Abstract: A method for controlling a physical unit, involving: cyclically generating a plurality of controlling outputs, wherein the plurality of controlling outputs is provided in a redundant manner; applying a selected one of the controlling outputs to the physical unit; checking if at least the selected controlling output is correct; and selecting one of the control units whose controlling output was checked as correct to apply its controlling output to the physical unit (2) in a subsequent cycle, wherein the applying the selected one of the controlling outputs to the physical unit is performed before or during the step of checking.

Abstract: A combination of a component-based automation framework, software-based redundancy patterns, and a distributed, reliable runtime manager, is able to detect host failures and to trigger a reconfiguration of the system at runtime. This combined solution maintains system operation in case a fault occurs and, in addition, automatically restores fault tolerance by using backup contingency plans, and without the need for operator intervention or immediate hardware replacement. A fault-tolerant fault tolerance mechanism is thus provided, which restores the original level of fault tolerance after a failure has occurred—automatically and immediately, i.e., without having to wait for a repair or replacement of the faulty entity. In short, the invention delivers increased availability or uptime of a system at reduced costs and complexity for an operator or engineer by adapting automatically to a new environment.

Abstract: A combination of a component-based automation framework, software-based redundancy patterns, and a distributed, reliable runtime manager, is able to detect host failures and to trigger a reconfiguration of the system at runtime. This combined solution maintains system operation in case a fault occurs and, in addition, automatically restores fault tolerance by using backup contingency plans, and without the need for operator intervention or immediate hardware replacement. A fault-tolerant fault tolerance mechanism is thus provided, which restores the original level of fault tolerance after a failure has occurred—automatically and immediately, i.e., without having to wait for a repair or replacement of the faulty entity. In short, the invention delivers increased availability or uptime of a system at reduced costs and complexity for an operator or engineer by adapting automatically to a new environment.

Abstract: A method for controlling a physical unit, involving: cyclically generating a plurality of controlling outputs, wherein the plurality of controlling outputs is provided in a redundant manner; applying a selected one of the controlling outputs to the physical unit; checking if at least the selected controlling output is correct; and selecting one of the control units whose controlling output was checked as correct to apply its controlling output to the physical unit (2) in a subsequent cycle, wherein the applying the selected one of the controlling outputs to the physical unit is performed before or during the step of checking.