Safety control device and procedure for operating such a device

Abstract

A safety control device (101) for a production machine is specified, comprising a master control unit (103), an interrupter unit (105) for installation on the production machine, and a protected switch (151) with authorization protection for outputting an authorized master control signal (AMSS) to the master control unit (103). The interrupter unit (105) includes a voltage input (111) and a voltage output (113) for providing a mains voltage U. N, comprising a circuit breaker (115) and a galvanically isolated circuit breaker control terminal (121), wherein an electrical connection between the voltage input (111) and the voltage output (113) can be switched by means of the circuit breaker (115), and wherein the circuit breaker (115) can be switched via the circuit breaker control terminal (121). The master control unit (101) comprises a control output (143) for providing a circuit breaker control signal, which is connected to the circuit breaker control input (121) of the circuit breaker unit (105), wherein the master control unit (103) comprises a normal operating mode (NB), a setup control mode (RK), and a standby mode (RM). The master control unit (103) is configured and configured to receive a master control signal (MSS) via the master control input (141) and, depending on the master control signal (MSS): - to switch to normal operating mode (NB), whereby the master control unit (101) switches the interrupter switch (115) conductively by means of the interrupter control signal; - to switch to rest mode (RM), whereby the master control unit (103) switches the interrupt switch (115) non-conductively by means of the interrupt control signal; and - to activate a setup control mode (SC), whereby the changing of the operating mode when the setup control mode (SC) is activated is regulated by the master control unit (103) until an authorized master control signal (AMSS) to deactivate the setup control mode (SC) is received at the master control input (141).

Description

[0001] The invention relates to a safety control device for a production machine with different operating modes, and to a method for operating the safety control device.

[0002] In industrial production environments or process automation systems, various manufacturing and automation equipment can be used as production machines. In printed circuit board (PCB) manufacturing, for example, jet dispensers with dispensing valves are used to apply underfills to the PCBs. Such production machines are often very expensive, and individual components, such as the aforementioned dispensing valve, are also costly and not readily available. Damage or destruction can therefore result in high costs and production downtime. Furthermore, the dispensing valves require regular setup, and the transition between productive operation of the jet dispenser and a setup phase is particularly susceptible to operator error.From an economic point of view, it is therefore essential to avoid damage to the manufacturing or automation equipment in question and its components, such as a metering valve of a jet dispenser.

[0003] The object of the invention is to provide a safety control device and a method for operating such a device, which enables a safe transition between a setup phase and another working phase.

[0004] The problem is solved by a safety control device according to claim 1, and by a method according to claim 7. Advantageous embodiments of the invention are specified in the dependent claims.

[0005] Advantageous is a safety control device for a production machine, comprising a master control unit, an interrupter unit for arrangement on the production machine, and a protected switch with authorization protection for outputting an authorized master control signal to the master control unit, wherein the interrupter unit has a voltage input and a voltage output for providing a mains voltage U. N, comprising a circuit breaker and a galvanically isolated circuit breaker control terminal, wherein an electrical connection between the voltage input and the voltage output can be switched by means of the circuit breaker, and wherein the circuit breaker can be switched via the circuit breaker control terminal, wherein the master control unit comprises a control output for providing a circuit breaker control signal which is connected to the circuit breaker control input of the circuit breaker unit, and wherein the master control unit comprises a normal operating mode, a setup control mode and a sleep mode, wherein the master control unit is configured and set up to receive a master control signal via the master control input and depending on the master control signal: - to switch to normal operating mode, whereby the master control unit switches the interrupter switch by means of the interrupter control signal; - to switch to standby mode, whereby the master control unit makes the circuit breaker non-conductive by means of the circuit breaker control signal; and - to activate a setup control mode, whereby the changing of the operating mode when the setup control mode is activated is regulated by the master control unit until an authorized master control signal to deactivate the setup control mode is received at the master control input.

