Plastics processing system
A dual-processing unit architecture with independent interface devices and a safety controller in plastics processing systems addresses user-friendliness and reliability issues, ensuring continued operation and enhanced security against failures and malware.
Patent Information
- Authority / Receiving Office
- DE · DE
- Patent Type
- Applications
- Current Assignee / Owner
- ARBURG GMBH & CO KG
- Filing Date
- 2024-11-20
- Publication Date
- 2026-05-21
AI Technical Summary
Existing plastics processing systems face challenges in achieving high user-friendliness and operational reliability, particularly in maintaining system uptime and safety during interface failures and potential malware attacks.
The system incorporates a dual-processing unit architecture with independent first and second interface devices, each with its own operating system, and a safety controller, along with a modular control-machine interface and redundant communication pathways to ensure continued operation and enhanced security.
This configuration enhances user-friendliness through intuitive graphical interfaces, maintains system uptime by allowing independent operation of interface devices, and provides robust protection against failures and malware, ensuring high operational reliability and safety.
Smart Images

Figure 00000000_0000_ABST
Abstract
Description
[0001] The invention relates to a system for plastics processing according to claim 1.
[0002] A modern plastics processing system always includes the actual plastics processing machine and a control and operating system for this machine. Usually, a control-machine interface is provided, which electrically / electronically connects the control and operating system and the plastics processing machine. This interface, among other things, converts the low-voltage signals of the control and operating system into higher-voltage signals (usually 24V). According to the definitions used here, the control-machine interface is neither part of the control and operating system nor part of the plastics processing machine, but rather a separate subsystem.
[0003] The plastics processing machine and the control and operating system are usually structurally separated from each other, whereby the elements of the control and operating system can themselves be spatially distributed, in particular in such a way that parts of it are arranged in a machine control cabinet, while other parts of it, in particular those that serve for operation, are arranged outside the machine cabinet so that they can be operated or seen directly by a user.
[0004] The term "plastics processing machine" here refers to the mechanical hardware, which incorporates a multitude of actuators. The term "actuator" is used in its broadest sense and encompasses all elements that are at least indirectly controlled by the control and operating system. Typically, at least motor actuators, which at least indirectly drive moving elements, switching valves, and heating devices are considered actuators. However, for the purposes of this application, lighting devices and warning devices (signal lights, tone generators) are also considered "actuators." As mentioned above, these actuators are controlled at least indirectly by the control and operating system (in the sense of the definitions used here, via the control-machine interface). The aforementioned multitude of actuators always includes at least one (usually several) safety-relevant actuator."Safety-relevant" here means that it poses a potential danger to a person. This group of actuators typically includes, in particular, motor actuators (for example, in a clamping unit) and heating devices (for example, in a plasticizing unit). Lighting devices and warning devices, for example, are not considered safety-relevant actuators in this sense. Furthermore, such a plastics processing machine usually also has a number of sensors, which in turn send signals to the control and operating system (usually also via the control-machine interface). A distinction is generally made between safety-relevant sensors, such as door switches and emergency stop buttons, and sensors that measure machine or process parameters.According to the definitions given here, each safety-relevant sensor generates a shutdown signal when it detects a safety-relevant event, which leads to the shutdown of at least one safety-relevant actuator.
[0005] Such a plastics processing machine could be, in particular, an injection molding machine or a 3D printer. In principle, it is possible for a single control and operating system to control and operate exactly one plastics processing machine; however, it is also possible for a single control and operating system to control and operate several plastics processing machines.
[0006] The system – and therefore its components – has an operating mode. This operating mode refers to the state of the system in which it is complete and ready for operation. A sub-mode of this operating mode is the production mode, in which the system, and thus the plastics processing machine, actually operates, i.e., produces. No operating mode exists, in particular, when the plastics processing machine and / or the control and operating system and / or the control-machine interface is undergoing maintenance, or when software updates are being performed on the control and operating system by a qualified and authorized person. State of the art
[0007] The control and operating system of such a plastics processing system features a cycle sequence control which, in production mode, at least indirectly controls the plastics processing machine after a corresponding cycle sequence has been programmed into it. For this purpose, the cycle sequence control includes a first computing unit equipped with a first operating system.
