[0001] The present invention relates to devices to protect against failure of switches.
Such devices may also be used for testing switches without disturbing the system controlled
by the switch.
[0002] In certain fields, it can be extremely hazardous or costly for a switch to fail without
adequate warning or without circumvention being possible. It would of course, be possible
to provide two, or even more, s
kitches,in parallel or series depending on whether the switches are normally closed
or normally open. Failure of one of these switches would not then affect the system.
However such switches are costly and it may be possible for every switch to fail eventually
without giving adequate warning. To take an example, in the fields of chemical processes
or oil production platforms, there is generally provided a safety system by which
complete shutdown of the apparatus or platform is controlled by a switch actuated
by a control output giving a signal dependant on any one of a number of parameters.
Since complete shutdown should be avoided except in extreme emergencies, it is obvious
that the switch controlling such shutdown must be protected against its failure. It
is therefore an object of this invention to provide a device which will obviate such
problems. It is another object of this invention to provide a method of testing such
switches without disturbing the loads controlled by the switches.
[0003] According to a first aspect of the present invention there is provided a device tc
ensure continuation of current supply to a load in the event of failure of a switch,
the device comprising a circuit connected in parallel with the switch and comprising
means to cause voltage drop thereby to produce a reduced potential in the circuit,
and a diode arranged to prevent current flow in the circuit when the potential at
the load side of the switch is higher than the reduced potential, and to allow current
flow when said potential is reduced tc a value lower than the reduced potential by
virtue of the switch opening.
[0004] Preferably the device further comprises means to detect current flow in the circuit.
[0005] Advantageously the base of a transistor is connected to a point in the circuit between
the voltage reducing means and the diode, the two other connections of the transistor
forming part of an alarm circuit which conducts only when said transistor is biased
on by current flow in said circuit caused by opening of the switch.
[0006] The alarm circuit may include a light emitting diode to give visible warning of switch
opening.
[0007] According to a second aspect of the invention there is provided a method of testing
a normally closed switch which comprises the steps of: connecting in parallel to said
switch a circuit which comprises in series means to cause voltage drop thereby to
produce a reduced potential in the circuit, a diode to prevent current flow in the
circuit when the potential at the load side of the switch is higher than the reduced
potential, and a connection point to the base of a transistor located between said
means to cause a voltage drop and said diode, the two other connections of the transistor
forming part of an alarm circuit; opening the switch; and checking the alarm circuit
output.
[0008] According to a third aspect of the present invention there is provided a method of
testing a normally open switch which comprises the steps of: connecting in parallel
with a second normally open switch and the load, a circuit which comprises in series
means to cause voltage drop thereby to produce a reduced potential in the circuit,
a connection point to the base of a transistor,and a dummy load; connecting the other
connections of the transistor into ar alarm circuit; closing the normally open first-mentioned
switch; and checking the alarm circuit output.
[0009] Embodiments of the invention will now be more particularly described by way of example
and with reference to the accompanying drawings, in which:
Figure 1 is a circuit diagram of a switch and switch protection device embodying the
present invention;
Figure 2 is a circuit diagram to show how any one of such switch protection devices
may be used to protect a number of switches;
Figure 3 is a circuit diagram to show an application of the protection device in which
components are duplicated both in series and in parallel; and
Figure 4 is a circuit diagram to illustrate the method of testing normally open switches.
[0010] Referring now to the drawings, there is shown in Figure 1 a basic circuit comprising
a switch S and a device embodying the invention connected in parallel therewith between
points A and B. In normal operation, the switch S is closed and the load L draws current
from A to B through this switch. The device comprises, connected in sequence, a control
transistor T2, connection point C, a diode Dl, connection point D, and isolating diode
D2. Transistor T2 and diode Dl cause such a voltage drop as to produce a reduced potential
in the circuit whereby current is prevented from flowing through isolating diode D2.
Thus while the switch S remains closed there is no current flow from A to B through
C and D and therefore transistor Tl does not conduct.
[0011] Should the switch S fail open, the potential at B will drop and therefore diode D2
will conduct since the reduced potential at D will become greater than that at B.