[0006] This ensures the safe operation of the production machine, particularly during setup and resumption of normal operation, and prevents damage to the machine. The production machine could, in particular, be a jet dispenser with a metering valve.

[0007] The master control unit can, for example, comprise a control circuit with a microcontroller or a PLC. This control circuit can then be designed and configured to execute a computer program and / or logic that generates or processes the corresponding control signals. In particular, the programming allows the respective operating mode to be set and the safety control device to be operated accordingly.

[0008] The setup control mode can be superimposed on the normal operating mode or the standby mode. Preferably, the setup control mode is designed such that a switch to the normal operating mode by the master control unit is prevented until an authorized master control signal to deactivate the setup control mode is received at the master control input, or until the setup control mode is deactivated.

[0009] A key advantage is the ability to switch from normal operating mode to standby mode even when setup control mode is activated. This allows for monitoring of the setup process and / or the resumption of normal operation of the production machine / jet dispenser, enabling the completion of a current or preceding workflow even without authorization. This can be particularly beneficial in shift work where authorized users are not present for all shift cycles.

[0010] Preferably, the interrupt switch is designed as at least one relay. Using at least one relay as an interrupt switch provides a reliable and proven technology for controlling the current flow, which increases the durability and reliability of the safety control device. Furthermore, relays enable galvanic isolation between the control and load circuits, which increases safety for the operator and the equipment connected to the voltage output.

[0011] In some embodiments, the interrupter unit includes a feedback output and a monitoring device, the monitoring device being designed to monitor the switching state of the interrupter. The switching state can thus be provided to the master control unit via the feedback output. Advantageously, this allows faults to be reliably detected and processed by the master control unit. Likewise, a corresponding status or error message can be displayed and / or sent to a higher-level automation system.

[0012] The monitoring device includes, for example, an auxiliary contact, which may in particular be assigned to a relay and is designed and connected to monitor a switching state of the interrupter switch.

[0013] In some advanced training courses, the safety control device includes a remote control unit, wherein the remote control unit is connected to the master control input and has at least one switch or button for setting the operating mode.

[0014] Furthermore, an emergency stop switch can be provided, for example, on the remote control unit. The master control unit can be stopped using the emergency stop switch. The master control unit can be specifically designed and configured to de-energize the circuit breaker after the emergency stop switch has been activated. Thus, when the emergency stop switch is activated, the load circuit is interrupted, and the voltage output is de-energized.

[0015] Authorization protection can include means for capturing user identification data. The master control unit can then be configured to compare the captured identification data with stored authorization data. The master control unit can further include an authorization unit or function that allows the setting of various functions or operating modes depending on the result of the comparison.

[0016] In some preferred configurations of the safety control device, the master control unit or the remote control unit includes a key switch. A simple yet effective authorization protection can be implemented by means of the key switch. In particular, the authorized master control signal can be output via the key switch.

[0017] Additionally or alternatively, authorization protection may include one or more of the following means: an input device for code entry, an RFID / NFC interface, a biometric recognition device, a magnetic stripe reader, a chip card / smartcard reader, a wireless or wired data interface for connecting to an authorized terminal or user account, a camera.

[0018] In some training courses, the safety control device includes a visual display to show the operating mode and, optionally, other system states. The visual display can consist of one or more lights, which use different colors to indicate the currently active operating mode.

[0019] Furthermore, an acoustic signaling device may be provided, for example, to signal a malfunction or the activation of the emergency stops. Additionally, a display may be provided to show further information about the operating status or operating mode.

