Abstract: A failsafe device for a vehicle is provided that includes a transmission of a vehicle and a controller configured to operate an oil supply unit and an emergency oil supply unit. The oil supply unit supplies oil to the transmission via a first oil channel and produces hydraulic pressure and the emergency oil supply unit supplies oil to the transmission via a second oil channel and produces the hydraulic pressure when an oil supply system fails.

Abstract: A method of detecting stall in an axial fan through acoustical measurements in air the air flow, includes measuring the sound emanating from the flow adjacent the fan, preparing a visual representation of the sound, comparing the visual representation with a library of fixed visual representations derived from a plurality of tests representative of the performance of the fan under a range of operating parameters, selecting the fixed visual representation most closely matching the visual representation of the said sound, and deriving a control signal from the selected fixed visual representation. The visual representations are formed by a symmetrised dot pattern (SDP) technique.

Abstract: A memory lock system is provided that includes: providing a controller; providing a connector connected to the controller for providing data to the controller; providing a memory connected to the controller for receiving and storing information from the controller; and manipulating an input device connected to the controller to unlock or lock data transfer between the connector and the controller, in the controller, between the connector and the memory, or in the memory.

Abstract: One data processor is provided with an interface for realizing connection with the other data processor. This interface is provided with a function for connecting the other data processor as a bus master to an internal bus of the one data processor, and the relevant other data processor is capable of directly operating peripheral functions that are memory mapped to the internal bus from an external side via the interface. Accordingly, the data processor can utilize the peripheral functions of the other data processor without interruption of the program being executed. In short, one data processor can use in common the peripheral resources of the other data processor.

Abstract: An adapter circuit for connecting a switching circuit of an airport visual aid is equipped with an LED as a light source and a secondary-side coil (secondary side) of a supply transformer, wherein at least one switch element is provided for selectively making or breaking the connection and wherein at least one trigger circuit is provided for actuating the switch element when a specified voltage level is exceeded, wherein the switch element is provided between the trigger circuit and the secondary side of the supply transformer and/or the trigger circuit is connected to the switch contact and to the switching circuit of the LED airport visual aid.

Abstract: An apparatus includes at least one first input/output (I/O) module having multiple first I/O channels. Each first I/O channel is configured to provide a communication path. The apparatus also includes a second I/O module having multiple second I/O channels. Each second I/O channel is configured to provide a redundant communication path for one of the first I/O channels. The apparatus is configured to provide the redundant communication paths for only a subset of the first I/O channels. The first I/O channels may include critical I/O channels and non-critical I/O channels, and the apparatus may be configured to provide the redundant communication paths for only the critical I/O channels. The apparatus can be configured to provide the redundant communication paths for the first I/O channels of a single first I/O module or multiple first I/O modules.

Abstract: The present invention relates to a safety switching device for actuating actuators in a fail-safe manner, and further relates to an emergency shut-off circuit comprising a safety switching device according to the present invention. The safety switching device includes at least one first and second safety input for receiving a first and second input signal, at least one first and second safety output for transmitting a first and second output signal, and a control unit for evaluating said input signals and for generating said output signals. The first and second safety outputs further comprise a feedback loop said that couples the output signals back to the control unit such that the control unit is operable to perform a test routine for testing said output signals.

Abstract: An embedded system is disclosed. The embedded system is used for preventing a processing machine from an abnormal phenomenon when at least one processing parameter setting value is inputted into the processing machine. The embedded system is electrically connected to the processing machine, and the processing machine comprises an input interface, a first storing medium, a first controller and a stepper motor. The embedded system comprises a second storing medium and a second controller. The second controller captures the a processing parameter setting value inputted and compares it with a security range, so as to determine whether the processing machine is able to perform process for a workpiece. When the second controller determines that the processing machine is not able to perform process for the workpiece, a stop signal is generated and transmitted to the processing machine to stop performing process for the workpiece.

Abstract: Physical presence verification by an industrial control system controller is described herein. One industrial control system controller includes a mechanism configured to verify that a user of the industrial control system controller is physically present at a location of the controller, a memory, and a processor configured to execute executable instructions stored in the memory to permit the user to perform industrial control operations using the controller only if the user is physically present at the location of the controller.

