# US 12,181,860 B2 · System and method for operating an automated machine, automated machine, and computer-program product > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,181,860 B2 - Document ID: US12181860B2 - Status: Granted - Kind: B2 - Application number: 17/615,373 - Filed: 2020-05-26 - Published: 2022-07-21 - Granted: 2024-12-31 - Earliest claimed: 2019-06-28 - Assignees: OMRON Corporation - Applicants: OMRON Corporation - Inventors: Mohammad Naser; Paolo Viviani; Mariya Yurchenko - Web page: https://patentgrep.com/patent/US12181860B2 ## CPC - G05B 19/0428: {Safety, monitoring (G05B19/0423 takes precedence)} - G05B 19/41835: {characterised by program execution} - G05B 19/0426: {Programming the control sequence} - G05B 23/0213: {Modular or universal configuration of the monitoring system, e.g. monitoring system having modules that may be combined to build monitoring program; monitoring system that can be applied to legacy systems; adaptable monitoring system; using different communication protocols} - G05B 23/0286: {Modifications to the monitored process, e.g. stopping operation or adapting control} - G05B 2219/24024: Safety, surveillance - G05B 2219/31229: Supervisor, leader, workstation controller, automation, machine control - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) ## Abstract Aspects of operating an automated machine include: a database device for storing a plurality of machine safety rules (SRj) in terms of relationships between safety-sensor devices and technical devices, in particular requirements between safety-sensor device description data (DSDi) and technical-device description data (DDi); and a control device implemented: to retrieve the safety-sensor device description data (DSDi) and the technical-device description data (DDi) associated to the technical devices and the safety-sensor devices comprised in the automated machine, to retrieve, from the database device, safety rules (SRj) corresponding to the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi), to determine as to whether the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi) comply with retrieved safety rules (SRj). ## Claims ### Claim 1 A system for operating an automated machine, wherein the automated machine comprises: a plurality of interacting technical devices, each technical device being implemented to perform an associated action, wherein each technical device has associated technical-device description data (DDi) including parameters characterizing the respective technical device; and at least one safety-sensor device implemented to detect an observable state of a space in and/or around the automated machine and implemented to detect a safety issue in said space, a malfunction of the automated machine and/or the safety-sensor device, wherein each safety-sensor device has associated safety-sensor device description data (DSDi) characterizing the respective safety-sensor device; wherein the system comprises: a database device for storing a plurality of machine safety rules (SRj) in terms of relationships between safety-sensor devices and technical devices, in particular requirements between safety-sensor device description data (DSDi) and technical-device description data (DDi); a control device implemented: to retrieve the safety-sensor device description data (DSDi) and the technical-device description data (DDi) respectively associated to the safety-sensor devices and the technical devices comprised in the automated machine; to retrieve, from the database device, safety rules (SRj) corresponding to the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi); to determine as to whether the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi) comply with the retrieved safety rules (SRj); and to generate at least one of a message, a warning, an instruction, or a report based on the determination. ### Claim 2 (depends on 1) The system of claim 1, wherein the control device is further implemented to: receive machine-description data (MDD) characterizing at least the interaction of the technical devices; and determine as to whether the retrieved safety-sensor device description data (DSDi), the technical-device description data (DDi) and the machine-description data (MDD) comply with the retrieved safety rules (SRj). ### Claim 3 (depends on 1) The system of claim 1, wherein the control device is implemented to monitor the technical devices, sensor devices which are part of the technical devices and/or the safety-sensor devices, in particular to detect a change in a state of a technical device, a sensor device, a safety-sensor device and/or an amendment in the technical-device description data (DDi) or the safety-sensor device description data (DSDi). ### Claim 4 (depends on 3) The system of claim 3, wherein a change includes a replacement, wear, age, life cycle, operational time, operational mode, operating range of the technical device, the sensor device, or the safety-sensor device. ### Claim 5 (depends on 3) The system of claim 3, wherein the control device is implemented to, in response to a detected change or amendment, determine if the applicable safety rules (SRj) is complied with. ### Claim 6 (depends on 1) The system of claim 1, further comprising a communications network, implemented to communicatively couple the control device, technical devices, sensor devices and/or the safety-sensor devices, in particular to retrieve the safety-sensor device description data (DSDi) and the technical-device description data (DDi), and transmit control data (CDj). ### Claim 7 (depends on 1) The system of claim 1, wherein the safety-sensor device description data (DSDi) and the technical-device description data (DDi) each has a predetermined format. ### Claim 8 (depends on 1) The system of claim 1, which is configured to receive the machine safety rules (SRj) in a predetermined computer readable format, to extract the machine safety rules (SRj) from safety-standard documents in text form, and to scan the machine safety rules (SRj) by means of a pattern or text recognition, and/or natural language processing. ### Claim 9 (depends on 1) The system of claim 1, wherein the control device is implemented to automatically analyze safety-standard documents and generate the safety rules (SRj) in a computer-readable predetermined format. ### Claim 10 (depends on 1) The system of claim 1, wherein determining if the retrieved safety-sensor device description data (DSDi), the technical-device description data (DDi), and machine description data (MDD) comply with the safety rules (SRj) comprises: a machine learning process, an expert system, monitoring and/or retrieving the safety-sensor device description data (DSDi), the technical-device description data (DDi), and the machine description data (MDD) from an external environment of the automated machine, and/or receiving manual input. ### Claim 11 (depends on 1) The system