Abstract: This document describes various techniques for automatically starting servers at low temperatures. A server may be powered on into a heating mode responsive to determining that a temperature of the server is below an operational temperature range. The server may then be restarted when the temperature of the server has increased to a temperature that is within the operational temperature range.

Abstract: A microcontroller includes a central processing unit, a PWM signal generation unit which generates a PWM signal according to a generation condition of a PWM signal set by the central processing unit, and a diagnostic unit which inputs the generated PWM signal therein and detects a pulse period and a pulse width, based on the input signal and which determines whether the detected pulse period and pulse width respectively coincide with a pulse period and a pulse width corresponding to the generation condition.

Abstract: Diagnostic systems and methods are presented for determining the current condition of a production plant and the resources thereof, in which successively more complex diagnostic abstractions are used to determine the plant condition, with a more complex abstraction being selected when the most recently selected diagnostic abstraction is logically inconsistent with the current fault status indications.

Abstract: An output module for an Industrial Process Control System that drives a load in a failsafe manner. The output module drives a load in response to a driving signal and includes a controller that generates a command signal and a drive enable signal in response to said driving signal. A keep alive circuit generates an active keep alive signal unless the drive enable signal is inactive. The output module includes a driver circuit that generates a drive signal in accordance with the command signal when the keep alive signal is active such that the load can be driven with a channel failsafe switch in response to the drive signal. The output module can be integrated into any of a number of industrial process control systems to enhance the operability of such systems.

Abstract: A plant control system includes a process computer (1) managing a plant, a PLC (2) interposed between the process computer (1) and equipment (3) of the plant, and a general-purpose PC (7) executing arithmetic processing based on arithmetic data received from the PLC (2) and transmitting arithmetic result data thereof to the PLC (2). The functions are divided such that sequential control logic is executed by the PLC (2) and complicated arithmetic processing is executed by the general-purpose PC (7), and the arithmetic result data outputted from the general-purpose PC (7) always passes through the PLC (2) so that consistency of the arithmetic result data is checked in the PLC (2).

Abstract: The invention is a system for monitoring the status of a field device having data including a data acquisition module, a first and a second diagnosis engine, and a client having a user input element for receiving user input status.

Abstract: A hazardous area in the region surrounding a reel transport of a reel changer is secured. A contactless protective device is located at the access boundaries of the region. This protective device can be deactivated for feeding and/or removing a known object and comprises an evaluation unit. The protective device is configured as a light curtain that is comprised of a plurality of light beams that run in parallel to each other. The evaluation unit includes an assembly for detecting the sequence of the interruption of the light beams during the feeding and/or the removal of an object. Based on the detected sequence of interruption of the light beams, a known object, that is permitted to access the hazardous area, is detected. The protective device is deactivated in this situation. Securing the hazardous area further includes the provision of a second contactless protective device that is permanently active.

Abstract: A system and method of managing therapy provided to patients in an institution. The system monitors all aspects of the medication delivery to a patient, as well as other information related to the patient, such as values of vital signs, laboratory results and patient factors such as history, diagnosis, allergies and the like. The system includes one or more databases of information, including institutionally developed rules, guidelines and protocol representing the best medical practices of the institution. The system provides alerts and/or recommendations based on the application of the rules to the information being monitored, and alerts care givers accordingly, providing for dynamic adjustment of the patient's therapy. The system also monitors the status of the alerts, and if no action is taken in a selected period of time, may escalate the priority of the alert and/or halt the delivery of medication to the patient until the alert is resolved.

Abstract: Systems and methods for write protecting Foundation Fieldbus linking devices are described. A message output by an external system for communication to a Foundation Fieldbus linking device may be received by a gateway device. The linking device may be identified by a virtual address included in the received message. The gateway device may determine whether the message includes a command to write data to the linking device or a Foundation Fieldbus device connected to the linking device. If it is determined that the message does not include a command to write data, then the gateway device may direct communication of the message to the linking device. If, however, it is determined that the message includes a command to write data, the gateway device may generate an exception for preventing the requested write operation.

