Dual-Switch Output Control with Error-Checked Data Forwarding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In programmable logic controllers, duplicating output control for safety is necessary, but existing configurations with multiple communication paths complicate functional safety design and increase labor for authentication, with potential for incorrect output control due to data corruption when one MCU fails.
Innovation Solution
An output control apparatus with a first and second switching element connected in series, a data generation portion that adds error-detecting codes to output data, and controllers that drive the switching elements based on error detection, reducing the number of communication paths and ensuring semantic duplication equivalent to physical duplication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple communication paths are used for duplicated output control, then safety is improved, but device complexity and authentication labor increase
Solution Approach 1:
The patent merges the communication path by having the first MCU transmit communication data to the second MCU, rather than both MCUs independently receiving data from the external apparatus. This reduces the number of communication paths while maintaining safety through error detection mechanisms.
Solution Approach 2:
The first MCU acts as an intermediary that receives communication data from the external apparatus and forwards it to the second MCU. This intermediary role simplifies the communication architecture while enabling the second MCU to verify data integrity through error detection codes.
2Reliability
If multiple communication paths are used for duplicated output control, then safety is improved, but authentication labor increases
Solution Approach 1:
By merging the communication paths into a single path where the first MCU forwards data to the second MCU, the patent reduces the number of authentication relationships that need to be established and verified, thereby reducing authentication labor.
Solution Approach 2:
The second MCU receives a copy of the communication data from the first MCU and performs independent error detection on this copy. This copying mechanism allows verification without requiring separate authentication paths.
3Reliability
If error-detecting codes are added to communication data, then reliability is improved, but data transmission complexity increases
Solution Approach 1:
Error-detecting codes are added to the communication data in advance by the data generation portion before transmission to the MCUs. This preliminary action enables error detection without requiring complex real-time processing during data transmission.
Solution Approach 2:
The communication data includes self-contained error-detecting codes that enable the receiving MCUs to autonomously verify data integrity without requiring external assistance or complex verification protocols.
Data Source
AI summary
An output control apparatus that controls opening and closing between an output terminal connected to an external apparatus and a power supply terminal to which power for the external apparatus is supplied is provided. The output control apparatus includes a first switching element and a second switching element that are connected in series between the power supply terminal and the output terminal, a data generation portion that generates output data for turning on and off the first switching element and the second switching element based on a control command received from outside, a first controller that controls drive of the first switching element, and a second controller that controls drive of the second switching element.