# US 2018/0024522 A1 · Method and system for safety-relevant input to a control system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0024522 A1 - Document ID: US20180024522A1 - Status: Published application - Kind: A1 - Application number: 15/716,528 - Filed: 2017-09-27 - Published: 2018-01-25 - Earliest claimed: 2015-07-01 - Assignees: ABB AB - Applicants: ABB AG - Inventors: Yauheni Veryha; Heinrich Neupaertl; Thomas Ewald - Web page: https://patentgrep.com/patent/US20180024522A1 ## CPC - G05B 19/058: {Safety, monitoring} - G05B 19/0428: {Safety, monitoring (G05B19/0423 takes precedence)} - G05B 2219/13023: Convert natural language, graphic to coded states, input - G05B 2219/13144: GUI graphical user interface, icon, function bloc editor, OI operator interface - G05B 2219/14006: Safety, monitoring in general - G05B 2219/15123: Plc with build in console, I-O and communication - G05B 2219/24165: Use codes to activate features of controller - G05B: CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS (systems for controlling or regulating non-electric variables G05D; systems for regulating electric or magnetic variables G05F; control devices or systems insofar as characterised by mechanical features only G05G) ## Abstract A system and a method for safety relevant input to a control system, the control system including a PLC which includes a non-safety control module for controlling non-safety processes, and a safety control module for controlling functional safety of processes, the system further including an operator panel for user selection of safety-related object input, wherein the system includes two communication paths between the operator panel and the safety control module, that each of the communication paths uses a different communication protocol, that each communication path goes through the non-safety control module to and from the safety control module, that the first communication path transfers object code and the second communication path transfers masked object code. ## Claims ### Claim 1 A method for safety-relevant input to a control system, the control system including a non-safety control module configured to control non-safety processes, and a safety control module configured to control functional safety of processes, the method comprising, using an operator panel for user selection of safety-related object input: selecting a safety-related object on the operator panel; transferring object code and masked object code between the operator panel and the safety control module in both directions; using two different communication paths, a first communication path for the object code and a second communication path for the masked object code, each communication path going through the non-safety control module; and using reference code values stored on the safety control module for verifying for correctness the object code and the masked object code received in the safety control module. ### Claim 2 (depends on 1) The method of claim 1, wherein each communication path uses a different communication protocol. ### Claim 3 (depends on 2) The method of claim 2, wherein each communication path is built on the same physical layer. ### Claim 4 (depends on 2) The method of claim 2, wherein each communication path is built on different physical layers. ### Claim 5 (depends on 2) The method of claim 2, wherein each communication path is not realized as a safety communication path. ### Claim 6 (depends on 1) The method of claim 1, wherein the safety control module includes a first and a second safety CPU, which build a 1oo2 safety architecture. ### Claim 7 (depends on 1) The method of claim 1, further comprising: comparing the masked object code is demasked in the safety control module and the reference code values with received object code and masked object code after demasking; and detecting an error in case the received codes do not correspond to the reference code value. ### Claim 8 A system for safety relevant input to a control system, the control system including a PLC including a non-safety control module configured to control non-safety processes, and a safety control module configured to control functional safety of processes, the system comprising: an operator panel configured for user selection of safety-related object input; a first and second communication paths between the operator panel and the safety control module, wherein each of the communication paths uses a different communication protocol, wherein each communication path goes through the non-safety control module to and from the safety control module, wherein the first communication path (2, 5) transfers object code and the second communication path transfers masked object code. ### Claim 9 (depends on 8) The system of claim 8, wherein both communication paths are implemented on the same physical layer. ### Claim 10 (depends on 8) The system of claim 8, wherein the safety control module includes a storage module for storing pre-defined code reference values for each user selection. ### Claim 11 (depends on 10) The system of claim 10, wherein the safety control module includes a program memory for storing a safety application program, which program is configured to compare the user selection received in the safety control module from the operator panel with the stored code reference values and to detect an error in case the received user selection does not correspond to the stored code reference value. ### Claim 12 (depends on 11) The system of claim 11, wherein the safety application program is configured to demask the incoming masked object code and compare the demasked object code with the code and with the stored code reference values and to detect an error in case the demasked object code does not correspond to the code and stored code reference value. ### Claim 13 (depends on 8) The system of claim 8, wherein the safety control module includes a first and a second safety CPU which build a 1oo2 safety architecture. ### Claim 14 (depends on 8) The system of claim 8, wherein more than one operator panels are connected to the control system. ### Claim 15 (depends on 8) The system of claim 8, wherein more than one control system is connected to the operator panel.