Abstract: A system for performing statistical process control. A storage device stores a plurality of SPC charts, specifying data collected from a system during testing. A controller categorizes the SPC charts into a plurality of groups based on characteristics thereof. A detector determines whether the charts in any of the groups violate a preset rule. An alarm generator generates alarm information identifying the chart violating the rule.

Abstract: In order to operate a safety control in an automation network having a master subscriber which implements the safety control, the safety control is assigned an identifier. When loading the safety control, the master subscriber checks whether the stored identifier in the safety master subscriber matches the identifier calculated form the safety control, and the automation network changes to a safe state if it is determined that the identifier differs.

Abstract: This invention relates to safety instrumented systems (“SIS”) for monitoring and controlling chemical and other industrial process field devices, and that are responsive to signals for the emergency shutdown of the process or system. The patent will significantly improve the reliability of communications within an emergency shutdown system, reduce unwanted trips, and adapt to process conditions by failing to a safe mode in dynamic conditions that are not considered by prior art logic solvers.

Abstract: A method for a safety-oriented industrial automation component, wherein the controller is connected to the automation component by a data link includes providing, by a user, an input to the controller at a first user interface. The controller transmits a result of the input to the automation component. The result of the input is used in the automation component to calculate a first test value. The input is converted into a status display in the controller and is output at a second user interface. Here, the user or another user acknowledges the status display by inputting a confirmation, after which a second test value is formed from the status display and the confirmation in the controller, and the second test value is transmitted to the automation component. Finally, the first and second test values are compared in the automation component and the result of the input is used if the comparison is positive.

Abstract: The invention concerns a redundant computerizing system comprising additionally to a master programmable automaton and a standby programmable automaton, a computerized monitoring device enabling a memory image of the comparison process concerning a certain number of output signals of the computerizing system to be set up.

Abstract: An apparatus, method, and computer program are provided for controller performance monitoring in a process control system. A level of disturbance associated with the process system is determined, and at least one value identifying a stability measure of a controller in the process system is determined using the determined level of disturbance and operating data associated with operation of the process system. The at least one value is compared to at least one threshold value, and a problem with the controller is identified based on the comparison. As an example, the process system could represent a product production system. Also, the operating data could include at least one of: measurement data from one or more sensors and control data for one or more actuators. The controller may be operable to receive the measurement data and generate the control data.

Abstract: A prognostic and health accuracy maintenance system and method for a system following on-site replacement of a component in the system is provided. A system characterization model of at least portions of the system is generated and embedded within a controller in the system. The system characterization model is adapted to receive a plurality of signals that are each representative of an operational parameter within the system and is responsive to each of the signals to generate simulation response data and determine system health based, at least in part, on the simulation response data. When a component within the system is replaced, a determination is made as to whether the replacement component exhibits one or more operational performance characteristics that differ from the component it replaced. If so, the embedded system characterization model is updated in-situ.

Abstract: A building appliance controller is disclosed that includes a safety feature. In one illustrative embodiment, the building appliance controller may include a controller and a safety element. In some cases, the controller may include a control panel configured to provide an interface, and one or more option cards configured to communicate with the control panel via the interface and to provide additional functionality to the appliance controller. The safety element may include a first relay or other switching element that is configured to selectively pass power to the building appliance. In some illustrative embodiments, when an unsafe operating condition is detected by the control panel and/or the one or more option cards, the control panel and/or the one or more option cards may open the first relay of the safety element to cut off power to the building appliance.

Abstract: The present invention quickly resolves troubles in an analyzer and performs effective external quality control management. An analyzer (2) and a control device (1) are connected by a network (3). Error data and sample data taken from assay of a quality control substance are transmitted from the control device (1) to the analyzer (2). The analyzer (2) is made to be remotely operable from the control device (1) and when troubles arise repair from the control device (1) is possible. The control device (1) tallies sample data, and provides the tally results to a Web page. The analyzer (2) accesses the Web page using a WWW browser, and can perform external quality control in real time.

Abstract: A safety control device for ensuring safety of an object to be controlled, including: communication unit which is used for communication with another safety control device and uses a frame including a test bit string T having correlation with a base bit string B; and detection unit which compares with the base bit string B the test bit string T included in a frame having been received from another safety control device, thereby determining the number of bit errors in the frame.

Abstract: An industrial control configuration can be a dynamic entity where different controllers are added, are subtracted, fail, etc. When dynamic functions occur, bindings of the configuration can benefit from a modification. Therefore, automatic adjustment of bindings can occur to facilitate improved operation. Automatic adjustment can be practiced when the industrial control configuration is a distributed control configuration without reliance upon a central database.

