Fail-safe control circuit

Claim 2

A fail-safe control circuit connected to operation control units producing control signals and to a controlled device, said fail-safe control circuit comprising: detection means for detecting coincidence between the control signals, activating the controlled device only when coincidence occurs and producing a feedback signal, each said operation control unit producing a disagreement signal when the respective control signal disagrees with the feedback signal, said detection means comprising: a single AND gate connected to said operation control units and the controlled device; and an inverter connected to said AND gate and the operation control units, and producing the feedback signal; and fail-safe means for placing the controlled device in a fail-safe state when at least one disagreement signal is produced.

Claim 3

A circuit as recited in claim 1, said detection means further comprising a transistor connected to said AND gate, said inverter and the controlled device.

Claim 4

A circuti as recited in claim 1, wherein the controlled device is supplied with power by a power supply and said fail-safe means comprises: an OR gate connected to said operation control units; and a relay connected to said OR gate, the power supply and the controlled device, and operated by said OR gate to disconnect power from the controlled device.

Claim 5

A circuit as recited in claim 3, said fail-safe means further comprises a transistor connected to said OR gate and said relay.

Claim 6

A fail-safe control system for a controlled device, said fail-safe control system comprising: identical operation control units each producing a control signal from an input signal; coincidence means, operatively connected to said identical operation control units and the controlled device, for producing a coincidence control signal operating the controlled device only when all the control signals are equal and producing a feedback signal, said operation control units each comparing the respective control signal to the feedback signal and producing a disagreement signal whenever the respective control signal and the feedback signal are not equal, said coincidence means comprising: a single AND gate connected between said operation control units and the controlled device; and an inverter connected between said AND gate and said operation control units; and fail-safe means, operatively connected to said operation control units, and said coincidence means for placing the controlled device in a fail-safe state in dependence on one of the disagreement signals.

Claim 7

A fail-safe control system for a controlled device, said fail-safe control system comprising: identical operation control units each producing a control signal from an input signal; coincidence means, operatively connected to said identical operation control units and the controlled device, for producing a coincidence control signal operating the controlled device only when all the control signals are equal and producing a feedback signal, said operation control units each comparing the respective control signal to the feedback signal and producing a disagreement signal whenever the respective control signal and the feedback signal are not equal, said coincidence means comprising: a single AND gate connected between said operation control units and the controlled device; and an inverter connected between said AND gate and said operation control units; and fail-safe means, operatively connected to said operation control units, and said coincidence means for placing the controlled device in a fail-safe state in dependence on one of the disagreement signals.

Claim 8

A system as recited in claim 5, wherein said controlled device is supplied power by a power supply and said fail-safe means comprises power supply interruption means, operatively connected to said power supply, said coincidence means and the controlled device, for interrupting the power suplied to the controlled device in dependence on one of the disagreement signals.

Claim 9

A system as recited in claim 6, wherein said power supply interruption means comprises: an OR gate connected to said operation control units; and a relay connected to said OR gate, the power supply and the controlled device.