Safety control system and safety control method

Abstract

A safety control system (0), comprising: a first device (1), a first dual safety circuit (2) connected to the first device (1), a first control input unit (3) connected to the first dual safety circuit (2), and a first safety input unit (4). The first dual safety circuit (2) comprises a first safety circuit (20) and a second safety circuit (21); the first safety circuit (20) is provided with a first monitoring unit (200); the second safety circuit (21) is provided with a second monitoring unit (210); the first monitoring unit (200) and the second monitoring unit (210) are configured to disconnect the first safety circuit (20) or the second safety circuit (21) from the first control input unit (3) and the first safety input unit (4) when it is determined that state data is abnormal; the first control input unit (3) is configured to execute a preset software emergency stop program of the first device (1) upon detecting a disconnection; and the first safety input unit (4) is configured to send an alarm signal to a safety control device (11) of the first device (1) upon detecting a disconnection.

Description

Safety control system and safety control method

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This disclosure is based on the Chinese patent application with application number 202410239639.9, application date March 4, 2024, and invention name “Safety Control System and Safety Control Method”, and claims the priority of the Chinese patent application. The entire content of the Chinese patent application is hereby introduced into the present disclosure as a reference. Technical Field

[0003] The present disclosure relates to the technical field of battery production, and in particular to a safety control system and a safety control method. Background Art

[0004] New energy batteries are being used more and more widely in life and industry. For example, new energy vehicles equipped with batteries have been widely used. In addition, batteries are increasingly used in energy storage and other fields. In the battery production process, the safety circuit is an important part of the battery production process. The safety circuit is combined with the circuit program to protect the normal operation of production equipment and the personal safety of operators in multiple ways.

[0005] Currently, when the safety circuit of the equipment relies solely on the program protection of the programmable controller, when the safety circuit fails, the safety of the system in the production process cannot be guaranteed, resulting in reduced system reliability.

[0006] Summary of the Invention

[0007] In order to solve the above technical problems, the purpose of the present disclosure is to provide a safety control system and a safety control method.

[0008] The present disclosure is achieved through the following technical solutions.

[0009] A first aspect of the present disclosure provides a safety control system, comprising a first device, a first safety dual circuit connected to the first device, and a first control input unit and a first safety input unit connected to the first safety dual circuit. The first safety dual circuit comprises a first safety circuit and a second safety circuit, a first monitoring unit being provided on the first safety circuit, and a second monitoring unit being provided on the second safety circuit. The first monitoring unit and the second monitoring unit are configured to respectively monitor status data of the first device during operation and, upon determining that the status data is abnormal, disconnect the first safety circuit or the second safety circuit from the first control input unit and the first safety input unit. The first control input unit is configured to execute a preset software emergency stop program corresponding to the first device upon detecting a disconnection between the first safety circuit and / or the second safety circuit. The first safety input unit is configured to send an alarm signal to a safety control device corresponding to the first device upon detecting a disconnection between the first safety circuit and / or the second safety circuit, so that the safety control device performs a corresponding safety operation. The first safety input unit is a safety relay or a safety programmable system. The first safety input unit is determined by the safety relay or the safety programmable system based on a safety level preset for the first device.

[0010] Based on this, the present disclosure sets up a dual safety loop, so that when one loop fails, the other loop can still continue to detect the safety of the system, thereby improving the reliability of the system and reducing the risk of single point failure.

[0011] In some embodiments of the present disclosure, the safety control system further includes three groups of normally closed contacts, the three groups of normally closed contacts including a first group of normally closed contacts, a second group of normally closed contacts and a third group of normally closed contacts; wherein: the first safety circuit and the first safety input unit are connected through the first group of normally closed contacts; the second safety circuit and the first safety input unit are connected through the second group of normally closed contacts; the first safety circuit and the second safety circuit are simultaneously connected to the first control input unit through the third group of normally closed contacts; wherein, the number of contacts in each group of normally closed contacts in the first group of normally closed contacts, the second group of normally closed contacts and the third group of normally closed contacts is determined according to the safety level preset for the first device.

[0012] Based on this, by setting a set of contacts for each safety circuit, the redundancy of the system can be improved to a greater extent, thereby further improving the reliability of the system.

[0013] In some embodiments of the present disclosure, the first monitoring unit is further configured to send a first disconnection instruction to the first group of normally closed contacts and the third group of normally closed contacts when it is determined that the status data is abnormal; the first group of normally closed contacts is used to respond to the first disconnection instruction to disconnect the connection between the first safety circuit and the first safety input unit; the third group of normally closed contacts is used to respond to the first disconnection instruction to disconnect the connection between the first safety circuit and the first control input unit.

[0014] Based on this, by setting up a monitoring unit, the operation status of the equipment can be monitored in real time, and when an abnormality occurs in the equipment, corresponding safety measures can be triggered in time, thereby improving the reliability of the system.

[0015] In some embodiments of the present disclosure, the second monitoring unit is further configured to send a second disconnection instruction to the second group of normally closed contacts and the third group of normally closed contacts when it is determined that the status data is abnormal; the second group of normally closed contacts is used to respond to the second disconnection instruction and disconnect the second safety circuit from the first safety input unit; the third group of normally closed contacts is also used to respond to the second disconnection instruction and disconnect the second safety circuit from the first control input unit.

[0016] In some embodiments of the present disclosure, the first safety input unit is connected to the second device, the second device is connected to the second safety dual loop, and a third monitoring unit is provided on the second safety dual loop; wherein: the first safety input unit is further configured to send a safety trigger instruction to the third monitoring unit when it detects that the connection with the first safety loop and / or the second safety loop is disconnected; the third monitoring unit is configured to disconnect the connection between the second device and the corresponding second control input unit and second safety input unit in response to the safety trigger instruction.

[0017] In some embodiments of the present disclosure, the safety control device includes at least a drive motor, a power source device and a solenoid valve; wherein: the first safety input unit is further configured to send the alarm signal to the drive motor, the power source device and the solenoid valve when it detects that the connection with the first safety circuit and / or the second safety circuit is disconnected, so that the drive motor stops running, the power source device stops providing power to the first device, and the solenoid valve stops providing control functions to the first device.

[0018] In some embodiments of the present disclosure, the first monitoring unit and the second monitoring unit are further configured to stop monitoring the status data of the first device during operation when a first preset safety condition is met, and continue monitoring the status data of the first device during operation after stopping for a preset time period.

[0019] Based on this, by setting preset safety conditions, the safety loop can be prevented from being triggered in certain scenarios, thereby improving the availability of the system.

