# US 10,503,137 B2 · Safety module for an automation system, method for operating a safety module in an automation system and automation system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,503,137 B2 - Document ID: US10503137B2 - Status: Granted - Kind: B2 - Application number: 15/805,580 - Filed: 2017-11-07 - Published: 2018-05-24 - Granted: 2019-12-10 - Earliest claimed: 2016-11-21 - Assignees: Festo AG & Co. - Applicants: FESTO AG & Co. KG - Inventors: Martin Gehrke; Martin Maier; Roland Kalberer; Andreas Herzog; Ralf Forcht - Web page: https://patentgrep.com/patent/US10503137B2 ## CPC - G05B 9/02: electric - G05B 19/0428: {Safety, monitoring (G05B19/0423 takes precedence)} - G05B 2219/24024: Safety, surveillance - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) ## Abstract A safety module for an automation system including a communication interface, which is configured for a signal-transmitting connection to a communication system including an output interface, which is configured for a signal-transmitting connection to consumers, which can be attached downstream, and including a processing device which is connected to both interfaces and is configured for processing communication signals from the communication interface and for providing processing results as output signals at the output interface. The processing device is configured such that a safety-related output signal is provided at the output interface if a safety signal, which is contained in a communication signal, is present, and if at least two data records, which are respectively provided in a communication signal, are encoded differently and are directed at the processing device, conform with one another. ## Claims ### Claim 1 A safety module for an automation system, comprising a communication interface which is configured for a signal-transmitting connection to a communication system, comprising an output interface which is configured for an electrical connection to consumers which can be attached downstream, and comprising a processing device which is connected to both interfaces and is configured for processing communication signals from the communication interface and for providing processing results as output signals at the output interface, wherein the processing device is configured such that a safety-related output signal is provided at the output interface if a safety signal, which is contained in a communication signal, is present, and if at least two data records which are respectively provided in a communication signal, are encoded differently and are directed at the processing device, conform with one another. ### Claim 2 (depends on 1) The safety module according to claim 1, wherein the processing device is configured such that the provision of the at least one safety-related output signal at the output interface requires a decoding of a first set of parameters from a first data record, a decoding of a second set of parameters from a second data record and a conformity between the two sets of parameters. ### Claim 3 (depends on 2) The safety module according to claim 2, wherein the processing device is configured such that the provision of the safety-related output signal at the output interface requires a conformity of the first and second set of parameters with component parameters which are stored in a memory device of the processing device. ### Claim 4 (depends on 2) The safety module according to claim 2, wherein the processing device is configured such that the provision of the at least one safety-related output signal at the output interface requires a decoding of address information from the first data record and/or the second data record as well as a conformity of this address information with address information of an addressing means associated with the processing device. ### Claim 5 (depends on 4) The safety module according to claim 4, wherein the processing device is configured such that the decoding of the address information from the first data record and/or the second data record is executed before the conformity of this address information with address information of an addressing means associated with the processing device is executed. ### Claim 6 (depends on 1) An automation system for the safety-related control of at least one safety module, comprising a superordinated control which comprises an interface of a communication system to which at least one subordinated control is connected, the subordinated control comprising a safety module as well as a plurality of consumers connected to the safety module via an output interface, and also with a safety control which is associated with the superordinated control and is configured to provide a safety signal at the safety module via the superordinated control, wherein the safety module is configured according to claim 1. ### Claim 7 A method for operating a safety module in an automation system, the method comprising: transferring a first data record written according to a first encoding, from a superordinated control to a safety module; transferring a second data record written according to a second encoding, from the superordinated control and/or a safety control, associated with the superordinated control to the safety module; decoding and comparing the two data records in a processing device of the safety module; transferring a safety signal from the superordinated control to the safety module; checking address information contained in the first or second data record against address information imprinted on the safety module; processing the safety signal in the processing device into at least one safety-related output signal; and providing the at least one safety-related output signal from the safety module to an output interface, to which at least one consumer is attached, if the address information contained in one of the two data records conforms with address information imprinted on the safety module and with the two data records. ### Claim 8 (depends on 7) The method according to claim 7, wherein the processing device provides the safety-related output signal to the output interface if the first data record and the second data record conforms with component parameters which are stored in a storage device of the processing device. ### Claim 9 (depends on 7) The method according to claim 7, wherein the processing device provides the safety-related output signal to the output interface if address information from the first data record and/or the second data record has been decoded in the processing device and if this address information conforms with address information of an addressing means associated with the processing device. ### Claim 10 (depends on 7) The method according to claim 7, wherein the processing device provides the safety-related output signal at least one group of components which are connected to the output interface if the first data record and the second data record contain in a conforming manner at least one group of parameters which determines at least one zone-bordering group, and if the safety signal of the superordinated control is directed at the group of components. ### Claim 11 (depends on 7) An automation system for the safety-related control of at least one safety module, comprising a superordinated control which comprises an interface of a communication system to which at least one subordinated control is connected, the subordinated control comprising a safety module as well as a plurality of consumers connected to the safety module via an output interface, and also with a safety control which is associated with the superordinated control and is configured to provide a safety signal at the safety module via the superordinated control, wherein the safety module is configured to implement the method according to claim 7.