derived from the second damping element (Z2) is co-determined by its impedance; wherein a first AD converter of the AD converter device (100) converts the attenuated sensor signal (S EA1) into a first digital signal (S 1D ) is implemented; wherein a second AD converter of the AD converter device (100) converts the attenuated sensor signal (S EA2 ) into a second digital signal (S 2D ) is implemented; wherein the AD conversion device (100) is arranged to convert the first digital signal (S 1D ) via a first data line (430) to the first input (601) of the control and evaluation device (600); wherein the AD conversion device (100) is arranged to convert the second digital signal (S 2D ) via a second data line (440) to the second input (602) of the control and evaluation device (600); wherein the first analog test output (310) and the first analog input (101) are electrically connected to the first damping element (Z1) at a first node (411). wherein the second analog test output (320) and the second analog input (102) are electrically connected to the second damping element (Z2) at a second node (421); wherein a lower output impedance of the first analog test output (310) results in a larger signal amplitude of a first test signal output at the first analog test output (310) than the signal amplitude of the first input signal (S EA1 ), so that the first test signal dominates at the first analog input (101); and wherein a lower output impedance of the second analog test output (320) results in a larger signal amplitude of a second test signal output at the second analog test output (320) than the signal amplitude of the second input signal (S EA2 ), so that the second test signal dominates at the second analog input (102).

Description

AREA

[0001] The present invention relates to a device and a method for testing a safety circuit, in particular for analog input signals in an automation system. BACKGROUND

[0002] In automation technology, systems are known in which sensors record physical variables, e.g. of an environment, and convert them into electrical signals. The electrical signals can be transmitted to a controller (PLC) for evaluation. A processor in the controller processes the signals with the help of a control program, e.g. to control actuators that carry out a process step. The process step can be a sub-process as part of an overall process. In this case, it is necessary to check the correct transmission of the electrical signals from time to time or cyclically to ensure proper functioning. Advantageously, this check is carried out without interrupting the process. The electrical signals can be in digital or analog form.If sensor signals are available in analog form, the signals can be digitized, processed in digital form, and forwarded to so-called analog-to-digital converters (AD converters) for further processing, for example, by a control and evaluation unit. The AD converter can comprise one or more AD converters.

[0003] DE 10 2013 111 888 A1 discloses a safety device for multi-channel processing of an analog input signal, in which a test device is connected to a further additional input of a first and a second switching device. The test device is designed to generate defined test signals. For example, the test device can generate test signals using a control signal from a microcontroller and feed them via the switching device to the AD converter, with which the entire value range of the AD converters can be tested. For this purpose, the output signals generated by the AD converters in response to the test signal are fed to the microcontroller(s) and checked for accuracy.

[0004] DE 10 2005 030 276 A1 discloses a safety switching device for safely shutting down a load in an automated system. It also includes an A / D converter that converts the analog input signal into a digital signal. An evaluation and control unit controls at least one output switching element depending on the digital signal. An analog signal combiner is configured to superimpose an analog test signal on the analog input signal to form an analog combination signal. The analog combination signal is fed to the A / D converter. The analog test signal can then be used to monitor the function of the safety switching device for errors.

[0005] DE 10 2011 050 539 A1 proposes a measuring device with at least two measuring channels, each measuring channel having an AD converter for converting an analog voltage into a digital voltage value and a logic unit. One measuring channel is designed as a secure measuring channel and includes a multiplexer, which can be used to switch the analog voltage between a measuring voltage and a reference voltage. The logic unit of at least one other measuring channel is designed as a reference generator to provide the reference voltage and to switch the multiplexer between the measuring voltage and the reference voltage.

[0006] Furthermore, DE 10 2005 011 406 A1 discloses a two-channel method for determining at least one output signal. Two independent channels are provided. The input signals are fed alternately to these channels, with a multiplexer serving to switch between the channels. A microprocessor in one of the channels provides test input signals, which are fed to the channel to which the changing input signals are not currently present. Accordingly, this channel outputs output signals, which are compared with an expected value to check whether this channel is operating correctly. At the same time, the other channel serves to generate the output signal. Subsequently, the multiplexer switches based on a control signal. An AD converter is arranged in each channel, which converts the analog measurement voltage into a digital voltage value.