Abstract: An operation control apparatus includes a command generation portion that generates a command signal for commanding operation of a control surface, and first and second monitoring portions that monitor an abnormality of operation of first and second control portions, respectively, of the actuator control apparatus. The actuator control apparatus includes first and second control portions that generate a control signal for an actuator for driving the control surface and that are different in design, and a switching unit that switches the connection to the actuator from one of the first and second control portions to the other, when an abnormality is detected by the first and second monitoring portions. Accordingly, it is possible to monitor a generic failure, and realize redundancy enabling control of the overall operation of the actuator, from start to finish, when a generic failure has occurred, thus realizing further simplification and streamlining of the configuration.

Abstract: In a multi-sensing, wirelessly communicating learning thermostat that uses power-harvesting to charge an internal battery, methods are disclosed for ensuring that the battery does not become depleted or damaged while at the same time ensuring selected levels of thermostat functionality. Battery charge status is monitored to determine whether the present rate of power usage needs to be stemmed. If the present rate of power usage needs to be stemmed, then a progression of performance levels and/or functionalities are scaled back according to a predetermined progressive power conservation algorithm. In a less preferred embodiment, there is a simple progressive shutdown of functionalities turned off in sequence until the desired amount of discharge stemming is reached. Battery charge preservation measures are also described for cases when an interruption of external supply power used to recharge the battery is detected.

Abstract: The subject matter disclosed herein describes an improved system for self-monitoring of an industrial controller. Two processors are provided on a control board for the industrial controller. One of the processors is designated the control processor and executes the control program for the industrial control system. The other processor is designated the monitoring processor and verifies proper operation of the controller. The monitoring processor verifies proper operation of the industrial controller and is in communication with the control processor. The control processor periodically verifies that the monitoring processor is operational. If the monitoring processor ceases operation, the control processor generates a warning message and provides for a delayed shutdown of the industrial controller. The control processor may copy the current state of the industrial controller to memory.

Abstract: In embodiments of a stability control system, a computing device includes a device housing that is integrated with a display device, and the device housing tilts for multiple display positions. Pivotable components are mechanically-linked and pivot in coordination to position the device housing in a display position, and sensors detect positioning inputs that are received to re-position the device housing. Clutch mechanisms are implemented to limit and/or resist movement of the pivotable components based on the positioning inputs. A stability controller can be implemented to control the clutch mechanisms based on sensor data from the sensors to position the device housing in a display position.

Abstract: A technique for calculating the reliability of a control instruction with high precision is provided. A reliability calculation device that calculates reliability of a control instruction given to a control device which executes a control according to the control instruction includes an instruction acquisition unit, an information acquisition unit, and a reliability calculation unit. The instruction acquisition unit acquires the control instruction to the control device. The information acquisition unit acquires relevant information relevant to the control which is executed by the control device.

Abstract: The invention relates to an optoelectronic safety sensor comprising an electronic measuring device for generating measured signals which depend on a state of a safety zone observed by the safety sensor and an electronic evaluation unit for evaluating the measured signals. The electronic evaluation unit comprises a programmable logic controller integrated into the optoelectronic safety sensor for the logic evaluation of logic state variables which are derived from the measured signals.

Abstract: A system includes a functional control unit and a controller. The functional control unit is configured to enable and disable operation of a functional component. The controller is configured to receive a sensor signal, evaluate safety quality of the sensor signal, generate an evaluation parameter representing the safety quality of the sensor signal, and output the sensor signal with the evaluation parameter as a pair for receipt by the functional control unit. The functional control unit is configured to control operation of the functional component depending on the safety quality indicated by the evaluation parameter.

Abstract: A method and system for examining, auditing, and safely evaluating process systems, including fluid pressure systems and nuclear plant systems, to aid overpressure design and/or sizing of overpressure equipment. The system includes a server subsystem, a storage subsystem, an assessment subsystem, and optionally a report generation subsystem, including computer hardware and application software for supporting these subsystems.