[0020] In a further aspect of the invention, a method for operating a safety control device for a production machine is also specified, the safety control device comprising a master control unit, an interrupter unit for arrangement on the production machine, and a protected switch for outputting an authorized master control signal, wherein a voltage input of the interrupter unit is switchably connected to a voltage output of the interrupter unit via an interrupter switch, the method comprising the steps: - Receiving and / or processing a master control signal by the master control unit, and - Switching to a normal operating mode, a sleep mode, or activating a setup control mode, depending on the master control signal, - wherein, when switching to normal operating mode, the master control unit switches the interrupt switch to conducting mode, so that the mains voltage is provided at the voltage output, and - wherein, when switching to standby mode, the master control unit switches the interrupter switch to non-conductive mode using the interrupter control signal, so that the voltage output is switched without voltage; - wherein the master control unit activates or deactivates the setup control mode when an authorized master control signal is received at the master control unit, and - whereby, when the setup control mode is activated, the changing of the operating mode is regulated by the master control unit.

[0021] The method is preferably designed such that, when the setup control mode is activated, a switch to normal operating mode is prevented until an authorized master control signal to deactivate the setup control mode is received at the master control unit. The method can be used, in particular, for the safe operation of a jet dispenser by means of the safety control device. The setup control mode can be specifically designed for the safe setup of the jet dispenser or a metering valve of the jet dispenser.

[0022] In particular, a monitoring device for monitoring the switching state of the interrupter switch can be arranged on the interrupter switch, the method comprising monitoring the switch. The monitoring of the switch can advantageously comprise the following steps: - Detecting the switching state using the monitoring device, - Providing a monitoring signal characterizing the switching state to the master control unit via the interrupter unit; and - Comparison of the switching state with an expected switching state by the master control unit.

[0023] The procedure enables the production machine, for example the jet dispenser, to be operated safely, in particular preventing damage during setup and the subsequent resumption of normal operation.

[0024] Preferably, a safety control device of the above is designed and configured to carry out a procedure.

[0025] The invention will now be explained in more detail using exemplary embodiments and with reference to the drawings.

[0026] They show schematically: Fig. 1 a production machine designed as a jet dispenser with a metering valve, and with an exemplary embodiment of a safety control device according to the invention; Fig. 2 an exemplary design of the interrupter unit, as well as its coupling with the master control unit; and Fig. 3 a flowchart of a procedure for operating a production machine designed as a jet dispenser using the safety control device.

[0027] In the following description of preferred embodiments, identical reference numerals denote identical or comparable components.

[0028] Fig. Figure 1 schematically shows a production machine configured as a jet dispenser 1. The jet dispenser comprises a metering valve control unit 3 and a metering valve 5. For example, the jet dispenser 1 can be used in printed circuit board manufacturing to produce so-called underfills. Its metering valve 5 must be regularly set up for operation. The challenge here is that care must be taken to ensure that the valve is de-energized before setup. Furthermore, it must be verified that the setup process was carried out correctly before restarting the machine. Improper operation can damage or destroy the metering valve 5, which can lead to high costs and potentially to the downtime of a production line.

[0029] To prevent or hinder improper operation, a safety control device 101 is provided, comprising a master control unit 103 and an interrupter unit 105. The master control unit 103 can be activated by pressing a main switch 107. A low-voltage power supply 109 is provided for power supply.

[0030] The interrupter unit 105 comprises a voltage input 111 and a voltage output 113 for providing a mains voltage U DC, for example, a DC voltage in the range of 200 V to 260 V. A circuit breaker 115 is arranged between the voltage input 111 and the voltage output 113, which can connect the voltage output 111 to the voltage input 113 or disconnect the electrical connection. The circuit breaker 115 can, for example, include at least one relay R. A valve control unit 117 for controlling the metering valve 5 of the jet dispenser 1 is connected to the voltage output 113.

[0031] The interrupter unit 105 comprises an interrupter control terminal 121, which is connected via at least one control line SL to a master control output 125 of the master control unit 103. The interrupter switch 115 can now be switched conducting or non-conducting by the master control unit 103. Advantageously, the interrupter switch 115 is switched conducting when a high level is present at the interrupter control terminal 121, while the interrupter switch 115 is switched non-conducting when a low level is present. Advantageously, a low-voltage signal is used for control via the control line SL. The high level can be selected, for example, in the range of 5 V to 30 V, particularly in the range of 12 V to 20 V. The low level can be selected, for example, in the range of 0 V to 5 V. Advantageously, the low level is equal to 0 V.

