Abstract: Network of safety PLCs employs multi-PLC verification of a programming application before allowing the application to reprogram any PLC on the safety network. Each PLC on the safety network is equipped with authentication capability that detects attempts to reprogram the PLC and issues an authentication challenge requiring the programming application to process a proof-of-work. The authentication challenge is also sent to other PLCs on the safety network along with the response from the programming application for verification purposes. The other PLCs process the authentication challenge and check the response from the programming application for acceptability. If a majority of the PLCs on the safety network determines the response from the programming application is correct, then the programming application is verified and may proceed with the reprogramming.

Abstract: A relay apparatus is provided to achieve high-speed control, while suppressing costs for communication with a plurality of devices, by notifying additional information of the devices to a master apparatus and increasing the efficiency of transmission/reception of signals among the master apparatus and the devices. The relay apparatus communicates with a plurality of devices through a single device communication port. The relay apparatus receives additional information from each of the plurality of devices; and transmits/receives signals in units of groups to which each of the plurality of devices belongs.

Abstract: A control system configured to control safety-critical and non-safety-critical processes and/or plant components includes: a non-safety controller module, at least one safety controller module, and at least one condition monitoring module. The non-safety controller module is configured to control the non-safety-critical processes and/or the non-safety-critical plant components. The at least one safety controller module is configured to control the safety-critical processes and/or the safety-critical plant components. The at least one condition monitoring module is configured to perform fail-safe condition monitoring and to collect monitoring data. The non-safety controller module is configured to receive the collected monitoring data from the condition monitoring module and to pass the collected monitoring data to the safety controller module. The safety-controller module is configured to evaluate the monitoring data based on safety conditions.

Abstract: A power supply device which is used as a backup power supply, including a power supply side acquisition unit that acquires information related to a position of the power supply device.

Abstract: Techniques for employing a smart sensor device (102) that has a primary sensing function for sensing a state of a physical component and can concurrently enable one or more backup functions for sensing one or more states of one or more other physicals components in response to one or more other smart sensor devices (102 and/or 116) not being able to perform their primary function of sensing and/or reporting on the one or more states of the one or more other physical components.

Abstract: A hydraulic system for a vehicle includes a hydraulic monitoring control unit configured to receive an operational signal from a sub-system of the vehicle and control flow of hydraulic fluid to actuators of components based on the operational signal. The hydraulic monitoring control unit is configured to bypass the flow of the hydraulic fluid in relation to a subset of the actuators in response to the operational signal indicating an altered operational state of the sub-system.

Abstract: Techniques implemented by a game-hosting service to place a load balancer between client devices engaged in a game session and servers that maintain state data for the game session. Rather than having a single server maintain state data and host the game session, the load balancer will broadcast action data received from the client devices to the server that is hosting the game session, or “primary server,” and also to a redundant server that is maintaining state data for the game session, or “secondary server.” Thus, if the primary server is unable to continue hosting the session, the secondary server may begin hosting the game session using the state data maintained for the game session. Further, by offloading the network input/output (I/O) tasks of communicating with the client devices from the server to the load balancer, the server can allocate larger amounts of resources to hosting game sessions.

Abstract: This control system comprises controllers and slave devices. A control network is formed by connecting the slave devices between the controllers over communication cables. The controller generates and manages control frames for communication through the control network. The controller receives and copies the control frames, and perform loopback communication of the control frames to the controller of the control network. The controller stores the copied the control frames, or transmits the copied control frames to a database device connected by an information communication network.

Abstract: An electronic device includes a memory; a first processor; a second processor for which power consumption is lower than power consumption of the first processor; a communicator that communicates with an external device; and a switch that switches a connection destination of the communicator to the first processor or the second processor. The second processor is configured to, in a case in which a condition for transitioning to a power suppression state that is an operating state in which power consumption is suppressed is satisfied, connect the communicator by the switch. The first processor is configured to, in a case in which a condition for transitioning to a normal state that is a normal operating state is satisfied, connect the communicator by the switch.

Abstract: A system for a redundant star network is disclosed. The system consists of a control hub, one or more backup hubs, and at least one peripheral device (PD), the peripheral device comprising a housing having at least one selectable side transparent or opaque to radio frequency (RF) transmissions while the remaining sides are opaque to RF transmissions. The control hub controls the PD, for example by controlling how the PD operates under certain conditions. The PD includes a long-range, wireless transceiver and a microcontroller, which includes instructions for periodically testing, via test signals, whether the control hub is functional. In the case that the control hub does not respond to the test signals, the PD includes instructions for switching control of the PD to the backup hub, which also stores control instructions for the PD, similar to the control hub.