Abstract: A SCADA system includes a main switching hub and a backup switching hub that relay transmission data between a wind turbine generator and terminals provided in another SCADA system and client terminals, and a network switch for performing switching between the main switching hub and the backup switching hub for relaying transmission data between the wind turbine generator and the terminals. A backup remote I/O connected to the backup switching hub causes the network switch to perform switching based on a switching command from a SCADA terminal input via the backup switching hub. This serves to solve a data transmission problem caused by a problem in a switching hub on the wind turbine generator side from a remote location.

Abstract: A control system is disclosed. The control system may have a physical sensor that may output a physical output value, and a virtual sensor network that may output a virtual output value. The control system may also have an electronic control module that may be configured to receive the physical output value from the physical sensor and receive the virtual output value from the virtual sensor. The electronic control module may be further configured to determine a trust level of the physical sensor based on the physical output value, and determine that the trust level of the physical sensor is below a first threshold trust value. The electronic control module may control a machine based on the virtual output value responsive to determining that the trust level of the physical sensor is below the first threshold trust value.

Abstract: An illustrative example system for monitoring a plurality of events in a manufacturing facility includes a plurality of monitoring devices. Each of the monitoring devices obtains data regarding a selected one of the events. A reporting device receives the data obtained by the monitoring devices and provides a report regarding the monitored events. The report includes information regarding at least one characteristic of each of the monitored events. The information in the report is dynamically updated to provide a real time indication of the characteristics of the monitored events. The real time indications are presented in respective cells of the report.

Abstract: A method for detecting a mechanical overload condition of an energized linear actuator to prevent commanding an activation signal to the linear actuator that may mechanically overload the linear actuator includes monitoring feedback variation of a movable element associated with the linear actuator including monitoring a present feedback signal of the movable element, monitoring a previous feedback signal of the movable element, comparing the present feedback signal and the previous feedback signal and determining the feedback variation based on the comparing. The feedback variation is compared to a feedback variation threshold. An input signal associated with the activation signal for controlling the linear actuator is monitored and the input signal compared to an input signal threshold. The electrical overload condition is detected when the feedback variation is less than the feedback variation threshold and the input signal is greater than the input signal threshold.

Abstract: A system for managing an electric power delivery system is disclosed that includes a set of remote intelligent electronic devices (IEDs) and a central IED. The remote IEDs may be configured to obtain information related to rotor angles, operating frequencies, rate of change of frequency, rotating inertia, and power consumption levels of loads and generators included in the electric power delivery system. The central IED may communicate with the remote IEDs to determine which loads and generators are associated with a sub-grid of the electric power delivery system and whether to disconnected certain loads or generators. Based on this determination, the central IED may direct the remote IEDs to disconnect loads or generators from the electric power delivery system, or to rapidly increase or decrease generator output as appropriate.

Abstract: Safety-related functions in automation systems for controlling industrial production processes are achieved by providing a simple and safe parameterization of the safety-related apparatuses of such an automation plant. After a start signal sent by the communication master is received, all further activities for parameterization are controlled by a logic module.

Abstract: In order to guard against a possible erroneous configuration and/or programming of a safety control an apparatus for configuring and/or programming a safety control having a display for displaying a program part of the safety control in the form of a block diagram is provided in accordance with the invention, wherein individual blocks represent program elements, a memory unity having at least one processing element, in particular a logic link and/or a function and having both safety related as well as non-safety related communication elements which in particular form input signals and output signals and having a calculation unit for selecting the processing and communication elements in the memory unit and for the generation of a link of the selected processing and communication elements in the block diagram indicated in the display, wherein the calculation unit is configured in such a way that a communication element characterized as a non-safety related communication element results at an output side of the

Abstract: A method to build, manage and analyze a gap analysis model in software of safety instrumented system architecture for a safety instrumented systems in a facility. The safety instrumented system architecture has at least one instrumented protective function and the non-transitory computer instructions use a real world software model in support of process safety lifecycle management.