Abstract: A PLC includes a detachable first storing unit configured to store first key data and protected from access, a second storing unit configured to store a user program in association with second key data, and a startup processing unit configured to execute startup processing for the PLC itself when a power supply is turned on. The startup processing unit includes a startup-processing-stop determining unit configured to read out the first key data stored by the first storing unit inserted in the PLC itself and the second key data stored in the second storing unit and associated with the user program and determine, based on collation of the read-out two key data, whether the startup processing is continued or the startup processing is stopped and abnormal processing is executed.

Abstract: A node of a fault-tolerant system relies upon a primary communication mechanism, when possible, for primary connection to a central server. The node monitors its primary connection to the server. While the primary connection is active, the node operates in a supervised mode, in that it generally does not perform a certain subset of tasks without having received real-time commands from the server to perform those tasks. However, when the node detects that it is no longer connected to the server, the node transitions into a fail-over mode. The node operates in the fail-over mode until the node detects that primary connection is re-established. While in fail-over mode, the node may execute a stored set of fail-over instructions that were provided by the server. The node may also attempt to establish a backup connection to the server via a second and different type of communication mechanism.

Abstract: An apparatus control method and system. The method includes disabling by a computer processor of a computing system, an apparatus. The computer processor retrieves detection data, safety gear detection data, and safety gear indication data. The computer processor analyzes the detection data, the safety gear detection data, and the safety gear indication data and in response to results of the analysis, the computer processor enables the apparatus.

Abstract: A safety-extension base connected to a main base and a control method thereof are disclosed, the base includes a communication unit, a system state monitoring unit, a module control unit, a memory unit, a state conversion unit and a safety-processing unit. The communication unit performs data communication with the main base. The system state monitoring unit monitors a state of the PLC system. The module control unit controls a general operation of the safety-extension base and outputs different cases of control signals. The memory unit stores the data transmitted from the main base and a program and information. The state conversion unit converts the state of the safety-extension base into the normal state or safety state. The safety-processing unit performs a control of the safety-extension base.

Abstract: In order to operate a safety control in an automation network having a master subscriber which implements the safety control, the safety control is assigned an identifier. When loading the safety control, the master subscriber checks whether the stored identifier in the safety master subscriber matches the identifier calculated form the safety control, and the automation network changes to a safe state if it is determined that the identifier differs.

Abstract: Embodiments of the invention provide systems, methods, and devices for controlling a machine. In one embodiment, the invention provides a system for a machine, the system comprising: a device including: a module adapted to perform a support function associated with a machine; and a power cable for connecting the module to an electrical supply, the power cable including an identifier operable to be read by the device; and a host computer operable to: receive from the device a request for a network identifier for the device, the request including information from the identifier; and obtain the network identifier using the information from the identifier.

Abstract: A process control system coordinates with an associated asset management system to implement a plant safety mechanism and, in particular, to prevent unintended changes to, or otherwise undesired operation of, one or more process control equipment resources in a process plant. A maintenance technician uses the asset management system to request access to one or more of the process control equipment resources. A process operator receives the request via the process control system and grants or denies the request. Process control equipment resources for which a process operator grants a request are inoperable, in part or in whole, by the process control system. Upon completion of the maintenance task, the maintenance technician requests to return control of the process control equipment resource to the process operator. The return is complete when the process operator acknowledges the return of the resource to the process control system.

Abstract: Control systems and methods for controlling certain systems, devices, and apparatus are described. A control system may include a memory and at least one processor. The memory may be operable to store both a Foundation Fieldbus protocol that facilitates communication with one or more Foundation Fieldbus devices and a second protocol that facilitates communication with one or more control devices. The at least one processor may be operable to access both the Foundation Fieldbus protocol and the second protocol, and to control the one or more Foundation Fieldbus devices and the one or more control devices. A network may facilitate communications between the at least one processor and both the one or more Foundation Fieldbus devices using the Foundation Fieldbus protocol and the one or more control devices using the second protocol.

