Module system and external output module

Abstract

A module system is provided that can stop power supply to an external power consumption device when a break occurs in a power line within a module downstream of a power supply module. The module system 20 includes a safety module 32 and an external output module 36. The external output module 36 has a first positive input terminal 170a electrically connected to a positive electrode 26p of a power source 26, a negative input terminal 180 electrically connected to a negative electrode 26n of the power source 26, a positive power supply terminal 176 electrically connected to the first positive input terminal 170a and capable of being electrically connected to an external device 22, and a negative power supply terminal 186 electrically connected to the negative input terminal 180 and capable of being electrically connected to the external device 22.

Description

[Technical Field]

[0001] The present disclosure relates to a module system and an external output module. [Background technology]

[0002] German Patent No. 102019215606 discloses a power supply module. The power supply module, a valve module, and a distribution module are arranged in a linear configuration. A mains voltage is supplied to the power supply module. The power supply module supplies power to the valve module and to an external power consumption device other than the linearly arranged modules. Switching devices are arranged on both the inlet power line and the outlet power line used for the power supply. The switching devices are used for safety control to cut off the power supply.

[0003] If the power supply to the external power consuming device is interrupted, it can be detected that a break has occurred in the power line within the power supply module. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] German Patent Invention No. 102019215606 Summary of the Invention [Problem to be solved by the invention]

[0005] In the case of a power supply module disclosed in German Patent No. 102019215606, if a power line outside the power supply module is broken, the power supply to the external power consumption device may continue normally, i.e., if a power line inside a module downstream of the power supply module is broken, the power supply to the external power consumption device cannot be stopped.

[0006] The present disclosure aims to solve the above-mentioned problems. [Means for solving the problem]

[0007] A first aspect of the present disclosure is a module system including a safety module and an external output module connected downstream of the safety module, wherein the safety module has, within a first housing, a positive electrode connecting power line that can be electrically connected to a positive electrode of a power source, a high-side switch that is inserted into the positive electrode connecting power line and that can interrupt electrical conduction of the positive electrode connecting power line, and a negative electrode connecting power line that can be electrically connected to a negative electrode of the power source, and the external output module has a front surface that faces a module arranged adjacent to a previous stage of the external output module, a rear surface that faces a module arranged adjacent to a subsequent stage of the external output module, and a rear surface that is different from both the front surface and the rear surface and on which an external device of the module system can be placed. a second housing different from the first housing and having a connection surface in contact with the positive electrode of the power source via the positive electrode connecting power line; a first positive input terminal provided on the front surface of the second housing and electrically connected to the positive electrode of the power source via the positive electrode connecting power line; a negative input terminal provided on the front surface of the second housing and electrically connected to the negative electrode of the power source via the negative electrode connecting power line; a positive power supply terminal provided on the connection surface of the second housing, electrically connected to the first positive input terminal and capable of being electrically connected to the external device; and a negative power supply terminal provided on the connection surface of the second housing, electrically connected to the negative input terminal and capable of being electrically connected to the external device.

[0008] A second aspect of the present disclosure provides an external output module connected to a subsequent stage of a safety module in a module system, the external output module comprising: a housing having a front surface facing a module arranged adjacent to the previous stage of the external output module; a rear surface facing a module arranged adjacent to the subsequent stage of the external output module; and a connection surface different from either the front surface or the rear surface on which an external device of the module system can be placed; a first positive input terminal and a second positive input terminal provided on the front surface of the housing and each capable of being electrically connected to a positive electrode of a power source via the safety module; a negative input terminal provided on the front surface of the housing and capable of being electrically connected to a negative electrode of the power source via the safety module; and a negative input terminal provided on the connection surface of the housing and electrically connected to the first positive input terminal, a positive power supply terminal that can be electrically connected to the external device, a negative power supply terminal that is provided on the connection surface of the housing, electrically connected to the negative input terminal, and can be electrically connected to the external device, a positive output terminal that is provided on the rear surface of the housing and electrically connected to the second positive input terminal, and a negative output terminal that is provided on the rear surface of the housing and electrically connected to the negative input terminal, wherein the external output module is provided with only one negative input terminal, and the external output module is provided with only one negative output terminal, and the positive output terminal and the negative output terminal of the external output module can be electrically connected to the first positive input terminal and the negative input terminal, respectively, of another external output module. [Effects of the Invention]

[0009] According to the present disclosure, when a power line is broken, power supply to an external device can be stopped. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is a diagram illustrating a schematic example of a control system. [Figure 2]FIG. 2 is a diagram illustrating a schematic example of a control system. DETAILED DESCRIPTION OF THE INVENTION

[0011] FIG. 1 is a diagram illustrating a schematic example of a control system 10. The control system 10 supplies a fluid F to a fluid supply target device (not shown). The fluid supply target device is, for example, a cylinder composed of a tube, a piston, and a rod. The control system 10 includes a module system 20, an external device 22 for the module system 20, a control device 24 for the module system 20, and a power supply 26 for the module system 20.

[0012] The module system 20 includes a communication module 30, a safety module 32, a valve module 34, and an external output module 36. The communication module 30, the safety module 32, the valve module 34, and the external output module 36 are each separate from one another. Power can be supplied to the valve module 34 and the external output module 36 from the power source 26.

[0013] 1, a safety module 32, a valve module 34, and an external output module 36 are connected in this order downstream of the communication module 30. In the example shown in FIG. 1, another valve module 34 and another external output module 36 are connected in this order downstream of the external output module 36. Another valve module 34 and another external output module 36 are connected in this order downstream of the external output module 36. In other words, the module system 20 has a plurality of valve modules 34 and a plurality of external output modules 36. One external device 22 is electrically connected to one external output module 36.

[0014] 1, one valve module 34 is arranged adjacent to the external output module 36 in the upstream stage, but multiple valve modules 34 may be arranged adjacent to each other. That is, in this embodiment, at least one valve module 34 is arranged adjacent to the external output module 36 in the upstream stage.

[0015] The control device 24 is a higher-level control device of the module system 20, and is, for example, a programmable logic controller (PLC). The control device 24 controls the module system 20 via communication. The communication used to control the module system 20 includes safety control communication and operation control communication.

[0016] The safety control communication is communication related to safety control in the power supply from the power source 26 to the module system 20. The operation control communication is communication related to operation control that is different from safety control. The operation control is, for example, control related to the opening and closing operations of multiple valves 34v provided in the valve module 34 described below, and control related to the operation of the external device 22.

[0017] The communication module 30 relays the safety control communication related to the safety control and the operation control communication related to the operation control to the downstream safety module 32. The communication module 30 has a control communication processing circuit 40, a communication line 42 for safety control, a communication terminal 44 for safety control, a communication line 46 for operation control, a communication terminal 48 for operation control, an internal communication processing circuit 50, a positive output terminal 52, and a negative output terminal 54.

[0018] The control communication processing circuit 40 is connected to the control device 24 via a control communication line 60. The control communication processing circuit 40 relays safety control communication and operation control communication between the control device 24 and the safety module 32.

[0019] The communication line 42 is used for safety control communications relayed by the control communication processing circuit 40. The communication line 42 connects the control communication processing circuit 40 and a communication terminal 44. The communication line 46 is used for operation control communications relayed by the control communication processing circuit 40. The communication line 46 connects the control communication processing circuit 40 and a communication terminal 48. An internal communication processing circuit 50 is provided on this communication line 46.

[0020] Both the safety control communication and the operation control communication between the control communication processing circuit 40 and the control device 24 are performed using the control communication line 60. Assume that a control signal for safety control is input from the control device 24 to the control communication processing circuit 40 through the safety control communication using the control communication line 60. In this case, the control communication processing circuit 40 outputs the control signal for safety control to the communication terminal 44 via the communication line 42.

[0021] It is assumed that a control signal for operation control is input from the control device 24 to the control communication processing circuit 40 through operation control communication using the control communication line 60. In this case, the control communication processing circuit 40 outputs the control signal for operation control to the communication terminal 48 via the communication line 46 and the internal communication processing circuit 50.

[0022] The internal communication processing circuit 50 is inserted into the communication line 46 that connects the control communication processing circuit 40 and the communication terminal 48. The internal communication processing circuit 50 performs operation control communication with the safety module 32 using, for example, the communication protocol CAN FD (Controller Area Network with Flexible Data Rate). The internal communication processing circuit 50 performs termination processing of the connection by the communication protocol CAN FD. The termination processing function of the connection by the communication protocol CAN FD may be provided within the control communication processing circuit 40. In that case, the internal communication processing circuit 50 is not necessary.

[0023] Note that other types of communication protocols than CAN FD may be used for the operation control communication between the internal communication processing circuit 50 and the safety module 32. For example, communication protocols such as CAN (Controller Area Network), Ethernet (registered trademark), SPI (Serial Peripheral Interface), RS-485, and USB (Universal Serial Bus) may be used.

[0024] The positive output terminal 52 is electrically connected to the positive electrode 26p of the power supply 26 via a positive electrode connecting power line 62. The negative output terminal 54 is electrically connected to the negative electrode 26n of the power supply 26 via a negative electrode connecting power line 64.

[0025] The safety module 32 has a safety control processing circuit 70, a safety control communication terminal 72, a safety control communication line 74, an operation control processing circuit 80, an operation control signal input terminal 82, an operation control communication line 84, and an operation control signal output terminal 86. The safety module 32 further has a positive input terminal 88, a positive output terminal 90, a positive electrode connecting power line 92, a high-side switch 94, a negative input terminal 96, a negative output terminal 98, a negative electrode connecting power line 100, and a low-side switch 102.

[0026] The safety module 32 has a safety control processing circuit 70, a communication line 74, an operation control processing circuit 80, a communication line 84, a positive connecting power line 92, a high-side switch 94, a negative connecting power line 100, and a low-side switch 102 within the first housing 32h.

[0027] The first housing 32h has a front surface 32hf facing the module arranged adjacent to the front stage of the safety module 32, and a rear surface 32hb facing the module arranged adjacent to the rear stage of the safety module 32. In the example shown in FIG. 1 , the module arranged adjacent to the front stage of the safety module 32 is the communication module 30. The module arranged adjacent to the rear stage of the safety module 32 is the valve module 34.

[0028] The communication terminal 72, signal input terminal 82, positive input terminal 88, and negative input terminal 96 of the safety module 32 are provided on the front surface 32hf of the first housing 32h. The signal output terminal 86, positive output terminal 90, and negative output terminal 98 of the safety module 32 are provided on the rear surface 32hb of the first housing 32h. Because the safety module 32 is a replaceable module, if the safety module 32 fails, it is not necessary to replace the entire module system 20. Only the failed safety module 32 needs to be replaced.

[0029] The safety control processing circuit 70 performs safety control communication with the control device 24 via the control communication processing circuit 40 of the communication module 30. The communication terminal 72 is used for safety control communication. The communication terminal 72 is physically connected to the communication terminal 44 of the communication module 30. Therefore, the communication terminal 72 of the safety module 32 is connected to the communication line 42 of the communication module 30. The communication line 74 of the safety module 32 connects the safety control processing circuit 70 and the communication terminal 72 and is used for safety control communication.

[0030] That is, the safety control processing circuit 70 performs safety control communication with the control device 24 via the communication terminal 72 and the communication line 74. A control signal for safety control from the control device 24 can be transmitted to the communication line 74. Based on the control signal for safety control from the control device 24, the safety control processing circuit 70 can output a switching control signal to a high-side switch 94 and / or a low-side switch 102, which will be described later.

[0031] The operation control processing circuit 80 is inserted into a communication line 84 that connects a signal input terminal 82 and a signal output terminal 86. The operation control processing circuit 80 performs operation control communication with the control device 24 via the control communication processing circuit 40 and the internal communication processing circuit 50 of the communication module 30. The signal input terminal 82 and the signal output terminal 86 are used for operation control communication. The signal input terminal 82 is physically connected to the communication terminal 48 of the communication module 30. Therefore, the signal input terminal 82 of the safety module 32 is connected to the communication line 46 of the communication module 30. The signal output terminal 86 and the communication line 84 of the safety module 32 connect the signal input terminal 82, the operation control processing circuit 80, and the signal output terminal 86, and are used for operation control communication.

