Abstract: A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

Abstract: A system for communicating between redundant devices balances the desired attributes of a high availability (HA) control system and a safety control system. The system includes concurrent connections as a fault tolerant mechanism for industrial protocol connections at the transport layer. The concurrent connections establish multiple paths for redundancy from a data producer to a data consumer. Concurrent connections increase availability of the HA control and safety instrumented systems. More specifically, concurrent connections and architectural redundancies eliminate a single point of failure within the control system and further reduce safety connection timeouts during fault detection and/or recovery. Concurrent connections may be used to keep a HA system operational or to provide detection of a failure in a safety system. The industrial control network may be configured to function as a HA control system, as a safety control system, or with certain degrees of both HA and safety-related operation.

Abstract: A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

Abstract: A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

Abstract: A system for communicating between redundant devices balances the desired attributes of a high availability (HA) control system and a safety control system. The system includes concurrent connections as a fault tolerant mechanism for industrial protocol connections at the transport layer. The concurrent connections establish multiple paths for redundancy from a data producer to a data consumer. Concurrent connections increase availability of the HA control and safety instrumented systems. More specifically, concurrent connections and architectural redundancies eliminate a single point of failure within the control system and further reduce safety connection timeouts during fault detection and/or recovery. Concurrent connections may be used to keep a HA system operational or to provide detection of a failure in a safety system. The industrial control network may be configured to function as a HA control system, as a safety control system, or with certain degrees of both HA and safety-related operation.

Abstract: A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

Abstract: A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

Abstract: A high availability industrial automation system in disclosed. The system has a primary industrial automation controller, a secondary industrial automation controller, and a communication network connected to the primary industrial automation controller and the secondary industrial automation controller. The primary industrial automation controller includes a processor and a memory configured to store a plurality of instructions, a plurality of automation tasks, input/output (I/O) data, and internal storage data. The processor is operative to execute the plurality of instructions to cross load information from the primary industrial automation controller to the secondary industrial automation controller. The cross loading of information can be less than the maximum amount of communicable information capable of being cross loaded. Also disclosed are methods of communicating over the high availability industrial automation system.

Abstract: A high availability industrial automation controller used in a high availability industrial automation system is disclosed. The controller includes instructions executable by a processor to receive information about a lost redundancy in the industrial automation system, change a first redundancy state and a second redundancy state associated with a first task and a second task, respectively, upon receiving the information, perform the first task and the second task. The performing the first/second task can include identifying the first/second redundancy state has been changed, modifying operation of the first/second task in response to the first/second redundancy state being changed, and resetting the first/second redundancy state. Also disclosed is a method of operating the industrial automation controller.

Abstract: A high availability industrial automation controller used in a high availability industrial automation system is disclosed. The controller includes instructions executable by a processor to receive information about a lost redundancy in the industrial automation system, change a first redundancy state and a second redundancy state associated with a first task and a second task, respectively, upon receiving the information, perform the first task and the second task. The performing the first/second task can include identifying the first/second redundancy state has been changed, modifying operation of the first/second task in response to the first/second redundancy state being changed, and resetting the first/second redundancy state. Also disclosed is a method of operating the industrial automation controller.

Abstract: A high availability industrial automation system in disclosed. The system has a primary industrial automation controller, a secondary industrial automation controller, and a communication network connected to the primary industrial automation controller and the secondary industrial automation controller. The primary industrial automation controller includes a processor and a memory configured to store a plurality of instructions, a plurality of automation tasks, input/output (I/O) data, and internal storage data. The processor is operative to execute the plurality of instructions to cross load information from the primary industrial automation controller to the secondary industrial automation controller. The cross loading of information can be less than the maximum amount of communicable information capable of being cross loaded. Also disclosed are methods of communicating over the high availability industrial automation system.