[0032] The interrupter switch 115, as well as the voltage input 111 and the voltage output 113 of the interrupter unit 105, are galvanically isolated from the low-voltage control terminal 121. This ensures that there is no direct electrical connection between the master control unit 103 and the voltage output 113 of the interrupter unit 105.

[0033] Furthermore, the interrupter unit 105 includes a monitoring device 131, by means of which the switching state of the interrupter switch 115 can be monitored. In this example, the monitoring device 131 includes an auxiliary contact 133, which taps a control voltage from the interrupter switch 115. The control voltage is, for example, provided by a potential applied to a relay coil. A monitoring signal from the monitoring device 131 can now be provided to the master control unit 103. For this purpose, the auxiliary contact 133 is connected via a feedback output 134 of the interrupter unit and via a feedback line FL to a feedback input 135 of the master control unit 103.

[0034] The master control unit 103 includes a control circuit 145, which, for example, contains a programmable logic controller (PLC) with a microcontroller. The control circuit 145 is configured to monitor the monitoring signal. In particular, the control circuit 145 includes, for example, a watchdog timer for monitoring the monitoring signal.

[0035] The master control unit 103 is further configured to put the safety control unit 101 into various operating modes and operate it in these modes. The operating modes include at least a normal operating mode (NB), a setup control mode (RK), and a standby mode (RM). The master control unit 103 includes a master control input 141, through which a master control signal (MSS) can be received. The operating mode can then be set depending on the master control signal (MSS). When switching to the normal operating mode (NB), the master control unit 103 switches the interrupt switch 115 to conducting, so that the metering valve control unit 3 can be supplied with power. When switching to the standby mode (RM), the master control unit 103 switches the interrupt switch 115 to non-conducting, thereby de-energizing the voltage output 113.The setup control mode RM can now be activated or deactivated by means of an authorized master control signal AMSS. Specifically, the master control unit 103 can include a protected switch 151, which in this example is configured as a key switch 151a. The protected switch 151 provides an activation or deactivation signal for switching into or out of setup control mode RK. Thus, only authorized users can trigger the authorized master control signal AMSS using the key switch 151a. Alternatively, another authorization function can be provided, for example, involving code entry, reading an authorization ID such as from an RFID tag, or via a computer system such as a central process control system. Fig. Figure 1 shows, for example, a keypad 151b for code entry and an NFC interface 151c.

[0036] Furthermore, an optional remote control unit 191 is shown, which is, for example, wired to the master control unit 103. Alternatively, wireless coupling is also possible. The remote control unit 191 includes a switch 173a, which outputs a power-on signal ON. The power-on signal ON can be received by the master control unit 103 as the master control signal MSS. The master control unit 103 can then switch to the normal operating mode NB, unless this is prevented by the setup control mode RK.

[0037] Similarly, the remote control unit 171 can include a power switch 173b, which outputs a power-off signal OFF. This power-off signal OFF can then be received by the master control unit 103 as the master control signal MSS. The master control unit 103 can then switch to standby mode RM.

[0038] In this example, the master control unit 103 also includes a display device 191. The current operating mode can be displayed using the display device 191. As shown, the display device 191 can include a visual indicator 193 and / or an audible indicator 195. For example, a green LED can indicate normal operating mode (NB), while a yellow / orange LED signals setup control mode (RK). A malfunction can also be indicated by a red LED. Furthermore, an error, and in particular the activation of the emergency stop switch, can be indicated by the audible indicator 175. In addition, the master control unit 103 in this example includes a display 199, which is used, for example, to display further status information and / or to configure the PLC settings.