[0032] That is, the operation control processing circuit 80 communicates with the control device 24 for operation control via a signal input terminal 82 and a communication line 84. A control signal for operation control from the control device 24 can be transmitted to the communication line 84. The operation control processing circuit 80 can output the control signal for operation control from the control device 24 to the valve module 34 via the communication line 84 and a signal output terminal 86.

[0033] The positive input terminal 88 is electrically and physically connected to the positive output terminal 52 of the communications module 30. Therefore, the positive input terminal 88 is electrically connected to the positive terminal 26p of the power supply 26 via the positive connecting power line 62 of the communications module 30. The positive output terminal 90 can be electrically connected to the positive input terminal 88 via a positive connecting power line 92. The positive connecting power line 92 can electrically connect the positive input terminal 88 and the positive output terminal 90.

[0034] A high-side switch 94 is inserted in the positive-electrode connecting power line 92. The high-side switch 94 can interrupt electrical continuity of the positive-electrode connecting power line 92 in response to a switching control signal output from the safety control processing circuit 70. When the high-side switch 94 is turned on in response to the switching control signal, power is supplied to the module connected downstream of the safety module 32 using the positive-electrode connecting power line 92. When the high-side switch 94 is turned off in response to the switching control signal, power is not supplied to the module connected downstream of the safety module 32.

[0035] The safety module 32 has a plurality of high-side switches 94. Each of the plurality of high-side switches 94 is provided for each module group formed by a combination of a valve module 34 and an external output module 36. In other words, the number of module groups is equal to or less than the number of high-side switches 94.

[0036] 1, three high-side switches 94 are arranged. Three module groups are formed, consisting of module group Ga, module group Gb, and module group Gc. Module group Gb is arranged after module group Ga. Module group Gc is arranged after module group Gb.

[0037] Each module group includes one or more valve modules 34, one external output module 36, and an external device 22 connected to the external output module 36. In each module group, at least one valve module 34 is arranged adjacent to the upstream stage of the external output module 36. In other words, the external output module 36 is arranged adjacent to the downstream stage of one or more valve modules 34 that belong to the same module group as the external output module 36. In other words, the external output module 36 is arranged at the last stage in the module group to which the external output module 36 belongs.

[0038] Each module group in this embodiment includes one valve module 34 and one external output module 36 arranged adjacent to the valve module 34 in the subsequent stage.

[0039] As described above, the module system 20 includes a plurality of valve modules 34 and a plurality of external output modules 36. In the example shown in Fig. 1, the plurality of valve modules 34 includes a first valve module 34a, a second valve module 34b, and a third valve module 34c. The plurality of external output modules 36 includes a first external output module 36a, a second external output module 36b, and a third external output module 36c.

[0040] The first valve module 34a, the first external output module 36a, and the external device 22 connected to the first external output module 36a belong to the module group Ga. The second valve module 34b, the second external output module 36b, and the external device 22 connected to the second external output module 36b belong to the module group Gb. The third valve module 34c, the third external output module 36c, and the external device 22 connected to the third external output module 36c belong to the module group Gc.

[0041] The positive connecting power line 92 branches between the positive input terminal 88 and the positive output terminal 90. The number of branches of the positive connecting power line 92 corresponds to the number of module groups described above. In the safety module 32 shown in FIG. 1 , the positive connecting power line 92 branches into three lines, which is the same as the number of module groups. That is, the positive connecting power line 92 includes a first positive connecting power line 92a, a second positive connecting power line 92b, and a third positive connecting power line 92c, which are formed by branches.

[0042] The number of positive output terminals 90 also corresponds to the number of module groups. When the module system 20 includes multiple module groups, the safety module 32 is provided with multiple positive output terminals 90, the same number as the module groups. The safety module 32 shown in FIG. 1 is provided with three positive output terminals 90, the same number as the module groups: a first positive output terminal 90a, a second positive output terminal 90b, and a third positive output terminal 90c.

[0043] The first positive-connecting power line 92a can be electrically connected to modules belonging to module group Ga via the first positive output terminal 90a. That is, power can be relayed to modules belonging to module group Ga using the first positive-connecting power line 92a. The second positive-connecting power line 92b can be electrically connected to modules belonging to module group Gb via the second positive output terminal 90b. That is, power can be relayed to modules belonging to module group Gb using the second positive-connecting power line 92b.

[0044] The third positive-connecting power line 92c can be electrically connected to the modules belonging to the module group Gc via the third positive output terminal 90c. That is, the third positive-connecting power line 92c can be used to relay power to the modules belonging to the module group Gc. Details of the electrical connections between each positive-connecting power line 92 and the modules belonging to each module group will be described later.

[0045] As described above, a high-side switch 94 is provided for each module group, and therefore, a high-side switch 94 is inserted into each of the first positive-connecting power line 92a, the second positive-connecting power line 92b, and the third positive-connecting power line 92c.

[0046] 1, a high-side switch 94a is inserted in the first positive-electrode connecting power line 92a. A high-side switch 94b is inserted in the second positive-electrode connecting power line 92b. A high-side switch 94c is inserted in the third positive-electrode connecting power line 92c. That is, the multiple high-side switches 94 included in the module system 20 include the high-side switch 94a, the high-side switch 94b, and the high-side switch 94c.

[0047] When only one of the multiple high-side switches 94 is turned off in response to the switching control signal output from the safety control processing circuit 70, power is not supplied only to the modules belonging to the module group corresponding to that high-side switch 94. When only one of the multiple high-side switches 94 is turned on in response to the switching control signal, power is supplied only to the modules belonging to the module group corresponding to that high-side switch 94. Therefore, the power supply can be switched for each module group in the safety control described above.

[0048] The negative input terminal 96 is electrically and physically connected to the negative output terminal 54 of the communications module 30. Therefore, the negative input terminal 96 is electrically connected to the negative electrode 26n of the power source 26 via the negative electrode connecting power line 64 of the communications module 30. The negative output terminal 98 is electrically connected to the negative electrode 26n of the power source 26 via the negative electrode connecting power line 100. The negative electrode connecting power line 100 can electrically connect the negative input terminal 96 and the negative output terminal 98.

[0049] A low-side switch 102 is inserted in the negative-electrode-connecting power line 100. The low-side switch 102 can interrupt electrical continuity of the negative-electrode-connecting power line 100 in response to a switching control signal output from the safety control processing circuit 70. When the low-side switch 102 is turned on in response to the switching control signal, power is supplied to the module connected downstream of the safety module 32 using the negative-electrode-connecting power line 100. When the low-side switch 102 is turned off in response to the switching control signal, power is not supplied to the module connected downstream of the safety module 32.

[0050] The module system 20 has a single negative-pole connecting power line 100 and a single low-side switch 102 common to multiple module groups. The safety module 32 has a single negative input terminal 96 and a single negative output terminal 98. Therefore, the circuit scale for realizing the negative input terminal 96, the negative-pole connecting power line 100, the low-side switch 102, and the negative output terminal 98 can be reduced.

[0051] When the low-side switch 102 is turned off in response to the switching control signal output from the safety control processing circuit 70, power is not supplied to the modules belonging to all module groups. When the low-side switch 102 is turned on in response to the switching control signal, power is supplied to the modules belonging to all module groups. Therefore, in the safety control described above, power supply and cut-off can be switched collectively for the modules belonging to all module groups arranged downstream of the safety module 32.

[0052] The valve module 34 includes a plurality of valves 34v and a driver 34d that opens and closes the plurality of valves 34v. The valves 34v are, for example, solenoid valves. The driver 34d opens and closes the valves 34v. The valve module 34 further includes a signal input terminal 120 for operation control, a signal output terminal 122 for operation control, a communication line 124 for operation control, and a signal connection wiring 126 for operation control.

[0053] The valve module 34 further has a positive input terminal 130, a positive output terminal 132, a positive connection relay wiring 134, a positive connection power supply wiring 136, a negative input terminal 140, a negative output terminal 142, a negative connection relay wiring 144, and a negative connection power supply wiring 146.

[0054] Driver 34d opens and closes valve 34v via operation control signal connection wiring 126 while power is supplied to driver 34d via positive connection power supply wiring 136 and negative connection power supply wiring 146. When the power supply to driver 34d is cut off, valve 34v enters a safe state. The safe state of valve 34v is predetermined to be either an open state in which valve 34v is open, or a closed state in which valve 34v is closed.

[0055] The valve module 34 has a communication line 124, a signal connection wiring 126, a positive connection relay wiring 134, a positive connection power supply wiring 136, a negative connection relay wiring 144, and a negative connection power supply wiring 146 inside a third housing 34h.

[0056] The third housing 34h of the valve module 34 is physically different from the first housing 32h of the safety module 32. The third housing 34h of the valve module 34 is also physically different from the second housing 36h of the external output module 36, which will be described later. The third housing 34h has a front surface 34hf that faces the module arranged adjacent to the upstream side of the valve module 34, and a rear surface 34hb that faces the module arranged adjacent to the downstream side of the valve module 34.

[0057] 1, the module arranged adjacent to and upstream of the first valve module 34a is the safety module 32. The module arranged adjacent to and upstream of the second valve module 34b is the first external output module 36a. The module arranged adjacent to and upstream of the third valve module 34c is the second external output module 36b. The module arranged adjacent to and downstream of the valve module 34 is the external output module 36.

[0058] The signal input terminal 120, positive input terminal 130, and negative input terminal 140 of the valve module 34 are provided on the front surface 34hf of the third housing 34h. The signal output terminal 122, positive output terminal 132, and negative output terminal 142 of the valve module 34 are provided on the rear surface 34hb of the third housing 34h. Because the valve module 34 is a replaceable module, if the valve module 34 fails, it is not necessary to replace the entire module system 20. Only the failed valve module 34 needs to be replaced.

[0059] The signal input terminal 120 is physically connected to a signal output terminal of a module upstream of the valve module 34. The signal input terminal 120 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 120 from the module upstream of the valve module 34.

[0060] In the case of the first valve module 34a belonging to module group Ga, the signal input terminal 120 of the first valve module 34a is connected to the signal output terminal 86 of the safety module 32 upstream of the first valve module 34a. The signal input terminal 120 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal 86 of the safety module 32. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 120 from the safety module 32 upstream of the first valve module 34a.

[0061] The signal output terminal 122 is connected to the signal input terminal 120 of the same valve module 34 via a communication line 124. The communication line 124 connects the signal input terminal 120 and the signal output terminal 122, and is used to transmit a control signal for operation control from the control device 24. The signal output terminal 122 is physically connected to a signal input terminal of a module subsequent to the valve module 34. Therefore, a control signal for operation control from the control device 24 that is input to the signal input terminal 120 can be output from the signal output terminal 122 to the module subsequent to the valve module 34.

[0062] In the case of the first valve module 34a belonging to module group Ga, the signal output terminal 122 of the first valve module 34a is connected to the signal input terminal 120 of the same first valve module 34a via a communication line 124. A control signal for operation control from the control device 24 can be output from the signal output terminal 122 to the first external output module 36a located downstream of the first valve module 34a.

[0063] The signal connection wiring 126 connects the signal input terminal 120 and the driver 34d, and can be used to transmit a control signal for operation control output from the control device 24 to the driver 34d. In this case, the control signal for operation control input to the signal input terminal 120 is output to the driver 34d. The control signal output from the control device 24 to the driver 34d is, for example, a signal by which the control device 24 instructs the driver 34d to open or close the valve 34v.

[0064] The driver 34d opens and closes the valve 34v based on a control signal from the control device 24. When the driver 34d opens the valve 34v, the valve 34v supplies the fluid F to the fluid supply target device. When the driver 34d closes the valve 34v, the fluid F supplied to the fluid supply target device by the valve 34v is blocked.