[0020] In some embodiments of the present disclosure, the safety control system further includes a reset unit, which is connected to the three groups of normally closed contacts; wherein: the reset unit is further configured to send connection instructions to the first group of normally closed contacts, the second group of normally closed contacts and the third group of normally closed contacts respectively in response to a reset signal; the first group of normally closed contacts is used to respond to the connection instruction to connect the connection between the first safety circuit and the first safety input unit; the second group of normally closed contacts is used to respond to the connection instruction to connect the connection between the second safety circuit and the first safety input unit; the third group of normally closed contacts is also used to respond to the connection instruction to connect the second safety circuit and the first control input unit.

[0021] A second aspect of the present disclosure provides a safety control method, applied to a safety control system, the safety control system comprising a first device, a first safety dual circuit connected to the first device, and a first control input unit and a first safety input unit connected to the first safety dual circuit. The first safety dual circuit comprises a first safety circuit and a second safety circuit, a first monitoring unit is provided on the first safety circuit, and a second monitoring unit is provided on the second safety circuit. The first monitoring unit and the second monitoring unit respectively monitor status data of the first device during operation and, if the status data is determined to be abnormal, disconnect the first safety circuit or the second safety circuit from the first control input unit and the first safety input unit. The first control input unit, upon detecting a disconnection between the first safety circuit and / or the second safety circuit, executes a preset software emergency stop program corresponding to the first device. The first safety input unit, upon detecting a disconnection between the first safety circuit and / or the second safety circuit, sends a control instruction to a safety control device corresponding to the first device, for the safety control device to perform a corresponding safety operation. The first safety input unit is a safety relay or a safety programmable system. The first safety input unit is determined by the safety relay or the safety programmable system based on a safety level preset for the first device.

[0022] By setting up a dual safety circuit, the present disclosure can ensure that when one circuit fails, the other circuit can still continue to detect the safety of the system, thereby improving the reliability of the system and reducing the risk of single point failure. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Various other advantages and benefits will become apparent to those skilled in the art upon reading the detailed description of the preferred embodiment below. The accompanying drawings are for illustration purposes only and are not to be considered as limiting the present disclosure. The same reference numerals are used throughout the drawings to denote the same components. In the drawings:

[0024] FIG1 is a schematic diagram of the composition of a safety control system provided by an embodiment of the present disclosure;

[0025] FIG2 is a schematic diagram of an exemplary first safety input unit provided by an embodiment of the present disclosure;

[0026] FIG3 is a schematic diagram of the first component of an exemplary security control system provided by an embodiment of the present disclosure;

[0027] FIG4 is a safety circuit diagram of an exemplary emergency stop device provided by an embodiment of the present disclosure;

[0028] FIG5 is a schematic diagram of an exemplary security circuit for security access control provided by an embodiment of the present disclosure;

[0029] FIG6 is a second schematic diagram of the composition of an exemplary security control system provided by an embodiment of the present disclosure;

[0030] FIG7 is a third schematic diagram of the composition of an exemplary security control system provided by an embodiment of the present disclosure;

[0031] FIG8 is a fourth schematic diagram of the composition of an exemplary security control system provided by an embodiment of the present disclosure;

[0032] FIG9 is a schematic diagram of an exemplary safety loop circuit connection provided by an embodiment of the present disclosure;

[0033] FIG10 is a flow chart of a security control method provided in an embodiment of the present disclosure.

[0034] Explanation of reference numerals 0 - safety control system; 1 - first device; 2 - first safety dual circuit; 20 - first safety circuit; 200 - first monitoring unit; 21 - second safety circuit; 210 - second monitoring unit; 3 - first control input unit; 4 - first safety input unit; 51 - first group of normally closed contacts; 52 - second group of normally closed contacts; 53 - third group of normally closed contacts; 6 - second device; 7 - second safety dual circuit; 8 - third monitoring unit; 9 - second control input unit; 10 - second safety input unit; 11 - safety control device; 110 - drive motor; 111 - power source device; 112 - solenoid valve; 12 - reset unit; 130 - emergency stop switch interface; 131 - safety access control Interface; 132-Safety door lock interface; 133-Safety light curtain interface; 134-Third-party device safety interface; 135-Safety circuit contactor interface; 136-Servo motor interface; 140-Emergency stop button; 141-Main air valve output; 142-Light curtain; 143-Light curtain shield; 144-Scapegoat; 145-Scapegoat shield; 146-Safety access control; 147-Safety access control shield; 148-Normal mode; 149-Mode switch; 150-Maintenance mode; 151-Three-stage switch shield; 152-Mode condition summary; 153-Safety condition summary. DETAILED DESCRIPTION

[0035] The following embodiments of the technical solution of the present disclosure are described in detail with reference to the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present disclosure and are therefore only examples and are not intended to limit the scope of protection of the present disclosure.

[0036] Unless otherwise defined, all technical and scientific terms used herein have the same meanings as commonly understood by those skilled in the art to which the present disclosure belongs; the terms used herein are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure; the terms "including" and "having" and any variations thereof in the specification of the present disclosure and the above-mentioned drawings are intended to cover non-exclusive inclusions.

[0037] In the description of the embodiments of the present disclosure, technical terms such as "first," "second," and "third" are used solely to distinguish different objects and should not be understood to indicate or imply relative importance or to implicitly specify the quantity, specific order, or primary and secondary relationship of the technical features indicated. In the description of the embodiments of the present disclosure, "plurality" means more than two, unless otherwise specifically defined.

[0038] References herein to "embodiments" mean that a particular feature, structure, or characteristic described in connection with the embodiments may be included in at least one embodiment of the present disclosure. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor does it constitute an independent or alternative embodiment that is mutually exclusive of other embodiments. It is understood, both explicitly and implicitly, by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0039] In the description of the embodiments of the present disclosure, the term "and / or" is simply a description of the association relationship between associated objects, indicating that three relationships can exist. For example, A and / or B can represent three situations: A exists alone, A and B exist simultaneously, and B exists alone. In addition, the character " / " in this document generally indicates that the associated objects are in an "or" relationship.

[0040] In the description of the embodiments of the present disclosure, the orientations or positional relationships indicated by technical terms such as "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", and "outside" are based on the orientations or positional relationships shown in the accompanying drawings. They are only for the convenience of describing the embodiments of the present disclosure and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed, operated or used in a specific orientation. Therefore, they should not be understood as limiting the embodiments of the present disclosure.

[0041] In the description of the embodiments of the present disclosure, unless otherwise expressly specified or limited, technical terms such as "installed," "connected," "connect," and "fixed" should be understood in a broad sense. For example, they can refer to fixed connections, detachable connections, or integration; mechanical connections or electrical connections; direct connections or indirect connections through an intermediate medium; and can refer to internal connectivity between two components or interaction between two components. Those skilled in the art can understand the specific meanings of the above terms in the embodiments of the present disclosure based on specific circumstances.

