Abstract: Systems and methods are disclosed for time synchronization of operations in a control system. Synchronization networks and devices are provided for transferring synchronization information between controllers in a distributed or localized control system, which is employed in order to allow operation of such controllers to be synchronized with respect to time. Also disclosed are synchronization protocols and hardware apparatus employed in synchronizing control operations in a control system.

Abstract: Systems and methods are disclosed for time synchronization of operations in a control system. Synchronization networks and devices are provided for transferring synchronization information between controllers in a distributed or localized control system, which is employed in order to allow operation of such controllers to be synchronized with respect to time. Also disclosed are synchronization protocols and hardware apparatus employed in synchronizing control operations in a control system.

Abstract: Systems and methods are disclosed for time synchronization of operations in a control system. Synchronization networks and devices are provided for transferring synchronization information between controllers in a distributed or localized control system, which is employed in order to allow operation of such controllers to be synchronized with respect to time. Also disclosed are synchronization protocols and hardware apparatus employed in synchronizing control operations in a control system.

Abstract: Systems and methods are disclosed for time synchronization of operations in a control system. Synchronization networks and devices are provided for transferring synchronization information between controllers in a distributed or localized control system, which is employed in order to allow operation of such controllers to be synchronized with respect to time. Also disclosed are synchronization protocols and hardware apparatus employed in synchronizing control operations in a control system.

Abstract: Systems and methods are disclosed for time synchronization of operations in a control system. Synchronization networks and devices are provided for transferring synchronization information between controllers in a distributed or localized control system, which is employed in order to allow operation of such controllers to be synchronized with respect to time. Also disclosed are synchronization protocols and hardware apparatus employed in synchronizing control operations in a control system.

Abstract: A method and apparatus are disclosed for performing timely execution of periodic tasks in a redundant control system. A secondary controller in the redundant system receives a wakeup time array having at least one wakeup time element corresponding to a periodic task as well as a current time value from a primary controller, and schedules a run time for the periodic task at switchover based on the wakeup time element and the current time value from the primary control module. The secondary controller may further receive a task instance corresponding to the periodic task from the primary control module, and schedule a run time for the periodic task at switchover based on the task instance. In addition, the secondary controller may schedule a run time for the periodic task at switchover based on a default period associated with the periodic task, if no task instance and no wakeup time element were received corresponding to the periodic task.

Abstract: A method and apparatus are disclosed for performing timely execution of periodic tasks in a redundant control system. A secondary controller in the redundant system receives a wakeup time array having at least one wakeup time element corresponding to a period task as well as a current time value from a primary controller, and schedules a run time for the periodic task at switchover based on the wakeup time element and the current time value from the primary control module. The secondary controller may further receive a task instance corresponding to the periodic task from the primary control module, and schedule a run time for the periodic task at switchover based on the task instance. In addition, the secondary controller may schedule a run time for the periodic task at switchover based on a default period associated with the periodic task, if no task instance and no wakeup time element were received corresponding to the periodic task.

Abstract: An industrial control system employs a primary and secondary controller each having a processor and at least one I/O data table. Updating of the secondary processor's I/O data table is performed prior to the same data being transmitted to the controlled process. This eliminates possible retrogressive control at the time of switch-over of control from the primary industrial controller to the secondary industrial controller. Additional I/O data tables may be provided in each of the primary and secondary industrial controllers. In the case of the secondary industrial controller, this duplicate I/O data table temporarily holds data until the transmission is complete preventing the partial update of the working I/O data table of the secondary industrial controller. The duplicate I/O data table in the primary industrial controller allows simultaneous outputting of the I/O data transmitted to the controlled process without corruption while the user program of the primary industrial controller resumes execution.

Abstract: A redundant controller employs two controller chassis having replaceable functional modules interconnected electrically within the chassis. System back up modules in the chassis coordinate the switching of control from a primary to a secondary chassis according to chassis redundancy state information of the chassis stored in the backup modules and module redundancy state information stored in the modules unique to the modules.

Abstract: An industrial controller provides a primary controller and a redundant secondary controller and allows switchover between the controllers in the event of a failure in the primary controller. The process of qualification of the secondary controller in which its programming is made to match the primary controller may be inhibited to permit the secondary controller to maintain a clean version of an upgraded program executing on the primary controller. The clean program may be reverted to in the event an upgrading of the program in the primary controller is unsuccessful. Switchover is permitted even though the qualification of the secondary controller is not enabled.

