Abstract: A programmable logic controller for an industrial control system is disclosed which includes an application logic execution layer and at least one of an update checking layer and an output checking layer. The application logic layer is configured for processing sensor input data to generate an output parameter for an actuator. The output checking layer is configured for outputting only an allowed output parameter to the actuator. The update checking layer is configured for verifying whether application logic update defined by application logic update data corresponds to an application logic update in a list of allowed logic updates, and the application logic is updated only if the update data is allowed application logic update data.

Abstract: A controller module, method, and a non-transitory computer program product are disclosed for the dynamic configuration of an industrial control system, which can include a current settings receiver configured to receive current configuration and security settings of the industrial control system, a changed settings receiver configured to receive changed configuration settings of the industrial control system, a settings analyzer configured to determine, based on the current configuration and security settings and the changed configuration settings, updated configuration and security settings of the industrial control system, and a dynamic activator configured to dynamically establish at least one communication path in order to activate updated configuration and security settings of the industrial control system.

Abstract: A programmable logic controller for an industrial control system is disclosed which includes an application logic execution layer and at least one of an update checking layer and an output checking layer. The application logic layer is configured for processing sensor input data to generate an output parameter for an actuator. The output checking layer is configured for outputting only an allowed output parameter to the actuator. The update checking layer is configured for verifying whether application logic update defined by application logic update data corresponds to an application logic update in a list of allowed logic updates, and the application logic is updated only if the update data is allowed application logic update data.

Abstract: A controller module, method, and a non-transitory computer program product are disclosed for the dynamic configuration of an industrial control system, which can include a current settings receiver configured to receive current configuration and security settings of the industrial control system, a changed settings receiver configured to receive changed configuration settings of the industrial control system, a settings analyzer configured to determine, based on the current configuration and security settings and the changed configuration settings, updated configuration and security settings of the industrial control system, and a dynamic activator configured to dynamically establish at least one communication path in order to activate updated configuration and security settings of the industrial control system.