GB2038033A - Microprocessor fault protection - Google Patents

Microprocessor fault protection Download PDF

Info

Publication number
GB2038033A
GB2038033A GB7939671A GB7939671A GB2038033A GB 2038033 A GB2038033 A GB 2038033A GB 7939671 A GB7939671 A GB 7939671A GB 7939671 A GB7939671 A GB 7939671A GB 2038033 A GB2038033 A GB 2038033A
Authority
GB
United Kingdom
Prior art keywords
transistor
capacitor
microprocessor
microprocessor computer
resistor
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
GB7939671A
Other versions
GB2038033B (en
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NSM Apparatebau GmbH and Co KG
Original Assignee
NSM Apparatebau GmbH and Co KG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NSM Apparatebau GmbH and Co KG filed Critical NSM Apparatebau GmbH and Co KG
Publication of GB2038033A publication Critical patent/GB2038033A/en
Application granted granted Critical
Publication of GB2038033B publication Critical patent/GB2038033B/en
Expired legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/0703Error or fault processing not based on redundancy, i.e. by taking additional measures to deal with the error or fault not making use of redundancy in operation, in hardware, or in data representation
    • G06F11/0751Error or fault detection not based on redundancy
    • G06F11/0754Error or fault detection not based on redundancy by exceeding limits
    • G06F11/0757Error or fault detection not based on redundancy by exceeding limits by exceeding a time limit, i.e. time-out, e.g. watchdogs
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/04Programme control other than numerical control, i.e. in sequence controllers or logic controllers
    • G05B19/042Programme control other than numerical control, i.e. in sequence controllers or logic controllers using digital processors
    • G05B19/0423Input/output
    • G05B19/0425Safety, monitoring
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/004Error avoidance

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Quality & Reliability (AREA)
  • General Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Electronic Switches (AREA)
  • Emergency Protection Circuit Devices (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)

Abstract

A circuit arrangement incorporates a microprocessor for controlling, e.g. a vending machine. Outputs (5, 11, 15) of the microprocessor (2) are connected to intermediate circuits (6, 12, 16) each associated with consumer devices controlled via their respective outputs (7, 13, 17). A fault protective circuit is connected to an output (19) of the microprocessor (2) so that, in the event of a fault in the microprocessor (2), the various intermediate circuits (6, 12, 16) are disconnected via control leads (19a, 19b, 19c). <IMAGE>

