Fire control system and procedures for operating a fire control system

Abstract

Fire control system, in particular fire alarm system or fire suppression system, comprising at least two participants, each of which has at least one control input and at least one control output as well as two communication interfaces, and the participants forming a ring-shaped, closed, serial communication chain via their respective communication interfaces.

Description

[0001] The subject matter concerns a fire control system, in particular a fire alarm system or a fire suppression system, as well as a method for operating such a system.

[0002] Modern fire alarm systems and fire suppression systems always include a fire alarm control panel (FACP). This panel serves as the central hub for the fire alarm system and the fire suppression system. The fire alarm control panel collects all information from the fire alarm system, particularly information about fire incidents. The fire alarm system collects all information from the fire suppression system and controls the actuators of the fire suppression system.

[0003] When needed, for example, depending on reported fire events, the fire alarm control panel activates actuators of a fire suppression system. To initiate appropriate actions, particularly fire suppression, based on the reported fire events, a configuration file, such as a linking table, is stored in the fire alarm control panel. This configuration file defines which events lead to which actions.

[0004] For example, a configuration file can define which actuators within, for instance, which areas are activated for fire suppression when a specific fire detector signals a particular fire event. The configuration file allows for the establishment of a link between a fire detector and, for example, an actuator such as a zone valve. In the event of a fire event at a specific fire detector, only defined areas can thus be activated for fire suppression. The messages received by the fire alarm control panel can be transmitted to a higher-level system via a relay or serial communication.

[0005] Within the configuration file, the link between fire events and actions is typically predefined. The fire alarm control panel's configuration file is a complex, highly specialized file that contains, in particular, a multitude of interdependencies between sensors and actuators. Furthermore, the configuration file is usually based on a proprietary protocol and cannot be modified ad hoc by a user. This results in the fire alarm control panel being static, and changes to the topology of a fire suppression system always require extensive reprogramming of the fire alarm system.

[0006] The requirements for reliability in fire suppression systems are high. A fire alarm control panel, as the central decision-making body for activating fire suppression, represents a so-called single point of failure (SPOF). If this SPOF fails, the entire fire suppression system fails. In the area of ​​safety-critical infrastructure, such as fire suppression, there are different Safety Integrity Levels (SILs). These SILs define, among other things, a limit for the probability of system failure over time. This so-called FIT (Failure In Time) value indicates the number of components that fail within 10 9Hours of downtime are permitted. There are different safety integrity levels (SIL): SIL 1, SIL 2, SIL 3, and SIL 4. For SIL 1, the FIT value must be < 10,000; for SIL 2, < 1,000; for SIL 3, < 100; and for SIL 4, < 10. This means that in a system that meets safety integrity level SIL 3, only 100 components may fail in 10 9 Hours will be cancelled.

[0007] When a system is comprehensively configured with a fire alarm control panel, sensors such as fire detectors, and actuators such as zone valves, valves, or nozzles, the FIT values ​​of the individual components add up. This quickly leads to a FIT value exceeding 1,000, at which point the SIL (Safety Integrity Level) is no longer met. For example, if each component has a FIT value of 100, a FIT of 1,000 is reached with just 10 devices.

[0008] Especially for applications in transportation technology, such as railway engineering, the safety requirements for fire suppression are defined as SIL 2. The resulting maximum FIT (Fire Safety Integrity) is then 1,000. These 1,000 FITs are divided between the fire suppression system and the rail vehicle. Thus, only 500 FITs remain available for the fire suppression system in a rail vehicle. This means that, to meet the SIL 2 standard, each fire suppression system may have a maximum of 500 FITs, which, according to the calculation above, can be a maximum of 5 components. This is disadvantageous for equipping trains, for example, as the fire suppression systems would have to be very small and have high redundancy requirements.

[0009] Based on this disadvantage in the prior art, the subject matter was the task of providing a fire control system which has a significantly lower failure rate than conventional fire control systems, especially those with a central fire alarm control panel.

[0010] This task is accomplished by a fire control system according to claim 1.

[0011] It is proposed that a fire control system consist of at least two participants. Preferably, however, the system consists of more than two participants; in particular, it may consist of more than five participants. A participant can also be understood as a component of the fire control system. The terms component and participant may be used synonymously below.

[0012] Each participant can assume a specific function within the fire control system. The types of participants will be described below.

[0013] Each participant has at least one control input. A control input can be, for example, an input for a smoke detector, a temperature sensor, a linear heat detector, a push button / switch, or a signal. A control input can be configured as a digital input, an analog input, a control input, a bus interface, a communication interface, or something similar.

[0014] Each device has at least one control output. A control output can be, for example, a digital or analog output. A digital output, for instance, is an output that directly applies a supply voltage, such as 24V, to the device. When the output is digital HIGH, the supply voltage is applied. When the output is digital LOW, a voltage of 0V is applied. With an analog output, the output voltage can be varied or set.

[0015] In addition to at least one control input and at least one control output, the device has at least two communication interfaces. These at least two communication interfaces are configured to establish preferably wired communication between two devices. Preferably, these communication interfaces differ from those of the control input at least with regard to the communication protocol used. The communication interface at a control input is used for communication with entities outside the fire control system, for example, via standardized protocols such as CAN, CAN Open, MVB, TCP / IP, TDRP, USB, Bluetooth, or the like. The at least two communication interfaces are configured for unidirectional or bidirectional communication with a communication interface of another device. The two communication interfaces are preferably identical in structure.