Abstract: Certain embodiments of the invention may include control systems and methods for monitoring environmental variables, performance variables and conditioning electrical power in energy-recapture sources of mechanical energy, which would otherwise be dissipated, as exemplified by farms for energy-harvesting to provide available electrical energy. Said farms may include one or more energy-recapture sources. One method for controlling may include measuring individual source energy output of one or more energy-recapture sources and measuring conditions of one or more energy-recapture sources via a controller that facilitates communication with one or more energy-recapture sources.

Abstract: A system is provided. The system includes a plurality of nodes. One of the plurality of nodes is designated as a server node, and the others of the plurality of nodes are designated as Human Machine Interface (HMI) client nodes. The designated server node comprises a network interface configured to communicate with a Programmable Logic Controller (PLC) either directly or through a network switch. Each of the designated HMI client nodes includes a network interface configured to communicate with the designated server node through one or more of a network switch, and another designated HMI client node. Also, the each of the designated HMI client nodes includes a failover module configured to detect a failure of the designated server node and designate a new server node from among the designated HMI client nodes based on detecting the failure of the designated server node.

Abstract: Disclosed herein is a method for monitoring performance of equipment located in an automation environment including identifying a sequence of tasks performed by the equipment, wherein each task in the sequence is defined by a series of signals; for each task in the sequence: (a) collecting data pertaining to the series of signals; (b) determining a completion time based on the collected data; and (c) determining a difference between the determined completion time and a predetermined reference value indicative of an expected completion time; repeating (a)-(c) for a plurality of repetitions of the sequence; summing, over the plurality of repetitions of the sequence, at least some of the determined differences to calculate an accumulated variance value for each given task; and selectively generating a predictive failure indication based on the accumulated variance values.

Abstract: A diagnostic system and method for a field device implemented in a safety instrumented system includes detecting an occurrence of a safety event associated with the field device, overriding normal control of the field device to cause the field device to enter a safe state in response to the detected occurrence of the safety event, verifying the override of normal control of the field device, and transmitting a control signal to cause the field device to enter the safe state.

Abstract: A safety-extension base connected to a main base and a control method thereof are disclosed, the base includes a communication unit, a system state monitoring unit, a module control unit, a memory unit, a state conversion unit and a safety-processing unit. The communication unit performs data communication with the main base. The system state monitoring unit monitors a state of the PLC system. The module control unit controls a general operation of the safety-extension base and outputs different cases of control signals. The memory unit stores the data transmitted from the main base and a program and information. The state conversion unit converts the state of the safety-extension base into the normal state or safety state. The safety-processing unit performs a control of the safety-extension base.

Abstract: An integrated monitoring, control and equipment maintenance and tracking system and method is provided for managing a plurality of field devices. The integrated and coordinated system includes the monitoring and control system that uses safety subsystem field device data and process control subsystem field device data. When a compromised field device is determined, e.g., by the safety system and/or the process control system, information about testing, maintenance, repair or replacement is conveyed to the monitoring and control system. This information is used to modify the work orders created by the equipment maintenance and tracking system processor such that the compromised field device, or a field device at a location of the compromised field device, is not subject to unnecessary or excessively redundant testing.

Abstract: A safety controller designed to control an automated installation having a plurality of sensors and a plurality of actuators. A method for generating a user program for the safety controller comprises the step of generating a source code having a number of control instructions for controlling the actuators and having a number of diagnosis instructions for producing diagnosis reports. Safety-related program variables are processed in failsafe fashion during execution of the control instructions. A machine code is generated on the basis of the source code. At least one checksum is determined for at least some of the machine code. The diagnosis instructions are ignored for the determination of the checksum.

Abstract: An electronic device including a processor, a sensor in communication with the processor and a protective mechanism. The protective mechanism is in communication with the processor and is configured to selectively alter a center of mass of the electronic device. Additionally, the electronic device also includes an enclosure configured to at least partially enclose the processor and the sensor.

