Abstract: Method for setting up a redundant communication connection, and failsafe control unit, wherein a transport and/or switching functional unit of a communication device utilizes at least one communication network address associated with a primary control device and/or a secondary control device to set up two communication connections to a failsafe control unit that includes the primary control device and the secondary control device, where data transmitted via a first communication connection are forwarded from the primary control device to the secondary control device via a first synchronization connection such that data transmitted via a second communication connection are forwarded from the secondary control device to the primary control device via a second synchronization connection.

Abstract: A method with which one subsystem of a redundant automation system that is provided with a first subsystem and a second subsystem is operated as a master and another subsystem is operated as a slave, where the subsystems are provided with transmission and reception tasks to transmit and receive messages, and where messages are also interchanged with program path synchronization during a temporally asynchronous run through a program path in the master and the slave.

Abstract: A method for stipulating a starting time for an update for a control apparatus that controls at least one peripheral component in a process automation installation by producing control outputs is disclosed. The update requires at least one predetermined down time. The invention is based on a suitable starting time for performing an update in order to perform an update in the course of operation of a process automation installation without risk. The method involves detecting a current operating state for the at least one peripheral component, taking the detected operating state as a basis for using a controlled system model of the process to simulate what state trajectory the at least one peripheral component negotiates within the down time for a predetermined static control output, and checking whether the state trajectory lies exclusively within a range of admissible operating states, and, if appropriate, starting the update.

Abstract: To achieve an automatic adjustment of a monitoring time in an automation system with a first automation device and a second automation device, at least one of the two automation devices operates a measuring program. A desired ring interruption is carried out by the measuring program by blocking a ring port in order thus to provoke a ring reconfiguration that utilizes a reconfiguration time. The blockage of the ring port is canceled again after the reconfiguration time has elapsed. The ring port is blocked again if the ring port has been opened by the ring reconfiguration, and all routing tables are deleted. As a result of this, at least the peripheral units are triggered to learn new network routes. Runtimes of test telegrams are measured, and a maximum value of the measured runtimes is stored. The measured maximum value is used for a dynamic adjustment of the monitoring time.

Abstract: A method and an arrangement having redundant systems operating in parallel in a cyclic mode and reciprocally checking a result of the task of the other system on a regular basis, and wherein one system is selected or confirmed for the productive mode in the fault situation found, where a characteristic variable concerning an operating parameter is picked up for each of the systems in multiple/all cycles and used for updating statistical parameters, where at least when a disparity between results of the two systems is found, a current operating parameter is correlated with the statistical parameter for each system, and where the system for which the current operating parameter differs from the statistical parameter less is detected as the correctly operating system and used for the productive mode such that the degree of fault coverage can be increased and hence the availability of the overall system increased.

Abstract: The invention relates to a tool holder (10) which is embodied for rotation around a tool holder rotation axis (D) and which comprises at its one axial longitudinal end (10a) a tool segment (14) for receiving a tool, and at its other axial longitudinal end (10b) a coupling segment (16) for torque-transferring coupling to a machine tool (78), a measurement apparatus (28) for sensing data relating to the operation of the tool holder (10) being provided on the tool holder (10), which apparatus encompasses at least the following components:—at least one sensor (30, 32, 34, 36) supplying a sensed signal;—a signal transfer apparatus (38) for transferring a measured signal;—an electrical circuit (40) connected in signal-transferring fashion to the sensor (30, 32, 34, 36) and to the signal transfer apparatus (38); and—an energy supply apparatus (42) that is connected to the signal transfer apparatus (38) and to the electrical circuit (40).

Abstract: A method for reproducing the sequence of a program provided for process control in an automation device, wherein a program that corresponds to the program in the automation device with regard to process control is provided for processing using a backup device, where suitable measures can be used to image the complete history of the automation device and to reproduce the sequence of the program so that with regard to the processing of the program, it becomes possible to subsequently and repeatedly approach any desired time in the past and to reproduce all associated data.

Abstract: A method for monitoring failure tolerance for an automation installation is disclosed. The automation installation operates a process via a controlled system. At least two control apparatuses alternately regulate the controlled system in a control mode by outputting control outputs and failure of the currently regulating control apparatus prompts changeover to another of the control apparatuses. During the changeover, the controlled system continues to be operated in controller-less fashion for a down time. At least one operating point for the controlled system that is possible in control mode is ascertained. Controller-less operation is respectively simulated for each operating point for the duration of the down time. A state trajectory setting out from the operating point is ascertained for the controlled system and a check is performed to determine whether the state trajectory fails to meet a predetermined safety criterion. A predetermined protective measure is initiated to avoid the operating point.

Abstract: A method for stipulating a starting time for an update for a control apparatus that controls at least one peripheral component in a process automation installation by producing control outputs is disclosed. The update requires at least one predetermined down time. The invention is based on a suitable starting time for performing an update in order to perform an update in the course of operation of a process automation installation without risk. The method involves detecting a current operating state for the at least one peripheral component, taking the detected operating state as a basis for using a controlled system model of the process to simulate what state trajectory the at least one peripheral component negotiates within the down time for a predetermined static control output, and checking whether the state trajectory lies exclusively within a range of admissible operating states, and, if appropriate, starting the update.