[0016] Using their respective communication interfaces, the participants form a communication chain (daisy chain). The communication chain is preferably a closed chain, preferably formed as a closed ring. Serial communication takes place within the communication chain. Communication occurs using telegrams. A telegram can preferably contain control data and user data. Preferably, each telegram from a participant is forwarded along the entire communication chain. Thus, each participant receives every telegram from every other participant. A participant sends a telegram to each immediate neighboring participant. This telegram is received by the neighboring participant and forwarded to the next neighboring participant. Additionally, in parallel with forwarding, a telegram can be evaluated within a participant.The telegram travels through the communication chain in one direction, reaching as many participants as possible. A single telegram thus traverses the entire communication chain.

[0017] Because the communication chain is circular, a telegram, after traversing the entire chain, returns to its original sender. Communication is preferably strictly serial, meaning that only one telegram from a sender is transmitted at a time on the chain. Only after this telegram has completed its circuit may a new sender transmit a new telegram.

[0018] The participants are interconnected along the communication chain, preferably via a ring bus. The application protocol used can be proprietary. At the physical level, however, a standardized interface, such as differential RS485 or optical transmission, can be used.

[0019] Because the participants form a closed, serial communication chain, the FIT value of the entire system can be significantly reduced compared to conventional systems with a central fire alarm control panel. Since, as described below, the telegrams can be transmitted in both directions along the bus, thus creating a redundant communication chain, it is permissible to add the inverse FIT values ​​of the individual participants along the chain, from each sending participant to each receiving participant.

[0020] The FIT value of <1,000 required for SIL 2 is achieved by this system with a virtually unlimited number of participants. In the event of a fire, one participant typically acts as a sensor, detecting a fire and sending a fire alarm signal. A second participant is configured as an actuator and, for example, opens a valve. Between these two participants relevant for fire suppression, two or more additional participants are arranged along the communication chain. Because the communication chain is a closed loop, communication between the participants can be implemented with virtually no failure, as will be shown below.

[0021] This allows the two relevant participants in the communication chain (sensor on the one hand and actuator on the other) to each have a FIT value of 100, for example. The participants along the communication chain between these relevant participants can also have the same FIT value of 100; however, the resulting FIT value along the communication chain is multiplied by its inverse because the communication path along the chain is bidirectional, as the loop is closed. This means that communication along the chain is redundant. A telegram from the first participant can reach any second participant in either direction along the communication chain.In an undisturbed ring, the telegrams from the first participant reach the second participant via both paths of the ring. In a disturbed ring, the telegrams still reach the second participant via one path of the closed ring. This reduces the FIT value for communication along the communication chain to almost zero. Virtually only the FIT values ​​of the relevant participants—sensor and actuator—become significant. This means that a FIT value of 500 can be achieved with almost any number of participants. Therefore, the number of participants is generally no longer limited by their failure probability, but rather by the topology-related latency of the communication.

[0022] In one embodiment, it is proposed that two participants are connected to each other via a point-to-point connection. While the point-to-point connection leads to higher latency as the number of participants increases, it enables a virtually unlimited communication chain. A telegram is received and sent by each participant. When sent, the telegram is retransmitted with the same signal strength and only carried to the next participant. Thus, line-related signal attenuation is irrelevant. Latency can be minimized by keeping the processing speed within each individual participant as low as possible. This can be achieved through the appropriate use of computing power. It is also possible for a telegram to be passed through between the two communication interfaces within a participant.This can be achieved by looping through, for example, some logic gates.

[0023] Signal processing within each participant is relatively simple, as neither encryption nor complex coding, especially channel coding, is necessary. Source coding with at least one checksum, particularly CRC coding, may suffice.

[0024] The evaluation of the telegrams within each participant preferably focuses only on the evaluation of a unique identification, the user data and, if applicable, a checksum.

[0025] If the data interfaces and CPUs within the participants have high processing speeds, the latency can be kept within acceptable limits even with a large number of participants. Transmission times of up to 1 ms for a telegram from input on the first communication interface to output on the second communication interface are achievable, so that with 100 participants, the maximum latency for a complete telegram cycle is 0.1 s.

[0026] To uniquely assign a telegram to a participant, to trigger actions based on the telegram, particularly based on linking tables (configuration files), and to control communication along the communication chain, especially to prevent telegram collisions, it is useful for each participant to have a unique identifier. The unique identifier of each participant can be transmitted along with each telegram sent by that participant. When a participant sends a telegram, this telegram is linked to that participant via their unique identifier. The telegram travels through the entire communication chain, always carrying the identifier of the originally sending participant. Each receiving participant can recognize the unique identifier and, depending on this and the configuration file, trigger at least one action.

[0027] A telegram received by a participant is also sent by that participant along the communication chain using the same identifier. Within a receiving participant, a telegram is preferably only read; no data within the telegram is modified.

[0028] The unique identifier can, for example, consist of two bytes. One byte can contain a unique identifier. An eight-pin DIP switch allows for the encoding of 255 unique identifiers. Another byte can be assigned to the participant type. This byte can then be used to further identify the participant type. For each participant type, 255 individually identifiable participants can be encoded.

[0029] According to one embodiment, it is proposed that the communication chain be a closed ring. It is proposed that a participant first sends a first telegram in a first direction along the communication chain via a first communication interface.