Abstract: An apparatus includes a command generation portion that generates the command signal, and a first monitoring portion that monitors an abnormality relating to actuation of the actuator control apparatus. The actuator control apparatus includes a control portion and a second monitoring portion. The control portion generates a control signal for controlling operation of the actuator in accordance with the above-described command signal. The second monitoring portion monitors an abnormality that relates to actuation of the actuator control apparatus and that is different in type from an abnormality monitored by the first monitoring portion.

Abstract: This invention relates to a communication system assembly comprising a communication module and a safety module, wherein the communication module is adapted to be connected to a network and to a host system, wherein the communication module is adapted to receive data from the network and provide a subset of said data as safety data to said safety module and provide a different subset of said data as process data to the host system.

Abstract: A method for plant monitoring with a fieldbus of process automation technology, wherein a plurality of field devices communicate with a process control unit and a plant monitoring unit The method steps are carried out as follows: the regular, process-control, data traffic on the fieldbus is monitored by the plant monitoring unit; an examination of the telegrams of the regular data traffic for information indicating a diagnostic event at one of the field devices is performed; and in case a telegram is detected having an indication of a diagnostic event, the plant monitoring unit requests further diagnostic information from the pertinent field device.

Abstract: To perform control in synchronization with a control cycle of a control target while maintaining safety. A safety controller includes: a processor; a system program for controlling allocation of an execution time of the processor to tasks; a signal generation unit that generates a periodic carrier signal; a control unit that updates a control content for the control target with a control content instructed by instruction information output from the processor, every first predetermined cycle of the carrier signal, and performs PWM control for the control target; and an interrupt signal generation unit that outputs an interrupt signal to the processor every second predetermined cycle of the carried signal.

Abstract: Embodiments of the disclosure relate to real-time debugging systems and methods. In one embodiment, a system that includes a server module and a client module can be provided. The server module can be executable on a first computer and can be adapted to use a native communications format for interactive transfer of industrial automation data between the first computer and at least one industrial automation element. The client module, which can be executable on the same computer as the server module or on a different computer, can include a debugging application configured to use a universal communications format for communicatively interacting with the server module for accessing the industrial automation data and debugging one or more programming portions associated with the industrial automation data.

Abstract: A method and system for producing a plc tag database is provided. The method is for use with a set of fragment types, a set of tag values for each fragment type and a collection of PLC programming logic. The collection contains a PLC programming code for each of a plurality of classes of equipment. A PLC tag database is produced for a project. The classes of equipment required for the project are selected together with a quantity required for each class of equipment selected. A PLC logic associated with the PLC programming code for said each class, and tags defined by the PLC logic, are replicated a number of times equal to the quantity of each class selected. A specific PLC card type, rack and slot is assigned to selected tags in accordance with the requirements of the project.

Abstract: A method and apparatus for thermal management of components and functional subsystems of a handheld device, including for a peripheral device electrically coupled to thereto. A power source provides power to a plurality of functional subsystems of the handheld device and optionally the peripheral device. The components and functional subsystems comprise predetermined thermal signatures.

Abstract: A power electronic control circuitry device comprises the following intercommunicating distinct hardware physical entities: a digital microcontroller unit (UNMC) for managing the operation of the device, hardened to withstand the effects of radiations in space; a digital fast regulation unit (UNRR) for controlling priority and real-time processes, hardened to withstand the effects of radiations in space; a digital communication unit (UNC) for communications external to the device, hardened to withstand the effects of radiations in space; a digital tracing and debugging unit (UNTD) for detecting errors in the design of the device; and a digital non-volatile memory (MRN) for storing information representative of the initial configuration of the device, hardened to withstand the effects of radiations in space.

Abstract: The invention provides a control system which is resistant to external interference such as hacking. The control system receives sensor data from a remote sensor indicating a physical condition such as temperature, flow rate, or internal pressure, and provides operational data to a remote operational mechanism such as those found in a variety of production and manufacturing environments which is adapted to influence the physical condition. The system employs a memory unit which contains a data set establishing range of operational values for the operating mechanism. A programmable logic circuit accesses the data set and the sensor data, allowing the programmable logic circuit to generate the operational data for the remote operational mechanism. To maintain the data in pristine state, a programmable unit periodically accesses the memory unit to verifying that the range of operational values within the data set is within a prescribed range and adjusts the data set to comply with the prescribed range.