Abstract: Regarding a method for operating an industrial controller, a control program executable in a processor that is arranged in the industrial controller is subdivided into a main block and several program blocks. The program blocks are processed under event control that takes a processing priority into consideration. The processor includes a multi-core processor having a plurality of independent sub-processors. The method includes assigning the main block to a first sub-processor, and executing a part program associated with the main block in the first sub-processor. The method also includes assigning each of the several program blocks to the additional sub-processors, and executing the part programs associated with the program blocks in the respective sub-processors. The method further includes operating a control device to evaluate as input variables the processing priority and an event assigned to the respective program block, and switching the sub-processors into active or inactive state using the evaluation.

Abstract: A method for operating an automation device having a CPU module that is configured to effect read or write access to local peripherals that are each provided with two interface modules that are each wired up in ring form to an input/output controller, wherein peripheral access operations are executed via one of the rings or via both rings, and wherein a redundancy manager that is provided for each ring is used to logically interrupt the respective ring in a normal mode and to initiate ring reconfiguration for this ring in the event of a physical ring interruption so as to provide a basis for allowing peripheral access operations during the actual period of this ring reconfiguration.

Abstract: A redundant automation system having a plurality of automation devices which are connected to one another comprises a plurality of master devices and a slave device. Each of the plurality of automation devices processes a control program in order to control a technical process. At least one of the plurality of automation devices operates as a slave and at least two of the plurality of automation devices, each operates as a master. The plurality of master devices is each configured to run a respective master program and to process processing sections of the respective master program of the respective master program, and the slave device is configured to process a corresponding slave control program for each master control program run by the plurality of master devices and, if one of the plurality of master devices fails, to assume the function of the failed master.

Abstract: A redundant automation system and a method for operating the redundant automation system which is provided with a first subsystem and a second subsystem that each process a control program while controlling a technical process, one of these subsystems operating as a master and the other subsystem operating as a slave, and the slave assuming the function of the master if the master fails such that it becomes possible to dispense with temporally synchronous communication between the participants with regard to the synchronization of the program processing in the two subsystems, thus reducing the communication load.

Abstract: A method for operating an automation system having at least two subsystems which are each provided with a control program, wherein relevant data from one subsystem is transmitted to the other subsystem within the scope of an updating phase of the automation system to transfer process control from a solo mode of one of the subsystems to a redundant control mode with another of the subsystems so as to facilitate updating.

Abstract: A method for operating an automation device having a CPU module that is configured to effect read or write access to local peripherals that are each provided with two interface modules that are each wired up in ring form to an input/output controller, wherein peripheral access operations are executed via one of the rings or via both rings, and wherein a redundancy manager that is provided for each ring is used to logically interrupt the respective ring in a normal mode and to initiate ring reconfiguration for this ring in the event of a physical ring interruption so as to provide a basis for allowing peripheral access operations during the actual period of this ring reconfiguration.

Abstract: A method for operating an automation system provided with a first subsystem and a second subsystem which each process a control program in order to control a technical process, one of these subsystems operating as a master and the other subsystem operating as a slave, wherein measures are provided which make it possible to provide diagnostic and/or test data for diagnostic and/or test measures during control operation, in which case it is not necessary to dispense with a breakpoint function.

Abstract: A method for reproducing the sequence of a program provided for process control in an automation device, wherein a program that corresponds to the program in the automation device with regard to process control is provided for processing using a backup device, where suitable measures can be used to image the complete history of the automation device and to reproduce the sequence of the program so that with regard to the processing of the program, it becomes possible to subsequently and repeatedly approach any desired time in the past and to reproduce all associated data.

Abstract: A redundant automation system having a plurality of automation devices which are connected to one another comprises a plurality of master devices and a slave device. Each of the plurality of automation devices processes a control program in order to control a technical process. At least one of the plurality of automation devices operates as a slave and at least two of the plurality of automation devices, each operates as a master. The plurality of master devices is each configured to run a respective master program and to process processing sections of the respective master program of the respective master program, and the slave device is configured to process a corresponding slave control program for each master control program run by the plurality of master devices and, if one of the plurality of master devices fails, to assume the function of the failed master.

Abstract: Regarding a method for operating an industrial controller, a control program executable in a processor that is arranged in the industrial controller is subdivided into a main block and several program blocks. The program blocks are processed under event control that takes a processing priority into consideration. The processor includes a multi-core processor having a plurality of independent sub-processors. The method includes assigning the main block to a first sub-processor, and executing a part program associated with the main block in the first sub-processor. The method also includes assigning each of the several program blocks to the additional sub-processors, and executing the part programs associated with the program blocks in the respective sub-processors. The method further includes operating a control device to evaluate as input variables the processing priority and an event assigned to the respective program block, and switching the sub-processors into active or inactive state using the evaluation.

Abstract: A method for operating a redundant automation system provided with a first subsystem and a second subsystem, wherein one of the subsystems is operated as a master (M) and the other subsystem is operated as a slave (S), the subsystems (M, S) are provided with transmission and reception tasks to transmit and receive messages, and wherein messages are also interchanged with program path synchronization within the scope of a temporally asynchronous run through a program path in the master and the slave.