[0065] The positive input terminal 130 is electrically and physically connected to the positive output terminal of the module preceding the valve module 34. The positive input terminal 130 is connected to the positive pole connecting power line 92 of the safety module 32 via the positive output terminal. The positive input terminal 130 can be electrically connected to the positive pole 26p of the power source 26 via the positive pole connecting power line 92 of the safety module 32.

[0066] The positive output terminal 132 can be electrically connected to the positive input terminal 130 via a positive connection relay wiring 134. The positive connection relay wiring 134 electrically connects the positive input terminal 130 and the positive output terminal 132. That is, the positive connection relay wiring 134 is electrically connected to the positive input terminal 130 and the positive output terminal 132. The positive connection relay wiring 134 can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connection power line 92 of the safety module 32.

[0067] The number of positive connection relay wirings 134, the number of positive input terminals 130, and the number of positive output terminals 132 correspond to the number of module groups. When the module system 20 includes multiple module groups, the valve module 34 is provided with a plurality of positive connection relay wirings 134, a plurality of positive input terminals 130, and a plurality of positive output terminals 132, the number of which corresponds to the number of module groups.

[0068] The valve module 34 shown in FIG. 1 is provided with three positive connection relay wirings 134, the same number as the number of module groups: a first positive connection relay wiring 134a, a second positive connection relay wiring 134b, and a third positive connection relay wiring 134c.

[0069] Furthermore, three positive input terminals 130, the same number as the module groups, are provided: a first positive input terminal 130a, a second positive input terminal 130b, and a third positive input terminal 130c. Furthermore, three positive output terminals 132, the same number as the module groups, are provided: a first positive output terminal 132a, a second positive output terminal 132b, and a third positive output terminal 132c.

[0070] The first positive input terminal 130a is electrically and physically connected to the positive output terminal of the module preceding the valve module 34. The first positive input terminal 130a is connected to the positive pole connecting power line 92 of the safety module 32 via the positive output terminal. Therefore, the first positive input terminal 130a can be electrically connected to the positive pole 26p of the power source 26 via the positive pole connecting power line 92 of the safety module 32.

[0071] In the case of the first valve module 34a belonging to the module group Ga, the first positive input terminal 130a of the first valve module 34a is electrically and physically connected to the first positive output terminal 90a of the safety module 32 upstream of the first valve module 34a. The first positive input terminal 130a is electrically connected to the first positive electrode connecting power line 92a of the safety module 32 via the first positive output terminal 90a of the safety module 32. Therefore, the first positive input terminal 130a of the first valve module 34a can be electrically connected to the positive electrode 26p of the power source 26 via the first positive electrode connecting power line 92a of the safety module 32.

[0072] The first positive output terminal 132a is connected to the first positive input terminal 130a via a first positive connection relay wiring 134a. The first positive connection relay wiring 134a electrically connects the first positive input terminal 130a and the first positive output terminal 132a. That is, the first positive connection relay wiring 134a is electrically connected to the first positive input terminal 130a and the first positive output terminal 132a.

[0073] In the case of the first valve module 34a belonging to the module group Ga, the first positive output terminal 132a and the first positive connection relay wiring 134a of the first valve module 34a can be electrically connected to the positive electrode 26p of the power source 26 via the first positive electrode connection power line 92a of the safety module 32, similar to the first positive input terminal 130a.

[0074] The second positive input terminal 130b is electrically and physically connected to the positive output terminal of the module preceding the valve module 34. The second positive input terminal 130b is connected to the positive pole connecting power line 92 of the safety module 32 via the positive output terminal. Therefore, the second positive input terminal 130b can be electrically connected to the positive pole 26p of the power source 26 via the positive pole connecting power line 92 of the safety module 32.

[0075] In the case of the first valve module 34a belonging to the module group Ga, the second positive input terminal 130b is electrically and physically connected to the second positive output terminal 90b of the safety module 32 upstream of the first valve module 34a. The second positive input terminal 130b is electrically connected to the second positive electrode connecting power line 92b of the safety module 32 via the second positive electrode connecting power line 92b of the safety module 32. Therefore, the second positive input terminal 130b can be electrically connected to the positive electrode 26p of the power source 26 via the second positive electrode connecting power line 92b of the safety module 32.

[0076] The second positive output terminal 132b is connected to the second positive input terminal 130b via a second positive connection relay wiring 134b. The second positive connection relay wiring 134b electrically connects the second positive input terminal 130b and the second positive output terminal 132b. That is, the second positive connection relay wiring 134b is electrically connected to the second positive input terminal 130b and the second positive output terminal 132b.

[0077] In the case of the first valve module 34a belonging to the module group Ga, the second positive output terminal 132b and the second positive connection relay wiring 134b can be electrically connected to the positive pole 26p of the power source 26 via the second positive pole connection power line 92b of the safety module 32, similar to the second positive input terminal 130b.

[0078] The third positive input terminal 130c is electrically and physically connected to the positive output terminal of the module preceding the valve module 34. The third positive input terminal 130c is electrically connected to the positive pole connecting power line 92 of the safety module 32 via the positive output terminal. Therefore, the third positive input terminal 130c can be electrically connected to the positive pole 26p of the power supply 26 via the positive pole connecting power line 92 of the safety module 32.

[0079] In the case of the first valve module 34a belonging to the module group Ga, the third positive input terminal 130c of the first valve module 34a is electrically and physically connected to the third positive output terminal 90c of the safety module 32 upstream of the first valve module 34a. The third positive input terminal 130c is connected to the third positive pole connecting power line 92c of the safety module 32 via the third positive output terminal 90c of the safety module 32. Therefore, the third positive input terminal 130c can be electrically connected to the positive pole 26p of the power source 26 via the third positive pole connecting power line 92c of the safety module 32.

[0080] The third positive output terminal 132c is connected to the third positive input terminal 130c via a third positive connection relay wiring 134c. The third positive connection relay wiring 134c electrically connects the third positive input terminal 130c and the third positive output terminal 132c. That is, the third positive connection relay wiring 134c is electrically connected to the third positive input terminal 130c and the third positive output terminal 132c.

[0081] In the case of the first valve module 34a belonging to the module group Ga, the third positive output terminal 132c and the third positive connection relay wiring 134c can be electrically connected to the positive pole 26p of the power source 26 via the third positive pole connection power line 92c of the safety module 32, similar to the third positive input terminal 130c.

[0082] The positive connection power supply wiring 136 is electrically connected to the first positive input terminal 130a and the driver 34d. The positive connection power supply wiring 136 is connected to the positive electrode connection power line 92 of the safety module 32 via the first positive input terminal 130a. That is, the positive connection power supply wiring 136 can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connection power line 92 of the safety module 32. Power is supplied to the driver 34d by the positive connection power supply wiring 136 and a negative connection power supply wiring 146, which will be described later. When power is supplied to the driver 34d, the driver 34d can open and close the valve 34v.

[0083] In the case of the first valve module 34a belonging to the module group Ga, the positive connection power supply wiring 136 of the first valve module 34a is connected to the first positive electrode connection power line 92a of the safety module 32 via the first positive input terminal 130a.

[0084] The valve module 34 has only one negative input terminal 140. The negative input terminal 140 is electrically and physically connected to the negative output terminal of the module preceding the valve module 34. The negative input terminal 140 is connected to the negative electrode connecting power line 100 of the safety module 32 via the negative output terminal. The negative input terminal 140 can be electrically connected to the negative electrode 26n of the power source 26 via the negative electrode connecting power line 100 of the safety module 32.

[0085] In the case of the first valve module 34a belonging to the module group Ga, the negative input terminal 140 of the first valve module 34a is electrically and physically connected to the negative output terminal 98 of the safety module 32 upstream of the first valve module 34a. The negative input terminal 140 is connected to the negative electrode connecting power line 100 of the safety module 32 via the negative output terminal 98 of the safety module 32. Therefore, the negative input terminal 140 can be electrically connected to the negative electrode 26n of the power source 26 via the negative electrode connecting power line 100 of the safety module 32.

[0086] The valve module 34 has only one negative output terminal 142. The negative output terminal 142 can be electrically connected to the negative input terminal 140 via a single negative connection relay wiring 144. The negative connection relay wiring 144 electrically connects the negative input terminal 140 and the negative output terminal 142. That is, the negative connection relay wiring 144 is electrically connected to the negative input terminal 140 and the negative output terminal 142. The negative connection relay wiring 144 can be electrically connected to the negative electrode 26n of the power source 26 via the negative electrode connecting power line 100 of the safety module 32.

[0087] The valve module 34 has only one each of the negative input terminal 140, negative connection relay wiring 144, and negative output terminal 142. Therefore, the circuit scale required to realize these can be reduced.

[0088] The negative connection power supply wiring 146 is electrically connected to the negative input terminal 140 and the driver 34d. The negative connection power supply wiring 146 is connected to the negative electrode connection power line 100 of the safety module 32 via the negative input terminal 140. That is, the negative connection power supply wiring 146 can be electrically connected to the negative electrode 26n of the power supply 26 via the negative electrode connection power line 100 of the safety module 32. As described above, power is supplied to the driver 34d via the positive connection power supply wiring 136 and the negative connection power supply wiring 146. When power is supplied to the driver 34d, the driver 34d can open and close the valve 34v.

[0089] The external output module 36 has an operation control signal input terminal 160, an operation control signal output terminal 162, and an operation control communication line 164. The external output module 36 further has a positive input terminal 170, a positive output terminal 172, a positive connection relay wiring 174, a positive power supply terminal 176, and a positive connection power supply wiring 178. The external output module 36 further has a negative input terminal 180, a negative output terminal 182, a negative connection relay wiring 184, a negative power supply terminal 186, and a negative connection power supply wiring 188.

[0090] The external output module 36 has a second housing 36h that includes a communication line 164, a positive connection relay wiring 174, a positive connection power supply wiring 178, a negative connection relay wiring 184, and a negative connection power supply wiring 188. The second housing 36h of the external output module 36 is physically different from the first housing 32h of the safety module 32. As described above, the second housing 36h of the external output module 36 is also physically different from the third housing 34h of the valve module 34.

[0091] The second housing 36h has a front surface 36hf facing a module arranged adjacent to the front stage of the external output module 36, a rear surface 36hb facing a module arranged adjacent to the rear stage of the external output module 36, and a connection surface 36hc different from both the front surface 36hf and the rear surface 36hb. The external device 22 can be placed facing the connection surface 36hc of the external output module 36.

[0092] In this embodiment, the module arranged adjacent to the upstream side of the external output module 36 is the valve module 34 that belongs to the same module group as the external output module 36. The module arranged adjacent to the downstream side of the external output module 36 is the valve module 34 that belongs to a different module group from the external output module 36.

[0093] For example, the module arranged adjacent to the first external output module 36a in the upstream stage is the first valve module 34a, which belongs to the same module group Ga as the first external output module 36a. The module arranged adjacent to the second external output module 34b in the downstream stage is the second valve module 34b, which belongs to a module group Gb different from the first external output module 36a.

[0094] The module arranged adjacent to the upstream side of the second external output module 36b is the second valve module 34b, which belongs to the same module group Gb as the second external output module 36b. The module arranged adjacent to the downstream side of the second external output module 36b is the third valve module 34c, which belongs to a different module group Gc than the second external output module 36b.

[0095] The module arranged adjacent to the third external output module 36c in the upstream stage is the third valve module 34c, which belongs to the same module group Gc as the third external output module 36c. In the example shown in Fig. 1, there is no module arranged adjacent to the third external output module 36c in the downstream stage.

[0096] The signal input terminal 160, the positive input terminal 170, and the negative input terminal 180 of the external output module 36 are provided on the front surface 36hf of the second housing 36h. The signal output terminal 162, the positive output terminal 172, and the negative output terminal 182 of the external output module 36 are provided on the rear surface 36hb of the second housing 36h.

[0097] The positive power supply terminal 176 and the negative power supply terminal 186 of the external output module 36 are provided on the connection surface 36hc of the second housing 36h. Because the external output module 36 is a replaceable module, if the external output module 36 fails, it is not necessary to replace the entire module system 20. Only the failed external output module 36 needs to be replaced.

