SYSTEM FOR CONTROLLING AN AUTOMATED DEHOCKING SYSTEM, USE OF THE SYSTEM AND METHOD FOR CONVERSIONING A CONTROL SYSTEM

Abstract

System for controlling an automated smoke extraction system, wherein the system is structured as a ring bus system and comprises an automation station and several network stations formed by BUS modules, wherein the system comprises a first printed circuit board (12), a bridge connector (14) and a second printed circuit board (16), which are independent participants in the bus system and monitor the overall state of the system, the first printed circuit board (12) comprising first connection devices (18) for the bridge connector (14) and second connection devices (20) for the second printed circuit board (16), such that the bridge connector (14) and / or the second printed circuit board (16) can only be connected to the first printed circuit board (12) in a specific way,wherein the first circuit board (12) and the second circuit board (16) are configured to independently evaluate information and to exchange and / or compare information via an interface (24) so ​​that mutual control takes place to increase safety.

Description

[0001] The invention relates to a system for controlling an automated smoke extraction system, wherein the system is configured as a ring bus system and comprises an automation station and several network stations formed by BUS modules. The system further comprises a first printed circuit board, a bridge connector, and a second printed circuit board. The invention also relates to a use of the system and a method for upgrading a control system from SIL(i) suitability to SIL(i+1) suitability.

[0002] Buildings, building complexes, and technical facilities such as airports or train stations no longer simply represent a static shell; they typically also incorporate complex technical systems that regulate and control, for example, ventilation, air conditioning, fire protection, or the operation of individual components within the building, such as windows, doors, shutters, ventilation systems, or sprinkler systems. There is a significant technical and societal need to design such building automation systems to be particularly safe and reliable, ensuring that these systems function properly and in accordance with the applicable safety regulations both during normal daily operation and under exceptional conditions, such as a fire.

[0003] Building automation systems fall within the scope of various safety standards and regulations. For the purposes of this invention, the term "building automation" preferably refers to the entirety of monitoring, control, regulation, and optimization devices within buildings. The aim is to execute overarching functional sequences independently (automatically) according to predefined parameters, or to simplify their operation and monitoring. In particular, the relevant technical units (devices, sensors, control elements) within the building can be networked and processes combined. Such building automation systems often feature a decentralized arrangement of control units and comprehensive networking via a bus system.

[0004] One important aspect addressed by building automation is, for example, smoke extraction from buildings. Experience from fires has shown that the vast majority of fatalities and a large proportion of property damage are attributable to toxic and corrosive smoke. The task of preventive fire protection is therefore not only to prevent the outbreak of fire, but also of smoke. In the event of a fire, technical systems must be used to prevent the spread of smoke as well as to ensure smoke extraction from buildings. For example, state-of-the-art technology includes automated smoke extraction systems that, in particular, make it possible to keep escape and rescue routes clear of smoke and to extract smoke from the fire area on demand, in a decentralized and autonomous manner. Specifically, a smoke extraction system can be used for smoke and heat removal during fires in buildings.

[0005] Structural measures, in conjunction with technical systems, help to prevent smoke from spreading. However, the mere existence of these measures is not enough for effective building smoke extraction. Automation, in particular—that is, the automated integration of the technical systems for controlling, regulating, and monitoring the key smoke extraction elements—is crucial. When automating building smoke extraction systems, technical safety requirements must be met to guarantee functionality and minimize the probability of failure.

[0006] Safety functions serve to protect people, the environment, and property. These functions are implemented through a safety circuit, which can consist of various switching elements and components. The reliability of a system's safety functions, depending on the hazard, is represented by a so-called safety requirement level. Processes with a lower hazard level are implemented using a safety circuit with a lower level than processes with a higher hazard level, where, for example, people could be killed. Typical safety functions include emergency shutdowns, the shutdown of overheated equipment, and the monitoring of buildings using fire alarm systems.

[0007] Building automation systems often constitute so-called "electrical, electronic, and programmable electronic systems," preferably also referred to as "E / E / PE systems." These are typically configured to perform a safety function. A safety function might, for example, consist of closing a specific fire door in a building at a predetermined time in the event of a fire or upon the occurrence of certain events. Another example of a safety function is activating the sprinkler system in the building. Based primarily on international standards, safety requirements are defined with different discrete levels, the so-called Safety Integrity Levels (SILs), which, for the purposes of this invention, are preferably also referred to as safety levels.Safety Integrity Level (SIL) 4 represents the highest level of safety integrity, while SIL 1 represents the lowest. The higher the numerical SIL value, the greater the risk reduction. The SIL thus primarily represents the probability that the safety system can correctly fulfill its required safety functions for a specific period. To determine the SIL value, the individual failure probabilities of the components used in a Safety Instrumented System (SIS) are summed. The SIS is preferably considered in its entirety, and a Safety Integrity Level can only be assigned to an entire safety circuit.