[0030] A telegram circulates through the ring by being received by each participant and then retransmitted. Each participant in the ring evaluates the telegram and then forwards it. In an intact ring, the telegram thus returns to the original sender. According to one embodiment, this sender receives the first telegram on a second communication interface. It is proposed that the participant on this second communication interface monitors the receipt of the first telegram. This allows each participant to verify whether their telegram has circulated through the ring. Each participant is therefore able to check the integrity of the closed ring.

[0031] To further improve communication and protect against failure, it is proposed that, upon successful receipt of the first telegram on the second communication interface, the participant sends a second telegram containing at least the unique identification and user data to the second communication interface, and that the participant on the first communication interface monitors the receipt of the second telegram. This retransmission of the first telegram is optional. The first and second telegrams can be identical with respect to user data and identification.

[0032] In a closed ring, a telegram passes through all participants and is then received by the sending participant. This can involve either sending the first telegram through the first communication interface and receiving the first telegram on the second communication interface, or sending the first telegram through the second communication interface and receiving the first telegram on the first communication interface.

[0033] In a functioning communication chain, the first telegram is received at the communication interface of the sending participant, even though the telegram was not originally transmitted. This allows the participant to verify that the telegram they sent has passed through the entire communication chain.

[0034] Upon successful receipt of a telegram sent by the participant, the participant can send an end-of-transmission telegram on any of the communication interfaces. The participant can send the end-of-transmission telegram on the same communication interface from which the first telegram was sent, or on the same communication interface from which the first telegram was received. Since the communication chain is intact, it can be assumed that the end-of-transmission telegram will also complete its passage through the entire chain. It is also possible that, upon successful receipt of a telegram sent by the participant, the participant will send a pulse or signal sequence indicating the successful completion of the telegram and thus the uninterrupted communication.The following description of the function based on an end telegram applies equally to such a pulse or signal sequence and is applicable accordingly.

[0035] According to one embodiment, it is proposed that if the first telegram is not received on the second communication interface and / or the second telegram is not received on the first communication interface after a defined waiting period, the participant sends an error telegram comprising at least the unique identification and user data on the first and / or second communication interface.

[0036] If the participant who sent the first or second telegram does not receive it on the other communication interface, the communication chain appears to be interrupted. Such an interruption can be considered a fault. This fault must be reported in the communication chain by sending an error telegram. A participant responsible for faults can then evaluate this error telegram and, if necessary, initiate appropriate measures, such as issuing a signal. In addition to sending the error telegram, it can be useful to send the first or second telegram in the opposite direction along the communication chain. This ensures that telegrams are transmitted in both directions until the interruption in the communication chain occurs.

[0037] It is also proposed that, if the first telegram is not received on the second communication interface, or the second telegram is not received on the first, the participant should, after a defined waiting period, send a second telegram containing at least the unique identification and user data on the other communication interface. This ensures that the telegram is also sent on the other communication path along the communication chain, guaranteeing that participants located downstream of the disruption along the first path also receive the telegram. This ensures that appropriate measures can be taken in the event of a fire, even if an interruption has occurred along the communication chain.

[0038] According to one embodiment, it is proposed that each participant can perform the communication described above. Each participant can send a telegram on both communication interfaces and monitor the receipt of the telegram on the other communication interface. If the sent telegram is received correctly, an end telegram can be sent. If the sent telegram is not received, an error telegram (fault message, error message) can be sent.

[0039] Each participant should be able to perform the steps described above, especially after receiving the end telegram. The end telegram ensures that data collisions caused by telegrams from different participants are avoided.

[0040] As will be described below, each participant can have a configuration file. This configuration file can contain a list of all participant identifications. Each participant thus knows which other participants are present in the communication chain. A participant can determine whether it is their turn to send based on their own identification and the identification of the end telegram. Once a participant has completed their communication—that is, the payload has traveled through the entire communication chain and the corresponding telegram has been received back by the sending participant—they can send the end telegram. The next participant can then receive the end telegram and determine that the previous participant's communication is complete. The next participant can then initiate a similar communication.

[0041] According to one embodiment, it is proposed that the first and second telegrams contain identical payload data. The first telegram is sent initially. If the sending participant fails to receive the first telegram, there is a fault in the communication chain. This participant can then send a second telegram on the other communication interface. The second telegram can be identical to the first. The second telegram can also serve to enable participants located beyond the interruption / fault in the communication chain, starting from the first communication interface, to receive the telegram. Additionally or alternatively, an error telegram can be transmitted.

[0042] According to one embodiment, it is proposed that the unique identifiers of the participants are numbered consecutively. Within a consecutive numbering sequence, there may be numerical gaps, but the identifiers are assigned ascending or descending numerical values. This allows participants with successive numerical values ​​to send telegrams. After the last participant, i.e., the participant with the highest number / value in the communication chain, has transmitted their final telegram, the participant with the lowest number can send their next telegram.

[0043] According to one embodiment, if a participant has no user data to send, for example, if they are an actor and only used reactively, they can send a telegram with empty user data. Alternatively, if a participant has no user data to send, they can immediately send an end telegram when it is their turn to send their telegram.

[0044] As explained at the beginning, a wide variety of devices can participate in the fire control system. Depending on the device's function and the sensors or actuators it has, different signals are present at the respective control inputs and / or outputs.

[0045] In particular, sensors can send telegrams depending on signals at their control inputs. The telegram containing the user data, especially the user data within the telegram, can be dependent on a signal at the control input.