[0007] The invention is based on the object of providing a safety circuit that is as improved as possible. This object is achieved by the features of claim 1. Advantageous further developments and refinements are the subject of the dependent claims and contained in the description.

[0008] Accordingly, a safety circuit is provided for multi-channel processing of an input signal, in particular a sensor signal, with an input circuit configured to input the input signal and provide the input signal at its output.

[0009] The safety circuit further comprises an AD conversion device with a first analog input and a second analog input as well as at least one digital output.

[0010] Furthermore, the safety circuit has a first signal line which is connected to the output of the input circuit and to the first analog input of the AD conversion device for forwarding a first input signal in analog form, wherein the AD conversion device is configured to convert the first input signal in analog form at the first analog input into a first input signal in digital form and to output it at the at least one digital output.

[0011] The safety circuit further comprises a second signal line which is connected to the output of the input circuit and to the second analog input of the AD conversion device for forwarding a second input signal in analog form, wherein the AD conversion device is configured to convert the second input signal in analog form at the second analog input into a second input signal in digital form and to output it at the digital output.

[0012] The safety circuit further comprises a control and evaluation device for evaluating the first input signal in digital form and the second input signal in digital form, wherein the at least one digital output of the AD conversion device is connected to at least one input of the control and evaluation device.

[0013] The safety circuit further comprises a test device for outputting an analog test signal, wherein the test device has a control input connected to a control output of the control and evaluation device. The control and evaluation device is further configured to control the test device. It is particularly advantageous that the test device has a first analog test output connected to the first signal line for outputting the analog test signal, and that the test device has a second analog test output connected to the second signal line for outputting the analog test signal.

[0014] In this context, the safety circuit, as used in the description and claims, is understood to mean, in particular, an electrical device that converts signals from sensors for further processing in the control and evaluation device. The safety circuit also includes the test device; in an advantageous embodiment of the invention, the signal lines can be tested for line breaks and / or short circuits and / or for the correct operation of the AD conversion device during a test period.

[0015] According to an advantageous embodiment, the safety controller can continue to receive sensor signals during the test period and, based on these, control a process and, in the event of an error, interrupt this process and / or trigger an error signal.

[0016] A distinction can be made between digital and analog input signals when it comes to the signals provided by sensors. While digital signals can be evaluated or processed directly, for example, in a control and evaluation unit, conditioning or adapting analog signals can be advantageous. The safety circuit includes an input circuit for conditioning or adapting the analog signals.

[0017] An analog signal, such as that output by a corresponding sensor, can be a voltage that represents, for example, a temperature or another physical quantity or property of the environment.

[0018] The operating principle of this type of sensor is based on the fact that the ohmic resistance of the sensor changes depending on the measured variable (temperature, length, etc.). This change in resistance leads to a change in the voltage drop across the sensor, which can then be recorded as an analog signal using a simple voltage divider or bridge circuit.

[0019] For further processing of the analog signal, so-called A / D converters are advantageous. The A / D converter discretizes a continuous-time input signal (either through its operating principle or through an upstream or integrated sample-and-hold stage) into individual discrete samples. These samples are then converted to digital values. Due to the finite number of possible output values, quantization always occurs.

[0020] The result of an AD conversion is represented, for example, in a signal-time diagram as a sequence of points with stepped horizontal and vertical spacing. The main parameters of an AD converter are its bit depth, its maximum sampling rate, and its oversampling capability. The bit depth and oversampling of an AD converter limit the maximum possible accuracy with which the input signal can be converted. AD converters are now integrated into microchips and can be single-channel or multi-channel. In this context, multi-channel means that, for example, several signals can be forwarded or processed almost simultaneously and independently of one another. The AD converter devices can include integrated multiplexers, whereby the integrated multiplexers are configured to switch several channels to one AD converter, so that, for example, all channels can be switched cyclically one after the other to the AD converter.

