Microcomputer driven fail-safe device with short circuit detection for electronic control circuitry

Claim 2

A fail-safe device for removing power, supplied by a power line, from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: means for generating a fail-safe signal which normally varies between signal levels at a frequency in a predetermined range between a minimum and a maximum frequency unless there is an undesired operating condition; power control means, connected to said generating means, for supplying power to said controlled circuitry only when the output of said generating means has a frequency in said predetermined range; heat limiting means, connected in series between said power control means and said controlled circuitry, having a resistance that is significantly reduced when a high current heats said heat limiting means; shunt means, connected in parallel with said heat limiting means for receiving current when a high current passes through said heat limiting means and for sending a signal to said generating means in response to receiving said high current; and said generating means including timer means initiated by a signal from said shunt means for counting a predetermined period of time so that upon expiration of said predetermined period of time, an undesired operating condition is indicated if a signal is still being received from said shunt means.

Claim 3

The fail-safe device of claim 1 wherein said generating means comprises: a programmable computing means for controlling said controlled circuitry, said computing means having memory means containing bit-transmit instructions for causing said computing means to generate a sequence of binary bits in which a predetermined pattern of bits appears at a frequency within a range corresponding to said predetermined range unless there is an undesired operating condition; and comparator means for receiving said sequence of binary bits, for repeatedly comparing said sequence with a predetermined pattern, and for generating an output which varies in signal level in response to a match between said sequence and said predetermined pattern.

Claim 4

The fail-safe device of claim 2 wherein said computing means further includes non-volatile memory means for storing the time and cause of each undesired operating condition.

Claim 5

The fail-safe device of claim 3 wherein said generating means further comprises a power line interrupt means for sending a pulse to said computing means every time the power line completes a half-cycle.

Claim 6

The fail-safe device of claim 4 wherein said computing means causes the contents of said non-volatile memory means to be preserved through a power outage when said computing means fails to receive a pulse expected from said power line interrupt means.

Claim 7

The fail-safe device of claim 1 further comprising manually activated reset means for sending a signal to said generating means so that after an undesired operating condition occurs, said generating means resumes generating a fail-safe signal which varies between signal levels at a frequency within said predetermined frequency range.

Claim 8

The fail-safe device of claim 6 wherein an undesired operating condition is caused by a signal from said reset means which persists for more than a predetermined time period.

Claim 9

The fail-safe device of claim 1 wherein said heat limiting means comprises an inrush current limiting device.

Claim 10

The fail-safe device of claim 1 wherein said shunt means comprises an optocoupler.

Claim 11

The fail-safe device of claim 9 further comprising a test line connecting said generating means and said optocoupler so that said optocoupler can be tested prior to the generation of a fail-safe signal.

Claim 12

A fail-safe device for removing power from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: programmable computing means for controlling said circuitry to be controlled, said computing means including memory means containing bit-transmit instructions for causing said computing means to generate as an output a sequence of binary bits in which a predetermined pattern of bits appears at a frequency within a range corresponding to a predetermined frequency range unless there is an undesired operating condition and non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; comparator means for receiving said sequence of binary bits, for repeatedly comparing said sequence with a reference pattern, and for generating an output which varies in signal level in response to a match between said sequence and said reference pattern; power control means responsive to the output of said comparator means for supplying power to said circuitry to be controlled only when said output of said comparator means has a frequency in said predetermined frequency range; and manually activated reset means for sending a signal to said computing means after an undesired operating condition occurs so that said computing means resumes generating a sequence of binary bits in which said predetermined pattern of bits appears at a frequency within said predetermined frequency range, said reset means causing an undesired operating condition if it sends a signal which persists for more than a predetermined time period.

Claim 13

A fail-safe device for removing power from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: programmable computing means for controlling said circuitry to be controlled, said computing means including memory means containing bit-transmit instructions for causing said computing means to generate as an output a sequence of binary bits in which a predetermined pattern of bits appears at a frequency within a range corresponding to a predetermined frequency range unless there is an undesired operating condition and non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; comparator means for receiving said sequence of binary bits, for repeatedly comparing said sequence with a reference pattern, and for generating an output which varies in signal level in response to a match between said sequence and said reference pattern; power control means responsive to the output of said comparator means for supplying power to said circuitry to be controlled only when said output of said comparator means has a frequency in said predetermined frequency range; and manually activated reset means for sending a signal to said computing means after an undesired operating condition occurs so that said computing means resumes generating a sequence of binary bits in which said predetermined pattern of bits appears at a frequency within said predetermined frequency range, said reset means causing an undesired operating condition if it sends a signal which persists for more than a predetermined time period.

