# US 2016/0364981 A1 · Remote Control Apparatus Having Emergency Stop Feature With Redundancy, and Associated Method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2016/0364981 A1
- Document ID: US20160364981A1
- Status: Published application
- Kind: A1
- Application number: 14/739,221
- Filed: 2015-06-15
- Published: 2016-12-15
- Earliest claimed: 2015-06-15
- Assignees: Eaton Corporation
- Applicants: Eaton Corporation
- Inventors: Kevin C. Towers; Ray Mihir Rao Sewlochan; Dung Chi Trinh; Andrew Darnell Dueckman
- Web page: https://patentgrep.com/patent/US20160364981A1

## CPC

- G08C 17/02: using a radio link
- B60Q 9/00: Arrangement or adaptation of signal devices not provided for in one of main groups B60Q1/00 - B60Q7/00 {, e.g. haptic signalling}
- G08C: TRANSMISSION SYSTEMS FOR MEASURED VALUES, CONTROL OR SIMILAR SIGNALS (fluid pressure transmitting systems F15B; mechanical means for transferring the output of a sensing member into a different variable G01D5/00; mechanical control systems G05G)
- B60Q: ARRANGEMENT OF SIGNALLING OR LIGHTING DEVICES, THE MOUNTING OR SUPPORTING THEREOF OR CIRCUITS THEREFOR, FOR VEHICLES IN GENERAL

## Abstract

A remote control apparatus is usable to remotely control another device and includes a base unit that is electrically connected with the device and further includes a remote control unit that is remote from the device and that is usable to control the device. The remote control unit includes an emergency stop switch that simultaneously actuates two switches that are electrically independent of one another. A primary control apparatus monitors one of the switches, and a secondary control apparatus monitors the other switch. If either switch is moved from its CLOSED state to its OPEN state, the corresponding control apparatus will take emergency actions. The primary and secondary control apparatuses additionally monitor the switches and perform the aforementioned emergency actions in the event of a fault with one of the switches or on the associated wiring.

## Claims

### Claim 1

A method of employing a remote control apparatus to remotely control the operation of a device, the remote control apparatus comprising:
a base unit that is structured to be electrically connected with the device and that comprises a base control apparatus and a base transceiver apparatus, the base control apparatus being electrically connected with the base transceiver apparatus and comprising a base processor and a base storage;
a remote control unit that is structured to be remote from the base unit and that comprises:
a remote transceiver apparatus that is structured to be in one of wireless and wired communication with the base unit;
an emergency stop switch having an actuator and further having a first switch and a second switch that are each movable between an OPEN state and a CLOSED state, the first and second switches being together substantially simultaneously movable by the actuator between the OPEN state and the CLOSED state;
a primary control apparatus electrically connected with the first switch and with the remote transceiver apparatus and comprising a first processor and a first storage; and
a secondary control apparatus electrically connected with the second switch and with the remote transceiver apparatus and comprising a second processor and a second storage;
the first storage having stored therein a set of first instructions which are executable on the first processor and which cause the primary control apparatus to perform a number of first operations comprising detecting that the first switch has moved from the CLOSED state to the OPEN state and, responsive thereto, sending to the remote transceiver apparatus an emergency signal for communication to the base transceiver apparatus and then initiating the disablement of at least a portion of the remote transceiver apparatus;
the second storage having stored therein a set of second instructions which are executable on the second processor and which cause the secondary control apparatus to perform a number of second operations comprising determining that the second switch has moved from the CLOSED state to the OPEN state and, responsive thereto, and after the expiration of a predetermined period of time after the deter mining, initiating the disablement of at least a portion of the remote transceiver apparatus; and
the base storage having stored therein a set of base instructions which are executable on the base processor and which cause the base control apparatus to perform a number of base operations comprising detecting one of the emergency signal and an absence of communication with the remote transceiver apparatus and, responsive thereto, instructing the device to go into a predetermined operational state.

### Claim 2 (depends on 1)

The method of claim 1 wherein the primary control apparatus is structured to provide electrical power to the secondary control apparatus, and wherein the second control apparatus is structured to initiate the disablement of at least a portion of the remote transceiver apparatus responsive to a loss of electrical power to the secondary control apparatus.

### Claim 3 (depends on 1)

The method of claim 1 wherein the initiating of the disablement of at least a portion of the remote transceiver apparatus by the secondary control apparatus is dependent upon the secondary control apparatus being in an armed state, wherein the number of first operations further comprise communicating to the secondary control apparatus an ARM signal, and wherein the number of second operations further comprise, responsive to receiving the ARM signal, placing the secondary control apparatus in the armed state and retaining the secondary control apparatus in the armed state until the remote control unit is reset.