The load L will therefore be held on with current passing from A to B via C and D.
This in turn will produce a potential difference across diode Dl which will turn on
transistor Tl, to illuminate a light emitting diode LEDl and to produce an alarm output.
[0012] The device of course can still be controlled by means of light emitting diode LED2
and transistor T2, and therefore if it is necessary for the load to be - switched
off, this can be easily accomplished.
[0013] If it should be desired, a similar device for protection of a similar switch connected
in the return path from the load L can be provided by reversing the diodes and using
negative equivalents of the transistors.
[0014] As shown in Figure 2, connection point D can be connected to an auxiliary supply
bus ASB, from which connections can be taken to a number of isolating diodes, D2(a)
and D2 (b) for example, each of which isolating diodes protects a switch S(a), S(b)
respectively. As can be seen therefore, a single device may protect a number of switches,
each controlling a load. Each load has two individual control outputs, one in its
supply path, and one in its return path. The common part of the supply path and the
common part of the return path are each provided with a separate protection device
connected respectively to the auxiliary supply bus ASB and the auxiliary return bus
ARB.
[0015] It can be seen that for the load to be switched off unintentionally, a switch and
a protection device on the same side of the load must fail simultaneously. Similarly,
for the load to become switched on when it is intended to be off, a switch or a protection
device on the positive side of the load and a switch or protection device on the negative
side of the load must simultaneously fail. In order to reduce the possibility of such
occurrences, each component of the device may be duplicated both in series and in
parallel, as can be seen from the circuit diagram of Figure 3.
[0016] The device can also be used to test whether or not the switches are working. In the
case of a normally closed switch, the switch is opened and the alarm circuit will
give an output when the current bypasses the switch to flow through the protection
device.
[0017] The method of testing a normally open switch Sx is shown in Figure 4, wnerein a circuit
as described above but with the isolating diode replaced by a dummy load is connected
in parallel with a second normally open switch Sy and the load L, and closing the
switch Sx. If the switch is wcrkinc correctly this will cause current to flow through
the protection device and the dummy load causing an alarm output to be generated.
Obviously since the load L is still connected in series with an open switch Sy, such
an operation will not cause the load L to be energised. This method can be carried
out to test switches on both positive and negative sides of the load.
1. A device to ensure continuation of current supply to a load in the event of failure
of a switch, characterised in that the device comprises a circuit connected in parallel
with the switch and comprising means to cause voltage drop thereby to produce a reduced
potential in the circuit, and a diode arranged to prevent current flow in the circuit
when the potential at the load side of the switch is higher than the reduced potential,
and to allow current flow when said potential is reduced to a value lower than the
reduced potential by virtue of the switch opening.
2. A device according to claim 1, further characterised by means to detect current
flow in the circuit.
3. A device according to claim 2, characterised in that the base of a transistor is
connected to a point in the circuit between the voltage reducing means and the diode,
the two other connections of the transistor forming part of an alarm circuit which
conducts only when said transistor is biased on by current flow in said circuit caused
by opening of the switch.
4. A device according to claim 3, characterised in that the alarm circuit includes
a light emitting diode to give visible warning of switch opening.
5. A method of testing a normally closed switch characterised by the steps of: connecting
in parallel to said switch a circuit which comprises in series means to cause voltage
drop thereby to produce a reduced potential in the circuit, a diode to prevent current
flow in the circuit when the potential at the load side of the switch is higher than
the reduced potential, and a connection point to the base of a transistor located
between said means to cause a voltage drop and said diode, the two other connections
of the transistor forming part of an alarm circuit; opening the switch; and checking
the alarm circuit output.
6. A method of testing a normally open switch characterised by the steps of: connecting
in parallel with a second normally open switch and the load, a circuit which comprises
in series means to cause voltage drop thereby to produce a reduced potential in the
circuit, a connection point to the base of a transistor, and a dummy load; connecting
the other connections of the transistor into an alarm circuit; closing the normally
open first-mentioned switch; and checking the alarm circuit output.