[0008] It is essential that the machine operator can communicate with the cycle control system. This is achieved through an interface device (hereinafter also referred to as the first interface device), which includes at least one input device and at least one visualization device. Using this interface device, the machine operator can, for example, view the machine's status and, if necessary, make changes to the cycle sequence, such as when changing products. This interface device and the cycle control system communicate via a bidirectional communication device. Description of the invention
[0009] Based on this state of the art, the present invention aims to further develop such a system in such a way that it offers both a high level of user-friendliness and a high level of operational reliability.
[0010] According to the invention, this goal is achieved through several measures: Firstly, the first interface device (as described above) has a second processing unit, referred to as the second processing unit, which is distinct from and independent of the first processing unit of the cycle control system and runs its own operating system (second operating system). "Independent" here means that the two processing units can operate independently of each other. In some embodiments, this first interface device can be configured to communicate with the cycle control system wirelessly, either exclusively or also wirelessly.
[0011] Furthermore, a second interface device, which has at least a second input device, and a second communication device that is at least unidirectional, via which signals generated by the second input device are passed on to the first computing unit independently of the first interface device, are provided.
[0012] The control and operating system according to the invention thus comprises: (i) a cycle control system which, in production mode, at least indirectly controls the plastics processing machine and which uses a first computing unit (20) equipped with a first operating system for this purpose, (ii) a first interface device (30) comprising at least a first input device, at least a visualization device and a second computing unit (34) equipped with a second operating system and in communication connection with the first input device and the visualization device, (iii) a bidirectional first communication device (36) through which the first computing unit (20) according to (i) and the second computing unit according to (ii) communicate with each other, (iv) a second interface device (50) which includes at least one second input device (52), (v) a second communication device (54) that is at least unidirectional, through which signals generated by the second input device (52) according to (iv) are passed to the first computing unit (20) according to (i).
[0013] Providing a separate computing unit with its own operating system for the first interface device initially has the advantage that the operating system for cycle control and the operating system for the first interface device can be selected to be optimized for their respective tasks.
[0014] Another advantage is that the cycle control system can continue to control the plastics processing machine even if the first interface device fails (generally until the current production order is completed). This can reduce system downtime (and thus downtime of the plastics processing machine), at least statistically.
[0015] The second interface, which communicates directly with the cycle control unit (i.e., its first processing unit), ensures that even if the first interface fails, at least minimal communication with the cycle control unit is possible. This allows, for example, the machine to be shut down via the second interface. The second interface unit can include an emergency stop button for this purpose. Furthermore, the second interface unit can have additional buttons or switches that can send direct commands to the cycle control unit, such as "Move to a safe rest position" or "Pause production."
[0016] As already mentioned, one advantage of the system is that the two operating systems can be chosen to suit the specific needs of the system. It is particularly advantageous for the first operating system to be a so-called "Real-Time Operating System" (RTOS).
[0017] To ensure a high level of user-friendliness, it is further preferred that the second operating system be an operating system with a graphical user interface, such as those used on PCs, laptops or smartphones.
[0018] In particular, if the second operating system has a graphical user interface, the first interface device can have a touchscreen, which serves as the primary input device and visualization device, thus enabling intuitive operation of the plastics processing machine. Alternative or additional input devices include a keyboard, a mouse, a touchpad, or a camera, which can be used for gesture control. More than one primary input device may be provided.
[0019] The separation of the cycle control unit from the first interface device according to the invention makes it particularly possible to use the first interface device not only as an interface to the machine operator (i.e., as a direct human-machine interface), but also as an interface to the "outside world" (especially the digital world). Preferably, the first interface device therefore has at least one additional interface. This can, in particular, comprise one of the following interfaces: an interface to a local network (LAN / WLAN), a universal interface (especially a USB interface), or an interface to the internet. The second processing unit is always located between the digital world and the first processing unit of the cycle control unit, so that this second processing unit forms a first shield between the cycle control unit and the outside world.
[0020] To further improve the protection of the control and operating system, and in particular its cycle control, it is preferable, if an interface to the digital outside world is provided ("additional interface"), to provide a data security device separate from the second computing unit, for example, in the form of a hardware firewall, a software firewall, or a combination of both, between the second computing unit and at least one additional interface of the first interface device. Such a software firewall can be integrated into the second computing unit. This further increases operational reliability, as it already reduces the probability of a computer virus infection of the first interface device—that is, its computing unit (second computing unit).Thus, two protective barriers are in place to prevent a computer virus infection from affecting the cycle control system. Any malware present in the cycle control system can cause significantly more damage than in the first interface device, as a malfunction of the plastics processing machine caused by malware could lead to mechanical damage to the machine itself. Naturally, such a data security device also protects the first interface device.