[0008] A Safety Instrumented System (SIS) is preferably used to safeguard a hazardous process and reduce the risk of an accident. Such systems consist, for example, of sensors, processing units, and actuators, which constitute the components of an SIS. To determine the safety integrity level (SIL) of an SIS, i.e., to evaluate the SIS with regard to its functional safety, the entire component chain, for example, from the sensor to the actuator, is preferably considered. For determining the SIL value, the safety-related components of the SIS are given particular attention.

[0009] These safety levels serve to assess electrical, electronic, and / or programmable electronic E / E / PE systems with regard to the reliability of safety functions. The target level determines the safety-oriented design principles of the technical system and its control device, which must be adhered to in order to minimize the risk of malfunction.

[0010] As part of a hazard assessment, the planners and operators of systems with safety-related functions define a safety level for each function. Based on this definition, suitable devices are selected and integrated into a system for controlling the technical system. Up to safety level 2 (SIL 2), the manufacturer can perform this task independently; from safety level 3 (SIL 3) onwards, an independent body must be involved, which issues a corresponding certificate upon successful certification.

[0011] Determining the safety integrity level (SIL) requires analyzing the failure behavior of the assembly under consideration, particularly switching elements and control devices, to determine the failure rates. Based on these failure rates and the ratio between safe and unsafe failures, the SIL and reliability can be assessed.

[0012] The failure rate λ, as a key performance indicator for the reliability of an object, indicates how many objects fail on average within a unit of time. It is expressed as failures per unit of time. If the failure rate is constant, the reciprocal is the mean lifetime; for repairable objects, it is the mean time between two failures. A specific key performance indicator for the failure rate is the "Failure In Time" (FIT), which is preferably expressed in the unit "failures per 10 9 hours are indicated.

[0013] In particular, systematic errors, such as those in the software used by the SIS, and random errors, such as those affecting the hardware, are taken into account when determining the safety level. When designing SIS systems and planning and developing technical installations, for example, in building automation, redundancy within the control system or its components or the corresponding software is sought. For the purposes of this invention, the term "redundancy" preferably describes the additional availability of functionally identical or comparable resources within a technical system when these are not normally required during trouble-free operation. For the purposes of this invention, resources can include, for example, redundant information, motors, assemblies, complete devices, control lines, and power reserves.These additional resources serve to increase reliability, functionality and operational safety.

[0014] In particular, the goal of so-called functional redundancy is to ensure that safety-related systems are designed with multiple parallel versions, so that if one component fails, the other components maintain service. Further improvements in fail-safe operation can be achieved in some systems, for example, by physically separating redundant systems. This minimizes the risk of the separated systems experiencing a common failure simultaneously. Furthermore, components from different manufacturers can be used in SIS or technical systems to prevent a systematic error from causing the redundant systems to fail. Software can also be designed redundantly, for example, by differing in terms of specification, specification language, programming, programming language, or compiler in the software used in redundant systems.

[0015] To ensure the necessary redundancy, particularly to meet SIL3 requirements, control systems known in the art employ two independent hardware-based controllers. Unfortunately, these systems are typically designed for machinery or the process industry and, due to their design, are often unsuitable for use in building automation.

[0016] EP 1 796 217 A1 relates to a method for producing electrical connections between printed circuit boards, wherein, for example, an interface for SMD (surface mounted device) high current connections between a first and second printed circuit board can be provided.

[0017] US 2017 / 0 118 838 A1 describes a three-dimensional rigid flex PCB, which comprises islands of rigid PCB circuit boards that can be connected by means of flexible PCB connectors.

[0018] DE 10 2016 111 690 A1 relates to a power distribution unit for a vehicle, comprising a first circuit board for diagnosing and / or securing a power supply. In one embodiment, it may be preferred to provide a second circuit board in the power distribution unit, which allows for a redundant power supply.

[0019] Typically, installing and using products and components suitable for meeting a higher SIL safety level involves higher costs than using a component with a lower SIL.

[0020] The system has reached a certain SIL level. For cost and efficiency reasons, plant operators or developers typically strive to use components and parts with a low SIL safety level. However, it may be necessary to meet higher safety requirements during the operation of a plant over its lifetime. For example, it may be necessary to upgrade a plant from Safety Integrity Level 2 (SIL 2) to Safety Integrity Level 3 (SIL 3). Therefore, among other things, in terms of cost efficiency, it is desirable for the user to have a technical solution for a control device for technical systems that can be easily upgraded from a lower to a higher safety integrity level, with the system upgrade, for example from SIL 2 to SIL 3, being as simple, cost-effective, and error-free as possible.