Abstract: A production system in which a human and a robot may simultaneously perform a cooperative task in the same area while ensuring human's safety. A robot is positioned at one side of a working table, and an operator is positioned at the other side of the working table. The reachable area of the operator is limited by the working table. An area of the working table is divided into an area where only the operator may perform a task, an area where only the robot may perform a task, and an area where both the operator and the robot may enter. In a cooperation mode, the maximum movement speed of a component of the robot is limited lower than when the component of the robot is outside the cooperative task area, and, the motion of the robot is limited so that the robot does not enter a robot entry-prohibited area.

Abstract: In a method for the management of industrial trucks, the industrial truck has a control computer which transmits data via a data transmission system to a central service computer. The following steps are carried out: detection of malfunctions of the industrial truck by the control computer, generation of fault codes by the control computer corresponding to the malfunctions, transmission of the fault codes via the data transmission system to the central service computer, and generation by the central service computer of instructions and/or information about required replacement parts.

Abstract: A centralized controller 2 controls facility equipment 3a and 3b according to a sequence control program corresponding to standard functions of the facility equipment 3a and 3b. In addition, the centralized controller 2 receives control information for controlling a unique function of the facility equipment 3a and 3b and a PIN code, which are transmitted from a programmable controller 1, and transmits, if the PIN code is a valid code, the control information to the facility equipment 3a and 3b.

Abstract: A method of analyzing integrated circuit (IC) product yield can include storing, within a memory of a system comprising a processor, parametric data from a manufacturing process of an IC and determining a measure of non-random variation for at least one parameter of the parametric data using a pattern detection technique. The processor can compare the measure of non-random variation to a randomness criteria and selectively output a notification indicating that variation in the parameter is non-random according to the comparison of the measure of non-random variation to the randomness criteria.

Abstract: A system may include acquisition of a supply voltage information representing past supply voltages supplied to an electrical component, acquisition of a temperature information representing past temperatures of the electrical component, and control of a performance characteristic of the electrical component based on the supply voltage information and the temperature information. Some embodiments may further include determination of a reliability margin based on the supply voltage information, the temperature information, and on a reliability specification of the electrical component, and change of the performance characteristic based on the reliability margin.

Abstract: The invention relates to a safety controller and to a method for loading a new operating program onto such a safety controller. The safety controller has an input module for automatically reading process signals, a failsafe signal processing module for automatically processing the process signals, and a failsafe output module which produces control signals as a function of the signal processing module. The signal processing module comprises at least one programmable processor and at least one read only memory. A current operating program for the processor is stored in a non-volatile form in the read only memory. A download device for transferring a new operating program is provided in the safety controller, with the download device enabling or inhibiting the transfer of a new operating program in a failsafe manner as a function of enabling information.

Abstract: In a method for monitoring the functional capacity of an engine controller having a plurality of execution units, a comparison operating mode is provided, in which a torque monitoring program is executed on a plurality of execution units of the system, and signals outputted during the execution of the monitoring program by the execution units are compared with one another in order to recognize an error.

Abstract: A circuit arrangement which comprises at least two acceleration sensors for measuring an acceleration of at least one part of the hazardous device, at least one logic circuit for evaluating measured values of the at least two acceleration sensors, at least one memory for storing a comparison value, and at least one safety device controlled by an output of the logic circuit. The safety device is adapted to bring the hazardous device into a safe state in response to a switching command received via the output of the logic circuit. The logic circuit transmits the switching command to the safety device when the measured acceleration of the part of the hazardous device or a value derived from the measured acceleration has a predetermined ratio to the stored comparison value. Furthermore, a method for monitoring a hazardous device is also disclosed.