[0021] Preferably, a first data set is stored in the first computing unit (i.e., the computing unit of the cycle sequence control), which can be modified at least in production mode by means of the first interface device, so that changes in the cycle sequence can be made by the person operating the machine or via an interface of the first interface device to the outside world (if available) at least within a predefined framework.
[0022] Preferably, the control and operating system of the system according to the invention further comprises a safety controller operating according to a safety program, which utilizes a third computing unit independent of the first and second computing units. The safety program according to which the safety controller operates is not modifiable, at least during operation. This further increases the safety level of the system, specifically in terms of occupational safety (i.e., for the physical protection of people working on or with the machine). Such a safety controller serves, in particular, to immediately shut down the entire machine, or at least some defined actuators of this machine, especially its safety-relevant actuators, upon the occurrence of one or more defined safety-relevant events.This primarily serves occupational safety, but can also protect the machine itself from mechanical damage. To illustrate, consider an example where the plastics processing machine is an injection molding machine: The injection mold, which opens and closes once during each cycle, is always located within a protective enclosure, which typically has at least one door. If the door is opened while the machine is operating (i.e., when the control and operating system is in production mode), the actuator responsible for opening and closing the injection mold is immediately deactivated by the safety controller (usually by switching off the corresponding power supply), thus reliably preventing any part of a person's body from becoming trapped between the closing mold halves.Since this safety control is independent of the cycle sequence control, such a shutdown will also occur if a fault should occur in the cycle sequence control.
[0023] Preferably, the cycle control and the safety control exchange and compare data, at least in production mode, so that they can mutually monitor their functionality. In particular, it may be provided that if this mutual check reveals a malfunction or complete failure of either the cycle control or the safety control, the remaining control (i.e., the cycle control in the case of a fault / failure of the safety control, and the safety control in the case of a fault / failure of the cycle control) moves the plastics processing machine to a defined safe parking position.
[0024] In other words, in a particularly preferred embodiment, the control and operating system comprises at least three independent computing units, wherein the first computing unit (the central computing unit, so to speak) controls the plastics processing machine, while it is shielded from the outside world by the second computing unit and supported by the third unit with regard to occupational safety. This results in a multi-layered safety concept that addresses both data security and traditional occupational safety. This also further enhances overall occupational safety.
[0025] Preferably, the system also features a control-machine interface through which the control and operating system communicates bidirectionally with the machine. Within the definitions chosen here, this control-machine interface forms a separate part of the system; however, it would also be possible, in principle, to assign this control-machine interface to the control and operating system.However, the definition chosen here seems more sensible, especially because it is preferred that this control-machine interface be spatially separated from the computing units of the control and operating system, in particular in such a way that the computing units of the control and operating system and the elements of the control-machine interface are housed in separate areas of a control cabinet, whereby in particular the computing units of the control and operating system can be electromagnetically decoupled from the control-machine interface.
[0026] The control-machine interface is preferably configured as a backplane daughterboard unit. The backplane of this daughterboard unit comprises a logic area powered by a first voltage and a switching area powered by a second voltage, the second voltage being higher than the first. Typically, the first voltage is 3.3 volts and the second voltage is 24 volts. This provides a clear (also spatial) separation of the logic voltage from the switching voltage, which is preferred, among other reasons, for EMC considerations. The backplane has multiple slots, including several slots of the first type ("slave slots") that extend across both the logic and switching areas.At least in operating mode, a switching daughter card is plugged into a number of the first type of slots. These daughter cards are controlled via the logic area, at least in production mode, and each uses the second voltage to control at least one actuator (as defined above) of the plastics processing machine. Furthermore, the cycle control is configured to control the logic area of the backplane, and thus the switching daughter cards, at least in operating mode. This configuration of the control-machine interface enables and facilitates a modular system design.
[0027] Following the modularity concept, the connection between the backplane and the cycle control system is preferably also established via a daughterboard, which is inserted into a second-type slot ("master slot") in the backplane and is referred to as the control daughterboard. Similarly, the safety controller (if present) is preferably connected to the backplane, at least in operating mode, via a daughterboard inserted into the backplane, which is referred to as the safety daughterboard, and which is inserted into a first-type slot (i.e., a "slave slot") in the backplane. It is further preferred that the second voltage is supplied via the control daughterboard and / or the safety daughterboard, which allows for the simple implementation of a complete or partial emergency shutdown.