Description

SPECIFICATION A circuit arrangement incorporating a microprocessor computer for controlling a consumer device The present invention relates to a circuit arrangement incorporating a microprocessor computer for controlling a consumer device or devices in which the outputs of the microprocessor computer are connected via corresponding intermediate components to the consumer device(s).
In such a known arrangement the consumer devices such as e.g. motors, relays or lamps, are controlled, via a corresponding intermediate component such as e.g. amplifiers, intermediate storage means or decoders, by a microprocessor computer, which may also be replaced by a microcomputer, a minicomputer or an integrated circuit. With the occurrence of a fault in such a circuit, which generally occurs in the microprocessor computer itself, the consumer devices are uncontrolled which may lead to serious sequence faults, for example, burnt-out magnets and motors, nonsensical lighting up of indicating lamps and, especially in coin feed gaming devices promising a-win, an undesired emptying of the coin stacking tubes. These sequence faults involve a considerable expenditure in removing them.
Therefore, the object of the invention is in a simple manner to prevent the aforesaid sequence faults in a circuit arrangement incorporating a microprocessor computer.
According to the present invention there is provided a circuit arrangement incorporating a microprocessor computer for controlling a consumer device or devices in which the outputs of the microprocessor computer are connected to the consumer(s) via a corresponding intermediate components, wherein all of the outputs of the microprocessor computer are adapted to be cut out by a fault protective circuit incorporated in a common control lead to intermediate components of the individual consumer(s).
In further development of the invention the fault protective circuit comprises a first capacitor connected to the base of a transistor, the emitter of which is connected to the negative rail and the collector of which, via resistor, is connected to the positive rail of the supply voltage, a second capacitor connected in parallel with the transistor and the resistor. A connecting lead, from the junction between the transistor and the resistor, leads to the second capacitor and to a Schmitt trigger, and a diode is connected from the negative rail of the base of the transistor.
When switching on the fault protective circuit when the second capacitor is still discharged, in order to provide a voltage at the input of the Schmitt trigger which is immediately high enough and thereby to prevent the occurrence of switching problems, the second capacitor is preferably located between the positive lead of the supply voltage and the connecting lead to the Schmitt trigger.
When the microprocessor computer operates satisfactorily, it produces a permanent train of pulses which are presented to the fault protective circuit via a control lead. Only with the present of these pulses at the fault protective circuit are all of the outputs of the microprocessor computer switched on. The microprocessor computer tests as to whether the individual functions are in order, and if all individual functions are operating satisfactorily, then a pulse is produced. Repeated testing of the individual functions hence produces a series of pulses. Thus, if a fault occurs in the microprocessor computer, then no more pulses are applied to the fault protective circuit whereby this immediately blocks all the outputs of the microprocessor computer.This ensures that no sequence faults can occur at the consumer devices which would otherwise cause considerable damage.
The invention will be described further, by way of example, with reference to the accompanying drawings, in which:~ Fig. 1 is a circuit diagram in accordance with an embodiment of the invention; and Fig. 2 illustrates the different voltage waveforms for the circuit of Fig. 1.
A microprocessor computer 2, which is connected to a positive rail 3 and a negative rail 4 of the supply voltage, receives its instrucrions via inputs 1. An output 5 of the microprocessor computer 2 leads to an intermediate storage means 6, from which several leads 7 lead to consumers, not shown individually. An output lead 7a of the intermediate storage means 6 is connected via a resistor 8 to the base of a transistor 9, the emitter of which is connected to the negative rail 4 of the supply voltage and the collector of which is connected to an electromagnet 10 which is connected to the positive rail 3 of the supply voltage. An output 1 1 of the microprocessor computer 2 leads to an amplifier 12 from which several leads 13 lead to consumers, not shown individually. An output lead 1 3a from amplifier 12 is connected to a motor 14.
Moreover, an output 1 5 of the microprocessor computer 2 leads to a decoder 16 from which also several leads 17 extend to consumers, not shown individually. An output lead 1 7a from decoder 1 6 is connected to a lamp 18. It is, of course, also possible for further outputs to emanate from the microprocessor computer 2 and which, via corresponding intermediate components, control further consumers.
Further, a control lead 19 from the microprocessor computer 2 is connected to a fault protection circuit 20 which is connected by means of corresponding leads 1 9a, 1 9b, 1 9c to the intermediate storage means 6, the amplifier 12, and the decoder 16, respectively. The circuit 20 is comprised of a first capacitor 22 connected to the base of a transistor 21 , the emitter of which is connected to the negative rail 4 and the collector of which is connected to the positive rail 3 via a resistor 23. From the negative rail 4 a lead 24 incorporating a diode 25 leads to the junction 26 between the capacitor 22 and the base of the transistor 21.Parallel to the transistor 21 and the resistor 23 there is connected a lead 27 incorporating a second capacitor 28 between the negative rail 4 and the positive rail 3 of the supply voltage, From the junction 29 between the transistor 21 and the resistor 23 there extends a connecting lead 30 to the junction 31 of the lead 27, whereby the junction 31 is connected to a Schmitt trigger 32 from which the control lead 19 is led to the intermediate components 6, 1 2, 1 6.
When there is no fault in the microprocessor computer 2, a voltage pulse U5 (see Fig.2), appears regularly on the control lead 19 which is connected to the base of the transistor 21, via the capacitor 22, causing the transistor 21 to be pulse-conductive. This causes the second capacitor 28 to be pulse-conductive to its supply voltage.Thus, if the collector voltage Uc of the transistor 21 (see Fig. 2) is low enough, i.e. the collector voltage U, of the transistor 21 is lower than the switching threshold voltage U5 of the Schmitt trigger 32, then the output voltage Us is switched on at the Schmitt trigger 32, so that the intermediate components 6, 12, 1 6 and hence the consumers 10, 14, 1 8 are connected in circuit.
The diode 25 prevents the pulse at the base of the transistor 21 from being rectified whereby the transistor 21 is permanently conducting.
If, on the other hand, a fault occurs in the microprocessor computer 2, then the voltage pulse U5 no longer appears at the capacitor 22, whereby the transistor 21 is no longer pulseconductive, hence, the capacitor 28 is discharged via the resistor 23. At the same time the voltage at the input of the Schmitt trigger 32 rises, i.e. the collector voltage Uz of the transistor 21 exceeds the circuit breaking threshold voltage Uau of the Schmitt trigger 32 and hence the output voltage Us thereof to zero, so that the intermediate components 6, 12, 1 6, and hence the consumers 10, 14, 18 are switched off.