Abstract: A method for detecting an abnormal traffic on a control system protocol, includes: checking whether session information exists in a management table; adding a new entry to the management table; checking whether a transaction ID in a table entry is the same as that of the received MODBUS request message; and checking whether data and length thereof of the received MODBUS request message are the same as those in the table entry. Further, the method includes detecting an abnormal traffic; and updating the table entry with packet information of the MODBUS request message.

Abstract: Disclosed is a diagnostic processing system including an onboard terminal system and a server connected together via radio communication channels. The onboard terminal system is provided with a data receiving unit for receiving data from sensors arranged on a self-propelled machine and a first diagnostic unit for diagnosing an abnormality of the self-propelled machine, and the server is provided with a second diagnostic unit for diagnosing the abnormality of the self-propelled machine. The diagnostic processing system is configured such that one of the first diagnostic unit and second diagnostic unit performs a primary diagnosis as to the abnormality of the self-propelled machine based on the data received at the data receiving unit and transmits a result of the primary diagnosis to the other diagnostic unit, and upon receipt of the result of the primary diagnosis, the other diagnostic unit performs a secondary diagnosis based on the result of the primary diagnosis.

Abstract: A method for monitoring performance of at least one task in controlled equipment is disclosed herein. The method includes collecting a series of signals associated with the at least one task, at least some of the signals in the series define timing values for the at least one task. comparing each of at least some of the timing values to a reference value, generating an accumulated variance value based on the comparisons and selectively generating a predictive failure indication based on the generated accumulated variance value.

Abstract: State machine engines are disclosed, including those having an inter-rank bus control system, which may include a register. The state machine engine may include a plurality of configurable elements, such that each of the plurality of configurable elements comprises a plurality of memory cells. These cells may analyze data and output a result of the analysis. The IR bus control system may halt a write operation of data to be analyzed by the cells based, at least in part, on one or more conditions.

Abstract: In a method for an electronic device to adjust fool-proofing functions of operations, an algorithm corresponding to each of the operations, and ranges for triggering the fool-proofing functions of the operations are preset. When an operation inputted by an operator is obtained, the method calculates a skilled value of the operation according to reference parameters of the operator and an algorithm corresponding to the operation. The method further determines a fool-proofing function of the operation that is triggered by the electronic device according to the skilled value and the ranges for triggering the fool-proofing functions, and adjusts the electronic device to execute the determined fool-proofing function.

Abstract: A method may comprise receiving, at a central controller, a command, from a remote control, to adjust a feature of a first component of an air mattress framework; relaying, from the central controller, the command to the first component; receiving from the first component at the central controller, an indication of the success of the command; and relaying the indication from the central controller to the remote control.

Abstract: A fault tolerant controller system includes a first controller and a second controller. One of the first and second controllers designated as a primary controller for generating control signals intended to control actuation devices on a vehicle under non-fault operating conditions, and the other of the first and second controllers designated as a secondary controller generating control signals intended to control actuation devices on the vehicle. The actuation devices are responsive only to the designated primary controller. An error is detected in the primary controller and a message is transmitted from the faulty controller to the non-faulty controller identifying the error. The non-faulty controller is subsequently designated as the primary controller. The control signals including an identifier that identifies the non-faulty controller as the designated primary controller. In response to detecting the error, the faulty controller is reset to operate in a safe operating mode as the secondary controller.

Abstract: A control panel is used to control and/or monitor an automation system. The control panel may be removed from a mounted location to repair or replace the control panel. Replacement may be performed by a different provider of automation systems, potentially without prior notice to the current provider of the automation system. To alert the provider of the replacement, the control panel may use an anti-tamper switch to detect removal from the mounted location. A signal may be sent to a remote service system indicating the removal. If the control panel also loses AC power, or if the control panel loses all power, the remote service system may assume that the control panel is being replaced. In response, the remote service center may request that a customer service representative contact the customer to potentially retain the customer, recover equipment, or resolve any concerns about the automation system equipment.