[0028] The invention will now be described in more detail with reference to the figures and a preferred embodiment. Fig. 1 a highly schematic representation of a preferred embodiment of the system according to the invention for plastics processing, and Fig. 2 a schematic representation of a backplane into which no daughter cards are inserted, Fig. 3 the backplane out Fig. 2 with daughter cards inserted, Fig. 4 a very schematic representation of the functionality of the security daughter card from Fig. 3, Fig. 5 a variant of the one in Fig. 4. Shown, in which the backplane has an additional switchable supply line, and Fig. 6 an alternative to the one in Fig. 3 shown.
[0029] The Fig. Figure 1 schematically shows a preferred embodiment of a plastics processing system according to the invention. This system comprises several functionally and usually also spatially separated units, some of which can be further subdivided into several subunits. Following this approach, the system can initially be divided into three units: the control and operating system 10, the "actual" plastics processing machine 100, which in the illustrated embodiment is designed as a shot-molding machine, and the control-machine interface 60 (power rack), via which the control and operating system 10 communicates bidirectionally with the plastics processing machine (hereinafter also referred to as: injection molding machine 100).
[0030] The term "plastics processing machine 100" encompasses all mechanical elements of the system, in particular actuators as defined above and sensors (except for sensors required for the computing units described later, such as temperature sensors of these units). As a rule, the plastics processing machine, according to the definitions presented here, also has its own electronic components; however, this machine cannot operate without a connection to the control and operating system 10 (namely via the control-machine interface 60). The system as a whole (and thus also its aforementioned units) has an operating mode in which the system is fully operational and can therefore begin production. Thus, a production mode is a sub-mode of the operating mode, which must be distinguished from one or more maintenance modes.In operating mode, communication between the plastics processing machine 100 and the control and operating system 10 is established in particular by means of the control-machine interface 60.
[0031] First, the control and operating system 10 will be discussed. This can be further divided into three subunits. These three subunits are the cycle control, which includes the first processing unit 20; the first interface unit 30, which includes the second processing unit 34; and the safety controller 40, which includes the third processing unit. Each processing unit forms an autonomous system in the sense that it can operate independently of the other processing units. Typically, each processing unit has at least a CPU, RAM, and ROM.
[0032] These three computing units 20, 34, and 40 are housed in a first control cabinet section S1, which is spatially separated from a second control cabinet section S2, in which the aforementioned control-machine interface 60 is housed in the form of a power rack. It should be noted that it is clearly preferred to arrange the first computing unit 20 and the third computing unit 40 within this control cabinet, but that it would be possible (though not preferred) to arrange the second computing unit 34 outside this control cabinet. The control cabinet (i.e., both control cabinet sections S1 and S2) should normally be locked and accessible only to specific groups of people.
[0033] The cycle control system consists solely of the first computing unit 20, which is used to control the plastics processing machine in production mode. To control the machine 100 during a specific production order, it accesses stored data sets. These typically include data sets that can be modified within operating mode and data sets that cannot be modified within operating mode.
[0034] The first interface device comprises an input device and a visualization device, which in the illustrated embodiment are designed as a touchscreen 32 and communicate with the second computing unit 34. However, it would also be possible to implement the first input device and the visualization device separately, for example as a keyboard and screen. The first interface device can optionally have at least one further interface 33, in particular a USB interface, a printer interface, an internet connection, or a LAN / WLAN interface, which also communicates bidirectionally with the second computing unit 34. A data security device, e.g., in the form of a firewall 38 (in particular a hardware firewall or a combination of a hardware and a software firewall), is arranged between the further interface and the second computing unit.
[0035] The first interface device 30, namely its second processing unit 34, is connected to the first processing unit 20 (i.e., the cycle sequence control) via a bidirectional first communication device 36. The first interface device 30 serves for communication between the system and the outside world, for example, a person operating the system, who can obtain information about the state of the machine 100 via the visualization device and can modify at least part of the modifiable data set of the cycle sequence control via the first input device, for example, to adjust process parameters.
[0036] In the illustrated embodiment, the second processing unit 34 is separate from the first input unit and visualization device (touchscreen 32) and is located in the control cabinet. However, this is not mandatory; in some embodiments, the entire first interface device 30 is located outside the control cabinet. In this case, it is particularly possible for the bidirectional communication device, which connects the first interface device 30 (i.e., its processing unit 34) with the first processing unit 20, to be designed as a wireless communication device.