Abstract: A method for performing online program changes on an automation system is provided. New program parts are loaded into a CPU of the automation system, while a user program is currently running, in order to provide a new user program. In order to avoid overloading of the CPU, switching is made to the new user program only after it is determined, by monitoring of the first processing of all the program cycles, that the CPU has not been overloaded.

Abstract: To provide a grammar checking apparatus for a machining program capable of surely detecting a program error without excessively increasing a computation load and shortening the necessary program correction time. A machining program checking apparatus includes: a grammar checking unit 2c executing grammar check of a machining program; and an error display unit 20 displaying a kind of a detected grammar error and a position of the error, wherein the grammar checking unit 2c executes the grammar check when a parameter for requesting the grammar check is set and a predetermined condition is satisfied.

Abstract: To provide a machining program processing apparatus capable of preventing an increase in the program correction time or does not let the program correction time go to waste. A machining program processing apparatus includes: a grammar checking unit 2c executing grammar check of a machining program; a transmission processing unit 6b transmitting the machining program to an external device; and a deletion processing unit 5c deleting the machining program, wherein, when a transmission request of the machining program including a grammar error is received, the transmission processing unit 6b confirms whether the transmission is to be permitted or not.

Abstract: A method and also a control and data-transmission system is presented, with which the installation location of at least one safety bus component connected to the control and data-transmission system (10) can be checked. For this purpose, in two separate communications cycles, a respective position identifier, which had been allocated to the safety bus components (60) in a prior configuration process, is transmitted to each safety bus component via a non-safety communications control device (30). The safety bus components compare the position identifiers received in the two communications cycles to the contents of a memory, in which a reference position identifier has already been stored or which is still empty.

Abstract: A system and method wherein geographic data is used to configure a controlling device to control operations of a target device and/or to configure the controlling device to control tuning operations of a target device. The system additionally provides for the harmonization of controlling device configurations made on the controlling device and/or a remote computer.

Abstract: Disclosed is an instrumentation control system, including: a first field device; and a second field device coupled to the first field device via a fieldbus. The first field device includes: a transmitting buffer to store data to be transmitted; a transmitter; and an inquiry processing section to cause the transmitter to retransmit the data stored in the transmitting buffer to the second field device in response to a request from the second field device. The second field device includes: a receiving buffer to store the data transmitted from the first field device; a checking section to determine whether the data stored in the receiving buffer is normal or not, and to make a data retransmission request to the first field device if the data stored in the receiving buffer is not normal; and a processing unit to perform predetermined processing based on the data which is determined to be normal.

Abstract: A method is disclosed for automatic estimation of backlash in a control system which includes a controller and a process to be controlled, wherein said controller is capable of performing integrating control of said process using one or more controller parameters to control a process output signal of said process with respect to a setpoint value thereof. The method involves monitoring said process output signal to determine a value reflecting momentary differences between setpoint value and actual value of said process output signal during a time interval; and estimating the backlash from said determined value and said one or more controller parameters.

Abstract: A complete test involving the entire number of devices in a large group of managed devices (T) is periodically performed to determine whether the devices are operating normally or have a malfunction; a test result (Ic) is recorded in a management database (Db) for each cycle of the complete test, and a device that has been found to be malfunctioning is repaired or replaced; and the suitability of a device model is determined or a suitable device model is selected for each of the managed devices (T) on the basis of history information (N) about each of the managed devices (T) obtained from the test result (Ic) of the complete test that spans a plurality of cycles, as recorded in the management database (Db).

Abstract: In a method for operating a field device of automation technology capable of special-functionalities, an enabling code set having a plurality of enabling code is managed in a superordinated, key-management unit. With the assistance of the enabling codes, special-functionalities can be enabled in field devices. Associated with individual enabling codes of the enabling code set is, in each case, an attribute, “free” or “blocked”. If a special-functionality is needed, then an enabling code is transmitted to the field device, in case an enabling code with attribute “free” is present. Following transmission, the attribute of the transmitted enabling code is changed from free to blocked. The method permits enabling code to be used very flexably.

Abstract: An automated abnormal machine tracking and notifying method includes automatically collecting and analyzing a plurality of test results to obtain a plurality of abnormal information, storing the abnormal information in a machine status database, respectively counting an integral value of each abnormal information of at least a related potentially abnormal machine, judging whether a sum of the integral values of each potentially abnormal machine is greater than n, and automatically notifying at least a user of the potentially abnormal machine and the abnormal information by an automatic notification subsystem when the sum of the integral values is greater than n.

