Abstract: A control device includes first and second control modules. The first control module is configured to generate process data at t1, send the process data to the second control module via a communication channel, receive a response to the process data, and process the process data at t4. The second control module is configured to receive the process data from the first control module, process the process data at t2, generate the response at t3, and send the response to the first control module. The times t1, t2, t3, and t4 are in chronological order. In various implementations, the first and second control modules jointly guarantee a minimum duration ?1 between t1 and t2. In various implementations, the second control module guarantees a minimum duration ?2 between t2 and t3. In various implementations, the first and second control modules jointly guarantee a minimum duration ?3 between t3 and t4.

Abstract: A user program for a safety controller is created by means of a program editor. The user program has a first program portion and at least one additional program portion. The first program portion defines safety-related logical dependencies between selected sensor signals and actuator signals. The user program is compiled and linked, in order to obtain an executable original program code. The original program code is transferred to a first memory of the safety controller and executed by a processor of the safety controller. The first program portion may be modified and compiled in order to obtain a modified first code portion. The modified first code portion is transferred to a second memory of the safety controller while the original program code is executed. The modified first code portion is then executed in addition to the original additional code portion and instead of the original first code portion.

Abstract: An apparatus for controlling an automated installation has a first controller and a second controller that are connected to one another via a communication network. The first and second controllers each have a local clock and execute control tasks. The first and second controllers each further have a synchronization service that is used to synchronize the respective local clocks to a common reference clock. A timer repeatedly sends a trigger message to the first and second controllers. Each of the two controllers, on receiving the trigger message, determines a local time. The controllers interchange the respective local time and each compute a difference between their own local time and the local time obtained from the other controller. On the basis of the difference, each of the two controllers controls a local actuator.

Abstract: An apparatus for controlling an automated installation has a first controller and a second controller that are connected to one another via a communication network. The first and second controllers each have a local clock and execute control tasks. The first and second controllers each further have a synchronization service that is used to synchronize the respective local clocks to a common reference clock. A timer repeatedly sends a trigger message to the first and second controllers. Each of the two controllers, on receiving the trigger message, determines a local time. The controllers interchange the respective local time and each compute a difference between their own local time and the local time obtained from the other controller. On the basis of the difference, each of the two controllers controls a local actuator.

Abstract: A user program for a safety controller is created by means of a program editor. The user program has a first program portion and at least one additional program portion. The first program portion defines safety-related logical dependencies between selected sensor signals and actuator signals. The user program is compiled and linked, in order to obtain an executable original program code. The original program code is transferred to a first memory of the safety controller and executed by a processor of the safety controller. The first program portion may be modified and compiled in order to obtain a modified first code portion. The modified first code portion is transferred to a second memory of the safety controller while the original program code is executed. The modified first code portion is then executed in addition to the original additional code portion and instead of the original first code portion.

Abstract: A safety controller for controlling an automated installation in accordance with a user program has a plurality of control components. At least some of the control components have a respective data bus interface. The data bus interface is designed to receive and send data. The safety controller also has a data bus to which the plurality of control components are connected via the respective data bus interfaces for the purpose of interchanging data. A configuration interface is designed to receive configuration data ascertained on the basis of association data generated by a programming tool. The configuration data determine at least one characteristic of the data bus or of at least one data bus interface.

Abstract: A new method and to a new programming tool for creating a user program for a safety controller is disclosed. The new method and programming tool exploit a matrix-type organization of occurring programming tasks. Itemized software components allocated to specific hardware components are combined with aspect blocks that enable programming grouped according to functional control aspects of the system to be controlled.

Abstract: A safety controller for controlling an automated installation has a control unit to which a plurality of control input signals are supplied from the sensors of the installation. The control unit produces a plurality of control output signals on the basis of the control input signals in accordance with a user program running in said control unit in an automatic mode. The plurality of control output signals actuate the actuators. The safety controller also has a diagnosis evaluation unit that ascertains which one of a plurality of operating states is present at a defined instant of time and produces an operating state signal which represents the ascertained operating state. A diagnosis selection unit generates a diagnosis report as a function of the operating state signal and as a function of a user access authorization signal and/or a special operating mode signal.

Abstract: A network having a plurality of subscribers has at least one message transmitter and at least one message receiver. The at least one message transmitter sends messages at predefined time intervals. The message receiver receives the messages at the predefined time intervals. A delay time of the messages is monitored on the basis of time outs. In addition, at least one of the subscribers repeatedly estimates a current delay time using a time measurement between sending out a request message and receiving a response message. The estimated delay time is compared with a predefined threshold value. If the estimated delay time exceeds the defined threshold value, an error signal is generated.

Abstract: A safety controller for controlling an automated installation in accordance with a user program has a plurality of control components. At least some of the control components have a respective data bus interface. The data bus interface is designed to receive and send data. The safety controller also has a data bus to which the plurality of control components are connected via the respective data bus interfaces for the purpose of interchanging data. A configuration interface is designed to receive configuration data ascertained on the basis of association data generated by a programming tool. The configuration data determine at least one characteristic of the data bus or of at least one data bus interface.

Abstract: A new method and to a new programming tool for creating a user program for a safety controller is disclosed. The new method and programming tool exploit a matrix-type organization of occurring programming tasks. Itemized software components allocated to specific hardware components are combined with aspect blocks that enable programming grouped according to functional control aspects of the system to be controlled.

Abstract: A safety controller for controlling an automated installation has a control unit to which a plurality of control input signals are supplied from the sensors of the installation. The control unit produces a plurality of control output signals on the basis of the control input signals in accordance with a user program running in said control unit in an automatic mode. The plurality of control output signals actuate the actuators. The safety controller also has a diagnosis evaluation unit that ascertains which one of a plurality of operating states is present at a defined instant of time and produces an operating state signal which represents the ascertained operating state. A diagnosis selection unit generates a diagnosis report as a function of the operating state signal and as a function of a user access authorization signal and/or a special operating mode signal.

Abstract: A network having a plurality of subscribers has at least one message transmitter and at least one message receiver. The at least one message transmitter sends messages at predefined time intervals. The message receiver receives the messages at the predefined time intervals. A delay time of the messages is monitored on the basis of time outs. In addition, at least one of the subscribers repeatedly estimates a current delay time using a time measurement between sending out a request message and receiving a response message. The estimated delay time is compared with a predefined threshold value. If the estimated delay time exceeds the defined threshold value, an error signal is generated.