Abstract: A reconfiguration circuit (352) generates a control value for controlling an output value of a control target device based on an input value, and when a fault occurs in an information processing circuit (200) that outputs the control value generated to the control target device, performs preparation for substituting for the information processing circuit (200).

Abstract: The disclosure provides an automatic driving system, a vehicle control method and a device. The automatic driving system includes a main monitoring equipment, a secondary monitoring equipment, at least one equipment to be detected, and a standby equipment corresponding to each equipment to be detected; the primary monitoring equipment and the secondary monitoring equipment are connected to each equipment to be detected and the standby equipment corresponding to each equipment to be detected; the primary monitoring equipment is connected to the secondary monitoring equipment. The above system and control method ensure that an equipment of the vehicle is is abnormal, the vehicle can be switched to a standby equipment of the equipment in time, which greatly reduces an incidence of a safety accident caused by a failure of the equipment.

Abstract: A device to be controlled used for an operation of a vehicle, a determination device used for controlling the device, and a control information management device different from the determination device are included.

Abstract: Techniques implemented by a game-hosting service to place a load balancer between client devices engaged in a game session and servers that maintain state data for the game session. Rather than having a single server maintain state data and host the game session, the load balancer will broadcast action data received from the client devices to the server that is hosting the game session, or “primary server,” and also to a redundant server that is maintaining state data for the game session, or “secondary server.” Thus, if the primary server is unable to continue hosting the session, the secondary server may begin hosting the game session using the state data maintained for the game session. Further, by offloading the network input/output (I/O) tasks of communicating with the client devices from the server to the load balancer, the server can allocate larger amounts of resources to hosting game sessions.

Abstract: A communication system in vehicle according to an aspect includes a transmission unit and a receiving unit. The transmission unit includes a modulation unit that generates a PWM signal having a predetermined duty ratio, an output unit that outputs the PWM signal, a feedback unit that feedbacks the PWM signal, and a transmission controller that controls the modulation unit using the feedbacked signal. The receiving unit includes a reception controller that determined whether to drive a load based on the PWM signal and a switching unit that is turned on or turned off based on the determination of the reception controller.

Abstract: A system for processor configuration comprising a processor that includes a plurality of algorithmic controls stored in memory and configured to cause the processor to perform predetermined functions. A remote access controller coupled to the processor and configured to communicate over a communications medium and to send and receive controls and data to a remote device. Wherein the remote access controller is further configured to detect one or more server groups over the communications medium and to generate a prompt on a user interface device of the remote access controller to allow a user to select a control for the processor to be configured to join one of the server groups when the processor transitions from a power off state to a power on state.

Abstract: Systems and methods for health monitoring and upgrade of a distributed controller are provided. According to one embodiment of the disclosure, a method for health monitoring and upgrade of a distributed controller may commence with receiving, by a lower level controller from a high-level controller, high-level control references. The method may further include generating low-level control references for a hardware asset based at least in part on the high-level control references. The method may include monitoring the network connection and detecting an error in the network connection. In response to the detection of the error in the network connection, a control of the hardware asset may be transferred to the low-level controller. The method may further include determining that the network connection has been restored. In response to the determination that the network connection has been restored, the control of the hardware asset may be transferred to the high-level controller.

Abstract: A security system is described for managing a premises. The security system comprises security system components and a first controller. A takeover component receives security data of the security system from the first controller. The security data is used to configure a second controller to communicate with the security system. The second controller communicates with the security system components and replaces the first controller in management of the security system.

Abstract: Exemplary embodiments described in this disclosure can pertain to a controller apparatus that provides control signals to a power generation unit. The controller apparatus can include a first controller, a second controller, and a supervisor that can place the first controller in an in-service state and the second controller in a standby state. The first controller provides control signals to the power generation unit when in the in-service state. The second controller can include a copy of an application program contained in the first controller. This copy of the application program can be modified or replaced while the second controller is in the standby state. The supervisor may then opt to place the second controller in the in-service state and place the first controller in the standby state. The switch-over of controllers is carried out in a substantially simultaneous manner that eliminates interruption in control operations.

Abstract: A control device of a general-purpose engine which can continue operation of a working machine even when an operation management unit of the working machine has failed. The control device includes an engine control unit that controls the general-purpose engine based on a command from the operation management unit managing an operating state of the working machine, a communication interface for communicating with an external device; a management program acquisition unit that acquires a management program that is used by the operation management unit to manage the operating state, from the external device through the communication interface and stores the acquired management program in a storage medium, and an operation management substitute unit that manages the operating state of the working machine in place of the operation management unit in accordance with the management program when a failure of operation management unit is detected.