[0021] The test device also has, for example, a multiplexer with a controllable logic and a switching device consisting of several switches which can be switched independently of one another, for example, and can preferably be connected to an external signal source.

[0022] The control and evaluation device advantageously consists of a computing unit and a memory with executable programs, wherein the computing unit can consist of a processor, a microcontroller or preferably two microcontrollers.

[0023] The programs process the control and evaluation tasks, whereby the programs can be executed on one processor, one microcontroller or two microcontrollers simultaneously or separately according to control and / or evaluation programs.

[0024] According to an advantageous development, the test device of the safety circuit has a test input for inputting the analog test signal, wherein the analog test signal is present at least during a test period. In particular, a signal source is connected to the test input. The signal source is designed to generate the analog test signal, in particular by means of a voltage or current source.

[0025] The test input is suitable for receiving and, if necessary, forwarding an advantageously continuous analog signal as an analog test signal. The signal source generating the analog test signal is preferably a controllable voltage or current source configured to output the voltage or current values ​​specified by the control and evaluation device as analog test signals.

[0026] According to a further advantageous development, the analog test signal is a ground potential or a constant voltage potential or a variable voltage potential.

[0027] In a simple case, for example, a transistor can be used as a signal source, connecting the test input to ground potential. Furthermore, both constant voltage sources and variable voltage sources can be used to output the analog test signal.

[0028] According to an advantageous further development, the analog test signal is a constant or variable current.

[0029] According to a further advantageous development, the analog test signal follows a predetermined or predeterminable signal curve during the test period.

[0030] In this context, the analog test signal S TA during the test period (T test ) constant, ie unchanged over time (S TA=const.) or follows a signal curve as a function F of time (S TA = F(t)).

[0031] According to an advantageous development, the test device has a switching device, wherein the switching device is configured to switch the analog test signal to the first analog test output and / or to the second analog test output.

[0032] The switching device can comprise mechanical and / or electronic switches, in particular semiconductor switches, which can preferably be controlled via a control logic and, in the closed state, establish an electrical connection such that the test signal is applied to the analog test outputs.

[0033] According to an advantageous development, the switching device has at least two switches, wherein the switches can be controlled individually and / or in groups.

[0034] The switches are controlled by the control logic, whereby the control logic preferably receives and evaluates digital signals via a control input, for example from the control and evaluation device, so that each switch can be switched individually.

[0035] According to a further advantageous development, the first signal line of the safety circuit has a first damping element, so that the input circuit, with the interposition of the first damping element, is connected to the first analog input of the AD conversion device. Furthermore, the second signal line has a second damping element, so that the input circuit, with the interposition of the second damping element, is connected to the second analog input of the AD conversion device.

[0036] The term "damping element" refers to an electrical component, such as a resistor or impedance. The damping element is inserted into the signal path between the input circuit and the first or second analog input of the A / D converter to modify the signal downstream of the damping element toward the A / D converter, at least during test operation. The signal can be modified in its amplitude, level, and / or frequency.

[0037] According to an advantageous development, the first attenuation element, the second attenuation element, and an output impedance of the test device and / or the signal source are dimensioned such that the first input signal in analog form and the analog test signal overlap during the test period at the first analog input of the AD conversion device and / or that the second input signal in analog form and the analog test signal overlap during the test period at the second analog input of the AD conversion device such that the analog test signal dominates the first input signal in analog form or the second input signal in analog form.

[0038] According to a further advantageous development, the control and evaluation device has a processor for processing the first input signal in digital form and / or the second input signal in digital form.

[0039] The processor in the control and evaluation unit, also known as a microprocessor, contains all components, such as the arithmetic unit, control unit, registers, and memory manager, on a single integrated chip. The processor can also be a multi-core processor consisting of several processor cores, especially two processor cores.

