Abstract: The invention relates to a system and a method for the securely recording input values used for processing in a safety-oriented processor.

Abstract: Data processing and transmission is monitored in a data processing unit. The data processing unit has a plurality of software modules, between which data is exchanged, a check sum is allocated to the data of a data transmission, which, in selected software modules is advanced by a plurality of places through one of the software modules.

Abstract: Device (1) for controlling and/or monitoring external technical processes, in particular a device for use in connection with safety-related controls. The device includes an input functionality, an output functionality and a processing functionality that can be connected with at least one higher-level unit (5) for transfer of process-influencing and/or process-monitoring signals by way of a bus system (4) to and/or from actuators (3) and/or sensors (2) connected to the device. A guaranteed response time over the bus system (4) is determined on one hand by the cycle time of the higher-level unit (5) and on the other by the signal cycle time over the bus system (4) itself. In order to provide a shorter response time than this in appropriate circumstances, the device (1) uses the processing functionality thereof to execute logical links internally.

Abstract: An apparatus for and a method of operating an automation system. A processing unit subjects useful information which is received via a telegram to a user designated logic operation and drives an output channel in accordance with a result of the logic operation. The processing unit monitors a time sequence of process data transmitted with the useful information and drives the output channel only when the time sequence lies within predetermined tolerances. A monitoring unit monitors the processing unit and shifts the output channel to a safe condition as soon as a malfunction of the processing unit is detected. The output channel may include a readback channel which reads back a signal applied to the output channel whereby the monitoring unit compares the applied signal and the readback signal and shifts the output channel to a safe state if the applied signal and the readback signal differ.

Abstract: A method for operating an automation system and an associated automation system in which all the error-free information is exchanged cyclically with a safety protocol, whereby information losses can thereby be recognized. Data that do not change even in the course of multiple transmissions are transmitted only once.

Abstract: A method for monitoring the output function of an output unit (9). In particular, the output unit is a binary output unit of a safety-oriented programmable logic controller, which controls actuators (11) of an external technical process. The output function of the output unit (9) is monitored within a predetermined time interval by using bit patterns, which are produced by the external technical process, and by using bit patterns, which have not been transmitted by the output unit (9) to the actuators (11) of the external technical process. Therein, the number of output test bit patterns is reduced to a necessary minimum.

Abstract: A method for monitoring the output function of an output unit (9). In particular, the output unit is a binary output unit of a safety-oriented programmable logic controller, which controls actuators (11) of an external technical process. The output function of the output unit (9) is monitored within a predetermined time interval by using bit patterns, which are produced by the external technical process, and by using bit patterns, which have not been transmitted by the output unit (9) to the actuators (11) of the external technical process. Therein, the number of output test bit patterns is reduced to a necessary minimum.

Abstract: Device (1) for controlling and/or monitoring external technical processes, in particular a device for use in connection with safety-related controls. The device includes an input functionality, an output functionality and a processing functionality that can be connected with at least one higher-level unit (5) for transfer of process-influencing and/or process-monitoring signals by way of a bus system (4) to and/or from actuators (3) and/or sensors (2) connected to the device. A guaranteed response time over the bus system (4) is determined on one hand by the cycle time of the higher-level unit (5) and on the other by the signal cycle time over the bus system (4) itself. In order to provide a shorter response time than this in appropriate circumstances, the device (1) uses the processing functionality thereof to execute logical links internally.

Abstract: The present invention relates to a processing module for a modular automation system, for instance a modular stored-programmable control, in which the automation system includes a central unit and peripheral units such as input/output modules, subordinate to the central unit. The peripheral units can be coupled to each other via a device bus. A processing module comprises a processor, a memory, a blockable bus coupling element which can be coupled to the device bus, and a blockable central unit coupling element which can be coupled to the central unit, all of which are connected to each other via a module bus that is internal in the processing module. The processing module has a communication interface which is connected with the processor. In this way the central unit can be relieved to a considerable extent of communication activity.

Abstract: The present invention relates to synchronization methods for a redundantly structured automation system including at least two subsystems. According to the present invention, the sequences of machine instructions for the subsystems contain run-time queries. When the run-time queries are reached, the actual run time since the last synchronization of the subsystems is determined. However, a synchronization is only carried out when the actual run time exceeds a preselectable synchronization reference pattern. The run-time queries are always inserted then into the sequence of machine instructions when a summed run-time expected value of the machine instructions exceeds a preselectable critical time.

Abstract: The present invention provides a method and apparatus for flexibly configuring an automation system for a technical process. The invention permits a user to determine a configuration for one or more peripheral channels of the automation system based on desired fault behaviors. In one embodiment of the invention, a user is prompted to specify a peripheral channel of the automation system to be configured, along with a required fault behavior for that peripheral channel. In other words, the user must specify how the peripheral channel is to handle the occurrence of a fault. Once the required fault behavior is identified, a programming unit accesses a knowledge base of stored configurations and associated fault behaviors to identify a configuration meeting the user-specified requirements. The programming unit then communicates instructions for configuring the peripheral channel to a user and/or actually configures a programmable controller of the automation system.

Abstract: A method for detecting addressing errors in an electrical unit. The electrical unit may, e.g., include a central processing unit and modules that respond to the central processing unit via a communication system by means of addresses specific to the modules. Addressing errors caused by faulty modules can be detected. For at least a portion of the accesses made by the central processing unit on one of the modules, an identifier is transmitted from the addressed module to the central processing unit. The identifier transmitted to the central processing unit is compared to a reference identifier. Addressing errors are recognized when the transmitted identifier deviates from the reference identifier.

Abstract: An update method is described for a supplementary automation system, which is to be coupled to a starting automation system, where the starting automation system controls a technical system. In the present invention, updating takes place free of update-interruption as opposed to interrupting program execution by the starting automation system, performing the updating and resuming program execution by both automation systems. In one embodiment, a non-time-critical system state is awaited and then updating is performed. In a second embodiment, the updating is interspersed in small time slices into the program execution.