[0046] For example, a control input can be connected to a smoke detector. If the smoke detector detects smoke, the control input can be switched to HIGH. The telegram can contain information such as "HIGH" in the payload. The telegram can also contain information like "Fire detected" or similar.

[0047] A control input can, for example, be connected to a push button. The payload of a telegram can reflect the state of the push button, for example "closed" or "open".

[0048] A control input can be connected to a heat detector, for example, a linear heat detector. A temperature reading, for example, an analog temperature reading, can be present at the control input. The payload of a telegram can then contain a digital representation of the analog input value, in particular the temperature value.

[0049] The data contained in the telegrams can vary. It can be digital states HIGH or LOW. It can be digitally coded values. It can be digitally coded values ​​derived from analog measurements.

[0050] To avoid data collisions on the communication chain, it is necessary to prevent two participants from sending a telegram simultaneously. According to one example, this can be achieved by having a starting participant initiate the communication. For instance, the participant whose unique identifier has the lowest value of all participant identifiers could be defined as the starting participant.

[0051] Each participant preferably has a configuration file. A configuration file preferably contains information about the unique identifiers of all other participants. A participant can determine whether they are an initial participant or not based on their own identifier and the identifiers of the other participants. An initial participant can initiate communication and send an initial telegram. Sending, receiving, and monitoring user data in telegrams, error telegrams, or end-of-communication telegrams can then be carried out accordingly.

[0052] After the starting participant sends their end telegram, it can be received by the next participant. This participant can then send their payload as described. An end telegram does not necessarily have to travel through the entire communication chain. Once the next participant has received an end telegram from the lower-ranking participant, the end telegram can be discarded and no longer forwarded. The receiving participant can then begin sending their telegram as described above.

[0053] The starting participant can determine when the last participant in the sequence has sent their end telegram. The starting participant can then send their next telegram. This ensures, through the use of unique identification and the configuration file, that only one participant sends a telegram at any given time.

[0054] According to one embodiment, it is proposed that each participant evaluates every telegram received on one of its communication interfaces. Evaluation can include comparing the telegram's identification with identifications in the configuration file. Evaluation can also include capturing actions stored in the configuration file. Actions stored in the configuration file can be linked to identifications within the configuration file.

[0055] Each participant receives every telegram as long as the communication chain is uninterrupted. During analysis, the identification can be evaluated. The user data can also be analyzed. Depending on the identification and the user data, an action can be triggered for a participant, based on a configuration file or a linking table. A configuration file can be a linking table itself or contain a linking table.

[0056] According to one embodiment, it is proposed that the participants along the communication chain receive all telegrams on a first communication interface and send them on a second communication interface. Alternatively, the participants along the communication chain can receive all telegrams on a second communication interface and send them on a first telecommunications interface. Sending can involve forwarding the telegrams. Preferably, the telegrams are sent unchanged. A participant preferably only reads a telegram and then forwards it unchanged. Sending ensures that every participant along the communication chain can receive every telegram.

[0057] According to one embodiment, it is proposed that one of the participants, in particular the initiating participant, sends a configuration file along the communication chain. The configuration file can be sent as payload in a telegram. Such a telegram can be transmitted through the communication chain like any other telegram. A configuration file can also be understood as a linking table. A configuration file can initially record which participants are included in the communication chain. This can be done, for example, by specifying all the identifications of all participants in the communication chain. This information about all participants can be maintained initially, i.e., during the system setup or when the system is modified.

[0058] A configuration file can contain links. Links can mean that only telegrams from specific (linked) participants are evaluated with regard to their content, i.e., the payload. Links can mean that specific (linked) actions are triggered depending on telegrams from linked participants. Links can mean that a participant receives payload from a specific other participant, and this payload contains a specific value (e.g., logical HIGH / LOW), and the receiving participant performs a dependent action, for example, outputting a control voltage at its control output.

[0059] In one example, participant A could be a fire detector. Participant B could be, for instance, a control unit for a zone valve or a zone valve itself. Upon detecting a fire, participant A can send a telegram using its identification and a logical HIGH payload. If participant A does not detect a fire, it can send a telegram using its identification and a logical LOW payload, or it can immediately send an end telegram. The telegram from participant A travels through the communication chain and is also received by participant B. The configuration file can specify that participant B should react to telegrams from participant A, specifically by evaluating them. The configuration file can also specify that participant B should perform certain actions depending on the payload of a telegram from participant A.The configuration file may contain a setting that if the payload of the telegram from participant A contains a logical HIGH, the control input of participant B is switched.

[0060] In the example above, if participant B receives the telegram from participant A with payload data at a logical HIGH level, a range valve of participant B can be opened. This is a very simple case of linking payload data and actions at a participant.

[0061] To ensure that the configuration file is distributed to all participants along the communication chain, it is suggested that the initial participant sends the configuration file in a telegram. The initial participant can be configured with the configuration file; that is, the configuration file can be uploaded / loaded onto the initial participant, for example, via a USB interface or similar. The initial participant then sends a telegram containing the configuration file as payload. The initial participant can monitor whether this telegram travels through the entire communication chain by monitoring the receipt of the telegram containing the configuration file on the other communication interface.

[0062] According to one embodiment, it is proposed that several participants have an identical design. A participant can have at least one input and at least one output. An input can be designed to acquire analog signals, which may, for example, be in the following ranges: Current: 0-20 mA; Voltage: 0-30 V

[0063] An input can be designed to connect, for example, the following sensors: Linear heat detectors; Switch push button Resistance networks.

