53 results about "Safety Integrity Level" patented technology

The invention discloses a motor controller circuit system and a motor controller, and is applied to driving fault detection of the motor controller, the circuit system comprises a driving detection circuit, the driving detection circuit is respectively connected with a main controller and a driving circuit, and through the driving detection circuit, a first PWM signal sent by the main controller is firstly read; a second PWM signal output by the driving circuit is read back; secondly, comparing the first PWM signal with the second PWM signal and outputting a fault diagnosis result; and then, according to a fault diagnosis result, a driving circuit fault indication signal is output to the main controller, so that a safety state is output through the main controller. According to the technical scheme, on one hand, the fault of the driving chip can be diagnosed, and on the other hand, fault conditions such as failure of the driving circuit can be diagnosed, so that the coverage rate of fault diagnosis of the driving circuit is improved, and the safety integrity level of the automobile ASILD is further improved.

The invention discloses an automobile safety integrity level evaluation method, device, equipment and medium, the automobile safety integrity level evaluation method comprises the following steps: obtaining driving data in a target driving scene, the driving data comprising motion state data of a front automobile and a rear automobile when a fault event occurs; determining the maximum perceptual hazard time of the driver of the rear vehicle under the condition that the front vehicle and the rear vehicle reach the target critical collision condition by using the driving data; determining a controllability level corresponding to the target driving scene by using the maximum perceptual hazard time of the driver of the rear vehicle; and evaluating an automobile safety integrity level corresponding to the target driving scene by using the controllability level, the severity level and the exposure level corresponding to the target driving scene. Through the above mode, the accuracy of evaluating the automobile safety integrity level can be improved.

The invention relates to the technical field of electrical instrument management, in particular to a petroleum drilling machine electrical instrument management system and method based on SIL analysis, and the management system comprises a drilling machine electrical instrument function management module and an electrical instrument safety management module. The drilling machine electrical instrument function management module is used for completing periodic management screening and qualitative analysis of a drilling machine electrical instrument, function identification of an electrical instrument system and safety integrity level determination of the electrical instrument system; the electrical instrument safety management module is used for determining the working range of a drilling machine and the management range of electrical instruments of the drilling machine, screening to-be-evaluated scenes, selecting initial events, identifying independent protection layers, determining the average failure probability of all the protection layers, calculating the frequency of all the scenes and determining risk reduction factors. And confirming the security integrity level of the target. Through the management system and method, the problems that the accuracy of risk assessment of an electrical instrument system of a petroleum drilling machine in a scene event is poor and safety assessment is not facilitated can be solved.

In various examples, a safety decomposition architecture for autonomous machine applications is presented that uses two or more individual safety assessments to satisfy a higher safety integrity level (e.g., ASIL D). For example, a behavior planner may be used as a primary planning component, and a collision avoidance feature may be used as a diverse safety monitoring component—such that both may redundantly and independently prevent violation of safety goals. In addition, robustness of the system may be improved as single point and systematic failures may be avoided due to the requirement that two independent failures—e.g., of the behavior planner component and the collision avoidance component—occur simultaneously to cause a violation of the safety goals.

The invention discloses a monitoring method, system and device for a braking function and electronic equipment, and the method comprises the steps that multiple paths of brake pedal signals are obtained, and the multiple paths of brake pedal signals are transmitted by multiple heterogeneous sensors through respective two paths of signal channels; performing diagnosis detection on the multiple paths of brake pedal signals, and determining a fault signal and a target channel signal in the multiple paths of brake pedal signals; when the signal number of the target channel signals meets a preset number condition, credible signals are obtained through screening by a voting mechanism based on the target channel signals; obtaining a braking request based on the credible signal to realize a braking function based on the braking request; and fault information is obtained based on the fault signal and other signals except the credible signal in the target channel signal, and fault reminding is carried out based on the fault information. The safety integrity level of the braking function can be improved, and the fault-tolerant performance of a braking product is improved.