[0040] According to a further advantageous development, the AD converter device has a first AD converter and a second AD converter, wherein the first AD converter is configured to convert the first input signal in analog form into the first input signal in digital form and to output it at the digital output, and wherein the second AD converter is configured to convert the second input signal in analog form into the second input signal in digital form and to output it at the digital output.

[0041] The AD converter device is preferably multi-channel and can comprise multiple AD converters that can simultaneously convert one or more first and / or second input signals in analog form into first and / or second input signals in digital form. Alternatively, the AD converter device can have precisely one AD converter with an upstream multiplexer that switches multi-channel first and / or second input signals in analog form, for example, to an AD converter.

[0042] In a further aspect of the invention, a method for testing a safety circuit is provided. The safety circuit has a signal source for generating an analog test signal and a test device for outputting the analog test signal.In the method, the analog test signal is output on a first and / or a second signal line, so that during a test period, the analog test signal present at an analog input of the test device is connected (distributed) via a switching device in such a way that a first analog input of a first AD conversion device and / or a second analog input of the AD conversion device is supplied with the analog test signal, so that the analog test signal is superimposed with a first input signal in analog form at the first analog input of the AD conversion device and / or that the analog test signal is superimposed with a second input signal in analog form at the second analog input of the AD conversion device.

[0043] The signal source is, for example, a signal source that can preferably be controlled by a processor for outputting a defined analog test signal. The output of the analog test signal is understood to mean applying a ground potential, a constant or variable voltage potential, or a constant or variable current to a signal line. The switching device is configured to distribute the analog test signal to the signal lines, with the switching device preferably being controlled by a processor of the control and evaluation unit.

[0044] According to an advantageous development of the method, during the test period, the first input signal is superimposed in analog form with the analog test signal by the test device in such a way that the analog test signal dominates at the first analog input of the AD conversion device and / or the second input signal is superimposed in analog form with the analog test signal in such a way that the analog test signal dominates at the second analog input of the AD conversion device.

[0045] Preferably, the dominance of the analog test signal is matched to one another by selecting the real or complex impedances of the attenuation elements and the impedances of the first and second analog outputs of the test device or can be tuned by variable impedances.

[0046] According to a further advantageous development of the method, a test input of the test device is subjected to the analog test signal during the test period, wherein the analog test signal is provided by a controllable signal source, in particular a voltage source, and wherein the signal source is controlled by a control and evaluation device.

[0047] A voltage source used as a signal source can be a DC or AC voltage source for outputting constant or variable voltage values. Open-loop or closed-loop controlled voltage sources are particularly advantageous.

[0048] According to a further advantageous development of the method, the analog test signal is modified by automatically following a predetermined or predeterminable signal curve.

[0049] The change in the analog test signal, for example, the voltage level, is preferably time-based and can be linear or have another functional relationship with time. This can also be used to determine the temporal dependencies of the A / D converter. Advantageously, the range of voltage values ​​covers at least the operating range of the A / D converter.

[0050] According to a further advantageous development, the method comprises a control and evaluation device which, during the test period, checks the analog test signal output by the test device at the first analog input of the AD conversion device and / or at the second analog input of the AD conversion device for converting the analog test signal into the first input signal in digital form against an expected value and triggers an error signal in the event of inequality.

[0051] The expected value can be based on a value or a range of values, for example, corresponding to a numerical value or a range of values. The numerical value or range of values ​​can be used as a comparison value and depends on the AD converter(s). Preferably, the range of values ​​and / or numbers covers at least the measuring range of the AD converter(s) or corresponds to it.