[0037] The described separation of the cycle control (i.e., its first processing unit 20) from the first interface device has two consequences: First, external access to the first processing unit 20 is only possible serially via the second processing unit 34 and the firewall 38, thus significantly increasing security against malware attacks that penetrate as far as the cycle control. Second, the cycle control can operate completely independently of the first interface device 30, so that even if the first interface device fails, production is not necessarily interrupted.
[0038] The first interface unit 30, i.e., the second computing unit 34, can operate with a user-friendly graphical operating system, whereas a machine-oriented real-time operating system (RTOS) is installed on the first computing unit 20. In any case, each of the computing units 20, 34 has its own operating system, and it is particularly preferred that the two operating systems are different, which further improves protection against an attack that penetrates to the cycle control level.
[0039] As previously mentioned, the first computing unit 20 stores several types of data, particularly data that cannot be modified by the first interface unit 30 during operation. This includes, for example, the configuration of the plastics processing machine 100. Other data can be modified by the first interface unit 30 during operation, such as certain production parameters that might result from a tool or material change. If the interface unit 30 fails, the cycle control running on the first computing unit 20 can continue to control the plastics processing machine 100, so production does not necessarily have to be interrupted.
[0040] However, to maintain minimal communication between the cycle control and a person operating the machine even in the event of a failure of the first interface device 30, a second interface device 50 is provided, which communicates directly with the first computing unit 20 via a second communication device 54. This second interface device 50 is designed exclusively as a human-machine interface and, in particular, is not capable of communicating electronically with other devices. This second communication device 54 can, for example, be designed as a classic hand control (as shown) or as a "normal" or modified computer keyboard. In any case, the second communication device 54 has at least one second input device. It may be preferred that the second communication device 54 has a dedicated emergency stop switch.Furthermore, it is preferred that it also has additional input keys with immediate control commands.
[0041] With regard to the Fig. 2, Fig. 3, Fig. 4 to Fig. Section 5 now addresses the design of the control-machine interface, in particular the backplane and the daughter cards inserted therein. At least the majority of communication between the control and operating system and the plastics processing machine runs via this control-machine interface, especially the deactivation of actuators by the safety controller and / or the cycle sequence controller. Direct connections may also be provided, for example, for controlling the drive controllers.
[0042] The Fig. Figure 2 shows the backplane 70 of the control-machine interface in a highly schematic, top-view representation. This backplane 70 has a logic area 72 and a switching area 74. The logic area 72 is operated at a lower voltage than the switching area 74, with typical voltages being 3.3 V for the logic area and 24 V for the switching area. The backplane 70 has multiple slots: several slots 76 of a first type (slave slots) and one slot 78 of a second type (master slot). All slots extend across both the logic area 72 and the switching area 74. The logic area of slot 78 of the second type is in bidirectional communication with the logic areas of the slots 76 of the first type, as is generally known in the prior art.
[0043] In switching area 74, several supply lines 74a, 74b, 74c extend; in this embodiment, there are three. These are shown here only schematically, but can also have connectors for each daughterboard. The three supply lines are of different types, as follows: There is a non-switchable supply line 74a (permanent positive), a first switchable supply line 74b, and another switchable supply line 74c. As will be explained later, more than one additional supply line can also be provided.
[0044] Fig. 3 shows the backplane from Fig. 3 and daughter cards 82, 84, 80a, 80b, and 80c are inserted into the slots of the backplane. The control daughter card 82 is inserted into slot 78 of the second type. This daughter card communicates with the first processing unit 20 (the processing unit of the cycle sequence control) and, in this embodiment, also supplies the power for the switching area via this slot (the latter is not mandatory, but often advantageous), namely into the non-switchable power supply line 74a (permanent positive). Since slot 78 of the second type is in communication connection with all slots of the first type, communication also occurs between the first processing unit 20 and all daughter cards inserted into slots 76 of the first type. Like the backplane, the daughter cards each had a logic area and a switching area.