Abstract: This invention provides an input device of safety unit which enables an error diagnosis result referred to in a process of input processing for generating a control data from raw input signal to be referred by a side using the control data also in a safety unit such as a safety master and safety slave. An input device contains a function of outputting status data indicating the error diagnosis result referred to when input signal is converted to control data and the control data obtained by the conversion in pair, so that when the logical value of the control data is “LOW”, whether it originates from that the raw logical value is “LOW” or that “LOW” is compulsorily set due to an error in the terminal can be determined from the logical value of the status data.

Abstract: A system and method is disclosed for system fault recovery by an implantable medical device which employs a global fault response. The system enables the device to consistently recover from transient faults while maintaining a history of the reason for the device fault. Upon detection of a fault, the primary controller of the device signals a reset controller which then issues a reset command. All sub-systems of the primary device controller are then reset together rather than resetting individual sub-systems independently to ensure deterministic behavior.

Abstract: A spa control system designed to reduce maintenance cost by providing modular construction for major control functions, with built-in diagnostic capabilities for isolating defective spa components. Multi-colored LEDs on the spaside panel constantly report the status of each component of the spa as well as the status of the functional modules themselves. Each time a component is activated, measurements of operational parameters, such as load currents, are instantly made and evaluated so that the proper LED color can be presented at the spaside. Since major functions such as audio, LED control, wireless, and spa logic are separated into removable modules, repair of the control system requires less time and less skilled personnel. Other design improvements, such as direct monitoring of heater element temperature and the purging of pumps on an as required-basis, enhance the spa's overall reliability and thus reduce the need for maintenance.

Abstract: In a drive circuit in which a plurality of drive motors are connected to a power source through a protective device which trips when the flow of current is excessive, provision is made to detect which circuit or circuits were active at the time of the failure. A microprocessor is provided to both control the activation of each of the various circuits and to also sense which circuits were active at the time of the failure. Appropriate signals are sent from the microprocessor to a user interface so that proper diagnostic and repair action can be taken.

Abstract: The invention relates to a method for comparing variable values obtained from different versions of an application program in an automated system. An input signal obtained from an automated process is inputted to at least two different versions of the application program residing within a same controller. The same tasks are executed based on the input signal for the different versions, and process related variable values obtained from the execution of the versions are stored in memory locations known by the controller. Variable values from the different versions and derived from corresponding execution steps of the versions are retrieved from the memory locations, and compared during an idle time. An improved way of revising an automation system is thereby achieved. The invention also relates to such controller and an automation system.

Abstract: A product for controlling physical properties comprising data processing means with inputs and outputs is disclosed. The product has approved bounds of behaviour. At least one of said outputs comprises at least one control signal disposed to be output by said product, and said data processing means comprises a processing control means; and a software comprising at least one application, and having a certificate uniquely associated to said at least one application. The processing control means further comprises means for confirming said at least one application by means for verifying said certificate, and means for checking functions of the application and the data processing means in co-operation such that said at least one control signal does not violate the approved bounds of behaviour of the product. A device and system comprising the product are also disclosed.

Abstract: A method and system is provided for a nuclear reactor safety related application. The method includes executing two forms of a same application-specific logic, one of the two forms implemented as hardware logic, and the other of the two forms implemented as software instructions for execution by microprocessor-based controlling software. Each form of the application-specific logic is executed with a same set of inputs. The method compares a result produced from the execution of the hardware-implemented form to a result produced from the execution of the software-implemented form. When the compared results concur, the controlling software performs actions associated with the concurring results by executing microprocessor-based software. When the compared results fail to concur, the controlling software reports the failure of the compared results to concur to an operator by executing microprocessor-based software, and thereafter places the microprocessor-based software system into an inoperative (INOP) mode.

Abstract: An apparatus control system for enabling different operators to perform apparatus setting and network setting independently and efficiently and to easily confirm a setting status, an apparatus, and a computer-readable recording medium where an apparatus control program is recorded are disclosed. An apparatus setter (110) performs setting, the setting being at least one of setting on connection between a water heater (102) and a remote controller (103), and test run of the water heater (102) using the remote controller (103). A network setter (111) performs setting on connection between the remote controller (103) and a server (104). A setting status monitoring section (115) monitors an apparatus setting status representing whether or not the setting by the apparatus setter (110) is ended and a network setting status representing whether or not the setting by the network setter (111) is ended.

Abstract: A control system and a method for validating operation of the control system are provided. The control system has a first controller operably communicating with a second controller. The first and second controllers have first and second read-only memories, respectively. The method includes executing a first software program in the first controller that retrieves a first key value from the second controller. The method further includes retrieving a second key value from a table using the first key value as an index value. The table is stored in a memory that is accessible by the first software program. The method includes executing at least one mathematical operation in the first software program using at least the second key value to obtain a third key value. The method further includes sending the first and third key values from the first controller to the second controller. The method further includes determining a first validation value based on the first key value utilizing the second controller.