[0052] The invention is not limited to the previously described embodiments; features of different embodiments can be combined. Further features and combinations of features are included in the description of the figures. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] The invention is explained below in the detailed description using exemplary embodiments, with reference to the drawings. Fig. 1 a block diagram of a safety circuit of an embodiment with an input circuit, a test device, an AD conversion device and a control and evaluation unit, Fig. 2 a block diagram of a safety circuit of a further embodiment with, for example, three sensor signals, a test device, an AD conversion device and a control and evaluation unit, Fig. 3 a block diagram of a test device of a further embodiment with a signal source, Fig. 4a, b an example signal curve of the test signal and the input signal in analog form. DETAILED DESCRIPTION

[0054] Fig. Figure 1 shows a block diagram of a safety circuit 1 of an embodiment. The safety circuit 1 has an input circuit 500 for connecting an analog sensor (not shown here). The input circuit has a matching circuit for outputting a sensor signal S E at output 501. A first signal line 410 is connected to the output 501 of the input circuit 500 and to the first analog input 101 of the AD converter 100. Furthermore, a second signal line 420 is connected to the output 501 of the input circuit 500 and to the second analog input 102 of the AD converter 100.

[0055] In the first signal line 410, the damping element Z1 is connected in series, so that the sensor signal S output from the input circuit 500 at the output 501 E is dampened.

[0056] Furthermore, the damping element Z2 is connected in series in the second signal line 420, so that the sensor signal S output from the input circuit 500 at the output 501 E is also dampened.

[0057] The damping elements Z1, Z2 and the resulting damping factors are determined by their impedances. The first and second input signals attenuated by the damping elements Z1 and Z2 are represented in analog form S EA1 and S EA2 are processed in the AD conversion device 100.

[0058] The AD conversion device 100, as in the embodiment of the Fig. 1, consists of two AD converters known from the prior art. The AD converters 150 and 160 convert the first and second input signals applied to the first and second analog inputs 101 and 102 into analog form S EA1 and S EA2 , into first and second input signals in digital form S 10 and S2D and output them via a first and a second digital output 109 and 110.

[0059] For further processing of the first and second input signals in digital form S 1D and S 2D , the signals are forwarded via data lines 430 and 440 to a first and a second input 601 and 602 of the control and evaluation device 600.

[0060] The control and evaluation device 600 consists of two microcontrollers µC1 and µC2, which are each connected to each other and to the inputs 601 and 602. The microcontrollers are configured to process the first and second input signals in digital form S 1D and S 2D to process data technically, whereby processing may include evaluation and / or forwarding, e.g. to a higher-level control system.

[0061] As in the example of Fig. As shown in Figure 1, the safety circuit 1 comprises a test device 300, wherein the first analog test output 310 of the test device 300 and the first analog input 101 of the AD conversion device 100 are electrically connected to each other via the damping element Z1 at node 411. Furthermore, the second analog test output 320 and the second analog input 102 of the AD conversion device 100 are electrically connected to each other via the damping element Z2 at node 421.

[0062] The test device 300 further comprises a test input 302 for inputting an analog test signal S TA A signal source 700, which is connected to the test input 302, is used to generate the analog test signal. The signal source is connected via a control line to the control output 610 of the control and evaluation unit 600 and is configured to generate the analog test signal S TA according to a specification by the control and evaluation device 600.

[0063] To control the test device 300, the control input 301 is connected to the control and evaluation device 600. The test device is also configured to generate the analog test signal S TA to switch to the first analog test output 310 and / or to the second analog test output 320, according to a specification by the control and evaluation unit 600.

[0064] The test device is simple in design (see example of the Fig. 3) and comprises a switching logic 360 and a switching device 350 with a number of switches 355 which are controlled by the switching logic and the analog test signal S TAwith the analog test outputs, according to the specifications of the control and evaluation logic. The low output impedance of the first analog test output 310 and / or the second analog test output 320, as shown in the exemplary embodiment, results in a significantly larger signal amplitude of the test signal S TA as the signal amplitude of the input signal (S EA1 / S EA2 ), so that the analog test signal S TA at the first analog input 101 and / or at the second analog input 102 of the AD converter 100.

[0065] With the example from Fig. 1, a safety circuit is implemented with which the signal path can be easily tested, for example for line break, since both the first input signal in analog form S EA1 , as well as the analog test signal S TAare routed and evaluated via a common signal path. Advantageously, the analog signals are subject to the same physical properties. Furthermore, it is possible to test the AD converter device 100, in particular the AD converters (150, 160).