[0098] The signal input terminal 160 is physically connected to a signal output terminal of a module preceding the external output module 36. The signal input terminal 160 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 160 from the module preceding the external output module 36.

[0099] In the case of the first external output module 36a belonging to the module group Ga, the signal input terminal 160 of the first external output module 36a is physically connected to the signal output terminal 122 of the first valve module 34a that is located upstream of the first external output module 36a. The signal input terminal 160 is connected to the communication line 84 for operation control of the safety module 32 via the signal output terminal 122, communication line 124, and signal input terminal 120 of the first valve module 34a, and the signal output terminal 86 of the safety module 32.

[0100] Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 160 from the first valve module 34a, which is located in the preceding stage of the first external output module 36a.

[0101] A signal output terminal 162 of the external output module 36 is connected to the signal input terminal 160 via a communication line 164. The communication line 164 connects the signal input terminal 160 and the signal output terminal 162, and is used to transmit a control signal for operation control from the control device 24. The signal output terminal 162 is physically connected to a signal input terminal of a module subsequent to the external output module 36. Therefore, a control signal for operation control from the control device 24 input to the signal input terminal 160 can be output from the signal output terminal 162 to the module subsequent to the external output module 36.

[0102] In the case of the first external output module 36a belonging to the module group Ga, the signal output terminal 162 of the first external output module 36a is physically connected to the signal input terminal 160 via a communication line 164. The communication line 164 connects the signal input terminal 160 and the signal output terminal 162, and is used to transmit control signals for operation control from the control device 24. The signal output terminal 162 is physically connected to the signal input terminal 120 of the second valve module 34b that is located downstream of the first external output module 36a.

[0103] Therefore, a control signal for operation control from the control device 24 can be output from the signal output terminal 162 to the second valve module 34b located downstream of the first external output module 36a.

[0104] The external output module 36 has a plurality of positive input terminals 170 and at least one positive output terminal 172. The positive input terminal 170 is electrically and physically connected to the positive output terminal of the module preceding the external output module 36. The positive input terminal 170 is connected to the positive electrode connecting power line 92 of the safety module 32 via the positive output terminal. The positive input terminal 170 can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connecting power line 92 of the safety module 32.

[0105] At least one positive output terminal 172 can be electrically connected to at least some of the multiple positive input terminals 170 via positive connection relay wiring 174. The positive connection relay wiring 174 electrically connects each of at least some of the positive input terminals 170 described above to each of at least one positive output terminal 172. That is, the positive connection relay wiring 174 is electrically connected to the positive input terminal 170 and the positive output terminal 172. The positive connection relay wiring 174 can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connecting power line 92 of the safety module 32.

[0106] The number of positive connection relay wirings 174 and the number of positive input terminals 170 correspond to the number of high-side switches 94 or the number of module groups. In this embodiment, the number of positive connection relay wirings 174 and the number of positive input terminals 170 correspond to the number of module groups. When the module system 20 includes multiple module groups, the external output module 36 is provided with a number of positive input terminals 170 equal to the number of module groups and a number of positive connection relay wirings 174 that is one less than the number of module groups.

[0107] In this embodiment, the number of positive output terminals 172 provided in the external output module 36 is the same as the number of module groups. However, the number of positive output terminals 172 may be one less than the number of module groups.

[0108] The external output module 36 shown in FIG. 1 is provided with two positive connection relay wirings 174, which is one less than the three module groups, namely, a first positive connection relay wiring 174a and a second positive connection relay wiring 174b.

[0109] Furthermore, three positive input terminals 170, the same as the number of module groups, are provided: a first positive input terminal 170a, a second positive input terminal 170b, and a third positive input terminal 170c. Furthermore, three positive output terminals 172, the same as the number of module groups, are provided: a first positive output terminal 172a, a second positive output terminal 172b, and a third positive output terminal 172c.

[0110] The first positive input terminal 170a is electrically and physically connected to the positive output terminal of the module preceding the external output module 36. The first positive input terminal 170a is connected to the positive electrode connecting power line 92 of the safety module 32 via the positive output terminal. Therefore, the first positive input terminal 170a can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connecting power line 92 of the safety module 32.

[0111] In the case of the first external output module 36a belonging to the module group Ga, the first positive input terminal 170a of the first external output module 36a is electrically and physically connected to the first positive output terminal 132a of the first valve module 34a that is located upstream of the first external output module 36a. The first positive input terminal 170a is electrically connected to the first positive electrode connecting power line 92a of the safety module 32 via the first positive output terminal 132a, the first positive connecting relay wiring 134a, and the first positive input terminal 130a of the first valve module 34a, and the first positive output terminal 90a of the safety module 32.

[0112] Therefore, the first positive input terminal 170a can be electrically connected to the positive pole 26p of the power source 26 via the first positive pole connecting power line 92a of the safety module 32.

[0113] The second positive input terminal 170b is electrically and physically connected to the positive output terminal of the module preceding the external output module 36. The second positive input terminal 170b is connected to the positive electrode connecting power line 92 of the safety module 32 via the positive output terminal. Therefore, the second positive input terminal 170b can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connecting power line 92 of the safety module 32.

[0114] In the case of the first external output module 36a belonging to the module group Ga, the second positive input terminal 170b of the first external output module 36a is electrically and physically connected to the second positive output terminal 132b of the first valve module 34a that is located upstream of the first external output module 36a. The second positive input terminal 170b is electrically connected to the second positive electrode connecting power line 92b of the safety module 32 via the second positive output terminal 132b, second positive connecting relay wiring 134b, and second positive input terminal 130b of the first valve module 34a and the second positive output terminal 90b of the safety module 32.

[0115] Therefore, the second positive input terminal 170b can be electrically connected to the positive pole 26p of the power source 26 via the second positive pole connecting power line 92b of the safety module 32.

[0116] The first positive output terminal 172a is electrically connected via a first positive connection relay wiring 174a to a second positive input terminal 170b, which is located one terminal below the first positive input terminal 170a of the same external output module 36. The first positive connection relay wiring 174a electrically connects the second positive input terminal 170b and the first positive output terminal 172a. In other words, the first positive connection relay wiring 174a is electrically connected to the second positive input terminal 170b and the first positive output terminal 172a.

[0117] In the case of the first external output module 36a belonging to the module group Ga, the first positive output terminal 172a and the first positive connection relay wiring 174a of the first external output module 36a can be electrically connected to the positive electrode 26p of the power source 26 via the second positive electrode connection power line 92b of the safety module 32, similar to the second positive input terminal 170b.

[0118] The third positive input terminal 170c is electrically and physically connected to the positive output terminal of the module preceding the external output module 36. The third positive input terminal 170c is electrically connected to the positive electrode connecting power line 92 of the safety module 32 via the positive output terminal. Therefore, the third positive input terminal 170c can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connecting power line 92 of the safety module 32.

[0119] In the case of the first external output module 36a belonging to the module group Ga, the third positive input terminal 170c of the first external output module 36a is electrically and physically connected to the third positive output terminal 132c of the first valve module 34a that is located upstream of the first external output module 36a. The third positive input terminal 170c is connected to the third positive electrode connecting power line 92c of the safety module 32 via the third positive output terminal 132c, third positive connecting relay wiring 134c, and third positive input terminal 130c of the first valve module 34a, and the third positive output terminal 90c of the safety module 32.

[0120] Therefore, the third positive input terminal 170c can be electrically connected to the positive pole 26p of the power source 26 via the third positive pole connecting power line 92c of the safety module 32.

[0121] The second positive output terminal 172b is electrically connected via a second positive connection relay wiring 174b to a third positive input terminal 170c, which is located one terminal below the second positive input terminal 170b of the same external output module 36. The second positive connection relay wiring 174b electrically connects the third positive input terminal 170c and the second positive output terminal 172b. That is, the second positive connection relay wiring 174b is electrically connected to the third positive input terminal 170c and the second positive output terminal 172b.

[0122] In the case of the first external output module 36a belonging to the module group Ga, the second positive output terminal 172b and the second positive connection relay wiring 174b of the first external output module 36a can be electrically connected to the positive electrode 26p of the power source 26 via the third positive electrode connection power line 92c of the safety module 32, similar to the third positive input terminal 170c.

[0123] No electrical wiring is connected to the third positive output terminal 172c. That is, the third positive output terminal 172c is not connected to the power supply 26. In this embodiment, the external output module 36 has the third positive output terminal 172c, but the external output module 36 does not necessarily have to have the third positive output terminal 172c. The third positive output terminal 172c of the first external output module 36a belonging to the module group Ga shown in FIG. 1 is also not connected to the power supply 26.

[0124] The positive power supply terminal 176 is electrically connected to the first positive input terminal 170a via a positive connection power supply wiring 178. The positive connection power supply wiring 178 electrically connects the first positive input terminal 170a and the positive power supply terminal 176. In other words, the positive connection power supply wiring 178 is electrically connected to the first positive input terminal 170a and the positive power supply terminal 176. The positive power supply terminal 176 is electrically connected to the external device 22.

[0125] Electric power is supplied to the external device 22 via the positive power supply terminal 176 and a negative power supply terminal 186, which will be described later. The external device 22 is, for example, a safety valve. In this case, when power is supplied to the external device 22, the external device 22 can supply the fluid F obtained from the fluid supply source to the plurality of valves 34v. Note that the fluid F supplied to the valves 34v by the external device 22 may be supplied by the valves 34v to the above-mentioned fluid supply target devices. When the valves 34v are driven by pilot pressure, the fluid F supplied to the valves 34v by the external device 22 may be used to control the pilot pressure of the valves 34v.

[0126] When the power supply to the safety valve, which is the external device 22, is cut off, the external device 22 does not supply the fluid F to the multiple valves 34v. That is, the external device 22 is in a safe state. The valves 34v to which the fluid F is not supplied are also in a safe state.

[0127] The first positive input terminal 170a can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connecting power line 92 of the safety module 32. Therefore, the positive connection power supply wiring 178, the positive power supply terminal 176, and the external device 22 can be electrically connected to the positive electrode 26p of the power supply 26 via the positive electrode connecting power line 92 of the safety module 32.

[0128] In the case of the first external output module 36a belonging to the module group Ga, the positive power supply terminal 176 of the first external output module 36a is electrically connected to the first positive input terminal 170a of the same first external output module 36a. As described above, the first positive input terminal 170a of the first external output module 36a can be electrically connected to the positive electrode 26p of the power supply 26 via the first positive electrode connecting power line 92a of the safety module 32. Therefore, the positive power supply terminal 176 of the first external output module 36a can be electrically connected to the positive electrode 26p of the power supply 26 via the first positive electrode connecting power line 92a of the safety module 32.

[0129] That is, the positive connection power supply wiring 178, the positive power supply terminal 176, and the external device 22 connected to the first external output module 36a can be electrically connected to the positive pole 26p of the power supply 26 via the first positive pole connection power line 92a of the safety module 32.

[0130] The external output module 36 has only one negative input terminal 180. The negative input terminal 180 is electrically and physically connected to the negative output terminal of the module preceding the external output module 36. The negative input terminal 180 is connected to the negative electrode connecting power line 100 of the safety module 32 via the negative output terminal. The negative input terminal 180 can be electrically connected to the negative electrode 26n of the power supply 26 via the negative electrode connecting power line 100 of the safety module 32.

[0131] In the case of the first external output module 36a belonging to the module group Ga, the negative input terminal 180 of the first external output module 36a is electrically and physically connected to the negative output terminal 142 of the first valve module 34a that is located upstream of the first external output module 36a. The negative input terminal 180 is connected to the negative electrode connecting power line 100 of the safety module 32 via the negative output terminal 142, negative connection relay wiring 144, and negative input terminal 140 of the first valve module 34a, and the negative output terminal 98 of the safety module 32.

[0132] Therefore, the negative input terminal 180 can be electrically connected to the negative terminal 26 n of the power supply 26 via the negative terminal connecting power line 100 of the safety module 32 .