Abstract: A redundant industrial controller system has a primary controller backed up by a secondary controller and recovers from a power loss by analyzing the state memories of the controllers to reach a determination of which controller would best be suited to assume primary control status without resorting to arbitrary tie-breaking procedures or race conditions. The rules and their inputs are applied by both controllers which independently make the determination as to which controller should be the primary controller.

Abstract: On-line upgrading of a primary industrial controller is provided through the use of a secondary industrial controller that may assume control of the process controlled by the primary industrial controller. A switch-over of control is orchestrated by a system back-up module that may detect removal of the functional components of the primary industrial controller to initiate the switch-over. Determination of removal of functional modules may be provided by a periodic polling of the functional components on the interconnecting communication link. The system back-up module designates one of the functional modules to poll the system back-up module so that complete coverage of removable components may be had.

Abstract: A redundant controller employs connection-based messaging to ensure reliability and determinacy in communications. The need to close connections and reopen connections with a backup module when control switches from a primary controller to a secondary controller is eliminated by keeping the secondary controller updated as to the connections that have been opened and having the secondary controller assume the connection identification numbers of the primary controller upon switch-over.

Abstract: An industrial control system employs a primary and secondary controller each having a processor and an I/O data table. Updating of the secondary processor's I/O data table is accomplished synchronously with execution of the program in the primary processor at a particular point in the program. A tracking of changes in the I/O data table of the primary processor is used to transmit only changes in the I/O table to the secondary processor thereby avoiding undue interruption of the executing program while preserving synchronicity.

Abstract: An industrial control system employs a primary and secondary controller each having a processor and at least one I/O data table. Updating of the secondary processor's I/O data table is performed prior to the same data being transmitted to the controlled process. This eliminates possible retrogressive control at the time of switch-over of control from the primary industrial controller to the secondary industrial controller. Additional I/O data tables may be provided in each of the primary and secondary industrial controllers. In the case of the secondary industrial controller, this duplicate I/O data table temporarily holds data until the transmission is complete preventing the partial update of the working I/O data table of the secondary industrial controller. The duplicate I/O data table in the primary industrial controller allows simultaneous outputting of the I/O data transmitted to the controlled process without corruption while the user program of the primary industrial controller resumes execution.

Abstract: The present invention constitutes a data crossloading system for use with a programmable controller system having primary and secondary (or "back-up") systems each of which have redundant hardware components and have data structures associated with these components. The present invention further relates to the interconnection of the hardware components and to the processes for providing redundant data structures which enable a secondary or back-up system to rapidly and effectively assume control when a malfunction occurs in a primary control system. Both systems are connected via the same remote data links to common I/O racks which interface to sensing and output devices on the equipment being controlled.

Abstract: A method and apparatus for providing multitasking of a plurality of requests queued as a list in a single task of an industrial controller, each request including one or more separate segments. State information relating to each request being minimal at the end of each segment. The method processing the requests on a round-robin basis, interrupting each request only at the end of each segment so as to minimize the memory required to store the state information.

Abstract: A communication module has a backplane interface circuit that enables the module to communicate with other components of the programmable controller, and has a network interface circuit which sends and receives messages via a serial communication link. A memory within the module stores a designation of a starting time, a designation of a length of a message repeat interval, and a file of message information. A clock circuit determines when the starting time occurs and thereafter determines the expiration of each successive occurrence of the message repeat period. A control mechanism responds to the clock circuit determining an occurrence of the starting time or determining an expiration of a message repeat interval, by operating network interface circuit to transmit a message, that contains the message information, over the serial communication link.

Abstract: A programmable controller governs the operation of a piece of equipment by executing machine language instructions compiled from a ladder diagram type control program. The control program as stored in the controller includes not only compiled machine language instructions, but also a tokenized version of the source code from which certain machine language instructions were compiled. The source code is provided only for those portions of the machine language program which cannot be easily decompiled to produce the corresponding source code. This program storage facilitates subsequent editing of the stored program via a terminal connected to the programmable controller. During the editing process, the original ladder diagram can be reconstructed from a combination of the machine language instructions and the tokenized version of the source code. In doing so, the machine language instructions, which have a one-to-one correspondence with the source code instructions, are decompiled using conventional techniques.

Abstract: A programmable controller for operating a machine to perform programmed functions allows the user to allocate the amount of processing time to be devoted to a machine control program and to user defined background tasks. The allocation is defined by an entry stored in one of several locations in a data table. Each occurrence of a timed interrupt steps the operating system through the data table. When the operating system accesses the location at which the entry is stored, the machine control program is assigned as lower execution priority than any background tasks to be executed. When the last storage location of the data table is accessed, the user control program is restored to a higher execution priority than the background tasks before initiating another stepping sequence through the data table.