[0066] Fig. 2 shows a block diagram of the safety circuit 1 of a further embodiment with, for reasons of clarity, for example, 3 input circuits (500, 500', 500'') for the independent processing of 3 sensor signals (S E , S E ', S E '').

[0067] The AD converter 100 is configured to process a corresponding number of first and second input signals in analog form (S EA1 , S EA2 , S EA1 ', S EA2 ', S EA1 ", S EA2 ").

[0068] The AD converter 100, embodied, for example, as a microchip, can comprise an integrated multiplexer and an AD converter. The integrated multiplexer can be controlled by one of the microcontrollers µC1 or µC2 and forwards the input signal on the signal lines in analog form S EA1,2 and / or the analog test signal S TA to the AD converter to convert the analog signals (S EA1,2 / S TA ) into digital input signals. In addition to testing the correct operation of the A / D converter, it is possible to test the integrated multiplexer for short circuits, for example. This is possible because both the analog input signals and the analog test signals are routed over the same signal path.

[0069] The number of sensor signals to be processed depends on the number of first and second analog test outputs of the test device 300 (see embodiment Fig. 3) and the number of first and second analog inputs of the AD converter 100.

[0070] At the digital output 109 of the AD converter 100, the data is available, for example, via an SPI (Serial Peripheral Interface) of the control and evaluation device. The data line (430) is suitable for forwarding the data stream to an input (601) of the control and evaluation device. Thus, with the circuit structure, as in the exemplary embodiment of the Fig. 2, a test circuit can be realized that can be easily adapted to any number of sensor inputs.

[0071] Fig. Figure 3 shows a block diagram of a test device 300 of a further embodiment, designed for, for example, six sensors. The test device 300 comprises a switching device 350 with twelve switches 355, which can be switched independently of one another and individually by a switching logic 360 and can establish a conductive connection between the test input 302 and the corresponding first and / or second analog test outputs (310, 320). The switching logic 360 is controlled by a control and evaluation device via the control input 301. The switches 355 are preferably designed as an integrated semiconductor circuit. The test device of Fig. 3 can be implemented, for example, by a 6-channel CMOS analog multiplexer. Furthermore, the test device 300 comprises a test input 302 for inputting an analog test signal S TA . The analog test signal S TA is generated by a signal source 700.

[0072] The signal source 700 is in the embodiment of the Fig. 3 is designed as an external component and also has a control input 701. Alternatively, the signal source 700 can be integrated into the test device 300 and controlled via a switching logic 360. The signal source 700 can be a signal generator or a simple current / voltage source that outputs a constant or variable analog signal. Furthermore, a simple transistor connected to ground potential is also conceivable as the signal source 700. Preferably, the signal source 700 has a voltage or current source that can be adjusted externally, for example by a processor or a control and evaluation circuit 600, or is designed as such. For example, the signal source 700 has a digital-to-analog converter for generating the test signal.

[0073] Fig. 4a shows, for example, a voltage curve (U [V]) at a first or second input 101, 102 of an AD converter 100 as a function of time t, where S EA an input signal in analog form and S TA correspond to an analog test signal.

[0074] At a time t=0, a first input signal in analog form S dominates EA , for example, at the first analog input 101 of the AD converter 100. At time t=t1, the analog test signal S TA by appropriate switch position of the switch 355 via the first analog output 310 of the test device 300 to the first analog input 101 of the AD conversion device 100 and superimposes the input signal in analog form S EA until the time t=t2. The analog test signal can be constant (S TA= constant) or variable. The analog test signal preferably runs through the entire measuring range of the AD converter to determine correct operation.

[0075] Fig. Figure 4b shows another example of a voltage waveform at an input of an AD converter, where two tests (T test1 , T test2 ) in quick succession. For example, a first test during a first test period T test1 below a voltage of an input signal in analog form with a test signal S TA1 and a second test during a second test period T test2 above the voltage of the input signal in analog form with a test signal S TA2 The duration of a test can be shortened by not running through the entire measuring range, but only individual sections of the measuring range at short time intervals.

