Posted by Martin Kyte on 12/10/2018 08:55:40:
…
'engineers had included an emergency system verification routine in the controller ' Thats why you dont include the controller in the estop system unless it is simply monitoring the state of things. You certainly don't let it have a say.
We are probably boring people now with detail when the OP only wanted to create a simple fail safe.
regards Martin
Well a bit of gentle drift off-topic never hurt anyone. Let's hope we're not being too boring.
Are controllers used in safety critical systems? Yes! Not so long ago proposals to use fly-by-wire systems in aircraft and submarines were highly controversial. Now they are commonplace. Many other examples – railway signalling systems, air traffic control, power generation, hospital equipment, lifts, process control, and industrial robots etc etc.
Electronic controllers are used because they can manage multiple sensor inputs, react very quickly to complex events, and are able to apply some intelligence. For example, the sequence in which an industrial process is stopped might depend on where in the process the error occurred. Slamming the brakes on causes skids. Controllers are also light-weight and can be duplicated as necessary to provide resilience. Plus, by enforcing programmed rules, they can be made to resist human mistakes. Most accidents are caused by people. Driverless cars could be much safer than conventional cars.
Simplicity always being a virtue in design certainly recommends straightforward methods in simple cases. But once a machine or process gets above a certain level of complexity, controllers shine. I think the switch to electronics would have been faster had their reliability been better at the outset, but new technologies are always buggy. True that mechanical methods were once far more reliable than electronics. Now technology has marched on electronics have the advantage.
Designing a safety systems is not for amateurs whatever technology is used. 'Fail-safe systems fail by failing to fail safely.'
Dave