[0021] It is therefore an object of the present invention to provide such a system and a method for retrofitting such a system that meet these conditions. Furthermore, the system to be provided should be suitable for use in the field of building automation. Description of the invention:

[0022] The problem is solved by the features of the independent claims. Advantageous embodiments of the invention are described in the dependent claims.

[0023] According to the invention, a system for controlling an automated smoke extraction system is provided, wherein the system is structured as a ring bus system and comprises an automation station and several network stations, which are formed by BUS modules. The system is characterized in that it comprises a first printed circuit board, a bridge connector, and a second printed circuit board, which are independent participants in the bus system and monitor the overall state of the system.The system is further characterized in that the first circuit board comprises first connection devices for the bridge connector and second connection devices for the second circuit board, such that the bridge connector and / or the second circuit board can only be connected to the first circuit board in a specific way, wherein the first circuit board and the second circuit board are configured to independently evaluate information and to exchange and / or compare information using an interface, so that mutual control is carried out to increase safety.

[0024] It is preferred, according to the invention, that the automated systems may be building automation systems, safety-related controls, smoke extraction systems, smoke damper controls, fire damper controls, or control systems for fans, for example, in underground parking garages. Preferably, a smoke extraction system can be implemented as an on / off ring bus system with BUS modules. Such a system comprises, for example, an automation station, various BUS modules, and at least one ring bus system. It is preferred, according to the invention, that a smoke extraction system is designed to prevent the spread of toxic smoke gases in the event of a fire, for example, via a building ventilation system. Furthermore, it can prevent smoke from spreading to adjacent areas, rooms, or buildings.Preferably, the smoke extraction system is designed to direct or remove smoke and / or heat from a fire area.

[0025] The proposed control device can be configured to control such a smoke extraction system. The smoke extraction system is configured as a ring bus system, wherein this network arrangement, according to the invention, represents a closed cable run in which the individual network stations are interconnected. The network stations can preferably be formed by BUS modules. This network arrangement has the advantage that no network element fails in the event of a short circuit or interruption of the ring line.It is preferred according to the invention that the ring bus is preferably automatically converted into two stub buses. This advantageously keeps the network elements operational.

[0026] The ring can, for example, begin at the smoke extraction unit of the automation station and preferably include all bus nodes of the system. The ring bus system preferably terminates at the smoke extraction unit of the automation station. According to the invention, it is preferred that the bus lines at the smoke extraction unit of the automation station are routed as bus outputs to the first bus participant and connected there as bus inputs. It is further preferred that the bus participants are preferably connected sequentially. The bus output of the last participant is preferably wired as a bus input at the smoke extraction unit of the automation station. According to the invention, the ring bus system operates in the physical layer according to an RS-485 protocol. The bus modules can preferably be used as repeaters in the ring bus system. This advantageously allows bus line lengths of up to 1200 m between two bus modules.It is preferred, according to the invention, that the length of a bus line depends on the transmission speed and / or the data transmission rate. Preferably, the line paths are monitored for breakdown and / or short circuit.

[0027] It is preferred, according to the invention, that hardware components and / or BUS modules may be of similar, identical, or substantially identical construction. With identical or substantially identical construction, it may be preferred that different software configurations be used to control the hardware components (automation station smoke extraction) and / or the BUS modules. It is preferred, according to the invention, to use control concepts for the system that may be selected from a group comprising single control, parallel control, and / or multi-control, wherein, for example, single control may be active for one scenario, parallel control for several scenarios, and multi-control across the entire plant.

[0028] In accordance with the invention, it is preferred that the first printed circuit board is preferably also referred to as the lower printed circuit board and the second printed circuit board as the upper printed circuit board. In accordance with the invention, a printed circuit board is preferably a carrier for electronic components. Printed circuit boards preferably serve for the mechanical mounting and electrical connection of such components. In accordance with the invention, they are also referred to as circuit boards. They can, in particular, comprise electrically conductive material, which can preferably be designed as conductive traces. These represent conductive connections between the electronic components. The components can, for example, be soldered onto solder pads or in solder holes, thereby advantageously achieving both mechanical mounting and an electrical connection of the components to the printed circuit board.

