| 摘要 |
The invention relates to a device (10) for controlling safety-critical processes (28, 30, 32), comprising at least one protected control unit (12, 14) for controlling the safety-critical process (28, 30, 32) and at least two protected signal devices (18, 20, 22, 24), which are connected to the safety-critical processes (28, 30, 32) by input-output channels (26). The protected control unit(s) (12, 14) and the protected signal devices (18, 20, 22, 24) are connected to a common field bus (16). The protected signal devices (18, 20, 22, 24) communicate with the protected control unit (12, 14) during the control mode of the device (10), but do not communicate with one another. The invention is characterised in that the protected signal devices (18, 20, 22, 24) have evaluation elements (52a, 52b) for evaluating an error message (92) which is transmitted universally via the field bus (16), in addition to switching elements (54a, 54b) which, in the presence of an error message (92) which has been evaluated as relevant, independently restore the safety-critical process (28, 30, 32) to a safe condition.
|