Claims (4)

1. A circuit arrangement incorporating a microprocessor computer for controlling a consumer device or devices in which the outputs of the microprocessor computer are connected to the consumer(s) via corresponding intermediate components, wherein all of the outputs of the microprocessor computer are adapted to be cut out by a fault protective circuit incorporated in a common control lead to intermediate components of the individual consumer(s).
2. A circuit arrangement according to claim 1 in which the fault protective circuit is comprised of a first capacitor connected to the base of a transistor the emitter of which is connected to the negative rail of the supply voltage and the collector of which is connected via a resistor to the positive rail of the supply voltage, a second capacitor connected in parallel with the transistor and the resistor a connecting lead, branching off from the junction between the transistor and the resistor, which leads, via a junction to the second capacitor, and to a Schmitt trigger, and a diode connected from the negative rail to the base of the transistor.
3. A circuit arrangement according to claim 2, in which the second capacitor is located between the positive rail of the supply voltage arid the junction of the connecting lead to the Schmitt trigger.
4. A circuit arrangement substantially as herein described with reference to and as illustrated in the accompanying drawings.
GB7939671A 1978-11-27 1979-11-16 Microprocessor fault protection Expired GB2038033B (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE19782851190 DE2851190C3 (en) 1978-11-27 1978-11-27 Fault protection arrangement

Publications (2)

Publication Number Publication Date
GB2038033A true GB2038033A (en) 1980-07-16
GB2038033B GB2038033B (en) 1983-02-09

Family

ID=6055626

Family Applications (1)

Application Number Title Priority Date Filing Date
GB7939671A Expired GB2038033B (en) 1978-11-27 1979-11-16 Microprocessor fault protection

Country Status (5)

Country Link
CH (1) CH649177A5 (en)
DE (1) DE2851190C3 (en)
ES (1) ES486232A1 (en)
GB (1) GB2038033B (en)
NL (1) NL7908537A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0062871A1 (en) * 1981-04-09 1982-10-20 Westinghouse Electric Corporation Load management terminal
FR2512978A1 (en) * 1981-09-14 1983-03-18 United Technologies Corp RHYTHM CIRCUIT CONTROLLER OF SEQUENCE
WO1985001597A1 (en) * 1983-10-03 1985-04-11 Johnson Service Company Controller for combustible fuel burner
GB2155208A (en) * 1984-03-10 1985-09-18 Lucas Ind Plc Control system
GB2200002A (en) * 1986-12-23 1988-07-20 Qualter Hall & Co Limited Microprocessor-based controller especially for hazardous environment
EP0396355A2 (en) * 1989-05-04 1990-11-07 VOLEX GROUP plc Information handling and control systems
EP0467512A2 (en) * 1990-05-21 1992-01-22 Nippondenso Co., Ltd. Communication system for vehicle
EP0701207A1 (en) * 1994-09-08 1996-03-13 Lucas Industries Public Limited Company Failure detection mechanism for microcontroller based control system