[0045] The safety daughter card 84 communicates with the third processing unit 40 (the processing unit of the safety controller) and its primary function is to supply power to the switchable supply lines (here 74b and 74c) or to interrupt the power supply to these lines when a shutdown signal is present. This will be discussed in more detail later. Furthermore, communication between the cycle sequence controller 20 and the safety controller 40 can also take place via the control daughter card 82 and the safety daughter card 84. To create redundancy, it is possible and also preferred to provide two bidirectional connections: one direct connection within the first control cabinet area S1 and a second connection via the control daughter card 82, the backplane 70, and the safety daughter card 84.
[0046] Each of the switching daughter cards 80a, 80b, 80c, 80d is assigned to at least one actuator, usually several actuators, and controls them. In the described, highly simplified embodiment, the first switching daughter card 80a is connected to a machine light 115, the second switching daughter card 80b to a heating element 113 of the plasticizing unit of the injection molding machine, the third switching daughter card 80 to a motor actuator of the plasticizing unit, and the fourth switching daughter card to an actuator 110 of the clamping unit of the injection molding machine.The power supply for the power section (switching area) of the second switching daughter card 80b is provided via the non-switchable supply line 74a (permanent positive), the power supply for the power section (switching area) of the first switching daughter card 80a is provided via the first switchable supply line 74b, and the power supply for the respective power sections (switching areas) of the third and fourth switching daughter cards 80c and 80d is provided via the second switchable supply line 74c. The power supply for the logic areas of all daughter cards is provided via the non-switchable supply line 74a (permanent positive).
[0047] The Fig. Figure 4 schematically illustrates the main function of the safety daughter card 84, namely the supply of power to the switchable supply lines 74b and 74c. The safety daughter card 84 is powered via the non-switchable supply line 74a. The first switchable supply line 74b and the second switchable supply line 74c are supplied via a first disconnect switch 84a, which is assigned to an emergency stop circuit (i.e., at least one emergency stop button). The connection between the first disconnect switch 84a and the second supply line 74c is made via a second disconnect switch 84b (i.e., the first and second disconnect switches are connected in series). It follows that if the third processing unit 40 receives an emergency stop signal due to the activation of an emergency stop button, the safety controller 40 controls the safety daughter card 84 in such a way that the first disconnect switch 84a is opened.This disconnects both the first switchable supply line 74b and the second disconnect switch 84b connected in series, and thus also the further switchable supply line 74c, from the supply voltage, regardless of the state of the second disconnect switch 84b. This means that when an emergency stop button is pressed, all switchable supply lines are de-energized, but not the non-switchable supply line 74a.
[0048] If, however, the safety controller 40 receives a shutdown signal from one of the door switches (safety section signal), it controls the safety daughter card 84 in such a way that only the second disconnect switch 84b is opened and only the further supply line 74c is de-energized.
[0049] How to Fig. If power is drawn from 5, any number of additional switchable supply lines (here two additional supply lines 74c and 74d) can be provided, each of which is supplied with power via a disconnect switch 84b, 84c connected in series with the first disconnect switch 84a.
[0050] It is not possible to shut down the non-switchable supply line 74a by the safety control.
[0051] Fig.Figure 6 shows an alternative configuration in which the first processing unit 20 (i.e., the CPU) is not spatially separated from the backplane but is located directly on it, so that no second-type slot (master) and no control daughterboard are provided. The safety daughterboard and the switching daughterboard are controlled directly by the CPU. In this case, the voltage can be fed into the non-switchable power supply line, for example, via a direct connection (as shown) or via the safety daughterboard.
[0052] As another alternative, it would be possible to arrange the CPU (first processing unit) 20 on the control daughterboard.