[0133] The external output module 36 has only one negative output terminal 182. The negative output terminal 182 can be electrically connected to the negative input terminal 180 via a single negative connection relay wiring 184. The negative connection relay wiring 184 electrically connects the negative input terminal 180 and the negative output terminal 182. That is, the negative connection relay wiring 184 is electrically connected to the negative input terminal 180 and the negative output terminal 182. Therefore, the negative output terminal 182 and the negative connection relay wiring 184 can be electrically connected to the negative electrode 26n of the power source 26 via the negative electrode connecting power line 100 of the safety module 32.

[0134] The external output module 36 has only one each of the negative input terminal 180, negative output terminal 182, and negative connection relay wiring 184. Therefore, the circuit scale required to realize these can be reduced.

[0135] The negative power supply terminal 186 is electrically connected to the negative input terminal 180 via a negative connection power supply wiring 188. The negative connection power supply wiring 188 electrically connects the negative input terminal 180 and the negative power supply terminal 186. That is, the negative connection power supply wiring 188 is electrically connected to the negative input terminal 180 and the negative power supply terminal 186. The negative power supply terminal 186 is electrically connected to the external device 22.

[0136] As described above, power is supplied to the external device 22 via the positive power supply terminal 176 and the negative power supply terminal 186. The external device 22 is, for example, a safety valve. In this case, when power is supplied to the safety valve, which is the external device 22, the external device 22 can supply the fluid F obtained from the fluid supply source to the multiple valves 34v. If the power supply to the external device 22 is cut off, the external device 22 does not supply the fluid F to the multiple valves 34v.

[0137] As described above, the module arranged adjacent to the downstream of the external output module 36 is the valve module 34 that belongs to a module group different from that of the external output module 36. For example, the module arranged adjacent to the downstream of the first external output module 36a that belongs to the module group Ga is the second valve module 34b that belongs to a module group Gb different from that of the first external output module 36a. The second external output module 36b that belongs to the same module group Gb is arranged adjacent to the downstream of the second valve module 34b.

[0138] The module arranged adjacent to the second external output module 36b in the module group Gb is the third valve module 34c which belongs to a module group Gc different from the second external output module 36b. The third external output module 36c which belongs to the same module group Gc is arranged adjacent to the third valve module 34c in the subsequent stage.

[0139] The signal input terminal 120 of the second valve module 34b belonging to module group Gb is connected to the signal output terminal 162 of the first external output module 36a located upstream of the second valve module 34b. The signal input terminal 120 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal 162 of the first external output module 36a and the signal output terminal 86 of the safety module 32. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 120 of the second valve module 34b from the first external output module 36a located upstream of the second valve module 34b.

[0140] The signal output terminal 122 of the second valve module 34b is connected to the signal input terminal 120 of the same second valve module 34b via a communication line 124. The signal output terminal 122 is physically connected to the signal input terminal 160 of the second external output module 36b located downstream of the second valve module 34b. Therefore, a control signal for operation control from the control device 24 can be output from the signal output terminal 122 of the second valve module 34b to the second external output module 36b located downstream of the second valve module 34b.

[0141] The first positive input terminal 130a of the second valve module 34b is electrically and physically connected to the first positive output terminal 172a of the first external output module 36a that is located upstream of the second valve module 34b. As described above, the first positive output terminal 172a of the first external output module 36a is electrically connected to the second positive electrode connecting power line 92b of the safety module 32. Therefore, the first positive input terminal 130a of the second valve module 34b is electrically connected to the second positive electrode connecting power line 92b of the safety module 32, and can be electrically connected to the positive electrode 26p of the power source 26 via the second positive electrode connecting power line 92b.

[0142] The first positive output terminal 132a and the first positive connection relay wiring 134a of the second valve module 34b can be electrically connected to the positive pole 26p of the power source 26 via the first positive input terminal 130a of the same second valve module 34b and the second positive pole connection power line 92b of the safety module 32, etc.

[0143] The second positive input terminal 130b of the second valve module 34b is electrically and physically connected to the second positive output terminal 172b of the first external output module 36a, which is located upstream of the second valve module 34b. As described above, the second positive output terminal 172b of the first external output module 36a can be electrically connected to the third positive electrode connecting power line 92c of the safety module 32. Therefore, the second positive input terminal 130b of the second valve module 34b is electrically connected to the third positive electrode connecting power line 92c of the safety module 32, and can be electrically connected to the positive electrode 26p of the power source 26 via the third positive electrode connecting power line 92c.

[0144] The second positive output terminal 132b and the second positive connection relay wiring 134b of the second valve module 34b can be electrically connected to the positive pole 26p of the power source 26 via the second positive input terminal 130b of the same second valve module 34b and the third positive pole connection power line 92c of the safety module 32, etc.

[0145] The third positive input terminal 130c of the second valve module 34b is electrically and physically connected to the third positive output terminal 172c of the first external output module 36a, which is located upstream of the second valve module 34b. As described above, the third positive output terminal 172c of the first external output module 36a is not connected to the power supply 26. Therefore, the third positive input terminal 130c of the second valve module 34b is not connected to the power supply 26.

[0146] The third positive output terminal 172c and the third positive connection relay wiring 134c of the second valve module 34b are connected to the third positive input terminal 130c of the same second valve module 34b. Therefore, like the third positive input terminal 130c, the third positive output terminal 172c and the third positive connection relay wiring 134c of the second valve module 34b are not connected to the power source 26.

[0147] A signal input terminal 160 of the second external output module 36b belonging to module group Gb is physically connected to the signal output terminal 122 of the second valve module 34b located upstream of the second external output module 36b. The signal input terminal 160 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal 122 of the second valve module 34b and the signal output terminal 86 of the safety module 32, etc. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 160 from the second valve module 34b located upstream of the second external output module 36b.

[0148] The signal output terminal 162 of the second external output module 36b is connected to the signal input terminal 160 of the same second external output module 36b via the communication line 124. The signal output terminal 162 is physically connected to the signal input terminal 120 of the third valve module 34c located downstream of the second external output module 36b. Therefore, a control signal for operation control from the control device 24 can be output from the signal output terminal 162 of the second external output module 36b to the third valve module 34c located downstream of the second external output module 36b.

[0149] The first positive input terminal 170a of the second external output module 36b is electrically and physically connected to the first positive output terminal 132a of the second valve module 34b, which is located upstream of the second external output module 36b. As described above, the first positive output terminal 132a of the second valve module 34b can be electrically connected to the second positive connecting power line 92b of the safety module 32.

[0150] Therefore, the first positive input terminal 170a of the second external output module 36b is electrically connected to the second positive electrode connecting power line 92b of the safety module 32, and can be electrically connected to the positive electrode 26p of the power source 26 via the second positive electrode connecting power line 92b.

[0151] The positive power supply terminal 176 of the second external output module 36b is electrically connected to the first positive input terminal 170a of the same second external output module 36b. As described above, the first positive input terminal 170a of the second external output module 36b can be electrically connected to the positive electrode 26p of the power supply 26 via the second positive electrode connecting power line 92b of the safety module 32. Therefore, the positive power supply terminal 176 of the second external output module 36b can be electrically connected to the positive electrode 26p of the power supply 26 via the second positive electrode connecting power line 92b of the safety module 32.

[0152] The second positive input terminal 170b of the second external output module 36b is electrically and physically connected to the second positive output terminal 132b of the second valve module 34b that is located upstream of the second external output module 36b. As described above, the second positive output terminal 132b of the second valve module 34b can be electrically connected to the third positive electrode connecting power line 92c of the safety module 32. Therefore, the second positive input terminal 170b of the second external output module 36b is electrically connected to the third positive electrode connecting power line 92c of the safety module 32, and can be electrically connected to the positive electrode 26p of the power source 26 via the third positive electrode connecting power line 92c.

[0153] The first positive output terminal 172a and the first positive connection relay wiring 174a of the second external output module 36b are electrically connected to the second positive input terminal 170b of the same second external output module 36b. Therefore, the first positive output terminal 172a and the first positive connection relay wiring 174a of the second external output module 36b can be electrically connected to the positive electrode 26p of the power supply 26 via the third positive electrode connecting power line 92c of the safety module 32, similar to the second positive input terminal 170b of the second external output module 36b.

[0154] The third positive input terminal 170c of the second external output module 36b is electrically and physically connected to the third positive output terminal 132c of the second valve module 34b, which is located upstream of the second external output module 36b. As described above, the third positive output terminal 132c of the second valve module 34b is not connected to the power source 26. Therefore, the third positive input terminal 170c of the second external output module 36b is not connected to the power source 26.

[0155] The second positive output terminal 172b and the second positive connection relay wiring 174b of the second external output module 36b are electrically connected to the third positive input terminal 170c of the same second external output module 36b. Therefore, the second positive output terminal 172b and the second positive connection relay wiring 174b of the second external output module 36b are not connected to the power supply 26, just like the third positive input terminal 170c.

[0156] No electrical wiring is connected to the third positive output terminal 172c of the second external output module 36b. That is, the third positive output terminal 172c is not connected to the power source 26.

[0157] The signal input terminal 120 of the third valve module 34c belonging to module group Gc is connected to the signal output terminal 162 of the second external output module 36b located upstream of the third valve module 34c. The signal input terminal 120 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal 162 of the second external output module 36b and the signal output terminal 86 of the safety module 32. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 120 of the third valve module 34c from the second external output module 36b located upstream of the third valve module 34c.

[0158] The signal output terminal 122 of the third valve module 34c is connected to the signal input terminal 120 of the same third valve module 34c via a communication line 124. The signal output terminal 122 is physically connected to the signal input terminal 160 of the third external output module 36c located downstream of the third valve module 34c. Therefore, a control signal for operation control from the control device 24 can be output from the signal output terminal 122 of the third valve module 34c to the third external output module 36c located downstream of the third valve module 34c.

[0159] The first positive input terminal 130a of the third valve module 34c is electrically and physically connected to the first positive output terminal 172a of the second external output module 36b that is located upstream of the third valve module 34c. As described above, the first positive output terminal 172a of the second external output module 36b is electrically connected to the third positive electrode connecting power line 92c of the safety module 32. Therefore, the first positive input terminal 130a of the third valve module 34c is electrically connected to the third positive electrode connecting power line 92c of the safety module 32, and can be electrically connected to the positive electrode 26p of the power source 26 via the third positive electrode connecting power line 92c.

[0160] The first positive output terminal 132a and the first positive connection relay wiring 134a of the third valve module 34c can be electrically connected to the positive pole 26p of the power source 26 via the first positive input terminal 130a of the same third valve module 34c and the third positive pole connection power line 92c of the safety module 32, etc.

[0161] The second positive input terminal 130b of the third valve module 34c is electrically and physically connected to the second positive output terminal 172b of the second external output module 36b located upstream of the third valve module 34c. As described above, the second positive output terminal 172b of the second external output module 36b is not connected to the power supply 26. Therefore, the second positive input terminal 130b of the third valve module 34c is not connected to the power supply 26.

[0162] The second positive output terminal 132b and the second positive connection relay wiring 134b of the third valve module 34c are connected to the second positive input terminal 130b of the same third valve module 34c. Therefore, the second positive output terminal 132b and the second positive connection relay wiring 134b of the third valve module 34c, like the second positive input terminal 130b, are not connected to the power source 26.

[0163] The third positive input terminal 130c of the third valve module 34c is electrically and physically connected to the third positive output terminal 172c of the second external output module 36b, which is located upstream of the third valve module 34c. As described above, the third positive output terminal 172c of the second external output module 36b is not connected to the power supply 26. Therefore, the third positive input terminal 130c of the third valve module 34c is not connected to the power supply 26.

[0164] The third positive output terminal 172c and the third positive connection relay wiring 134c of the third valve module 34c are connected to the third positive input terminal 130c of the same third valve module 34c. Therefore, like the third positive input terminal 130c, the third positive output terminal 172c and the third positive connection relay wiring 134c of the third valve module 34c are not connected to the power source 26.