Abstract: A system of communicating data over a high availability industrial control system is disclosed. The industrial control system includes a first data producer, a second data producer in communicative connection with the first data producer, a first data consumer, and a second data consumer in communicative connection with the first data consumer. The system further includes the first producer communicating the data over multiple connection paths from the first producer to the first consumer and the second consumer through intermediate modules, and the second producer communicating the data over multiple connection paths from the second producer to the first consumer and the second consumer through intermediate modules. Also disclosed is a method of communicating data over the high availability industrial control system.

Abstract: An industrial control system employs a primary and secondary controller each having a processor and at least one I/O data table. Updating of the secondary processor's I/O data table is performed prior to the same data being transmitted to the controlled process. This eliminates possible retrogressive control at the time of switch-over of control from the primary industrial controller to the secondary industrial controller. Additional I/O data tables may be provided in each of the primary and secondary industrial controllers. In the case of the secondary industrial controller, this duplicate I/O data table temporarily holds data until the transmission is complete preventing the partial update of the working I/O data table of the secondary industrial controller. The duplicate I/O data table in the primary industrial controller allows simultaneous outputting of the I/O data transmitted to the controlled process without corruption while the user program of the primary industrial controller resumes execution.

Abstract: A redundant controller employs two controller chassis having replaceable functional modules interconnected electrically within the chassis. System back up modules in the chassis coordinate the switching of control from a primary to a secondary chassis according to chassis redundancy state information of the chassis stored in the backup modules and module redundancy state information stored in the modules unique to the modules.

Abstract: An industrial controller provides a primary controller and a redundant secondary controller and allows switchover between the controllers in the event of a failure in the primary controller. The process of qualification of the secondary controller in which its programming is made to match the primary controller may be inhibited to permit the secondary controller to maintain a clean version of an upgraded program executing on the primary controller. The clean program may be reverted to in the event an upgrading of the program in the primary controller is unsuccessful. Switchover is permitted even though the qualification of the secondary controller is not enabled.

Abstract: A redundant industrial controller system has a primary controller backed up by a secondary controller and recovers from a power loss by analyzing the state memories of the controllers to reach a determination of which controller would best be suited to assume primary control status without resorting to arbitrary tie-breaking procedures or race conditions. The rules and their inputs are applied by both controllers which independently make the determination as to which controller should be the primary controller.

Abstract: On-line upgrading of a primary industrial controller is provided through the use of a secondary industrial controller that may assume control of the process controlled by the primary industrial controller. A switch-over of control is orchestrated by a system back-up module that may detect removal of the functional components of the primary industrial controller to initiate the switch-over. Determination of removal of functional modules may be provided by a periodic polling of the functional components on the interconnecting communication link. The system back-up module designates one of the functional modules to poll the system back-up module so that complete coverage of removable components may be had.

Abstract: A redundant controller employs connection-based messaging to ensure reliability and determinacy in communications. The need to close connections and reopen connections with a backup module when control switches from a primary controller to a secondary controller is eliminated by keeping the secondary controller updated as to the connections that have been opened and having the secondary controller assume the connection identification numbers of the primary controller upon switch-over.

Abstract: An industrial control system employs a primary and secondary controller each having a processor and an I/O data table. Updating of the secondary processor's I/O data table is accomplished synchronously with execution of the program in the primary processor at a particular point in the program. A tracking of changes in the I/O data table of the primary processor is used to transmit only changes in the I/O table to the secondary processor thereby avoiding undue interruption of the executing program while preserving synchronicity.

Abstract: An industrial control system employs a primary and secondary controller each having a processor and at least one I/O data table. Updating of the secondary processor's I/O data table is performed prior to the same data being transmitted to the controlled process. This eliminates possible retrogressive control at the time of switch-over of control from the primary industrial controller to the secondary industrial controller. Additional I/O data tables may be provided in each of the primary and secondary industrial controllers. In the case of the secondary industrial controller, this duplicate I/O data table temporarily holds data until the transmission is complete preventing the partial update of the working I/O data table of the secondary industrial controller. The duplicate I/O data table in the primary industrial controller allows simultaneous outputting of the I/O data transmitted to the controlled process without corruption while the user program of the primary industrial controller resumes execution.