[0064] At least one function can be linked to a specific value of a signal at the control input. The function determines, for example, what role the device plays within the system. The function can be defined by the configuration file. A function can be switching or controlling a control output. A function can also be outputting a signal on another communication interface to a higher-level system outside the communication chain.

[0065] Since each participant needs to know their configuration, it is suggested that the configuration file be distributed throughout the communication chain. The configuration file can specify which action, specifically which control output, should be activated and how, under which condition, particularly which signal at the control input. Specifically, a control output can be switched or a signal can be output based on an input signal. An input signal can be present at a signal input. An input signal can be a telegram. An input signal can be derived from the payload of a telegram. From the input signal, e.g., depending on the payload of the telegram, a control output can be switched or a signal can be output.Depending on the data in the telegram and the input signal, a control output can also be switched at the signal input of the participant itself, or a signal can be output at the control output.

[0066] Delays can also be specified in the configuration file. For example, the configuration file can define the delay with which a particular response (e.g., at the control output) should occur in response to a specific input signal. The configuration file can also specify the time it should take for a particular state to be reached at the device's control output.

[0067] The configuration file can be individually configured, uploaded, or programmed for each participant. The configuration file can be exchanged between participants via the communication chain. It is also possible that if a participant is physically replaced, the configuration file can be automatically transferred to the new participant via the communication chain. The distribution of the configuration file can be initiated by the initial participant.

[0068] It is proposed that each configuration file have a unique serial number. This unique serial number allows for the unambiguous identification of the configuration file. This ensures that the system always contains up-to-date configuration files. A user can compare the serial number of a previously saved configuration file with the serial number of a newly received configuration file (e.g., distributed via the communication chain). If there is a discrepancy, the saved configuration file can be replaced with the newly received one. This ensures that users always have an up-to-date configuration file.

[0069] According to one embodiment, it is proposed that each participant compares each received telegram with information in the configuration file and triggers an action at the control output depending on the comparison. As mentioned previously, the payload data in the telegram can be evaluated. In addition to the payload data, the telegram's identification can also be evaluated. Depending on whether payload data is received from a specific participant and whether this payload data meets a certain condition, an action can be triggered at the control output. The condition and the participant's identification can be stored as information in the configuration file.

[0070] Within the system, two telegrams can be of particular importance. These can be, on the one hand, a fault telegram and, on the other hand, an alarm telegram.

[0071] It is proposed that at least one participant be a so-called relay module. The sole purpose of this participant is to issue an alarm or fault message. A relay module can either wait on the communication chain for the receipt of a fault telegram or ensure the smooth operation of the communication chain. A relay module can be configured as the initial participant, for example, receiving the lowest-digit identification, such as ID 1. This low-digit identification causes communication in the communication chain to be initiated by this participant. This participant is the first to send a telegram on the communication chain in the manner described above and can initially determine whether the chain is faulty or not. If the chain is faulty, i.e.,If the telegram does not return to the starting participant, such a participant would issue a fault message to its control output.

[0072] Another participant, or the starting participant, can be an alarm participant. In the latter case, the alarm participant can have an identification number closer in digits to that of the starting participant, for example, ID 2. The alarm participant could monitor an alarm telegram on the bus. If an alarm telegram is received by one of the participants on the communication chain via a corresponding telegram, the alarm participant can output an alarm on its signal output or control output.

[0073] To ensure that all participants transmit their telegrams, it is proposed that each preceding participant, after transmitting its end telegram, monitors whether the next participant sends a telegram. If, after a predetermined time following the sending of the end telegram, no telegram is received from the next participant (i.e., the preceding participant does not receive a corresponding telegram), the preceding participant can send a fault telegram. Upon receipt of a fault telegram by a relay participant, a fault message can be issued. According to one embodiment, it is proposed that the participant who sent an end telegram monitors, on at least one of the communication interfaces, the reception of the telegram by the participant whose unique identifier immediately follows.If such receipt of the corresponding telegram cannot be detected, the monitoring participant can issue a fault message.

[0074] According to one embodiment, it is proposed that the participant responsible for monitoring a fault, upon receiving a fault telegram, requests the participant causing the fault to send a status telegram between one and three times using a corresponding telegram. If such a telegram is not sent, the participant responsible for monitoring the fault can request the participant causing the fault to send its user data on the communication chain by means of a new telegram.

[0075] The electrical and functional design of the devices is preferably identical or nearly identical, with only the actions and functions that are available and to be executed depending on control inputs being configurable. Thus, each device has a controller, which can be a microchip or an ASIC. All devices can have an identical controller that can be configured to perform specific functions.

[0076] Furthermore, each participant has access to storage. This can be non-volatile storage. The configuration file / link table can be stored in this storage. A log file can also be stored in this storage.

[0077] Additionally, each participant can have a power supply input. Preferably, the participants have a 24V architecture and are powered by 24V. It is possible for each participant to have its own 24V supply by incorporating a suitable transformer. It is also possible for multiple participants to be supplied with power via a single power supply module. The power supply can connect the participants in parallel with the communication chain. However, it should be noted that only a limited number of participants can be powered by a single power supply module, as the voltage drop along the line becomes too high beyond a certain cable length. The available power for all participants may also be limited by the cable length.Finally, such a central supply module has the disadvantage that if the supply module fails, several participants will fail simultaneously.