The invention relates to imaging 3-D time-of-flight sensors that are particularly suitable for the detection of objects and individuals in three-dimensional space. This capability results from the basic principle. In each image point of the sensor, the distance to the object located in the observation space is determined by using the propagation time (time of flight) of light pulses. The sensor therefore supplies a three-dimensional image, which can be analyzed by means of suitable processing algorithms. In specific applications, in particular in the interaction of human and machine, machine and machine, or machine and space, it is necessary that the detection is carried out safely. The level of safety is classified in various standards into safety integrity levels.

The embodiment of the invention provides a vehicle controller system and method and a computer readable storage medium, and the system comprises an application processing unit which is used for executing application software based on a quality management level corresponding to a vehicle industry standard; the software monitoring processing unit is used for monitoring the software running state of the application software based on the first security level; the hardware monitoring processing unit is used for monitoring the first hardware running state of the application processing unit and the second hardware running state of the software monitoring processing unit based on the second security level; wherein the first safety level and the second safety level meet a target function safety level corresponding to the controller system through level decomposition and superposition, and the first safety level, the second safety level and the target function safety level are selected from a plurality of safety integrity levels corresponding to the vehicle industry standard. The technical problem that the flexibility of a controller system of a vehicle is poor is solved.

A method for an apparatus operating in a wireless communication network. The method includes transmitting a plurality of functional safety containers offset in time along with at least one associated functional safety indicator that indicates a relevance according to at least one safety integrity level, wherein at least one of the plurality of functional safety containers comprises data, especially V2x data that comprises at least one of a vehicle operating parameter and a roadway event, or industrial data that comprises a machine operating parameter, or building technology data that comprises building operational data.

The invention provides an escalator remote function safety device based on a safety PLC and a control method, and relates to the technical field of elevator safety control, and the escalator remote function safety device based on the safety PLC comprises an AI abnormal behavior detection module; a master control room monitoring and output module; a signal transmission module; an escalator control cabinet detection module; and a safety loop control module. By means of AI behavior recognition, safety PLC closed-loop control and remote signal transmission, remote emergency stopping of the escalator under the abnormal working condition is achieved, the SIL2 safety integrity level requirement of the IEC61508 standard is met, and the system is suitable for escalators and moving sidewalks in crowded places such as shopping malls, subway stations and airports.

The invention discloses a control method and control system of a rail transit door system, the rail transit door system comprises two-out-of-two processing channels, the two processing channels are provided with independent motor control circuits, and the motor control circuits are used for controlling an execution mechanism to conduct door opening and closing operation; when the two-out-of-two voting fails, the first processing channel is selected to output a control signal of the execution mechanism, and the second processing channel is shut down and guided to the safe side; when any processing channel breaks down, the processing channel is shut down and guided to the safe side, and the other processing channel does not carry out two-out-of-two voting and directly outputs a control signal. According to the method, operation can be continuously maintained when any processing channel fails, the safety integrity level of related safety functions is reduced to SIL2 from SIL4, and the usability of a vehicle door control system and a platform door control system is greatly improved under the condition that basic safety requirements are ensured. And meanwhile, the problem that the SIL4 vehicle door control system and the platform door control system cannot be closed due to shutdown guiding to the safe side under the abnormal condition can be avoided.

A selection of a hydrocarbon well of a hydrocarbon production system is received at a safety logic solver (SLS) for proof testing. Test mode pressure sensors attached to a common header of the hydrocarbon production system are activated to monitor a live process condition status of the common header from all wells of the hydrocarbon production system. A simulated overpressure condition is induced in the operation pressure sensors. An indication of overpressure is received at the SLS from at least two operation pressure sensors. Final elements associated with the hydrocarbon well are signaled to close while leaving other wells in the hydrocarbon production system in operation. The operation pressure sensors are restored to a normal pressure condition, and the final elements associated with the selected hydrocarbon well are signaled to re-open the hydrocarbon well.