[0029] The bridge connector can preferably also be referred to as a SIL2 bridge within the meaning of the invention. It is preferred within the meaning of the invention that the system can exist in different forms, depending on whether the bridge connector is arranged in the first printed circuit board or the bridge connector is connected together with the second printed circuit board. In this context, the term "arranged" preferably means "plugged in". In other words, it is preferred within the meaning of the invention that either the SIL2 bridge is plugged into the first printed circuit board or that the SIL2 bridge and the upper printed circuit board are plugged into the first printed circuit board. If the bridge connector is plugged into the lower printed circuit board, it is preferred within the meaning of the invention that the system is SIL2-compatible, i.e., the corresponding system meets the requirements placed on a SIL2-compatible SIS.The bridge connector preferably comprises the corresponding devices, and the appropriate measures have been taken. It is particularly preferred, according to the invention, if the bridge connector is located at POS6 within the lower circuit board or is plugged into it. It is preferred, according to the invention, that the SIL2 bridge acts as a placeholder to ensure the functionality of the lower circuit board, which is preferably also referred to as the base board, and to close the corresponding circuits. The presence of the SIL2 bridge preferably ensures that the SIL2 safety level is achieved.

[0030] The upper circuit board is preferably also referred to as a SIL3 circuit board within the meaning of the invention. When the upper or second circuit board is plugged into the lower circuit board, it is preferred within the meaning of the invention that the system is SIL3-capable, i.e., the corresponding system fulfills the requirements placed on a SIL3-capable SIS. It is preferred within the meaning of the invention that the lower and the upper circuit boards together form a SIL3 system. For this purpose, the upper and the lower circuit boards are preferably connected in parallel. The circuit boards are preferably configured to exchange data, preferably asynchronously. For this purpose, the upper circuit board preferably includes the corresponding devices and, in particular, has the required redundancy of the components and parts. Within the meaning of the invention, redundancy preferably means that two electronic controllers monitor each other, i.e.,that a first controller is configured to detect the failure of a second controller and, if necessary, preferably seamlessly take over the control function of the second controller. It is preferred, according to the invention, that the modules are configured to preferably cyclically synchronize the status of individual areas with their parallel-connected module. For this purpose, data is preferably exchanged asynchronously, preferably bidirectionally, between the two connected modules. In particular, the following data is compared: overall status of the modules, status of the inputs, and / or the fire protection zone table. It is preferred, according to the invention, that the lower and upper circuit boards are initially independent participants in the bus system, i.e., that they receive the same or substantially the same information.In the central unit, the lower and / or the upper bus board preferably alternately perform the tasks of monitoring the overall system status. In a preferred embodiment of the invention, this can occur after a preferably complete input matrix poll cycle. Likewise, a second controller can be configured to detect the failure of a first controller and, if necessary, preferably seamlessly take over the control function of the first controller.

[0031] It may be preferred, according to the invention, that the upper circuit board is used in addition to the bridge connector in the context of the proposed system. In other words, it is preferred that the system initially exists in an embodiment comprising the lower circuit board and the bridge connector, thereby achieving a SIL2 safety level, and that the system is extended by additionally inserting the upper circuit board into the connection devices of the lower circuit board, thereby advantageously achieving a SIL3 safety level. In this embodiment of the invention, the SIL3 circuit board can, for example, be arranged on or next to the SIL2 bridge within the control system. This arrangement of the upper circuit board with respect to the bridge connector and the circuit board is preferably referred to, according to the invention, as a "piggyback" arrangement or "double-decker".

[0032] These various embodiments of the invention allow the control system to achieve different safety levels. Retrofitting is made particularly easy by, for example, inserting the SIL3 circuit board into the first circuit board in addition to the bridge connector. This preferably increases the system's safety level from SIL3 suitability to SIL3 suitability, and the upgrade is achieved simply by adding an additional component, in particular the upper circuit board. The upper circuit board, through its component configuration, especially redundant configuration, and other measures, fulfills the requirements for SIL3 suitability. It is particularly preferred, in accordance with the invention, that the SIL3 circuit board is more complex and elaborate and comprises a larger number of electronic components.For example, the upper circuit board can redundantly include a microprocessor, relay devices and a working memory (RAM), thereby achieving duplication or redundancy of components that are preferably also present on the lower circuit board of the proposed system.

[0033] Due to the larger number of components, the upper circuit board is also more expensive to procure. Therefore, customers can preferably choose whether they want to purchase a system with SIL2 capability and a bridge connector, or a system with SIL3 capability and a SIL3 circuit board. For example, customers requiring SIL2 capability for a control system could purchase a kit consisting of a lower circuit board and a bridge connector, while another customer with higher safety and reliability requirements could purchase a kit consisting of both a lower and an upper circuit board with a bridge connector. According to the invention, it is most preferred to purchase the system as a set and to equip the control system, or the lower circuit board, with the bridge connector and / or the upper circuit board as needed, depending on the application and requirements.

