Abstract: A method is provided for redundantly controlling process of an automation system having at least two controllers in which each controller consecutively carries out a plurality of task blocks, wherein output data which can be transmitted for carrying out the task blocks is stored in a plurality of work regions exceeding the number of task blocks by one. The work regions contain the respective output data for each of the task blocks. The one additional work region, which is the system work region, contains the output data. The method includes transferring the respective previously synchronized content from the system work region into the work region during the start of a task block in the redundant controllers, updating the content while task block is carried out and, if the updated content is identical, then returning the updated content to the system work region again before the next task block is started.

Abstract: A computer system connected to a data communications network, wherein the computer system is reliably protected against computer viruses, unauthorized access to internal data, and loss of data in the event of infection with computer viruses. The computer system has a first computer (1) and a second computer (2) that is independent of and redundant to the first computer. The two computers match themselves by comparing their work results. The receipt of data from the data communications network (6) is limited to the first computer, and the transmission of data to the data communications network is limited to the second computer. At least the initial processing of received data is limited to the first computer, and non-verified or non-verifiable data received by the first computer are stored in the second computer only in locked form, i.e., in non-processable form.

Abstract: A computer system connected to a data communications network, wherein the computer system is reliably protected against computer viruses, unauthorized access to internal data, and loss of data in the event of infection with computer viruses. The computer system has a first computer (1) and a second computer (2) that is independent of and redundant to the first computer. The two computers match themselves by comparing their work results. The receipt of data from the data communications network (6) is limited to the first computer, and the transmission of data to the data communications network is limited to the second computer. At least the initial processing of received data is limited to the first computer, and non-verified or non-verifiable data received by the first computer are stored in the second computer only in locked form, i.e., in non-processable form.