Claims Analysis
Total Claims: 7
Claim 1
Independent Claim
173 words
A control signal interlocking system comprising three parallel sub-systems, each of which is connected to receive the same input data and is arranged to perform a signal interlocking function in a continuously repeated cyclic operation, a sub-system output gating circuit, controlled by a sub-system output selecting logic circuit, for preferentially selecting and connecting a first sub-system output to provide the system output and for alternatively selecting a second sub-system output if the first sub-system is found to be in error, said sub-system output selecting logic circuit comprising a comparator in each sub-system for receiving outputs from all the sub-systems, said comparators including difference determining means for determining difference results between pairs of the sub-system outputs, memory means for storing a reference table of possible difference results, and comparison means connected to said difference determining means and said memory means for comparing the actual difference results determined by said difference determining means with the reference difference results stored by the memory means to determine, if differences exist, if the first sub-system is in error.
Claim 2
Dependent Claim
173 words
A control signal interlocking system comprising three parallel sub-systems, each of which is connected to receive the same input data and is arranged to perform a signal interlocking function in a continuously repeated cyclic operation, a sub-system output gating circuit, controlled by a sub-system output selecting logic circuit, for preferentially selecting and connecting a first sub-system output to provide the system output and for alternatively selecting a second sub-system output if the first sub-system is found to be in error, said sub-system output selecting logic circuit comprising a comparator in each sub-system for receiving outputs from all the sub-systems, said comparators including difference determining means for determining difference results between pairs of the sub-system outputs, memory means for storing a reference table of possible difference results, and comparison means connected to said difference determining means and said memory means for comparing the actual difference results determined by said difference determining means with the reference difference results stored by the memory means to determine, if differences exist, if the first sub-system is in error.
Claim 3
Dependent Claim
33 words
An interlocking system as claimed in claim 1 wherein the output from each sub-system is connected to the comparators of the other sub-systems in a ring configuration so that the sub-systems are identical.
Claim 4
Dependent Claim
48 words
An interlocking system as claimed in claim 2 wherein the sub-systems operate asynchronously and the output selecting logic circuit and output gating circuit are arranged to connect a sub-system output to the control system output only after said output has been repeated in two successive cycles of operation.
Claim 5
Dependent Claim
26 words
An interlocking system as claimed in claim 2 wherein the comparator in each sub-system is arranged to provide an error-indicating signal with respect of each sub-system.
Claim 6
Dependent Claim
33 words
An interlocking system as claimed in claim 4 including a logical majority voting circuit for correlating the error-indicating signals for each sub-system to provide a safety signal indicating the integrity of each sub-system.
Claim 7
Dependent Claim
118 words
An interlocking system as claimed in claim 3 wherein the system includes a test monitor arrangement including a test pulse generator and wherein the control system output is connected through a control output signal-amplifier to energize an output function device, a connection being provided between the signal-amplifier and the output function device which includes at least one switch energized to close by an output signal from said test monitor arrangement which is generated responsive to the receipt of test pulse signals injected into the control system output by said test pulse generator before the signal-amplifier, said test pulse signals being capable of operating the monitor arrangement after the signal-amplifier in order to check the operability of the signal-amplifier.