[0039] In this example, the master control unit 103 is also connected to an automation controller 201 in an industrial production environment. This allows operating states, log files, error messages, and other information to be sent to and processed by the automation controller 201.

[0040] A typical workflow within an industrial production environment can be configured as follows: The master control unit 103 can be activated by pressing the main switch 107. An optional self-test can then be performed. After successful completion of the self-test, visual feedback can be provided, for example, by activating the green status indicator for a few seconds. If the self-test fails, a malfunction can be signaled, for example, by activating the red LED.

[0041] After successful completion of the self-test, a user can now activate normal operating mode (NB) using the on / off switch 173a, thus switching the voltage output 113 of the interrupter unit 115 to conduct. The metering valve control unit 3 is then supplied with power. Furthermore, normal operating mode (NB) can be indicated by, for example, a green optical status indicator. Optionally, additional visual feedback can be provided by the remote control unit 171, for example, by means of a neutral / white LED located on the remote control unit 171.

[0042] After using the jet dispenser 1, the user can activate standby mode RM, for example by pressing the off switch 173b. The master control unit 103 then switches the interrupt switch 115 to non-conductive mode. The visual indicator can be changed accordingly, for example by switching off the green LED.

[0043] A responsible user can also activate the setup control mode RK by operating the key switch 151a, which will illuminate a yellow status indicator. If the setup control mode RK is activated while the normal operating mode NB is active, the circuit breaker 115 remains in a conductive state. A user can then complete their work process and de-energize the circuit breaker 115 by pressing the off switch 173b. Reactivation is only possible by operating the key switch 151a again.

[0044] If the setup control mode RK is activated while the idle mode RM is active, a one-time switch to normal operating mode NB is possible, followed by a switch back to idle mode RM. However, after activating idle mode RM, a further switch to normal operating mode NB is prevented until an authorized user operates key switch 151a to deactivate setup control mode RM.

[0045] In both variants of the process, normal operation of the jet dispenser 1 followed by a setup procedure can be performed. To change the operating mode to normal operation (NB), the setup control mode (RM) must be deactivated using key switch 115a after the setup procedure. After deactivating the setup control mode (RK), it is possible to switch again at will between normal operating mode (NB) and standby mode (RM).

[0046] The key switch 115 can therefore provide an authorized master control signal AMSS to the master control unit 103. Upon receiving the authorized control signal ASS, the PLC can activate or deactivate the setup control mode RK.

[0047] Furthermore, an emergency stop switch 175 is provided, which is shown by way of example on the remote control unit 171. By means of the emergency stop switch 175, the safety control device 101 can be stopped, whereby the interrupt switch 115 of the interrupt control unit 105 is also rendered non-conductive.

[0048] The interrupter control unit 105 can also be configured to send status information to the master control unit 103. For example, the state of the interrupter switch 115 can be monitored and corresponding status messages sent to the master control unit 103. If, for example, it is detected that the interrupter switch 115 has not opened after the transition to the setup control mode RK, this can indicate a defective interrupter switch 115.

[0049] The master control unit 103 can be connected to the automation controller 201 of the industrial production environment. The master control unit 103 includes, for example, a PLC which is coupled to the central automation controller 201 for data exchange.

[0050] The Fig. Figure 2 shows an exemplary design of the interrupter unit 105, as well as its connection with the master control unit 103 in a schematic representation.

[0051] The master control output 143 and the interrupter control connection are coupled via a first control line SL1 and a second control line SL2, as well as via a feedback line FL. The two control lines SL1 and SL2 each provide a low-voltage level of the interrupter control signal. The switching state of the interrupter 115 can be output to the master control unit 103 via the feedback line FL. The interrupter 115 is configured here as a normally open relay R and can be switched in a known manner by means of a relay coil RS. The relay R further comprises two switches, a first switch S1 for interrupting a phase conductor L and a second switch S2 for interrupting a neutral conductor N. The relay coil RS can be controlled via the first control line SL1 and the second control line SL2.