[0042] In the description of the embodiments of the present disclosure, unless otherwise clearly specified and limited, the technical term "contact" should be understood in a broad sense, and can be direct contact, contact through an intermediate medium layer, contact with essentially no interaction force between the two contacting parties, or contact with interaction force between the two contacting parties.

[0043] Hereinafter, the present disclosure will be described in detail.

[0044] Battery cells are an important part of batteries. New energy batteries are being used more and more widely in life and industry. For example, new energy vehicles equipped with batteries have been widely used. In addition, batteries are also being increasingly used in energy storage fields.

[0045] At present, the application of new energy batteries in life and industry is becoming more and more extensive. New energy batteries are not only used in energy storage power systems such as hydropower, thermal power, wind power and solar power stations, but are also widely used in electric vehicles such as electric bicycles, electric motorcycles, electric cars, as well as in aerospace and other fields. With the continuous expansion of the application field of power batteries, the market demand is also constantly expanding. In the embodiment of the present disclosure, the battery can be a battery cell. A battery cell refers to a basic unit that can realize the mutual conversion of chemical energy and electrical energy, which can be used to make a battery module or battery pack, thereby being used to supply power to electrical devices. The battery cell can be a secondary battery, which refers to a battery cell that can continue to be used by activating the active material by charging after the battery cell is discharged. The battery cell can be a lithium-ion battery, a sodium-ion battery, a sodium-lithium-ion battery, a lithium metal battery, a sodium metal battery, a lithium-sulfur battery, a magnesium-ion battery, a nickel-hydrogen battery, a nickel-cadmium battery, a lead-acid battery, etc., and the embodiment of the present disclosure is not limited to this.

[0046] Currently, when the safety circuit of battery production equipment relies solely on program protection of a programmable controller, when a safety circuit fails, the safety of the system during the production process cannot be guaranteed, resulting in reduced system reliability.

[0047] To address the above issues, the present disclosure proposes a safety control system 0. Referring to FIG1 , the safety control system 0 includes a first device 1, a first safety dual loop 2 connected to the first device 1, and a first control input unit 3 and a first safety input unit 4 connected to the first safety dual loop 2. The first safety dual loop 2 includes a first safety loop 20 and a second safety loop 21. A first monitoring unit 200 is provided on the first safety loop 20, and a second monitoring unit 210 is provided on the second safety loop 21.

[0048] The first monitoring unit 200 and the second monitoring unit 210 are configured to respectively monitor the status data of the first device 1 during operation, and disconnect the first safety circuit 20 or the second safety circuit 21 from the first control input unit 3 and the first safety input unit 4 if the status data is determined to be abnormal;

[0049] The first control input unit 3 is configured to execute a preset software emergency stop program corresponding to the first device 1 when detecting a disconnection between the first safety circuit 20 and / or the second safety circuit 21;

[0050] The first safety input unit 4 is configured to send an alarm signal to the safety control device corresponding to the first device 1 when detecting that the connection with the first safety circuit 20 and / or the second safety circuit 21 is disconnected, so that the safety control device performs a corresponding safety operation;

[0051] The first safety input unit 4 is a safety relay or a safety programmable system; the first safety input unit 4 is the safety relay or the safety programmable system determined according to a safety level preset for the first device 1 .

[0052] Specifically, the output end of the first device 1 is connected to the input end of the first safety dual loop 2, and the output end of the first safety dual loop 2 is simultaneously connected to the input end of the first control input unit 3 and the input end of the first safety input unit 4. Since the first safety dual loop 2 includes the first safety loop 20 and the second safety loop 21, the output end of the first device 1 is simultaneously connected to the input end of the first safety loop 20 and the input end of the second safety loop 21, the output end of the first safety loop 20 is simultaneously connected to the input end of the first control input unit 3 and the input end of the first safety input unit 4, and the output end of the second safety loop 21 is simultaneously connected to the input end of the first control input unit 3 and the input end of the first safety input unit 4.

[0053] It should be noted that in the embodiment of the present disclosure, the status data may be current data, temperature data, pressure data, or position data of the first device 1; the specific status data may be determined according to actual conditions, and the embodiment of the present disclosure does not make any specific limitations here.

[0054] It should be noted that in the embodiment of the present disclosure, when judging the status data, the judgment can be made through the first monitoring unit 200 and the second monitoring unit 210. At the same time, the first logic judgment unit and the second logic judgment unit can be set on the first safety loop 20 and the second safety loop 21 respectively. The first monitoring unit 200 obtains the status data of the first device 1 in real time and sends it to the first logic judgment unit for the first logic judgment unit to judge the status data; similarly, the second monitoring unit 210 obtains the status data of the first device 1 in real time and sends it to the second logic judgment unit for the second logic judgment unit to judge the status data; the specific judgment device can be set according to actual conditions, and the embodiment of the present disclosure does not make specific limitations here.

[0055] Specifically, since the first device 1 is connected to the first safety loop 20, the first monitoring unit 200 located on the first safety loop 20 can obtain status data of the first device 1 during operation from the first device 1 and monitor it. If an abnormality is detected in the status data, for example, when the temperature data of the first device 1 is higher than a preset temperature threshold, the first monitoring unit 200 is triggered to disconnect the first safety loop 20 from the first control input unit 3 and the first safety input unit 4. Similarly, since the first device 1 is connected to the second safety loop 21, the second monitoring unit 210 located on the second safety loop 21 can also obtain status data of the first device 1 during operation from the first device 1 and monitor it. If an abnormality is detected in the status data, for example, when the temperature data of the first device 1 is higher than a preset temperature threshold, indicating that the first device 1 is at risk of overheating, the second monitoring unit 210 is triggered to disconnect the second safety loop 21 from the first control input unit 3 and the first safety input unit 4. By setting up a dual safety loop, the present disclosure can ensure that when one loop fails, the other loop can continue to detect the safety of the system, thereby improving the reliability of the system and reducing the risk of single point failure.

[0056] Specifically, when the first control input unit 3 detects that the connection between itself and the first safety circuit 20 is disconnected, it executes the preset software emergency stop program for the first device 1. Similarly, when the first control input unit 3 detects that the connection between itself and the second safety circuit 21 is disconnected, it also executes the preset software emergency stop program for the first device 1. For example, if the first device 1 is an insulating and voltage-resistant device, the software program required for the insulating and voltage-resistant device can be stopped, and the software program used by the entire system can also be stopped; the specific preset software emergency stop program can be pre-set according to actual conditions, and the embodiments of the present disclosure do not make specific limitations here.