The invention discloses a rail transit monitoring and decision-making method and device based on image recognition and artificial intelligence. The rail transit monitoring and decision-making method based on image recognition and artificial intelligence comprises the following steps: acquiring an ATS interface frame image with a timestamp acquired by an external camera device or a video acquisition card; performing information extraction on the ATS interface frame image to obtain a structured real-time information set; obtaining abnormal event detail information according to the obtained structured real-time information set; generating suggested operation instruction information according to the abnormal event detail information; and displaying the suggested operation instruction information and carrying out multi-channel pushing. The ATS interface image is acquired through the external camera or the video acquisition card, direct data interaction with software and hardware of the ATS system is avoided, interference on the SIL (security integrity level) of the ATS system is avoided, the ATS interface image acquisition device can adapt to the ATS systems of different manufacturers and different versions, and compatibility risks and potential safety hazards caused by traditional intrusive interface modification are solved.

Safety mechanisms are embedded into a System on a Chip (SoC) and are operable to detect faults present in the logic circuitry in the SoC. Various types of faults in logic circuitry can occur, for example, a bit stuck at 0 or 1, or a transient or temporary fault due to radiation impacting the SoC. SoC devices are required to meet certain automotive safety integrity standards. The most stringent automotive safety integrity level requires that 90% of random latent faults are detected in all relevant logic, including all safety mechanism. Examples disclosed include hardware based checkers and hardware or software based pattern generation methods that achieve high online fault coverage in safety mechanism circuitry used for functional safety. A hardware based safety mechanism monitors the logic circuitry during operation. Any time the safety mechanism detects any faults in the logic circuitry, a fault notification is propagated to upstream logic.

A railway vehicle monitoring and signaling system 30 includes trackside devices (e.g. track circuits 36 and signals Sx, Sy) for reporting Safety Integrity Level 2 (SIL2) data regarding the presence or

This invention belongs to the technical field of Safety Integrity Level (SIL) verification for Safety Instrumented Systems (SIS), specifically disclosing a dynamic verification method and system for SIL considering uncertainty. Addressing the uncertainty issues in SIL verification, this invention introduces stochastic uncertainty theory and fuzzy uncertainty theory, combining stochastic uncertainty theory with LSTM networks and fuzzy uncertainty theory with fuzzy logic to propose a novel dynamic SIL verification method. It also performs source tracing analysis on the SIL verification results and uses a random forest method for feature importance analysis. The SIL level is dynamically updated as data is updated. This invention solves the problems of uncertainty and static lag in traditional SIL verification, eliminates the fuzzy uncertainty of expert judgment and the static nature of field data, and enables the final verification results to be dynamic and up-to-date.

This invention provides a remote functional safety device and control method for escalators based on a safety PLC, relating to the field of elevator safety control technology. The remote functional safety device for escalators based on a safety PLC includes: an AI abnormal behavior detection module; a main control room monitoring and output module; a signal transmission module; an escalator control cabinet detection module; and a safety loop control module. Through AI behavior recognition, safety PLC closed-loop control, and long-distance signal transmission, it enables remote emergency stopping of the escalator under abnormal operating conditions, meeting the SIL2 safety integrity level requirements of the IEC61508 standard. It is suitable for escalators and moving walkways in densely populated places such as shopping malls, subway stations, and airports.

A railway vehicle monitoring and signaling system 30 includes trackside devices (e.g. track circuits 36 and signals Sx, Sy) for reporting Safety Integrity Level 2 (SIL2) data regarding the presence or

A method for carrying out an at least partly automated driving function provided by means of a motor vehicle. The method includes: determining that an infrastructure element is located in an environment of the motor vehicle, wherein the infrastructure element is part of an event chain for the at least partly automated guidance of a motor vehicle during a trip that is guided in an at least partly automated manner; determining a minimum safety integrity level that the event chain must have; determining which safety integrity level the event chain maximally fulfills; determining, based on the minimum safety integrity level and the maximum safety integrity level of the event chain, whether the driving function may be carried out; and carrying out the driving function.