of claim 1, further comprising a further database device, implemented to provide expert data (EXD) for resolving conflicts between safety-sensor device description data (DSDi), technical-device description data (DDi), machine-description data (MDD) and/or safety rules (SRj); wherein the control device is implemented to: detect a conflict between the retrieved safety-sensor device description data (DSDi), the technical-device description data (DDi) and the retrieved safety rules (SRj); and to generate amended safety-sensor device description data (DSDi*), amended technical-device description data (DDi*), and/or amended machine-description data (MDD*), wherein the amended safety-sensor device description data (DSDi*), amended technical-device description data (DDi*), and amended machine-description data (MDD*) comply with the retrieved safety rules (SRj). ### Claim 12 (depends on 11) The system of claim 11, wherein the control device is implemented to: calculate a safety-performance indicator (SPI) relating to the safety of the automated machine; and to amend the safety-sensor device description data (DSDi), technical-device description data (DDi) and/or the machine-description data (MDD) such that the safety-performance indicator (SPI) is increased, wherein the higher the safety-performance indicator (SPI) becomes the more safety is improved. ### Claim 13 (depends on 1) The system of claim 1, wherein the automated machine further comprises a machine controller device implemented to generate control data (CDi) for controlling the plurality of interacting technical devices, and to receive sensor data (SD5) and/or safety sensor data (SSD6, SSD7, SSD8, SSD9) generated by the safety-sensor device and/or by a sensor device which is part of the technical device; wherein the control data (CDi) is generated as a function of the sensor data (SD5) and the safety sensor data (SSD6, SSD7, SSD8, SSD9) according to a predetermined control algorithm (CALG). ### Claim 14 (depends on 13) The system of claim 13, wherein the control device is implemented to monitor the control data (CDi), the sensor data (SDi) and the safety-sensor data (SSDi). ### Claim 15 (depends on 14) The system of claim 14, wherein the control device is implemented to generate amended safety-sensor device description data (DSDi*), amended technical-device description data (DDi*) and/or amended machine-description data (MDD*) as a function of the monitored control data (CDi), sensor data (SDi), the safety sensor data (SSDi), the machine description data (MDD) and/or the safety rules (SRj). ### Claim 16 (depends on 1) The system of claim 1, wherein at least one of the interacting technical devices is an actuator device, a robotic device, a transport device, a conveyor device and/or a sensor device. ### Claim 17 (depends on 1) The system of claim 1, wherein at least one of the safety-sensor devices includes a light-curtain device, a time-of-flight sensor device, a motion detector, a radar transmission and/or detection device, an ultrasonic transmission and/or detection device, a laser scanner device, a photoelectric device, and/or a camera device. ### Claim 18 (depends on 1) An automated machine comprising: the system according to claim 1; the plurality of interacting technical devices; and the safety-sensor devices, and wherein the automated machine operates under control performed by the system. ### Claim 19 A method for operating an automated machine, wherein the automated machine comprises: a plurality of interacting technical devices, each technical device being implemented to perform an associated action, wherein each technical device has associated technical-device description data (DDi) including parameters characterizing the respective technical device; and at least one safety-sensor device implemented to detect an observable state of a space in and/or around the automated machine and implemented to detect a safety issue in said space, a malfunction of the automated machine and/or the safety-sensor device, wherein each safety-sensor device has associated safety-sensor device description data (DSDi) characterizing the respective safety-sensor device; wherein the method comprises: retrieving, from a database storing a plurality of machine safety rules (SRj) in terms of relationships between safety-sensor devices and technical devices, in particular requirements between safety-sensor device description data (DSDi) and technical-device description data (DDi), the safety-sensor device description data (DSDi) and the technical-device description data (DDi) respectively associated to the safety-sensor devices and the technical devices comprised in the automated machine; retrieving, from the database, safety rules (SRj) corresponding to the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi); determining as to whether the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi) comply with the retrieved safety rules (SRj); and generating at least one of a message, a warning, an instruction, or a report based on the determination. ### Claim 20 A tangible, non-transitory computer-readable medium storing computer-readable instructions causing a computing system including one or more processing devices, in response to executing the computer-readable instructions, to: retrieve, from a database storing a plurality of machine safety rules (SRj) in terms of relationships between at least one safety-sensor device and at least one technical device, in particular requirements between safety-sensor device description data (DSDi) and technical-device description data (DDi), the safety-sensor device description data (DSDi) and the technical-device description data (DDi) respectively associated to safety-sensor devices and technical devices comprised in an automated machine; retrieve, from the database, safety rules (SRj) corresponding to the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi); determine as to whether the retrieved safety-sensor device description data (DSDi) and the technical-device description data (DDi) comply with the retrieved safety rules (SRj); and generate at least one of a message, a warning, an instruction, or a report based on the determination; wherein the automated machine comprises: a plurality of interacting technical devices, each technical device being implemented to perform an associated action, wherein each technical device has associated technical-device description data (DDi) including parameters characterizing the respective technical device; and at least one safety-sensor device implemented to detect an observable state of a space in and/or around the automated machine and implemented to detect a safety issue in said space, a malfunction of the automated machine and/or the safety-sensor device, wherein each safety-sensor device has associated safety-sensor device description data (DSDi) characterizing the respective safety-sensor device.