[0057] It should be noted that, in the embodiment of the present disclosure, the first control input unit 3 is a programmable logic controller (PLC); the specific first control input unit 3 can be determined according to actual conditions, and the embodiment of the present disclosure does not make any specific limitation here.

[0058] Specifically, when the first safety input unit 4 detects that the connection between itself and the first safety loop 20 is disconnected, it sends an alarm signal to the safety control device corresponding to the first device 1 so that the safety control device can perform the corresponding safety operation. Similarly, when the first control input unit 3 detects that the connection between itself and the second safety loop 21 is disconnected, it also sends an alarm signal to the safety control device corresponding to the first device 1 so that the safety control device can perform the corresponding safety operation.

[0059] It should be noted that in the embodiment of the present disclosure, the first safety dual circuit 2 connected to the first device 1 can also be a safety triple circuit or a safety multi-circuit. If it is a safety multi-circuit, the number of monitoring units at this time also corresponds one to one, that is, multiple monitoring units; the specific number of circuits can be determined according to actual conditions, and the embodiment of the present disclosure does not make specific limitations here.

[0060] It is understood that when the safety control system 0 determines that the first device 1 is in a dangerous situation, it can trigger corresponding safety measures to protect personnel and equipment. For example, the safety control system 0 can cut off the power supply, stop the operation of the first device 1, trigger an alarm device, or take other necessary measures to avoid the occurrence of an accident, thereby improving the reliability of the system.

[0061] In an optional embodiment of the present disclosure, the first safety input unit 4 is a safety relay or a safety programmable system; whether the first safety input unit 4 is a safety relay or a safety programmable system is determined according to a safety level preset for the first device 1 .

[0062] It should be noted that in the embodiment of the present disclosure, if the preset safety level corresponding to the first device 1 is higher, then the first safety input unit 4 is a safety programmable system, that is, a safety PLC. Compared with ordinary PLCs, safety PLCs are safer. The safety PLC commonly used in the present disclosure is Pilz PNOZmulti Mini; on the contrary, if the preset safety level corresponding to the first device 1 is lower, then the first safety input unit 4 is a safety relay. The cost of a safety relay is lower than that of a safety PLC; the specific first safety input unit 4 can be determined according to actual conditions, and the embodiment of the present disclosure does not make specific limitations here.

[0063] For example, referring to Figure 2, there is a schematic diagram of an exemplary first safety input unit provided in the present disclosure. As shown in Figure 2, the first safety input unit 4 is a Pilz PNOZmulti Mini, which includes multiple interfaces, for example, an emergency stop switch interface 130; a safety access control interface 131; a safety door lock interface 132; a safety light grid interface 133; a third-party device safety interface 134; a safety circuit contactor interface 135; a servo motor interface 136, etc. The specific interface corresponding to the Pilz PNOZmulti Mini can be determined based on actual conditions, and the embodiments of the present disclosure do not make specific limitations here.

[0064] In an optional embodiment of the present disclosure, referring to Figure 3, the safety control system 0 also includes three groups of normally closed contacts, and the three groups of normally closed contacts include a first group of normally closed contacts 51, a second group of normally closed contacts 52 and a third group of normally closed contacts 53; wherein: the first safety circuit 20 and the first safety input unit 4 are connected through the first group of normally closed contacts 51; the second safety circuit 21 and the first safety input unit 4 are connected through the second group of normally closed contacts 52; the first safety circuit 20 and the second safety circuit 21 are simultaneously connected to the first control input unit 3 through the third group of normally closed contacts 53; wherein, the number of contacts in each group of normally closed contacts in the first group of normally closed contacts 51, the second group of normally closed contacts 52 and the third group of normally closed contacts 53 is determined according to the safety level preset for the first device 1.

[0065] It should be noted that in the embodiment of the present disclosure, the normally closed contact is a (Normally Closed, NC) contact, which means that the circuit is always connected in the absence of an external trigger signal; the specific normally closed contact can be determined according to actual conditions, and the embodiment of the present disclosure does not make any specific limitations here.

[0066] Specifically, the output end of the first safety circuit 20 is connected to the input end of the first safety input unit 4 through the first group of normally closed contacts 51, and the output end of the second safety circuit 21 is connected to the input end of the first safety input unit 4 through the second group of normally closed contacts 52. At the same time, the output ends of the first safety circuit 20 and the second safety circuit 21 are simultaneously connected to the input end of the first control input unit 3 through the third group of normally closed contacts 53.

[0067] It should be noted that in the embodiment of the present disclosure, if it is a safety multi-circuit, taking three circuits as an example, at this time, four groups of normally closed contacts are required, three of which are used to connect each safety circuit with the first safety input unit 4, and the remaining group of contacts is used to connect all safety circuits with the first control input unit 3; the specific number of groups of normally closed contacts can be determined according to the number of safety circuits, and the embodiment of the present disclosure does not make specific limitations here.

[0068] It should be noted that, in the embodiment of the present disclosure, the number of contacts in each group can be determined based on the preset security level for the first device 1; if the preset security level corresponding to the first device 1 is higher, then the number of contacts in each group can be set a little more; if the preset security level corresponding to the first device 1 is lower, then the number of contacts in each group can be set a little less.

[0069] In an optional embodiment of the present disclosure, the first monitoring unit 200 is further configured to send a first disconnection instruction to the first group of normally closed contacts 51 and the third group of normally closed contacts 53 when it is determined that the status data is abnormal; the first group of normally closed contacts 51 is used to respond to the first disconnection instruction and disconnect the connection between the first safety circuit 20 and the first safety input unit 4; the third group of normally closed contacts 53 is used to respond to the first disconnection instruction and disconnect the connection between the first safety circuit 20 and the first control input unit 3.

[0070] Specifically, since the first monitoring unit 200 is arranged on the first safety circuit 20, the first safety circuit 20 is connected to the first safety input unit 4 through the first group of normally closed contacts 51, and is connected to the first control input unit 3 through the third group of normally closed contacts 53. Therefore, when the first monitoring unit 200 detects that the status data of the first device 1 is abnormal, it can disconnect the connection between the first safety circuit 20 and the first safety input unit 4 and the first control input unit 3 by simultaneously sending the first disconnection instruction to the first group of normally closed contacts 51 and the third group of normally closed contacts 53.

[0071] In an optional embodiment of the present disclosure, the second monitoring unit 210 is further configured to send a second disconnection instruction to the second group of normally closed contacts 52 and the third group of normally closed contacts 53 when it is determined that the status data is abnormal; the second group of normally closed contacts 52 is used to respond to the second disconnection instruction and disconnect the connection between the second safety circuit 21 and the first safety input unit 4; the third group of normally closed contacts 53 is also used to respond to the second disconnection instruction and disconnect the connection between the second safety circuit 21 and the first control input unit.