Abstract: Systems and methods are disclosed for implementing an educational mode on a portable computing device, such as a tablet computer, that is a single-user system, used serially by multiple users. Each user can have a separate user storage that may be encrypted. The computing device boots as a system user to a login screen. A first student user enters user credentials into the login screen. The computing device can reboot the user-space processes, while leaving the kernel running, rebooting the computing device as the first student user. When the first student user logs out, data to be synchronized to, e.g., the cloud, can be synchronized for the first student user while a second student user is logged into the device.

Abstract: Methods and systems for upgrading an intelligent server adapter (ISA) with reduced downtime that affects performance are provided. The method includes, from a main agent, initiating a backup agent that includes critical functions of the ISA and runs in a tight loop, isolated from other components. The main agent transfers critical duties to the backup agent and shuts down before performing the upgrade. After upgrading itself and other system components, the main agent retrieves the duties from the backup agent, and may terminate the backup agent.

Abstract: Method and apparatus for monitoring and reconstructing a software-defined PLC are provided. The method includes: upon monitoring a PLC fails, obtaining, by a soft guardian, an operating state of each physical core on each server in a server cluster, and an operating state of each micro kernel on the each physical core; determining a target micro kernel according to the operating state of each physical core on each server, and the operating state of each micro kernel on each physical core; and transmitting a reconstruction instruction to the target micro kernel to instruct the virtual PLC to be reconstructed on the target micro kernel.

Abstract: According to one embodiment, an autonomous vehicle safety system can be implemented with a plurality of sensors, each of the plurality of sensors being configured to produce an electrical signal that is indicative of an environmental condition about a vehicle; a sensor distribution hub that receives the electrical signals from the plurality of sensors and generates two streams of data based on the electrical signals received from the plurality of sensors; a first micro-processing unit configured to receive a first of the two streams of data generated by the sensor distribution hub, where the first micro-processing unit is further configured to autonomously control the vehicle; and a second micro-processing unit configured to receive a second of the two streams of data generated by the sensor distribution hub, where the second micro-processing unit is also configured to autonomously control the vehicle.

Abstract: In a data transmission method, an SoC obtains a first request, where the first request includes a first address of a storage medium and an operation type, and the first address is an address assigned by a processor to the storage medium in a memory address managed by the processor; determines a second address according to the first address and generating a second request message, where the second address is an address assigned by the SoC to the storage medium in a memory address managed by the SoC; and sends first control instruction to a DMA controller of the storage medium according to the second address, where the first control instruction is used to instruct the DMA controller to obtain the second request message.

Abstract: Some implementations provide techniques and arrangements to migrate threads from a first core of a processor to a second core of the processor. For example, some implementations may identify one or more threads scheduled for execution at a processor. The processor may include a plurality of cores, including a first core having a first characteristic and a second core have a second characteristic that is different than the first characteristic. Execution of the one or more threads by the first core may be initiated. A determination may be made whether to apply a migration policy. In response to determining to apply the migration policy, migration of the one or more threads from the first core to the second core may be initiated.

Abstract: A system for control and/or analytics of an industrial process, includes at least one plant-side automation unit, and at least one external processing unit. The automation unit receives process input variables, determines results of a first process control algorithm based on the process input variables within a defined period of time and sends the process input variables to the processing unit. The processing unit executes a second process control algorithm on the basis of the process input variables and the local automation unit receives the results of the second process control algorithm. The plant-side automation unit checks whether the results of the second process control algorithm were received within a time less than or equal to the defined time period. The plant-side automation unit applies the results of the second process control algorithm to the process, when the results were received within a time less than or equal to the defined time period.

Abstract: Described are embodiments of an invention for prioritizing data items for backup in a computing environment. The computing environment includes a plurality of clients coupled through a network to a backup system for backing up items stored locally on the client. Each client includes a continuous data protection (CDP) module that prioritizes the order of files transmitted to the backup system for storage on one or more storage devices based on policy. The CDP module builds an initial backup list and a CDP backup list. The initial backup list includes any item that meets the criteria of the initial backup profile. The CDP backup list includes items that have been modified since the initial backup process began. The data that is the most critical to a user is often the most recently modified data. Thus, the CDP module preferentially performs a backup of items on the CDP backup list.

Abstract: A method and an arrangement having redundant systems operating in parallel in a cyclic mode and reciprocally checking a result of the task of the other system on a regular basis, and wherein one system is selected or confirmed for the productive mode in the fault situation found, where a characteristic variable concerning an operating parameter is picked up for each of the systems in multiple/all cycles and used for updating statistical parameters, where at least when a disparity between results of the two systems is found, a current operating parameter is correlated with the statistical parameter for each system, and where the system for which the current operating parameter differs from the statistical parameter less is detected as the correctly operating system and used for the productive mode such that the degree of fault coverage can be increased and hence the availability of the overall system increased.