[0053] In both of the above-mentioned cases, the CPU is not spatially separated from the control machine interface; the functionalities described above remain unaffected. Reference symbol list 10 Control and operating system 20 first computing unit 30 first interface setup 32" Touchscreen 33 more interfaces 34 second computing unit 36 bidirectional first communication device 38 Data security device (firewall) 40 third computing unit (computing unit of the backup control) 50 second interface device 52 Input device of the second interface device 54 second communication device 60 Control-Machine Interface (Power Rack) 70 Backplane 72 Logic area 74 switching range 74a Non-switchable supply line (permanent positive) 74b first switchable supply line (SE) 74c, d further switchable supply line (SC) 76 Type 1 slot (“slave”) 78 Type II slot (“Master”) 80a-d switching daughter card 82 Control Daughter Card 84 Security Daughter Card BA area outside the control cabinet S1 first control cabinet area S2 second control cabinet area
Claims
A plastics processing system comprising at least one plastics processing machine (100) and a control and operating system (10) for controlling and operating this plastics processing machine (100), wherein the system has an operating mode comprising a production mode and wherein the control and operating system comprises: (i) a cycle control which, in production mode, controls the plastics processing machine at least indirectly and which, for this purpose, uses a first computing unit (20) equipped with a first operating system, (ii) a first interface device (30) which comprises at least a first input device, at least one visualization device and a second computing unit (34) equipped with a second operating system and in communication connection with the first input device and the visualization device, (iii) a bidirectional first communication device (36),(iv) a second interface device (50) which has at least one second input device (52), (v) a second communication device (54) which is at least unidirectional and which transmits signals generated by the second input device (52) according to (iv) to the first computing unit (20) according to (i). System according to claim 1, characterized in that the first operating system is a Real Time Operating System (RTOS). System according to claim 1 or claim 2, characterized in that the second operating system is an operating system with a graphical user interface. System according to one of the preceding claims, characterized in that the first interface device (30) has a touchscreen (32) which serves both as a first input device and as a visualization device. System according to one of the preceding claims, characterized in that the first interface device (30) according to (ii) is further equipped with at least one additional interface (33) via which the system can communicate with the outside world, wherein the at least one additional interface comprises in particular an Ethernet interface, a LAN connection, a WLAN module, a USB interface, or a mobile communication module. System according to claim 5, characterized in that a data security device, in particular in the form of a firewall (38), is arranged between the further interface (33) and the second computing unit (34), and / or a software firewall is integrated in the second computing unit. System according to one of the preceding claims, characterized in that a shutdown command can be transmitted to the cycle sequence control by means of the input device (52) of the second interface device (50) according to (iv), which causes the cycle sequence control to move the plastic processing machine into a defined park position. System according to at least one of the preceding claims, characterized in that at least in production mode a first data record which can be modified by means of the first interface device according to (i) is stored in the first computing unit (20). System according to at least one of the preceding claims, characterized in that the control and operating system further comprises (vi) a safety controller operating according to a safety program, wherein the safety program is not modifiable at least in operating mode and wherein the safety controller preferably uses a third computing unit (40). System according to claim 9, characterized in that the cycle sequence control according to (i) and the backup control according to (vi) are configured to exchange and compare data, at least in production mode. System according to claim 10, characterized in that the cycle sequence control according to (i) is configured to continuously check the function of the safety control according to (vi) at least in production mode and to move the plastics processing machine to a defined park position if it detects a malfunction or failure of the safety control according to (vi), and that the safety control according to (vi) is configured to continuously check the function of the cycle sequence control according to (i) at least in production mode and to switch off at least safety-relevant actuators of the plastics processing machine if it detects a malfunction or failure of the cycle sequence control according to (i). System according to one of the preceding claims, characterized in that a control-machine interface (60) is further provided, which (vii) has a backplane (70) with a logic area (72) operated with a first voltage and a switching area (74) operated with a second voltage, wherein - the second voltage is higher than the first voltage, - the backplane (70) has a plurality of slots, wherein at least one first type of slots (76) extends over both the logic area (72) and the switching area (74), - the cycle sequence control according to (i) is configured to control the logic area (72) of the backplane (70) at least in operating mode, and - at least in operating mode, a switching daughter card (80) is inserted into each of a plurality of slots of the first type (76).which, at least in production mode, are each controlled via the logic area and, by means of the second voltage, each control at least one actuator of the plastics processing machine. System according to claim 12, characterized in that the connection to the cycle sequence control is made by means of a control daughter card (82) which is inserted into a slot of the second type (78) in the backplane (70), or that the first computing unit (20) is arranged on the backplane (70). System according to claim 12 or claim 13, insofar as it relates back to claim 9, characterized in that the safety controller according to (vi) is also connected at least in operating mode at least to the logic area (72) of the backplane (70), wherein this connection is preferably made via a safety daughter card (84) plugged into the backplane (70). System according to claim 14, insofar as it relates back to claim 13, characterized in that the communication between cycle sequence control and safety control takes place at least also directly and not, or not exclusively, via the logic area (72) of the backplane. System according to at least one of claims 13 to 15, characterized in that the second voltage is supplied to the switching area (74) by means of the control daughter card (82) and / or by means of the safety daughter card (84). System according to at least one of claims 12 to 16, characterized in that the first computing unit (20) and the control-machine interface are arranged in spatially separate areas (S1, S2) of a control cabinet.