[0078] Preferably, the supply voltage is applied directly to the control output. If the control output is a digital control output, the supply voltage can be passed through directly. According to one embodiment, it is proposed that the control output be configured such that the input voltage of the device is directly applied as the output voltage at the control output when the control output is switched on. This digital switching eliminates the need for voltage regulation within the device, allowing for a particularly simple design. According to one embodiment, a control output can include power monitoring. This allows the connected load, and in particular its impedance, to be monitored at the control output, thus verifying the presence of a valid load. The configuration file can specify whether an output switches once or alternately.

[0079] It is also conceivable that telegrams from different participants could trigger the output. The configuration file can be used to define the priority levels for each participant when switching the output.

[0080] Each participant can be equipped with an indicator. The indicator can include light sources, particularly LEDs, that show the participant's status. A first indicator can show the input status, a second indicator can show the output status, and a third indicator can show the communication status. The indicators can be multicolored, particularly using multicolored LEDs. The color can indicate the status.

[0081] As mentioned previously, different participants in the system can initially be built identically. However, through appropriate configuration of the control inputs and outputs, as well as the configuration of the telegrams, especially the payload data of the telegrams, the participants can perform different tasks. These participants are also referred to as components or modules.

[0082] According to one embodiment, a participant can be a detector. This could be a smoke detector, temperature detector, or combination detector. Various sensors, such as those mentioned, can be connected to the control input. Depending on the input signals from these sensors, user data can be configured and then sent in the telegrams. For example, one user data field could be "fire detected." Another user data field could be "no message," meaning that no smoke, fire, or elevated temperature was detected. The control input of such a participant can be, for example, a digital or analog input, depending on the sensor. Based on the signal levels at the input, the user data can be configured accordingly, and the telegram can be sent.

[0083] According to one embodiment, a participant can be a zone valve or a control unit for a zone valve. The control output can provide a control voltage for an actuator of a valve, for example, a ball valve, a three-way or multi-way valve, or the like. Activating the control output moves the actuator.

[0084] The position of the actuator can be detected via a control input. The actuator can be moved to various positions. Sensors can be provided on the actuator to detect its position and report it to the participant via the control input. This allows the participant to move the actuator to specific positions, for example, by sending specific telegrams. The participant can, for instance, listen for a telegram from another dedicated participant containing a fire alarm. This connection can be defined in the configuration file. If the corresponding dedicated participant has an action "Open valve" defined in the connection table, the participant can then open the control valve accordingly.

[0085] Another participant can be an input / output module (I / O module). This can contain both analog and digital inputs and outputs, whose levels, signal sequence, or similar parameters can be configured in the configuration file.

[0086] According to one embodiment, a participant can be a relay module. This relay module can have an input and an output for, for example, a safety relay with changeover contacts. In particular, an analog input as well as an analog output can be used. The safety relay can be switched via the analog output in order to signal an alarm or fault.

[0087] According to one embodiment, a participant can be a gateway. A gateway can be used to connect the communication chain to subordinate or superior systems. For this purpose, an additional communication interface, the control input, and / or the control output can be used, for example. The gateway can be configured to communicate via specific protocols, such as Ethernet, MVB fieldbus, or similar. Preferably, the gateway serves exclusively to communicate information out of the system. Preferably, no information is communicated into the system via the gateway. Preferably, log files of individual participants are communicated externally via the gateway. The gateway acts as a communication translator and either has no control input or control output, or these are not activated.

[0088] According to one embodiment, a participant can be a heating control unit (HCU module). Temperatures at the control inputs can be reported using temperature sensors. Both digital and analog signals from temperature sensors can be acquired for this purpose. Controlled accordingly by a telegram, such a heating control unit can heat a fire suppression water storage tank, for example, using a heating mat attached to a hydraulic cylinder. This ensures that no ice forms. The heating control unit can operate autonomously and, for example, depending on the measured temperature at one of the control inputs, control the output so that the heating element is switched on and the fire suppression water is kept liquid. A contactor can be connected to the control output, for example, to supply power to a heating mat.Using a contactor can be advantageous because the heating mat is a high-power load that may not be switchable via the control output. Switching large loads requires additional conditions that may not be met by the control output of a single device. Therefore, a contactor is a sensible solution.

[0089] In this system, all participants operate on an equal footing. A central fire alarm control panel or similar is not provided, thus eliminating a single point of failure.

[0090] In this system, each participant listens to / receives / listens to all telegrams and evaluates them. Each participant has a configuration file and can trigger actions based on the telegrams and the configuration file. The participants are preferably at least partially identical in their configuration.

[0091] Each device has at least one control input and at least one control output. Signals can be received via the control input. Depending on the sensors connected to the control input, the device can be used for a wide variety of functions. For example, it can be used as a smoke detector, fire alarm, temperature detector, push button, or similar device.

[0092] By using a control output, each device can also be used for fire suppression, for example to control a servo motor. However, the output can also be used for other applications, such as a user interface or similar.

[0093] The inventors recognized that a central fire alarm control panel is the weakest link in conventional systems. This central control panel means that conventional fire suppression systems above a certain size can no longer meet the SIL 2 standard. The distributed solution presented here, with its independent components connected via a communication chain, eliminates this single point of failure. This allows even large systems to meet the SIL 2 criterion.

[0094] In this system, participants send telegrams in a daisy chain, meaning each participant only sends when authorized. Sending occurs sequentially. A participant terminates a transmission by sending a corresponding end-telegram.

[0095] A telegram is a global message that can be received and interpreted by any other participant along the communication chain. For this to happen, every participant in the communication chain must listen / hear / receive and process all telegrams.