[0034] It is preferred, in accordance with the invention, that the combination of SIL2 and SIL3 suitability achieved with the proposed control system can also be used for a combination of SIL1 and SIL2 suitability or SIL3 and SIL4 suitability. Generally speaking, the invention advantageously provides a system that makes it possible to upgrade a control system from SIL(i) suitability to SIL(i+1) suitability.

[0035] The lower circuit board preferably forms the basis for the control system and therefore has first and second connection devices, wherein the first connection devices are preferably configured to receive the bridge connector and the second connection devices are preferably configured to receive the upper circuit board. This preferably ensures the easy additional attachment of the SIL3 board. The bridge connector and / or the second circuit board can only be connected to the first circuit board in a specific way. In the context of the invention, this preferably means that the bridge connector and / or the second circuit board can only be connected to the first circuit board in a specific way. This can be achieved, for example, by designing the corresponding connection means according to a Poka-Yoke system.This means that components of the lower circuit board, or rather the first and second connection devices, on the one hand, and the corresponding components of the bridge connector and the upper circuit board, on the other, can be matched to each other with regard to positive fit, size, shape, and / or material. Just as a key can only be inserted into a lock in a specific way, here the bridge connector and / or the upper circuit board can preferably only be inserted into the lower circuit board in a specific way, because the design of the connection devices and the corresponding parts of the bridge connector and / or the upper circuit board, for example due to their shape, only allows assembly in this one way.It may also be preferred, in accordance with the invention, that instead or additionally, there is a coordination with regard to the colors used, or that the correct insertion of the components is indicated by the illumination of a lamp or by the emission of a sound, for example, a horn or a hum. The coordination of the lower circuit board, or the connection devices, on the one hand, and the jumper connector and the upper circuit board on the other hand, practically eliminates or prevents incorrect assembly of the components of the proposed system. This type of corresponding design of the respective components advantageously leads to a significant reduction in the susceptibility to errors due to human carelessness.

[0036] The lower circuit board comprises a first connection device for receiving the bridge connector and a second connection device for receiving the upper circuit board. It is preferred, according to the invention, that the connection devices and the corresponding components on the bridge connector and the upper circuit board are designed such that they can only be joined or plugged into one another in a specific manner. This can preferably be achieved by a corresponding design of the components of the connection devices, the bridge connector, and the upper circuit board that interact with each other within the preferred plug connection.It is particularly preferred, in accordance with the invention, that this preferably unique fastening option applies both with regard to the position of the bridge connector and the upper circuit board on the lower circuit board, and with regard to the manner in which the bridge connector can be inserted into the first connection device and the upper circuit board into the second connection device, i.e., for example, how the system components are oriented and / or rotated relative to each other. It is especially preferred, in accordance with the invention, that the bridge connector and the upper circuit board are connected to the first circuit board by a connector, this connector being specifically designed to enable data exchange between the first circuit board on one side and the bridge connector and the upper circuit board on the other.In particular, the connection allows data, information, and results to be exchanged between the first circuit board on one side and the bridge connector and the upper circuit board on the other. The upper and lower circuit boards are preferably configured to synchronize the status of individual areas with their preferably parallel-connected modules, preferably cyclically. For this purpose, data is preferably exchanged asynchronously and bidirectionally between the two modules, with the upper and lower circuit boards being able to be plugged together.

[0037] In accordance with the invention, it is further preferred that the first printed circuit board and the second printed circuit board comprise predetermined positions for receiving additional electronic components. It is particularly preferred that the first printed circuit board comprises, for example, eight positions, which, in accordance with the invention, are designated POS1 to POS8. Preferably, these positions correspond to corresponding positions in the second printed circuit board or the bridge connector, wherein corresponding positions are designated, for example, POS1' or POS4'.

[0038] It is preferred according to the invention that both the first and the second circuit boards comprise relay devices that are interconnected by means of an AND or OR gate. These relay devices are arranged, for example, at POS3 on the lower circuit board. Preferably, the second or upper circuit board includes a latch for the relay function. It is preferred according to the invention that two or more devices can be connected to each other using an AND gate, wherein the devices are preferably only switched on when switch-on conditions are met, which, for example, have been previously defined. With an OR gate, the devices are preferably only switched on when at least one switch-on condition is met.In the context of the present invention, it is preferred that the relay devices are activated when a switching operation is required, for example, in the event of a fire. The relay devices are preferably interconnected in such a way that an AND or OR logic gate is implemented for fault situations. It is preferred, in accordance with the invention, that the cable connection at POS3 or POS3' is configured differently for each BUS module, which may optionally be part of the system, preferably using pre-assembled cables.

