Safety Command Gating for Frequently Updated Control Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing system control technologies lack effective mechanisms to ensure safe control values are provided to systems under control, leading to potential unsafe operations and requiring full safety retesting with each control system update.
Innovation Solution
The implementation of a safety-enabled control system that segregates the safety system from the control system, allowing for safe control values to be generated and validated before being applied to the system under control, thereby preventing unsafe control values from reaching the system under control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the control system is updated frequently to improve functionality and adaptability, then the system becomes more versatile and responsive to new requirements, but the safety of the system under control is compromised because existing control technologies lack effective mechanisms to ensure safe control values
Solution Approach 1:
The patent divides the control system into two independent segments: a control system that generates control values and a safety system that validates them. This segmentation allows the control system to be updated frequently without affecting the safety system, resolving the contradiction between adaptability and safety by enabling independent evolution of each component.
Solution Approach 2:
The patent introduces a safety system as an intermediary component between the control system and the system under control. This intermediary validates control values before they reach the system under control, ensuring safety even when the control system is updated frequently. The safety system acts as a mediator that filters and verifies control commands.
2Reliability
If safety validation is integrated into the control system updates, then safety can be maintained, but the complexity of the control system increases and frequent updates become more difficult
Solution Approach 1:
By segmenting the safety validation functionality into a separate safety system rather than integrating it into the control system, the patent reduces the complexity of the control system itself. The safety system operates independently with its own validation logic, preventing complexity from accumulating in the control system while maintaining safety validation capabilities.
Solution Approach 2:
The patent extracts the safety validation function from the control system and places it in a separate safety system. This extraction removes the burden of safety validation complexity from the control system, allowing the control system to remain relatively simple while safety validation is handled by the dedicated safety system.
3Reliability
If full safety retesting is performed with each control system update to ensure safety, then safety reliability is maintained, but the time and resources required for updates increase significantly
Solution Approach 1:
The patent implements preliminary safety validation by the safety system before control values are applied to the system under control. This preliminary action of validating control values against safety criteria eliminates the need for full safety retesting after each control system update, as the safety system continuously ensures safety independently of control system changes.
Solution Approach 2:
The safety system provides continuous feedback on the safety status of control values. This feedback mechanism allows the system to maintain safety assurance without repeated full retesting, as the safety system actively monitors and validates control values in real-time, providing ongoing safety confirmation rather than periodic retesting.
Data Source
AI summary
Systems and methods for safety-enabled control. Input values provided to a control system can be validated. Command gating can be performed for control values provided by the control system. Validation of input values and command gating for control values can be performed in accordance with respective validation windows. Validation windows can be dynamically adjusted based on data received via a sensor or interface.