Abstract: An apparatus for operating a vehicle, including a control device that is configured to guide the vehicle automatically; and a monitoring device that is configured to monitor the control device for a fault during automatic guidance of the vehicle by the control device, and upon recognition of a fault to take over automated guidance of the vehicle from the control device. A corresponding method and a computer program are also described.

Abstract: A method for operating a specific field device from a first group and a second group of field devices, wherein the first group exchanges data in an IP-based network, and the second group communicates at least via a non-IP-based connection, the method includes the following: transmitting multicast messages having an item of connection information via at least one portion of the field devices of the first group; integrating the operator device into the IP-based network; initiating a connection establishment with a field device of the second group; receiving the transmitted multicast messages by the operator unit so that the connection information is made available to the operator unit; generating a list of all field devices of the first group and the second group; selecting the specific field device using generated list; initiating a specific connection establishment with the specific selected field device; and operating of the specific selected field device with the mobile operator unit.

Abstract: A computed tomography (CT) apparatus wireless controller has a CT main control circuit and a wireless main control circuit. The wireless main control circuit receives a control signal from a wireless secondary controller, and subjects the control signal to a validity check according to an identifier of the wireless secondary controller carried in the control signal when the control signal passes the check, it is supplied to the CT main control circuit from the wireless main control circuit. The CT main control circuit performs corresponding operation control according to the control signal.

Abstract: A processor system tracks, in at least one counter, a number of cycles in which at least one execution unit of at least one processor core is idle and at least one thread of the at least one processor core is waiting on at least one off-core memory access during run-time of the at least one processor core during an interval comprising multiple cycles. The processor system evaluates an expected performance impact of a frequency change within the at least one processor core based on the current run-time conditions for executing at least one operation tracked in the at least one counter during the interval.

Abstract: Systems and methods are disclosed for implementing an educational mode on a portable computing device, such as a tablet computer, that is a single-user system, used serially by multiple users. Each user can have a separate user storage that may be encrypted. The computing device boots as a system user to a login screen. A first student user enters user credentials into the login screen. The computing device can reboot the user-space processes, while leaving the kernel running, rebooting the computing device as the first student user. When the first student user logs out, data to be synchronized to, e.g., the cloud, can be synchronized for the first student user while a second student user is logged into the device.

Abstract: A controller continues to operate in a stable manner after program modification. A controller repeatedly executes a task A and a task B in cycles. The controller includes a RAM and a task control program. The RAM stores a fixed time set longer than an actual execution time of the task A as an execution time for the task A. The task control program executes the tasks A and B, and executes the task A by using the fixed time.

Abstract: A system includes redundant first process controllers configured to communicate over redundant supervisory networks in an industrial process control and automation system. Each first process controller is configured to operate in primary or secondary mode. The system also includes redundant second process controllers configured to communicate over redundant industrial control networks in the industrial process control and automation system. Each second process controller is configured to operate in primary or secondary mode. The system further includes a private network configured to communicatively couple the first and second process controllers. Each controller could be associated with at least three Media Access Control (MAC) addresses.

Abstract: A redundant process controller arrangement includes a primary controller and parallel connected secondary controller each coupled to actuators and sensors coupled to processing equipment. The primary and secondary controllers include a main writable memory including a cache data control algorithm, central processing unit (CPU) with cache memory including cache not supporting write-thru, tracker logic coupled to a control cycle database in a tracked memory region and to a primary tracking buffer. A redundancy link is between the CPUs for passing tracked changes. The algorithm implements memory tracking using copy-back including the primary tracker logic each cycle writing tracked changes into the primary tracking buffer, and at cycle end, transferring tracked changes from the primary tracking buffer to the secondary controller over the redundancy link, and writing tracked changes to the secondary control database.

Abstract: A method includes transitioning a device in an industrial process control and automation system from a secondary role to a primary role during a switchover and, in response to the switchover, clearing one or more security values stored by the device. The method also includes receiving a message at the device from a network node and, in response to determining that no security association is associated with the received message or the network node, exchanging security credentials and establishing a trust relationship with the network node. Transitioning the device includes assuming a network address of another device that previously operated in the primary role, that previously communicated with the network node, and that previously had a security association with the network node. Clearing the security value(s) can prevent the device from having the trust relationship associated with the network node when the device receives the message from the network node.