Claim 14

The fail-safe device of Claim 11 further comprising power line interrupt means for sending a pulse to said computing means every time the power line completes a half cycle and wherein said computing means causes the contents of said non-volatile means to be preserved through a power outage when said computing means fails to receive said pulse expected from said power line interrupt means, so that upon return of power said computing means will determine from said non-volatile memory means whether an undesired operating condition has occurred and has not been reset.

Claim 15

The fail-safe device of claim 11 further comprising short circuit detection means, connected between said power control means and said circuitry to be controlled, for indicating an undesired operating condition when a short circuit is detected in said circuitry to be controlled.

Claim 16

A fail-safe device for removing power from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: programmable computing means for controlling said circuitry to be controlled, said computing means including memory means containing bit-transmit instructions for causing said computing means to generate as an output a sequence of binary bits in which a predetermined pattern of bits appears at a frequency within a range corresponding to a predetermined frequency range unless there is an undesired operating condition and non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; comparator means for receiving said sequence of binary bits, for repeatedly comparing said sesquence with a reference pattern, and for generating an output which varies in signal level in response to a match between said sequence and said reference pattern; power control means responsive to the output of said comparator means for supplying power to said circuitry to be controlled only when said output of said comparator means has a frequency in said predetermined frequency range; heat limiting means for indicating an undesired operating condition when a short circuit is detected in said circuitry to be controlled, said heat limiting means being connected in series between said power control means and said circuitry to be controlled and having a resistance that is significantly reduced when a high current heats said heat limiting means; shunt means, connected in parallel with said heat limiting means, for receiving current when a high current passes through said heat limiting means for receiving current when a high current passes through said heat limiting means and for sending a signal to said computing means in response to receiving said high current; and said computing means including timer means initiated by a signal from said shunt means for counting a predetermined period of time, so that upon expiration of said predetermined period of time an undesired operating condition is indicated if a signal is still being received from said shunt means.

Claim 17

A fail-safe device for removing power from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: programmable computing means for controlling said circuitry to be controlled, said computing means including memory means containing bit-transmit instructions for causing said computing means to generate as an output a sequence of binary bits in which a predetermined pattern of bits appears at a frequency within a range corresponding to a predetermined frequency range unless there is an undesired operating condition and non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; comparator means for receiving said sequence of binary bits, for repeatedly comparing said sesquence with a reference pattern, and for generating an output which varies in signal level in response to a match between said sequence and said reference pattern; power control means responsive to the output of said comparator means for supplying power to said circuitry to be controlled only when said output of said comparator means has a frequency in said predetermined frequency range; heat limiting means for indicating an undesired operating condition when a short circuit is detected in said circuitry to be controlled, said heat limiting means being connected in series between said power control means and said circuitry to be controlled and having a resistance that is significantly reduced when a high current heats said heat limiting means; shunt means, connected in parallel with said heat limiting means, for receiving current when a high current passes through said heat limiting means for receiving current when a high current passes through said heat limiting means and for sending a signal to said computing means in response to receiving said high current; and said computing means including timer means initiated by a signal from said shunt means for counting a predetermined period of time, so that upon expiration of said predetermined period of time an undesired operating condition is indicated if a signal is still being received from said shunt means.

Claim 18

The fail-safe device of claim 14 wherein said heat limiting means comprises an inrush current limiting device.

Claim 19

The fail-safe device of claim 14 wherein said shunt means comprises an optocoupler.

Claim 20

The fail-safe device of claim 16 further comprising a test line connecting said computing means and said optocoupler so that said optocoupler can be tested prior to the supplying of power to said circuitry to be controlled.

Claim 21

A fail-safe device for removing power, supplied by a power line, from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: means for generating a fail-safe signal which normally varies between signal levels at a frequency in a predetermined range between a minimum and a maximum frequency unless there is an undesired operating condition, said generating means including non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; power line interrupt means for sending a pulse to said generating means every time said power line completes a half-cycle; said generating means causing the data stored in said non-volatile memory to be preserved through a power outage when an expected pulse is not received from said power line interrupt means; power control means connected to said generating means and responsive to the output of said generating means for supplying power to said circuitry to be controlled only when said output of said generating means has a frequency in said predetermined range; short circuit detection means for indicating the existence of an undesired operating condition upon detection of a short circuit in said circuitry to be controlled; and manually activated reset means for sending a signal to said generating means so that after an undesired operating condition occurs, said generating means resumes generating a fail-safe signal which varies between signal levels at a frequency within said predetermined frequency range and wherein an undesired operating condition is caused by a signal from said reset means which persists for more than a predetermined time period.