[0096] Whether an action is triggered by a received telegram depends on a configuration file. In this particular solution, it is preferred that no direct addressing of the participants occurs.

[0097] In case of an error, however, it can be useful to address a participant directly. For example, a participant might notice that a subsequent participant is not sending their telegram after an end telegram. In such a case, it can be helpful for the participant who sent the end telegram to directly address the subsequent participant and request that they send their telegram. This allows for a faster response to a non-responding participant. Similarly, a participant whose subsequent participant does not send a telegram after a certain period of time following an end telegram can first send a fault telegram. A relay participant can then directly address the non-sending participant and request that they send their telegram. Only after an unsuccessful request, possibly several times, can the relay participant issue an error message.It is proposed that in case of an error, a participant should be addressed directly via telegram.

[0098] The communication protocol used is initially irrelevant for this system. RS-485, CAN bus, Ethernet, or similar protocols are particularly suitable. The use of fiber optics is also conceivable and advantageous, especially since collisions on the fiber optic cable are avoided because the system operates in a daisy chain configuration. Fiber optics are preferable because they offer electromagnetic compatibility and are unaffected by electromagnetic interference. This is particularly beneficial for SIL applications.

[0099] The subject matter is explained in more detail below with reference to a drawing showing an exemplary embodiment. The drawing shows: Fig. 1 a schematic diagram of a participant according to an exemplary embodiment; Fig. 1. A schematic diagram of a communication chain according to an exemplary embodiment; Fig. 3. An example configuration file; Fig. 4. An example telegram.

[0100] Fig. Figure 1 shows an example of participant 2. This participant 2 can be implemented as an integrated circuit, for example as an ASIC, and can perform all core functions. The ASIC can be programmed accordingly, depending particularly on the specific application of participant 2.

[0101] An example setup of participant 2 comprises a central processing unit 2a and a memory 2b. The processing unit 2a is used to evaluate telegrams, create telegrams, trigger actions based on the telegrams, and evaluate sensor signals at the inputs. Configuration files and log files can be stored in the memory 2b.

[0102] Participant 2 has at least one control input 4 and one control output 6. Both the control input 4 and the control output 6 can be digital and / or analog. There can be one digital and / or one analog control input 4. There can also be only one digital control input 4 and one digital control output 6. There can also be only one analog control input 4 and one analog control output 6. A mixture of digital and analog control inputs 4 and control outputs 6 is also possible. The number of control inputs and control outputs 4 and 6 can also be more than two.

[0103] In addition to the control input 4 and the control output 6, participant 2 has two communication interfaces 8. The communication interfaces 8 are preferably identical in design and support the communication protocol on the communication chain. The communication interface can, in particular, support wired or fiber optic communication. It should be noted that a telegram can be transmitted directly between the two communication interfaces 8, i.e., without involving the central processing unit 2a.

[0104] Finally, participant 2 has a power input 10. Power input 10 is supplied with a voltage of, for example, 10, 15, 24, or 48 V. The function of participant 2 has been explained in detail previously, so reference is made to that explanation.

[0105] Fig. Figure 2 shows a communication chain 12. It can be seen that a plurality of participants 2 are connected to each other via a ring-shaped closed communication bus 14. Some of the participants 2 are connected to sensors 16 at their control input 4. The sensors 16 can be, for example, pushbuttons, linear heat detectors, smoke detectors, temperature sensors, or the like. In addition, some of the participants 2 can be connected to actuators 18 at their control output 6. An actuator 18 can be, for example, an aerosol generator, a control valve, an LED, or the like. The participants 2 can have an identification stored in their memory 2b. The participants 2 can have an identification via a DIP switch. An identification (ID) can be a digit.

[0106] A participant 2 can have an ID 1. Such a participant 2 can be a relay module. A connection 20 to a higher-level system can exist via a control output 6 of the relay module. Alarm messages, fault messages, or other messages can be output to the higher-level system via this connection 20.

[0107] Participant 2 can be a gateway. A gateway's connection 22 can support at least one of the following protocols: CANopen, MVB, TCP / IP, TDRP, RS485, or similar. Communication with another system is possible via connection 22.

[0108] A participant can be a human-machine interface (HMI). Such an HMI can have an output 24. Output 24 enables the output of a system log. Output 24 can support TCP / IP, USB, or Bluetooth. A connection to a user interface is possible via output 24.

[0109] One or more participants 2 can be supplied with input voltage via a respective power supply 26.

[0110] For commissioning, participant 2 with ID 1 (starting participant) first sends a configuration file on communication chain 14.

[0111] A communication file is exemplified in Fig. As described in section 3, the configuration file is sent from participant 2 to participant 2. In each participant 2, the configuration file is read and, if necessary, stored in memory 2b.

[0112] A configuration file is contained within a telegram, such as in Fig. The configuration file, as shown in Figure 4, is encoded. It is encoded in the payload XXXX of the telegram. The configuration file traverses the entire communication chain 14 and finally arrives back at the sending participant 2 with ID 1.

[0113] This allows participant 2 to determine whether the communication chain is closed or not when sending the configuration file. In the event of a fault in the communication chain, the configuration file no longer reaches participant 2 with ID 1, and this participant 2 can output a fault signal via its control output 20.

[0114] If the configuration file is received by participant 2 with ID 1, then this participant 2 or another participant 2 can begin communication for normal operation.