[0072] Specifically, since the second monitoring unit 210 is arranged on the second safety circuit 21, the second safety circuit 21 is connected to the first safety input unit 4 through the second group of normally closed contacts 52, and is connected to the first control input unit 3 through the third group of normally closed contacts 53. Therefore, when the second monitoring unit 210 detects that the status data of the first device 1 is abnormal, it can disconnect the second safety circuit 21 from the first safety input unit 4 and the first control input unit 3 by simultaneously sending a second disconnection instruction to the second group of normally closed contacts 52 and the third group of normally closed contacts 53.

[0073] Based on the above embodiment, referring to Figure 4, which is an exemplary safety circuit of an emergency stop device, the first group of normally closed contacts 51 and the second group of normally closed contacts 52 are simultaneously connected to the first safety input unit 4, and the third group of normally closed contacts 53 is connected to the first control input unit 3. When the emergency stop button is pressed, the safety circuit is triggered. At the same time, the connection between the third group of normally closed contacts 53 and the first control input unit 3 is disconnected, and the first control input unit 3 executes the preset software emergency stop program. The connection between the first group of normally closed contacts 51 and the second group of normally closed contacts 52 and the first safety input unit 4 is disconnected, and the first safety input unit 4 cuts off the power supply (for example, the isolation relay power supply, the isolation AC motor power supply, etc.), triggering the servo motor safety torque function and triggering the safety circuit of the third-party device.

[0074] Based on the above embodiment, referring to Figure 5, which is an exemplary safety circuit of a security access control, the first group of normally closed contacts 51 and the second group of normally closed contacts 52 are simultaneously connected to the first safety input unit 4, and the third group of normally closed contacts 53 is connected to the first control input unit 3. When any safety door is opened, the safety circuit is triggered. At the same time, the connection between the third group of normally closed contacts 53 and the first control input unit 3 is disconnected, and the first control input unit 3 executes the preset software emergency stop program. The connection between the first group of normally closed contacts 51 and the second group of normally closed contacts 52 and the first safety input unit 4 is disconnected, and the first safety input unit 4 cuts off the power supply (for example, isolation relay power supply, isolation AC motor power supply, etc.), triggering the servo motor safety torque function and triggering the safety circuit of the third-party device.

[0075] In an optional embodiment of the present disclosure, referring to Figure 6, the first safety input unit 4 is connected to the second device 6, the second device 6 is connected to the second safety dual loop 7, and a third monitoring unit 8 is provided on the second safety dual loop 7; wherein: the first safety input unit 4 is further configured to send a safety trigger instruction to the third monitoring unit 8 when it detects that the connection with the first safety loop 20 and / or the second safety loop 21 is disconnected; the third monitoring unit 8 is configured to disconnect the connection between the second device 6 and the corresponding second control input unit 9 and the second safety input unit 10 in response to the safety trigger instruction.

[0076] Specifically, the safety control system 0 of the first device 1 can be associated with the second device 6. When an abnormality occurs in the first device 1, the second device 6 as a third-party device can also trigger an alarm; the output end of the first safety input unit 4 is connected to the input end of the second device 6. Based on this, when the first safety input unit 4 detects that the connection with the first safety loop 20 and / or the second safety loop 21 is disconnected, it can send a safety trigger instruction to the third monitoring unit 8 on the second safety dual loop 7 of the second device 6. When the third monitoring unit 8 receives the safety trigger instruction, it determines the normally closed contacts connected between the second safety dual loop 7 and the second control input unit 9 and the second safety input unit 10 respectively, and then sends a disconnection instruction to the corresponding normally closed contact to disconnect the connection between the second device 6 and the corresponding second control input unit 9 and the second safety input unit 10.

[0077] It should be noted that in the embodiment of the present disclosure, the second device 6 can be a third-party device of the first device 1, such as a laser or a robotic car. In the event of an abnormality in the first device 1, the third device related to the first device 1 is interlocked with the first device 1 and shut down, further ensuring the safety of the system; the specific second device 6 can be determined according to actual conditions, and the embodiment of the present disclosure does not make any specific limitations here.

[0078] In an optional embodiment of the present disclosure, referring to Figure 7, the safety control device 11 includes at least a drive motor 110, a power source device 111 and a solenoid valve 112; wherein: the first safety input unit 4 is further configured to send an alarm signal to the drive motor 110, the power source device 111 and the solenoid valve 112 when it detects that the connection with the first safety circuit 20 and / or the second safety circuit 21 is disconnected, so that the drive motor 110 stops running, the power source device 111 stops providing power to the first device 1, and the solenoid valve 112 stops providing control functions to the first device 1.

[0079] Specifically, when the first safety input unit 4 detects that the connection between the first safety circuit 20 and the second safety circuit 21 is disconnected, it sends an alarm signal to the drive motor 110, the power source device 111 and the solenoid valve 112 associated with the first device 1. After receiving the alarm signal, the drive motor 110 triggers the safe torque off (STO) function; the power source device 111 (for example, a relay and an AC motor) stops supplying power after receiving the alarm signal; and the solenoid valve 112 stops providing electromagnetic control function to the first device 1 after receiving the alarm signal.

[0080] It should be noted that in the embodiment of the present disclosure, the safety control device 11 related to the first device 1 includes not only a drive motor 110, a power source device 111 and a solenoid valve 112, but also other devices; the specific safety control device 11 can be determined according to actual conditions, and the embodiment of the present disclosure does not make specific limitations here.

[0081] In an optional embodiment of the present disclosure, the first monitoring unit 200 and the second monitoring unit 210 are further configured to stop monitoring the status data of the first device 1 during operation when a first preset safety condition is met, and continue to monitor the status data of the first device 1 during operation after stopping for a preset time period.

[0082] Specifically, a first preset safety condition can be set in the security control system 0. When the first preset safety condition is met, the muting function is turned on, and the system security monitoring can be temporarily stopped. After the muting function is turned on for a period of time, the function can be turned off. At this time, the first monitoring unit 200 and the second monitoring unit 210 continue to monitor the status data of the first device 1.

[0083] In an optional embodiment of the present disclosure, referring to Figure 8, the safety control system 0 also includes a reset unit 12, which is connected to three groups of normally closed contacts; wherein: the reset unit 12 is further configured to send connection instructions to the first group of normally closed contacts 51, the second group of normally closed contacts 52 and the third group of normally closed contacts 53 in response to the reset signal; the first group of normally closed contacts 51 is used to respond to the connection instruction to connect the connection between the first safety circuit 20 and the first safety input unit 4; the second group of normally closed contacts 52 is used to respond to the connection instruction to connect the connection between the second safety circuit 21 and the first safety input unit 4; the third group of normally closed contacts 53 is also used to respond to the connection instruction to connect the second safety circuit 21 and the first control input unit 3.

