Energy storage method and system to power functional safety diagnostic subsystem
AssigneeRockwell Automation Asia Pacific Business Ctr. Pte., Ltd.
InventorKian Kiat Koh
Life of this patent
Estimating the term…
Abstract
Disclosed is an industrial automation control system, method and apparatus and method of operation including a diagnostic domain subsystem powered by an energy storage subsystem. According to an exemplary embodiment, a diagnostic domain subsystem is configured to perform diagnostics of one or more conditions associated with a functional domain subsystem, where the energy storage subsystem powers the diagnostic subsystem during a normal mode of operation and the energy storage subsystem powers the diagnostic domain and functional domain during a power failure mode and/or power cycling mode.
Claims25
An industrial automation control system comprising:
- a power supply subsystem including a first output voltage rail and a second output voltage rail;
- a functional domain subsystem including processor circuitry, volatile memory and non-volatile memory configured to monitor and/or control one or more remote devices operatively associated with the industrial automation control system, and the functional domain subsystem operatively powered by the first output voltage rail during a normal mode of operation;
- a diagnostic domain subsystem configured to perform diagnostics of one or more conditions associated with the functional domain subsystem;
- and
- an energy storage subsystem operatively connected to the second output voltage rail and configured to store energy supplied from the second output voltage rail during the normal mode of operation and operatively power the diagnostic subsystem using the stored energy during the normal mode of operation, and the energy storage subsystem configured to operatively power the diagnostic subsystem and functional domain subsystem during a control system operation associated with a failure of one or more of the first output voltage rail and second output voltage rail due to one or more of powering down the industrial automation control system, a fault associated with the first output voltage rail, and a fault associated with the second output voltage rail.
An industrial automation control system implemented method for powering a diagnostic domain subsystem associated with the industrial automation control system, the industrial automation control system including a power supply subsystem including a first output voltage rail and a second output voltage rail, a functional domain subsystem operatively powered by the first output voltage rail and configured to monitor and/or control one or more remote device associated with the industrial automation control system, a diagnostic domain subsystem configured to perform diagnostics of one or more conditions associated with the functional domain subsystem, and an energy storage subsystem operatively connected to the second output voltage rail and configured to store energy from the second voltage rail and operatively power the diagnostic domain subsystem during a normal mode of operation and operatively power the functional domain subsystem and diagnostic domain subsystem during a control system operation associated with a failure of one or more of powering down the industrial automation control system, a fault associated with the first output voltage rail, and a fault associated with the second output voltage rail, the method comprising:
- a) monitoring an output voltage of the energy storage subsystem;
- b) determining if the output voltage is within a predetermined range;
- and
- c) if the output voltage is within the predetermined range, selectably powering the diagnostic domain subsystem.
An integrated functional safety controller comprising:
- a main module comprising:
- a first processor and associated circuitry;
- a second processor and associated circuitry;
- volatile memory;
- non-volatile memory;
- and
- an energy storage subsystem, the main module configured to provide a functional domain subsystem to monitor and/or control one or more remote devices, and provide a diagnostic domain subsystem configured to monitor and store in the non-volatile memory one or more conditions associated with the functional domain subsystem;
- a backplane operatively associated with the main module, the backplane configured to provide a first output voltage rail and a second output voltage rail operatively associated with powering the main module,
- wherein the main module and backplane are configured to power the functional domain subsystem by the first output voltage rail during a normal mode of operation, and the energy storage subsystem is operatively connected to the second output voltage rail and stores energy supplied from the second voltage rail during the normal mode of operation and operatively power the diagnostic subsystem using the stored energy during the normal mode of operation, and the energy storage subsystem operatively powers the diagnostic subsystem and functional domain subsystem during a control system operation associated with a failure of one or both of the first output voltage rail and the second output voltage rail due to one or more of powering down the controller, a fault associated with the first output voltage rail, and a fault associated with the second output voltage rail.
Dependencies are inferred from the claim text.