Abstract: A process control device according to one aspect of the present invention is configured to control an industrial process implemented in a plant. The process control device includes: a virtualizer configured to run over a hardware in lieu of the hardware; and first and second controllers configured to run over the virtualizer and control operations of a plurality of field apparatuses configured to perform at least one of measurement and operation which are required to control the industrial process; an input distributor included in the virtualizer, the input distributor being configured to distribute a signal output from the field apparatus to the first and second controllers; and an output acquirer included in the virtualizer, and the output acquirer being configured to acquire outputs of the first and second controllers, and output any one of the outputs to at least one of the field apparatuses.

Abstract: Techniques to control power and processing among a plurality of asymmetric cores. In one embodiment, one or more asymmetric cores are power managed to migrate processes or threads among a plurality of cores according to the performance and power needs of the system.

Abstract: Techniques are disclosed to control power and processing among a plurality of asymmetric cores.

Abstract: Different devices or subsystems, including programmable industrial controllers, are connected to a common network. Each connected device has the capability for autonomous or quasi-autonomous action based on a common pool of information accessible on the network. For example, all or a subset of devices connected to the network may periodically broadcast status data over the shared network medium; status data may include the current state of the controller and/or environmental conditions that the controller monitors.

Abstract: An information processing apparatus includes a first controller, a second controller, and a shared memory. The first controller outputs a transition signal that indicates a transition to a power-saving mode in which power consumption is reduced compared to a normal mode. The second controller outputs instruction information that indicates an instruction provided from the first controller before the transition signal is output on the basis of the transition signal output from the first controller. The shared memory is connected to the first controller and the second controller to be shared, and stores the instruction information output from the second controller even after a transition is made to the power-saving mode.

Abstract: An access method for a DRAM is provided. A plurality of portions of a row address of a bank corresponding to a activate command is provided. A plurality of sub-commands of the activate command are provided via a command bus, and a plurality of portions of address information regarding the portions of the row address are provided via an address bus. Each portion of the address information includes an individual portion of the row address of the bank. Each first sub-command corresponds to an individual address information. A specific sub-command of the activate command is provided via the command bus, and address information regarding a specific portion of the row address is provided. An access command corresponding to the bank is provided via the command bus after the sub-commands are provided.

Abstract: A multifunctional controller merges certain functions of an onboard computer (OBC) and a power supply unit (PCDU) of a satellite. The controller includes reconfiguration functions for monitoring the correct functioning of components of an onboard computer of the satellite and for switching over between redundant components and/or turning off electrical loads of the satellite in the event of a malfunction. The controller also includes control functions for controlling and distributing energy to satellite components, which is designed for turning on and off the power supply to satellite components together with the reconfiguration unit.

Abstract: Techniques to control power and processing among a plurality of asymmetric cores. In one embodiment, one or more asymmetric cores are power managed to migrate processes or threads among a plurality of cores according to the performance and power needs of the system.

Abstract: Systems and methods for controlling processor cores on a computing device are disclosed. One method includes tracking a load of each of a plurality of processor cores and determining a load percentage of each of the processor cores. A core is designated as a busy core if a load percentage of the core exceeds an upper threshold, and the busy core designation is removed if the load percentage of the core drops below a lower threshold. To reduce power consumption and adverse thermal effects, no more than N+M cores are maintained online wherein N is a number of busy cores and M is generally zero, but may be increased to at least one.

Abstract: An integrated circuit includes a substrate, a master system on the substrate, a slave system on the substrate that is coupled to communicate with the master system, a first clock signal coupled to the master system, and a second clock signal coupled to the slave system. The master system is configured to isolate the slave system from the master system while a first test of the master system is conducted in parallel with a second test of the slave system. The master system uses the first clock signal during the first test and the slave system uses the second clock signal during the second test.

Abstract: Techniques for modifying a circuit are described herein. In some examples, a method includes generating a set of testing data and detecting a predetermined modification to a translation path corresponding to a memory address mapping, the predetermined modification to change a physical memory address of the testing data associated with a virtual memory address to a second physical memory address of the testing data. The method can also include generating a test template comprising a first instruction to implement the predetermined modification and a second instruction comprising the second physical memory address in the translation path and transmitting the test template to the circuit for each of a plurality of software instruction threads. Furthermore, the method can include detecting a defect in the execution of the test template by the circuit and modifying the circuit to prevent the defect during execution of the test template.

Abstract: A computer system includes at least two COTS processor cores and an evaluating device connected to the at least two COTS processor cores for evaluating output signals output by means of the at least two COTS processor cores. The evaluating device includes a comparator for pair-wise comparison of the respective generated output signals with each other. The comparator also outputs a comparison signal corresponding to the respective comparison of the output signals.