Abstract: A plant control system includes at least one control apparatus, and an engineering apparatus for changing a security state of the control apparatus. The control apparatus includes: a security management part for accepting a security level change request downloaded from the engineering apparatus and changing a security level of the control apparatus by referring to a password held by the control apparatus; and a change permission part for permitting a change in the security level by the security management part.

Abstract: A method, apparatus, and system for controlling a process are provided. The control device apparatus includes an input section configured to receive input signals from a controlled process, a first output section communicatively coupled to the input section wherein the first output section is configured to transmit the received input signals to a controller, and a second output section communicatively coupled to the controller, the second output section is configured to transmit control signals from the controller to the controlled process. The apparatus further includes a safety logic block communicatively coupled to the input section in parallel with the received input signals that are transmitted to the controller, the safety logic block is configured to generate a safety output signal using the received input signals, the safety logic block is further configured to transmit the safety output signal to the controlled process independent of the control signals.

Abstract: A medical robotic system comprises a number of components that may be monitored to determine their preventive maintenance needs by recording usage-related information for the monitored components into associated non-volatile memories. When usage of the component exceeds a specified usage threshold, the system displays a warning message on its display screen to have preventive maintenance performed for the component. If the usage continues without such maintenance and exceeds a higher usage threshold, the system displays an error message on its display screen and the system transitions into an error state during which medical procedures are not allowed to be performed. The usage-related information may also be communicated to a remote computer which gathers and processes usage-related information from a number of medical robotic systems to estimate resource requirements for timely performing preventive maintenance on the medical robotic systems, and anticipated service revenues from such maintenance.

Abstract: A plant control system includes: an engineering apparatus for defining change information so as to change definition information about the system; and a control apparatus for referring to the change information downloaded from the engineering apparatus to set an output value of a field device. The control apparatus includes a locking part for inhibiting setting of the output value of the field device.

Abstract: A variable indication estimator which determines an output value representative of a set of input data. For example, the estimator can reduce input data to estimates of a desired signal, select a time, and determine an output value from the estimates and the time. In one embodiment, the time is selected using one or more adjustable signal confidence parameters determine where along the estimates the output value will be computed. By varying the parameters, the characteristics of the output value are variable. For example, when input signal confidence is low, the parameters are adjusted so that the output value is a smoothed representation of the input signal. When input signal confidence is high, the parameters are adjusted so that the output value has a faster and more accurate response to the input signal.

Abstract: Methods and systems for a vital bus system for communicating data in a control system are provided. The system includes a plurality of data communication buses configured in a multiple redundant orientation and at least one safety supervisor module including a database including a plurality of logic rules. The logic rules are programmed to receive data from the plurality of data communication buses and to determine the validity of the received data from each bus using one or more of the plurality of the logic rules. If the received data is invalid, the logic rules are programmed to restore the validity of the data using one or more of the plurality of the logic rules. If the data can not be restored the logic rules are programmed to transmit an alert to the control system. Otherwise, the logic rules are programmed to transmit the validated data to an intended destination.

Abstract: Methods and architectures are described that provide function block mobility between PLCs. Each PLC configured with Mobile Function Blocks (MFBs) may forward and execute MFBs from each other. To enable MFB mobility over a communication bus, each PLC having one or more configured MFBs requires a Communication Function Block (CFB) and an MFB directory data block. Each PLC maintains an MFB directory data block to store its MFB directory which is used when other PLCs send requests to check the availability of MFBs they need to run new tasks.

Abstract: Systems and methods for integrated air traffic control management are provided. In one embodiment, a system comprises a first processing system including a FANS application for implementing a CPDLC and AFN system; a second processing system including an ATN application for implementing a PM-CPDLC and CM system; a third processing system implementing a HMI, the HMI configured to provide access to a first set of pages driven by the FANS application and a second set of pages driven by the ATN application; and an ATC Manager accessed from the HMI, the HMI configured to provide access to a third set of pages driven by the ATC manager, wherein the third set of pages selectively directs a user of the HMI to either the first set of pages or the second set of pages based on a selected ATC center.