Abstract: Certain exemplary embodiments can comprise a system, which can comprise a module communicatively coupled to a programmable logic controller (PLC). The module can comprise a transmission circuit and/or a receiving circuit. The module can be adapted to communicate with the PLC via 8B/10B encoded frames. A frame of the 8B/10B encoded frames can comprise a plurality of ordered fields.

Abstract: An elevator electronic safety system in which reliability of malfunction check can be improved by performing a malfunction check on memory data, an address bus, and a data bus. A check on the address bus and the data bus is executed periodically by a hardware circuit and software processing, and a memory data malfunction check circuit. A designated address and designated data for checking able to verify both cases of “0” and “1” for each of all bit signals on the address bus and the data bus that are used in a memory system are input to or output (the address is only output) from a CPU periodically. For the address bus, plural designated addresses are detected by a designated address detection circuit, and if all the designated addresses cannot be detected, it is determined that the address bus is in malfunction.

Abstract: An input/output circuit includes a reference clock generator configured to generate a reference clock. A signal transmitter is configured to transmit serial data in synchronization with one of the reference clock and a test clock. A signal-receiving circuit is configured to receive the serial data, and to generate a converted signal from the serial data. A test circuit is configured to detect an error between each phase of the converted signal and the test clock when the signal transmitter operates in synchronization with the test clock.

Abstract: A method is provided for controlling a microcontroller in a control unit in a motor vehicle, having a processor core, at least one read-only memory area and at least one rewritable memory area, at least one control program which is intended to be processed by the processor core being stored in the rewritable memory area. In order to provide a method for controlling a microcontroller in a control unit that better protects the verification of memories of the microcontroller against unauthorized intervention, a verification program is stored in a write-once memory area of the rewritable memory area and a service program is stored in the read-only memory area. The verification program is called by the control program via the service program at regular intervals and verifies at least part of the rewritable memory area. In addition, the service program resets a counter.

Abstract: There is provided a control system for controlling safety-critical processes that includes a fieldbus, a bus master for controlling a communication via the fieldbus, at least one signal unit for linking to at least one of the safety-critical processes, and a first control unit for controlling at least one of the safety-critical processes. The bus master and the at least one signal unit are connected to one another via the fieldbus to provide communication between at least one signal unit and the bus master. The at least one signal unit and the first control unit have safety-related devices. Failsafe communication is provided to control at least one of the safety-critical processes, and the first control unit is connected to the bus master independently of the fieldbus.

Abstract: A method, apparatus and computer instructions are provided to autonomically monitor and adjust system characteristics based on a customer optimization goal specified in a policy or profile. An autonomic management component is implemented in firmware comprising a set of control algorithms. Response to reading system characteristics from a plurality of sensors, the autononmic management component selects at least one control algorithm from the set and the control algorithm adjusts the parameters of the system characteristic to optimize performance according to the optimization goal specified by the customer.

Abstract: A system and method for continuous online safety and reliability monitoring is disclosed. The method includes the steps of obtaining operating information about at least one of a plurality of instrumented function components, which are part of an instrumented function, and determining a probability of failure on demand for the instrumented function based on the operating information. In variations, instantaneous probability of failure on demand, online mean time to failure (MTTF), and online safety integrity level (SIL) are also calculated for an instrumented function. In other variations of the invention, alarms are reported to an operator based on the variance indicating the probability of failure on demand for the instrumented function is too high. In yet further variations, the system allows a user to predict probability of failure on demand values into the future based on hypothetical and/or future planned test times.

Abstract: A method is proposed that is used for activating the functions of an electrical device, preferably a car radio. A test routine stored in a storage area allocated to the device is executed by a control unit of the electrical device. The control unit activates at least one function of the electrical device on the basis of control commands predefined in the test routine. Information about the function just activated is reproduced on a reproducing device of the electrical device.

Abstract: A safety controller having a total worst case propagation delay, exceeding the required propagation delay required by a safety process, may be used to control the safety process by monitoring actual delays in signal processing in the safety controller and moving to a safety state if a signal delay exceeds an amount less than the total worst case propagation delay.

Abstract: An embodiment of the present invention uses an on-board microcontroller of a household appliance to receive signals from a directionless encoder attached to a knob for receiving user input and processing the signals from the direction encoder according to a control algorithm. The microcontroller may increase the output to an electric heating element on the appliance based on a variety of criteria, including either direction of rotation, current heating element setting, or a change in directional rotation. Alternatively, or in addition, the microcontroller may provide various types of graduate visual or aural feedback to the user regarding the output provided by the microcontroller.