[0052] Furthermore, the monitoring device 131, which is configured as an auxiliary contact 133, is shown. A first terminal of the auxiliary contact 133 is connected to the relay coil RS and the first control line SL1, while a second terminal is connected to the feedback line FL. Advantageously, to connect the voltage input 111 to the voltage output 113, a high low-voltage level is applied to the first control line SL1 and a low low-voltage level to the second control line SL2.

[0053] In the Fig.Figure 3 shows a flowchart of an exemplary embodiment of a method for operating a safety control device 101 for a production machine. The safety control device 101 can be used, in particular, to operate a jet dispenser 1 with a metering valve 5. Starting from the normal operating mode NB or the standby mode RM, a master control signal MSS or an authorized master control signal AMSS can be received at the master control input 141 of the safety control device 10 in step S1. If an authorized master control signal AMSS has been received, the setup control mode RK is activated in step S3a, whereby the choice of operating mode is regulated. Advantageously, the setup control mode RK is superimposed on the previously active operating mode, i.e., the normal operating mode NB or the standby mode RM. If the setup control mode RK has been activated during the normal operating mode NB, the production machine, or the standby mode 5, can be operated without the necessary precautions.The jet dispenser 1 will continue to operate and, after operation is complete, will be switched to standby mode (RM). The regulation specifically prevents the switch from standby mode (RM) to normal operating mode (NB). This prevents damage due to incorrect operation after a setup process or during standby mode (RM). If the setup control mode (RK) was activated during standby mode (RM), a switch to normal operating mode (NB) is also prevented.

[0054] In step S5, an authorized master control signal AMSS can be received again, and the setup control mode RK can then be deactivated in step S7. The process can then return to step S1. It is therefore possible to freely switch between normal operating mode NB and standby mode RM until another authorized master control signal AMSS is received to activate setup control mode RK. Reference symbol list 1 Jet dispenser 3 Metering valve control unit 5 Metering valve 101 Safety control device 103 Master control unit 105 Interrupter unit 107 Main switch 109 Low-voltage power supply 111 Voltage input 113 Voltage output 115 circuit breakers 115a Relay 117 Valve control unit 121 Interrupter control connection 131 Monitoring device 133 Help contact 134 Feedback output 135 Feedback received 141 Master control input 143 Master control output 145 Control circuit 151 protected switch 151a Key switch 151b Keypad 151c NFC interface 171 Remote control unit 173a On-switch 173b Off switch 175 emergency stop switches 191 Display device 193 optical display 195 acoustic display 199 Display 201 Automation control RK Equipment Control Mode NB Normal operating mode RM Sleep mode R Relay RS1, RS2 relay connections SL control lines SL1 first control line SL2 second control line FL Feedback Management