[0039] In one embodiment of the invention, when the proposed system is used to control a smoke extraction fan, an OR connection between the relays, which are preferably located on the lower circuit board, may be preferred. It is preferred, according to the invention, that the jumper connector and the SIL3 circuit board comprise independent processors and / or control devices. Preferably, the upper and lower circuit boards are configured to independently evaluate information, data, and / or results, whereby the data is exchanged and / or compared with an interface, for example, a UART interface. It is particularly preferred, according to the invention, that the first circuit board and / or the second circuit board are configured to perform an evaluation of information / data and / or results.If the relevant processors or control devices arrive at a different result during the control process, such that, for example, the fan of a smoke extraction system needs to be switched on, the OR connection advantageously ensures that at least one of the processors causes the fan to be switched on, preferably by switching the corresponding relay. This example can preferably also be applied to other BUS modules and functions within the proposed system. It is preferred, according to the invention, that a BUS module is a hardware device with decentralized intelligence, and that communication within the system can take place, for example, in a master-slave communication configuration.

[0040] In accordance with the invention, it is particularly preferred that the control is based on real-time data from the field, or that real-time data from the field is used for control by the processors or control devices of the proposed system. In this sense, the proposed system controls the corresponding technical installation using safety information.

[0041] The proposed control system can, for example, comprise the following BUS modules: a fire smoke control panel, a fire alarm system, a manual control unit, a timer, a smoke extraction fan, ventilation, a fire damper, a smoke extraction damper, a coupling module, a BUS module for connecting actuators and sensors, and / or a BUS module for integrating messages. It is preferred, according to the invention, that the proposed control system can control a technical system according to the fire zone matrix. For example, if a fire alarm system automatically or manually triggers a smoke extraction request at the manual control unit or the fire smoke control panel, the proposed control system, preferably according to the fire zone matrix, controls the fire dampers, the fans, and / or the smoke extraction dampers in such a way that any smoke is removed from the building as quickly as possible.It is particularly preferred within the scope of the invention that information from the field, for example, real-time data, is distributed from the lower circuit board to the upper circuit board. It is further preferred that the first and second circuit boards are configured to exchange information via an interface. The interface can preferably be a Universal Asynchronous Receiver Transmitter (UART). In other words, the processors or control devices of the system monitor each other, thereby advantageously achieving the desired redundancy, which enables an increase in the safety level, for example, from SIL2 to SIL3. Furthermore, the processors or control devices exchange information via the interface, which is preferably formed by a connector in POS5 or POS5'.This interface is preferably also referred to as a UART interface. Such UART interfaces are preferably designed to improve communication between system components that include an RS485 protocol.

[0042] It may also be preferred, in accordance with the invention, that the raw input data, for example, the end positions of the smoke extraction dampers, are preferably routed directly to the upper circuit board via a connector. This connector can, for example, be located at POS4 / POS4'. In this case, a bus is preferably not used for data transmission. In other words, it is preferred, in accordance with the invention, that safety information, such as raw input data, from the automated system to be controlled by the proposed system can be transmitted to the second circuit board via a further connection device, the transmission preferably occurring without the use of a bus system. Preferably, the further connection device interacts with a connector, and both the connector and the further connection device can, for example, be located at POS4 / POS4'.

[0043] It is preferred, according to the invention, that a supply voltage and / or BUS protocol information can be transmitted to the second circuit board via the bridge connector. The supply voltage can be, for example, 24 V or 48 V, preferably a DC voltage. The BUS protocol information can, for example, include an RS485 protocol, wherein the BUS and the supply voltage are preferably routed to the SIL3 circuit board via the SIL2 bridge. RS485 is preferably an industry standard for physical interfaces for asynchronous serial data transmission. Advantageously, the balanced transmission improves electromagnetic compatibility.

[0044] It is preferred that in a BUS system, several terminal devices share a single data line, which is preferably referred to as the BUS line. To improve the error resistance of BUS-based data communication, a software algorithm is preferably provided which is designed to ensure reliable transmission with reduced error susceptibility. For example, a special polynomial can be used for this purpose. It is preferred, according to the invention, that both the internal and external communication protocols with which components of the proposed system communicate are generated by a polynomial that preferably has a Hamming distance of 6 or enables the achievement of a Hamming distance of 6.The Hamming distance is used for error detection and correction by comparing data units received over a transmission link with valid characters. Any necessary character correction is performed according to the principle of probability. Whether error detection or correction can occur depends on the Hamming distance.