Abstract: A system for monitoring the condition of a packaging machine during operation and diagnosing potential problems in the performance of the machine. The system comprises an input device, an output device and a processing unit that supports a user interface presented by the output device. The processing unit is arranged to permit a user, when in use, to input via the user interface a number of pre-determined parameters to measure one or more elements or assemblies in the machine, to receive information from one or more sensors measuring the element or assembly and to analyse the information with the parameter to render via the output device a signal.

Abstract: A device for calculating the steady state behavior of a controller includes an amount generating unit for generating the amount of deviation of the regulator, a first threshold value calculation unit that detects whether the amount of deviation of the regulator has fallen below a first threshold value and then starts a lag time delay unit, and a second threshold value calculation unit that detects whether the amount of deviation of the regulator has fallen below a second threshold value. A signal transmission unit transmits a ready message signal when the lag time delay unit has reached a predetermined lag time and the second threshold value calculation unit has detected that the amount of deviation of the regulator has fallen below the second threshold value.

Abstract: The invention relates to a spindle (9) for a machine tool, having a housing (12) to accommodate an electric motor (11) and a shaft (13) driven by the latter and having a tool holder for a tool (10) for machining workpieces, at least one data acquisition element (2) being provided to record operating and/or state data of the spindle (9), and at least one spindle-integrated data storage element (1) being provided to store the recorded data from the data acquisition element (2).

Abstract: A method and apparatus to perform an automatic diagnosis for the poor performance of a control loop, and to determine whether or not the malfunctioning is caused principally by a poor adjustment of the controller tuning parameters. The method makes use of the fact that a poorly tuned control loop amplifies disturbances in a narrow frequency range around the so-called resonant frequency. The method comprises measuring an error in a control loop over time to determine a power spectral density of the error, determining a best fit analytical function describing the power spectral density and measuring a diagnostic value from a difference between the best fit analytical function and the power spectral density of the error.

Abstract: A control device for a medical-technical system automatically acquires a status of at least one element of the medical-technical system and compares it to a reference status. When a comparison of the statuses meets a status condition, the control device implements a self-test of at least one system part of the medical-technical system. The test result is communicated to the control device and processed by it.

Abstract: A system (830) and method (800) for diagnosing a malfunctioning machine. A fault event is selected (806) together with sequential operating parameter data (808) from a selectively focused time interval about the fault event for evaluation of a machine (810). The selectively focused time interval may include data occurring just before, just after, or spanning the fault event. Characterizing information such as slope, rate of change, and absolute sign of the data may be derived (809) from the operating parameter data over the selectively focused time interval and used in the diagnosis. The fault event and operating parameter data may be compared to existing cases in a case database (834). A set of rules (817) or candidate anomalies (841) may be executed over the operating parameter data to further improve the accuracy of the diagnosis.

Abstract: An apparatus and system are disclosed for the real-time monitoring and control of field assets. The monitoring device, operable to couple to a field asset, may be designed to leverage one or more technologies included in the field asset or as a stand-alone unit and is preferably operable to detect one or more error conditions thereon. The error conditions may be detected either as they occur or during testing intervals. Once an error condition is detected, the monitoring device may initiate one or more corrective sequences to resolve the error condition or, alternatively, the monitoring device may notify a network operations center via a wireless network. Accessing a network operations center from an Internet-enabled remote device, a user may view status information for one or more field assets, issue commands to correct error conditions as well as perform other functions.

Abstract: Failure prediction for complex processes is performed utilizing one or more nonlinear regression models to relate operational variable values measured at two or more times to predicted process metric values and maintenance variable values.

Abstract: Safety level error detection comparable to that provided by redundant wired safety relays is obtained on a backplane of a programmable logic controller or the like by a combination of error detection methods that in sum provide the requisite level of error detection required without necessitating a particular hardware requirement or duplicative message transmissions.

Abstract: A method and apparatus controls fans and power supplies to provide accelerated run-in testing. By modulating fans to increase case temperatures and adjusting power supplies to provide “worst case” voltages, a computer system can be subjected to a run-in tests under taxing conditions. By alternately cooling and heating devices such as CPUs, devices can be subjected to mechanical stresses associated with power-on/power off cycles. A time based test implements the present invention based on time, and a temperature based test implements the present invention based on temperature. The present invention can be used to implement a run-in test in which the computer system is operated at an elevated temperature, thereby achieving results similar to those achieved by performing a run-in test in an environmental chamber at an elevated temperature. Alternatively, the a run-in test can be performed by repeatedly cycling the temperature between relatively high and low values.