### Claim 4 (depends on 1)

The method of claim 1 wherein the initiating of the disablement of at least a portion of the remote transceiver apparatus by the secondary control apparatus is dependent upon the secondary control apparatus being in an armed state, and wherein the secondary control apparatus is configurable to be in either of the following two states:
capable of being placed in the armed state; and
always being in the armed state.

### Claim 5 (depends on 1)

The method of claim 1 wherein the number of second operations further comprise communicating to the primary control apparatus at least one of:
whether the second switch is in the OPEN state or the CLOSED state; and
whether an ENABLE signal from the secondary control apparatus to the remote transceiver apparatus has been asserted or de-asserted.

### Claim 6 (depends on 1)

The method of claim 1 wherein:
the first switch includes a first leg and a second leg that are electrically connected together in the CLOSED state of the first switch and that are electrically disconnected in the OPEN state of the first switch;
the primary control apparatus has:
a first connection that is electrically connected with the first leg,
a second connection that is electrically connected with the second leg, and
a third connection that is electrically connected with one of the first leg and the second leg; and
the number of first operations further comprise:
applying a voltage to one of the first connection and the second connection and measuring the voltage of the third connection,
applying a voltage to the other of the first connection and the second connection and again measuring the voltage of the third connection, and
determining from the measuring of the voltage and the again measuring of the voltage whether the first switch is in the OPEN state or the CLOSED state.

### Claim 7 (depends on 6)

The method of claim 6 wherein the number of first operations further comprise determining from the measuring of the voltage and the again measuring of the voltage that a fault exists in the remote control unit and, responsive thereto, sending to the remote transceiver apparatus an emergency signal for communication to the base transceiver apparatus and then initiating the disablement of at least a portion of the remote transceiver apparatus.

### Claim 8 (depends on 6)

The method of claim 6 wherein:
the second switch includes another first leg and another second leg that are electrically connected together in the CLOSED state of the second switch and that are electrically disconnected in the OPEN state of the second switch;
the secondary control apparatus has:
another first connection that is electrically connected with the another first leg,
another second connection that is electrically connected with the another second leg, and
another a third connection that is electrically connected with one of the another first leg and the another second leg; and
the number of second operations further comprise:
applying a voltage to one of the another first connection and the another second connection and measuring the voltage of the another third connection,
applying a voltage to the other of the another first connection and the another second connection and again measuring the voltage of the another third connection, and
determining from the measuring of the voltage of the another third connection and the again measuring of the voltage of the another third connection whether the first switch is in the OPEN state or the CLOSED state.

### Claim 9 (depends on 8)

The method of claim 8 wherein the number of second operations further comprise determining from the measuring of the voltage of the another third connection and the again measuring of the voltage of the another third connection that a fault exists in the remote control unit and, responsive thereto, initiating the disablement of at least a portion of the remote transceiver apparatus.

### Claim 10 (depends on 1)

A remote control apparatus structured to perform the number of first, second, and base operations of claim 1 in remotely controlling the operation of a device, the remote control apparatus comprising:
a base unit that is structured to be electrically connected with the device and that comprises a base control apparatus and a base transceiver apparatus, the base control apparatus being electrically connected with the base transceiver apparatus and comprising a base processor and a base storage that has stored therein a set of base instructions for execution on the base processor to cause the base control apparatus to perform the number of base operations;
a remote control unit that is structured to be remote from the base unit and that comprises:
a remote transceiver apparatus that is structured to be in one of wireless and wired communication with the base unit;
an emergency stop switch having an actuator and further having a first switch and a second switch that are each movable between an OPEN state and a CLOSED state, the first and second switches being together substantially simultaneously movable by the actuator between the OPEN state and the CLOSED state;
a primary control apparatus electrically connected with the first switch and with the remote transceiver apparatus and comprising a first processor and a first storage that has stored therein a set of first instructions for execution on the first processor to cause the primary control apparatus to perform the number of first operations; and
a secondary control apparatus electrically connected with the second switch and with the remote transceiver apparatus and comprising a second processor and a second storage that has stored therein a set of second instructions for execution on the second processor to cause the secondary control apparatus to perform the number of second operations.

### Claim 11 (depends on 10)

A combination comprising the remote control apparatus of claim 10, and further comprising a device with which the base unit is operatively electrically connected.