[0076] The safety circuit 1 of the embodiment of the Fig. 1 preferably has at least two operating states. A first operating state is normal operation, ie, the analog signals provided by a sensor are processed in the input circuit 500, provided at the output 501 of the input circuit, and forwarded in a multi-channel manner, in the present case two-channel, via two signal lines 410 and 420 to the AD converter 100. The AD converter 100 generates S from the processed first or second input signals in analog form. EA1 , S AE2 corresponding first or second input signals in digital form S 1D , S 2D .

[0077] The first or second data in digital form S 1D , S 2Dare transmitted via the data line(s) 430, 440, for example, using a serial bus, to the control and evaluation device 600 and processed using programs on a processor or the first microcontroller µC1 and / or the second microcontroller µC2. The processing includes, for example, a comparison of the data transmitted via the data lines 430 and 440 and / or their forwarding, e.g., to a higher-level controller (PLC).

[0078] A second operating state is test mode. In this operating state, each signal path 410, 420 can be tested for line breaks using the test device 300, as well as the transfer characteristic or function of the AD converter. Furthermore, it is also possible to store the first and / or second input signals output by the AD converter 100 in digital form S 1D , S 2Dagainst an expected value. Advantageously, the expected value is specified by the control and evaluation device 600.

[0079] During test operation, a test routine is executed in the form of a program, preferably in the control and evaluation device 600. The test routine can be initiated manually by a user and / or cyclically by the control and evaluation device 600 or by a higher-level controller (PLC) and contains a sequence of instructions for controlling parts of the safety circuit, in particular the signal source 700 of the test device 300.

[0080] The signal source 700 is used, for example, by a processor or preferably by one of the microcontrollers µC1 or µC2 to output a defined analog test signal S TA This test signal S TAcan be a ground potential, a voltage potential, a (time-) variable voltage potential or a current or a variable current ( Fig. 4).

[0081] The test device 300 according to the embodiment of the Fig. 3, controllable by the evaluation and control device 600, controls the switches 355 with the switching logic 360 such that the first signal line 410 is connected via one of the first analog test outputs, for example 310a of the test device 300, to the analog input 302 of the test device 300. The analog test signal S TA superimposes the first input signal in analog form S EA1 on the signal line 410 and dominates the first input signal in analog form S at the analog input 101 of the AD converter 100 EA1 , while the first input signal in analog form S EA1 is damped by the damping element Z1.

[0082] In the simplest case, attenuation changes the amplitude of the first input signal in analog form, in particular by reducing it.

[0083] The AD conversion device 100 in the embodiment of the Fig. 1 converts the analog test signal S TA for example, into a first input signal in digital form S 1D The evaluation and control unit 600 checks the first input signal in digital form S 1D against an expected value corresponding to the digitized analog test signal S TA If the values ​​match, it can be assumed that the analog-to-digital conversion in the AD converter 100, the associated signal and data lines, and the data interfaces are error-free.

[0084] This test can also be performed for the second signal line 420. Advantageously, the tests can be performed in a temporal sequence, for example, one after the other, so that the signals S output by the sensor E can continue to be processed by the control and evaluation unit 600 without interrupting an ongoing process.

[0085] Fig. 4 shows a diagram with a signal curve as a function of time, which is applied, for example, to the first analog input (101) of the AD conversion device (100).