The invention discloses a design method for ensuring the integrity of satellite system software based on DO-278A. The method comprises the following steps: defining a satellite dedicated software security integrity level SSIL and mapping the satellite dedicated software security integrity level SSIL with a software integrity level SWIL of a DO-278A standard; constructing a satellite-ground cooperative dual V model containing a ground development V model and an on-orbit maintenance V model; designing a space software fault-tolerant architecture and carrying out a fault injection test; and establishing an on-orbit software health state monitoring and evidence collection closed-loop process. According to the method provided by the invention, the full life cycle of the satellite software is covered, the fault-tolerant capability and on-orbit maintainability of the satellite software are improved, the blank of an integrity guarantee scheme of the satellite exclusive software in the prior art is filled, and long-period and high-reliability operation of the satellite software is guaranteed.

The invention relates to a brake system for performing emergency braking of a rail vehicle, comprising: at least one brake cylinder (14); a pressure regulating device (12) for providing a brake cylinder pressure (Pb) to the brake cylinder (14); and a control device (16) for actuating the pressure regulating device (12). In order to enable flexible adaptation of the brake pressure even during emergency braking, the control device (16) comprises a control system (16i) and at least one further control system (16ii), each for actuating the pressure regulating device (12), wherein the different control systems (16i, 16ii) of the control device (16) are designed according to different safety integrity levels.

The invention provides an equipment remote control method and device, equipment and a storage medium, and the method comprises the steps: carrying out the layered wake-up processing of subway maintenance equipment after receiving a remote control request, and obtaining a wake-up confirmation signal and a network delay compensation parameter; performing dynamic allocation on the maintenance equipment operation authority according to an awakening confirmation signal and a delay compensation parameter in combination with a subway safety integrity level requirement to obtain an authority level and a hierarchical control channel; aiming at maintenance operation time window limitation, performing optimization generation on the control instruction according to the authority level and the hierarchical control channel to obtain a remote control instruction and an execution timing schedule; and performing closed-loop monitoring on the execution process of the remote control instruction according to the execution timing schedule, adjusting the execution process through state estimation and anomaly detection, and starting an emergency processing mechanism when an anomaly is detected. According to the invention, accurate remote control of maintenance equipment can be realized in a complex subway tunnel network environment, and the control efficiency and safety are improved.

The application relates to the technical field of industrial safety control, and discloses a double-hand button synchronous interlocking safety control module and a control method. The module comprises two input channels, a cross fault detection circuit, a synchronism detection circuit, a redundant output unit and an internal feedback monitoring circuit. The cross fault detection circuit continuously monitors the electrical isolation state between the channels during operation, and disconnects the output when an abnormality is found. The synchronism detection circuit measures the time difference when the two input signals become valid, and only allows the output when the time difference is not greater than a preset synchronization time window. The redundant output unit is composed of at least two series-connected forced direction switching elements, and cooperates with the feedback monitoring to ensure that the safety circuit can still be cut off under single-point fault. The application improves the safety and reliability and the response speed through real-time channel isolation monitoring, pure hardware synchronization judgment and redundant output fault-tolerant design, meets the requirements of high safety integrity level, and is suitable for safety application scenarios of various double-hand button control.

A failsafe counter module includes a controller that includes a processor and memory and circuitry for failsafe counting. The failsafe counter module also includes computer readable safety rating support code stored in the memory that, when executed by the processor, causes the controller to provide an international standard level of safety rating, such as Safety Integrity Level (SIL) 3, Category (CAT) 4, Performance Level (PL) e. The failsafe counter module also includes computer readable "safety monitoring" function code stored in the memory that, when executed by the processor, causes the controller to work with a user interface to select and configure a "safety monitoring" function. The failsafe counter module is a functional safety rated device with the intended rating for SIL 3, CAT 4, PL e applications and is designed to calculate position and / or speed with an external quadrature encoder sensor that produces a waveform that allows counting of specific electrical pulses.

An automated driving system includes a security companion subsystem to access data generated at a compute subsystem of the automated driving system, which indicates a determination by the compute subsystem associated with an automated driving task. The security companion subsystem determines whether the determination is safe based on the data. The security companion subsystem is configured to realize a higher safety integrity level than the compute subsystem.