Abstract: The inventive system and method for enabling external applications to display data in the security system has a table with a plurality of rules and an interface for processing the external application data for display, such that when an alert occurs in the security system, one of the rules defines a response to the alert and the device performs the response. This system and method protects the integrity of the security system as well as allows the display of data by external applications on the security system.

Abstract: Secure data write apparatus and methods for use in safety instrumented process control systems select a parameter associated with a process control element within the process control system and send first data associated with the parameter to the process control element. A confirmation associated with a request to write the first data to the process control element is received from a user and the second data is sent to the process control element in response to receiving the confirmation. The first and second data are compared at the process control element and the first or second data are written to a location in the process control element associated with the parameter if the first and second data are at least substantially identical.

Abstract: A system (10) and method (200) for managing components in a control system can include a plurality of devices (150) operably coupled to a processing system (125) for controlling a process run by the processing system. A server (100) is in communication with the plurality of devices. A client (20) is in communication with the server (100), wherein the client (20) or an instance between the client and the server, such as controller (15), is operable to identify at least one relevant item associated with the plurality of devices (150). The at least one relevant item is one of a plurality of items to be added to a group, an inactive one of the plurality of items of the group being activated or one of the plurality of items of the group wherein the group is being activated.

Abstract: A controller that controls both safety and application functions of connected equipment is disclosed. The controller allows a user to freely program application specific functions while preventing the application functions from affecting the safety functions of the controller. This may give the user more flexibility and leeway when programming the application specific programming functions, without having to worry about affecting the safe operation of the connected equipment.

Abstract: A method includes storing information regarding protocols required by a plurality of climate controllers and a plurality of cooling devices. A request message is received from a first of the climate controllers, the request message being addressed to a specific cooling device. A protocol required by the specific cooling device is determined using the stored information regarding protocols required by the cooling devices. The request message is converted to the protocol required by the specific cooling device. A response message is queued from the specific cooling device if the time period allowed for responding to the first climate controller has expired. The queued response message is sent to the first climate controller when a subsequent request message is received from the first climate controller.

Abstract: In some embodiments, a method includes characterizing a plurality of channels, each of the plurality of channels being a channel between a location and a respective one of the plurality of communication interfaces; for each of the plurality of communication interfaces, supplying signals to the communication interface and detecting interference that occurs at the location as a result of emissions radiated from the plurality of communication interface while the signals are supplied thereto; for each of the plurality of communication interfaces, determining an estimate of interference that would occur at the location as a result of emissions radiated from the communication interface while the signals are supplied thereto, based at least in part on the characterization of the channel between the location and the communication interface; and for each of the plurality of communication interfaces, comparing the estimate of interference that would occur at the location to the detected interference that occurs at the

Abstract: A method and system for examining, auditing, and safely evaluating process systems, including fluid pressure systems and nuclear plant systems, to aid overpressure design and/or sizing of overpressure equipment. The system includes a server subsystem, a storage subsystem, an assessment subsystem, and optionally a report generation subsystem, including computer hardware and application software for supporting these subsystems.

Abstract: A heavy equipment system is provided that includes a tractor for hauling a trailer, wherein the trailer may have its height adjusted by a hydraulic system controlled by a bank of control levers. Also included is a safety system that comprises a blocking member, such as a handle, a sensor and a communication system. The safety system operates to sense and communicate to a driver of the tractor the possibility that the trailer is in the raised position by sensing when the blocking member is in a position to allow access to the control levers. Advantageously, such a system can guard against a driver driving into a low overpass or other hazard with the trailer in an elevated position.

Abstract: A multicore processor for industrial control provides for the execution of separate operating systems on the cores under control of one of the cores to tailor the operating system to optimum execution of different applications of industrial control and communication. One core may provide for a reduced instruction set for execution of industrial control programs with the remaining cores providing a general-purpose instruction set.