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5324915A (en) * 1990-01-18 1994-06-28 Honeywell Inc. Microcontroller controlled input protection

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0062871A1 (en) * 1981-04-09 1982-10-20 Westinghouse Electric Corporation Load management terminal
FR2512978A1 (en) * 1981-09-14 1983-03-18 United Technologies Corp RHYTHM CIRCUIT CONTROLLER OF SEQUENCE
WO1985001597A1 (en) * 1983-10-03 1985-04-11 Johnson Service Company Controller for combustible fuel burner
GB2161295A (en) * 1983-10-03 1986-01-08 Johnson Service Co Controller for combustible fuel burner
GB2155208A (en) * 1984-03-10 1985-09-18 Lucas Ind Plc Control system
GB2200002B (en) * 1986-12-23 1991-09-11 Qualter Hall & Co Limited Microprocessor-based controllers especially for hazardous environment
GB2200002A (en) * 1986-12-23 1988-07-20 Qualter Hall & Co Limited Microprocessor-based controller especially for hazardous environment
EP0396355A2 (en) * 1989-05-04 1990-11-07 VOLEX GROUP plc Information handling and control systems
EP0396355A3 (en) * 1989-05-04 1993-06-16 VOLEX GROUP plc Information handling and control systems
EP0467512A2 (en) * 1990-05-21 1992-01-22 Nippondenso Co., Ltd. Communication system for vehicle
EP0467512A3 (en) * 1990-05-21 1993-04-28 Nippondenso Co., Ltd. Communication system for vehicle
US5486817A (en) * 1990-05-21 1996-01-23 Nippondenso Co., Ltd. Communication system for vehicle control system having presettable initial state
EP0701207A1 (en) * 1994-09-08 1996-03-13 Lucas Industries Public Limited Company Failure detection mechanism for microcontroller based control system

Also Published As

Publication number Publication date
CH649177A5 (en) 1985-04-30
GB2038033B (en) 1983-02-09
DE2851190B2 (en) 1980-09-11
DE2851190C3 (en) 1981-06-11
NL7908537A (en) 1980-05-29
ES486232A1 (en) 1980-06-16
DE2851190A1 (en) 1980-05-29

Similar Documents

Publication Publication Date Title
US3745546A (en) Controller output circuit
DE102008019606A1 (en) Vehicle headlamp device
GB2038033A (en) Microprocessor fault protection
US4636652A (en) Electric circuit control device
JPH0444282B2 (en)
US3976933A (en) Method and circuit for in-service testing of an electro-magnetically actuated component
US3482110A (en) Device for automatically rendering apparatus inoperative when subjected to shock
US3940954A (en) Electrical supervisory circuit arrangements
KR100434145B1 (en) State of automatic transfer switch and fault alarm apparatus and method
US6111736A (en) Static relay with condition detecting
CA1270928A (en) Microcomputer implemented control device
GB2197140A (en) Direction indicator and hazard warning device for motor vehicles
US4496941A (en) Switch protection device
US5803819A (en) Solid state pinspotter controlled chassis and method therefor
CA2410841A1 (en) Light signaling device related to the operating state of a system, and process for management of such a device, particularly for avionics
US3719925A (en) Electronic control for machine tools and the like
DE2851956A1 (en) Monitoring circuit for fuses in AC supply network - has each fuse shunted by incandescent lamp in series with opto-electronic coupler
US3568004A (en) Delay enable circuit
SU1001298A1 (en) Self-checking dc voltage supply system
US3303404A (en) Arrangement for over-riding the inadvertent actuation of a trip device in a motor control circuit
DK151678B (en) LIGHT EXTENSION SYSTEM FOR LIGHTING SYSTEMS
CA2406582A1 (en) Process for management of a light signaling device, and a device using this process, particularly for avionics
SU1024342A1 (en) Apparatus for controlling running speed of train
RU1807456C (en) Device for testing relays
GB2186763A (en) Telephone interface protection circuit

Legal Events

Date Code Title Description
PCNP Patent ceased through non-payment of renewal fee