Electricity: electrical systems and devices – Safety and protection of systems and devices – Load shunting by fault responsive means
Reexamination Certificate
2000-06-27
2003-01-14
Sircus, Brian (Department: 2836)
Electricity: electrical systems and devices
Safety and protection of systems and devices
Load shunting by fault responsive means
C361S189000
Reexamination Certificate
active
06507468
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Field of the Invention
The invention relates to a controller for the safety power line of a heat engineering installation as more particularly described herein.
2. The Prior Art
For heat engineering installations, in particular plants for generating steam or hot water, it is desired to operate such installations automatically, i.e. without the continuous presence of operating and supervisory personnel. According to the current regulations, e.g. “Technische Regel für Dampfkessel” (“TRD” 604) [Technical Regulation for Steam Boilers], an operation without continuous supervision requires special devices that reliably prevent dangerous operating conditions from occurring.
For example, fill level limiting devices, which switch off the heating system of the boiler if the fill level falls below a lower limit value, are required in order to prevent overheating of the steam boiler to a degree endangering the safety of the installation. For this purpose, fill level sensors monitor the fill level of the steam boiler for values falling below the limit value. Controllers are connected to the fill level sensors. On the output side, the controllers have two safety relays connected in series. The safety relays are arranged in the safety power line of the heating system of the steam boiler. As long as the lower limit value is exceeded, the controller switches the two safety relays to passage. The safety power line is thus closed and the heating of the steam boiler is released. However, if the value falls below the lower limit value of the fill level, the fill level sensor supplies the controller with another, different signal, whereupon the controller reverses the safety relays and in this way breaks the safety power line. The heating of the steam boiler is then interrupted.
The same type of safety requirement, namely that the safety power line has to be interrupted when a preset limit value is reached, may have to be satisfied also for other physical operating parameters of heat engineering plants. For example, such physical operating parameters include the maximally permissible fill level, the maximally permissible operating pressure, the maximally permissible operating temperature, or the maximally permissible electrical conductivity of the liquid of the boiler.
The safety devices employed for meeting the requirements have to be fail-safe. Sensors and controllers have to be designed for this purpose in the form of self-monitoring equipment. The mechanical part of the sensors as well as the electrical part of the sensors and the switching devices therefore have to be automatically tested at preset time intervals for their functionality. If such tests find that a malfunction exists, the safety power line will become interrupted and thus, for example, the heating system of the steam boiler will shut down. So as to assure that the safety relays employed are fail-safe, their mechanical useful life is therefore expected to satisfy very high requirements, for example 300,000 switching operations.
During a normal operation without malfunctions, the safety relays remain for a very long time in one and the same position. Under certain circumstances, this may cause the contacts of the safety relays to fuse with each other in position. If a malfunction were to occur, the safety relay so affected would not break the safety power line in spite of the corresponding setting signal of the controller. Since two safety relays are connected in series, such a malfunction of one of the relays would not pose a safety risk. However, the malfunction would remain undetected. If the same defect, however, were to occur also in the second safety relay, this would lead to a critical operating condition.
The invention is concerned with the problem of providing a controller of the type specified above whose safety relays are monitored for safety-relevant operating parameters.
SUMMARY OF THE INVENTION
The problem is solved according to the invention by a controller wherein a shunt line is connected in parallel with a first safety relay which connects the safety power line of a heat engineering installation upstream of the first safety relay with a connecting line between two series-connected safety relays for the connection of the safety power line. A shunt line is connected in parallel with the second safety relay which connects the safety power line downstream of the second safety relay with the connecting line between the two safety relays. Test switching elements are provided in the shunt lines which break the shunt lines outside of the scheduled test times. The safety relays are designed in the form of changing relays or change-over switching devices with an idle position and an operating position. Each safety relay has an idle contact, an operating contact, and a base contact, whereby the base contact and the idle contact are electrically connected to each other in the idle position, and the base contact and the operating contact are electrically connected to each other in the operating position.
The controlling device has test means for testing the switching capability of the safety relays at preset test times, wherein the shunt line associated in each case with the safety relay to be tested is closed by way of the test switching elements; the safety relay is reversed to the idle position; the electrical voltage is monitored on the idle contact of the tested safety relay; and an error signal is issued if voltage is missing on the idle contact.
The switching capability of the safety relays is tested by the controller at preset time intervals. The controller tests whether the safety relays, when receiving the corresponding setting signals, reverse from their operating position closing the safety power line, to the idle position breaking the safety power line. The safety power line is in fact interrupted when needed only if this has been safely ascertained. The electrical voltage on the idle contact of the safety relay to be tested supplies information as to whether the safety relay has assumed the idle position. Any non-reversing, and thus a malfunction, is detected and can be eliminated. Since the shunt line of the safety relay to be tested is closed during the test, the safety power line remains closed during this time. The operation of the plant is therefore not interrupted during the test.
Further developments of the invention are discussed below.
If the operating parameter to be monitored reaches its preset limit value, the safety relays are reversed and thereby assume their idle position. In one embodiment, the safety relays are connected to each other at their base contacts, whereas the safety power line is connected to the operating contacts. With these features, no electrically conducting connection then exists between their idle contacts and the safety power line. A reliable interruption of the safety power line is thus assured. No special requirements during the test need be satisfied in monitoring the voltages on the idle contacts of the safety relays.
In another embodiment, two test switching elements are connected in series. The first test switching element is connected to the connecting line of the two safety relays via a common line part of the shunt lines. The second test switching element is designed as a changing relay or change-over switching device and selectively makes a connection between the first test switching element and the shunt line leading to upstream of the first safety relay, or between the first test switching element and the other shunt line leading to downstream of the second safety relay.
This shunt line design ensures that only one of the two shunt lines can be closed, whereas the other line is interrupted. If both safety relays are in the idle position, the safety power line is reliably interrupted. The position of the test switching elements is unimportant in this connection. Errors occurring in connection with the control of the test switching elements, for example due to a defect in the controller, cannot impair the interruption.
In ano
Klattenhoff Juergen
Politt Joachim-Christian
Schmitz Guenter
Collard & Roe P.C.
Gestra GmbH
Kitov Z
Sircus Brian
LandOfFree
Controller for heat engineering installations does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Controller for heat engineering installations, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Controller for heat engineering installations will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3031566