[0165] A signal input terminal 160 of the third external output module 36c belonging to module group Gc is physically connected to the signal output terminal 122 of the third valve module 34c located upstream of the third external output module 36c. The signal input terminal 160 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal 122 of the third valve module 34c and the signal output terminal 86 of the safety module 32, etc. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 160 from the third valve module 34c located upstream of the third external output module 36c.

[0166] A signal output terminal 162 of the third external output module 36c is connected via a communication line 164 to a signal input terminal 160 of the same third external output module 36c.

[0167] The first positive input terminal 170a of the third external output module 36c is electrically and physically connected to the first positive output terminal 132a of the third valve module 34c that is located upstream of the third external output module 36c. As described above, the first positive output terminal 132a of the third valve module 34c can be electrically connected to the third positive connecting power line 92c of the safety module 32.

[0168] Therefore, the first positive input terminal 170a of the third external output module 36c is electrically connected to the third positive electrode connecting power line 92c of the safety module 32, and can be electrically connected to the positive electrode 26p of the power source 26 via the third positive electrode connecting power line 92c.

[0169] The positive power supply terminal 176 of the third external output module 36c is electrically connected to the first positive input terminal 170a of the same third external output module 36c. As described above, the first positive input terminal 170a of the third external output module 36c can be electrically connected to the positive electrode 26p of the power supply 26 via the third positive electrode connecting power line 92c of the safety module 32. Therefore, the positive power supply terminal 176 of the third external output module 36c can be electrically connected to the positive electrode 26p of the power supply 26 via the third positive electrode connecting power line 92c of the safety module 32.

[0170] The second positive input terminal 170b of the third external output module 36c is electrically and physically connected to the second positive output terminal 132b of the third valve module 34c, which is located upstream of the third external output module 36c. As described above, the second positive output terminal 132b of the third valve module 34c is not connected to the power source 26. Therefore, the second positive input terminal 170b of the third external output module 36c is not connected to the power source 26.

[0171] The first positive output terminal 172a and the first positive connection relay wiring 174a of the third external output module 36c are connected to the second positive input terminal 170b of the same third external output module 36c. Therefore, the first positive output terminal 172a and the first positive connection relay wiring 174a of the third external output module 36c are not connected to the power supply 26, just like the second positive input terminal 170b.

[0172] The third positive input terminal 170c of the third external output module 36c is electrically and physically connected to the third positive output terminal 132c of the third valve module 34c that is located upstream of the third external output module 36c. As described above, the third positive output terminal 132c of the third valve module 34c is not connected to the power supply 26. Therefore, the third positive input terminal 170c of the third external output module 36c is not connected to the power supply 26.

[0173] The second positive output terminal 172b and the second positive connection relay wiring 174b of the third external output module 36c are electrically connected to the third positive input terminal 170c of the same third external output module 36c. Therefore, the second positive output terminal 172b and the second positive connection relay wiring 174b of the third external output module 36c are not connected to the power supply 26, just like the third positive input terminal 170c.

[0174] No electrical wiring is connected to the third positive output terminal 172c of the third external output module 36c. That is, the third positive output terminal 172c is not connected to the power source 26.

[0175] The first positive electrode connecting power line 92a of the safety module 32 is electrically connected to the first positive input terminal 170a of the first external output module 36a that belongs to the module group Ga.

[0176] The second positive electrode connecting power line 92b of the safety module 32 is electrically connected to the second positive input terminal 170b and the first positive output terminal 172a of the first external output module 36a belonging to the module group Ga and the first positive input terminal 170a of the second external output module 36b belonging to the module group Gb. That is, the first positive output terminal 172a of the first external output module 36a is electrically connected to the first positive input terminal 170a of the second external output module 36b.

[0177] The third positive electrode connecting power line 92c of the safety module 32 is electrically connected to the third positive input terminal 170c and the second positive output terminal 172b of the first external output module 36a belonging to the module group Ga, the second positive input terminal 170b and the first positive output terminal 172a of the second external output module 36b belonging to the module group Gb, and the first positive input terminal 170a of the third external output module 36c belonging to the module group Gc. That is, the first positive output terminal 172a of the second external output module 36b is electrically connected to the first positive input terminal 170a of the third external output module 36c.

[0178] The negative input terminal 180 and negative output terminal 182 of the first external output module 36a belonging to the module group Ga and the negative input terminal 180 and negative output terminal 182 of the second external output module 36b belonging to the module group Gb are electrically connected to the negative electrode connecting power line 100 of the safety module 32. That is, the negative output terminal 182 of the first external output module 36a is electrically connected to the negative input terminal 180 of the second external output module 36b.

[0179] The negative input terminal 180 and negative output terminal 182 of the second external output module 36b belonging to the module group Gb and the negative input terminal 180 and negative output terminal 182 of the third external output module 36c belonging to the module group Gc are electrically connected to the negative electrode connecting power line 100 of the safety module 32. That is, the negative output terminal 182 of the second external output module 36b is electrically connected to the negative input terminal 180 of the third external output module 36c.

[0180] In other words, the first positive output terminal 172a and the negative output terminal 182 of the external output module 36 are electrically connected to the first positive input terminal 170a and the negative input terminal 180, respectively, of another external output module 36 arranged in a downstream stage.

[0181] The negative output terminal 182 of the external output module 36 is electrically connected to the negative electrode connecting power line 100 of the safety module 32 via the negative input terminal 180 of the external output module 36. The first positive output terminal 172a of the external output module 36 is electrically connected to the second positive input terminal 170b of the external output module 36. Therefore, the first positive input terminals 170a of the multiple external output modules 36 are electrically connected to different positive electrode connecting power lines 92. Therefore, it is possible to control the power supply for each external output module 36.

[0182] Power is supplied to the driver 34d of the first valve module 34a belonging to the module group Ga via the first positive input terminal 130a and the negative input terminal 140. This power is supplied via the first positive-connecting power line 92a and the negative-connecting power line 100 of the safety module 32. Power is also supplied to the external device 22 via the positive power supply terminal 176 and the negative power supply terminal 186 of the first external output module 36a belonging to the same module group Ga. This power is also supplied via the first positive-connecting power line 92a and the negative-connecting power line 100 of the safety module 32.

[0183] The safety control processing circuit 70 outputs a switching control signal to the high-side switch 94a inserted in the first positive electrode connecting power line 92a based on a safety control control signal from the control device 24, thereby turning off the high-side switch 94a. This makes it possible to cut off the power supply only to the driver 34d of the first valve module 34a and the first external output module 36a that belong to the module group Ga.

[0184] If the high-side switches 94b and 94c remain on, power can be continuously supplied to the drivers 34d and external output modules 36 of the valve modules 34 that belong to module groups other than module group Ga. That is, power can be continuously supplied to the driver 34d and second external output module 36b of the second valve module 34b that belongs to module group Gb, and to the driver 34d and third external output module 36c of the third valve module 34c that belongs to module group Gc.

[0185] Similarly, by turning off the high-side switch 94b, it is possible to cut off only the power supply to the driver 34d of the second valve module 34b and the second external output module 36b that belong to the module group Gb. By turning off the high-side switch 94c, it is possible to cut off only the power supply to the driver 34d of the third valve module 34c and the third external output module 36c that belong to the module group Gc.

[0186] By turning off the low-side switch 102, it is possible to cut off the power supply to the drivers 34d and the external output modules 36 of the valve modules 34 belonging to all of the module groups Ga, Gb, and Gc.

[0187] For example, suppose a fault in the first positive input terminal 130a of the valve module 34 causes a break in the power line. In this case, the power supply to the driver 34d of the valve module 34 and the external output module 36 is cut off. The valve 34v enters a safe state. The external device 22 connected to the external output module 36 also enters a safe state. Therefore, the valve 34v stops in the valve open or valve closed state, and the fluid F is not supplied from the external device 22 to the valve 34v.

[0188] For example, suppose that a power line break occurs due to a defect in the first positive input terminal 170a of the external output module 36. In this case, the power supply to the external output module 36 is cut off. The external device 22 connected to the external output module 36 is put into a safe state. Therefore, the fluid F is not supplied from the external device 22 to the valve 34v. In this way, if a power line break occurs in a module downstream of the safety module 32, the power supply to the external device 22 can be stopped. Therefore, the safe state of the external device 22 can be ensured.

[0189] [Variations] The above-described embodiment may be modified as follows.

[0190] (Variation 1) In the above-described embodiment, the module system 20 includes a plurality of valve modules 34 and a plurality of external output modules 36. However, the module system 20 does not necessarily have to include the valve modules 34. FIG. 2 is a diagram schematically illustrating a control system 10A. The control system 10A controls a load device (not shown). The load device is, for example, an indicator light device including an indicator light, a battery that supplies power to the indicator light, and a circuit element (switch) that switches the power supply to the indicator light.

[0191] The control system 10A includes a module system 20, an external device 200 for the module system 20, a control device 24 for the module system 20, and a power supply 26 for the module system 20. The external device 200 is, for example, a driving device that drives the circuit elements in the load device described above. The module system 20 includes a communication module 30, a safety module 32, and an external output module 36.

[0192] A safety module 32 and an external output module 36 are connected in this order downstream of the communication module 30. A plurality of external output modules 36 are connected downstream of the safety module 32. One external device 200 is electrically connected to one external output module 36. A module group is formed for each external output module 36. Therefore, each module group includes one external output module 36 and the external device 200 connected to that external output module 36.

[0193] 2, a first external output module 36a belonging to module group Ga, a second external output module 36b belonging to module group Gb, and a third external output module 36c belonging to module group Gc are connected in this order as a plurality of external output modules 36 subsequent to the safety module 32. In other words, the first external output module 36a is arranged subsequent to the safety module 32, the second external output module 36b is arranged subsequent to the first external output module 36a, and the third external output module 36c is arranged subsequent to the second external output module 36b.

[0194] The first external output module 36a and the external device 200 connected to the first external output module 36a belong to the module group Ga. The second external output module 36b and the external device 200 connected to the second external output module 36b belong to the module group Gb. The third external output module 36c and the external device 200 connected to the third external output module 36c belong to the module group Gc.

[0195] The signal input terminal 160 of the first external output module 36a belonging to the module group Ga is physically connected to the signal output terminal 86 of the safety module 32 upstream of the first external output module 36a. The signal input terminal 160 is connected to a communication line 84 for operation control of the safety module 32 via the signal output terminal 86 of the safety module 32. Therefore, a control signal for operation control from the control device 24 can be input to the signal input terminal 160 from the safety module 32 upstream of the first external output module 36a.

[0196] The signal output terminal 162 of the first external output module 36a is physically connected to the signal input terminal 160 via a communication line 164. The communication line 164 connects the signal input terminal 160 and the signal output terminal 162 and is used to transmit a control signal for operation control from the control device 24. The signal output terminal 162 is physically connected to the signal input terminal 160 of the second external output module 36b located downstream of the first external output module 36a. Therefore, a control signal for operation control from the control device 24 can be output from the signal output terminal 162 to the second external output module 36b located downstream of the first external output module 36a.

[0197] The first positive input terminal 170a of the first external output module 36a belonging to the module group Ga is electrically and physically connected to the first positive output terminal 90a of the safety module 32 upstream of the first external output module 36a. The first positive input terminal 170a is electrically connected to the first positive electrode connecting power line 92a of the safety module 32 via the first positive output terminal 90a of the safety module 32. Therefore, the first positive input terminal 170a can be electrically connected to the positive electrode 26p of the power supply 26 via the first positive electrode connecting power line 92a of the safety module 32.

[0198] The second positive input terminal 170b of the first external output module 36a is electrically and physically connected to the second positive output terminal 90b of the safety module 32 upstream of the first external output module 36a. The second positive input terminal 170b is electrically connected to the second positive electrode connecting power line 92b of the safety module 32 via the second positive output terminal 90b of the safety module 32. Therefore, the second positive input terminal 170b can be electrically connected to the positive electrode 26p of the power source 26 via the second positive electrode connecting power line 92b of the safety module 32.