[0045] It is further preferred, in accordance with the invention, that the second circuit board comprises a connection device for a plug connector configured for loading firmware and / or outputting diagnostic data, for example via Bluetooth. It is preferred, in accordance with the invention, that the data is transmitted non-intrusively during real-time operation of the system, preferably being read only. It is preferred that the plug connector is an RJ45 connector, such RJ connectors being known to those skilled in the art as standardized connectors for telecommunications cabling.

[0046] In particular, an RJ45 connector allows a data line with electrical resistance for secure encoding.

[0047] In another aspect, the invention relates to the use of the system for controlling building automation systems. It is preferred, according to the invention, that the building automation systems that can be controlled by the system include automated systems, safety-related controls, smoke extraction systems, fire damper controls, and control systems for fans, for example, in underground parking garages. For this purpose, preferably not at least two independent control systems are required, as described in the prior art, but preferably only one proposed control system with a lower circuit board, a jumper connector, and an upper circuit board to achieve a Safety Integrity Level (SIL) 3.Preferably, either only the bridge connector or the bridge connector and the upper circuit board are connected to the lower circuit board, making the system either SIL2 or SIL3 suitable.

[0048] In a further aspect, the invention relates to a method for upgrading a control system from SIL(i) suitability to SIL(i+1) suitability, wherein a first printed circuit board can be connected to a bridge connector, thereby giving the system SIL(i) suitability, and the first printed circuit board can additionally be connected to a second printed circuit board in addition to the bridge connector, thereby giving the system SIL(i+1) suitability. The upgrade and the increase in the safety level are thus achieved in particular by the additional addition of the upper printed circuit board to the lower printed circuit board and the bridge connector. It is particularly preferred, in accordance with the invention, that the method be carried out with a proposed system as described above.In particular, a bridge connector can be used to enable the system to meet SIL2 standards, and an upper circuit board can be used to increase the safety level to SIL3. The technical effects, definitions, and benefits described for the system apply analogously to the use of the system and the procedure, and vice versa.

[0049] The invention is described in more detail by the following figures; they show: Fig. 1 Illustration of a preferred embodiment of the lower circuit board Fig. 2 Illustration of a preferred embodiment of the upper circuit board Fig. 3 Illustration of a preferred embodiment of the upper circuit board

[0050] Fig. Figure 1 shows a preferred embodiment of the lower circuit board (12) of the proposed system. In particular, it shows Fig. Figure 1 shows the top side of a preferred embodiment of the lower circuit board (12). The first circuit board (12) or lower board (12) is shown, on which various connection devices (18, 20) can be arranged. The connection devices (18, 20) preferably serve to accommodate electronic components, in particular necessary and optional system components. Preferably, the first connection device (18) is configured to accommodate a bridge connector (14, not shown), which is preferably also referred to as a SIL2 bridge (14). The second connection device (20) is preferably configured to accommodate a second circuit board (16) or an upper board (16, see Figure 1). Fig. 3) to accommodate. This can preferably be attached to the first circuit board (12) in addition to the SIL2 bridge (14), with attachment typically being effected via a plug connection. It is therefore particularly preferred that the bridge plug device (14) and the second circuit board (16) are plugged into the connection devices (18, 20) of the first circuit board (12).

[0051] For clarity, the various positions that the connection devices (18, 20) and other components can have on the first circuit board (12) are designated POS1 to POS8. The positions on the lower circuit board (12) are preferably designated POS1 to POS8; the positions on the upper circuit board (16) are designated POS1' to POS8'. The jumper connector (14) can, for example, be plugged into the first circuit board (12) at POS6, i.e., position 6. It is further preferred that BUS inputs can be provided at positions 1 and 2, with an out-BUS at POS1 and an in-BUS at POS2. A relay (22, not shown) or a relay device (22) is preferably provided at POS3, which performs a switching operation if necessary, for example, in the event of a fire.This can be achieved by the preferred interconnection of various relay devices (22), which can be switched, for example, with an AND or an OR connection.

[0052] A connector and a connection device can be provided at POS4 of the lower circuit board (12) and POS4' of the upper circuit board (16) to transmit raw input data via the connector to the upper circuit board (16). An interface is preferably provided at POS5 / POS5' that enables data exchange between the lower circuit board (12) and the upper circuit board (16), or between processors or control units located on the lower circuit board (12) or the upper circuit board (16), respectively. This is preferably a UART interface. An RJ45 connector can be provided at POS7 or POS8 of the lower circuit board (12) and interact with a connection device on the upper circuit board (16), preferably forming a plug connection and enabling data exchange via this connection.In particular, this connection enables the loading of firmware or the output of diagnostic data in real time, for example via Bluetooth.