[0084] Specifically, a reset button can be set. After the exception of the first device 1 is handled, the safety control system 0 is reopened through the reset button. After the user presses the reset button, a reset signal is sent to the reset unit 12 in the safety control system 0. Since the reset unit 12 is connected to three groups of normally closed contacts, at this time, the reset unit 12 sends a connection instruction to the first group of normally closed contacts 51, the second group of normally closed contacts 52 and the third group of normally closed contacts 53 after receiving the reset signal. After receiving the connection instruction, the first group of normally closed contacts 51, the second group of normally closed contacts 52 and the third group of normally closed contacts 53 connect with the first safety input unit 4 and the first control input unit 3.

[0085] It should be noted that in the embodiment of the present disclosure, the safety control system 0 can also be used for fault detection and diagnosis. It can monitor the operating status of the equipment, identify the cause of the fault, and provide corresponding fault diagnosis information, which helps to quickly troubleshoot and repair the equipment; at the same time, the safety control system 0 can also collect the status data of the first device 1, and analyze and process it. Through the analysis of the data, the operating trends, performance parameters and other information of the first device 1 can be obtained, providing a basis for the maintenance and optimization of the first device 1.

[0086] Based on the above embodiment, referring to FIG9 , an exemplary safety circuit connection diagram provided by the present disclosure is shown. As shown in FIG9 , the safety circuit at the output end of the emergency stop button 140 is directly connected to the main gas valve output 141, that is, when the emergency stop button 140 is triggered, the main gas valve output 141 stops running; the safety circuit at the output end of the grating 142 is connected to the grating shield 143, that is, when an abnormality occurs in the grating 142, the grating shield 143 is triggered to stop the operation of the grating 142; the safety circuit at the output end of the scapegoat 144 is connected to the scapegoat shield 145; the safety circuit at the output end of the safety access control 146 is connected to the safety access control shield 147. At the same time, the grating shield 143, the scapegoat shield 145 and the safety access control shield 147 are simultaneously connected to the normal mode 148. When the normal mode 148 is selected, the safety circuit performs safety monitoring normally. Testing; A mode switching switch 149 can also be set in the safety circuit. The output end of the mode switching switch 149 is connected to the maintenance mode 150 and the normal mode 148, and the normal mode 148 can be switched to the maintenance mode 150. At the same time, the maintenance mode 150 is connected to the three-stage switch shield 151. When maintenance personnel need to repair equipment that has an abnormality in the safety circuit, the three-stage switch shield 151 can be turned on to protect the safety of the maintenance personnel. Furthermore, the output ends of the maintenance mode 150 and the normal mode 148 are connected to the mode condition summary 152, which is used to set conditions that can temporarily shield muting. At the same time, the output end of the mode condition summary 152 is connected to the output end of the emergency stop button 140 and the safety condition summary 153, and conditions for temporarily shielding muting can be further set for the emergency stop button 140.

[0087] Furthermore, based on FIG9 , Table 1 is an exemplary input / output signal document information table provided in an embodiment of the present disclosure:

[0088] Table 1 Input / output signal document information table

[0089] The embodiment of the present disclosure provides a safety control system 0, which includes a first device 1, a first safety dual loop 2 connected to the first device 1, and a first control input unit 3 and a first safety input unit 4 connected to the first safety dual loop 2 at the same time. The first safety dual loop 2 includes a first safety loop 20 and a second safety loop 21. A first monitoring unit 200 is provided on the first safety loop 20, and a second monitoring unit 210 is provided on the second safety loop 21; wherein: the first monitoring unit 200 and the second monitoring unit 210 are configured to respectively monitor the status data of the first device 1 during operation, and when it is determined that the status data is abnormal, disconnect the first safety loop 20 or the second safety loop 21 from the first control input unit 3 and the first safety input unit 4; the first control input unit 3 is configured to monitor the status data of the first device 1 during operation, and disconnect the first safety loop 20 or the second safety loop 21 from the first control input unit 3 and the first safety input unit 4 when it is determined that the status data is abnormal; the first control input unit 3 is configured to monitor the status data of the first device 1 during operation, and disconnect the first safety loop 20 or the second safety loop 21 from the first control input unit 3 and the first safety input unit 4 when it is detected ... first control input unit 3 is abnormal. When the connection between the first safety circuit 20 and / or the second safety circuit 21 is disconnected, the preset software emergency stop program corresponding to the first device 1 is executed; the first safety input unit 4 is configured to send an alarm signal to the safety control device 11 corresponding to the first device 1 when it detects that the connection between the first safety circuit 20 and / or the second safety circuit 21 is disconnected, so that the safety control device 11 can perform corresponding safety operations; wherein, the first safety input unit 4 is a safety relay or a safety programmable system; the first safety input unit 4 is determined by the safety relay or the safety programmable system according to the safety level preset for the first device 1; adopting the above implementation scheme, the present disclosure sets a safety dual circuit, so that when one circuit fails, the other circuit can still continue to detect the safety of the system, thereby improving the reliability of the system and reducing the risk of single point failure.

[0090] Based on the above embodiment, in another embodiment of the present disclosure, a safety control method is provided, which is applied to a safety control system 0. Referring to FIG1 , the safety control system 0 includes a first device 1, a first safety dual loop 2 connected to the first device 1, and a first control input unit 3 and a first safety input unit 4 connected to the first safety dual loop 2. The first safety dual loop 2 includes a first safety loop 20 and a second safety loop 21. A first monitoring unit 200 is provided on the first safety loop 20, and a second monitoring unit 210 is provided on the second safety loop 21. FIG10 is a flow chart of a safety control method provided in an embodiment of the present disclosure. The specific method includes the following steps S101 to S103:

[0091] In step S101, the first monitoring unit and the second monitoring unit respectively monitor the status data of the first device during operation, and disconnect the first safety circuit or the second safety circuit from the first control input unit and the first safety input unit if the status data is abnormal.

[0092] In the embodiment of the present disclosure, since the first device 1 is connected to the first safety loop 20, the first monitoring unit 200 located on the first safety loop 20 can obtain the status data of the first device 1 during operation from the first device 1 and monitor it. If an abnormality is detected in the status data, for example, when the temperature data of the first device 1 is higher than the preset temperature threshold, the first monitoring unit 200 is triggered to disconnect the connection between the first safety loop 20 and the first control input unit 3 and the first safety input unit 4; similarly, since the first device 1 is connected to the second safety loop 21, the second monitoring unit 210 located on the second safety loop 21 can also obtain the status data of the first device 1 during operation from the first device 1 and monitor it. If an abnormality is detected in the status data, for example, when the temperature data of the first device 1 is higher than the preset temperature threshold, it indicates that there is a risk of overheating in the first device 1, and the second monitoring unit 210 is triggered to disconnect the connection between the second safety loop 21 and the first control input unit 3 and the first safety input unit 4.