Claim 22

A fail-safe device for removing power, supplied by a power line, from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: means for generating a fail-safe signal which normally varies between signal levels at a frequency in a predetermined range between a minimum and a maximum frequency unless there is an undesired operating condition, said generating means including non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; power line interrupt means for sending a pulse to said generating means every time said power line completes a half-cycle; said generating means causing the data stored in said non-volatile memory to be preserved through a power outage when an expected pulse is not received from said power line interrupt means; power control means connected to said generating means and responsive to the output of said generating means for supplying power to said circuitry to be controlled only when said output of said generating means has a frequency in said predetermined range; short circuit detection means for indicating the existence of an undesired operating condition upon detection of a short circuit in said circuitry to be controlled; and manually activated reset means for sending a signal to said generating means so that after an undesired operating condition occurs, said generating means resumes generating a fail-safe signal which varies between signal levels at a frequency within said predetermined frequency range and wherein an undesired operating condition is caused by a signal from said reset means which persists for more than a predetermined time period.

Claim 23

A fail-safe device for removing power, supplied by a power line, from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: means for generating a fail-safe signal which normally varies between signal levels at a frequency in a predetermined range between a minimum and a maximum frequency unless there is an undesired operating condition, said generating means including non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; power line interrupt means for sending a pulse to said generating means every time said power line completes a half-cycle; said generating means causing the data stored in said non-volatile memory to be preserved through a power outage when an expected pulse is not viewed from said power line interrupt means; power control means connected to said generating means and responsive to the output of said generating means for supplying power to said circuitry to be controlled only when said output of said generating means has a frequency in said predetermined range; short circuit detection means for indicating the existence of an undesired operating condition upon detection of a short circuit in said circuitry to be controlled wherein said short circuit detection means comprises: heat limiting means, connected in series between said power control means and said circuitry to be controlled, having a resistance that is significantly reduced when a high current heats said heat limiting means; means for sensing when a high current passes through said heat limiting means and for sending a signal to said generating means in response to sensing said high current; and said generating means including timer means initiated by a signal from said current sensing means for counting a predetermined period of time, so that upon expiration of said predetermined period of time an undesired operating condition is indicated if a signal is still being received from said current sensing means.

Claim 24

A fail-safe device for removing power, supplied by a power line, from circuitry to be controlled upon occurrence of an undesired operating condition, said device comprising: means for generating a fail-safe signal which normally varies between signal levels at a frequency in a predetermined range between a minimum and a maximum frequency unless there is an undesired operating condition, said generating means including non-volatile memory means for storing data indicating whether an undesired operating condition exists, what time each undesired operating condition occurred and what was the cause of each undesired operating condition; power line interrupt means for sending a pulse to said generating means every time said power line completes a half-cycle; said generating means causing the data stored in said non-volatile memory to be preserved through a power outage when an expected pulse is not viewed from said power line interrupt means; power control means connected to said generating means and responsive to the output of said generating means for supplying power to said circuitry to be controlled only when said output of said generating means has a frequency in said predetermined range; short circuit detection means for indicating the existence of an undesired operating condition upon detection of a short circuit in said circuitry to be controlled wherein said short circuit detection means comprises: heat limiting means, connected in series between said power control means and said circuitry to be controlled, having a resistance that is significantly reduced when a high current heats said heat limiting means; means for sensing when a high current passes through said heat limiting means and for sending a signal to said generating means in response to sensing said high current; and said generating means including timer means initiated by a signal from said current sensing means for counting a predetermined period of time, so that upon expiration of said predetermined period of time an undesired operating condition is indicated if a signal is still being received from said current sensing means.

Claim 25

The fail-safe device of claim 19 wherein said current sensing means comprises a bidirectional optocoupler connected in parallel with said heat limiting means.

Claim 26

The fail-safe device of claim 20 further comprising a test line connecting said generating means and said optocoupler so that said optocoupler can be tested prior to the supplying of power to said circuitry to be controlled.