Protection Module Isolation for Common-Cause Failure in Safety Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Control devices, particularly safety controllers, face challenges in protecting against common cause failures that can eliminate redundancy and prevent safety functions, necessitating a solution that is flexible, adaptable, and easily retrofittable to existing systems.
Innovation Solution
A modular control device with a protection module that operates in a separate potential group, monitoring and confirming the functionality of other modules, thereby isolating errors and ensuring continued safe operation by providing a redundant signal or shutting down the system if errors occur due to common causes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a safety controller uses redundant channels to protect against failures, then reliability is improved, but common cause failures can still eliminate redundancy and prevent safety functions
Solution Approach 1:
The control device is divided into multiple potential groups, where each group contains modules powered by a separate potential supply. The protection module belongs to a different potential group than the modules it monitors, creating electrical isolation. This segmentation ensures that a common cause failure affecting one potential group cannot simultaneously affect the protection module and the monitored modules, preserving redundancy and safety functions.
2Reliability
If a protection module monitors functionality of other modules, then reliability is improved, but device complexity increases
Solution Approach 1:
The protection module combines multiple functions into a single integrated component: it monitors the functionality of modules in other potential groups, confirms their operational status, and provides protection against common cause failures. By merging these protection and monitoring functions into one module with a separate potential supply, the design achieves comprehensive safety without proportionally increasing overall system complexity.
3Reliability
If existing control devices are retrofitted with protection against common cause failures, then reliability is improved, but ease of manufacture deteriorates
Solution Approach 1:
The protection module is designed with a separate potential supply from the outset, creating a modular architecture that can be pre-configured and tested independently. This preliminary design approach allows the protection module to be integrated into existing control devices through standardized interfaces, simplifying retrofitting processes while maintaining protection against common cause failures.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Control device (10) with protection module for controlling a technical system. The control device (10) has a modular design with an input module (14) configured to receive an input signal describing the state of the technical system, and an output module (16) configured to output a signal that controls the technical system depending on the input signal. Furthermore, a protection module (100) is integrated into the modular design, which monitors the functionality of the input module (14) and the output module (16). Depending on the monitoring, the protection module confirms the output signal of the output module (16). Within the modular design, the input module (14) and the output module (14) form a first potential group (30), and the protection module (100) forms a second potential group (32) independent of the first.