[0199] The first positive output terminal 172a of the first external output module 36a is electrically connected to the second positive input terminal 170b via the first positive connection relay wiring 174a. Therefore, the first positive output terminal 172a of the first external output module 36a can be electrically connected to the positive electrode 26p of the power supply 26 via the second positive electrode connecting power line 92b of the safety module 32.

[0200] The third positive input terminal 170c of the first external output module 36a is electrically and physically connected to the third positive output terminal 90c of the safety module 32 that is located upstream of the first external output module 36a. The third positive input terminal 170c is connected to the third positive electrode connecting power line 92c of the safety module 32 via the third positive output terminal 90c of the safety module 32. Therefore, the third positive input terminal 170c can be electrically connected to the positive electrode 26p of the power source 26 via the third positive electrode connecting power line 92c of the safety module 32.

[0201] The second positive output terminal 172b of the first external output module 36a is electrically connected to the third positive input terminal 170c via the second positive connection relay wiring 174b. Therefore, the second positive output terminal 172b of the first external output module 36a can be electrically connected to the positive electrode 26p of the power supply 26 via the third positive electrode connecting power line 92c of the safety module 32. The third positive output terminal 172c of the first external output module 36a is not connected to the power supply 26.

[0202] The negative input terminal 180 of the first external output module 36a is electrically and physically connected to the negative output terminal 98 of the safety module 32 that is located upstream of the first external output module 36a. The negative input terminal 180 is connected to the negative electrode connecting power line 100 of the safety module 32 via the negative output terminal 98 of the safety module 32. Therefore, the negative input terminal 180 can be electrically connected to the negative electrode 26n of the power source 26 via the negative electrode connecting power line 100 of the safety module 32.

[0203] The negative output terminal 182 and the negative connection relay wiring 184 of the first external output module 36a, like the negative input terminal 180, can be electrically connected to the negative electrode 26n of the power supply 26 via the negative electrode connecting power line 100 of the safety module 32.

[0204] A signal input terminal 160 of the second external output module 36b belonging to the module group Gb is physically connected to a signal output terminal 162 of the first external output module 36a that is located upstream of the second external output module 36b. A control signal for operation control from the control device 24 is input from the first external output module 36a to the signal input terminal 160 and can be output from the signal output terminal 162 via a communication line 164 to the third external output module 36c that is located downstream of the second external output module 36b.

[0205] The first positive input terminal 170a of the second external output module 36b is electrically and physically connected to the first positive output terminal 172a of the first external output module 36a that is located upstream of the second external output module 36b. Therefore, the first positive input terminal 170a can be electrically connected to the positive electrode 26p of the power supply 26 via the second positive electrode connecting power line 92b of the safety module 32.

[0206] The second positive input terminal 170b of the second external output module 36b is electrically and physically connected to the second positive output terminal 172b of the first external output module 36a, which is located upstream of the second external output module 36b. Therefore, the second positive input terminal 170b can be electrically connected to the positive pole 26p of the power supply 26 via the third positive pole connecting power line 92c of the safety module 32.

[0207] The first positive output terminal 172a of the second external output module 36b is electrically connected to the second positive input terminal 170b via the first positive connection relay wiring 174a. Therefore, the first positive output terminal 172a of the second external output module 36b can be electrically connected to the positive electrode 26p of the power supply 26 via the second positive electrode connecting power line 92b of the safety module 32.

[0208] The third positive input terminal 170c of the second external output module 36b is electrically and physically connected to the third positive output terminal 172c of the first external output module 36a, which is located in the preceding stage of the second external output module 36b. Therefore, the third positive input terminal 170c is not connected to the power supply 26.

[0209] The second positive output terminal 172b of the second external output module 36b is electrically connected to the third positive input terminal 170c via the second positive connection relay wiring 174b. Therefore, the second positive output terminal 172b of the second external output module 36b is not connected to the power supply 26. The third positive output terminal 172c of the second external output module 36b is not connected to the power supply 26.

[0210] A signal input terminal 160 of the third external output module 36c belonging to module group Gc is physically connected to a signal output terminal 162 of the second external output module 36b located upstream of the third external output module 36c. A control signal for operation control from the control device 24 is input from the second external output module 36b to the signal input terminal 160 and can be output from the signal output terminal 162 to a module located downstream of the third external output module 36c via a communication line 164. In the example shown in FIG. 2, no module is located downstream of the third external output module 36c.

[0211] The first positive input terminal 170a of the third external output module 36c is electrically and physically connected to the first positive output terminal 172a of the second external output module 36b that is located upstream of the third external output module 36c. Therefore, the first positive input terminal 170a can be electrically connected to the positive pole 26p of the power supply 26 via the third positive pole connecting power line 92c of the safety module 32.

[0212] The second positive input terminal 170b of the third external output module 36c is electrically and physically connected to the second positive output terminal 172b of the second external output module 36b that is located in the preceding stage of the third external output module 36c. Therefore, the second positive input terminal 170b is not connected to the power supply 26.

[0213] The first positive output terminal 172a of the third external output module 36c is electrically connected to the second positive input terminal 170b via the first positive connection relay wiring 174a. Therefore, the first positive output terminal 172a of the third external output module 36c is not connected to the power supply 26.

[0214] The third positive input terminal 170c of the third external output module 36c is electrically and physically connected to the third positive output terminal 172c of the second external output module 36b, which is located in the preceding stage of the third external output module 36c. Therefore, the third positive input terminal 170c is not connected to the power supply 26.

[0215] The second positive output terminal 172b of the third external output module 36c is electrically connected to the third positive input terminal 170c via the second positive connection relay wiring 174b. Therefore, the second positive output terminal 172b of the third external output module 36c is not connected to the power supply 26. The third positive output terminal 172c of the third external output module 36c is not connected to the power supply 26.

[0216] The positive power supply terminal 176 is electrically connected to the first positive input terminal 170a via a positive connection power supply wiring 178. The positive power supply terminal 176 is electrically connected to the external device 200. The negative power supply terminal 186 is electrically connected to the negative input terminal 180 via a negative connection power supply wiring 188. The negative power supply terminal 186 is electrically connected to the external device 22. Power is supplied to the external device 200 via the positive power supply terminal 176 and the negative power supply terminal 186.

[0217] When power is supplied to the external device 200, the external device 200 can drive circuit elements in the load device. When the power supply to the external device 200 is cut off, the external device 200 does not drive the circuit elements of the load device. This puts the circuit elements of the load device into a safe state. When the load device is an indicator light device, either a lighted state in which the indicator light is turned on by power being supplied thereto, or a lighted-out state in which the indicator light is turned off by power being cut off, is predetermined as the safe state.

[0218] For example, suppose that a power line break occurs due to a defect in the first positive input terminal 170a of the external output module 36. In this case, the power supply to the external output module 36 is cut off. The external device 200 connected to the external output module 36 is put into a safe state. Therefore, the external device 200 does not drive the circuit elements of the load device. In this way, if a power line break occurs in a module downstream of the safety module 32, the power supply to the external device 200 can be stopped. Therefore, the safe state of the external device 200 can be ensured.

[0219] In comparison with the above-described embodiment, in this first modification, the external output module 36 further includes an external output terminal 210 and a signal connection wiring 212. The external output terminal 210 of the external output module 36 is provided on the connection surface 36hc of the second housing 36h. The external output module 36 includes the signal connection wiring 212 inside the second housing 36h.

[0220] The signal connection wiring 212 connects the signal input terminal 160 and the external output terminal 210, and can be used to transmit a control signal for operation control that is output from the control device 24 to the external device 200. In this case, the control signal for operation control that is input from the control device 24 to the signal input terminal 160 is output from the external output terminal 210 to the external device 200 via the signal connection wiring 212. In this way, the control device 24 can control the operation of the external device 200.

[0221] The control signal output from the control device 24 to the external device 200 is, for example, a signal by which the control device 24 instructs the external device 200 to drive a circuit element in the load device. The external device 200 drives the circuit element in the load device based on the control signal.

[0222] (Variation 2) If a break in the power line occurs in a module downstream of the safety module 32, the control system 10, 10A may be provided with a sensor that detects the break. The break in the power line will cut off the power supply to the external device 22 or the external device 200 (power supply stopped). The break in the power line can be detected, for example, by measuring the voltage between the positive power supply terminal 176 and the negative power supply terminal 186 of each external output module 36. The break in the power line may also be detected by measuring the current flowing through the positive power supply terminal 176 or the negative power supply terminal 186 of each external output module 36.

[0223] When the sensor detects a break in the power line, it notifies the control device 24 of the break via communication. When the control device 24 receives a notification from the sensor indicating that a break in the power line has been detected, it transmits a control signal for safety control to the safety control processing circuit 70 via the communication terminal 72 and communication line 74 of the safety module 32. Based on the control signal from the control device 24, the safety control processing circuit 70 outputs a switching control signal to the high-side switch 94 and / or the low-side switch 102. That is, the high-side switch 94 corresponding to the module group in which the break in the power line has been detected and / or the low-side switch 102 common to all module groups is turned off. This provides higher safety.

[0224] The following additional notes are provided regarding the above-described embodiment and modifications.

[0225] (Appendix 1) A module system (20) including a safety module (32) and an external output module (36) connected downstream of the safety module, the safety module having, within a first housing (32h), a positive-electrode connecting power line (92) electrically connectable to a positive electrode (26p) of a power source (26), a high-side switch (94) inserted in the positive-electrode connecting power line and capable of interrupting electrical continuity of the positive-electrode connecting power line, and a negative-electrode connecting power line (100) electrically connectable to a negative electrode (26n) of the power source, the external output module having a front surface (36hf) facing a module arranged adjacent to a preceding module of the external output module, a rear surface (36hb) facing a module arranged adjacent to a succeeding module of the external output module, and an external device (22, 200) of the module system being disposed on the front surface (36hf). The power supply includes a second housing (36h) different from the first housing and having a connection surface (36hc) different from either the front or rear surfaces, a first positive input terminal (170, 170a) provided on the front surface of the second housing and electrically connected to the positive pole of the power source via the positive pole connecting power line, a negative input terminal (180) provided on the front surface of the second housing and electrically connected to the negative pole of the power source via the negative pole connecting power line, a positive power supply terminal (176) provided on the connection surface of the second housing, electrically connected to the first positive input terminal and capable of being electrically connected to the external device, and a negative power supply terminal (186) provided on the connection surface of the second housing, electrically connected to the negative input terminal and capable of being electrically connected to the external device. This configuration allows power supply to the external device to be stopped in the event of a power line breakage. Therefore, the safety of the external device can be ensured.

[0226] (Appendix 2) In the module system described in Supplementary Note 1, the safety module may further include a low-side switch (102) in the first housing, the low-side switch being inserted in the negative-electrode connecting power line and capable of interrupting electrical continuity of the negative-electrode connecting power line. With this configuration, it is possible to collectively switch between supplying and interrupting power to all modules arranged downstream of the safety module.

[0227] (Appendix 3) The module system described in Supplementary Note 1 may further include at least one valve module (34) having a plurality of valves (34v) and a driver (34d) that drives the plurality of valves and that is disposed adjacent to a front stage of the external output module, wherein the valve module may have, within a third housing (34h) different from both the first housing and the second housing, a positive connection relay wiring (134) that is electrically connected to the positive electrode of the power supply via the positive electrode connecting power line and that is electrically connected to the first positive input terminal, a negative connection relay wiring (144) that is electrically connected to the negative electrode of the power supply via the negative electrode connecting power line and that is electrically connected to the negative input terminal, a positive connection power supply wiring (136) that is electrically connected to the positive electrode of the power supply via the positive electrode connecting power line and that can be electrically connected to the driver, and a negative connection power supply wiring (146) that is electrically connected to the negative electrode of the power supply via the negative electrode connecting power line and that can be electrically connected to the driver. With this configuration, the power supply to the driver of the valve module can be cut off, and therefore the valve of the valve module can be put into a safe state.