[0093] Step S102: When the first control input unit detects that the connection with the first safety circuit and / or the second safety circuit is disconnected, the first control input unit executes a preset software emergency stop program corresponding to the first device.

[0094] In the embodiment of the present disclosure, when the first control input unit 3 detects that the connection between itself and the first safety circuit 20 is disconnected, the first control input unit 3 executes the preset software emergency stop program for the first device 1. Similarly, when the first control input unit 3 detects that the connection between itself and the second safety circuit 21 is disconnected, the first control input unit 3 also executes the preset software emergency stop program for the first device 1. For example, if the first device 1 is an insulating and voltage-resistant device, the software program required for the insulating and voltage-resistant device can be stopped, and the software program used by the entire system can also be stopped; the specific preset software emergency stop program can be pre-set according to actual conditions, and the embodiment of the present disclosure does not make specific limitations here.

[0095] Step S103 : When the first safety input unit detects that the connection with the first safety loop and / or the second safety loop is disconnected, the first safety input unit sends a control instruction to the safety control device corresponding to the first device, so that the safety control device performs a corresponding safety operation.

[0096] In the embodiment of the present disclosure, the first safety input unit 4 is a safety relay or a safety programmable system; the first safety input unit 4 is the safety relay or the safety programmable system determined according to the safety level preset for the first device 1.

[0097] In the embodiment of the present disclosure, when the first safety input unit 4 detects that the connection between itself and the first safety loop 20 is disconnected, it sends an alarm signal to the safety control device 11 corresponding to the first device 1, so that the safety control device 11 can perform the corresponding safety operation. Similarly, when the first control input unit 3 detects that the connection between itself and the second safety loop 21 is disconnected, it also sends an alarm signal to the safety control device 11 corresponding to the first device 1, so that the safety control device 11 can perform the corresponding safety operation.

[0098] It can be understood that the present disclosure enhances the safety of the first device 1 by using the safety control system 0. The safety control system 0 can promptly detect and respond to potential dangerous situations, reduce the risk of accidents, and take measures to prevent accidents, thereby protecting the lives and property of people.

[0099] The embodiment of the present disclosure provides a safety control method, which is applied to a safety control system. The safety control system includes a first device, a first safety dual circuit connected to the first device, and a first control input unit and a first safety input unit connected to the first safety dual circuit. The first safety dual circuit includes a first safety circuit and a second safety circuit. A first monitoring unit is provided on the first safety circuit, and a second monitoring unit is provided on the second safety circuit. The first monitoring unit and the second monitoring unit respectively monitor the status data of the first device during operation, and disconnect the first safety circuit or the second safety circuit from the first control input unit and the first safety input unit when the status data is judged to be abnormal. The first control input unit disconnects the first safety circuit or the second safety circuit from the first control input unit and the first safety input unit when the first control input unit detects that the first safety circuit and / or the second safety circuit are connected. When the connection between the two safety circuits is disconnected, the preset software emergency stop program corresponding to the first device is executed; when the first safety input unit detects that the connection with the first safety circuit and / or the second safety circuit is disconnected, the first safety input unit sends a control instruction to the safety control device corresponding to the first device, so that the safety control device can perform the corresponding safety operation; wherein, the first safety input unit is a safety relay or a safety programmable system; the first safety input unit is a safety relay or a safety programmable system determined according to the safety level preset for the first device; adopting the above implementation scheme, the present disclosure sets a safety dual circuit, so that when one circuit fails, the other circuit can still continue to detect the safety of the system, thereby improving the reliability of the system and reducing the risk of single point failure.

[0100] An embodiment of the present disclosure also provides a computer-readable storage medium on which a computer program is stored. The computer-readable storage medium stores one or more programs, which can be executed by one or more processors and applied to the security control system 0. The computer program implements the security control method as described above.

[0101] Furthermore, safety control systems are widely used in many key fields, such as the lithium battery industry, industrial automation, aerospace, nuclear energy, and medical equipment. They can help ensure that the system can respond quickly when a failure or abnormal situation occurs and take appropriate safety measures to protect the safety of personnel and equipment.

[0102] The above embodiments are only used to illustrate the technical solutions of the present disclosure, rather than to limit them. Although the present disclosure has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some or all of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present disclosure, and they should all be included in the scope of this disclosure. In particular, as long as there is no structural conflict, the various technical features mentioned in the various embodiments can be combined in any way. The present disclosure is not limited to the specific embodiments disclosed herein, but includes all technical solutions that fall within the scope of the application documents.

Claims

1. A safety control system, comprising: a first device; a first safety dual circuit connected to the first device; and a first control input unit and a first safety input unit connected to the first safety dual circuit. The first safety dual circuit includes a first safety circuit and a second safety circuit. A first monitoring unit is provided on the first safety circuit, and a second monitoring unit is provided on the second safety circuit. The first monitoring unit and the second monitoring unit are configured to respectively monitor status data of the first device during operation, and disconnect the first safety circuit or the second safety circuit from the first control input unit and the first safety input unit if it is determined that the status data is abnormal; The first control input unit is configured to execute a preset software emergency stop program corresponding to the first device when detecting a disconnection between the first safety circuit and / or the second safety circuit; The first safety input unit is configured to send an alarm signal to a safety control device corresponding to the first device when detecting a disconnection between the first safety circuit and / or the second safety circuit, so that the safety control device performs a corresponding safety operation; Wherein, the first safety input unit is a safety relay or a safety programmable system; The first safety input unit is the safety relay or the safety programmable system and is determined according to a safety level preset for the first device.

2. The system according to claim 1, wherein: The safety control system further includes three groups of normally closed contacts, the three groups of normally closed contacts including a first group of normally closed contacts, a second group of normally closed contacts and a third group of normally closed contacts; wherein: The first safety circuit and the first safety input unit are connected via the first set of normally closed contacts; The second safety circuit and the first safety input unit are connected via the second set of normally closed contacts; The first safety circuit and the second safety circuit are simultaneously connected to the first control input unit through the third group of normally closed contacts; The number of contacts in each of the first group of normally closed contacts, the second group of normally closed contacts, and the third group of normally closed contacts is determined according to a safety level preset for the first device.

3. The system according to claim 2, wherein: The first monitoring unit is further configured to send a first disconnection instruction to the first group of normally closed contacts and the third group of normally closed contacts when it is determined that the status data is abnormal; The first group of normally closed contacts is configured to disconnect the first safety circuit from the first safety input unit in response to the first disconnection instruction; The third group of normally closed contacts is used to disconnect the first safety circuit and the first control input unit in response to the first disconnection instruction.