A fail-safe counter module comprises a controller including a processor and a memory and circuitry for fail-safe counting. The fail-safe counter module further comprises computer-readable safety rating support code stored in the memory which, when executed by the processor, causes the controller to provide safety rating to International Standard levels such as Safety Integrity Level (SIL) 3, Category (CAT) 4, Performance Level (PL) e. The fail-safe counter module further comprises computer-readable “Safety Monitoring” functions code stored in the memory which, when executed by the processor, causes the controller to work with a user interface to select and configure the “Safety Monitoring” functions. The fail-safe counter module is a functional safety-rated device with an expected rating for SIL 3, CAT 4, PL e applications and is engineered to calculate position and / or speed utilizing an external quadrature encoder sensor that generates waveforms which permits counting of specific electrical pulses.

The invention relates to a computer-implemented method and a control device (20) for determining a required safety integrity level (14) of a safety-related vehicle function (12) of an environment of a vehicle having a plurality of environment models of the safety-related vehicle function (12), the method comprises the following steps: providing (S1) at least one infrastructure data signal (10a) representing infrastructure data and at least one vehicle sensor data signal (10b) representing vehicle sensor data, which are each determined for a plurality of safety-related vehicle functions (12), and determining (S2) a safety integrity level (14) of the plurality of safety-related vehicle functions (12) on the basis of the provided at least one infrastructure data signal (10a) and at least one vehicle sensor data signal (10b), wherein the vehicle sensor data signal (10b) contributes with a first weight (16a) and the infrastructure data signal (10a) with a second weight (16b) to determine a required safety integrity level (14) for the plurality of safety-related vehicle functions (12).

A Steering Angle Sensor (SAS), equipped with a redundancy system to allow the bypass of any failing part, keeping all functionalities intact, while ensuring all the required safety integrity levels is provided. The proposed fail operational redundant steering angle sensor (100) has two functional blocks (70) responsible to determine the absolute angle between at least two angling sensing devices, detecting systematic failures of the devices.

The invention provides a multi-safety-level service fusion bearing vehicle integrated platform and a vehicle, and belongs to the technical field of rail transit. The system comprises an input and output device, an execution mechanism, a first host and a second host. The first host is in communication connection with the input and output device and the execution mechanism, and the second host is in communication connection with the input and output device and the execution mechanism. The first host integrates business software of each first-class subsystem of the train, and the second host integrates business software of each second-class subsystem and each third-class subsystem of the train; wherein the safety integrity levels of the first-class subsystem, the second-class subsystem and the third-class subsystem are sequentially reduced. According to the train control system, the functions of each first-class subsystem, each second-class subsystem and each third-class subsystem can be realized through two hosts, and the number of hosts occupied by each subsystem is reduced, so that the software and hardware cost of the train control system is reduced, and fusion of vehicles and signals is realized.

An automated driving system includes a security companion subsystem to access data generated at a compute subsystem of the automated driving system, which indicates a determination by the compute subsystem associated with an automated driving task. The security companion subsystem determines whether the determination is safe based on the data. The security companion subsystem is configured to realize a higher safety integrity level than the compute subsystem.

The invention discloses a vehicle system fault diagnosis method, a controller and a vehicle system.The method is applied to the vehicle system, the vehicle system comprises a master controller, a first controller and a second controller, and the method comprises the steps that the first controller sends a diagnosis request to the second controller, the second controller obtains diagnosis data according to the diagnosis request; the first controller performs fault diagnosis according to the first data and received diagnosis data sent by the second controller or the master controller; the first controller determines that the vehicle system has a fault in a case where the first data is not the same as the diagnostic data. Fault diagnosis is carried out through the first controller according to whether the collected data are the same or not, the diagnosis coverage rate of the system can be improved, faults in the system can be comprehensively detected, measures are taken under the condition that the faults exist, accidents are prevented, and it is guaranteed that the vehicle system has the high safety integrity level.