Claims

[1] Safety control device (101) for a production machine, comprising a master control unit (103), an interrupter unit (105) for arrangement on the production machine, and a protected switch (151) with an authorization protection for outputting an authorized master control signal (AMSS) to the master control unit (103), wherein the interrupter unit (105) has a voltage input (111), a voltage output (113) for providing a mains voltage U N , comprising a circuit breaker (115) and a galvanically isolated circuit breaker control terminal (121), wherein an electrical connection between the voltage input (111) and the voltage output (113) can be switched by means of the circuit breaker (115), and wherein the circuit breaker (115) can be switched via the circuit breaker control terminal (121), wherein the master control unit (101) includes a control output (143) for providing an interrupter control signal which is connected to the interrupter control input (121) of the interrupter unit (105), and wherein the master control unit (103) comprises a normal operating mode (NB), a setup control mode (RK) and a sleep mode (RM), wherein the master control unit (103) is designed and configured to receive a master control signal (MSS) via the master control input (141) and, depending on the master control signal (MSS): - to switch to normal operating mode (NB), whereby the master control unit (101) switches the interrupter switch (115) conductively by means of the interrupter control signal; - to switch to rest mode (RM), whereby the master control unit (103) switches the interrupt switch (115) to non-conductive operation by means of the interrupt control signal; and - to activate a setup control mode (SC), whereby the changing of the operating mode when the setup control mode (SC) is activated is regulated by the master control unit (103) until an authorized master control signal (AMSS) to deactivate the setup control mode (SC) is received at the master control input (141). [2] Safety control device (101) according to claim 1, wherein, if the system has switched to sleep mode (RM) during the setup control mode (RK), a switch to normal operating mode (NB) is prevented until the authorized master control signal (AMSS) to deactivate the setup control mode (RK) is received at the master control input (141). [3] Safety control device (101) according to claim 1 or 2, wherein the interrupt switch (115) is designed as at least one relay (115a). [4] Safety control device (101) according to one of claims 1 to 3, wherein the interrupter unit (105) comprises a feedback output (134) and a monitoring device (131), wherein the monitoring device (131) is configured to monitor a switching state of the interrupter switch (115), and wherein the switching state is provided via the feedback output (134) of the master control unit (103). [5] Safety control device (101) according to any one of claims 1 to 4, comprising a remote control unit (171), wherein the remote control unit (171) is connected to the master control input (141) and wherein the remote control unit (171) - includes at least one switch or button for setting the operating mode, and / or - includes an emergency stop switch (175) by means of which the master control unit (103) can be switched off, wherein the master control unit (103) is designed and configured to switch the interrupt switch (115) of the interrupt unit (105) in a non-conductive manner after actuation of the emergency stop switch (175). [6] Safety control device (101) according to any one of claims 1 to 5, wherein the master control unit (103) or the remote control unit (171) comprises a key switch (151a), wherein the key switch (151a) is configured to output the authorized master control signal (AMSS). [7] Method for operating a safety control device (101) for a production machine, the safety control device (101) comprising a master control unit (103), an interrupter unit (105) for arrangement on the production machine, and a protected switch (115) for outputting an authorized master control signal (AMSS), wherein a voltage input (111) of the interrupter unit (105) is switchably connected to a voltage output (113) of the interrupter unit (105) via an interrupter switch (115), the method comprising the steps: - Receiving and / or processing a master control signal (MSS) by the master control unit (103), and - Switching to a normal operating mode (NB), a sleep mode (RM), or activating a setup control mode (RK), depending on the master control signal (MSS), - wherein the master control unit (103) switches the interrupt switch (115) to conducting mode when switching to normal operating mode (NB), so that the mains voltage (U N ) is provided at the voltage output (113), and - wherein the master control unit (103) switches the interrupter switch (115) to non-conductive mode by means of the interrupter control signal when switching to standby mode (RM), so that the voltage output is switched without voltage; - wherein the master control unit (103) activates or deactivates the setup control mode (SC) when an authorized master control signal (AMSS) is received at the master control unit (103), and - whereby, when the setup control mode (RC) is activated, the changing of the operating mode is regulated by the master control unit (103). [8] Method according to claim 7, wherein, when the setup control mode (RK) is activated, a switch to the normal operating mode (NB) is prevented until an authorized master control signal (AMSS) to deactivate the setup control mode (RK) is received at the master control unit (103). [9] Method according to claim 7 or 8, wherein a monitoring device (131) for monitoring a switching state of the interrupter switch (115) is arranged on the interrupter switch (115), the method comprising monitoring the interrupter switch (115), wherein monitoring the interrupter switch (115) comprises the following steps: - Detecting the switching state using the auxiliary contact (133), - Providing a monitoring signal characterizing the switching state to the master control unit (103) via the interrupter unit (105); and - Comparison of the switching state with an expected switching state by the master control unit (103). [10] Safety control device (101) according to one of claims 1 to 6, which is designed and configured to carry out a method according to one of claims 7 to 9.

Images