4. The system according to claim 2 or 3, wherein: The second monitoring unit is further configured to send a second disconnection instruction to the second group of normally closed contacts and the third group of normally closed contacts when it is determined that the status data is abnormal; the second group of normally closed contacts being configured to disconnect the second safety circuit from the first safety input unit in response to the second disconnection instruction; The third group of normally closed contacts is further configured to respond to the second disconnection instruction to disconnect the second safety circuit from the first control input unit.

5. The system according to any one of claims 1 to 4, wherein: The first safety input unit is connected to the second device, the second device is connected to the second safety double loop, and a third monitoring unit is provided on the second safety double loop; wherein: The first safety input unit is further configured to send a safety trigger instruction to the third monitoring unit when detecting that the connection with the first safety loop and / or the second safety loop is disconnected; The third monitoring unit is configured to disconnect the second device from the corresponding second control input unit and second safety input unit in response to a safety trigger instruction.

6. The system according to any one of claims 1 to 5, wherein: The safety control device at least includes a drive motor, a power source device and a solenoid valve; wherein: The first safety input unit is further configured to send the alarm signal to the drive motor, the power source device and the solenoid valve when it detects that the connection with the first safety circuit and / or the second safety circuit is disconnected, so that the drive motor stops running, the power source device stops providing power to the first device, and the solenoid valve stops providing control function to the first device.

7. The system according to any one of claims 1 to 6, wherein: The first monitoring unit and the second monitoring unit are also configured to stop monitoring the status data of the first device during operation when a first preset safety condition is met, and continue monitoring the status data of the first device during operation after stopping for a preset time period.

8. The system according to any one of claims 2 to 4, wherein: The safety control system further includes a reset unit connected to the three groups of normally closed contacts; wherein: The reset unit is further configured to send connection instructions to the first group of normally closed contacts, the second group of normally closed contacts, and the third group of normally closed contacts respectively in response to the reset signal; The first group of normally closed contacts is configured to connect the first safety circuit and the first safety input unit in response to the connection instruction; The second group of normally closed contacts is configured to connect the second safety circuit and the first safety input unit in response to the connection instruction; The third group of normally closed contacts is further configured to respond to the connection instruction to connect the second safety circuit and the first control input unit.

9. A safety control method, applied to a safety control system, the safety control system comprising a first device, a first safety dual circuit connected to the first device, and a first control input unit and a first safety input unit connected to the first safety dual circuit, the first safety dual circuit comprising a first safety circuit and a second safety circuit, a first monitoring unit provided on the first safety circuit, and a second monitoring unit provided on the second safety circuit; wherein: The first monitoring unit and the second monitoring unit respectively monitor status data of the first device during operation, and disconnect the first safety circuit or the second safety circuit from the first control input unit and the first safety input unit if the status data is determined to be abnormal; The first control input unit executes a preset software emergency stop program corresponding to the first device when detecting that the connection with the first safety circuit and / or the second safety circuit is disconnected; When the first safety input unit detects that the connection with the first safety circuit and / or the second safety circuit is disconnected, the first safety input unit sends a control instruction to the safety control device corresponding to the first device, so that the safety control device performs a corresponding safety operation; Wherein, the first safety input unit is a safety relay or a safety programmable system; The first safety input unit is the safety relay or the safety programmable system and is determined according to a safety level preset for the first device.

10. The method according to claim 9, wherein the safety control system further comprises three groups of normally closed contacts, the three groups of normally closed contacts comprising a first group of normally closed contacts, a second group of normally closed contacts, and a third group of normally closed contacts; the first safety circuit and the first safety input unit are connected via the first group of normally closed contacts; the second safety circuit and the first safety input unit are connected via the second group of normally closed contacts; and the first safety circuit and the second safety circuit are simultaneously connected to the first control input unit via the third group of normally closed contacts; in, The number of contacts in each of the first group of normally closed contacts, the second group of normally closed contacts, and the third group of normally closed contacts is determined according to a safety level preset for the first device.

11. The method according to claim 10, wherein: When the first monitoring unit determines that the status data is abnormal, the first monitoring unit sends a first disconnection instruction to the first group of normally closed contacts and the third group of normally closed contacts; The first group of normally closed contacts disconnects the first safety circuit from the first safety input unit in response to the first disconnection instruction; The third group of normally closed contacts disconnects the first safety circuit from the first control input unit in response to the first disconnection instruction.

12. The method according to claim 10 or 11, wherein: The second monitoring unit sends a second disconnection instruction to the second group of normally closed contacts and the third group of normally closed contacts when it is determined that the status data is abnormal; The second group of normally closed contacts disconnects the second safety circuit from the first safety input unit in response to the second disconnection instruction; The third group of normally closed contacts disconnects the second safety circuit from the first control input unit in response to the second disconnection instruction.

13. The method according to any one of claims 9 to 12, wherein the first safety input unit is connected to a second device, the second device is connected to a second safety dual loop, and a third monitoring unit is provided on the second safety dual loop; wherein: The first safety input unit sends a safety trigger instruction to the third monitoring unit when detecting that the connection with the first safety loop and / or the second safety loop is disconnected; The third monitoring unit disconnects the second device from the corresponding second control input unit and second safety input unit in response to the safety trigger instruction.

14. The method according to any one of claims 9 to 12, wherein the safety control device comprises at least a drive motor, a power source device, and a solenoid valve; wherein: When the first safety input unit detects that the connection with the first safety circuit and / or the second safety circuit is disconnected, the first safety input unit sends the alarm signal to the drive motor, the power source device and the solenoid valve, so that the drive motor stops running, the power source device stops providing power to the first device, and the solenoid valve stops providing control function to the first device.

15. The method according to any one of claims 9 to 12, wherein: When a first preset safety condition is met, the first monitoring unit and the second monitoring unit stop monitoring the status data of the first device during operation, and continue monitoring the status data of the first device during operation after stopping for a preset time period.

16. The method according to any one of claims 10 to 12, wherein the safety control system further comprises a reset unit connected to the three groups of normally closed contacts; wherein: The reset unit sends connection instructions to the first group of normally closed contacts, the second group of normally closed contacts, and the third group of normally closed contacts respectively in response to the reset signal; The first group of normally closed contacts connects the first safety circuit and the first safety input unit in response to the connection instruction; The second group of normally closed contacts responds to the connection instruction to connect the second safety circuit and the first safety input unit; The third group of normally closed contacts responds to the connection instruction to connect the second safety circuit and the first control input unit.

Images