[0086] The input signal in analog form S AE is at time t1, the start of the test period T test , from the analog test signal S TA superimposed, whereby the analog test signal S TA In the simplest embodiment, the following condition is satisfied by S TA > 0 and S TA > S EA The test period is defined by the time interval Ttest = t2 - t1. For the analog test signal S TA It can be a temporally constant signal, for example a voltage potential, a ground potential (S TA = 0) or a constant current signal. However, it is also conceivable that the analog test signal S TA a variable voltage potential or a variable current, where variable in this context means, for example, a voltage which is constant over the test period Tt est can mean a temporally changed course of the analog test signal. What is particularly advantageous is that in this test the entire value range of the AD conversion device is run through and can therefore be tested. LIST OF REFERENCE SYMBOLS 1 safety circuit 100, 100', 100'' AD transfer device 101, 102 first, second analog input 109, 110 first, second digital output 150, 160 AD converters 300 test facility 301 Control input 302 Test Input 310a,...,310f first analog test output 320a,...,320f second analog test output 350 switching device 355 switches 360 switching logic 410 first signal line 411 Junction 420 second signal line 421 Junction 430, 440 data lines 500, 500', 500'' input circuit 501 Exit 600 control and evaluation device 601 first entrance 602 second entrance 609 Control output 610 Control output for signal source 700 signal source 701 Control input S E , S E ' S E '' Sensor signal S EA1 , S EA1 ', S EA2 '' first input signal in analog form S EA2 , S EA2 ', S EA2 '' second input signal in analog form S 1D , S 1D ', S 1D '' first input signal in digital form S 2D , S 2D ', S 2D '' second input signal in digital form S TA analog test signal Z1, Z1', Z1'' damping element Z2, Z2', Z2'' damping element µC1 first controller µC2 second controller T test Test period t1, t2 start time, end time t3, t4 start time, end time

Claims

[1] Circuit (1), comprising: an input circuit (500) configured to connect an analog sensor, wherein the input circuit (500) comprises an adaptation circuit for outputting a sensor signal (S E ) at an output (501) of the input circuit (500); a test device (300) with a test input (302) for inputting an analog test signal (S TA ), a first analog test output (310) and a second analog test output (320); an AD converter (100) having a first analog input (101) and a second analog input (102); a first signal line (410) connected to the output (501) of the input circuit (500) and to the first analog input (101); a second signal line (420) connected to the output (501) of the input circuit (500) and to the second analog input (101); and a control and evaluation device (600) with a first input (601) and a second input (602); wherein a first damping element (Z1) is connected in series in the first signal line (410), so that a sensor signal (S E ), wherein a damping factor derived from the first damping element (Z1) is co-determined by its impedance; wherein a second damping element (Z2) is connected in series in the second signal line (420), so that a sensor signal (S E ), wherein a damping factor derived from the second damping element (Z2) is co-determined by its impedance; wherein a first AD converter of the AD converter device (100) converts the attenuated sensor signal (S EA1) into a first digital signal (S 1D ) is implemented; wherein a second AD converter of the AD converter device (100) converts the attenuated sensor signal (S EA2 ) into a second digital signal (S 2D ) is implemented; wherein the AD conversion device (100) is arranged to convert the first digital signal (S 1D ) via a first data line (430) to the first input (601) of the control and evaluation device (600); wherein the AD conversion device (100) is arranged to convert the second digital signal (S 2D ) via a second data line (440) to the second input (602) of the control and evaluation device (600); wherein the first analog test output (310) and the first analog input (101) are electrically connected to the first damping element (Z1) at a first node (411). wherein the second analog test output (320) and the second analog input (102) are electrically connected to the second damping element (Z2) at a second node (421); wherein a lower output impedance of the first analog test output (310) results in a larger signal amplitude of a first test signal output at the first analog test output (310) than the signal amplitude of the first input signal (S EA1 ), so that the first test signal dominates at the first analog input (101); and wherein a lower output impedance of the second analog test output (320) results in a larger signal amplitude of a second test signal output at the second analog test output (320) than the signal amplitude of the second input signal (S EA2 ), so that the second test signal dominates at the second analog input (102). [2] Circuit (1) according to claim 1, further comprising: a signal source (700) which is connected to the test input (302) and via a control line to a control output (610) of the control and evaluation device (600) and is configured to generate the analog test signal (S TA ) according to a specification by the control and evaluation device (600).

Images