[0053] Fig. Figure 2 shows a preferred embodiment of the upper circuit board (16) of the system, in particular a view of the upper circuit board (16) from below, i.e., the underside. The system is typically set up such that the lower circuit board (12) forms the base of the system and is placed on a support or in a container, for example, a protective container such as a case. It is preferred, according to the invention, that an underside of the lower circuit board (12) faces this support, while an upper side of the lower circuit board (12) faces the underside of the upper circuit board (16) when the latter is inserted into the connection device (20) of the lower circuit board (12). The upper end of the system is preferably formed by the upper side of the upper circuit board (16). This description preferably defines the spatial directions "top" and "bottom".

[0054] In the bottom view of the preferred embodiment of the upper circuit board (16), the two connection devices of the lower circuit board (12) for the SIL2 bridge (14) are shown at POS6'. The bridge connector (14), together with the lower circuit board (12) and the upper circuit board (16), forms the proposed control system, wherein the bridge connector (14) is plugged into the first circuit board (12) in both the SIL2 and SIL3 suitability states, while the upper circuit board (16) can be inserted into the first circuit board (12) in addition to the bridge connector (14) to achieve the SIL3 safety level.

[0055] Furthermore, it shows Fig. 2. POS5', at which information, data, and results are preferably exchanged between the first circuit board (12) and the second circuit board (16), preferably via an interface (24, not shown). At POS4', information, particularly concerning raw input data, is transferred to the second circuit board (16, see...). Fig. 3) initiated. This information, data and results, which are preferably introduced into the second circuit board (16) at POS4' and POS5', are preferably also referred to as control signals within the meaning of the invention.

[0056] Fig. Figure 3 shows a preferred embodiment of the upper circuit board (16), in particular its upper surface. Specifically, a locking mechanism for the relay function is shown. This is preferably located at POS3'. An RJ45 connector or its connection device is provided at POS8'. Reference symbol list: 12 first circuit board 14 Bridge connector 16 second circuit board 18 first connection device 20 second connection device 22 Relay device 24 interface

Claims

[1] System for controlling an automated smoke extraction system, wherein the system is structured as a ring bus system and comprises an automation station and several network stations formed by BUS modules, wherein the system comprises a first printed circuit board (12), a bridge connector (14) and a second printed circuit board (16), which are independent participants in the bus system and monitor the overall state of the system, the first printed circuit board (12) comprising first connection devices (18) for the bridge connector (14) and second connection devices (20) for the second printed circuit board (16), such that the bridge connector (14) and / or the second printed circuit board (16) can only be connected to the first printed circuit board (12) in a specific way,wherein the first circuit board (12) and the second circuit board (16) are configured to independently evaluate information and to exchange and / or compare information via an interface (24) so ​​that mutual control takes place to increase safety. [2] System according to claim 1 characterized by , that the first circuit board (12) and second circuit board (16) redundantly include a microprocessor, relay devices and a working memory (RAM). [3] System according to claim 1 or 2 characterized by , that the system achieves SIL2 suitability on its own through monitoring with the help of the first circuit board (12), whereby by connecting the second circuit board (16) and redundant control the system achieves SIL3 suitability. [4] System according to claim 1 characterized by, that the first circuit board (12) comprises relay devices (22) which are interconnected by means of an AND or OR circuit. [5] System according to claim 1 characterized by that interface (24) is a Universal Asynchronous Receiver Transmitter (UART) interface. [6] System according to one or more of the preceding claims characterized by , that a supply voltage and / or BUS protocol information can be transferred to the second circuit board (16) via the bridge connector (14). [7] System according to claim 6 characterized by that the BUS protocol information includes an RS485 protocol. [8] System according to one or more of the preceding claims characterized by , that security information from the automated system can be transferred to the second circuit board (16) via a further connection device. [9] System according to one or more of the preceding claims characterized by, that the second circuit board (16) includes a connection device for a plug-in device which is set up for loading firmware and / or outputting diagnostic data, for example via Bluetooth. [10] Use of the system according to any of the preceding claims for controlling building automation systems. [11] Method for converting a control system according to any one of the preceding claims 1-9 from a SIL(i) suitability to a SIL(i+1) suitability characterized by , that a first printed circuit board (12) is connected to a bridge connector (14), whereby the system thereby achieves SIL(i) suitability, and the first printed circuit board (12) is additionally connected to a second printed circuit board (16) in addition to the bridge connector (14), whereby the system thereby achieves SIL(i+1) suitability.

Images