Abstract: A building appliance controller is disclosed that includes a safety feature. In one illustrative embodiment, the building appliance controller may include a controller and a safety element. In some cases, the controller may include a control panel configured to provide an interface, and one or more option cards configured to communicate with the control panel via the interface and to provide additional functionality to the appliance controller. The safety element may include a first relay or other switching element that is configured to selectively pass power to the building appliance. In some illustrative embodiments, when an unsafe operating condition is detected by the control panel and/or the one or more option cards, the control panel and/or the one or more option cards may open the first relay of the safety element to cut off power to the building appliance.

Abstract: To predict occurrence of an earthquake so as to minimize damage by preventing an object to be processed from flying out of an opened container. An emergency earthquake notice, which is delivered based on a preliminary tremor through a communication line, is received by a reception part 28, or a preliminary tremor is directly detected by a preliminary-tremor detection part 60. A control part 29 carries out a first step in which an operation of a semiconductor manufacturing apparatus 1 is stopped based on the emergency earthquake notice received by the reception part 28 or the preliminary tremor detected by the preliminary-tremor detection part 60, and a second step in which, when the door mechanism is being opened, the door mechanism 15 is closed.

Abstract: A dual-technology motion sensor with an ultrasonic sensor element (transducer) and a PIR sensor element is disclosed. The dual-technology motion sensor is configured to modulate ultrasonic radiation emitted from the ultrasonic sensor element when the motion sensor detects a condition under which other wireless devices, especially ultrasound-based wireless devices, are in operation, thereby eliminating problems associated with interference.

Abstract: A fuel cell system control system includes a fuel cell system and a controller. The controller includes a display and a processor configured to execute a program for managing an operation of a fuel cell state machine having a plurality of states and capable of executing logic to execute state transitions, and a fuel cell failure detection and correction program, configured to detect one or more fuel cell system failures and correct each detected failure while the fuel cell system continues to operate. The control process includes the steps of representing an operation of a fuel cell control system as a state machine having one or more states, controlling the operation of the fuel cell system using the state machine, executing one or more states of the state machine, and correcting operational errors in the fuel cell control system while the fuel cell system continues to operate.

Abstract: A process device is configured to meet a desired Safety Integrity Level (SIL). A device interface is configured to couple to the process device and provide an output related to operation of a component of the process device. A component monitor monitors operation of the component and identifies a safety event of the component. A safety response module responds to a safety event of the component in accordance with a safety response.

Abstract: A monitoring system with dynamically configurable non-interfering signal processing is disclosed. In one aspect, data relating to the management of the operation of a machine and data relating to the safety protection of the machine are combined in a non-interfering manner.

Abstract: An aircraft system includes an aircraft subsystem generating monitor trips related to the health of the aircraft subsystem; and an area health manager coupled to the aircraft subsystem. The area health manager includes a data receiver for receiving the monitor trips from the aircraft subsystem; a fault detector for processing inputs based on the monitor trips to identify faults; and an execution sequence queue coupled to the fault detector for storing a plurality of execution entities. Each of the plurality of execution entities is associated with a specific logic operation in the fault detector that is executed when the associated execution entity is in a first predetermined state.

Abstract: A control system methodology that uses object-oriented software to integrate multiple control systems into a common object model. Object-oriented techniques are used to construct distributed applications in a multi-vendor open system environment for use in controlling and monitoring systems of varying size and configuration. Information is brought into a common object model and made available throughout the system. A custom programming language is included for object creation. Access to objects is controlled through a multi-level security protocol. Data flow is governed by a real-time information synchronization manager. Classes are used to implement the system in a platform independent way according to a “core class hierarchy” in which objects are organized to inherit behavior and perform predictably. A control engine allows the user to control the order of execution of objects. A script is provided for generating custom objects.