[0228] (Appendix 4) The module system according to Supplementary Note 3 further includes a safety valve as the external device, and when power is supplied to the safety valve via the positive power supply terminal and the negative power supply terminal, the safety valve supplies the fluid (F) to the plurality of valves, and when power supply to the safety valve is cut off, the safety valve may not supply the fluid to the plurality of valves. With this configuration, the safety valve may stop supplying fluid to the valves of the valve module. Therefore, the safety valve and the valves of the valve module may be placed in a safe state.

[0229] (Appendix 5) In the module system described in Supplementary Note 1, the safety module may further include a communication line (84) within the first housing through which a control signal from a control device (24) can be transmitted, and the external output module may further include a signal input terminal (160) provided on the front surface of the second housing, connected to the communication line, and through which the control signal can be input from a module preceding the external output module, a signal output terminal (162) provided on the rear surface of the second housing, and through which the control signal input to the signal input terminal can be output to a module following the external output module, and an external output terminal (210) provided on the connection surface of the second housing, and through which the control signal input to the signal input terminal can be output to the external device. With this configuration, it is possible to control the operation of the external device.

[0230] (Appendix 6) A module system according to any one of Supplementary Notes 1 to 5, wherein the positive connecting power line of the safety module includes a first positive connecting power line (92a) and a second positive connecting power line (92b), the high-side switch is inserted into each of the first positive connecting power line and the second positive connecting power line, and the module system includes a plurality of the external output modules, each of the plurality of external output modules including a second positive input terminal (170, 170b) provided on the front surface of the second housing and electrically connected to the positive electrode of the power source, a positive output terminal (172, 172a) provided on the rear surface of the second housing and electrically connected to the second positive input terminal, and a negative input terminal (172, 172a) provided on the rear surface of the second housing and electrically connected to the negative input terminal. The plurality of external output modules may further include a negative output terminal (182) electrically connected to the first positive-pole connecting power line, and the plurality of external output modules may include at least a first external output module (36a) and a second external output module (36b) connected downstream of the first external output module, wherein the first positive input terminal of the first external output module is electrically connected to the first positive-pole connecting power line, the second positive input terminal of the first external output module is electrically connected to the second positive-pole connecting power line, the positive output terminal of the first external output module is electrically connected to the first positive input terminal of the second external output module, and the negative output terminal of the first external output module is electrically connected to the negative input terminal of the second external output module. With this configuration, the positive-pole connecting power lines to which the first positive input terminals of the plurality of external output modules are electrically connected are different from each other. Therefore, power supply can be controlled for each external output module.

[0231] (Appendix 7) In the module system described in Supplementary Note 6, the external output module may have only one negative input terminal, and the external output module may have only one negative output terminal. With this configuration, it is possible to reduce the scale of the circuitry that implements the negative input terminal and the negative output terminal.

[0232] (Appendix 8) an external output module (36) connected to a downstream side of a safety module (32) in a module system (20), the external output module (36) comprising: a housing (36h) having a front surface (36hf) facing a module arranged adjacent to a upstream side of the external output module; a rear surface (36hb) facing a module arranged adjacent to a downstream side of the external output module; and a connection surface (36hc) different from either the front surface or the rear surface on which an external device (22, 200) of the module system can be disposed; first positive input terminals (170, 170a) and second positive input terminals (170, 170b) provided on the front surface of the housing and electrically connectable to a positive pole (26p) of a power source (26) via the safety module; a negative input terminal (180) provided on the front surface of the housing and electrically connectable to a negative pole (26n) of the power source via the safety module; The external output module includes a positive power supply terminal (176) provided on the front surface of the housing, electrically connected to the first positive input terminal, and electrically connectable to the external device; a negative power supply terminal (186) provided on the connection surface of the housing, electrically connected to the negative input terminal, and electrically connectable to the external device; a positive output terminal (172, 172a) provided on the rear surface of the housing, electrically connected to the second positive input terminal; and a negative output terminal (182) provided on the rear surface of the housing, electrically connected to the negative input terminal. The external output module is provided with only one negative input terminal, and the positive output terminal and the negative output terminal of the external output module can be electrically connected to the first positive input terminal and the negative input terminal of another external output module, respectively. With this configuration, power supply to the external device can be stopped when a power line breaks. Therefore, the safety of the external device can be ensured.

[0233] (Appendix 9) The external output module according to Supplementary Note 8 may further include a signal input terminal (160) provided on the front surface of the housing and through which a control signal from a control device (24) can be input from a module located upstream of the external output module, a signal output terminal (162) provided on the rear surface of the housing and through which the control signal input to the signal input terminal can be output to a module located downstream of the external output module, and an external output terminal (210) provided on the connection surface of the housing and through which the control signal input to the signal input terminal can be output to the external device. With this configuration, the operation of the external device can be controlled.

[0234] Although the present disclosure has been described in detail, the present disclosure is not limited to the individual embodiments described above. Various additions, substitutions, modifications, partial deletions, etc. are possible in these embodiments without departing from the gist of the present disclosure or the spirit of the present disclosure derived from the content of the claims and their equivalents. These embodiments can also be implemented in combination. For example, in the above-described embodiments, the order of each operation and the order of each process are shown as examples and are not limited to these. The same applies when numerical values ​​or mathematical expressions are used in the description of the above-described embodiments. [Explanation of symbols]

[0235] 10...Control system 20...Module system 22, 200...External device 24...Control device 26...Power supply 30...Communication module 32...Safety module 34...Valve module 36...External output module 40...Control communication processing circuit 42, 46, 74, 84, 124, 164...Communication lines 44, 48, 72...Communication terminals 50...Internal communication processing circuit 52, 90, 132, 172...Positive output terminal 54, 98, 142, 182...Negative output terminals 60...Control communication line 62, 92...Positive connecting power lines 64, 100...Negative connecting power line 70...Safety control processing circuit 80... Operation control processing circuit 82, 120, 160... Signal input terminals 86, 122, 162...Signal output terminals 88, 130, 170...Positive input terminals 94...High-side switch 96, 140, 180...Negative input terminal 102...Low-side switch 126, 212...Signal connection wiring 134, 174...Positive connection relay wiring 136, 178...Positive connection power supply wiring 144, 184...Negative connection relay wiring 146, 188...Negative connection power supply wiring 176...Positive power supply terminal 186...Negative power supply terminal 210...External output terminal

Claims

1. A module system including a safety module and an external output module connected to a subsequent stage of the safety module, The safety module includes, within a first housing: a positive electrode connecting power line that can be electrically connected to a positive electrode of a power source; a high-side switch that is inserted in the positive electrode connecting power line and that can interrupt electrical conduction of the positive electrode connecting power line; a negative electrode connecting power line that can be electrically connected to the negative electrode of the power source; and The external output module includes: a second housing different from the first housing, the second housing having a front surface facing a module arranged adjacent to the upstream side of the external output module, a rear surface facing a module arranged adjacent to the downstream side of the external output module, and a connection surface different from both the front surface and the rear surface on which an external device of the module system can be placed; a first positive input terminal provided on the front surface of the second housing and electrically connected to the positive electrode of the power supply via the positive electrode connecting power line; a negative input terminal provided on the front surface of the second housing and electrically connected to the negative electrode of the power supply via the negative electrode connecting power line; a positive power supply terminal provided on the connection surface of the second housing, electrically connected to the first positive input terminal and capable of being electrically connected to the external device; a negative power supply terminal provided on the connection surface of the second housing, electrically connected to the negative input terminal and capable of being electrically connected to the external device; A modular system having:

2. 2. The module system of claim 1, The safety module is located within the first housing. The module system further includes a low-side switch that is inserted in the negative electrode connecting power line and that can cut off electrical conduction of the negative electrode connecting power line.

3. 2. The module system of claim 1, The system further includes at least one valve module having a plurality of valves and a driver for driving the plurality of valves, the valve module being disposed adjacent to a front stage of the external output module; The valve module is housed in a third housing different from both the first housing and the second housing. a positive connection relay wiring electrically connected to the positive electrode of the power supply via the positive electrode connecting power line and electrically connected to the first positive input terminal; a negative connection relay wiring electrically connected to the negative electrode of the power supply via the negative electrode connecting power line and electrically connected to the negative input terminal; a positive connection power supply wiring that is electrically connected to the positive electrode of the power supply via the positive electrode connection power line and that can be electrically connected to the driver; a negative connection power supply wiring that is electrically connected to the negative electrode of the power supply via the negative electrode connection power line and that can be electrically connected to the driver; A modular system having:

4. 4. The module system of claim 3, The external device further includes a safety valve, When power is supplied to the safety valve via the positive power supply terminal and the negative power supply terminal, the safety valve supplies fluid to the plurality of valves, and when power supply to the safety valve is cut off, the safety valve does not supply the fluid to the plurality of valves.

5. 2. The module system of claim 1, the safety module further includes a communication line within the first housing through which a control signal from a control device can be transmitted; The external output module includes: a signal input terminal provided on the front surface of the second housing, connected to the communication line, and through which the control signal can be input from a module preceding the external output module; a signal output terminal provided on the rear surface of the second housing, through which the control signal input to the signal input terminal can be output to a module subsequent to the external output module; an external output terminal provided on the connection surface of the second housing, the external output terminal being capable of outputting the control signal input to the signal input terminal to the external device; The modular system further comprises:

6. The module system according to any one of claims 1 to 5, the positive connecting power line of the safety module includes a first positive connecting power line and a second positive connecting power line; the high-side switch is inserted in each of the first positive-electrode connecting power line and the second positive-electrode connecting power line; the module system includes a plurality of the external output modules; Each of the plurality of external output modules includes: a second positive input terminal provided on the front surface of the second housing and electrically connected to the positive electrode of the power source; a positive output terminal provided on the rear surface of the second housing and electrically connected to the second positive input terminal; a negative output terminal provided on the rear surface of the second housing and electrically connected to the negative input terminal; and the plurality of external output modules include at least a first external output module and a second external output module connected to a subsequent stage of the first external output module; the first positive input terminal of the first external output module is electrically connected to the first positive electrode connecting power line; the second positive input terminal of the first external output module is electrically connected to the second positive electrode connecting power line; the positive output terminal of the first external output module is electrically connected to the first positive input terminal of the second external output module; The negative output terminal of the first external output module is electrically connected to the negative input terminal of the second external output module.

7. 7. The module system of claim 6, the external output module has only one negative input terminal; A module system, wherein the external output module has only one negative output terminal.

8. An external output module connected to a subsequent stage of a safety module in a module system, a housing having a front surface facing a module disposed adjacent to a preceding stage of the external output module, a rear surface facing a module disposed adjacent to a succeeding stage of the external output module, and a connection surface different from both the front surface and the rear surface on which an external device of the module system can be placed; a first positive input terminal and a second positive input terminal provided on the front surface of the housing and each of which can be electrically connected to a positive pole of a power source via the safety module; a negative input terminal provided on the front surface of the housing and electrically connectable to a negative electrode of the power source via the safety module; a positive power supply terminal provided on the connection surface of the housing, electrically connected to the first positive input terminal and electrically connectable to the external device; a negative power supply terminal provided on the connection surface of the housing, electrically connected to the negative input terminal, and capable of being electrically connected to the external device; a positive output terminal provided on the rear surface of the housing and electrically connected to the second positive input terminal; a negative output terminal provided on the rear surface of the housing and electrically connected to the negative input terminal; Equipped with the external output module is provided with only one negative input terminal, the external output module is provided with only one negative output terminal, The external output module, wherein the positive output terminal and the negative output terminal of the external output module can be electrically connected to the first positive input terminal and the negative input terminal of another external output module, respectively.

9. 9. The external output module according to claim 8, a signal input terminal provided on the front surface of the housing, to which a control signal from a control device can be input from a module preceding the external output module; a signal output terminal provided on the rear surface of the housing, the signal output terminal being capable of outputting the control signal input to the signal input terminal to a module subsequent to the external output module; an external output terminal provided on the connection surface of the housing, the external output terminal being capable of outputting the control signal input to the signal input terminal to the external device; an external output module further comprising:

Images