[0115] For this purpose, participant 2 can send a telegram, as in Fig. As shown in section 4, send the telegram according to the... Fig. 4 includes an identification of the sending participant ID X, user data XXX, and a check digit Y.

[0116] User data can be messages from the respective participant 2 with ID X. These can be, for example, fault messages, error messages, sensor values, status values, or the like. User data can also simply be HIGH or LOW, thus determining whether a specific participant 2 has reached a certain state or not.

[0117] A telegram travels from a communication interface 8 of participant 2 with IDX to the nearest participant 2 with ID X+1, is received there via communication interface 8, and forwarded via the other communication interface 8. Simultaneously, the received telegram is evaluated in processor 2a.

[0118] Each participant 2 compares the received telegram with information in the configuration file according to Fig. 3.

[0119] In the configuration file according to the Fig. For example, 3 is configured for participant ID 1 to output ON at its control output when a telegram has been received from participant ID 4 and from participant ID 8.

[0120] For example, for participant ID 2, position A is moved to the control output, so that a valve is moved to a specific position when a telegram is received from participant ID 5.

[0121] Position B at participant ID 2 is approached when either a telegram has been received from participant ID 6 or (OR) from participant ID 7.

[0122] Position C of participant ID 2 is approached if a telegram from participant ID 20 and (AND) a telegram from participant ID 4 are received within 5 seconds.

[0123] Further and similar configurations can be made for any number of participants 2 in the configuration file according to the Fig.3 must be stored.

Claims

[1] Fire control system, in particular fire alarm system or fire fighting system comprising - at least two participants, where - each of the participants has at least one control input and at least one control output as well as two communication interfaces and wherein - the participants form a closed, serial communication chain via their respective communication interfaces. [2] Fire control system according to claim 1, characterized by , - that two of the participants are connected to each other via a point-to-point connection. [3] Fire control system according to claim 1 or 2, characterized by , - that a unique identification is stored in each participant. [4] Fire control system according to one of the preceding claims, characterized by , - that the subscriber first sends a first telegram comprising at least the unique identification and user data on a first of the communication interfaces, and - that the participant monitors the reception of the first telegram on a second of the communication interfaces. [5] Fire control system according to one of the preceding claims, characterized by , - that the subscriber, upon receipt of the first telegram on the second of the communication interfaces, sends a second telegram comprising at least the unique identification and user data on the second of the communication interfaces and - that the participant on the first of the communication interfaces monitors the receipt of the second telegram. [6] Fire control system according to one of the preceding claims, characterized by , - that the subscriber sends an end telegram on at least one of the communication interfaces upon receipt of the first telegram on the second of the communication interfaces and / or the second telegram on the first of the communication interfaces. [7] Fire control system according to one of the preceding claims, characterized by , - that the subscriber, after a defined waiting time, sends an error telegram comprising at least the unique identification and user data on the second of the communication interfaces if the first telegram is not received on the second of the communication interfaces. [8] Fire control system according to one of the preceding claims, characterized by , - that the subscriber, after a defined waiting time, sends a second telegram comprising at least the unique identification and user data on the second of the communication interfaces if the first telegram is not received on the second of the communication interfaces. [9] Fire control system according to one of the preceding claims, characterized by , - that the subscriber carries out the steps according to one of claims 4-8 upon receipt of the end telegram. [10] Fire control system according to one of the preceding claims, characterized by , - that the first telegram and the second telegram have the same payload data. [11] Fire control system according to one of the preceding claims, characterized by , - that the user data depends on a signal at the control input. [12] Fire control system according to one of the preceding claims, characterized by , - that the unique identifications of the participants are consecutively numbered. [13] Fire control system according to one of the preceding claims, characterized by , - that the participant whose unique identification is the one with the lowest value of all the participants' identifications is defined as the starting participant. [14] Fire control system according to one of the preceding claims, characterized by , - that the starting participant starts a communication in the communication chain according to one of claims 4-8. [15] Fire control system according to one of the preceding claims, characterized by , - that each of the participants evaluates each telegram received on a first and / or second of the communication interfaces. [16] Fire control system according to one of the preceding claims, characterized by , - that the participants along the communication chain receive all telegrams on a first of the communication interfaces and forward them to a second of the communication interfaces. [17] Fire control system according to one of the preceding claims, characterized by , - that one of the participants, in particular the starting participant, sends a configuration file on the communication chain. [18] Fire control system according to one of the preceding claims, characterized by , - that each participant saves the configuration file. [19] Fire control system according to one of the preceding claims, characterized by , - that a configuration file has a unique serial number. [20] Fire control system according to one of the preceding claims, characterized by , - that each of the participants evaluates user data from received telegrams depending on the configuration file and triggers an action at the control output depending on the evaluation. [21] Fire control system according to one of the preceding claims, characterized by , - that the starting participant is set up exclusively as a fault detector and carries out the steps according to one of claims 4-8. [22] Fire control system according to one of the preceding claims, characterized by , - that the participant whose unique identification immediately follows that of the starting participant is set up as an alarm participant or that the starting participant is also set up as an alarm participant. [23] Fire control system according to one of the preceding claims, characterized by , - that the subscriber who has sent an end telegram monitors, on at least one of the communication interfaces, the receipt of a telegram from the subscriber whose unique identification of that subscriber immediately follows. [24] Fire control system according to one of the preceding claims, characterized by , - that the control output is formed in such a way that a supply input voltage of the participant is directly applied as an output voltage at the control output when the control output is switched on.

Images